diff --git a/.changes/2.1493.0.json b/.changes/2.1493.0.json new file mode 100644 index 0000000000..1202e59a14 --- /dev/null +++ b/.changes/2.1493.0.json @@ -0,0 +1,47 @@ +[ + { + "type": "feature", + "category": "CloudFormation", + "description": "Added new ConcurrencyMode feature for AWS CloudFormation StackSets for faster deployments to target accounts." + }, + { + "type": "feature", + "category": "CloudTrail", + "description": "The Insights in Lake feature lets customers enable CloudTrail Insights on a source CloudTrail Lake event data store and create a destination event data store to collect Insights events based on unusual management event activity in the source event data store." + }, + { + "type": "feature", + "category": "CloudWatchLogs", + "description": "Update to support new APIs for delivery of logs from AWS services." + }, + { + "type": "feature", + "category": "Comprehend", + "description": "This release adds support for toxicity detection and prompt safety classification." + }, + { + "type": "feature", + "category": "Connect", + "description": "This release adds the ability to integrate customer lambda functions with Connect attachments for scanning and updates the ListIntegrationAssociations API to support filtering on IntegrationArn." + }, + { + "type": "feature", + "category": "EC2", + "description": "AWS EBS now supports Block Public Access for EBS Snapshots. This release introduces the EnableSnapshotBlockPublicAccess, DisableSnapshotBlockPublicAccess and GetSnapshotBlockPublicAccessState APIs to manage account-level public access settings for EBS Snapshots in an AWS Region." + }, + { + "type": "feature", + "category": "EKS", + "description": "Adding EKS Anywhere subscription related operations." + }, + { + "type": "feature", + "category": "Lambda", + "description": "Add Custom runtime on Amazon Linux 2023 (provided.al2023) support to AWS Lambda." + }, + { + "type": "feature", + "category": "Omics", + "description": "Support UBAM filetype for Omics Storage and make referenceArn optional" + } +] \ No newline at end of file diff --git a/CHANGELOG.md b/CHANGELOG.md index 6a34ea4ff5..fd70b6343d 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,7 +1,18 @@ # Changelog for AWS SDK for JavaScript - + +## 2.1493.0 +* feature: CloudFormation: Added new ConcurrencyMode feature for AWS CloudFormation StackSets for faster deployments to target accounts. +* feature: CloudTrail: The Insights in Lake feature lets customers enable CloudTrail Insights on a source CloudTrail Lake event data store and create a destination event data store to collect Insights events based on unusual management event activity in the source event data store. +* feature: CloudWatchLogs: Update to support new APIs for delivery of logs from AWS services. +* feature: Comprehend: This release adds support for toxicity detection and prompt safety classification. +* feature: Connect: This release adds the ability to integrate customer lambda functions with Connect attachments for scanning and updates the ListIntegrationAssociations API to support filtering on IntegrationArn. +* feature: EC2: AWS EBS now supports Block Public Access for EBS Snapshots. This release introduces the EnableSnapshotBlockPublicAccess, DisableSnapshotBlockPublicAccess and GetSnapshotBlockPublicAccessState APIs to manage account-level public access settings for EBS Snapshots in an AWS Region. +* feature: EKS: Adding EKS Anywhere subscription related operations. +* feature: Lambda: Add Custom runtime on Amazon Linux 2023 (provided.al2023) support to AWS Lambda. +* feature: Omics: Support UBAM filetype for Omics Storage and make referenceArn optional + ## 2.1492.0 * feature: SQS: This release enables customers to call SQS using AWS JSON-1.0 protocol and bug fix. diff --git a/README.md b/README.md index aabd198cf8..86c9ab906e 100644 --- a/README.md +++ b/README.md @@ -71,7 +71,7 @@ require('aws-sdk/lib/maintenance_mode_message').suppress = true; To use the SDK in the browser, simply add the following script tag to your HTML pages: - + You can also build a custom browser SDK with your specified set of AWS services. This can allow you to reduce the SDK's size, specify different API versions of diff --git a/apis/cloudformation-2010-05-15.min.json b/apis/cloudformation-2010-05-15.min.json index bbc3a9a801..82b4b853ee 100644 --- a/apis/cloudformation-2010-05-15.min.json +++ b/apis/cloudformation-2010-05-15.min.json @@ -337,14 +337,14 @@ "ExecutionRoleName": {}, "PermissionModel": {}, "AutoDeployment": { - "shape": "S35" + "shape": "S36" }, "CallAs": {}, "ClientRequestToken": { "idempotencyToken": true }, "ManagedExecution": { - "shape": "S38" + "shape": "S39" } } }, @@ -601,7 +601,7 @@ }, "ChangeSetId": {}, "ModuleInfo": { - "shape": "S4p" + "shape": "S4q" } } } @@ -818,7 +818,7 @@ }, "Status": {}, "StackInstanceStatus": { - "shape": "S60" + "shape": "S61" }, "StatusReason": {}, "OrganizationalUnitId": {}, @@ -870,10 +870,10 @@ "Description": {}, "Metadata": {}, "DriftInformation": { - "shape": "S67" + "shape": "S68" }, "ModuleInfo": { - "shape": "S4p" + "shape": "S4q" } } } @@ -889,7 +889,7 @@ "members": { "StackName": {}, "StackResourceDriftStatusFilters": { - "shape": "S6a" + "shape": "S6b" }, "NextToken": {}, "MaxResults": { @@ -907,7 +907,7 @@ "StackResourceDrifts": { "type": "list", "member": { - "shape": "S6e" + "shape": "S6f" } }, "NextToken": {} @@ -950,10 +950,10 @@ "ResourceStatusReason": {}, "Description": {}, "DriftInformation": { - "shape": "S67" + "shape": "S68" }, "ModuleInfo": { - "shape": "S4p" + "shape": "S4q" } } } @@ -997,17 +997,17 @@ "AdministrationRoleARN": {}, "ExecutionRoleName": {}, "StackSetDriftDetectionDetails": { - "shape": "S6y" + "shape": "S6z" }, "AutoDeployment": { - "shape": "S35" + "shape": "S36" }, "PermissionModel": {}, "OrganizationalUnitIds": { "shape": "S2p" }, "ManagedExecution": { - "shape": "S38" + "shape": "S39" }, "Regions": { "shape": "S2s" @@ -1059,11 +1059,11 @@ "shape": "S2n" }, "StackSetDriftDetectionDetails": { - "shape": "S6y" + "shape": "S6z" }, "StatusReason": {}, "StatusDetails": { - "shape": "S7d" + "shape": "S7e" } } } @@ -1274,7 +1274,7 @@ "members": { "StackName": {}, "LogicalResourceIds": { - "shape": "S8e" + "shape": "S8f" } } }, @@ -1309,7 +1309,7 @@ ], "members": { "StackResourceDrift": { - "shape": "S6e" + "shape": "S6f" } } } @@ -1479,7 +1479,7 @@ "Version": {}, "Metadata": {}, "DeclaredTransforms": { - "shape": "S99" + "shape": "S9a" }, "ResourceIdentifierSummaries": { "type": "list", @@ -1488,7 +1488,7 @@ "members": { "ResourceType": {}, "LogicalResourceIds": { - "shape": "S8e" + "shape": "S8f" }, "ResourceIdentifiers": { "type": "list", @@ -1649,7 +1649,7 @@ "type": "integer" }, "StackInstanceResourceDriftStatuses": { - "shape": "S6a" + "shape": "S6b" }, "StackInstanceAccount": {}, "StackInstanceRegion": {}, @@ -1677,11 +1677,11 @@ "LogicalResourceId": {}, "PhysicalResourceId": {}, "PhysicalResourceIdContext": { - "shape": "S6f" + "shape": "S6g" }, "ResourceType": {}, "PropertyDifferences": { - "shape": "S6k" + "shape": "S6l" }, "StackResourceDriftStatus": {}, "Timestamp": { @@ -1737,7 +1737,7 @@ "Status": {}, "StatusReason": {}, "StackInstanceStatus": { - "shape": "S60" + "shape": "S61" }, "OrganizationalUnitId": {}, "DriftStatus": {}, @@ -1799,7 +1799,7 @@ } }, "ModuleInfo": { - "shape": "S4p" + "shape": "S4q" } } } @@ -1898,7 +1898,7 @@ }, "StatusReason": {}, "StatusDetails": { - "shape": "S7d" + "shape": "S7e" }, "OperationPreferences": { "shape": "S2u" @@ -1936,7 +1936,7 @@ "Description": {}, "Status": {}, "AutoDeployment": { - "shape": "S35" + "shape": "S36" }, "PermissionModel": {}, "DriftStatus": {}, @@ -1944,7 +1944,7 @@ "type": "timestamp" }, "ManagedExecution": { - "shape": "S38" + "shape": "S39" } } } @@ -2484,7 +2484,7 @@ }, "PermissionModel": {}, "AutoDeployment": { - "shape": "S35" + "shape": "S36" }, "OperationId": { "idempotencyToken": true @@ -2497,7 +2497,7 @@ }, "CallAs": {}, "ManagedExecution": { - "shape": "S38" + "shape": "S39" } } }, @@ -2563,7 +2563,7 @@ }, "CapabilitiesReason": {}, "DeclaredTransforms": { - "shape": "S99" + "shape": "S9a" } } } @@ -2696,10 +2696,11 @@ }, "MaxConcurrentPercentage": { "type": "integer" - } + }, + "ConcurrencyMode": {} } }, - "S35": { + "S36": { "type": "structure", "members": { "Enabled": { @@ -2710,7 +2711,7 @@ } } }, - "S38": { + "S39": { "type": "structure", "members": { "Active": { @@ -2718,20 +2719,20 @@ } } }, - "S4p": { + "S4q": { "type": "structure", "members": { "TypeHierarchy": {}, "LogicalIdHierarchy": {} } }, - "S60": { + "S61": { "type": "structure", "members": { "DetailedStatus": {} } }, - "S67": { + "S68": { "type": "structure", "required": [ "StackResourceDriftStatus" @@ -2743,11 +2744,11 @@ } } }, - "S6a": { + "S6b": { "type": "list", "member": {} }, - "S6e": { + "S6f": { "type": "structure", "required": [ "StackId", @@ -2761,24 +2762,24 @@ "LogicalResourceId": {}, "PhysicalResourceId": {}, "PhysicalResourceIdContext": { - "shape": "S6f" + "shape": "S6g" }, "ResourceType": {}, "ExpectedProperties": {}, "ActualProperties": {}, "PropertyDifferences": { - "shape": "S6k" + "shape": "S6l" }, "StackResourceDriftStatus": {}, "Timestamp": { "type": "timestamp" }, "ModuleInfo": { - "shape": "S4p" + "shape": "S4q" } } }, - "S6f": { + "S6g": { "type": "list", "member": { "type": "structure", @@ -2792,7 +2793,7 @@ } } }, - "S6k": { + "S6l": { "type": "list", "member": { "type": "structure", @@ -2810,7 +2811,7 @@ } } }, - "S6y": { + "S6z": { "type": "structure", "members": { "DriftStatus": {}, @@ -2835,7 +2836,7 @@ } } }, - "S7d": { + "S7e": { "type": "structure", "members": { "FailedStackInstancesCount": { @@ -2843,11 +2844,11 @@ } } }, - "S8e": { + "S8f": { "type": "list", "member": {} }, - "S99": { + "S9a": { "type": "list", "member": {} } diff --git a/apis/cloudformation-2010-05-15.normal.json b/apis/cloudformation-2010-05-15.normal.json index 93641dcd79..6e575835f8 100644 --- a/apis/cloudformation-2010-05-15.normal.json +++ b/apis/cloudformation-2010-05-15.normal.json @@ -648,7 +648,7 @@ "shape": "DescribeStacksOutput", "resultWrapper": "DescribeStacksResult" }, - "documentation": "
Returns the description for the specified stack; if no stack name was specified, then it returns the description for all the stacks created.
If the stack doesn't exist, an ValidationError
is returned.
Returns the description for the specified stack; if no stack name was specified, then it returns the description for all the stacks created.
If the stack doesn't exist, a ValidationError
is returned.
In some cases, you must explicitly acknowledge that your stack template contains certain capabilities in order for CloudFormation to create the stack.
CAPABILITY_IAM
and CAPABILITY_NAMED_IAM
Some stack templates might include resources that can affect permissions in your Amazon Web Services account; for example, by creating new Identity and Access Management (IAM) users. For those stacks, you must explicitly acknowledge this by specifying one of these capabilities.
The following IAM resources require you to specify either the CAPABILITY_IAM
or CAPABILITY_NAMED_IAM
capability.
If you have IAM resources, you can specify either capability.
If you have IAM resources with custom names, you must specify CAPABILITY_NAMED_IAM
.
If you don't specify either of these capabilities, CloudFormation returns an InsufficientCapabilities
error.
If your stack template contains these resources, we suggest that you review all permissions associated with them and edit their permissions if necessary.
For more information, see Acknowledging IAM resources in CloudFormation templates.
CAPABILITY_AUTO_EXPAND
Some template contain macros. Macros perform custom processing on templates; this can include simple actions like find-and-replace operations, all the way to extensive transformations of entire templates. Because of this, users typically create a change set from the processed template, so that they can review the changes resulting from the macros before actually creating the stack. If your stack template contains one or more macros, and you choose to create a stack directly from the processed template, without first reviewing the resulting changes in a change set, you must acknowledge this capability. This includes the AWS::Include and AWS::Serverless transforms, which are macros hosted by CloudFormation.
This capacity doesn't apply to creating change sets, and specifying it when creating change sets has no effect.
If you want to create a stack from a stack template that contains macros and nested stacks, you must create or update the stack directly from the template using the CreateStack or UpdateStack action, and specifying this capability.
For more information about macros, see Using CloudFormation macros to perform custom processing on templates.
In some cases, you must explicitly acknowledge that your stack template contains certain capabilities in order for CloudFormation to create the stack.
CAPABILITY_IAM
and CAPABILITY_NAMED_IAM
Some stack templates might include resources that can affect permissions in your Amazon Web Services account; for example, by creating new Identity and Access Management (IAM) users. For those stacks, you must explicitly acknowledge this by specifying one of these capabilities.
The following IAM resources require you to specify either the CAPABILITY_IAM
or CAPABILITY_NAMED_IAM
capability.
If you have IAM resources, you can specify either capability.
If you have IAM resources with custom names, you must specify CAPABILITY_NAMED_IAM
.
If you don't specify either of these capabilities, CloudFormation returns an InsufficientCapabilities
error.
If your stack template contains these resources, we suggest that you review all permissions associated with them and edit their permissions if necessary.
For more information, see Acknowledging IAM resources in CloudFormation templates.
CAPABILITY_AUTO_EXPAND
Some template contain macros. Macros perform custom processing on templates; this can include simple actions like find-and-replace operations, all the way to extensive transformations of entire templates. Because of this, users typically create a change set from the processed template, so that they can review the changes resulting from the macros before actually creating the stack. If your stack template contains one or more macros, and you choose to create a stack directly from the processed template, without first reviewing the resulting changes in a change set, you must acknowledge this capability. This includes the AWS::Include and AWS::Serverless transforms, which are macros hosted by CloudFormation.
This capacity doesn't apply to creating change sets, and specifying it when creating change sets has no effect.
If you want to create a stack from a stack template that contains macros and nested stacks, you must create or update the stack directly from the template using the CreateStack or UpdateStack action, and specifying this capability.
For more information about macros, see Using CloudFormation macros to perform custom processing on templates.
Only one of the Capabilities
and ResourceType
parameters can be specified.
The template resource types that you have permissions to work with if you execute this change set, such as AWS::EC2::Instance
, AWS::EC2::*
, or Custom::MyCustomInstance
.
If the list of resource types doesn't include a resource type that you're updating, the stack update fails. By default, CloudFormation grants permissions to all resource types. Identity and Access Management (IAM) uses this parameter for condition keys in IAM policies for CloudFormation. For more information, see Controlling access with Identity and Access Management in the CloudFormation User Guide.
" + "documentation": "The template resource types that you have permissions to work with if you execute this change set, such as AWS::EC2::Instance
, AWS::EC2::*
, or Custom::MyCustomInstance
.
If the list of resource types doesn't include a resource type that you're updating, the stack update fails. By default, CloudFormation grants permissions to all resource types. Identity and Access Management (IAM) uses this parameter for condition keys in IAM policies for CloudFormation. For more information, see Controlling access with Identity and Access Management in the CloudFormation User Guide.
Only one of the Capabilities
and ResourceType
parameters can be specified.
In some cases, you must explicitly acknowledge that your stack template contains certain capabilities in order for CloudFormation to create the stack.
CAPABILITY_IAM
and CAPABILITY_NAMED_IAM
Some stack templates might include resources that can affect permissions in your Amazon Web Services account; for example, by creating new Identity and Access Management (IAM) users. For those stacks, you must explicitly acknowledge this by specifying one of these capabilities.
The following IAM resources require you to specify either the CAPABILITY_IAM
or CAPABILITY_NAMED_IAM
capability.
If you have IAM resources, you can specify either capability.
If you have IAM resources with custom names, you must specify CAPABILITY_NAMED_IAM
.
If you don't specify either of these capabilities, CloudFormation returns an InsufficientCapabilities
error.
If your stack template contains these resources, we recommend that you review all permissions associated with them and edit their permissions if necessary.
For more information, see Acknowledging IAM Resources in CloudFormation Templates.
CAPABILITY_AUTO_EXPAND
Some template contain macros. Macros perform custom processing on templates; this can include simple actions like find-and-replace operations, all the way to extensive transformations of entire templates. Because of this, users typically create a change set from the processed template, so that they can review the changes resulting from the macros before actually creating the stack. If your stack template contains one or more macros, and you choose to create a stack directly from the processed template, without first reviewing the resulting changes in a change set, you must acknowledge this capability. This includes the AWS::Include and AWS::Serverless transforms, which are macros hosted by CloudFormation.
If you want to create a stack from a stack template that contains macros and nested stacks, you must create the stack directly from the template using this capability.
You should only create stacks directly from a stack template that contains macros if you know what processing the macro performs.
Each macro relies on an underlying Lambda service function for processing stack templates. Be aware that the Lambda function owner can update the function operation without CloudFormation being notified.
For more information, see Using CloudFormation macros to perform custom processing on templates.
In some cases, you must explicitly acknowledge that your stack template contains certain capabilities in order for CloudFormation to create the stack.
CAPABILITY_IAM
and CAPABILITY_NAMED_IAM
Some stack templates might include resources that can affect permissions in your Amazon Web Services account; for example, by creating new Identity and Access Management (IAM) users. For those stacks, you must explicitly acknowledge this by specifying one of these capabilities.
The following IAM resources require you to specify either the CAPABILITY_IAM
or CAPABILITY_NAMED_IAM
capability.
If you have IAM resources, you can specify either capability.
If you have IAM resources with custom names, you must specify CAPABILITY_NAMED_IAM
.
If you don't specify either of these capabilities, CloudFormation returns an InsufficientCapabilities
error.
If your stack template contains these resources, we recommend that you review all permissions associated with them and edit their permissions if necessary.
For more information, see Acknowledging IAM Resources in CloudFormation Templates.
CAPABILITY_AUTO_EXPAND
Some template contain macros. Macros perform custom processing on templates; this can include simple actions like find-and-replace operations, all the way to extensive transformations of entire templates. Because of this, users typically create a change set from the processed template, so that they can review the changes resulting from the macros before actually creating the stack. If your stack template contains one or more macros, and you choose to create a stack directly from the processed template, without first reviewing the resulting changes in a change set, you must acknowledge this capability. This includes the AWS::Include and AWS::Serverless transforms, which are macros hosted by CloudFormation.
If you want to create a stack from a stack template that contains macros and nested stacks, you must create the stack directly from the template using this capability.
You should only create stacks directly from a stack template that contains macros if you know what processing the macro performs.
Each macro relies on an underlying Lambda service function for processing stack templates. Be aware that the Lambda function owner can update the function operation without CloudFormation being notified.
For more information, see Using CloudFormation macros to perform custom processing on templates.
Only one of the Capabilities
and ResourceType
parameters can be specified.
The template resource types that you have permissions to work with for this create stack action, such as AWS::EC2::Instance
, AWS::EC2::*
, or Custom::MyCustomInstance
. Use the following syntax to describe template resource types: AWS::*
(for all Amazon Web Services resources), Custom::*
(for all custom resources), Custom::logical_ID
(for a specific custom resource), AWS::service_name::*
(for all resources of a particular Amazon Web Services service), and AWS::service_name::resource_logical_ID
(for a specific Amazon Web Services resource).
If the list of resource types doesn't include a resource that you're creating, the stack creation fails. By default, CloudFormation grants permissions to all resource types. Identity and Access Management (IAM) uses this parameter for CloudFormation-specific condition keys in IAM policies. For more information, see Controlling Access with Identity and Access Management.
" + "documentation": "The template resource types that you have permissions to work with for this create stack action, such as AWS::EC2::Instance
, AWS::EC2::*
, or Custom::MyCustomInstance
. Use the following syntax to describe template resource types: AWS::*
(for all Amazon Web Services resources), Custom::*
(for all custom resources), Custom::logical_ID
(for a specific custom resource), AWS::service_name::*
(for all resources of a particular Amazon Web Services service), and AWS::service_name::resource_logical_ID
(for a specific Amazon Web Services resource).
If the list of resource types doesn't include a resource that you're creating, the stack creation fails. By default, CloudFormation grants permissions to all resource types. Identity and Access Management (IAM) uses this parameter for CloudFormation-specific condition keys in IAM policies. For more information, see Controlling Access with Identity and Access Management.
Only one of the Capabilities
and ResourceType
parameters can be specified.
The Amazon Resource Name (ARN) of the IAM role for CloudFormation to assume when invoking the extension.
For CloudFormation to assume the specified execution role, the role must contain a trust relationship with the CloudFormation service principle (resources.cloudformation.amazonaws.com
). For more information about adding trust relationships, see Modifying a role trust policy in the Identity and Access Management User Guide.
If your extension calls Amazon Web Services APIs in any of its handlers, you must create an IAM execution role that includes the necessary permissions to call those Amazon Web Services APIs, and provision that execution role in your account. When CloudFormation needs to invoke the resource type handler, CloudFormation assumes this execution role to create a temporary session token, which it then passes to the resource type handler, thereby supplying your resource type with the appropriate credentials.
" + "documentation": "The Amazon Resource Name (ARN) of the IAM role for CloudFormation to assume when invoking the extension.
For CloudFormation to assume the specified execution role, the role must contain a trust relationship with the CloudFormation service principal (resources.cloudformation.amazonaws.com
). For more information about adding trust relationships, see Modifying a role trust policy in the Identity and Access Management User Guide.
If your extension calls Amazon Web Services APIs in any of its handlers, you must create an IAM execution role that includes the necessary permissions to call those Amazon Web Services APIs, and provision that execution role in your account. When CloudFormation needs to invoke the resource type handler, CloudFormation assumes this execution role to create a temporary session token, which it then passes to the resource type handler, thereby supplying your resource type with the appropriate credentials.
" }, "ClientRequestToken": { "shape": "RequestToken", @@ -6519,11 +6526,15 @@ }, "MaxConcurrentCount": { "shape": "MaxConcurrentCount", - "documentation": "The maximum number of accounts in which to perform this operation at one time. This is dependent on the value of FailureToleranceCount
.MaxConcurrentCount
is at most one more than the FailureToleranceCount
.
Note that this setting lets you specify the maximum for operations. For large deployments, under certain circumstances the actual number of accounts acted upon concurrently may be lower due to service throttling.
Conditional: You must specify either MaxConcurrentCount
or MaxConcurrentPercentage
, but not both.
By default, 1
is specified.
The maximum number of accounts in which to perform this operation at one time. This can depend on the value of FailureToleranceCount
depending on your ConcurrencyMode
. MaxConcurrentCount
is at most one more than the FailureToleranceCount
if you're using STRICT_FAILURE_TOLERANCE
.
Note that this setting lets you specify the maximum for operations. For large deployments, under certain circumstances the actual number of accounts acted upon concurrently may be lower due to service throttling.
Conditional: You must specify either MaxConcurrentCount
or MaxConcurrentPercentage
, but not both.
By default, 1
is specified.
The maximum percentage of accounts in which to perform this operation at one time.
When calculating the number of accounts based on the specified percentage, CloudFormation rounds down to the next whole number. This is true except in cases where rounding down would result is zero. In this case, CloudFormation sets the number as one instead.
Note that this setting lets you specify the maximum for operations. For large deployments, under certain circumstances the actual number of accounts acted upon concurrently may be lower due to service throttling.
Conditional: You must specify either MaxConcurrentCount
or MaxConcurrentPercentage
, but not both.
By default, 1
is specified.
