diff --git a/.changes/2.1349.0.json b/.changes/2.1349.0.json new file mode 100644 index 0000000000..dc529c5559 --- /dev/null +++ b/.changes/2.1349.0.json @@ -0,0 +1,32 @@ +[ + { + "type": "feature", + "category": "Glue", + "description": "Add support for database-level federation" + }, + { + "type": "feature", + "category": "LakeFormation", + "description": "Add support for database-level federation" + }, + { + "type": "feature", + "category": "LicenseManager", + "description": "This release adds grant override options to the CreateGrantVersion API. These options can be used to specify grant replacement behavior during grant activation." + }, + { + "type": "feature", + "category": "MWAA", + "description": "This Amazon MWAA release adds the ability to customize the Apache Airflow environment by launching a shell script at startup. This shell script is hosted in your environment's Amazon S3 bucket. Amazon MWAA runs the script before installing requirements and initializing the Apache Airflow process." + }, + { + "type": "feature", + "category": "ServiceCatalog", + "description": "This release introduces Service Catalog support for Terraform open source. It enables 1. The notify* APIs to Service Catalog. These APIs are used by the terraform engine to notify the result of the provisioning engine execution. 2. Adds a new TERRAFORM_OPEN_SOURCE product type in CreateProduct API." + }, + { + "type": "feature", + "category": "WAFV2", + "description": "For web ACLs that protect CloudFront protections, the default request body inspection size is now 16 KB, and you can use the new association configuration to increase the inspection size further, up to 64 KB. Sizes over 16 KB can incur additional costs." + } +] \ No newline at end of file diff --git a/CHANGELOG.md b/CHANGELOG.md index ee58c892e3..31004af10d 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,7 +1,15 @@ # Changelog for AWS SDK for JavaScript - + +## 2.1349.0 +* feature: Glue: Add support for database-level federation +* feature: LakeFormation: Add support for database-level federation +* feature: LicenseManager: This release adds grant override options to the CreateGrantVersion API. These options can be used to specify grant replacement behavior during grant activation. +* feature: MWAA: This Amazon MWAA release adds the ability to customize the Apache Airflow environment by launching a shell script at startup. This shell script is hosted in your environment's Amazon S3 bucket. Amazon MWAA runs the script before installing requirements and initializing the Apache Airflow process. +* feature: ServiceCatalog: This release introduces Service Catalog support for Terraform open source. It enables 1. The notify* APIs to Service Catalog. These APIs are used by the terraform engine to notify the result of the provisioning engine execution. 2. Adds a new TERRAFORM_OPEN_SOURCE product type in CreateProduct API. +* feature: WAFV2: For web ACLs that protect CloudFront protections, the default request body inspection size is now 16 KB, and you can use the new association configuration to increase the inspection size further, up to 64 KB. Sizes over 16 KB can incur additional costs. + ## 2.1348.0 * feature: InternetMonitor: This release adds a new feature for Amazon CloudWatch Internet Monitor that enables customers to deliver internet measurements to Amazon S3 buckets as well as CloudWatch Logs. * feature: SMS: Deprecating AWS Server Migration Service. diff --git a/README.md b/README.md index b1de1ec751..24d02c2720 100644 --- a/README.md +++ b/README.md @@ -70,7 +70,7 @@ require('aws-sdk/lib/maintenance_mode_message').suppress = true; To use the SDK in the browser, simply add the following script tag to your HTML pages: - + You can also build a custom browser SDK with your specified set of AWS services. This can allow you to reduce the SDK's size, specify different API versions of diff --git a/apis/glue-2017-03-31.min.json b/apis/glue-2017-03-31.min.json index dec0de90c1..1c2a03b82a 100644 --- a/apis/glue-2017-03-31.min.json +++ b/apis/glue-2017-03-31.min.json @@ -1019,10 +1019,10 @@ "Name": {}, "Description": {}, "InputRecordTables": { - "shape": "Sd5" + "shape": "Sd7" }, "Parameters": { - "shape": "Sd6" + "shape": "Sd8" }, "Role": {}, "GlueVersion": {}, @@ -1043,7 +1043,7 @@ "shape": "Sbo" }, "TransformEncryption": { - "shape": "Sda" + "shape": "Sdc" } } }, @@ -1089,7 +1089,7 @@ "DatabaseName": {}, "TableName": {}, "PartitionIndex": { - "shape": "Sdh" + "shape": "Sdj" } } }, @@ -1133,7 +1133,7 @@ ], "members": { "RegistryId": { - "shape": "Sdn" + "shape": "Sdp" }, "SchemaName": {}, "DataFormat": {}, @@ -1178,10 +1178,10 @@ "type": "structure", "members": { "DagNodes": { - "shape": "Sdu" + "shape": "Sdw" }, "DagEdges": { - "shape": "Se2" + "shape": "Se4" }, "Language": {} } @@ -1204,7 +1204,7 @@ "members": { "Name": {}, "EncryptionConfiguration": { - "shape": "Se9" + "shape": "Seb" } } }, @@ -1231,7 +1231,7 @@ "Description": {}, "Role": {}, "Command": { - "shape": "Sel" + "shape": "Sen" }, "Timeout": { "type": "integer" @@ -1240,7 +1240,7 @@ "type": "integer" }, "DefaultArguments": { - "shape": "Sem" + "shape": "Seo" }, "Connections": { "shape": "S4u" @@ -1264,7 +1264,7 @@ "type": "structure", "members": { "Session": { - "shape": "Sep" + "shape": "Ser" } } } @@ -1280,12 +1280,12 @@ "CatalogId": {}, "DatabaseName": {}, "TableInput": { - "shape": "Set" + "shape": "Sev" }, "PartitionIndexes": { "type": "list", "member": { - "shape": "Sdh" + "shape": "Sdj" } }, "TransactionId": {} @@ -1345,7 +1345,7 @@ "CatalogId": {}, "DatabaseName": {}, "FunctionInput": { - "shape": "Sf3" + "shape": "Sf5" } } }, @@ -1635,7 +1635,7 @@ ], "members": { "RegistryId": { - "shape": "Sdn" + "shape": "Sdp" } } }, @@ -1885,7 +1885,7 @@ "type": "structure", "members": { "BlueprintRun": { - "shape": "Sh0" + "shape": "Sh2" } } } @@ -1910,7 +1910,7 @@ "BlueprintRuns": { "type": "list", "member": { - "shape": "Sh0" + "shape": "Sh2" } }, "NextToken": {} @@ -1956,7 +1956,7 @@ "type": "structure", "members": { "Classifier": { - "shape": "She" + "shape": "Shg" } } } @@ -1977,7 +1977,7 @@ "Classifiers": { "type": "list", "member": { - "shape": "She" + "shape": "Shg" } }, "NextToken": {} @@ -2001,7 +2001,7 @@ "shape": "S6" }, "ColumnNames": { - "shape": "Sho" + "shape": "Shq" } } }, @@ -2009,10 +2009,10 @@ "type": "structure", "members": { "ColumnStatisticsList": { - "shape": "Shq" + "shape": "Shs" }, "Errors": { - "shape": "Si8" + "shape": "Sia" } } } @@ -2030,7 +2030,7 @@ "DatabaseName": {}, "TableName": {}, "ColumnNames": { - "shape": "Sho" + "shape": "Shq" } } }, @@ -2038,10 +2038,10 @@ "type": "structure", "members": { "ColumnStatisticsList": { - "shape": "Shq" + "shape": "Shs" }, "Errors": { - "shape": "Si8" + "shape": "Sia" } } } @@ -2064,7 +2064,7 @@ "type": "structure", "members": { "Connection": { - "shape": "Sie" + "shape": "Sig" } } } @@ -2098,7 +2098,7 @@ "ConnectionList": { "type": "list", "member": { - "shape": "Sie" + "shape": "Sig" } }, "NextToken": {} @@ -2226,7 +2226,7 @@ "type": "structure", "members": { "DataCatalogEncryptionSettings": { - "shape": "Siv" + "shape": "Six" } } } @@ -2365,7 +2365,7 @@ "type": "integer" }, "AdditionalRunOptions": { - "shape": "Sj7" + "shape": "Sj9" }, "Status": {}, "ErrorString": {}, @@ -2382,7 +2382,7 @@ "type": "integer" }, "RulesetNames": { - "shape": "Sj8" + "shape": "Sja" }, "ResultIds": { "type": "list", @@ -2406,7 +2406,7 @@ "type": "structure", "members": { "Database": { - "shape": "Sjc" + "shape": "Sje" } } } @@ -2432,7 +2432,7 @@ "DatabaseList": { "type": "list", "member": { - "shape": "Sjc" + "shape": "Sje" } }, "NextToken": {} @@ -2450,10 +2450,10 @@ "type": "structure", "members": { "DagNodes": { - "shape": "Sdu" + "shape": "Sdw" }, "DagEdges": { - "shape": "Se2" + "shape": "Se4" } } } @@ -2531,7 +2531,7 @@ "type": "structure", "members": { "JobBookmarkEntry": { - "shape": "Sju" + "shape": "Sjw" } } } @@ -2624,7 +2624,7 @@ "Status": {}, "LogGroupName": {}, "Properties": { - "shape": "Sk4" + "shape": "Sk6" }, "ErrorString": {}, "StartedOn": { @@ -2693,7 +2693,7 @@ "Status": {}, "LogGroupName": {}, "Properties": { - "shape": "Sk4" + "shape": "Sk6" }, "ErrorString": {}, "StartedOn": { @@ -2739,19 +2739,19 @@ "type": "timestamp" }, "InputRecordTables": { - "shape": "Sd5" + "shape": "Sd7" }, "Parameters": { - "shape": "Sd6" + "shape": "Sd8" }, "EvaluationMetrics": { - "shape": "Skn" + "shape": "Skp" }, "LabelCount": { "type": "integer" }, "Schema": { - "shape": "Sku" + "shape": "Skw" }, "Role": {}, "GlueVersion": {}, @@ -2769,7 +2769,7 @@ "type": "integer" }, "TransformEncryption": { - "shape": "Sda" + "shape": "Sdc" } } } @@ -2783,10 +2783,10 @@ "type": "integer" }, "Filter": { - "shape": "Skx" + "shape": "Skz" }, "Sort": { - "shape": "Sky" + "shape": "Sl0" } } }, @@ -2812,19 +2812,19 @@ "type": "timestamp" }, "InputRecordTables": { - "shape": "Sd5" + "shape": "Sd7" }, "Parameters": { - "shape": "Sd6" + "shape": "Sd8" }, "EvaluationMetrics": { - "shape": "Skn" + "shape": "Skp" }, "LabelCount": { "type": "integer" }, "Schema": { - "shape": "Sku" + "shape": "Skw" }, "Role": {}, "GlueVersion": {}, @@ -2842,7 +2842,7 @@ "type": "integer" }, "TransformEncryption": { - "shape": "Sda" + "shape": "Sdc" } } } @@ -2859,13 +2859,13 @@ ], "members": { "Source": { - "shape": "Sl4" + "shape": "Sl6" }, "Sinks": { - "shape": "Sl5" + "shape": "Sl7" }, "Location": { - "shape": "Sl6" + "shape": "Sl8" } } }, @@ -2876,7 +2876,7 @@ ], "members": { "Mapping": { - "shape": "Sl8" + "shape": "Sla" } } } @@ -2986,7 +2986,7 @@ "Expression": {}, "NextToken": {}, "Segment": { - "shape": "Sls" + "shape": "Slu" }, "MaxResults": { "type": "integer" @@ -3019,16 +3019,16 @@ ], "members": { "Mapping": { - "shape": "Sl8" + "shape": "Sla" }, "Source": { - "shape": "Sl4" + "shape": "Sl6" }, "Sinks": { - "shape": "Sl5" + "shape": "Sl7" }, "Location": { - "shape": "Sl6" + "shape": "Sl8" }, "Language": {}, "AdditionalPlanOptionsMap": { @@ -3054,7 +3054,7 @@ ], "members": { "RegistryId": { - "shape": "Sdn" + "shape": "Sdp" } } }, @@ -3195,7 +3195,7 @@ }, "SchemaVersionId": {}, "SchemaVersionNumber": { - "shape": "Smf" + "shape": "Smh" } } }, @@ -3228,10 +3228,10 @@ "shape": "Sw" }, "FirstSchemaVersionNumber": { - "shape": "Smf" + "shape": "Smh" }, "SecondSchemaVersionNumber": { - "shape": "Smf" + "shape": "Smh" }, "SchemaDiffType": {} } @@ -3257,7 +3257,7 @@ "type": "structure", "members": { "SecurityConfiguration": { - "shape": "Smo" + "shape": "Smq" } } } @@ -3278,7 +3278,7 @@ "SecurityConfigurations": { "type": "list", "member": { - "shape": "Smo" + "shape": "Smq" } }, "NextToken": {} @@ -3300,7 +3300,7 @@ "type": "structure", "members": { "Session": { - "shape": "Sep" + "shape": "Ser" } } } @@ -3324,7 +3324,7 @@ "type": "structure", "members": { "Statement": { - "shape": "Smw" + "shape": "Smy" } } } @@ -3350,7 +3350,7 @@ "type": "structure", "members": { "Table": { - "shape": "Sn3" + "shape": "Sn5" } } } @@ -3373,7 +3373,7 @@ "type": "structure", "members": { "TableVersion": { - "shape": "Sn6" + "shape": "Sn9" } } } @@ -3401,7 +3401,7 @@ "TableVersions": { "type": "list", "member": { - "shape": "Sn6" + "shape": "Sn9" } }, "NextToken": {} @@ -3432,7 +3432,7 @@ "type": "structure", "members": { "TableList": { - "shape": "Snd" + "shape": "Sng" }, "NextToken": {} } @@ -3515,10 +3515,10 @@ "shape": "S6" }, "AuditContext": { - "shape": "Snl" + "shape": "Sno" }, "SupportedPermissionTypes": { - "shape": "Sno" + "shape": "Snr" } } }, @@ -3552,14 +3552,14 @@ "TableName": {}, "Expression": {}, "AuditContext": { - "shape": "Snl" + "shape": "Sno" }, "SupportedPermissionTypes": { - "shape": "Sno" + "shape": "Snr" }, "NextToken": {}, "Segment": { - "shape": "Sls" + "shape": "Slu" }, "MaxResults": { "type": "integer" @@ -3604,10 +3604,10 @@ "DatabaseName": {}, "Name": {}, "AuditContext": { - "shape": "Snl" + "shape": "Sno" }, "SupportedPermissionTypes": { - "shape": "Sno" + "shape": "Snr" } } }, @@ -3615,7 +3615,7 @@ "type": "structure", "members": { "Table": { - "shape": "Sn3" + "shape": "Sn5" }, "AuthorizedColumns": { "shape": "Sn" @@ -3653,7 +3653,7 @@ "type": "structure", "members": { "UserDefinedFunction": { - "shape": "So1" + "shape": "So4" } } } @@ -3680,7 +3680,7 @@ "UserDefinedFunctions": { "type": "list", "member": { - "shape": "So1" + "shape": "So4" } }, "NextToken": {} @@ -4192,10 +4192,10 @@ "type": "integer" }, "Filter": { - "shape": "Skx" + "shape": "Skz" }, "Sort": { - "shape": "Sky" + "shape": "Sl0" }, "Tags": { "shape": "Sbo" @@ -4290,7 +4290,7 @@ "type": "structure", "members": { "RegistryId": { - "shape": "Sdn" + "shape": "Sdp" }, "MaxResults": { "type": "integer" @@ -4344,7 +4344,7 @@ "Sessions": { "type": "list", "member": { - "shape": "Sep" + "shape": "Ser" } }, "NextToken": {} @@ -4369,7 +4369,7 @@ "Statements": { "type": "list", "member": { - "shape": "Smw" + "shape": "Smy" } }, "NextToken": {} @@ -4429,7 +4429,7 @@ "members": { "CatalogId": {}, "DataCatalogEncryptionSettings": { - "shape": "Siv" + "shape": "Six" } } }, @@ -4470,11 +4470,11 @@ "shape": "Sw" }, "SchemaVersionNumber": { - "shape": "Smf" + "shape": "Smh" }, "SchemaVersionId": {}, "MetadataKeyValue": { - "shape": "Sql" + "shape": "Sqo" } } }, @@ -4525,13 +4525,13 @@ "shape": "Sw" }, "SchemaVersionNumber": { - "shape": "Smf" + "shape": "Smh" }, "SchemaVersionId": {}, "MetadataList": { "type": "list", "member": { - "shape": "Sql" + "shape": "Sqo" } }, "MaxResults": { @@ -4605,11 +4605,11 @@ "shape": "Sw" }, "SchemaVersionNumber": { - "shape": "Smf" + "shape": "Smh" }, "SchemaVersionId": {}, "MetadataKeyValue": { - "shape": "Sql" + "shape": "Sqo" } } }, @@ -4646,7 +4646,7 @@ "type": "structure", "members": { "JobBookmarkEntry": { - "shape": "Sju" + "shape": "Sjw" } } } @@ -4663,7 +4663,7 @@ "Name": {}, "RunId": {}, "NodeIds": { - "shape": "Sr6" + "shape": "Sr9" } } }, @@ -4672,7 +4672,7 @@ "members": { "RunId": {}, "NodeIds": { - "shape": "Sr6" + "shape": "Sr9" } } } @@ -4738,7 +4738,7 @@ "members": { "NextToken": {}, "TableList": { - "shape": "Snd" + "shape": "Sng" } } } @@ -4844,10 +4844,10 @@ }, "ClientToken": {}, "AdditionalRunOptions": { - "shape": "Sj7" + "shape": "Sj9" }, "RulesetNames": { - "shape": "Sj8" + "shape": "Sja" } } }, @@ -5243,7 +5243,7 @@ "shape": "S6" }, "ColumnStatisticsList": { - "shape": "Ssv" + "shape": "Ssy" } } }, @@ -5251,7 +5251,7 @@ "type": "structure", "members": { "Errors": { - "shape": "Ssx" + "shape": "St0" } } } @@ -5269,7 +5269,7 @@ "DatabaseName": {}, "TableName": {}, "ColumnStatisticsList": { - "shape": "Ssv" + "shape": "Ssy" } } }, @@ -5277,7 +5277,7 @@ "type": "structure", "members": { "Errors": { - "shape": "Ssx" + "shape": "St0" } } } @@ -5541,7 +5541,7 @@ "Name": {}, "Description": {}, "Parameters": { - "shape": "Sd6" + "shape": "Sd8" }, "Role": {}, "GlueVersion": {}, @@ -5602,7 +5602,7 @@ ], "members": { "RegistryId": { - "shape": "Sdn" + "shape": "Sdp" }, "Description": {} } @@ -5626,7 +5626,7 @@ "shape": "Sw" }, "SchemaVersionNumber": { - "shape": "Smf" + "shape": "Smh" }, "Compatibility": {}, "Description": {} @@ -5674,7 +5674,7 @@ "CatalogId": {}, "DatabaseName": {}, "TableInput": { - "shape": "Set" + "shape": "Sev" }, "SkipArchive": { "type": "boolean" @@ -5738,7 +5738,7 @@ "DatabaseName": {}, "FunctionName": {}, "FunctionInput": { - "shape": "Sf3" + "shape": "Sf5" } } }, @@ -8594,6 +8594,9 @@ }, "TargetDatabase": { "shape": "Scy" + }, + "FederatedDatabase": { + "shape": "Scz" } } }, @@ -8622,13 +8625,20 @@ "DatabaseName": {} } }, - "Sd5": { + "Scz": { + "type": "structure", + "members": { + "Identifier": {}, + "ConnectionName": {} + } + }, + "Sd7": { "type": "list", "member": { "shape": "S40" } }, - "Sd6": { + "Sd8": { "type": "structure", "required": [ "TransformType" @@ -8652,7 +8662,7 @@ } } }, - "Sda": { + "Sdc": { "type": "structure", "members": { "MlUserDataEncryption": { @@ -8668,7 +8678,7 @@ "TaskRunSecurityConfigurationName": {} } }, - "Sdh": { + "Sdj": { "type": "structure", "required": [ "Keys", @@ -8682,14 +8692,14 @@ "IndexName": {} } }, - "Sdn": { + "Sdp": { "type": "structure", "members": { "RegistryName": {}, "RegistryArn": {} } }, - "Sdu": { + "Sdw": { "type": "list", "member": { "type": "structure", @@ -8702,7 +8712,7 @@ "Id": {}, "NodeType": {}, "Args": { - "shape": "Sdy" + "shape": "Se0" }, "LineNumber": { "type": "integer" @@ -8710,7 +8720,7 @@ } } }, - "Sdy": { + "Se0": { "type": "list", "member": { "type": "structure", @@ -8727,7 +8737,7 @@ } } }, - "Se2": { + "Se4": { "type": "list", "member": { "type": "structure", @@ -8742,7 +8752,7 @@ } } }, - "Se9": { + "Seb": { "type": "structure", "members": { "S3Encryption": { @@ -8771,19 +8781,19 @@ } } }, - "Sel": { + "Sen": { "type": "structure", "members": { "Name": {}, "PythonVersion": {} } }, - "Sem": { + "Seo": { "type": "map", "key": {}, "value": {} }, - "Sep": { + "Ser": { "type": "structure", "members": { "Id": {}, @@ -8795,10 +8805,10 @@ "Description": {}, "Role": {}, "Command": { - "shape": "Sel" + "shape": "Sen" }, "DefaultArguments": { - "shape": "Sem" + "shape": "Seo" }, "Connections": { "shape": "S4u" @@ -8813,7 +8823,7 @@ "GlueVersion": {} } }, - "Set": { + "Sev": { "type": "structure", "required": [ "Name" @@ -8844,11 +8854,11 @@ "shape": "Se" }, "TargetTable": { - "shape": "Sex" + "shape": "Sez" } } }, - "Sex": { + "Sez": { "type": "structure", "members": { "CatalogId": {}, @@ -8856,7 +8866,7 @@ "Name": {} } }, - "Sf3": { + "Sf5": { "type": "structure", "members": { "FunctionName": {}, @@ -8864,11 +8874,11 @@ "OwnerName": {}, "OwnerType": {}, "ResourceUris": { - "shape": "Sf5" + "shape": "Sf7" } } }, - "Sf5": { + "Sf7": { "type": "list", "member": { "type": "structure", @@ -8878,7 +8888,7 @@ } } }, - "Sh0": { + "Sh2": { "type": "structure", "members": { "BlueprintName": {}, @@ -8897,7 +8907,7 @@ "RoleArn": {} } }, - "She": { + "Shg": { "type": "structure", "members": { "GrokClassifier": { @@ -9002,17 +9012,17 @@ } } }, - "Sho": { + "Shq": { "type": "list", "member": {} }, - "Shq": { + "Shs": { "type": "list", "member": { - "shape": "Shr" + "shape": "Sht" } }, - "Shr": { + "Sht": { "type": "structure", "required": [ "ColumnName", @@ -9081,10 +9091,10 @@ ], "members": { "MinimumValue": { - "shape": "Shz" + "shape": "Si1" }, "MaximumValue": { - "shape": "Shz" + "shape": "Si1" }, "NumberOfNulls": { "type": "long" @@ -9182,7 +9192,7 @@ } } }, - "Shz": { + "Si1": { "type": "structure", "required": [ "UnscaledValue", @@ -9197,7 +9207,7 @@ } } }, - "Si8": { + "Sia": { "type": "list", "member": { "type": "structure", @@ -9209,7 +9219,7 @@ } } }, - "Sie": { + "Sig": { "type": "structure", "members": { "Name": {}, @@ -9233,7 +9243,7 @@ "LastUpdatedBy": {} } }, - "Siv": { + "Six": { "type": "structure", "members": { "EncryptionAtRest": { @@ -9260,7 +9270,7 @@ } } }, - "Sj7": { + "Sj9": { "type": "structure", "members": { "CloudWatchMetricsEnabled": { @@ -9269,11 +9279,11 @@ "ResultsS3Prefix": {} } }, - "Sj8": { + "Sja": { "type": "list", "member": {} }, - "Sjc": { + "Sje": { "type": "structure", "required": [ "Name" @@ -9294,10 +9304,13 @@ "TargetDatabase": { "shape": "Scy" }, - "CatalogId": {} + "CatalogId": {}, + "FederatedDatabase": { + "shape": "Scz" + } } }, - "Sju": { + "Sjw": { "type": "structure", "members": { "JobName": {}, @@ -9315,7 +9328,7 @@ "JobBookmark": {} } }, - "Sk4": { + "Sk6": { "type": "structure", "members": { "TaskType": {}, @@ -9350,7 +9363,7 @@ } } }, - "Skn": { + "Skp": { "type": "structure", "required": [ "TransformType" @@ -9405,7 +9418,7 @@ } } }, - "Sku": { + "Skw": { "type": "list", "member": { "type": "structure", @@ -9415,7 +9428,7 @@ } } }, - "Skx": { + "Skz": { "type": "structure", "members": { "Name": {}, @@ -9435,11 +9448,11 @@ "type": "timestamp" }, "Schema": { - "shape": "Sku" + "shape": "Skw" } } }, - "Sky": { + "Sl0": { "type": "structure", "required": [ "Column", @@ -9450,7 +9463,7 @@ "SortDirection": {} } }, - "Sl4": { + "Sl6": { "type": "structure", "required": [ "DatabaseName", @@ -9461,27 +9474,27 @@ "TableName": {} } }, - "Sl5": { + "Sl7": { "type": "list", "member": { - "shape": "Sl4" + "shape": "Sl6" } }, - "Sl6": { + "Sl8": { "type": "structure", "members": { "Jdbc": { - "shape": "Sdy" + "shape": "Se0" }, "S3": { - "shape": "Sdy" + "shape": "Se0" }, "DynamoDB": { - "shape": "Sdy" + "shape": "Se0" } } }, - "Sl8": { + "Sla": { "type": "list", "member": { "type": "structure", @@ -9495,7 +9508,7 @@ } } }, - "Sls": { + "Slu": { "type": "structure", "required": [ "SegmentNumber", @@ -9510,7 +9523,7 @@ } } }, - "Smf": { + "Smh": { "type": "structure", "members": { "LatestVersion": { @@ -9521,7 +9534,7 @@ } } }, - "Smo": { + "Smq": { "type": "structure", "members": { "Name": {}, @@ -9529,11 +9542,11 @@ "type": "timestamp" }, "EncryptionConfiguration": { - "shape": "Se9" + "shape": "Seb" } } }, - "Smw": { + "Smy": { "type": "structure", "members": { "Id": { @@ -9572,7 +9585,7 @@ } } }, - "Sn3": { + "Sn5": { "type": "structure", "required": [ "Name" @@ -9614,28 +9627,36 @@ "type": "boolean" }, "TargetTable": { - "shape": "Sex" + "shape": "Sez" }, "CatalogId": {}, - "VersionId": {} + "VersionId": {}, + "FederatedTable": { + "type": "structure", + "members": { + "Identifier": {}, + "DatabaseIdentifier": {}, + "ConnectionName": {} + } + } } }, - "Sn6": { + "Sn9": { "type": "structure", "members": { "Table": { - "shape": "Sn3" + "shape": "Sn5" }, "VersionId": {} } }, - "Snd": { + "Sng": { "type": "list", "member": { - "shape": "Sn3" + "shape": "Sn5" } }, - "Snl": { + "Sno": { "type": "structure", "members": { "AdditionalAuditContext": {}, @@ -9648,11 +9669,11 @@ } } }, - "Sno": { + "Snr": { "type": "list", "member": {} }, - "So1": { + "So4": { "type": "structure", "members": { "FunctionName": {}, @@ -9664,35 +9685,35 @@ "type": "timestamp" }, "ResourceUris": { - "shape": "Sf5" + "shape": "Sf7" }, "CatalogId": {} } }, - "Sql": { + "Sqo": { "type": "structure", "members": { "MetadataKey": {}, "MetadataValue": {} } }, - "Sr6": { + "Sr9": { "type": "list", "member": {} }, - "Ssv": { + "Ssy": { "type": "list", "member": { - "shape": "Shr" + "shape": "Sht" } }, - "Ssx": { + "St0": { "type": "list", "member": { "type": "structure", "members": { "ColumnStatistics": { - "shape": "Shr" + "shape": "Sht" }, "Error": { "shape": "S14" diff --git a/apis/glue-2017-03-31.normal.json b/apis/glue-2017-03-31.normal.json index 67c1fa322a..5cc3c25897 100644 --- a/apis/glue-2017-03-31.normal.json +++ b/apis/glue-2017-03-31.normal.json @@ -341,6 +341,12 @@ }, { "shape": "InvalidStateException" + }, + { + "shape": "FederationSourceException" + }, + { + "shape": "FederationSourceRetryableException" } ], "documentation": "
Retrieves partitions in a batch request.