Specifies how the concurrency level behaves during the operation execution.
STRICT_FAILURE_TOLERANCE
: Dynamically lowers the concurrency level to ensure the number of failed accounts never exceeds the FailureToleranceCount
+1. StackSets will set the actual concurrency of your deployment as the minimum value between the MaxConcurrentCount
and the FailureToleranceCount
+1. This is the default behavior.
If failure tolerance or Maximum concurrent accounts are set to percentages, the behavior is similar.
SOFT_FAILURE_TOLERANCE
: Always run at the concurrency level set by the user in the MaxConcurrentCount
or MaxConcurrentPercentage
, regardless of the number of failures.
The user-specified preferences for how CloudFormation performs a stack set operation.
For more information about maximum concurrent accounts and failure tolerance, see Stack set operation options.
" @@ -7316,11 +7327,11 @@ }, "Capabilities": { "shape": "Capabilities", - "documentation": "In some cases, you must explicitly acknowledge that your stack template contains certain capabilities in order for CloudFormation to update the stack.
CAPABILITY_IAM
and CAPABILITY_NAMED_IAM
Some stack templates might include resources that can affect permissions in your Amazon Web Services account; for example, by creating new Identity and Access Management (IAM) users. For those stacks, you must explicitly acknowledge this by specifying one of these capabilities.
The following IAM resources require you to specify either the CAPABILITY_IAM
or CAPABILITY_NAMED_IAM
capability.
If you have IAM resources, you can specify either capability.
If you have IAM resources with custom names, you must specify CAPABILITY_NAMED_IAM
.
If you don't specify either of these capabilities, CloudFormation returns an InsufficientCapabilities
error.
If your stack template contains these resources, we suggest that you review all permissions associated with them and edit their permissions if necessary.
For more information, see Acknowledging IAM Resources in CloudFormation Templates.
CAPABILITY_AUTO_EXPAND
Some template contain macros. Macros perform custom processing on templates; this can include simple actions like find-and-replace operations, all the way to extensive transformations of entire templates. Because of this, users typically create a change set from the processed template, so that they can review the changes resulting from the macros before actually updating the stack. If your stack template contains one or more macros, and you choose to update a stack directly from the processed template, without first reviewing the resulting changes in a change set, you must acknowledge this capability. This includes the AWS::Include and AWS::Serverless transforms, which are macros hosted by CloudFormation.
If you want to update a stack from a stack template that contains macros and nested stacks, you must update the stack directly from the template using this capability.
You should only update stacks directly from a stack template that contains macros if you know what processing the macro performs.
Each macro relies on an underlying Lambda service function for processing stack templates. Be aware that the Lambda function owner can update the function operation without CloudFormation being notified.
For more information, see Using CloudFormation Macros to Perform Custom Processing on Templates.
In some cases, you must explicitly acknowledge that your stack template contains certain capabilities in order for CloudFormation to update the stack.
CAPABILITY_IAM
and CAPABILITY_NAMED_IAM
Some stack templates might include resources that can affect permissions in your Amazon Web Services account; for example, by creating new Identity and Access Management (IAM) users. For those stacks, you must explicitly acknowledge this by specifying one of these capabilities.
The following IAM resources require you to specify either the CAPABILITY_IAM
or CAPABILITY_NAMED_IAM
capability.
If you have IAM resources, you can specify either capability.
If you have IAM resources with custom names, you must specify CAPABILITY_NAMED_IAM
.
If you don't specify either of these capabilities, CloudFormation returns an InsufficientCapabilities
error.
If your stack template contains these resources, we suggest that you review all permissions associated with them and edit their permissions if necessary.
For more information, see Acknowledging IAM Resources in CloudFormation Templates.
CAPABILITY_AUTO_EXPAND
Some template contain macros. Macros perform custom processing on templates; this can include simple actions like find-and-replace operations, all the way to extensive transformations of entire templates. Because of this, users typically create a change set from the processed template, so that they can review the changes resulting from the macros before actually updating the stack. If your stack template contains one or more macros, and you choose to update a stack directly from the processed template, without first reviewing the resulting changes in a change set, you must acknowledge this capability. This includes the AWS::Include and AWS::Serverless transforms, which are macros hosted by CloudFormation.
If you want to update a stack from a stack template that contains macros and nested stacks, you must update the stack directly from the template using this capability.
You should only update stacks directly from a stack template that contains macros if you know what processing the macro performs.
Each macro relies on an underlying Lambda service function for processing stack templates. Be aware that the Lambda function owner can update the function operation without CloudFormation being notified.
For more information, see Using CloudFormation Macros to Perform Custom Processing on Templates.
Only one of the Capabilities
and ResourceType
parameters can be specified.
The template resource types that you have permissions to work with for this update stack action, such as AWS::EC2::Instance
, AWS::EC2::*
, or Custom::MyCustomInstance
.
If the list of resource types doesn't include a resource that you're updating, the stack update fails. By default, CloudFormation grants permissions to all resource types. Identity and Access Management (IAM) uses this parameter for CloudFormation-specific condition keys in IAM policies. For more information, see Controlling Access with Identity and Access Management.
" + "documentation": "The template resource types that you have permissions to work with for this update stack action, such as AWS::EC2::Instance
, AWS::EC2::*
, or Custom::MyCustomInstance
.
If the list of resource types doesn't include a resource that you're updating, the stack update fails. By default, CloudFormation grants permissions to all resource types. Identity and Access Management (IAM) uses this parameter for CloudFormation-specific condition keys in IAM policies. For more information, see Controlling Access with Identity and Access Management.
Only one of the Capabilities
and ResourceType
parameters can be specified.
Describes the settings for the Insights event selectors that you configured for your trail. GetInsightSelectors
shows if CloudTrail Insights event logging is enabled on the trail, and if it is, which insight types are enabled. If you run GetInsightSelectors
on a trail that does not have Insights events enabled, the operation throws the exception InsightNotEnabledException
For more information, see Logging CloudTrail Insights Events for Trails in the CloudTrail User Guide.
", + "documentation": "Describes the settings for the Insights event selectors that you configured for your trail or event data store. GetInsightSelectors
shows if CloudTrail Insights event logging is enabled on the trail or event data store, and if it is, which Insights types are enabled. If you run GetInsightSelectors
on a trail or event data store that does not have Insights events enabled, the operation throws the exception InsightNotEnabledException
Specify either the EventDataStore
parameter to get Insights event selectors for an event data store, or the TrailName
parameter to the get Insights event selectors for a trail. You cannot specify these parameters together.
For more information, see Logging CloudTrail Insights events in the CloudTrail User Guide.
", "idempotent": true }, "GetQueryResults": { @@ -1267,7 +1273,7 @@ "shape": "OperationNotPermittedException" } ], - "documentation": "Looks up management events or CloudTrail Insights events that are captured by CloudTrail. You can look up events that occurred in a Region within the last 90 days. Lookup supports the following attributes for management events:
Amazon Web Services access key
Event ID
Event name
Event source
Read only
Resource name
Resource type
User name
Lookup supports the following attributes for Insights events:
Event ID
Event name
Event source
All attributes are optional. The default number of results returned is 50, with a maximum of 50 possible. The response includes a token that you can use to get the next page of results.
The rate of lookup requests is limited to two per second, per account, per Region. If this limit is exceeded, a throttling error occurs.
Looks up management events or CloudTrail Insights events that are captured by CloudTrail. You can look up events that occurred in a Region within the last 90 days.
LookupEvents
returns recent Insights events for trails that enable Insights. To view Insights events for an event data store, you can run queries on your Insights event data store, and you can also view the Lake dashboard for Insights.
Lookup supports the following attributes for management events:
Amazon Web Services access key
Event ID
Event name
Event source
Read only
Resource name
Resource type
User name
Lookup supports the following attributes for Insights events:
Event ID
Event name
Event source
All attributes are optional. The default number of results returned is 50, with a maximum of 50 possible. The response includes a token that you can use to get the next page of results.
The rate of lookup requests is limited to two per second, per account, per Region. If this limit is exceeded, a throttling error occurs.
Lets you enable Insights event logging by specifying the Insights selectors that you want to enable on an existing trail. You also use PutInsightSelectors
to turn off Insights event logging, by passing an empty list of insight types. The valid Insights event types in this release are ApiErrorRateInsight
and ApiCallRateInsight
.
To log CloudTrail Insights events on API call volume, the trail must log write
management events. To log CloudTrail Insights events on API error rate, the trail must log read
or write
management events. You can call GetEventSelectors
on a trail to check whether the trail logs management events.
Lets you enable Insights event logging by specifying the Insights selectors that you want to enable on an existing trail or event data store. You also use PutInsightSelectors
to turn off Insights event logging, by passing an empty list of Insights types. The valid Insights event types are ApiErrorRateInsight
and ApiCallRateInsight
.
To enable Insights on an event data store, you must specify the ARNs (or ID suffix of the ARNs) for the source event data store (EventDataStore
) and the destination event data store (InsightsDestination
). The source event data store logs management events and enables Insights. The destination event data store logs Insights events based upon the management event activity of the source event data store. The source and destination event data stores must belong to the same Amazon Web Services account.
To log Insights events for a trail, you must specify the name (TrailName
) of the CloudTrail trail for which you want to change or add Insights selectors.
To log CloudTrail Insights events on API call volume, the trail or event data store must log write
management events. To log CloudTrail Insights events on API error rate, the trail or event data store must log read
or write
management events. You can call GetEventSelectors
on a trail to check whether the trail logs management events. You can call GetEventDataStore
on an event data store to check whether the event data store logs management events.
For more information, see Logging CloudTrail Insights events in the CloudTrail User Guide.
", "idempotent": true }, "PutResourcePolicy": { @@ -1470,7 +1482,7 @@ "shape": "OperationNotPermittedException" } ], - "documentation": "Registers an organization’s member account as the CloudTrail delegated administrator.
", + "documentation": "Registers an organization’s member account as the CloudTrail delegated administrator.
", "idempotent": true }, "RemoveTags": { @@ -1996,6 +2008,9 @@ { "shape": "InvalidEventSelectorsException" }, + { + "shape": "InvalidInsightSelectorsException" + }, { "shape": "EventDataStoreHasOngoingImportException" }, @@ -2042,7 +2057,7 @@ "shape": "OrganizationNotInAllFeaturesModeException" } ], - "documentation": "Updates an event data store. The required EventDataStore
value is an ARN or the ID portion of the ARN. Other parameters are optional, but at least one optional parameter must be specified, or CloudTrail throws an error. RetentionPeriod
is in days, and valid values are integers between 90 and 2557. By default, TerminationProtection
is enabled.
For event data stores for CloudTrail events, AdvancedEventSelectors
includes or excludes management and data events in your event data store. For more information about AdvancedEventSelectors
, see AdvancedEventSelectors.
For event data stores for Config configuration items, Audit Manager evidence, or non-Amazon Web Services events, AdvancedEventSelectors
includes events of that type in your event data store.
Updates an event data store. The required EventDataStore
value is an ARN or the ID portion of the ARN. Other parameters are optional, but at least one optional parameter must be specified, or CloudTrail throws an error. RetentionPeriod
is in days, and valid values are integers between 90 and 2557. By default, TerminationProtection
is enabled.
For event data stores for CloudTrail events, AdvancedEventSelectors
includes or excludes management, data, or Insights events in your event data store. For more information about AdvancedEventSelectors
, see AdvancedEventSelectors.
For event data stores for Config configuration items, Audit Manager evidence, or non-Amazon Web Services events, AdvancedEventSelectors
includes events of that type in your event data store.
A field in a CloudTrail event record on which to filter events to be logged. For event data stores for Config configuration items, Audit Manager evidence, or non-Amazon Web Services events, the field is used only for selecting events as filtering is not supported.
For CloudTrail event records, supported fields include readOnly
, eventCategory
, eventSource
(for management events), eventName
, resources.type
, and resources.ARN
.
For event data stores for Config configuration items, Audit Manager evidence, or non-Amazon Web Services events, the only supported field is eventCategory
.
readOnly
- Optional. Can be set to Equals
a value of true
or false
. If you do not add this field, CloudTrail logs both read
and write
events. A value of true
logs only read
events. A value of false
logs only write
events.
eventSource
- For filtering management events only. This can be set only to NotEquals
kms.amazonaws.com
.
eventName
- Can use any operator. You can use it to filter in or filter out any data event logged to CloudTrail, such as PutBucket
or GetSnapshotBlock
. You can have multiple values for this field, separated by commas.
eventCategory
- This is required and must be set to Equals
.
For CloudTrail event records, the value must be Management
or Data
.
For Config configuration items, the value must be ConfigurationItem
.
For Audit Manager evidence, the value must be Evidence
.
For non-Amazon Web Services events, the value must be ActivityAuditLog
.
resources.type
- This field is required for CloudTrail data events. resources.type
can only use the Equals
operator, and the value can be one of the following:
AWS::DynamoDB::Table
AWS::Lambda::Function
AWS::S3::Object
AWS::CloudTrail::Channel
AWS::CodeWhisperer::Profile
AWS::Cognito::IdentityPool
AWS::DynamoDB::Stream
AWS::EC2::Snapshot
AWS::EMRWAL::Workspace
AWS::FinSpace::Environment
AWS::Glue::Table
AWS::GuardDuty::Detector
AWS::KendraRanking::ExecutionPlan
AWS::ManagedBlockchain::Network
AWS::ManagedBlockchain::Node
AWS::MedicalImaging::Datastore
AWS::SageMaker::ExperimentTrialComponent
AWS::SageMaker::FeatureGroup
AWS::S3::AccessPoint
AWS::S3ObjectLambda::AccessPoint
AWS::S3Outposts::Object
AWS::SSMMessages::ControlChannel
AWS::VerifiedPermissions::PolicyStore
You can have only one resources.type
field per selector. To log data events on more than one resource type, add another selector.
resources.ARN
- You can use any operator with resources.ARN
, but if you use Equals
or NotEquals
, the value must exactly match the ARN of a valid resource of the type you've specified in the template as the value of resources.type. For example, if resources.type equals AWS::S3::Object
, the ARN must be in one of the following formats. To log all data events for all objects in a specific S3 bucket, use the StartsWith
operator, and include only the bucket ARN as the matching value.
The trailing slash is intentional; do not exclude it. Replace the text between less than and greater than symbols (<>) with resource-specific information.
arn:<partition>:s3:::<bucket_name>/
arn:<partition>:s3:::<bucket_name>/<object_path>/
When resources.type equals AWS::DynamoDB::Table
, and the operator is set to Equals
or NotEquals
, the ARN must be in the following format:
arn:<partition>:dynamodb:<region>:<account_ID>:table/<table_name>
When resources.type equals AWS::Lambda::Function
, and the operator is set to Equals
or NotEquals
, the ARN must be in the following format:
arn:<partition>:lambda:<region>:<account_ID>:function:<function_name>
When resources.type equals AWS::CloudTrail::Channel
, and the operator is set to Equals
or NotEquals
, the ARN must be in the following format:
arn:<partition>:cloudtrail:<region>:<account_ID>:channel/<channel_UUID>
When resources.type equals AWS::CodeWhisperer::Profile
, and the operator is set to Equals
or NotEquals
, the ARN must be in the following format:
arn:<partition>:codewhisperer:<region>:<account_ID>:profile/<profile_ID>
When resources.type equals AWS::Cognito::IdentityPool
, and the operator is set to Equals
or NotEquals
, the ARN must be in the following format:
arn:<partition>:cognito-identity:<region>:<account_ID>:identitypool/<identity_pool_ID>
When resources.type
equals AWS::DynamoDB::Stream
, and the operator is set to Equals
or NotEquals
, the ARN must be in the following format:
arn:<partition>:dynamodb:<region>:<account_ID>:table/<table_name>/stream/<date_time>
When resources.type
equals AWS::EC2::Snapshot
, and the operator is set to Equals
or NotEquals
, the ARN must be in the following format:
arn:<partition>:ec2:<region>::snapshot/<snapshot_ID>
When resources.type
equals AWS::EMRWAL::Workspace
, and the operator is set to Equals
or NotEquals
, the ARN must be in the following format:
arn:<partition>:emrwal:<region>::workspace/<workspace_name>
When resources.type
equals AWS::FinSpace::Environment
, and the operator is set to Equals
or NotEquals
, the ARN must be in the following format:
arn:<partition>:finspace:<region>:<account_ID>:environment/<environment_ID>
When resources.type
equals AWS::Glue::Table
, and the operator is set to Equals
or NotEquals
, the ARN must be in the following format:
arn:<partition>:glue:<region>:<account_ID>:table/<database_name>/<table_name>
When resources.type
equals AWS::GuardDuty::Detector
, and the operator is set to Equals
or NotEquals
, the ARN must be in the following format:
arn:<partition>:guardduty:<region>:<account_ID>:detector/<detector_ID>
When resources.type
equals AWS::KendraRanking::ExecutionPlan
, and the operator is set to Equals
or NotEquals
, the ARN must be in the following format:
arn:<partition>:kendra-ranking:<region>:<account_ID>:rescore-execution-plan/<rescore_execution_plan_ID>
When resources.type
equals AWS::ManagedBlockchain::Network
, and the operator is set to Equals
or NotEquals
, the ARN must be in the following format:
arn:<partition>:managedblockchain:::networks/<network_name>
When resources.type
equals AWS::ManagedBlockchain::Node
, and the operator is set to Equals
or NotEquals
, the ARN must be in the following format:
arn:<partition>:managedblockchain:<region>:<account_ID>:nodes/<node_ID>
When resources.type
equals AWS::MedicalImaging::Datastore
, and the operator is set to Equals
or NotEquals
, the ARN must be in the following format:
arn:<partition>:medical-imaging:<region>:<account_ID>:datastore/<data_store_ID>
When resources.type
equals AWS::SageMaker::ExperimentTrialComponent
, and the operator is set to Equals
or NotEquals
, the ARN must be in the following format:
arn:<partition>:sagemaker:<region>:<account_ID>:experiment-trial-component/<experiment_trial_component_name>
When resources.type
equals AWS::SageMaker::FeatureGroup
, and the operator is set to Equals
or NotEquals
, the ARN must be in the following format:
arn:<partition>:sagemaker:<region>:<account_ID>:feature-group/<feature_group_name>
When resources.type
equals AWS::S3::AccessPoint
, and the operator is set to Equals
or NotEquals
, the ARN must be in one of the following formats. To log events on all objects in an S3 access point, we recommend that you use only the access point ARN, don’t include the object path, and use the StartsWith
or NotStartsWith
operators.
arn:<partition>:s3:<region>:<account_ID>:accesspoint/<access_point_name>
arn:<partition>:s3:<region>:<account_ID>:accesspoint/<access_point_name>/object/<object_path>
When resources.type
equals AWS::S3ObjectLambda::AccessPoint
, and the operator is set to Equals
or NotEquals
, the ARN must be in the following format:
arn:<partition>:s3-object-lambda:<region>:<account_ID>:accesspoint/<access_point_name>
When resources.type
equals AWS::S3Outposts::Object
, and the operator is set to Equals
or NotEquals
, the ARN must be in the following format:
arn:<partition>:s3-outposts:<region>:<account_ID>:<object_path>
When resources.type
equals AWS::SSMMessages::ControlChannel
, and the operator is set to Equals
or NotEquals
, the ARN must be in the following format:
arn:<partition>:ssmmessages:<region>:<account_ID>:control-channel/<channel_ID>
When resources.type equals AWS::VerifiedPermissions::PolicyStore
, and the operator is set to Equals
or NotEquals
, the ARN must be in the following format:
arn:<partition>:verifiedpermissions:<region>:<account_ID>:policy-store/<policy_store_UUID>
A field in a CloudTrail event record on which to filter events to be logged. For event data stores for Config configuration items, Audit Manager evidence, or non-Amazon Web Services events, the field is used only for selecting events as filtering is not supported.
For CloudTrail event records, supported fields include readOnly
, eventCategory
, eventSource
(for management events), eventName
, resources.type
, and resources.ARN
.
For event data stores for Config configuration items, Audit Manager evidence, or non-Amazon Web Services events, the only supported field is eventCategory
.
readOnly
- Optional. Can be set to Equals
a value of true
or false
. If you do not add this field, CloudTrail logs both read
and write
events. A value of true
logs only read
events. A value of false
logs only write
events.
eventSource
- For filtering management events only. This can be set to NotEquals
kms.amazonaws.com
or NotEquals
rdsdata.amazonaws.com
.
eventName
- Can use any operator. You can use it to filter in or filter out any data event logged to CloudTrail, such as PutBucket
or GetSnapshotBlock
. You can have multiple values for this field, separated by commas.
eventCategory
- This is required and must be set to Equals
.
For CloudTrail event records, the value must be Management
or Data
.
For CloudTrail Insights event records, the value must be Insight
.
For Config configuration items, the value must be ConfigurationItem
.
For Audit Manager evidence, the value must be Evidence
.
For non-Amazon Web Services events, the value must be ActivityAuditLog
.
resources.type
- This field is required for CloudTrail data events. resources.type
can only use the Equals
operator, and the value can be one of the following:
AWS::DynamoDB::Table
AWS::Lambda::Function
AWS::S3::Object
AWS::CloudTrail::Channel
AWS::CodeWhisperer::Customization
AWS::CodeWhisperer::Profile
AWS::Cognito::IdentityPool
AWS::DynamoDB::Stream
AWS::EC2::Snapshot
AWS::EMRWAL::Workspace
AWS::FinSpace::Environment
AWS::Glue::Table
AWS::GuardDuty::Detector
AWS::KendraRanking::ExecutionPlan
AWS::KinesisVideo::Stream
AWS::ManagedBlockchain::Network
AWS::ManagedBlockchain::Node
AWS::MedicalImaging::Datastore
AWS::PCAConnectorAD::Connector
AWS::SageMaker::Endpoint
AWS::SageMaker::ExperimentTrialComponent
AWS::SageMaker::FeatureGroup
AWS::SNS::PlatformEndpoint
AWS::SNS::Topic
AWS::S3::AccessPoint
AWS::S3ObjectLambda::AccessPoint
AWS::S3Outposts::Object
AWS::SSMMessages::ControlChannel
AWS::Timestream::Database
AWS::Timestream::Table
AWS::VerifiedPermissions::PolicyStore
You can have only one resources.type
field per selector. To log data events on more than one resource type, add another selector.
resources.ARN
- You can use any operator with resources.ARN
, but if you use Equals
or NotEquals
, the value must exactly match the ARN of a valid resource of the type you've specified in the template as the value of resources.type. For example, if resources.type equals AWS::S3::Object
, the ARN must be in one of the following formats. To log all data events for all objects in a specific S3 bucket, use the StartsWith
operator, and include only the bucket ARN as the matching value.
The trailing slash is intentional; do not exclude it. Replace the text between less than and greater than symbols (<>) with resource-specific information.
arn:<partition>:s3:::<bucket_name>/
arn:<partition>:s3:::<bucket_name>/<object_path>/
When resources.type equals AWS::DynamoDB::Table
, and the operator is set to Equals
or NotEquals
, the ARN must be in the following format:
arn:<partition>:dynamodb:<region>:<account_ID>:table/<table_name>
When resources.type equals AWS::Lambda::Function
, and the operator is set to Equals
or NotEquals
, the ARN must be in the following format:
arn:<partition>:lambda:<region>:<account_ID>:function:<function_name>
When resources.type equals AWS::CloudTrail::Channel
, and the operator is set to Equals
or NotEquals
, the ARN must be in the following format:
arn:<partition>:cloudtrail:<region>:<account_ID>:channel/<channel_UUID>
When resources.type equals AWS::CodeWhisperer::Customization
, and the operator is set to Equals
or NotEquals
, the ARN must be in the following format:
arn:<partition>:codewhisperer:<region>:<account_ID>:customization/<customization_ID>
When resources.type equals AWS::CodeWhisperer::Profile
, and the operator is set to Equals
or NotEquals
, the ARN must be in the following format:
arn:<partition>:codewhisperer:<region>:<account_ID>:profile/<profile_ID>
When resources.type equals AWS::Cognito::IdentityPool
, and the operator is set to Equals
or NotEquals
, the ARN must be in the following format:
arn:<partition>:cognito-identity:<region>:<account_ID>:identitypool/<identity_pool_ID>
When resources.type
equals AWS::DynamoDB::Stream
, and the operator is set to Equals
or NotEquals
, the ARN must be in the following format:
arn:<partition>:dynamodb:<region>:<account_ID>:table/<table_name>/stream/<date_time>
When resources.type
equals AWS::EC2::Snapshot
, and the operator is set to Equals
or NotEquals
, the ARN must be in the following format:
arn:<partition>:ec2:<region>::snapshot/<snapshot_ID>
When resources.type
equals AWS::EMRWAL::Workspace
, and the operator is set to Equals
or NotEquals
, the ARN must be in the following format:
arn:<partition>:emrwal:<region>::workspace/<workspace_name>
When resources.type
equals AWS::FinSpace::Environment
, and the operator is set to Equals
or NotEquals
, the ARN must be in the following format:
arn:<partition>:finspace:<region>:<account_ID>:environment/<environment_ID>
When resources.type
equals AWS::Glue::Table
, and the operator is set to Equals
or NotEquals
, the ARN must be in the following format:
arn:<partition>:glue:<region>:<account_ID>:table/<database_name>/<table_name>
When resources.type
equals AWS::GuardDuty::Detector
, and the operator is set to Equals
or NotEquals
, the ARN must be in the following format:
arn:<partition>:guardduty:<region>:<account_ID>:detector/<detector_ID>
When resources.type
equals AWS::KendraRanking::ExecutionPlan
, and the operator is set to Equals
or NotEquals
, the ARN must be in the following format:
arn:<partition>:kendra-ranking:<region>:<account_ID>:rescore-execution-plan/<rescore_execution_plan_ID>
When resources.type
equals AWS::KinesisVideo::Stream
, and the operator is set to Equals
or NotEquals
, the ARN must be in the following format:
arn:<partition>:kinesisvideo:<region>:<account_ID>:stream/<stream_name/<creation_time>
When resources.type
equals AWS::ManagedBlockchain::Network
, and the operator is set to Equals
or NotEquals
, the ARN must be in the following format:
arn:<partition>:managedblockchain:::networks/<network_name>
When resources.type
equals AWS::ManagedBlockchain::Node
, and the operator is set to Equals
or NotEquals
, the ARN must be in the following format:
arn:<partition>:managedblockchain:<region>:<account_ID>:nodes/<node_ID>
When resources.type
equals AWS::MedicalImaging::Datastore
, and the operator is set to Equals
or NotEquals
, the ARN must be in the following format:
arn:<partition>:medical-imaging:<region>:<account_ID>:datastore/<data_store_ID>
When resources.type
equals AWS::PCAConnectorAD::Connector
, and the operator is set to Equals
or NotEquals
, the ARN must be in the following format:
arn:<partition>:pca-connector-ad:<region>:<account_ID>:connector/<connector_ID>
When resources.type
equals AWS::SageMaker::Endpoint
, and the operator is set to Equals
or NotEquals
, the ARN must be in the following format:
arn:<partition>:sagemaker:<region>:<account_ID>:endpoint/<endpoint_name>
When resources.type
equals AWS::SageMaker::ExperimentTrialComponent
, and the operator is set to Equals
or NotEquals
, the ARN must be in the following format:
arn:<partition>:sagemaker:<region>:<account_ID>:experiment-trial-component/<experiment_trial_component_name>
When resources.type
equals AWS::SageMaker::FeatureGroup
, and the operator is set to Equals
or NotEquals
, the ARN must be in the following format:
arn:<partition>:sagemaker:<region>:<account_ID>:feature-group/<feature_group_name>
When resources.type
equals AWS::SNS::PlatformEndpoint
, and the operator is set to Equals
or NotEquals
, the ARN must be in the following format:
arn:<partition>:sns:<region>:<account_ID>:endpoint/<endpoint_type>/<endpoint_name>/<endpoint_ID>
When resources.type
equals AWS::SNS::Topic
, and the operator is set to Equals
or NotEquals
, the ARN must be in the following format:
arn:<partition>:sns:<region>:<account_ID>:<topic_name>
When resources.type
equals AWS::S3::AccessPoint
, and the operator is set to Equals
or NotEquals
, the ARN must be in one of the following formats. To log events on all objects in an S3 access point, we recommend that you use only the access point ARN, don’t include the object path, and use the StartsWith
or NotStartsWith
operators.
arn:<partition>:s3:<region>:<account_ID>:accesspoint/<access_point_name>
arn:<partition>:s3:<region>:<account_ID>:accesspoint/<access_point_name>/object/<object_path>
When resources.type
equals AWS::S3ObjectLambda::AccessPoint
, and the operator is set to Equals
or NotEquals
, the ARN must be in the following format:
arn:<partition>:s3-object-lambda:<region>:<account_ID>:accesspoint/<access_point_name>
When resources.type
equals AWS::S3Outposts::Object
, and the operator is set to Equals
or NotEquals
, the ARN must be in the following format:
arn:<partition>:s3-outposts:<region>:<account_ID>:<object_path>
When resources.type
equals AWS::SSMMessages::ControlChannel
, and the operator is set to Equals
or NotEquals
, the ARN must be in the following format:
arn:<partition>:ssmmessages:<region>:<account_ID>:control-channel/<channel_ID>
When resources.type
equals AWS::Timestream::Database
, and the operator is set to Equals
or NotEquals
, the ARN must be in the following format:
arn:<partition>:timestream:<region>:<account_ID>:database/<database_name>
When resources.type
equals AWS::Timestream::Table
, and the operator is set to Equals
or NotEquals
, the ARN must be in the following format:
arn:<partition>:timestream:<region>:<account_ID>:database/<database_name>/table/<table_name>
When resources.type equals AWS::VerifiedPermissions::PolicyStore
, and the operator is set to Equals
or NotEquals
, the ARN must be in the following format:
arn:<partition>:verifiedpermissions:<region>:<account_ID>:policy-store/<policy_store_UUID>
Specifies a log group name using an Amazon Resource Name (ARN), a unique identifier that represents the log group to which CloudTrail logs will be delivered. You must use a log group that exists in your account.
Not required unless you specify CloudWatchLogsRoleArn
.
Specifies a log group name using an Amazon Resource Name (ARN), a unique identifier that represents the log group to which CloudTrail logs will be delivered. You must use a log group that exists in your account.
Not required unless you specify CloudWatchLogsRoleArn
.
Only the management account can configure a CloudWatch Logs log group for an organization trail.
The resource type in which you want to log data events. You can specify the following basic event selector resource types:
AWS::DynamoDB::Table
AWS::Lambda::Function
AWS::S3::Object
The following resource types are also available through advanced event selectors. Basic event selector resource types are valid in advanced event selectors, but advanced event selector resource types are not valid in basic event selectors. For more information, see AdvancedFieldSelector.
AWS::CloudTrail::Channel
AWS::CodeWhisperer::Profile
AWS::Cognito::IdentityPool
AWS::DynamoDB::Stream
AWS::EC2::Snapshot
AWS::EMRWAL::Workspace
AWS::FinSpace::Environment
AWS::Glue::Table
AWS::GuardDuty::Detector
AWS::KendraRanking::ExecutionPlan
AWS::ManagedBlockchain::Network
AWS::ManagedBlockchain::Node
AWS::MedicalImaging::Datastore
AWS::SageMaker::ExperimentTrialComponent
AWS::SageMaker::FeatureGroup
AWS::S3::AccessPoint
AWS::S3ObjectLambda::AccessPoint
AWS::S3Outposts::Object
AWS::SSMMessages::ControlChannel
AWS::VerifiedPermissions::PolicyStore
The resource type in which you want to log data events. You can specify the following basic event selector resource types:
AWS::DynamoDB::Table
AWS::Lambda::Function
AWS::S3::Object
The following resource types are also available through advanced event selectors. Basic event selector resource types are valid in advanced event selectors, but advanced event selector resource types are not valid in basic event selectors. For more information, see AdvancedFieldSelector.
AWS::CloudTrail::Channel
AWS::CodeWhisperer::Customization
AWS::CodeWhisperer::Profile
AWS::Cognito::IdentityPool
AWS::DynamoDB::Stream
AWS::EC2::Snapshot
AWS::EMRWAL::Workspace
AWS::FinSpace::Environment
AWS::Glue::Table
AWS::GuardDuty::Detector
AWS::KendraRanking::ExecutionPlan
AWS::KinesisVideo::Stream
AWS::ManagedBlockchain::Network
AWS::ManagedBlockchain::Node
AWS::MedicalImaging::Datastore
AWS::PCAConnectorAD::Connector
AWS::SageMaker::Endpoint
AWS::SageMaker::ExperimentTrialComponent
AWS::SageMaker::FeatureGroup
AWS::SNS::PlatformEndpoint
AWS::SNS::Topic
AWS::S3::AccessPoint
AWS::S3ObjectLambda::AccessPoint
AWS::S3Outposts::Object
AWS::SSMMessages::ControlChannel
AWS::Timestream::Database
AWS::Timestream::Table
AWS::VerifiedPermissions::PolicyStore
Specifies the name of the trail or trail ARN. If you specify a trail name, the string must meet the following requirements:
Contain only ASCII letters (a-z, A-Z), numbers (0-9), periods (.), underscores (_), or dashes (-)
Start with a letter or number, and end with a letter or number
Be between 3 and 128 characters
Have no adjacent periods, underscores or dashes. Names like my-_namespace
and my--namespace
are not valid.
Not be in IP address format (for example, 192.168.5.4)
If you specify a trail ARN, it must be in the format:
arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail
Specifies the name of the trail or trail ARN. If you specify a trail name, the string must meet the following requirements:
Contain only ASCII letters (a-z, A-Z), numbers (0-9), periods (.), underscores (_), or dashes (-)
Start with a letter or number, and end with a letter or number
Be between 3 and 128 characters
Have no adjacent periods, underscores or dashes. Names like my-_namespace
and my--namespace
are not valid.
Not be in IP address format (for example, 192.168.5.4)
If you specify a trail ARN, it must be in the format:
arn:aws:cloudtrail:us-east-2:123456789012:trail/MyTrail
You cannot use this parameter with the EventDataStore
parameter.
Specifies the ARN (or ID suffix of the ARN) of the event data store for which you want to get Insights selectors.
You cannot use this parameter with the TrailName
parameter.
A JSON string that contains the insight types you want to log on a trail. In this release, ApiErrorRateInsight
and ApiCallRateInsight
are supported as insight types.
A JSON string that contains the Insight types you want to log on a trail or event data store. ApiErrorRateInsight
and ApiCallRateInsight
are supported as Insights types.
The ARN of the source event data store that enabled Insights events.
" + }, + "InsightsDestination": { + "shape": "EventDataStoreArn", + "documentation": "The ARN of the destination event data store that logs Insights events.
" } } }, @@ -3576,10 +3600,10 @@ "members": { "InsightType": { "shape": "InsightType", - "documentation": "The type of Insights events to log on a trail. ApiCallRateInsight
and ApiErrorRateInsight
are valid Insight types.
The ApiCallRateInsight
Insights type analyzes write-only management API calls that are aggregated per minute against a baseline API call volume.
The ApiErrorRateInsight
Insights type analyzes management API calls that result in error codes. The error is shown if the API call is unsuccessful.
The type of Insights events to log on a trail or event data store. ApiCallRateInsight
and ApiErrorRateInsight
are valid Insight types.
The ApiCallRateInsight
Insights type analyzes write-only management API calls that are aggregated per minute against a baseline API call volume.
The ApiErrorRateInsight
Insights type analyzes management API calls that result in error codes. The error is shown if the API call is unsuccessful.
A JSON string that contains a list of Insights types that are logged on a trail.
" + "documentation": "A JSON string that contains a list of Insights types that are logged on a trail or event data store.
" }, "InsightSelectors": { "type": "list", @@ -4066,17 +4090,24 @@ "PutInsightSelectorsRequest": { "type": "structure", "required": [ - "TrailName", "InsightSelectors" ], "members": { "TrailName": { "shape": "String", - "documentation": "The name of the CloudTrail trail for which you want to change or add Insights selectors.
" + "documentation": "The name of the CloudTrail trail for which you want to change or add Insights selectors.
You cannot use this parameter with the EventDataStore
and InsightsDestination
parameters.
A JSON string that contains the insight types you want to log on a trail. ApiCallRateInsight
and ApiErrorRateInsight
are valid Insight types.
The ApiCallRateInsight
Insights type analyzes write-only management API calls that are aggregated per minute against a baseline API call volume.
The ApiErrorRateInsight
Insights type analyzes management API calls that result in error codes. The error is shown if the API call is unsuccessful.
A JSON string that contains the Insights types you want to log on a trail or event data store. ApiCallRateInsight
and ApiErrorRateInsight
are valid Insight types.
The ApiCallRateInsight
Insights type analyzes write-only management API calls that are aggregated per minute against a baseline API call volume.
The ApiErrorRateInsight
Insights type analyzes management API calls that result in error codes. The error is shown if the API call is unsuccessful.
The ARN (or ID suffix of the ARN) of the source event data store for which you want to change or add Insights selectors. To enable Insights on an event data store, you must provide both the EventDataStore
and InsightsDestination
parameters.
You cannot use this parameter with the TrailName
parameter.
The ARN (or ID suffix of the ARN) of the destination event data store that logs Insights events. To enable Insights on an event data store, you must provide both the EventDataStore
and InsightsDestination
parameters.
You cannot use this parameter with the TrailName
parameter.
A JSON string that contains the Insights event types that you want to log on a trail. The valid Insights types in this release are ApiErrorRateInsight
and ApiCallRateInsight
.
A JSON string that contains the Insights event types that you want to log on a trail or event data store. The valid Insights types are ApiErrorRateInsight
and ApiCallRateInsight
.
The Amazon Resource Name (ARN) of the source event data store for which you want to change or add Insights selectors.
" + }, + "InsightsDestination": { + "shape": "EventDataStoreArn", + "documentation": "The ARN of the destination event data store that logs Insights events.
" } } }, @@ -4915,7 +4954,7 @@ }, "OrganizationEnabled": { "shape": "Boolean", - "documentation": "Specifies whether an event data store collects events logged for an organization in Organizations.
" + "documentation": "Specifies whether an event data store collects events logged for an organization in Organizations.
Only the management account for the organization can convert an organization event data store to a non-organization event data store, or convert a non-organization event data store to an organization event data store.
Specifies a log group name using an Amazon Resource Name (ARN), a unique identifier that represents the log group to which CloudTrail logs are delivered. You must use a log group that exists in your account.
Not required unless you specify CloudWatchLogsRoleArn
.
Specifies a log group name using an Amazon Resource Name (ARN), a unique identifier that represents the log group to which CloudTrail logs are delivered. You must use a log group that exists in your account.
Not required unless you specify CloudWatchLogsRoleArn
.
Only the management account can configure a CloudWatch Logs log group for an organization trail.
Specifies whether the trail is applied to all accounts in an organization in Organizations, or only for the current Amazon Web Services account. The default is false, and cannot be true unless the call is made on behalf of an Amazon Web Services account that is the management account or delegated administrator account for an organization in Organizations. If the trail is not an organization trail and this is set to true
, the trail will be created in all Amazon Web Services accounts that belong to the organization. If the trail is an organization trail and this is set to false
, the trail will remain in the current Amazon Web Services account but be deleted from all member accounts in the organization.
Specifies whether the trail is applied to all accounts in an organization in Organizations, or only for the current Amazon Web Services account. The default is false, and cannot be true unless the call is made on behalf of an Amazon Web Services account that is the management account for an organization in Organizations. If the trail is not an organization trail and this is set to true
, the trail will be created in all Amazon Web Services accounts that belong to the organization. If the trail is an organization trail and this is set to false
, the trail will remain in the current Amazon Web Services account but be deleted from all member accounts in the organization.
Only the management account for the organization can convert an organization trail to a non-organization trail, or convert a non-organization trail to an organization trail.
Specifies settings to update for the trail.
" diff --git a/apis/comprehend-2017-11-27.min.json b/apis/comprehend-2017-11-27.min.json index 761138141b..e2396f0a8d 100644 --- a/apis/comprehend-2017-11-27.min.json +++ b/apis/comprehend-2017-11-27.min.json @@ -1259,6 +1259,61 @@ "sensitive": true } }, + "DetectToxicContent": { + "input": { + "type": "structure", + "required": [ + "TextSegments", + "LanguageCode" + ], + "members": { + "TextSegments": { + "type": "list", + "member": { + "type": "structure", + "required": [ + "Text" + ], + "members": { + "Text": { + "shape": "S3" + } + } + }, + "sensitive": true + }, + "LanguageCode": {} + } + }, + "output": { + "type": "structure", + "members": { + "ResultList": { + "type": "list", + "member": { + "type": "structure", + "members": { + "Labels": { + "type": "list", + "member": { + "type": "structure", + "members": { + "Name": {}, + "Score": { + "type": "float" + } + } + } + }, + "Toxicity": { + "type": "float" + } + } + } + } + } + } + }, "ImportModel": { "input": { "type": "structure", diff --git a/apis/comprehend-2017-11-27.normal.json b/apis/comprehend-2017-11-27.normal.json index 2197e001cc..e3b33bdc19 100644 --- a/apis/comprehend-2017-11-27.normal.json +++ b/apis/comprehend-2017-11-27.normal.json @@ -194,7 +194,7 @@ "shape": "InternalServerException" } ], - "documentation": "Inspects a batch of documents and returns a sentiment analysis for each entity identified in the documents.
For more information about targeted sentiment, see Targeted sentiment.
" + "documentation": "Inspects a batch of documents and returns a sentiment analysis for each entity identified in the documents.
For more information about targeted sentiment, see Targeted sentiment in the Amazon Comprehend Developer Guide.
" }, "ClassifyDocument": { "name": "ClassifyDocument", @@ -222,7 +222,7 @@ "shape": "InternalServerException" } ], - "documentation": "Creates a new document classification request to analyze a single document in real-time, using a previously created and trained custom model and an endpoint.
You can input plain text or you can upload a single-page input document (text, PDF, Word, or image).
If the system detects errors while processing a page in the input document, the API response includes an entry in Errors
that describes the errors.
If the system detects a document-level error in your input document, the API returns an InvalidRequestException
error response. For details about this exception, see Errors in semi-structured documents in the Comprehend Developer Guide.
Creates a classification request to analyze a single document in real-time. ClassifyDocument
supports the following model types:
Custom classifier - a custom model that you have created and trained. For input, you can provide plain text, a single-page document (PDF, Word, or image), or Textract API output. For more information, see Custom classification in the Amazon Comprehend Developer Guide.
Prompt classifier - Amazon Comprehend provides a model for classifying prompts. For input, you provide English plain text input. For prompt classification, the response includes only the Classes
field. For more information about prompt classifiers, see Prompt classifiers in the Amazon Comprehend Developer Guide.
If the system detects errors while processing a page in the input document, the API response includes an entry in Errors
that describes the errors.
If the system detects a document-level error in your input document, the API returns an InvalidRequestException
error response. For details about this exception, see Errors in semi-structured documents in the Comprehend Developer Guide.
Inspects the input text and returns a sentiment analysis for each entity identified in the text.
For more information about targeted sentiment, see Targeted sentiment.
" + "documentation": "Inspects the input text and returns a sentiment analysis for each entity identified in the text.
For more information about targeted sentiment, see Targeted sentiment in the Amazon Comprehend Developer Guide.
" + }, + "DetectToxicContent": { + "name": "DetectToxicContent", + "http": { + "method": "POST", + "requestUri": "/" + }, + "input": { + "shape": "DetectToxicContentRequest" + }, + "output": { + "shape": "DetectToxicContentResponse" + }, + "errors": [ + { + "shape": "InvalidRequestException" + }, + { + "shape": "TextSizeLimitExceededException" + }, + { + "shape": "UnsupportedLanguageException" + }, + { + "shape": "InternalServerException" + } + ], + "documentation": "Performs toxicity analysis on the list of text strings that you provide as input. The analysis uses the order of strings in the list to determine context when predicting toxicity. The API response contains a results list that matches the size of the input list. For more information about toxicity detection, see Toxicity detection in the Amazon Comprehend Developer Guide
" }, "ImportModel": { "name": "ImportModel", @@ -3077,11 +3105,11 @@ }, "EndpointArn": { "shape": "DocumentClassifierEndpointArn", - "documentation": "The Amazon Resource Number (ARN) of the endpoint. For information about endpoints, see Managing endpoints.
" + "documentation": "The Amazon Resource Number (ARN) of the endpoint.
For prompt classification, Amazon Comprehend provides the endpoint ARN: zzz
.
For custom classification, you create an endpoint for your custom model. For more information, see Using Amazon Comprehend endpoints.
" }, "Bytes": { "shape": "SemiStructuredDocumentBlob", - "documentation": "Use the Bytes
parameter to input a text, PDF, Word or image file. You can also use the Bytes
parameter to input an Amazon Textract DetectDocumentText
or AnalyzeDocument
output file.
Provide the input document as a sequence of base64-encoded bytes. If your code uses an Amazon Web Services SDK to classify documents, the SDK may encode the document file bytes for you.
The maximum length of this field depends on the input document type. For details, see Inputs for real-time custom analysis in the Comprehend Developer Guide.
If you use the Bytes
parameter, do not use the Text
parameter.
Use the Bytes
parameter to input a text, PDF, Word or image file.
When you classify a document using a custom model, you can also use the Bytes
parameter to input an Amazon Textract DetectDocumentText
or AnalyzeDocument
output file.
To classify a document using the prompt classifier, use the Text
parameter for input.
Provide the input document as a sequence of base64-encoded bytes. If your code uses an Amazon Web Services SDK to classify documents, the SDK may encode the document file bytes for you.
The maximum length of this field depends on the input document type. For details, see Inputs for real-time custom analysis in the Comprehend Developer Guide.
If you use the Bytes
parameter, do not use the Text
parameter.
The classes used by the document being analyzed. These are used for multi-class trained models. Individual classes are mutually exclusive and each document is expected to have only a single class assigned to it. For example, an animal can be a dog or a cat, but not both at the same time.
" + "documentation": "The classes used by the document being analyzed. These are used for multi-class trained models. Individual classes are mutually exclusive and each document is expected to have only a single class assigned to it. For example, an animal can be a dog or a cat, but not both at the same time.
For prompt classification, the response includes a single class (UNDESIRED_PROMPT
), along with a confidence score. A higher confidence score indicates that the input prompt is undesired in nature.
Specifies the location for the output files from a custom classifier job. This parameter is required for a request that creates a native classifier model.
" + "documentation": "Specifies the location for the output files from a custom classifier job. This parameter is required for a request that creates a native document model.
" }, "ClientRequestToken": { "shape": "ClientRequestTokenString", @@ -3437,7 +3465,7 @@ }, "ActiveModelArn": { "shape": "ComprehendModelArn", - "documentation": "To associate an existing model with the flywheel, specify the Amazon Resource Number (ARN) of the model version.
" + "documentation": "To associate an existing model with the flywheel, specify the Amazon Resource Number (ARN) of the model version. Do not set TaskConfig
or ModelType
if you specify an ActiveModelArn
.
Configuration about the custom classifier associated with the flywheel.
" + "documentation": "Configuration about the model associated with the flywheel. You need to set TaskConfig
if you are creating a flywheel for a new model.
The model type.
" + "documentation": "The model type. You need to set ModelType
if you are creating a flywheel for a new model.
A list of up to 10 text strings. The maximum size for the list is 10 KB.
" + }, + "LanguageCode": { + "shape": "LanguageCode", + "documentation": "The language of the input text. Currently, English is the only supported language.
" + } + } + }, + "DetectToxicContentResponse": { + "type": "structure", + "members": { + "ResultList": { + "shape": "ListOfToxicLabels", + "documentation": "Results of the content moderation analysis. Each entry in the results list contains a list of toxic content types identified in the text, along with a confidence score for each content type. The results list also includes a toxicity score for each entry in the results list.
" + } + } + }, "DocumentClass": { "type": "structure", "members": { @@ -4437,7 +4491,7 @@ "documentation": "One or more labels to associate with the custom classifier.
" } }, - "documentation": "Configuration required for a custom classification model.
" + "documentation": "Configuration required for a document classification model.
" }, "DocumentClassificationJobFilter": { "type": "structure", @@ -4514,7 +4568,7 @@ }, "VpcConfig": { "shape": "VpcConfig", - "documentation": "Configuration parameters for a private Virtual Private Cloud (VPC) containing the resources you are using for your document classification job. For more information, see Amazon VPC.
" + "documentation": "Configuration parameters for a private Virtual Private Cloud (VPC) containing the resources you are using for your document classification job. For more information, see Amazon VPC.
" }, "FlywheelArn": { "shape": "ComprehendFlywheelArn", @@ -4569,12 +4623,12 @@ "documentation": "The S3 URI location of the test documents included in the TestS3Uri CSV file. This field is not required if you do not specify a test CSV file.
" } }, - "documentation": "The location of the training documents. This parameter is required in a request to create a native classifier model.
" + "documentation": "The location of the training documents. This parameter is required in a request to create a semi-structured document classification model.