" @@ -811,6 +817,9 @@ }, { "shape": "ConcurrentModificationException" + }, + { + "shape": "FederatedResourceAlreadyExistsException" } ], "documentation": "Creates a new database in a Data Catalog.
" @@ -2556,6 +2565,9 @@ }, { "shape": "GlueEncryptionException" + }, + { + "shape": "FederationSourceException" } ], "documentation": "Retrieves the definition of a specified database.
" @@ -2979,6 +2991,12 @@ }, { "shape": "GlueEncryptionException" + }, + { + "shape": "FederationSourceException" + }, + { + "shape": "FederationSourceRetryableException" } ], "documentation": "Retrieves information about a specified partition.
" @@ -3047,6 +3065,12 @@ }, { "shape": "ResourceNotReadyException" + }, + { + "shape": "FederationSourceException" + }, + { + "shape": "FederationSourceRetryableException" } ], "documentation": "Retrieves information about the partitions in a table.
" @@ -3423,6 +3447,12 @@ }, { "shape": "ResourceNotReadyException" + }, + { + "shape": "FederationSourceException" + }, + { + "shape": "FederationSourceRetryableException" } ], "documentation": "Retrieves the Table
definition in a Data Catalog for a specified table.
Retrieves the definitions of some or all of the tables in a given Database
.
Retrieves partition metadata from the Data Catalog that contains unfiltered metadata.
For IAM authorization, the public IAM action associated with this API is glue:GetPartition
.
Retrieves partition metadata from the Data Catalog that contains unfiltered metadata.
For IAM authorization, the public IAM action associated with this API is glue:GetPartitions
.
Retrieves table metadata from the Data Catalog that contains unfiltered metadata.
For IAM authorization, the public IAM action associated with this API is glue:GetTable
.
The context for the audit..
" + "documentation": "A string containing the additional audit context information.
" }, "RequestedColumns": { "shape": "AuditColumnNamesList", @@ -6204,7 +6258,7 @@ "documentation": "All columns request for audit.
" } }, - "documentation": "A structure containing information for audit.
" + "documentation": "A structure containing the Lake Formation audit context.
" }, "AuditContextString": { "type": "string", @@ -8135,7 +8189,7 @@ }, "DecimalColumnStatisticsData": { "shape": "DecimalColumnStatisticsData", - "documentation": "Decimal column statistics data.
" + "documentation": "Decimal column statistics data. UnscaledValues within are Base64-encoded binary objects storing big-endian, two's complement representations of the decimal's unscaled value.
" }, "DoubleColumnStatisticsData": { "shape": "DoubleColumnStatisticsData", @@ -9785,11 +9839,11 @@ }, "Timeout": { "shape": "Timeout", - "documentation": "The number of seconds before request times out.
" + "documentation": "The number of minutes before session times out. Default for Spark ETL jobs is 48 hours (2880 minutes), the maximum session lifetime for this job type. Consult the documentation for other job types.
" }, "IdleTimeout": { "shape": "Timeout", - "documentation": "The number of seconds when idle before request times out.
" + "documentation": "The number of minutes when idle before session times out. Default for Spark ETL jobs is value of Timeout. Consult the documentation for other job types.
" }, "DefaultArguments": { "shape": "OrchestrationArgumentsMap", @@ -10712,6 +10766,10 @@ "CatalogId": { "shape": "CatalogIdString", "documentation": "The ID of the Data Catalog in which the database resides.
" + }, + "FederatedDatabase": { + "shape": "FederatedDatabase", + "documentation": "A FederatedDatabase
structure that references an entity outside the Glue Data Catalog.
The Database
object represents a logical grouping of tables that might reside in a Hive metastore or an RDBMS.
A DatabaseIdentifier
structure that describes a target database for resource linking.
A FederatedDatabase
structure that references an entity outside the Glue Data Catalog.
The structure used to create or update a database.
" @@ -12205,6 +12267,44 @@ "type": "string", "pattern": "[\\s\\S]*" }, + "FederatedDatabase": { + "type": "structure", + "members": { + "Identifier": { + "shape": "FederationIdentifier", + "documentation": "A unique identifier for the federated database.
" + }, + "ConnectionName": { + "shape": "NameString", + "documentation": "The name of the connection to the external metastore.
" + } + }, + "documentation": "A database that points to an entity outside the Glue Data Catalog.
" + }, + "FederatedTable": { + "type": "structure", + "members": { + "Identifier": { + "shape": "FederationIdentifier", + "documentation": "A unique identifier for the federated table.
" + }, + "DatabaseIdentifier": { + "shape": "FederationIdentifier", + "documentation": "A unique identifier for the federated database.
" + }, + "ConnectionName": { + "shape": "NameString", + "documentation": "The name of the connection to the external metastore.