" }, "DocumentClassifierEndpointArn": { "type": "string", "max": 256, - "pattern": "arn:aws(-[^:]+)?:comprehend:[a-zA-Z0-9-]*:[0-9]{12}:document-classifier-endpoint/[a-zA-Z0-9](-*[a-zA-Z0-9])*" + "pattern": "arn:aws(-[^:]+)?:comprehend:[a-zA-Z0-9-]*:([0-9]{12}|aws):document-classifier-endpoint/[a-zA-Z0-9](-*[a-zA-Z0-9])*" }, "DocumentClassifierFilter": { "type": "structure", @@ -4611,7 +4665,7 @@ }, "TestS3Uri": { "shape": "S3Uri", - "documentation": "This specifies the Amazon S3 location where the test annotations for an entity recognizer are located. The URI must be in the same Amazon Web Services Region as the API endpoint that you are calling.
" + "documentation": "This specifies the Amazon S3 location that contains the test annotations for the document classifier. The URI must be in the same Amazon Web Services Region as the API endpoint that you are calling.
" }, "LabelDelimiter": { "shape": "LabelDelimiter", @@ -4623,11 +4677,11 @@ }, "DocumentType": { "shape": "DocumentClassifierDocumentTypeFormat", - "documentation": "The type of input documents for training the model. Provide plain-text documents to create a plain-text model, and provide semi-structured documents to create a native model.
" + "documentation": "The type of input documents for training the model. Provide plain-text documents to create a plain-text model, and provide semi-structured documents to create a native document model.
" }, "Documents": { "shape": "DocumentClassifierDocuments", - "documentation": "The S3 location of the training documents. This parameter is required in a request to create a native classifier model.
" + "documentation": "The S3 location of the training documents. This parameter is required in a request to create a native document model.
" }, "DocumentReaderConfig": { "shape": "DocumentReaderConfig" @@ -4658,7 +4712,7 @@ "documentation": "The Amazon S3 prefix for the data lake location of the flywheel statistics.
" } }, - "documentation": "Provide the location for output data from a custom classifier job. This field is mandatory if you are training a native classifier model.
" + "documentation": "Provide the location for output data from a custom classifier job. This field is mandatory if you are training a native document model.
" }, "DocumentClassifierProperties": { "type": "structure", @@ -4717,7 +4771,7 @@ }, "VpcConfig": { "shape": "VpcConfig", - "documentation": "Configuration parameters for a private Virtual Private Cloud (VPC) containing the resources you are using for your custom classifier. For more information, see Amazon VPC.
" + "documentation": "Configuration parameters for a private Virtual Private Cloud (VPC) containing the resources you are using for your custom classifier. For more information, see Amazon VPC.
" }, "Mode": { "shape": "DocumentClassifierMode", @@ -5864,7 +5918,7 @@ }, "TaskConfig": { "shape": "TaskConfig", - "documentation": "Configuration about the custom classifier associated with the flywheel.
" + "documentation": "Configuration about the model associated with a flywheel.
" }, "DataLakeS3Uri": { "shape": "S3Uri", @@ -6782,6 +6836,26 @@ "shape": "TargetedSentimentEntity" } }, + "ListOfTextSegments": { + "type": "list", + "member": { + "shape": "TextSegment" + }, + "min": 1, + "sensitive": true + }, + "ListOfToxicContent": { + "type": "list", + "member": { + "shape": "ToxicContent" + } + }, + "ListOfToxicLabels": { + "type": "list", + "member": { + "shape": "ToxicLabels" + } + }, "ListOfWarnings": { "type": "list", "member": { @@ -6955,7 +7029,7 @@ "shape": "SentimentScore" } }, - "documentation": "Contains the sentiment and sentiment score for one mention of an entity.
For more information about targeted sentiment, see Targeted sentiment.
" + "documentation": "Contains the sentiment and sentiment score for one mention of an entity.
For more information about targeted sentiment, see Targeted sentiment in the Amazon Comprehend Developer Guide.
" }, "ModelStatus": { "type": "string", @@ -6997,7 +7071,7 @@ }, "KmsKeyId": { "shape": "KmsKeyId", - "documentation": "ID for the Amazon Web Services Key Management Service (KMS) key that Amazon Comprehend uses to encrypt the output results from an analysis job. The KmsKeyId can be one of the following formats:
KMS Key ID: \"1234abcd-12ab-34cd-56ef-1234567890ab\"
Amazon Resource Name (ARN) of a KMS Key: \"arn:aws:kms:us-west-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab\"
KMS Key Alias: \"alias/ExampleAlias\"
ARN of a KMS Key Alias: \"arn:aws:kms:us-west-2:111122223333:alias/ExampleAlias\"
ID for the Amazon Web Services Key Management Service (KMS) key that Amazon Comprehend uses to encrypt the output results from an analysis job. Specify the Key Id of a symmetric key, because you cannot use an asymmetric key for uploading data to S3.
The KmsKeyId can be one of the following formats:
KMS Key ID: \"1234abcd-12ab-34cd-56ef-1234567890ab\"
Amazon Resource Name (ARN) of a KMS Key: \"arn:aws:kms:us-west-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab\"
KMS Key Alias: \"alias/ExampleAlias\"
ARN of a KMS Key Alias: \"arn:aws:kms:us-west-2:111122223333:alias/ExampleAlias\"
Provides configuration parameters for the output of inference jobs.
" @@ -7997,7 +8071,7 @@ }, "DataAccessRoleArn": { "shape": "IamRoleArn", - "documentation": "The Amazon Resource Name (ARN) of the IAM role that grants Amazon Comprehend read access to your input data. For more information, see Role-based permissions.
" + "documentation": "The Amazon Resource Name (ARN) of the IAM role that grants Amazon Comprehend read access to your input data. For more information, see Role-based permissions.
" }, "JobName": { "shape": "JobName", @@ -8536,7 +8610,7 @@ "documentation": "An array of mentions of the entity in the document. The array represents a co-reference group. See Co-reference group for an example.
" } }, - "documentation": "Information about one of the entities found by targeted sentiment analysis.
For more information about targeted sentiment, see Targeted sentiment.
" + "documentation": "Information about one of the entities found by targeted sentiment analysis.
For more information about targeted sentiment, see Targeted sentiment in the Amazon Comprehend Developer Guide.
" }, "TargetedSentimentEntityType": { "type": "string", @@ -8592,7 +8666,7 @@ "documentation": "The offset into the document text where the mention ends.
" } }, - "documentation": "Information about one mention of an entity. The mention information includes the location of the mention in the text and the sentiment of the mention.
For more information about targeted sentiment, see Targeted sentiment.
" + "documentation": "Information about one mention of an entity. The mention information includes the location of the mention in the text and the sentiment of the mention.
For more information about targeted sentiment, see Targeted sentiment in the Amazon Comprehend Developer Guide.
" }, "TaskConfig": { "type": "structure", @@ -8606,14 +8680,27 @@ }, "DocumentClassificationConfig": { "shape": "DocumentClassificationConfig", - "documentation": "Configuration required for a classification model.
" + "documentation": "Configuration required for a document classification model.
" }, "EntityRecognitionConfig": { "shape": "EntityRecognitionConfig", "documentation": "Configuration required for an entity recognition model.
" } }, - "documentation": "Configuration about the custom classifier associated with the flywheel.
" + "documentation": "Configuration about the model associated with a flywheel.
" + }, + "TextSegment": { + "type": "structure", + "required": [ + "Text" + ], + "members": { + "Text": { + "shape": "CustomerInputString", + "documentation": "The text content.
" + } + }, + "documentation": "One of the of text strings. Each string has a size limit of 1KB.
" }, "Timestamp": { "type": "timestamp" @@ -8704,6 +8791,46 @@ "shape": "TopicsDetectionJobProperties" } }, + "ToxicContent": { + "type": "structure", + "members": { + "Name": { + "shape": "ToxicContentType", + "documentation": "The name of the toxic content type.
" + }, + "Score": { + "shape": "Float", + "documentation": "Model confidence in the detected content type. Value range is zero to one, where one is highest confidence.
" + } + }, + "documentation": "Toxic content analysis result for one string. For more information about toxicity detection, see Toxicity detection in the Amazon Comprehend Developer Guide
" + }, + "ToxicContentType": { + "type": "string", + "enum": [ + "GRAPHIC", + "HARASSMENT_OR_ABUSE", + "HATE_SPEECH", + "INSULT", + "PROFANITY", + "SEXUAL", + "VIOLENCE_OR_THREAT" + ] + }, + "ToxicLabels": { + "type": "structure", + "members": { + "Labels": { + "shape": "ListOfToxicContent", + "documentation": "Array of toxic content types identified in the string.
" + }, + "Toxicity": { + "shape": "Float", + "documentation": "Overall toxicity score for the string.
" + } + }, + "documentation": "Toxicity analysis result for one string. For more information about toxicity detection, see Toxicity detection in the Amazon Comprehend Developer Guide
" + }, "UntagResourceRequest": { "type": "structure", "required": [ @@ -8851,7 +8978,7 @@ "documentation": "Text message associated with the warning.
" } }, - "documentation": "The system identified one of the following warnings while processing the input document:
The document to classify is plain text, but the classifier is a native model.
The document to classify is semi-structured, but the classifier is a plain-text model.
The system identified one of the following warnings while processing the input document:
The document to classify is plain text, but the classifier is a native document model.
The document to classify is semi-structured, but the classifier is a plain-text model.
Amazon Comprehend is an Amazon Web Services service for gaining insight into the content of documents. Use these actions to determine the topics contained in your documents, the topics they discuss, the predominant sentiment expressed in them, the predominant language used, and more.
" diff --git a/apis/connect-2017-08-08.min.json b/apis/connect-2017-08-08.min.json index 4daef8db93..f5982f1339 100644 --- a/apis/connect-2017-08-08.min.json +++ b/apis/connect-2017-08-08.min.json @@ -4767,6 +4767,10 @@ "location": "querystring", "locationName": "maxResults", "type": "integer" + }, + "IntegrationArn": { + "location": "querystring", + "locationName": "integrationArn" } } }, diff --git a/apis/connect-2017-08-08.normal.json b/apis/connect-2017-08-08.normal.json index d32bd79081..e4b35da1e5 100644 --- a/apis/connect-2017-08-08.normal.json +++ b/apis/connect-2017-08-08.normal.json @@ -13638,7 +13638,8 @@ "WISDOM_ASSISTANT", "WISDOM_KNOWLEDGE_BASE", "CASES_DOMAIN", - "APPLICATION" + "APPLICATION", + "FILE_SCANNER" ] }, "IntervalDetails": { @@ -14448,6 +14449,12 @@ "box": true, "location": "querystring", "locationName": "maxResults" + }, + "IntegrationArn": { + "shape": "ARN", + "documentation": "The Amazon Resource Name (ARN) of the integration.
", + "location": "querystring", + "locationName": "integrationArn" } } }, diff --git a/apis/ec2-2016-11-15.min.json b/apis/ec2-2016-11-15.min.json index 49297d2e67..cd3d5a1dcf 100644 --- a/apis/ec2-2016-11-15.min.json +++ b/apis/ec2-2016-11-15.min.json @@ -16320,6 +16320,24 @@ } } }, + "DisableSnapshotBlockPublicAccess": { + "input": { + "type": "structure", + "members": { + "DryRun": { + "type": "boolean" + } + } + }, + "output": { + "type": "structure", + "members": { + "State": { + "locationName": "state" + } + } + } + }, "DisableTransitGatewayRouteTablePropagation": { "input": { "type": "structure", @@ -16339,7 +16357,7 @@ "type": "structure", "members": { "Propagation": { - "shape": "S1tz", + "shape": "S1u2", "locationName": "propagation" } } @@ -17156,6 +17174,28 @@ } } }, + "EnableSnapshotBlockPublicAccess": { + "input": { + "type": "structure", + "required": [ + "State" + ], + "members": { + "State": {}, + "DryRun": { + "type": "boolean" + } + } + }, + "output": { + "type": "structure", + "members": { + "State": { + "locationName": "state" + } + } + } + }, "EnableTransitGatewayRouteTablePropagation": { "input": { "type": "structure", @@ -17175,7 +17215,7 @@ "type": "structure", "members": { "Propagation": { - "shape": "S1tz", + "shape": "S1u2", "locationName": "propagation" } } @@ -17786,7 +17826,7 @@ "type": "structure", "members": { "InstanceFamilyCreditSpecification": { - "shape": "S1xe", + "shape": "S1xj", "locationName": "instanceFamilyCreditSpecification" } } @@ -17936,7 +17976,7 @@ ], "members": { "HostIdSet": { - "shape": "S1xv" + "shape": "S1y0" }, "OfferingId": {} } @@ -17948,7 +17988,7 @@ "locationName": "currencyCode" }, "Purchase": { - "shape": "S1xx", + "shape": "S1y2", "locationName": "purchase" }, "TotalHourlyPrice": { @@ -17991,11 +18031,11 @@ "type": "boolean" }, "ArchitectureTypes": { - "shape": "S1y2", + "shape": "S1y7", "locationName": "ArchitectureType" }, "VirtualizationTypes": { - "shape": "S1y3", + "shape": "S1y8", "locationName": "VirtualizationType" }, "InstanceRequirements": { @@ -18392,7 +18432,7 @@ "locationName": "ipamResourceCidrSet", "type": "list", "member": { - "shape": "S1z3", + "shape": "S1z8", "locationName": "item" } } @@ -18657,7 +18697,7 @@ "locationName": "paymentDue" }, "ReservedInstanceValueRollup": { - "shape": "S1zr", + "shape": "S1zw", "locationName": "reservedInstanceValueRollup" }, "ReservedInstanceValueSet": { @@ -18668,7 +18708,7 @@ "type": "structure", "members": { "ReservationValue": { - "shape": "S1zr", + "shape": "S1zw", "locationName": "reservationValue" }, "ReservedInstanceId": { @@ -18678,7 +18718,7 @@ } }, "TargetConfigurationValueRollup": { - "shape": "S1zr", + "shape": "S1zw", "locationName": "targetConfigurationValueRollup" }, "TargetConfigurationValueSet": { @@ -18689,7 +18729,7 @@ "type": "structure", "members": { "ReservationValue": { - "shape": "S1zr", + "shape": "S1zw", "locationName": "reservationValue" }, "TargetConfiguration": { @@ -18792,6 +18832,24 @@ } } }, + "GetSnapshotBlockPublicAccessState": { + "input": { + "type": "structure", + "members": { + "DryRun": { + "type": "boolean" + } + } + }, + "output": { + "type": "structure", + "members": { + "State": { + "locationName": "state" + } + } + } + }, "GetSpotPlacementScores": { "input": { "type": "structure", @@ -18820,11 +18878,11 @@ "type": "structure", "members": { "ArchitectureTypes": { - "shape": "S1y2", + "shape": "S1y7", "locationName": "ArchitectureType" }, "VirtualizationTypes": { - "shape": "S1y3", + "shape": "S1y8", "locationName": "VirtualizationType" }, "InstanceRequirements": { @@ -18895,11 +18953,11 @@ "type": "structure", "members": { "SubnetIpv4CidrReservations": { - "shape": "S20g", + "shape": "S20n", "locationName": "subnetIpv4CidrReservationSet" }, "SubnetIpv6CidrReservations": { - "shape": "S20g", + "shape": "S20n", "locationName": "subnetIpv6CidrReservationSet" }, "NextToken": { @@ -19476,7 +19534,7 @@ "members": { "Architecture": {}, "ClientData": { - "shape": "S21s" + "shape": "S21z" }, "ClientToken": {}, "Description": {}, @@ -19495,7 +19553,7 @@ "shape": "S189" }, "UserBucket": { - "shape": "S21v" + "shape": "S222" } } } @@ -19605,10 +19663,10 @@ "members": { "Description": {}, "Image": { - "shape": "S222" + "shape": "S229" }, "Volume": { - "shape": "S223" + "shape": "S22a" } } } @@ -19731,7 +19789,7 @@ "type": "structure", "members": { "ClientData": { - "shape": "S21s" + "shape": "S21z" }, "ClientToken": {}, "Description": {}, @@ -19744,7 +19802,7 @@ "shape": "S189" }, "UserBucket": { - "shape": "S21v" + "shape": "S222" } } }, @@ -19802,11 +19860,11 @@ "type": "boolean" }, "Image": { - "shape": "S222", + "shape": "S229", "locationName": "image" }, "Volume": { - "shape": "S223", + "shape": "S22a", "locationName": "volume" } } @@ -20121,7 +20179,7 @@ "type": "structure", "members": { "InstanceFamilyCreditSpecification": { - "shape": "S1xe", + "shape": "S1xj", "locationName": "instanceFamilyCreditSpecification" } } @@ -20195,25 +20253,25 @@ "Attribute": {}, "OperationType": {}, "UserIds": { - "shape": "S238", + "shape": "S23f", "locationName": "UserId" }, "UserGroups": { - "shape": "S239", + "shape": "S23g", "locationName": "UserGroup" }, "ProductCodes": { - "shape": "S23a", + "shape": "S23h", "locationName": "ProductCode" }, "LoadPermission": { "type": "structure", "members": { "Add": { - "shape": "S23c" + "shape": "S23j" }, "Remove": { - "shape": "S23c" + "shape": "S23j" } } }, @@ -20259,7 +20317,7 @@ "locationName": "successful" }, "Unsuccessful": { - "shape": "S23h", + "shape": "S23o", "locationName": "unsuccessful" } } @@ -20327,15 +20385,15 @@ }, "OperationType": {}, "ProductCodes": { - "shape": "S23a", + "shape": "S23h", "locationName": "ProductCode" }, "UserGroups": { - "shape": "S239", + "shape": "S23g", "locationName": "UserGroup" }, "UserIds": { - "shape": "S238", + "shape": "S23f", "locationName": "UserId" }, "Value": {}, @@ -20480,7 +20538,7 @@ "members": { "InstanceId": {}, "CapacityReservationSpecification": { - "shape": "S23u" + "shape": "S241" }, "DryRun": { "type": "boolean" @@ -20740,7 +20798,7 @@ "locationName": "AddOperatingRegion" }, "RemoveOperatingRegions": { - "shape": "S24j", + "shape": "S24q", "locationName": "RemoveOperatingRegion" } } @@ -20830,7 +20888,7 @@ "type": "structure", "members": { "IpamResourceCidr": { - "shape": "S1z3", + "shape": "S1z8", "locationName": "ipamResourceCidr" } } @@ -20853,7 +20911,7 @@ "locationName": "AddOperatingRegion" }, "RemoveOperatingRegions": { - "shape": "S24j", + "shape": "S24q", "locationName": "RemoveOperatingRegion" } } @@ -21184,7 +21242,7 @@ "OperationType": {}, "SnapshotId": {}, "UserIds": { - "shape": "S238", + "shape": "S23f", "locationName": "UserId" }, "DryRun": { @@ -22133,13 +22191,13 @@ ], "members": { "AccepterPeeringConnectionOptions": { - "shape": "S277" + "shape": "S27e" }, "DryRun": { "type": "boolean" }, "RequesterPeeringConnectionOptions": { - "shape": "S277" + "shape": "S27e" }, "VpcPeeringConnectionId": {} } @@ -22148,11 +22206,11 @@ "type": "structure", "members": { "AccepterPeeringConnectionOptions": { - "shape": "S279", + "shape": "S27g", "locationName": "accepterPeeringConnectionOptions" }, "RequesterPeeringConnectionOptions": { - "shape": "S279", + "shape": "S27g", "locationName": "requesterPeeringConnectionOptions" } } @@ -22376,7 +22434,7 @@ "type": "structure", "members": { "InstanceMonitorings": { - "shape": "S27o", + "shape": "S27v", "locationName": "instancesSet" } } @@ -22591,7 +22649,7 @@ "ClientToken": {}, "CurrencyCode": {}, "HostIdSet": { - "shape": "S1xv" + "shape": "S1y0" }, "LimitPrice": {}, "OfferingId": {}, @@ -22611,7 +22669,7 @@ "locationName": "currencyCode" }, "Purchase": { - "shape": "S1xx", + "shape": "S1y2", "locationName": "purchase" }, "TotalHourlyPrice": { @@ -23070,7 +23128,7 @@ "locationName": "successful" }, "Unsuccessful": { - "shape": "S23h", + "shape": "S23o", "locationName": "unsuccessful" } } @@ -24139,7 +24197,7 @@ } }, "CapacityReservationSpecification": { - "shape": "S23u" + "shape": "S241" }, "HibernationOptions": { "type": "structure", @@ -24305,7 +24363,7 @@ "type": "integer" }, "Groups": { - "shape": "S2bf", + "shape": "S2bm", "locationName": "Group" }, "Ipv6AddressCount": { @@ -24354,7 +24412,7 @@ }, "RamdiskId": {}, "SecurityGroupIds": { - "shape": "S2bf", + "shape": "S2bm", "locationName": "SecurityGroupId" }, "SubnetId": {}, @@ -24568,7 +24626,7 @@ "type": "structure", "members": { "StartingInstances": { - "shape": "S2c3", + "shape": "S2ca", "locationName": "instancesSet" } } @@ -24695,7 +24753,7 @@ "type": "structure", "members": { "StoppingInstances": { - "shape": "S2c3", + "shape": "S2ca", "locationName": "instancesSet" } } @@ -24770,7 +24828,7 @@ "type": "structure", "members": { "TerminatingInstances": { - "shape": "S2c3", + "shape": "S2ca", "locationName": "instancesSet" } } @@ -24889,7 +24947,7 @@ "type": "structure", "members": { "InstanceMonitorings": { - "shape": "S27o", + "shape": "S27v", "locationName": "instancesSet" } } @@ -24908,7 +24966,7 @@ "shape": "S6q" }, "SecurityGroupRuleDescriptions": { - "shape": "S2cr", + "shape": "S2cy", "locationName": "SecurityGroupRuleDescription" } } @@ -24936,7 +24994,7 @@ "shape": "S6q" }, "SecurityGroupRuleDescriptions": { - "shape": "S2cr", + "shape": "S2cy", "locationName": "SecurityGroupRuleDescription" } } @@ -34517,7 +34575,7 @@ "locationName": "AvailabilityZone" } }, - "S1tz": { + "S1u2": { "type": "structure", "members": { "TransitGatewayAttachmentId": { @@ -34540,7 +34598,7 @@ } } }, - "S1xe": { + "S1xj": { "type": "structure", "members": { "InstanceFamily": { @@ -34551,13 +34609,13 @@ } } }, - "S1xv": { + "S1y0": { "type": "list", "member": { "locationName": "item" } }, - "S1xx": { + "S1y2": { "type": "list", "member": { "locationName": "item", @@ -34592,19 +34650,19 @@ } } }, - "S1y2": { + "S1y7": { "type": "list", "member": { "locationName": "item" } }, - "S1y3": { + "S1y8": { "type": "list", "member": { "locationName": "item" } }, - "S1z3": { + "S1z8": { "type": "structure", "members": { "IpamId": { @@ -34656,7 +34714,7 @@ } } }, - "S1zr": { + "S1zw": { "type": "structure", "members": { "HourlyPrice": { @@ -34670,14 +34728,14 @@ } } }, - "S20g": { + "S20n": { "type": "list", "member": { "shape": "Sno", "locationName": "item" } }, - "S21s": { + "S21z": { "type": "structure", "members": { "Comment": {}, @@ -34692,14 +34750,14 @@ } } }, - "S21v": { + "S222": { "type": "structure", "members": { "S3Bucket": {}, "S3Key": {} } }, - "S222": { + "S229": { "type": "structure", "required": [ "Bytes", @@ -34720,7 +34778,7 @@ } } }, - "S223": { + "S22a": { "type": "structure", "required": [ "Size" @@ -34732,25 +34790,25 @@ } } }, - "S238": { + "S23f": { "type": "list", "member": { "locationName": "UserId" } }, - "S239": { + "S23g": { "type": "list", "member": { "locationName": "UserGroup" } }, - "S23a": { + "S23h": { "type": "list", "member": { "locationName": "ProductCode" } }, - "S23c": { + "S23j": { "type": "list", "member": { "locationName": "item", @@ -34761,14 +34819,14 @@ } } }, - "S23h": { + "S23o": { "type": "list", "member": { "shape": "S1h", "locationName": "item" } }, - "S23u": { + "S241": { "type": "structure", "members": { "CapacityReservationPreference": {}, @@ -34777,7 +34835,7 @@ } } }, - "S24j": { + "S24q": { "type": "list", "member": { "type": "structure", @@ -34786,7 +34844,7 @@ } } }, - "S277": { + "S27e": { "type": "structure", "members": { "AllowDnsResolutionFromRemoteVpc": { @@ -34800,7 +34858,7 @@ } } }, - "S279": { + "S27g": { "type": "structure", "members": { "AllowDnsResolutionFromRemoteVpc": { @@ -34817,7 +34875,7 @@ } } }, - "S27o": { + "S27v": { "type": "list", "member": { "locationName": "item", @@ -34833,13 +34891,13 @@ } } }, - "S2bf": { + "S2bm": { "type": "list", "member": { "locationName": "SecurityGroupId" } }, - "S2c3": { + "S2ca": { "type": "list", "member": { "locationName": "item", @@ -34859,7 +34917,7 @@ } } }, - "S2cr": { + "S2cy": { "type": "list", "member": { "locationName": "item", diff --git a/apis/ec2-2016-11-15.normal.json b/apis/ec2-2016-11-15.normal.json index 37b618b7f6..8e4ff58d1f 100644 --- a/apis/ec2-2016-11-15.normal.json +++ b/apis/ec2-2016-11-15.normal.json @@ -5228,6 +5228,20 @@ }, "documentation": "Disables access to the EC2 serial console of all instances for your account. By default, access to the EC2 serial console is disabled for your account. For more information, see Manage account access to the EC2 serial console in the Amazon EC2 User Guide.
" }, + "DisableSnapshotBlockPublicAccess": { + "name": "DisableSnapshotBlockPublicAccess", + "http": { + "method": "POST", + "requestUri": "/" + }, + "input": { + "shape": "DisableSnapshotBlockPublicAccessRequest" + }, + "output": { + "shape": "DisableSnapshotBlockPublicAccessResult" + }, + "documentation": "Disables the block public access for snapshots setting at the account level for the specified Amazon Web Services Region. After you disable block public access for snapshots in a Region, users can publicly share snapshots in that Region.
If block public access is enabled in block-all-sharing
mode, and you disable block public access, all snapshots that were previously publicly shared are no longer treated as private and they become publicly accessible again.
For more information, see Block public access for snapshots in the Amazon Elastic Compute Cloud User Guide .
" + }, "DisableTransitGatewayRouteTablePropagation": { "name": "DisableTransitGatewayRouteTablePropagation", "http": { @@ -5625,6 +5639,20 @@ }, "documentation": "Enables access to the EC2 serial console of all instances for your account. By default, access to the EC2 serial console is disabled for your account. For more information, see Manage account access to the EC2 serial console in the Amazon EC2 User Guide.
" }, + "EnableSnapshotBlockPublicAccess": { + "name": "EnableSnapshotBlockPublicAccess", + "http": { + "method": "POST", + "requestUri": "/" + }, + "input": { + "shape": "EnableSnapshotBlockPublicAccessRequest" + }, + "output": { + "shape": "EnableSnapshotBlockPublicAccessResult" + }, + "documentation": "Enables or modifies the block public access for snapshots setting at the account level for the specified Amazon Web Services Region. After you enable block public access for snapshots in a Region, users can no longer request public sharing for snapshots in that Region. Snapshots that are already publicly shared are either treated as private or they remain publicly shared, depending on the State that you specify.
If block public access is enabled in block-all-sharing
mode, and you change the mode to block-new-sharing
, all snapshots that were previously publicly shared are no longer treated as private and they become publicly accessible again.
For more information, see Block public access for snapshots in the Amazon Elastic Compute Cloud User Guide.
" + }, "EnableTransitGatewayRouteTablePropagation": { "name": "EnableTransitGatewayRouteTablePropagation", "http": { @@ -6179,6 +6207,20 @@ }, "documentation": "Retrieves the access status of your account to the EC2 serial console of all instances. By default, access to the EC2 serial console is disabled for your account. For more information, see Manage account access to the EC2 serial console in the Amazon EC2 User Guide.
" }, + "GetSnapshotBlockPublicAccessState": { + "name": "GetSnapshotBlockPublicAccessState", + "http": { + "method": "POST", + "requestUri": "/" + }, + "input": { + "shape": "GetSnapshotBlockPublicAccessStateRequest" + }, + "output": { + "shape": "GetSnapshotBlockPublicAccessStateResult" + }, + "documentation": "Gets the current state of block public access for snapshots setting for the account and Region.
For more information, see Block public access for snapshots in the Amazon Elastic Compute Cloud User Guide.
" + }, "GetSpotPlacementScores": { "name": "GetSpotPlacementScores", "http": { @@ -28192,6 +28234,25 @@ } } }, + "DisableSnapshotBlockPublicAccessRequest": { + "type": "structure", + "members": { + "DryRun": { + "shape": "Boolean", + "documentation": "Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation
. Otherwise, it is UnauthorizedOperation
.
Returns unblocked
if the request succeeds.
The mode in which to enable block public access for snapshots for the Region. Specify one of the following values:
block-all-sharing
- Prevents all public sharing of snapshots in the Region. Users in the account will no longer be able to request new public sharing. Additionally, snapshots that are already publicly shared are treated as private and they are no longer publicly available.
If you enable block public access for snapshots in block-all-sharing
mode, it does not change the permissions for snapshots that are already publicly shared. Instead, it prevents these snapshots from be publicly visible and publicly accessible. Therefore, the attributes for these snapshots still indicate that they are publicly shared, even though they are not publicly available.
block-new-sharing
- Prevents only new public sharing of snapshots in the Region. Users in the account will no longer be able to request new public sharing. However, snapshots that are already publicly shared, remain publicly available.
Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation
. Otherwise, it is UnauthorizedOperation
.
The state of block public access for snapshots for the account and Region. Returns either block-all-sharing
or block-new-sharing
if the request succeeds.
Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation
. Otherwise, it is UnauthorizedOperation
.
The current state of block public access for snapshots. Possible values include:
block-all-sharing
- All public sharing of snapshots is blocked. Users in the account can't request new public sharing. Additionally, snapshots that were already publicly shared are treated as private and are not publicly available.
block-new-sharing
- Only new public sharing of snapshots is blocked. Users in the account can't request new public sharing. However, snapshots that were already publicly shared, remain publicly available.
unblocked
- Public sharing is not blocked. Users can publicly share snapshots.
Creates an Amazon EKS control plane.
The Amazon EKS control plane consists of control plane instances that run the Kubernetes software, such as etcd
and the API server. The control plane runs in an account managed by Amazon Web Services, and the Kubernetes API is exposed by the Amazon EKS API server endpoint. Each Amazon EKS cluster control plane is single tenant and unique. It runs on its own set of Amazon EC2 instances.
The cluster control plane is provisioned across multiple Availability Zones and fronted by an Elastic Load Balancing Network Load Balancer. Amazon EKS also provisions elastic network interfaces in your VPC subnets to provide connectivity from the control plane instances to the nodes (for example, to support kubectl exec
, logs
, and proxy
data flows).
Amazon EKS nodes run in your Amazon Web Services account and connect to your cluster's control plane over the Kubernetes API server endpoint and a certificate file that is created for your cluster.
In most cases, it takes several minutes to create a cluster. After you create an Amazon EKS cluster, you must configure your Kubernetes tooling to communicate with the API server and launch nodes into your cluster. For more information, see Managing Cluster Authentication and Launching Amazon EKS nodes in the Amazon EKS User Guide.
" }, + "CreateEksAnywhereSubscription": { + "name": "CreateEksAnywhereSubscription", + "http": { + "method": "POST", + "requestUri": "/eks-anywhere-subscriptions" + }, + "input": { + "shape": "CreateEksAnywhereSubscriptionRequest" + }, + "output": { + "shape": "CreateEksAnywhereSubscriptionResponse" + }, + "errors": [ + { + "shape": "ResourceLimitExceededException" + }, + { + "shape": "InvalidParameterException" + }, + { + "shape": "ClientException" + }, + { + "shape": "ServerException" + }, + { + "shape": "ServiceUnavailableException" + } + ], + "documentation": "Creates an EKS Anywhere subscription. When a subscription is created, it is a contract agreement for the length of the term specified in the request. Licenses that are used to validate support are provisioned in Amazon Web Services License Manager and the caller account is granted access to EKS Anywhere Curated Packages.
" + }, "CreateFargateProfile": { "name": "CreateFargateProfile", "http": { @@ -184,7 +215,7 @@ "shape": "UnsupportedAvailabilityZoneException" } ], - "documentation": "Creates an Fargate profile for your Amazon EKS cluster. You must have at least one Fargate profile in a cluster to be able to run pods on Fargate.
The Fargate profile allows an administrator to declare which pods run on Fargate and specify which pods run on which Fargate profile. This declaration is done through the profile’s selectors. Each profile can have up to five selectors that contain a namespace and labels. A namespace is required for every selector. The label field consists of multiple optional key-value pairs. Pods that match the selectors are scheduled on Fargate. If a to-be-scheduled pod matches any of the selectors in the Fargate profile, then that pod is run on Fargate.
When you create a Fargate profile, you must specify a pod execution role to use with the pods that are scheduled with the profile. This role is added to the cluster's Kubernetes Role Based Access Control (RBAC) for authorization so that the kubelet
that is running on the Fargate infrastructure can register with your Amazon EKS cluster so that it can appear in your cluster as a node. The pod execution role also provides IAM permissions to the Fargate infrastructure to allow read access to Amazon ECR image repositories. For more information, see Pod Execution Role in the Amazon EKS User Guide.
Fargate profiles are immutable. However, you can create a new updated profile to replace an existing profile and then delete the original after the updated profile has finished creating.
If any Fargate profiles in a cluster are in the DELETING
status, you must wait for that Fargate profile to finish deleting before you can create any other profiles in that cluster.
For more information, see Fargate Profile in the Amazon EKS User Guide.
" + "documentation": "Creates an Fargate profile for your Amazon EKS cluster. You must have at least one Fargate profile in a cluster to be able to run pods on Fargate.
The Fargate profile allows an administrator to declare which pods run on Fargate and specify which pods run on which Fargate profile. This declaration is done through the profile’s selectors. Each profile can have up to five selectors that contain a namespace and labels. A namespace is required for every selector. The label field consists of multiple optional key-value pairs. Pods that match the selectors are scheduled on Fargate. If a to-be-scheduled pod matches any of the selectors in the Fargate profile, then that pod is run on Fargate.
When you create a Fargate profile, you must specify a pod execution role to use with the pods that are scheduled with the profile. This role is added to the cluster's Kubernetes Role Based Access Control (RBAC) for authorization so that the kubelet
that is running on the Fargate infrastructure can register with your Amazon EKS cluster so that it can appear in your cluster as a node. The pod execution role also provides IAM permissions to the Fargate infrastructure to allow read access to Amazon ECR image repositories. For more information, see Pod Execution Role in the Amazon EKS User Guide.
Fargate profiles are immutable. However, you can create a new updated profile to replace an existing profile and then delete the original after the updated profile has finished creating.
If any Fargate profiles in a cluster are in the DELETING
status, you must wait for that Fargate profile to finish deleting before you can create any other profiles in that cluster.
For more information, see Fargate Profile in the Amazon EKS User Guide.
" }, "CreateNodegroup": { "name": "CreateNodegroup", @@ -221,7 +252,7 @@ "shape": "ServiceUnavailableException" } ], - "documentation": "Creates a managed node group for an Amazon EKS cluster. You can only create a node group for your cluster that is equal to the current Kubernetes version for the cluster. All node groups are created with the latest AMI release version for the respective minor Kubernetes version of the cluster, unless you deploy a custom AMI using a launch template. For more information about using launch templates, see Launch template support.
An Amazon EKS managed node group is an Amazon EC2 Auto Scaling group and associated Amazon EC2 instances that are managed by Amazon Web Services for an Amazon EKS cluster. For more information, see Managed node groups in the Amazon EKS User Guide.
Windows AMI types are only supported for commercial Regions that support Windows Amazon EKS.
Creates a managed node group for an Amazon EKS cluster. You can only create a node group for your cluster that is equal to the current Kubernetes version for the cluster.
An Amazon EKS managed node group is an Amazon EC2 Auto Scaling group and associated Amazon EC2 instances that are managed by Amazon Web Services for an Amazon EKS cluster. For more information, see Managed node groups in the Amazon EKS User Guide.
Windows AMI types are only supported for commercial Regions that support Windows Amazon EKS.
Deletes the Amazon EKS cluster control plane.
If you have active services in your cluster that are associated with a load balancer, you must delete those services before deleting the cluster so that the load balancers are deleted properly. Otherwise, you can have orphaned resources in your VPC that prevent you from being able to delete the VPC. For more information, see Deleting a Cluster in the Amazon EKS User Guide.
If you have managed node groups or Fargate profiles attached to the cluster, you must delete them first. For more information, see DeleteNodegroup and DeleteFargateProfile.
" }, + "DeleteEksAnywhereSubscription": { + "name": "DeleteEksAnywhereSubscription", + "http": { + "method": "DELETE", + "requestUri": "/eks-anywhere-subscriptions/{id}" + }, + "input": { + "shape": "DeleteEksAnywhereSubscriptionRequest" + }, + "output": { + "shape": "DeleteEksAnywhereSubscriptionResponse" + }, + "errors": [ + { + "shape": "ResourceNotFoundException" + }, + { + "shape": "ClientException" + }, + { + "shape": "InvalidRequestException" + }, + { + "shape": "ServerException" + } + ], + "documentation": "Deletes an expired / inactive subscription. Deleting inactive subscriptions removes them from the Amazon Web Services Management Console view and from list/describe API responses. Subscriptions can only be cancelled within 7 days of creation, and are cancelled by creating a ticket in the Amazon Web Services Support Center.
" + }, "DeleteFargateProfile": { "name": "DeleteFargateProfile", "http": { @@ -490,6 +549,34 @@ ], "documentation": "Returns descriptive information about an Amazon EKS cluster.
The API server endpoint and certificate authority data returned by this operation are required for kubelet
and kubectl
to communicate with your Kubernetes API server. For more information, see Create a kubeconfig for Amazon EKS.
The API server endpoint and certificate authority data aren't available until the cluster reaches the ACTIVE
state.
Returns descriptive information about a subscription.
" + }, "DescribeFargateProfile": { "name": "DescribeFargateProfile", "http": { @@ -640,7 +727,7 @@ "shape": "InvalidRequestException" } ], - "documentation": "Disassociates an identity provider configuration from a cluster. If you disassociate an identity provider from your cluster, users included in the provider can no longer access the cluster. However, you can still access the cluster with Amazon Web Services IAM users.
" + "documentation": "Disassociates an identity provider configuration from a cluster. If you disassociate an identity provider from your cluster, users included in the provider can no longer access the cluster. However, you can still access the cluster with IAM principals.
" }, "ListAddons": { "name": "ListAddons", @@ -671,7 +758,7 @@ "shape": "ServerException" } ], - "documentation": "Lists the available add-ons.
" + "documentation": "Lists the installed add-ons.
" }, "ListClusters": { "name": "ListClusters", @@ -701,6 +788,34 @@ ], "documentation": "Lists the Amazon EKS clusters in your Amazon Web Services account in the specified Region.
" }, + "ListEksAnywhereSubscriptions": { + "name": "ListEksAnywhereSubscriptions", + "http": { + "method": "GET", + "requestUri": "/eks-anywhere-subscriptions" + }, + "input": { + "shape": "ListEksAnywhereSubscriptionsRequest" + }, + "output": { + "shape": "ListEksAnywhereSubscriptionsResponse" + }, + "errors": [ + { + "shape": "InvalidParameterException" + }, + { + "shape": "ClientException" + }, + { + "shape": "ServerException" + }, + { + "shape": "ServiceUnavailableException" + } + ], + "documentation": "Displays the full description of the subscription.
" + }, "ListFargateProfiles": { "name": "ListFargateProfiles", "http": { @@ -1027,6 +1142,37 @@ ], "documentation": "Updates an Amazon EKS cluster to the specified Kubernetes version. Your cluster continues to function during the update. The response output includes an update ID that you can use to track the status of your cluster update with the DescribeUpdate API operation.
Cluster updates are asynchronous, and they should finish within a few minutes. During an update, the cluster status moves to UPDATING
(this status transition is eventually consistent). When the update is complete (either Failed
or Successful
), the cluster status moves to Active
.
If your cluster has managed node groups attached to it, all of your node groups’ Kubernetes versions must match the cluster’s Kubernetes version in order to update the cluster to a new Kubernetes version.
" }, + "UpdateEksAnywhereSubscription": { + "name": "UpdateEksAnywhereSubscription", + "http": { + "method": "POST", + "requestUri": "/eks-anywhere-subscriptions/{id}" + }, + "input": { + "shape": "UpdateEksAnywhereSubscriptionRequest" + }, + "output": { + "shape": "UpdateEksAnywhereSubscriptionResponse" + }, + "errors": [ + { + "shape": "InvalidParameterException" + }, + { + "shape": "ClientException" + }, + { + "shape": "ServerException" + }, + { + "shape": "ResourceNotFoundException" + }, + { + "shape": "InvalidRequestException" + } + ], + "documentation": "Update an EKS Anywhere Subscription. Only auto renewal and tags can be updated after subscription creation.
" + }, "UpdateNodegroupConfig": { "name": "UpdateNodegroupConfig", "http": { @@ -1672,7 +1818,7 @@ "documentation": "The name of the placement group for the Kubernetes control plane instances. This setting can't be changed after cluster creation.
" } }, - "documentation": "The placement configuration for all the control plane instances of your local Amazon EKS cluster on an Amazon Web Services Outpost. For more information, see Capacity considerations in the Amazon EKS User Guide
" + "documentation": "The placement configuration for all the control plane instances of your local Amazon EKS cluster on an Amazon Web Services Outpost. For more information, see Capacity considerations in the Amazon EKS User Guide.
" }, "ControlPlanePlacementResponse": { "type": "structure", @@ -1711,7 +1857,7 @@ }, "resolveConflicts": { "shape": "ResolveConflicts", - "documentation": "How to resolve field value conflicts for an Amazon EKS add-on. Conflicts are handled based on the value you choose:
None – If the self-managed version of the add-on is installed on your cluster, Amazon EKS doesn't change the value. Creation of the add-on might fail.
Overwrite – If the self-managed version of the add-on is installed on your cluster and the Amazon EKS default value is different than the existing value, Amazon EKS changes the value to the Amazon EKS default value.
Preserve – Not supported. You can set this value when updating an add-on though. For more information, see UpdateAddon.
If you don't currently have the self-managed version of the add-on installed on your cluster, the Amazon EKS add-on is installed. Amazon EKS sets all values to default values, regardless of the option that you specify.
" + "documentation": "How to resolve field value conflicts for an Amazon EKS add-on. Conflicts are handled based on the value you choose:
None – If the self-managed version of the add-on is installed on your cluster, Amazon EKS doesn't change the value. Creation of the add-on might fail.
Overwrite – If the self-managed version of the add-on is installed on your cluster and the Amazon EKS default value is different than the existing value, Amazon EKS changes the value to the Amazon EKS default value.
Preserve – This is similar to the NONE option. If the self-managed version of the add-on is installed on your cluster Amazon EKS doesn't change the add-on resource properties. Creation of the add-on might fail if conflicts are detected. This option works differently during the update operation. For more information, see UpdateAddon.
If you don't currently have the self-managed version of the add-on installed on your cluster, the Amazon EKS add-on is installed. Amazon EKS sets all values to default values, regardless of the option that you specify.
" }, "clientRequestToken": { "shape": "String", @@ -1796,6 +1942,53 @@ } } }, + "CreateEksAnywhereSubscriptionRequest": { + "type": "structure", + "required": [ + "name", + "term" + ], + "members": { + "name": { + "shape": "EksAnywhereSubscriptionName", + "documentation": "The unique name for your subscription. It must be unique in your Amazon Web Services account in the Amazon Web Services Region you're creating the subscription in. The name can contain only alphanumeric characters (case-sensitive), hyphens, and underscores. It must start with an alphabetic character and can't be longer than 100 characters.
" + }, + "term": { + "shape": "EksAnywhereSubscriptionTerm", + "documentation": "An object representing the term duration and term unit type of your subscription. This determines the term length of your subscription. Valid values are MONTHS for term unit and 12 or 36 for term duration, indicating a 12 month or 36 month subscription. This value cannot be changed after creating the subscription.
" + }, + "licenseQuantity": { + "shape": "Integer", + "documentation": "The number of licenses to purchase with the subscription. Valid values are between 1 and 1000. This value cannot be changed after creating the subscription.
" + }, + "licenseType": { + "shape": "EksAnywhereSubscriptionLicenseType", + "documentation": "The license type for all licenses in the subscription. Valid value is CLUSTER. With the CLUSTER license type, each license covers support for a single EKS Anywhere cluster.
" + }, + "autoRenew": { + "shape": "Boolean", + "documentation": "A boolean indicating whether the subscription auto renews at the end of the term.
" + }, + "clientRequestToken": { + "shape": "String", + "documentation": "Unique, case-sensitive identifier that you provide to ensure the idempotency of the request.
", + "idempotencyToken": true + }, + "tags": { + "shape": "TagMap", + "documentation": "The metadata for a subscription to assist with categorization and organization. Each tag consists of a key and an optional value. Subscription tags do not propagate to any other resources associated with the subscription.
" + } + } + }, + "CreateEksAnywhereSubscriptionResponse": { + "type": "structure", + "members": { + "subscription": { + "shape": "EksAnywhereSubscription", + "documentation": "The full description of the subscription.
" + } + } + }, "CreateFargateProfileRequest": { "type": "structure", "required": [ @@ -1999,6 +2192,29 @@ } } }, + "DeleteEksAnywhereSubscriptionRequest": { + "type": "structure", + "required": [ + "id" + ], + "members": { + "id": { + "shape": "String", + "documentation": "The ID of the subscription.
", + "location": "uri", + "locationName": "id" + } + } + }, + "DeleteEksAnywhereSubscriptionResponse": { + "type": "structure", + "members": { + "subscription": { + "shape": "EksAnywhereSubscription", + "documentation": "The full description of the subscription to be deleted.
" + } + } + }, "DeleteFargateProfileRequest": { "type": "structure", "required": [ @@ -2237,6 +2453,29 @@ } } }, + "DescribeEksAnywhereSubscriptionRequest": { + "type": "structure", + "required": [ + "id" + ], + "members": { + "id": { + "shape": "String", + "documentation": "The ID of the subscription.
", + "location": "uri", + "locationName": "id" + } + } + }, + "DescribeEksAnywhereSubscriptionResponse": { + "type": "structure", + "members": { + "subscription": { + "shape": "EksAnywhereSubscription", + "documentation": "The full description of the subscription.
" + } + } + }, "DescribeFargateProfileRequest": { "type": "structure", "required": [ @@ -2399,6 +2638,115 @@ } } }, + "EksAnywhereSubscription": { + "type": "structure", + "members": { + "id": { + "shape": "String", + "documentation": "UUID identifying a subscription.
" + }, + "arn": { + "shape": "String", + "documentation": "The Amazon Resource Name (ARN) for the subscription.
" + }, + "createdAt": { + "shape": "Timestamp", + "documentation": "The Unix timestamp in seconds for when the subscription was created.
" + }, + "effectiveDate": { + "shape": "Timestamp", + "documentation": "The Unix timestamp in seconds for when the subscription is effective.
" + }, + "expirationDate": { + "shape": "Timestamp", + "documentation": "The Unix timestamp in seconds for when the subscription will expire or auto renew, depending on the auto renew configuration of the subscription object.
" + }, + "licenseQuantity": { + "shape": "Integer", + "documentation": "The number of licenses included in a subscription. Valid values are between 1 and 1000.
" + }, + "licenseType": { + "shape": "EksAnywhereSubscriptionLicenseType", + "documentation": "The type of licenses included in the subscription. Valid value is CLUSTER. With the CLUSTER license type, each license covers support for a single EKS Anywhere cluster.
" + }, + "term": { + "shape": "EksAnywhereSubscriptionTerm", + "documentation": "An EksAnywhereSubscriptionTerm object.
" + }, + "status": { + "shape": "String", + "documentation": "The status of a subscription.
" + }, + "autoRenew": { + "shape": "Boolean", + "documentation": "A boolean indicating whether or not a subscription will auto renew when it expires.
" + }, + "licenseArns": { + "shape": "StringList", + "documentation": "License Manager License ARNs associated with the subscription.
" + }, + "tags": { + "shape": "TagMap", + "documentation": "The metadata for a subscription to assist with categorization and organization. Each tag consists of a key and an optional value. Subscription tags do not propagate to any other resources associated with the subscription.
" + } + }, + "documentation": "An EKS Anywhere subscription authorizing the customer to support for licensed clusters and access to EKS Anywhere Curated Packages.