" + } + }, + "documentation": "A table that points to an entity outside the Glue Data Catalog.
" + }, + "FederationIdentifier": { + "type": "string", + "max": 512, + "min": 1, + "pattern": "[\\u0020-\\uD7FF\\uE000-\\uFFFD\\uD800\\uDC00-\\uDBFF\\uDFFF\\t]*" + }, "FieldName": { "type": "string", "enum": [ @@ -12706,7 +12806,7 @@ "members": { "ColumnStatisticsList": { "shape": "ColumnStatisticsList", - "documentation": "List of ColumnStatistics that failed to be retrieved.
" + "documentation": "List of ColumnStatistics.
" }, "Errors": { "shape": "ColumnErrors", @@ -13209,7 +13309,7 @@ }, "ResourceShareType": { "shape": "ResourceShareType", - "documentation": "Allows you to specify that you want to list the databases shared with your account. The allowable values are FOREIGN
or ALL
.
If set to FOREIGN
, will list the databases shared with your account.
If set to ALL
, will list the databases shared with your account, as well as the databases in yor local account.
Allows you to specify that you want to list the databases shared with your account. The allowable values are FEDERATED
, FOREIGN
or ALL
.
If set to FEDERATED
, will list the federated databases (referencing an external entity) shared with your account.
If set to FOREIGN
, will list the databases shared with your account.
If set to ALL
, will list the databases shared with your account, as well as the databases in yor local account.
For Glue version 1.0 or earlier jobs, using the standard worker type, the number of Glue data processing units (DPUs) that can be allocated when this job runs. A DPU is a relative measure of processing power that consists of 4 vCPUs of compute capacity and 16 GB of memory. For more information, see the Glue pricing page.
Do not set Max Capacity
if using WorkerType
and NumberOfWorkers
.
The value that can be allocated for MaxCapacity
depends on whether you are running a Python shell job, an Apache Spark ETL job, or an Apache Spark streaming ETL job:
When you specify a Python shell job (JobCommand.Name
=\"pythonshell\"), you can allocate either 0.0625 or 1 DPU. The default is 0.0625 DPU.
When you specify an Apache Spark ETL job (JobCommand.Name
=\"glueetl\") or Apache Spark streaming ETL job (JobCommand.Name
=\"gluestreaming\"), you can allocate a minimum of 2 DPUs. The default is 10 DPUs. This job type cannot have a fractional DPU allocation.
For Glue version 2.0 jobs, you cannot instead specify a Maximum capacity
. Instead, you should specify a Worker type
and the Number of workers
.
For Glue version 1.0 or earlier jobs, using the standard worker type, the number of Glue data processing units (DPUs) that can be allocated when this job runs. A DPU is a relative measure of processing power that consists of 4 vCPUs of compute capacity and 16 GB of memory. For more information, see the Glue pricing page.
Do not set Max Capacity
if using WorkerType
and NumberOfWorkers
.
The value that can be allocated for MaxCapacity
depends on whether you are running a Python shell job, an Apache Spark ETL job, or an Apache Spark streaming ETL job:
When you specify a Python shell job (JobCommand.Name
=\"pythonshell\"), you can allocate either 0.0625 or 1 DPU. The default is 0.0625 DPU.
When you specify an Apache Spark ETL job (JobCommand.Name
=\"glueetl\") or Apache Spark streaming ETL job (JobCommand.Name
=\"gluestreaming\"), you can allocate from 2 to 100 DPUs. The default is 10 DPUs. This job type cannot have a fractional DPU allocation.
For Glue version 2.0 jobs, you cannot instead specify a Maximum capacity
. Instead, you should specify a Worker type
and the Number of workers
.
The ID of the table version.
" + }, + "FederatedTable": { + "shape": "FederatedTable", + "documentation": "A FederatedTable
structure that references an entity outside the Glue Data Catalog.
Represents a collection of related data organized in columns and rows.
" diff --git a/apis/lakeformation-2017-03-31.min.json b/apis/lakeformation-2017-03-31.min.json index e84d74fd6d..086ad8fd9e 100644 --- a/apis/lakeformation-2017-03-31.min.json +++ b/apis/lakeformation-2017-03-31.min.json @@ -335,7 +335,7 @@ "type": "structure", "members": { "TransactionDescription": { - "shape": "S2e" + "shape": "S2f" } } } @@ -397,7 +397,7 @@ "type": "structure", "members": { "DataLakeSettings": { - "shape": "S2m" + "shape": "S2n" } } } @@ -1032,7 +1032,7 @@ "Transactions": { "type": "list", "member": { - "shape": "S2e" + "shape": "S2f" } }, "NextToken": {} @@ -1051,7 +1051,7 @@ "members": { "CatalogId": {}, "DataLakeSettings": { - "shape": "S2m" + "shape": "S2n" } } }, @@ -1074,7 +1074,10 @@ "UseServiceLinkedRole": { "type": "boolean" }, - "RoleArn": {} + "RoleArn": {}, + "WithFederation": { + "type": "boolean" + } } }, "output": { @@ -1355,7 +1358,10 @@ ], "members": { "RoleArn": {}, - "ResourceArn": {} + "ResourceArn": {}, + "WithFederation": { + "type": "boolean" + } } }, "output": { @@ -1726,10 +1732,13 @@ "RoleArn": {}, "LastModified": { "type": "timestamp" + }, + "WithFederation": { + "type": "boolean" } } }, - "S2e": { + "S2f": { "type": "structure", "members": { "TransactionId": {}, @@ -1742,17 +1751,17 @@ } } }, - "S2m": { + "S2n": { "type": "structure", "members": { "DataLakeAdmins": { - "shape": "S2n" + "shape": "S2o" }, "CreateDatabaseDefaultPermissions": { - "shape": "S2o" + "shape": "S2p" }, "CreateTableDefaultPermissions": { - "shape": "S2o" + "shape": "S2p" }, "Parameters": { "type": "map", @@ -1767,7 +1776,7 @@ "type": "boolean" }, "ExternalDataFilteringAllowList": { - "shape": "S2n" + "shape": "S2o" }, "AuthorizedSessionTagValueList": { "type": "list", @@ -1775,13 +1784,13 @@ } } }, - "S2n": { + "S2o": { "type": "list", "member": { "shape": "S18" } }, - "S2o": { + "S2p": { "type": "list", "member": { "type": "structure", diff --git a/apis/lakeformation-2017-03-31.normal.json b/apis/lakeformation-2017-03-31.normal.json index ef49fd7350..7e06cedfd5 100644 --- a/apis/lakeformation-2017-03-31.normal.json +++ b/apis/lakeformation-2017-03-31.normal.json @@ -3519,6 +3519,10 @@ "RoleArn": { "shape": "IAMRoleArn", "documentation": "The identifier for the role that registers the resource.