" + }, + "EksAnywhereSubscriptionLicenseType": { + "type": "string", + "enum": [ + "Cluster" + ] + }, + "EksAnywhereSubscriptionList": { + "type": "list", + "member": { + "shape": "EksAnywhereSubscription" + } + }, + "EksAnywhereSubscriptionName": { + "type": "string", + "max": 100, + "min": 1, + "pattern": "^[0-9A-Za-z][A-Za-z0-9\\-_]*" + }, + "EksAnywhereSubscriptionStatus": { + "type": "string", + "enum": [ + "CREATING", + "ACTIVE", + "UPDATING", + "EXPIRING", + "EXPIRED", + "DELETING" + ] + }, + "EksAnywhereSubscriptionStatusValues": { + "type": "list", + "member": { + "shape": "EksAnywhereSubscriptionStatus" + } + }, + "EksAnywhereSubscriptionTerm": { + "type": "structure", + "members": { + "duration": { + "shape": "Integer", + "documentation": "The duration of the subscription term. Valid values are 12 and 36, indicating a 12 month or 36 month subscription.
" + }, + "unit": { + "shape": "EksAnywhereSubscriptionTermUnit", + "documentation": "The term unit of the subscription. Valid value is MONTHS.
" + } + }, + "documentation": "An object representing the term duration and term unit type of your subscription. This determines the term length of your subscription. Valid values are MONTHS for term unit and 12 or 36 for term duration, indicating a 12 month or 36 month subscription.
" + }, + "EksAnywhereSubscriptionTermUnit": { + "type": "string", + "enum": [ + "MONTHS" + ] + }, "EncryptionConfig": { "type": "structure", "members": { @@ -2603,6 +2951,9 @@ "shape": "String" } }, + "Integer": { + "type": "integer" + }, "IpFamily": { "type": "string", "enum": [ @@ -2721,7 +3072,7 @@ "members": { "addons": { "shape": "StringList", - "documentation": "A list of available add-ons.
" + "documentation": "A list of installed add-ons.
" }, "nextToken": { "shape": "String", @@ -2771,6 +3122,48 @@ } } }, + "ListEksAnywhereSubscriptionsRequest": { + "type": "structure", + "members": { + "maxResults": { + "shape": "ListEksAnywhereSubscriptionsRequestMaxResults", + "documentation": "The maximum number of cluster results returned by ListEksAnywhereSubscriptions in paginated output. When you use this parameter, ListEksAnywhereSubscriptions returns only maxResults results in a single page along with a nextToken response element. You can see the remaining results of the initial request by sending another ListEksAnywhereSubscriptions request with the returned nextToken value. This value can be between 1 and 100. If you don't use this parameter, ListEksAnywhereSubscriptions returns up to 10 results and a nextToken value if applicable.
", + "location": "querystring", + "locationName": "maxResults" + }, + "nextToken": { + "shape": "String", + "documentation": "The nextToken value to include in a future ListEksAnywhereSubscriptions request. When the results of a ListEksAnywhereSubscriptions request exceed maxResults, you can use this value to retrieve the next page of results. This value is null when there are no more results to return.
", + "location": "querystring", + "locationName": "nextToken" + }, + "includeStatus": { + "shape": "EksAnywhereSubscriptionStatusValues", + "documentation": "An array of subscription statuses to filter on.
", + "location": "querystring", + "locationName": "includeStatus" + } + } + }, + "ListEksAnywhereSubscriptionsRequestMaxResults": { + "type": "integer", + "box": true, + "max": 100, + "min": 1 + }, + "ListEksAnywhereSubscriptionsResponse": { + "type": "structure", + "members": { + "subscriptions": { + "shape": "EksAnywhereSubscriptionList", + "documentation": "A list of all subscription objects in the region, filtered by includeStatus and paginated by nextToken and maxResults.
" + }, + "nextToken": { + "shape": "String", + "documentation": "The nextToken value to include in a future ListEksAnywhereSubscriptions request. When the results of a ListEksAnywhereSubscriptions request exceed maxResults, you can use this value to retrieve the next page of results. This value is null when there are no more results to return.
" + } + } + }, "ListFargateProfilesRequest": { "type": "structure", "required": [ @@ -3411,7 +3804,7 @@ "members": { "keyArn": { "shape": "String", - "documentation": "Amazon Resource Name (ARN) or alias of the KMS key. The KMS key must be symmetric, created in the same region as the cluster, and if the KMS key was created in a different account, the user must have access to the KMS key. For more information, see Allowing Users in Other Accounts to Use a KMS key in the Key Management Service Developer Guide.
" + "documentation": "Amazon Resource Name (ARN) or alias of the KMS key. The KMS key must be symmetric and created in the same Amazon Web Services Region as the cluster. If the KMS key was created in a different account, the IAM principal must have access to the KMS key. For more information, see Allowing users in other accounts to use a KMS key in the Key Management Service Developer Guide.
" } }, "documentation": "Identifies the Key Management Service (KMS) key used to encrypt the secrets.
" @@ -3738,6 +4131,39 @@ } } }, + "UpdateEksAnywhereSubscriptionRequest": { + "type": "structure", + "required": [ + "id", + "autoRenew" + ], + "members": { + "id": { + "shape": "String", + "documentation": "", + "location": "uri", + "locationName": "id" + }, + "autoRenew": { + "shape": "Boolean", + "documentation": "A boolean indicating whether or not to automatically renew the subscription.
" + }, + "clientRequestToken": { + "shape": "String", + "documentation": "Unique, case-sensitive identifier to ensure the idempotency of the request.
", + "idempotencyToken": true + } + } + }, + "UpdateEksAnywhereSubscriptionResponse": { + "type": "structure", + "members": { + "subscription": { + "shape": "EksAnywhereSubscription", + "documentation": "The full description of the updated subscription.
" + } + } + }, "UpdateLabelsPayload": { "type": "structure", "members": { diff --git a/apis/lambda-2015-03-31.normal.json b/apis/lambda-2015-03-31.normal.json index 13b8c58499..1b9f2f6dce 100644 --- a/apis/lambda-2015-03-31.normal.json +++ b/apis/lambda-2015-03-31.normal.json @@ -5996,7 +5996,8 @@ "java17", "ruby3.2", "python3.11", - "nodejs20.x" + "nodejs20.x", + "provided.al2023" ] }, "RuntimeVersionArn": { diff --git a/apis/logs-2014-03-28.min.json b/apis/logs-2014-03-28.min.json index e93c79037a..7d2fae8950 100644 --- a/apis/logs-2014-03-28.min.json +++ b/apis/logs-2014-03-28.min.json @@ -36,6 +36,30 @@ } } }, + "CreateDelivery": { + "input": { + "type": "structure", + "required": [ + "deliverySourceName", + "deliveryDestinationArn" + ], + "members": { + "deliverySourceName": {}, + "deliveryDestinationArn": {}, + "tags": { + "shape": "Sa" + } + } + }, + "output": { + "type": "structure", + "members": { + "delivery": { + "shape": "Se" + } + } + } + }, "CreateExportTask": { "input": { "type": "structure", @@ -76,7 +100,7 @@ "logGroupName": {}, "kmsKeyId": {}, "tags": { - "shape": "Sf" + "shape": "Sa" } } } @@ -118,6 +142,50 @@ } } }, + "DeleteDelivery": { + "input": { + "type": "structure", + "required": [ + "id" + ], + "members": { + "id": {} + } + } + }, + "DeleteDeliveryDestination": { + "input": { + "type": "structure", + "required": [ + "name" + ], + "members": { + "name": {} + } + } + }, + "DeleteDeliveryDestinationPolicy": { + "input": { + "type": "structure", + "required": [ + "deliveryDestinationName" + ], + "members": { + "deliveryDestinationName": {} + } + } + }, + "DeleteDeliverySource": { + "input": { + "type": "structure", + "required": [ + "name" + ], + "members": { + "name": {} + } + } + }, "DeleteDestination": { "input": { "type": "structure", @@ -227,7 +295,7 @@ "policyType": {}, "policyName": {}, "accountIdentifiers": { - "shape": "S12" + "shape": "S1e" } } }, @@ -237,12 +305,81 @@ "accountPolicies": { "type": "list", "member": { - "shape": "S16" + "shape": "S1i" } } } } }, + "DescribeDeliveries": { + "input": { + "type": "structure", + "members": { + "nextToken": {}, + "limit": { + "type": "integer" + } + } + }, + "output": { + "type": "structure", + "members": { + "deliveries": { + "type": "list", + "member": { + "shape": "Se" + } + }, + "nextToken": {} + } + } + }, + "DescribeDeliveryDestinations": { + "input": { + "type": "structure", + "members": { + "nextToken": {}, + "limit": { + "type": "integer" + } + } + }, + "output": { + "type": "structure", + "members": { + "deliveryDestinations": { + "type": "list", + "member": { + "shape": "S1t" + } + }, + "nextToken": {} + } + } + }, + "DescribeDeliverySources": { + "input": { + "type": "structure", + "members": { + "nextToken": {}, + "limit": { + "type": "integer" + } + } + }, + "output": { + "type": "structure", + "members": { + "deliverySources": { + "type": "list", + "member": { + "shape": "S1z" + } + }, + "nextToken": {} + } + } + }, "DescribeDestinations": { "input": { "type": "structure", @@ -260,7 +397,7 @@ "destinations": { "type": "list", "member": { - "shape": "S1e" + "shape": "S26" } }, "nextToken": {} @@ -328,7 +465,7 @@ "type": "structure", "members": { "accountIdentifiers": { - "shape": "S12" + "shape": "S1e" }, "logGroupNamePrefix": {}, "logGroupNamePattern": {}, @@ -453,7 +590,7 @@ "filterName": {}, "filterPattern": {}, "metricTransformations": { - "shape": "S2h" + "shape": "S38" }, "creationTime": { "type": "long" @@ -526,7 +663,7 @@ "type": "long" }, "logGroupNames": { - "shape": "S33" + "shape": "S3u" } } } @@ -551,7 +688,7 @@ "resourcePolicies": { "type": "list", "member": { - "shape": "S37" + "shape": "S3y" } }, "nextToken": {} @@ -695,6 +832,82 @@ } } }, + "GetDelivery": { + "input": { + "type": "structure", + "required": [ + "id" + ], + "members": { + "id": {} + } + }, + "output": { + "type": "structure", + "members": { + "delivery": { + "shape": "Se" + } + } + } + }, + "GetDeliveryDestination": { + "input": { + "type": "structure", + "required": [ + "name" + ], + "members": { + "name": {} + } + }, + "output": { + "type": "structure", + "members": { + "deliveryDestination": { + "shape": "S1t" + } + } + } + }, + "GetDeliveryDestinationPolicy": { + "input": { + "type": "structure", + "required": [ + "deliveryDestinationName" + ], + "members": { + "deliveryDestinationName": {} + } + }, + "output": { + "type": "structure", + "members": { + "policy": { + "shape": "S4t" + } + } + } + }, + "GetDeliverySource": { + "input": { + "type": "structure", + "required": [ + "name" + ], + "members": { + "name": {} + } + }, + "output": { + "type": "structure", + "members": { + "deliverySource": { + "shape": "S1z" + } + } + } + }, "GetLogEvents": { "input": { "type": "structure", @@ -858,7 +1071,7 @@ "type": "structure", "members": { "tags": { - "shape": "Sf" + "shape": "Sa" } } } @@ -879,7 +1092,7 @@ "type": "structure", "members": { "tags": { - "shape": "Sf" + "shape": "Sa" } }, "deprecated": true, @@ -907,7 +1120,7 @@ "type": "structure", "members": { "accountPolicy": { - "shape": "S16" + "shape": "S1i" } } } @@ -935,6 +1148,80 @@ } } }, + "PutDeliveryDestination": { + "input": { + "type": "structure", + "required": [ + "name", + "deliveryDestinationConfiguration" + ], + "members": { + "name": {}, + "outputFormat": {}, + "deliveryDestinationConfiguration": { + "shape": "S1v" + }, + "tags": { + "shape": "Sa" + } + } + }, + "output": { + "type": "structure", + "members": { + "deliveryDestination": { + "shape": "S1t" + } + } + } + }, + "PutDeliveryDestinationPolicy": { + "input": { + "type": "structure", + "required": [ + "deliveryDestinationName", + "deliveryDestinationPolicy" + ], + "members": { + "deliveryDestinationName": {}, + "deliveryDestinationPolicy": {} + } + }, + "output": { + "type": "structure", + "members": { + "policy": { + "shape": "S4t" + } + } + } + }, + "PutDeliverySource": { + "input": { + "type": "structure", + "required": [ + "name", + "resourceArn", + "logType" + ], + "members": { + "name": {}, + "resourceArn": {}, + "logType": {}, + "tags": { + "shape": "Sa" + } + } + }, + "output": { + "type": "structure", + "members": { + "deliverySource": { + "shape": "S1z" + } + } + } + }, "PutDestination": { "input": { "type": "structure", @@ -948,7 +1235,7 @@ "targetArn": {}, "roleArn": {}, "tags": { - "shape": "Sf" + "shape": "Sa" } } }, @@ -956,7 +1243,7 @@ "type": "structure", "members": { "destination": { - "shape": "S1e" + "shape": "S26" } } } @@ -1042,7 +1329,7 @@ "filterName": {}, "filterPattern": {}, "metricTransformations": { - "shape": "S2h" + "shape": "S38" } } } @@ -1058,7 +1345,7 @@ "name": {}, "queryDefinitionId": {}, "logGroupNames": { - "shape": "S33" + "shape": "S3u" }, "queryString": {}, "clientToken": { @@ -1085,7 +1372,7 @@ "type": "structure", "members": { "resourcePolicy": { - "shape": "S37" + "shape": "S3y" } } } @@ -1135,7 +1422,7 @@ "members": { "logGroupName": {}, "logGroupNames": { - "shape": "S33" + "shape": "S3u" }, "logGroupIdentifiers": { "type": "list", @@ -1189,7 +1476,7 @@ "members": { "logGroupName": {}, "tags": { - "shape": "Sf" + "shape": "Sa" } }, "deprecated": true, @@ -1208,7 +1495,7 @@ "members": { "resourceArn": {}, "tags": { - "shape": "Sf" + "shape": "Sa" } } } @@ -1289,16 +1576,29 @@ } }, "shapes": { - "Sf": { + "Sa": { "type": "map", "key": {}, "value": {} }, - "S12": { + "Se": { + "type": "structure", + "members": { + "id": {}, + "arn": {}, + "deliverySourceName": {}, + "deliveryDestinationArn": {}, + "deliveryDestinationType": {}, + "tags": { + "shape": "Sa" + } + } + }, + "S1e": { "type": "list", "member": {} }, - "S16": { + "S1i": { "type": "structure", "members": { "policyName": {}, @@ -1311,7 +1611,47 @@ "accountId": {} } }, - "S1e": { + "S1t": { + "type": "structure", + "members": { + "name": {}, + "arn": {}, + "deliveryDestinationType": {}, + "outputFormat": {}, + "deliveryDestinationConfiguration": { + "shape": "S1v" + }, + "tags": { + "shape": "Sa" + } + } + }, + "S1v": { + "type": "structure", + "required": [ + "destinationResourceArn" + ], + "members": { + "destinationResourceArn": {} + } + }, + "S1z": { + "type": "structure", + "members": { + "name": {}, + "arn": {}, + "resourceArns": { + "type": "list", + "member": {} + }, + "service": {}, + "logType": {}, + "tags": { + "shape": "Sa" + } + } + }, + "S26": { "type": "structure", "members": { "destinationName": {}, @@ -1324,7 +1664,7 @@ } } }, - "S2h": { + "S38": { "type": "list", "member": { "type": "structure", @@ -1349,11 +1689,11 @@ } } }, - "S33": { + "S3u": { "type": "list", "member": {} }, - "S37": { + "S3y": { "type": "structure", "members": { "policyName": {}, @@ -1362,6 +1702,12 @@ "type": "long" } } + }, + "S4t": { + "type": "structure", + "members": { + "deliveryDestinationPolicy": {} + } } } } \ No newline at end of file diff --git a/apis/logs-2014-03-28.normal.json b/apis/logs-2014-03-28.normal.json index 428a679cc2..f3820c293e 100644 --- a/apis/logs-2014-03-28.normal.json +++ b/apis/logs-2014-03-28.normal.json @@ -62,6 +62,43 @@ ], "documentation": "Cancels the specified export task.
The task must be in the PENDING
or RUNNING
state.
Creates a delivery. A delivery is a connection between a logical delivery source and a logical delivery destination that you have already created.
Only some Amazon Web Services services support being configured as a delivery source using this operation. These services are listed as Supported [V2 Permissions] in the table at Enabling logging from Amazon Web Services services.
A delivery destination can represent a log group in CloudWatch Logs, an Amazon S3 bucket, or a delivery stream in Kinesis Data Firehose.
To configure logs delivery between a supported Amazon Web Services service and a destination, you must do the following:
Create a delivery source, which is a logical object that represents the resource that is actually sending the logs. For more information, see PutDeliverySource.
Create a delivery destination, which is a logical object that represents the actual delivery destination. For more information, see PutDeliveryDestination.
If you are delivering logs cross-account, you must use PutDeliveryDestinationPolicy in the destination account to assign an IAM policy to the destination. This policy allows delivery to that destination.
Use CreateDelivery
to create a delivery by pairing exactly one delivery source and one delivery destination.
You can configure a single delivery source to send logs to multiple destinations by creating multiple deliveries. You can also create multiple deliveries to configure multiple delivery sources to send logs to the same delivery destination.
You can't update an existing delivery. You can only create and delete deliveries.
" + }, "CreateExportTask": { "name": "CreateExportTask", "http": { @@ -199,6 +236,124 @@ ], "documentation": "Deletes the data protection policy from the specified log group.
For more information about data protection policies, see PutDataProtectionPolicy.
" }, + "DeleteDelivery": { + "name": "DeleteDelivery", + "http": { + "method": "POST", + "requestUri": "/" + }, + "input": { + "shape": "DeleteDeliveryRequest" + }, + "errors": [ + { + "shape": "ResourceNotFoundException" + }, + { + "shape": "ServiceUnavailableException" + }, + { + "shape": "ConflictException" + }, + { + "shape": "ValidationException" + }, + { + "shape": "ServiceQuotaExceededException" + }, + { + "shape": "ThrottlingException" + } + ], + "documentation": "Deletes s delivery. A delivery is a connection between a logical delivery source and a logical delivery destination. Deleting a delivery only deletes the connection between the delivery source and delivery destination. It does not delete the delivery destination or the delivery source.
" + }, + "DeleteDeliveryDestination": { + "name": "DeleteDeliveryDestination", + "http": { + "method": "POST", + "requestUri": "/" + }, + "input": { + "shape": "DeleteDeliveryDestinationRequest" + }, + "errors": [ + { + "shape": "ResourceNotFoundException" + }, + { + "shape": "ServiceUnavailableException" + }, + { + "shape": "ConflictException" + }, + { + "shape": "ValidationException" + }, + { + "shape": "ServiceQuotaExceededException" + }, + { + "shape": "ThrottlingException" + } + ], + "documentation": "Deletes a delivery destination. A delivery is a connection between a logical delivery source and a logical delivery destination.
You can't delete a delivery destination if any current deliveries are associated with it. To find whether any deliveries are associated with this delivery destination, use the DescribeDeliveries operation and check the deliveryDestinationArn
field in the results.
Deletes a delivery destination policy. For more information about these policies, see PutDeliveryDestinationPolicy.
" + }, + "DeleteDeliverySource": { + "name": "DeleteDeliverySource", + "http": { + "method": "POST", + "requestUri": "/" + }, + "input": { + "shape": "DeleteDeliverySourceRequest" + }, + "errors": [ + { + "shape": "ResourceNotFoundException" + }, + { + "shape": "ServiceUnavailableException" + }, + { + "shape": "ConflictException" + }, + { + "shape": "ValidationException" + }, + { + "shape": "ServiceQuotaExceededException" + }, + { + "shape": "ThrottlingException" + } + ], + "documentation": "Deletes a delivery source. A delivery is a connection between a logical delivery source and a logical delivery destination.
You can't delete a delivery source if any current deliveries are associated with it. To find whether any deliveries are associated with this delivery source, use the DescribeDeliveries operation and check the deliverySourceName
field in the results.
Returns a list of all CloudWatch Logs account policies in the account.
" }, + "DescribeDeliveries": { + "name": "DescribeDeliveries", + "http": { + "method": "POST", + "requestUri": "/" + }, + "input": { + "shape": "DescribeDeliveriesRequest" + }, + "output": { + "shape": "DescribeDeliveriesResponse" + }, + "errors": [ + { + "shape": "ServiceUnavailableException" + }, + { + "shape": "ServiceQuotaExceededException" + }, + { + "shape": "ValidationException" + }, + { + "shape": "ThrottlingException" + } + ], + "documentation": "Retrieves a list of the deliveries that have been created in the account.
" + }, + "DescribeDeliveryDestinations": { + "name": "DescribeDeliveryDestinations", + "http": { + "method": "POST", + "requestUri": "/" + }, + "input": { + "shape": "DescribeDeliveryDestinationsRequest" + }, + "output": { + "shape": "DescribeDeliveryDestinationsResponse" + }, + "errors": [ + { + "shape": "ServiceUnavailableException" + }, + { + "shape": "ServiceQuotaExceededException" + }, + { + "shape": "ValidationException" + }, + { + "shape": "ThrottlingException" + } + ], + "documentation": "Retrieves a list of the delivery destinations that have been created in the account.
" + }, + "DescribeDeliverySources": { + "name": "DescribeDeliverySources", + "http": { + "method": "POST", + "requestUri": "/" + }, + "input": { + "shape": "DescribeDeliverySourcesRequest" + }, + "output": { + "shape": "DescribeDeliverySourcesResponse" + }, + "errors": [ + { + "shape": "ServiceUnavailableException" + }, + { + "shape": "ServiceQuotaExceededException" + }, + { + "shape": "ValidationException" + }, + { + "shape": "ThrottlingException" + } + ], + "documentation": "Retrieves a list of the delivery sources that have been created in the account.
" + }, "DescribeDestinations": { "name": "DescribeDestinations", "http": { @@ -712,6 +951,124 @@ ], "documentation": "Returns information about a log group data protection policy.
" }, + "GetDelivery": { + "name": "GetDelivery", + "http": { + "method": "POST", + "requestUri": "/" + }, + "input": { + "shape": "GetDeliveryRequest" + }, + "output": { + "shape": "GetDeliveryResponse" + }, + "errors": [ + { + "shape": "ResourceNotFoundException" + }, + { + "shape": "ServiceUnavailableException" + }, + { + "shape": "ValidationException" + }, + { + "shape": "ServiceQuotaExceededException" + }, + { + "shape": "ThrottlingException" + } + ], + "documentation": "Returns complete information about one delivery. A delivery is a connection between a logical delivery source and a logical delivery destination
You need to specify the delivery id
in this operation. You can find the IDs of the deliveries in your account with the DescribeDeliveries operation.
Retrieves complete information about one delivery destination.
" + }, + "GetDeliveryDestinationPolicy": { + "name": "GetDeliveryDestinationPolicy", + "http": { + "method": "POST", + "requestUri": "/" + }, + "input": { + "shape": "GetDeliveryDestinationPolicyRequest" + }, + "output": { + "shape": "GetDeliveryDestinationPolicyResponse" + }, + "errors": [ + { + "shape": "ServiceUnavailableException" + }, + { + "shape": "ValidationException" + }, + { + "shape": "ResourceNotFoundException" + } + ], + "documentation": "Retrieves the delivery destination policy assigned to the delivery destination that you specify. For more information about delivery destinations and their policies, see PutDeliveryDestinationPolicy.
" + }, + "GetDeliverySource": { + "name": "GetDeliverySource", + "http": { + "method": "POST", + "requestUri": "/" + }, + "input": { + "shape": "GetDeliverySourceRequest" + }, + "output": { + "shape": "GetDeliverySourceResponse" + }, + "errors": [ + { + "shape": "ResourceNotFoundException" + }, + { + "shape": "ServiceUnavailableException" + }, + { + "shape": "ValidationException" + }, + { + "shape": "ServiceQuotaExceededException" + }, + { + "shape": "ThrottlingException" + } + ], + "documentation": "Retrieves complete information about one delivery source.
" + }, "GetLogEvents": { "name": "GetLogEvents", "http": { @@ -816,7 +1173,7 @@ "shape": "ServiceUnavailableException" } ], - "documentation": "Returns the results from the specified query.
Only the fields requested in the query are returned, along with a @ptr
field, which is the identifier for the log record. You can use the value of @ptr
in a GetLogRecord operation to get the full log record.
GetQueryResults
does not start running a query. To run a query, use StartQuery.
If the value of the Status
field in the output is Running
, this operation returns only partial results. If you see a value of Scheduled
or Running
for the status, you can retry the operation later to see the final results.
If you are using CloudWatch cross-account observability, you can use this operation in a monitoring account to start queries in linked source accounts. For more information, see CloudWatch cross-account observability.
" + "documentation": "Returns the results from the specified query.
Only the fields requested in the query are returned, along with a @ptr
field, which is the identifier for the log record. You can use the value of @ptr
in a GetLogRecord operation to get the full log record.
GetQueryResults
does not start running a query. To run a query, use StartQuery. For more information about how long results of previous queries are available, see CloudWatch Logs quotas.
If the value of the Status
field in the output is Running
, this operation returns only partial results. If you see a value of Scheduled
or Running
for the status, you can retry the operation later to see the final results.
If you are using CloudWatch cross-account observability, you can use this operation in a monitoring account to start queries in linked source accounts. For more information, see CloudWatch cross-account observability.
" }, "ListTagsForResource": { "name": "ListTagsForResource", @@ -926,6 +1283,102 @@ ], "documentation": "Creates a data protection policy for the specified log group. A data protection policy can help safeguard sensitive data that's ingested by the log group by auditing and masking the sensitive log data.
Sensitive data is detected and masked when it is ingested into the log group. When you set a data protection policy, log events ingested into the log group before that time are not masked.
By default, when a user views a log event that includes masked data, the sensitive data is replaced by asterisks. A user who has the logs:Unmask
permission can use a GetLogEvents or FilterLogEvents operation with the unmask
parameter set to true
to view the unmasked log events. Users with the logs:Unmask
can also view unmasked data in the CloudWatch Logs console by running a CloudWatch Logs Insights query with the unmask
query command.
For more information, including a list of types of data that can be audited and masked, see Protect sensitive log data with masking.
The PutDataProtectionPolicy
operation applies to only the specified log group. You can also use PutAccountPolicy to create an account-level data protection policy that applies to all log groups in the account, including both existing log groups and log groups that are created level. If a log group has its own data protection policy and the account also has an account-level data protection policy, then the two policies are cumulative. Any sensitive term specified in either policy is masked.
Creates or updates a logical delivery destination. A delivery destination is an Amazon Web Services resource that represents an Amazon Web Services service that logs can be sent to. CloudWatch Logs, Amazon S3, and Kinesis Data Firehose are supported as logs delivery destinations.
To configure logs delivery between a supported Amazon Web Services service and a destination, you must do the following:
Create a delivery source, which is a logical object that represents the resource that is actually sending the logs. For more information, see PutDeliverySource.
Use PutDeliveryDestination
to create a delivery destination, which is a logical object that represents the actual delivery destination.
If you are delivering logs cross-account, you must use PutDeliveryDestinationPolicy in the destination account to assign an IAM policy to the destination. This policy allows delivery to that destination.
Use CreateDelivery
to create a delivery by pairing exactly one delivery source and one delivery destination. For more information, see CreateDelivery.
You can configure a single delivery source to send logs to multiple destinations by creating multiple deliveries. You can also create multiple deliveries to configure multiple delivery sources to send logs to the same delivery destination.
Only some Amazon Web Services services support being configured as a delivery source. These services are listed as Supported [V2 Permissions] in the table at Enabling logging from Amazon Web Services services.
If you use this operation to update an existing delivery destination, all the current delivery destination parameters are overwritten with the new parameter values that you specify.
" + }, + "PutDeliveryDestinationPolicy": { + "name": "PutDeliveryDestinationPolicy", + "http": { + "method": "POST", + "requestUri": "/" + }, + "input": { + "shape": "PutDeliveryDestinationPolicyRequest" + }, + "output": { + "shape": "PutDeliveryDestinationPolicyResponse" + }, + "errors": [ + { + "shape": "ServiceUnavailableException" + }, + { + "shape": "ValidationException" + }, + { + "shape": "ResourceNotFoundException" + }, + { + "shape": "ConflictException" + } + ], + "documentation": "Creates and assigns an IAM policy that grants permissions to CloudWatch Logs to deliver logs cross-account to a specified destination in this account. To configure the delivery of logs from an Amazon Web Services service in another account to a logs delivery destination in the current account, you must do the following:
Create a delivery source, which is a logical object that represents the resource that is actually sending the logs. For more information, see PutDeliverySource.
Create a delivery destination, which is a logical object that represents the actual delivery destination. For more information, see PutDeliveryDestination.
Use this operation in the destination account to assign an IAM policy to the destination. This policy allows delivery to that destination.
Create a delivery by pairing exactly one delivery source and one delivery destination. For more information, see CreateDelivery.
Only some Amazon Web Services services support being configured as a delivery source. These services are listed as Supported [V2 Permissions] in the table at Enabling logging from Amazon Web Services services.
The contents of the policy must include two statements. One statement enables general logs delivery, and the other allows delivery to the chosen destination. See the examples for the needed policies.
" + }, + "PutDeliverySource": { + "name": "PutDeliverySource", + "http": { + "method": "POST", + "requestUri": "/" + }, + "input": { + "shape": "PutDeliverySourceRequest" + }, + "output": { + "shape": "PutDeliverySourceResponse" + }, + "errors": [ + { + "shape": "ServiceUnavailableException" + }, + { + "shape": "ConflictException" + }, + { + "shape": "ValidationException" + }, + { + "shape": "ServiceQuotaExceededException" + }, + { + "shape": "ResourceNotFoundException" + }, + { + "shape": "ThrottlingException" + } + ], + "documentation": "Creates or updates a logical delivery source. A delivery source represents an Amazon Web Services resource that sends logs to an logs delivery destination. The destination can be CloudWatch Logs, Amazon S3, or Kinesis Data Firehose.
To configure logs delivery between a delivery destination and an Amazon Web Services service that is supported as a delivery source, you must do the following:
Use PutDeliverySource
to create a delivery source, which is a logical object that represents the resource that is actually sending the logs.
Use PutDeliveryDestination
to create a delivery destination, which is a logical object that represents the actual delivery destination. For more information, see PutDeliveryDestination.
If you are delivering logs cross-account, you must use PutDeliveryDestinationPolicy in the destination account to assign an IAM policy to the destination. This policy allows delivery to that destination.
Use CreateDelivery
to create a delivery by pairing exactly one delivery source and one delivery destination. For more information, see CreateDelivery.
You can configure a single delivery source to send logs to multiple destinations by creating multiple deliveries. You can also create multiple deliveries to configure multiple delivery sources to send logs to the same delivery destination.
Only some Amazon Web Services services support being configured as a delivery source. These services are listed as Supported [V2 Permissions] in the table at Enabling logging from Amazon Web Services services.
If you use this operation to update an existing delivery source, all the current delivery source parameters are overwritten with the new parameter values that you specify.
" + }, "PutDestination": { "name": "PutDestination", "http": { @@ -1411,6 +1864,36 @@ "min": 36, "pattern": "\\S{36,128}" }, + "CreateDeliveryRequest": { + "type": "structure", + "required": [ + "deliverySourceName", + "deliveryDestinationArn" + ], + "members": { + "deliverySourceName": { + "shape": "DeliverySourceName", + "documentation": "The name of the delivery source to use for this delivery.
" + }, + "deliveryDestinationArn": { + "shape": "Arn", + "documentation": "The ARN of the delivery destination to use for this delivery.
" + }, + "tags": { + "shape": "Tags", + "documentation": "An optional list of key-value pairs to associate with the resource.
For more information about tagging, see Tagging Amazon Web Services resources
" + } + } + }, + "CreateDeliveryResponse": { + "type": "structure", + "members": { + "delivery": { + "shape": "Delivery", + "documentation": "A structure that contains information about the delivery that you just created.
" + } + } + }, "CreateExportTaskRequest": { "type": "structure", "required": [ @@ -1544,6 +2027,54 @@ } } }, + "DeleteDeliveryDestinationPolicyRequest": { + "type": "structure", + "required": [ + "deliveryDestinationName" + ], + "members": { + "deliveryDestinationName": { + "shape": "DeliveryDestinationName", + "documentation": "The name of the delivery destination that you want to delete the policy for.
" + } + } + }, + "DeleteDeliveryDestinationRequest": { + "type": "structure", + "required": [ + "name" + ], + "members": { + "name": { + "shape": "DeliveryDestinationName", + "documentation": "The name of the delivery destination that you want to delete. You can find a list of delivery destionation names by using the DescribeDeliveryDestinations operation.
" + } + } + }, + "DeleteDeliveryRequest": { + "type": "structure", + "required": [ + "id" + ], + "members": { + "id": { + "shape": "DeliveryId", + "documentation": "The unique ID of the delivery to delete. You can find the ID of a delivery with the DescribeDeliveries operation.
" + } + } + }, + "DeleteDeliverySourceRequest": { + "type": "structure", + "required": [ + "name" + ], + "members": { + "name": { + "shape": "DeliverySourceName", + "documentation": "The name of the delivery source that you want to delete.
" + } + } + }, "DeleteDestinationRequest": { "type": "structure", "required": [ @@ -1621,44 +2152,196 @@ "shape": "Success", "documentation": "A value of TRUE indicates that the operation succeeded. FALSE indicates that the operation failed.
" } - } + } + }, + "DeleteResourcePolicyRequest": { + "type": "structure", + "members": { + "policyName": { + "shape": "PolicyName", + "documentation": "The name of the policy to be revoked. This parameter is required.
" + } + } + }, + "DeleteRetentionPolicyRequest": { + "type": "structure", + "required": [ + "logGroupName" + ], + "members": { + "logGroupName": { + "shape": "LogGroupName", + "documentation": "The name of the log group.
" + } + } + }, + "DeleteSubscriptionFilterRequest": { + "type": "structure", + "required": [ + "logGroupName", + "filterName" + ], + "members": { + "logGroupName": { + "shape": "LogGroupName", + "documentation": "The name of the log group.
" + }, + "filterName": { + "shape": "FilterName", + "documentation": "The name of the subscription filter.
" + } + } + }, + "Deliveries": { + "type": "list", + "member": { + "shape": "Delivery" + } + }, + "Delivery": { + "type": "structure", + "members": { + "id": { + "shape": "DeliveryId", + "documentation": "The unique ID that identifies this delivery in your account.
" + }, + "arn": { + "shape": "Arn", + "documentation": "The Amazon Resource Name (ARN) that uniquely identifies this delivery.
" + }, + "deliverySourceName": { + "shape": "DeliverySourceName", + "documentation": "The name of the delivery source that is associated with this delivery.
" + }, + "deliveryDestinationArn": { + "shape": "Arn", + "documentation": "The ARN of the delivery destination that is associated with this delivery.
" + }, + "deliveryDestinationType": { + "shape": "DeliveryDestinationType", + "documentation": "Displays whether the delivery destination associated with this delivery is CloudWatch Logs, Amazon S3, or Kinesis Data Firehose.
" + }, + "tags": { + "shape": "Tags", + "documentation": "The tags that have been assigned to this delivery.
" + } + }, + "documentation": "This structure contains information about one delivery in your account.
A delivery is a connection between a logical delivery source and a logical delivery destination.
For more information, see CreateDelivery.
You can't update an existing delivery. You can only create and delete deliveries.
" }, - "DeleteResourcePolicyRequest": { + "DeliveryDestination": { "type": "structure", "members": { - "policyName": { - "shape": "PolicyName", - "documentation": "The name of the policy to be revoked. This parameter is required.
" + "name": { + "shape": "DeliveryDestinationName", + "documentation": "The name of this delivery destination.
" + }, + "arn": { + "shape": "Arn", + "documentation": "The Amazon Resource Name (ARN) that uniquely identifies this delivery destination.
" + }, + "deliveryDestinationType": { + "shape": "DeliveryDestinationType", + "documentation": "Displays whether this delivery destination is CloudWatch Logs, Amazon S3, or Kinesis Data Firehose.
" + }, + "outputFormat": { + "shape": "OutputFormat", + "documentation": "The format of the logs that are sent to this delivery destination.
" + }, + "deliveryDestinationConfiguration": { + "shape": "DeliveryDestinationConfiguration", + "documentation": "A structure that contains the ARN of the Amazon Web Services resource that will receive the logs.
" + }, + "tags": { + "shape": "Tags", + "documentation": "The tags that have been assigned to this delivery destination.
" } - } + }, + "documentation": "This structure contains information about one delivery destination in your account. A delivery destination is an Amazon Web Services resource that represents an shared id=\"AWS\"/> service that logs can be sent to. CloudWatch Logs, Amazon S3, are supported as Kinesis Data Firehose delivery destinations.
To configure logs delivery between a supported Amazon Web Services service and a destination, you must do the following:
Create a delivery source, which is a logical object that represents the resource that is actually sending the logs. For more information, see PutDeliverySource.
Create a delivery destination, which is a logical object that represents the actual delivery destination.
If you are delivering logs cross-account, you must use PutDeliveryDestinationPolicy in the destination account to assign an IAM policy to the destination. This policy allows delivery to that destination.
Create a delivery by pairing exactly one delivery source and one delivery destination. For more information, see CreateDelivery.
You can configure a single delivery source to send logs to multiple destinations by creating multiple deliveries. You can also create multiple deliveries to configure multiple delivery sources to send logs to the same delivery destination.
" }, - "DeleteRetentionPolicyRequest": { + "DeliveryDestinationConfiguration": { "type": "structure", "required": [ - "logGroupName" + "destinationResourceArn" ], "members": { - "logGroupName": { - "shape": "LogGroupName", - "documentation": "The name of the log group.
" + "destinationResourceArn": { + "shape": "Arn", + "documentation": "The ARN of the Amazon Web Services destination that this delivery destination represents. That Amazon Web Services destination can be a log group in CloudWatch Logs, an Amazon S3 bucket, or a delivery stream in Kinesis Data Firehose.
" } + }, + "documentation": "A structure that contains information about one logs delivery destination.
" + }, + "DeliveryDestinationName": { + "type": "string", + "max": 60, + "min": 1, + "pattern": "[\\w-]*" + }, + "DeliveryDestinationPolicy": { + "type": "string", + "max": 51200, + "min": 1 + }, + "DeliveryDestinationType": { + "type": "string", + "enum": [ + "S3", + "CWL", + "FH" + ] + }, + "DeliveryDestinations": { + "type": "list", + "member": { + "shape": "DeliveryDestination" } }, - "DeleteSubscriptionFilterRequest": { + "DeliveryId": { + "type": "string", + "max": 64, + "min": 1, + "pattern": "^[0-9A-Za-z]+$" + }, + "DeliverySource": { "type": "structure", - "required": [ - "logGroupName", - "filterName" - ], "members": { - "logGroupName": { - "shape": "LogGroupName", - "documentation": "The name of the log group.
" + "name": { + "shape": "DeliverySourceName", + "documentation": "The unique name of the delivery source.
" }, - "filterName": { - "shape": "FilterName", - "documentation": "The name of the subscription filter.
" + "arn": { + "shape": "Arn", + "documentation": "The Amazon Resource Name (ARN) that uniquely identifies this delivery source.
" + }, + "resourceArns": { + "shape": "ResourceArns", + "documentation": "This array contains the ARN of the Amazon Web Services resource that sends logs and is represented by this delivery source. Currently, only one ARN can be in the array.
" + }, + "service": { + "shape": "Service", + "documentation": "The Amazon Web Services service that is sending logs.
" + }, + "logType": { + "shape": "LogType", + "documentation": "The type of log that the source is sending. For valid values for this parameter, see the documentation for the source service.
" + }, + "tags": { + "shape": "Tags", + "documentation": "The tags that have been assigned to this delivery source.
" } + }, + "documentation": "This structure contains information about one delivery source in your account. A delivery source is an Amazon Web Services resource that sends logs to an Amazon Web Services destination. The destination can be CloudWatch Logs, Amazon S3, or Kinesis Data Firehose.
Only some Amazon Web Services services support being configured as a delivery source. These services are listed as Supported [V2 Permissions] in the table at Enabling logging from Amazon Web Services services.
To configure logs delivery between a supported Amazon Web Services service and a destination, you must do the following:
Create a delivery source, which is a logical object that represents the resource that is actually sending the logs. For more information, see PutDeliverySource.
Create a delivery destination, which is a logical object that represents the actual delivery destination. For more information, see PutDeliveryDestination.
If you are delivering logs cross-account, you must use PutDeliveryDestinationPolicy in the destination account to assign an IAM policy to the destination. This policy allows delivery to that destination.
Create a delivery by pairing exactly one delivery source and one delivery destination. For more information, see CreateDelivery.
You can configure a single delivery source to send logs to multiple destinations by creating multiple deliveries. You can also create multiple deliveries to configure multiple delivery sources to send logs to the same delivery destination.
" + }, + "DeliverySourceName": { + "type": "string", + "max": 60, + "min": 1, + "pattern": "[\\w-]*" + }, + "DeliverySources": { + "type": "list", + "member": { + "shape": "DeliverySource" } }, "Descending": { @@ -1693,6 +2376,78 @@ } } }, + "DescribeDeliveriesRequest": { + "type": "structure", + "members": { + "nextToken": { + "shape": "NextToken" + }, + "limit": { + "shape": "DescribeLimit", + "documentation": "Optionally specify the maximum number of deliveries to return in the response.
" + } + } + }, + "DescribeDeliveriesResponse": { + "type": "structure", + "members": { + "deliveries": { + "shape": "Deliveries", + "documentation": "An array of structures. Each structure contains information about one delivery in the account.
" + }, + "nextToken": { + "shape": "NextToken" + } + } + }, + "DescribeDeliveryDestinationsRequest": { + "type": "structure", + "members": { + "nextToken": { + "shape": "NextToken" + }, + "limit": { + "shape": "DescribeLimit", + "documentation": "Optionally specify the maximum number of delivery destinations to return in the response.
" + } + } + }, + "DescribeDeliveryDestinationsResponse": { + "type": "structure", + "members": { + "deliveryDestinations": { + "shape": "DeliveryDestinations", + "documentation": "An array of structures. Each structure contains information about one delivery destination in the account.
" + }, + "nextToken": { + "shape": "NextToken" + } + } + }, + "DescribeDeliverySourcesRequest": { + "type": "structure", + "members": { + "nextToken": { + "shape": "NextToken" + }, + "limit": { + "shape": "DescribeLimit", + "documentation": "Optionally specify the maximum number of delivery sources to return in the response.
" + } + } + }, + "DescribeDeliverySourcesResponse": { + "type": "structure", + "members": { + "deliverySources": { + "shape": "DeliverySources", + "documentation": "An array of structures. Each structure contains information about one delivery source in the account.
" + }, + "nextToken": { + "shape": "NextToken" + } + } + }, "DescribeDestinationsRequest": { "type": "structure", "members": { @@ -2382,6 +3137,90 @@ } } }, + "GetDeliveryDestinationPolicyRequest": { + "type": "structure", + "required": [ + "deliveryDestinationName" + ], + "members": { + "deliveryDestinationName": { + "shape": "DeliveryDestinationName", + "documentation": "The name of the delivery destination that you want to retrieve the policy of.
" + } + } + }, + "GetDeliveryDestinationPolicyResponse": { + "type": "structure", + "members": { + "policy": { + "shape": "Policy", + "documentation": "The IAM policy for this delivery destination.
" + } + } + }, + "GetDeliveryDestinationRequest": { + "type": "structure", + "required": [ + "name" + ], + "members": { + "name": { + "shape": "DeliveryDestinationName", + "documentation": "The name of the delivery destination that you want to retrieve.
" + } + } + }, + "GetDeliveryDestinationResponse": { + "type": "structure", + "members": { + "deliveryDestination": { + "shape": "DeliveryDestination", + "documentation": "A structure containing information about the delivery destination.
" + } + } + }, + "GetDeliveryRequest": { + "type": "structure", + "required": [ + "id" + ], + "members": { + "id": { + "shape": "DeliveryId", + "documentation": "The ID of the delivery that you want to retrieve.
" + } + } + }, + "GetDeliveryResponse": { + "type": "structure", + "members": { + "delivery": { + "shape": "Delivery", + "documentation": "A structure that contains information about the delivery.
" + } + } + }, + "GetDeliverySourceRequest": { + "type": "structure", + "required": [ + "name" + ], + "members": { + "name": { + "shape": "DeliverySourceName", + "documentation": "The name of the delivery source that you want to retrieve.
" + } + } + }, + "GetDeliverySourceResponse": { + "type": "structure", + "members": { + "deliverySource": { + "shape": "DeliverySource", + "documentation": "A structure containing information about the delivery source.
" + } + } + }, "GetLogEventsRequest": { "type": "structure", "required": [ @@ -2796,6 +3635,12 @@ "shape": "LogStream" } }, + "LogType": { + "type": "string", + "max": 255, + "min": 1, + "pattern": "[\\w]*" + }, "MetricFilter": { "type": "structure", "members": { @@ -2922,6 +3767,16 @@ "LastEventTime" ] }, + "OutputFormat": { + "type": "string", + "enum": [ + "json", + "plain", + "w3c", + "raw", + "parquet" + ] + }, "OutputLogEvent": { "type": "structure", "members": { @@ -2951,6 +3806,16 @@ "max": 100, "min": 0 }, + "Policy": { + "type": "structure", + "members": { + "deliveryDestinationPolicy": { + "shape": "DeliveryDestinationPolicy", + "documentation": "The contents of the delivery destination policy.
" + } + }, + "documentation": "A structure that contains information about one delivery destination policy.
" + }, "PolicyDocument": { "type": "string", "max": 5120, @@ -3034,6 +3899,101 @@ } } }, + "PutDeliveryDestinationPolicyRequest": { + "type": "structure", + "required": [ + "deliveryDestinationName", + "deliveryDestinationPolicy" + ], + "members": { + "deliveryDestinationName": { + "shape": "DeliveryDestinationName", + "documentation": "The name of the delivery destination to assign this policy to.
" + }, + "deliveryDestinationPolicy": { + "shape": "DeliveryDestinationPolicy", + "documentation": "The contents of the policy.
" + } + } + }, + "PutDeliveryDestinationPolicyResponse": { + "type": "structure", + "members": { + "policy": { + "shape": "Policy", + "documentation": "The contents of the policy that you just created.
" + } + } + }, + "PutDeliveryDestinationRequest": { + "type": "structure", + "required": [ + "name", + "deliveryDestinationConfiguration" + ], + "members": { + "name": { + "shape": "DeliveryDestinationName", + "documentation": "A name for this delivery destination. This name must be unique for all delivery destinations in your account.
" + }, + "outputFormat": { + "shape": "OutputFormat", + "documentation": "The format for the logs that this delivery destination will receive.
" + }, + "deliveryDestinationConfiguration": { + "shape": "DeliveryDestinationConfiguration", + "documentation": "A structure that contains the ARN of the Amazon Web Services resource that will receive the logs.
" + }, + "tags": { + "shape": "Tags", + "documentation": "An optional list of key-value pairs to associate with the resource.
For more information about tagging, see Tagging Amazon Web Services resources
" + } + } + }, + "PutDeliveryDestinationResponse": { + "type": "structure", + "members": { + "deliveryDestination": { + "shape": "DeliveryDestination", + "documentation": "A structure containing information about the delivery destination that you just created or updated.
" + } + } + }, + "PutDeliverySourceRequest": { + "type": "structure", + "required": [ + "name", + "resourceArn", + "logType" + ], + "members": { + "name": { + "shape": "DeliverySourceName", + "documentation": "A name for this delivery source. This name must be unique for all delivery sources in your account.
" + }, + "resourceArn": { + "shape": "Arn", + "documentation": "The ARN of the Amazon Web Services resource that is generating and sending logs. For example, arn:aws:workmail:us-east-1:123456789012:organization/m-1234EXAMPLEabcd1234abcd1234abcd1234
Defines the type of log that the source is sending. For valid values for this parameter, see the documentation for the source service.
" + }, + "tags": { + "shape": "Tags", + "documentation": "An optional list of key-value pairs to associate with the resource.
For more information about tagging, see Tagging Amazon Web Services resources
" + } + } + }, + "PutDeliverySourceResponse": { + "type": "structure", + "members": { + "deliverySource": { + "shape": "DeliverySource", + "documentation": "A structure containing information about the delivery source that was just created or updated.
" + } + } + }, "PutDestinationPolicyRequest": { "type": "structure", "required": [ @@ -3411,6 +4371,12 @@ }, "documentation": "Represents the rejected events.
" }, + "ResourceArns": { + "type": "list", + "member": { + "shape": "Arn" + } + }, "ResourceIdentifier": { "type": "string", "max": 2048, @@ -3495,6 +4461,12 @@ "type": "string", "min": 1 }, + "Service": { + "type": "string", + "max": 255, + "min": 1, + "pattern": "[\\w]*" + }, "StandardUnit": { "type": "string", "enum": [ diff --git a/apis/logs-2014-03-28.paginators.json b/apis/logs-2014-03-28.paginators.json index d702068247..523ced1c60 100644 --- a/apis/logs-2014-03-28.paginators.json +++ b/apis/logs-2014-03-28.paginators.json @@ -1,5 +1,23 @@ { "pagination": { + "DescribeDeliveries": { + "input_token": "nextToken", + "limit_key": "limit", + "output_token": "nextToken", + "result_key": "deliveries" + }, + "DescribeDeliveryDestinations": { + "input_token": "nextToken", + "limit_key": "limit", + "output_token": "nextToken", + "result_key": "deliveryDestinations" + }, + "DescribeDeliverySources": { + "input_token": "nextToken", + "limit_key": "limit", + "output_token": "nextToken", + "result_key": "deliverySources" + }, "DescribeDestinations": { "input_token": "nextToken", "limit_key": "limit", diff --git a/apis/omics-2022-11-28.min.json b/apis/omics-2022-11-28.min.json index 96a73aa9ea..a161351ad0 100644 --- a/apis/omics-2022-11-28.min.json +++ b/apis/omics-2022-11-28.min.json @@ -372,7 +372,6 @@ "sourceFileType", "subjectId", "sampleId", - "referenceArn", "name" ], "members": { @@ -3929,8 +3928,7 @@ "sourceFiles", "sourceFileType", "subjectId", - "sampleId", - "referenceArn" + "sampleId" ], "members": { "sourceFiles": { diff --git a/apis/omics-2022-11-28.normal.json b/apis/omics-2022-11-28.normal.json index 22c8fafd64..7eed70b727 100644 --- a/apis/omics-2022-11-28.normal.json +++ b/apis/omics-2022-11-28.normal.json @@ -4063,7 +4063,6 @@ "sourceFileType", "subjectId", "sampleId", - "referenceArn", "name" ], "members": { @@ -4994,7 +4993,8 @@ "enum": [ "FASTQ", "BAM", - "CRAM" + "CRAM", + "UBAM" ] }, "Filter": { @@ -8191,7 +8191,7 @@ "documentation": "A status to filter on.
" }, "referenceArn": { - "shape": "ReferenceArn", + "shape": "ReferenceArnFilter", "documentation": "A genome reference ARN to filter on.
" }, "createdAfter": { @@ -8449,6 +8449,12 @@ "min": 1, "pattern": "arn:.+" }, + "ReferenceArnFilter": { + "type": "string", + "max": 127, + "min": 0, + "pattern": "$|^arn:.+" + }, "ReferenceDescription": { "type": "string", "max": 255, @@ -9573,8 +9579,7 @@ "sourceFiles", "sourceFileType", "subjectId", - "sampleId", - "referenceArn" + "sampleId" ], "members": { "sourceFiles": { diff --git a/clients/cloudformation.d.ts b/clients/cloudformation.d.ts index 728d138ee0..c83b99b8f1 100644 --- a/clients/cloudformation.d.ts +++ b/clients/cloudformation.d.ts @@ -245,11 +245,11 @@ declare class CloudFormation extends Service { */ describeStackSetOperation(callback?: (err: AWSError, data: CloudFormation.Types.DescribeStackSetOperationOutput) => void): Request>1,l=23===i?Math.pow(2,-24)-Math.pow(2,-77):0,d=a?0:s-1,y=a?1:-1,b=t<0||0===t&&1/t<0?1:0;for(t=Math.abs(t),isNaN(t)||t===1/0?(n=isNaN(t)?1:0,o=m):(o=Math.floor(Math.log(t)/Math.LN2),t*(u=Math.pow(2,-o))<1&&(o--,u*=2),t+=o+c>=1?l/u:l*Math.pow(2,1-c),t*u>=2&&(o++,u/=2),o+c>=m?(n=0,o=m):o+c>=1?(n=(t*u-1)*Math.pow(2,i),o+=c):(n=t*Math.pow(2,c-1)*Math.pow(2,i),o=0));i>=8;e[r+d]=255&n,d+=y,n/=256,i-=8);for(o=o<0;e[r+d]=255&o,d+=y,o/=256,p-=8);e[r+d-y]|=128*b}},{}],443:[function(e,t,r){var a={}.toString;t.exports=Array.isArray||function(e){return"[object Array]"==a.call(e)}},{}],444:[function(e,t,r){!function(e){"use strict";function t(e){return null!==e&&"[object Array]"===Object.prototype.toString.call(e)}function r(e){return null!==e&&"[object Object]"===Object.prototype.toString.call(e)}function a(e,i){if(e===i)return!0;if(Object.prototype.toString.call(e)!==Object.prototype.toString.call(i))return!1;if(!0===t(e)){if(e.length!==i.length)return!1;for(var s=0;s =0?this.expression(e):"Lbracket"===t?(this._match("Lbracket"),this._parseMultiselectList()):"Lbrace"===t?(this._match("Lbrace"),this._parseMultiselectHash()):void 0},_parseProjectionRHS:function(e){var t;if(P[this._lookahead(0)]<10)t={type:"Identity"};else if("Lbracket"===this._lookahead(0))t=this.expression(e);else if("Filter"===this._lookahead(0))t=this.expression(e);else{if("Dot"!==this._lookahead(0)){var r=this._lookaheadToken(0),a=new Error("Sytanx error, unexpected token: "+r.value+"("+r.type+")");throw a.name="ParserError",a}this._match("Dot"),t=this._parseDotRHS(e)}return t},_parseMultiselectList:function(){for(var e=[];"Rbracket"!==this._lookahead(0);){var t=this.expression(0);if(e.push(t),"Comma"===this._lookahead(0)&&(this._match("Comma"),"Rbracket"===this._lookahead(0)))throw new Error("Unexpected token Rbracket")}return this._match("Rbracket"),{type:"MultiSelectList",children:e}},_parseMultiselectHash:function(){for(var e,t,r,a,i=[],s=["UnquotedIdentifier","QuotedIdentifier"];;){if(e=this._lookaheadToken(0),s.indexOf(e.type)<0)throw new Error("Expecting an identifier token, got: "+e.type);if(t=e.value,this._advance(),this._match("Colon"),r=this.expression(0),a={type:"KeyValuePair",name:t,value:r},i.push(a),"Comma"===this._lookahead(0))this._match("Comma");else if("Rbrace"===this._lookahead(0)){this._match("Rbrace");break}}return{type:"MultiSelectHash",children:i}}},c.prototype={search:function(e,t){return this.visit(e,t)},visit:function(e,o){var n,u,p,m,c,l,d,y,b;switch(e.type){case"Field":return null!==o&&r(o)?(l=o[e.name],void 0===l?null:l):null;case"Subexpression":for(p=this.visit(e.children[0],o),b=1;b G((f-r)/g)&&i("overflow"),r+=(p-t)*g,t=p,u=0;u =0?(c=b.substr(0,S),l=b.substr(S+1)):(c=b,l=""),d=decodeURIComponent(c),y=decodeURIComponent(l),a(o,d)?i(o[d])?o[d].push(y):o[d]=[o[d],y]:o[d]=y}return o};var i=Array.isArray||function(e){return"[object Array]"===Object.prototype.toString.call(e)}},{}],448:[function(e,t,r){"use strict";function a(e,t){if(e.map)return e.map(t);for(var r=[],a=0;a >1,l=23===i?Math.pow(2,-24)-Math.pow(2,-77):0,d=a?0:s-1,y=a?1:-1,b=t<0||0===t&&1/t<0?1:0;for(t=Math.abs(t),isNaN(t)||t===1/0?(n=isNaN(t)?1:0,o=m):(o=Math.floor(Math.log(t)/Math.LN2),t*(u=Math.pow(2,-o))<1&&(o--,u*=2),t+=o+c>=1?l/u:l*Math.pow(2,1-c),t*u>=2&&(o++,u/=2),o+c>=m?(n=0,o=m):o+c>=1?(n=(t*u-1)*Math.pow(2,i),o+=c):(n=t*Math.pow(2,c-1)*Math.pow(2,i),o=0));i>=8;e[r+d]=255&n,d+=y,n/=256,i-=8);for(o=o<0;e[r+d]=255&o,d+=y,o/=256,p-=8);e[r+d-y]|=128*b}},{}],443:[function(e,t,r){var a={}.toString;t.exports=Array.isArray||function(e){return"[object Array]"==a.call(e)}},{}],444:[function(e,t,r){!function(e){"use strict";function t(e){return null!==e&&"[object Array]"===Object.prototype.toString.call(e)}function r(e){return null!==e&&"[object Object]"===Object.prototype.toString.call(e)}function a(e,i){if(e===i)return!0;if(Object.prototype.toString.call(e)!==Object.prototype.toString.call(i))return!1;if(!0===t(e)){if(e.length!==i.length)return!1;for(var s=0;s =0?this.expression(e):"Lbracket"===t?(this._match("Lbracket"),this._parseMultiselectList()):"Lbrace"===t?(this._match("Lbrace"),this._parseMultiselectHash()):void 0},_parseProjectionRHS:function(e){var t;if(P[this._lookahead(0)]<10)t={type:"Identity"};else if("Lbracket"===this._lookahead(0))t=this.expression(e);else if("Filter"===this._lookahead(0))t=this.expression(e);else{if("Dot"!==this._lookahead(0)){var r=this._lookaheadToken(0),a=new Error("Sytanx error, unexpected token: "+r.value+"("+r.type+")");throw a.name="ParserError",a}this._match("Dot"),t=this._parseDotRHS(e)}return t},_parseMultiselectList:function(){for(var e=[];"Rbracket"!==this._lookahead(0);){var t=this.expression(0);if(e.push(t),"Comma"===this._lookahead(0)&&(this._match("Comma"),"Rbracket"===this._lookahead(0)))throw new Error("Unexpected token Rbracket")}return this._match("Rbracket"),{type:"MultiSelectList",children:e}},_parseMultiselectHash:function(){for(var e,t,r,a,i=[],s=["UnquotedIdentifier","QuotedIdentifier"];;){if(e=this._lookaheadToken(0),s.indexOf(e.type)<0)throw new Error("Expecting an identifier token, got: "+e.type);if(t=e.value,this._advance(),this._match("Colon"),r=this.expression(0),a={type:"KeyValuePair",name:t,value:r},i.push(a),"Comma"===this._lookahead(0))this._match("Comma");else if("Rbrace"===this._lookahead(0)){this._match("Rbrace");break}}return{type:"MultiSelectHash",children:i}}},c.prototype={search:function(e,t){return this.visit(e,t)},visit:function(e,o){var n,u,p,m,c,l,d,y,b;switch(e.type){case"Field":return null!==o&&r(o)?(l=o[e.name],void 0===l?null:l):null;case"Subexpression":for(p=this.visit(e.children[0],o),b=1;b=55296&&t<=56319&&i65535&&(e-=65536,t+=w(e>>>10&1023|55296),e=56320|1023&e),t+=w(e)}).join("")}function p(e){return e-48<10?e-22:e-65<26?e-65:e-97<26?e-97:T}function m(e,t){return e+22+75*(e<26)-((0!=t)<<5)}function c(e,t,r){var a=0;for(e=r?G(e/R):e>>1,e+=G(e/t);e>L*k>>1;a+=T)e=G(e/L);return G(a+(L+1)*e/(e+A))}function l(e){var t,r,a,s,o,n,m,l,d,y,b=[],S=e.length,g=0,h=v,I=D;for(r=e.lastIndexOf(P),r<0&&(r=0),a=0;a=S&&i("invalid-input"),l=p(e.charCodeAt(s++)),(l>=T||l>G((f-g)/n))&&i("overflow"),g+=l*n,d=m<=I?C:m>=I+k?k:m-I,!(l=t&&bf&&i("overflow"),b==t){for(l=r,d=T;y=d<=o?C:d>=o+k?k:d-o,!(l=0&&delete e.httpRequest.headers["Content-Length"]}function i(e){var t=new l,r=e.service.api.operations[e.operation].input;if(r.payload){var a={},i=r.members[r.payload];a=e.params[r.payload],"structure"===i.type?(e.httpRequest.body=t.build(a||{},i),s(e)):void 0!==a&&(e.httpRequest.body=a,("binary"===i.type||i.isStreaming)&&s(e,!0))}else e.httpRequest.body=t.build(e.params,r),s(e)}function s(e,t){if(!e.httpRequest.headers["Content-Type"]){var r=t?"binary/octet-stream":"application/json";e.httpRequest.headers["Content-Type"]=r}}function o(e){m.buildRequest(e),y.indexOf(e.httpRequest.method)<0&&i(e)}function n(e){c.extractError(e)}function u(e){m.extractData(e);var t,r=e.request,a=r.service.api.operations[r.operation],i=r.service.api.operations[r.operation].output||{};a.hasEventOutput;if(i.payload){var s=i.members[i.payload],o=e.httpResponse.body;if(s.isEventStream)t=new d,e.data[payload]=p.createEventStream(2===AWS.HttpClient.streamsApiVersion?e.httpResponse.stream:o,t,s);else if("structure"===s.type||"list"===s.type){var t=new d;e.data[i.payload]=t.parse(o,s)}else"binary"===s.type||s.isStreaming?e.data[i.payload]=o:e.data[i.payload]=s.toType(o)}else{var n=e.data;c.extractData(e),e.data=p.merge(n,e.data)}}var p=e("../util"),m=e("./rest"),c=e("./json"),l=e("../json/builder"),d=e("../json/parser"),y=["GET","HEAD","DELETE"];t.exports={buildRequest:o,extractError:n,extractData:u,unsetContentLength:a}},{"../json/builder":374,"../json/parser":375,"../util":428,"./json":386,"./rest":388}],390:[function(e,t,r){function a(e){var t=e.service.api.operations[e.operation].input,r=new n.XML.Builder,a=e.params,i=t.payload;if(i){var s=t.members[i];if(void 0===(a=a[i]))return;if("structure"===s.type){var o=s.name;e.httpRequest.body=r.toXML(a,s,o,!0)}else e.httpRequest.body=a}else e.httpRequest.body=r.toXML(a,t,t.name||t.shape||u.string.upperFirst(e.operation)+"Request")}function i(e){p.buildRequest(e),["GET","HEAD"].indexOf(e.httpRequest.method)<0&&a(e)}function s(e){p.extractError(e);var t;try{t=(new n.XML.Parser).parse(e.httpResponse.body.toString())}catch(r){t={Code:e.httpResponse.statusCode,Message:e.httpResponse.statusMessage}}t.Errors&&(t=t.Errors),t.Error&&(t=t.Error),t.Code?e.error=u.error(new Error,{code:t.Code,message:t.Message}):e.error=u.error(new Error,{code:e.httpResponse.statusCode,message:null})}function o(e){p.extractData(e);var t,r=e.request,a=e.httpResponse.body,i=r.service.api.operations[r.operation],s=i.output,o=(i.hasEventOutput,s.payload);if(o){var m=s.members[o];m.isEventStream?(t=new n.XML.Parser,e.data[o]=u.createEventStream(2===n.HttpClient.streamsApiVersion?e.httpResponse.stream:e.httpResponse.body,t,m)):"structure"===m.type?(t=new n.XML.Parser,e.data[o]=t.parse(a.toString(),m)):"binary"===m.type||m.isStreaming?e.data[o]=a:e.data[o]=m.toType(a)}else if(a.length>0){t=new n.XML.Parser;var c=t.parse(a.toString(),s);u.update(e.data,c)}}var n=e("../core"),u=e("../util"),p=e("./rest");t.exports={buildRequest:i,extractError:s,extractData:o}},{"../core":350,"../util":428,"./rest":388}],391:[function(e,t,r){function a(){}function i(e){return e.isQueryName||"ec2"!==e.api.protocol?e.name:e.name[0].toUpperCase()+e.name.substr(1)}function s(e,t,r,a){p.each(r.members,function(r,s){var o=t[r];if(null!==o&&void 0!==o){var n=i(s);n=e?e+"."+n:n,u(n,o,s,a)}})}function o(e,t,r,a){var i=1;p.each(t,function(t,s){var o=r.flattened?".":".entry.",n=o+i+++".",p=n+(r.key.name||"key"),m=n+(r.value.name||"value");u(e+p,t,r.key,a),u(e+m,s,r.value,a)})}function n(e,t,r,a){var s=r.member||{};if(0===t.length)return void a.call(this,e,null);p.arrayEach(t,function(t,o){var n="."+(o+1);if("ec2"===r.api.protocol)n+="";else if(r.flattened){if(s.name){var p=e.split(".");p.pop(),p.push(i(s)),e=p.join(".")}}else n="."+(s.name?s.name:"member")+n;u(e+n,t,s,a)})}function u(e,t,r,a){null!==t&&void 0!==t&&("structure"===r.type?s(e,t,r,a):"list"===r.type?n(e,t,r,a):"map"===r.type?o(e,t,r,a):a(e,r.toWireFormat(t).toString()))}var p=e("../util");a.prototype.serialize=function(e,t,r){s("",e,t,r)},t.exports=a},{"../util":428}],392:[function(e,t,r){var a=e("../core"),i=null,s={signatureVersion:"v4",signingName:"rds-db",operations:{}},o={region:"string",hostname:"string",port:"number",username:"string"};a.RDS.Signer=a.util.inherit({constructor:function(e){this.options=e||{}},convertUrlToAuthToken:function(e){if(0===e.indexOf("https://"))return e.substring("https://".length)},getAuthToken:function(e,t){"function"==typeof e&&void 0===t&&(t=e,e={});var r=this,o="function"==typeof t;e=a.util.merge(this.options,e);var n=this.validateAuthTokenOptions(e);if(!0!==n){if(o)return t(n,null);throw n}var u={region:e.region,endpoint:new a.Endpoint(e.hostname+":"+e.port),paramValidation:!1,signatureVersion:"v4"};e.credentials&&(u.credentials=e.credentials),i=new a.Service(u),i.api=s;var p=i.makeRequest();if(this.modifyRequestForAuthToken(p,e),!o){var m=p.presign(900);return this.convertUrlToAuthToken(m)}p.presign(900,function(e,a){a&&(a=r.convertUrlToAuthToken(a)),t(e,a)})},modifyRequestForAuthToken:function(e,t){e.on("build",e.buildAsGet),e.httpRequest.body=a.util.queryParamsToString({Action:"connect",DBUser:t.username})},validateAuthTokenOptions:function(e){var t="";e=e||{};for(var r in o)Object.prototype.hasOwnProperty.call(o,r)&&typeof e[r]!==o[r]&&(t+="option '"+r+"' should have been type '"+o[r]+"', was '"+typeof e[r]+"'.\n");return!t.length||a.util.error(new Error,{code:"InvalidParameter",message:t})}})},{"../core":350}],393:[function(e,t,r){t.exports={now:function(){return"undefined"!=typeof performance&&"function"==typeof performance.now?performance.now():Date.now()}}},{}],394:[function(e,t,r){function a(e){return"string"==typeof e&&(e.startsWith("fips-")||e.endsWith("-fips"))}function i(e){return"string"==typeof e&&["aws-global","aws-us-gov-global"].includes(e)}function s(e){return["fips-aws-global","aws-fips","aws-global"].includes(e)?"us-east-1":["fips-aws-us-gov-global","aws-us-gov-global"].includes(e)?"us-gov-west-1":e.replace(/fips-(dkr-|prod-)?|-fips/,"")}t.exports={isFipsRegion:a,isGlobalRegion:i,getRealRegion:s}},{}],395:[function(e,t,r){function a(e){if(!e)return null;var t=e.split("-");return t.length<3?null:t.slice(0,t.length-2).join("-")+"-*"}function i(e){var t=e.config.region,r=a(t),i=e.api.endpointPrefix;return[[t,i],[r,i],[t,"*"],[r,"*"],["*",i],[t,"internal-*"],["*","*"]].map(function(e){return e[0]&&e[1]?e.join("/"):null})}function s(e,t){u.each(t,function(t,r){"globalEndpoint"!==t&&(void 0!==e.config[t]&&null!==e.config[t]||(e.config[t]=r))})}function o(e){for(var t=i(e),r=e.config.useFipsEndpoint,a=e.config.useDualstackEndpoint,o=0;o=a())throw new RangeError("Attempt to allocate Buffer larger than maximum size: 0x"+a().toString(16)+" bytes");return 0|e}function b(e){return+e!=e&&(e=0),s.alloc(+e)}function S(e,t){if(s.isBuffer(e))return e.length;if("undefined"!=typeof ArrayBuffer&&"function"==typeof ArrayBuffer.isView&&(ArrayBuffer.isView(e)||e instanceof ArrayBuffer))return e.byteLength;"string"!=typeof e&&(e=""+e);var r=e.length;if(0===r)return 0;for(var a=!1;;)switch(t){case"ascii":case"latin1":case"binary":return r;case"utf8":case"utf-8":case void 0:return K(e).length;case"ucs2":case"ucs-2":case"utf16le":case"utf-16le":return 2*r;case"hex":return r>>>1;case"base64":return H(e).length;default:if(a)return K(e).length;t=(""+t).toLowerCase(),a=!0}}function g(e,t,r){var a=!1;if((void 0===t||t<0)&&(t=0),t>this.length)return"";if((void 0===r||r>this.length)&&(r=this.length),r<=0)return"";if(r>>>=0,t>>>=0,r<=t)return"";for(e||(e="utf8");;)switch(e){case"hex":return E(this,t,r);case"utf8":case"utf-8":return v(this,t,r);case"ascii":return x(this,t,r);case"latin1":case"binary":return q(this,t,r);case"base64":return D(this,t,r);case"ucs2":case"ucs-2":case"utf16le":case"utf-16le":return M(this,t,r);default:if(a)throw new TypeError("Unknown encoding: "+e);e=(e+"").toLowerCase(),a=!0}}function h(e,t,r){var a=e[t];e[t]=e[r],e[r]=a}function I(e,t,r,a,i){if(0===e.length)return-1;if("string"==typeof r?(a=r,r=0):r>2147483647?r=2147483647:r<-2147483648&&(r=-2147483648),r=+r,isNaN(r)&&(r=i?0:e.length-1),r<0&&(r=e.length+r),r>=e.length){if(i)return-1;r=e.length-1}else if(r<0){if(!i)return-1;r=0}if("string"==typeof t&&(t=s.from(t,a)),s.isBuffer(t))return 0===t.length?-1:N(e,t,r,a,i);if("number"==typeof t)return t&=255,s.TYPED_ARRAY_SUPPORT&&"function"==typeof Uint8Array.prototype.indexOf?i?Uint8Array.prototype.indexOf.call(e,t,r):Uint8Array.prototype.lastIndexOf.call(e,t,r):N(e,[t],r,a,i);throw new TypeError("val must be string, number or Buffer")}function N(e,t,r,a,i){function s(e,t){return 1===o?e[t]:e.readUInt16BE(t*o)}var o=1,n=e.length,u=t.length;if(void 0!==a&&("ucs2"===(a=String(a).toLowerCase())||"ucs-2"===a||"utf16le"===a||"utf-16le"===a)){if(e.length<2||t.length<2)return-1;o=2,n/=2,u/=2,r/=2}var p;if(i){var m=-1;for(p=r;p>>8*(a?i:1-i)}function B(e,t,r,a){t<0&&(t=4294967295+t+1);for(var i=0,s=Math.min(e.length-r,4);i>>8*(a?i:3-i)&255}function U(e,t,r,a,i,s){if(r+a>e.length)throw new RangeError("Index out of range");if(r<0)throw new RangeError("Index out of range")}function _(e,t,r,a,i){return i||U(e,t,r,4,3.4028234663852886e38,-3.4028234663852886e38),X.write(e,t,r,a,23,4),r+4}function F(e,t,r,a,i){return i||U(e,t,r,8,1.7976931348623157e308,-1.7976931348623157e308),X.write(e,t,r,a,52,8),r+8}function O(e){if(e=V(e).replace(ee,""),e.length<2)return"";for(;e.length%4!=0;)e+="=";return e}function V(e){return e.trim?e.trim():e.replace(/^\s+|\s+$/g,"")}function z(e){return e<16?"0"+e.toString(16):e.toString(16)}function K(e,t){t=t||1/0;for(var r,a=e.length,i=null,s=[],o=0;o55295&&r<57344){if(!i){if(r>56319){(t-=3)>-1&&s.push(239,191,189);continue}if(o+1===a){(t-=3)>-1&&s.push(239,191,189);continue}i=r;continue}if(r<56320){(t-=3)>-1&&s.push(239,191,189),i=r;continue}r=65536+(i-55296<<10|r-56320)}else i&&(t-=3)>-1&&s.push(239,191,189);if(i=null,r<128){if((t-=1)<0)break;s.push(r)}else if(r<2048){if((t-=2)<0)break;s.push(r>>6|192,63&r|128)}else if(r<65536){if((t-=3)<0)break;s.push(r>>12|224,r>>6&63|128,63&r|128)}else{if(!(r<1114112))throw new Error("Invalid code point");if((t-=4)<0)break;s.push(r>>18|240,r>>12&63|128,r>>6&63|128,63&r|128)}}return s}function j(e){for(var t=[],r=0;r