" + }, + "WithFederation": { + "shape": "NullableBoolean", + "documentation": "Whether or not the resource is a federated resource.
" } } }, @@ -3611,6 +3615,10 @@ "LastModified": { "shape": "LastModifiedTimestamp", "documentation": "The date and time the resource was last modified.
" + }, + "WithFederation": { + "shape": "NullableBoolean", + "documentation": "Whether or not the resource is a federated resource.
" } }, "documentation": "A structure containing information about an Lake Formation resource.
" @@ -4193,6 +4201,10 @@ "ResourceArn": { "shape": "ResourceArnString", "documentation": "The resource ARN.
" + }, + "WithFederation": { + "shape": "NullableBoolean", + "documentation": "Whether or not the resource is a federated resource.
" } } }, diff --git a/apis/license-manager-2018-08-01.min.json b/apis/license-manager-2018-08-01.min.json index bbf3c8604d..f9a3f8b467 100644 --- a/apis/license-manager-2018-08-01.min.json +++ b/apis/license-manager-2018-08-01.min.json @@ -175,7 +175,10 @@ }, "Status": {}, "StatusReason": {}, - "SourceVersion": {} + "SourceVersion": {}, + "Options": { + "shape": "St" + } } }, "output": { @@ -207,18 +210,18 @@ "ProductName": {}, "ProductSKU": {}, "Issuer": { - "shape": "Sv" + "shape": "Sx" }, "HomeRegion": {}, "Validity": { - "shape": "Sw" + "shape": "Sy" }, "Entitlements": { - "shape": "Sx" + "shape": "Sz" }, "Beneficiary": {}, "ConsumptionConfiguration": { - "shape": "S12" + "shape": "S14" }, "LicenseMetadata": { "shape": "Sd" @@ -253,16 +256,16 @@ "type": "boolean" }, "LicenseRules": { - "shape": "S1c" + "shape": "S1e" }, "Tags": { - "shape": "S1d" + "shape": "S1f" }, "DisassociateWhenNotFound": { "type": "boolean" }, "ProductInformationList": { - "shape": "S1f" + "shape": "S1h" } } }, @@ -284,10 +287,10 @@ "members": { "ResourceArn": {}, "SourceLicenseContext": { - "shape": "S1l" + "shape": "S1n" }, "DestinationLicenseContext": { - "shape": "S1l" + "shape": "S1n" } } }, @@ -311,18 +314,18 @@ "members": { "ReportGeneratorName": {}, "Type": { - "shape": "S1r" + "shape": "S1t" }, "ReportContext": { - "shape": "S1t" + "shape": "S1v" }, "ReportFrequency": { - "shape": "S1v" + "shape": "S1x" }, "ClientToken": {}, "Description": {}, "Tags": { - "shape": "S1d" + "shape": "S1f" } } }, @@ -353,20 +356,20 @@ "LicenseName": {}, "ProductName": {}, "Issuer": { - "shape": "Sv" + "shape": "Sx" }, "HomeRegion": {}, "Validity": { - "shape": "Sw" + "shape": "Sy" }, "LicenseMetadata": { "shape": "Sd" }, "Entitlements": { - "shape": "Sx" + "shape": "Sz" }, "ConsumptionConfiguration": { - "shape": "S12" + "shape": "S14" }, "Status": {}, "ClientToken": {}, @@ -392,13 +395,13 @@ "members": { "LicenseArn": {}, "RoleArns": { - "shape": "S1u" + "shape": "S1w" }, "ExpirationInDays": { "type": "integer" }, "TokenProperties": { - "shape": "S23" + "shape": "S25" }, "ClientToken": {} } @@ -529,7 +532,7 @@ "members": { "Token": {}, "TokenProperties": { - "shape": "S23" + "shape": "S25" } } }, @@ -555,7 +558,7 @@ "type": "structure", "members": { "Grant": { - "shape": "S2p" + "shape": "S2r" } } } @@ -575,7 +578,7 @@ "type": "structure", "members": { "License": { - "shape": "S2s" + "shape": "S2u" } } } @@ -599,7 +602,7 @@ "Description": {}, "LicenseCountingType": {}, "LicenseRules": { - "shape": "S1c" + "shape": "S1e" }, "LicenseCount": { "type": "long" @@ -613,19 +616,19 @@ "Status": {}, "OwnerAccountId": {}, "ConsumedLicenseSummaryList": { - "shape": "S2w" + "shape": "S2y" }, "ManagedResourceSummaryList": { - "shape": "S2z" + "shape": "S31" }, "Tags": { - "shape": "S1d" + "shape": "S1f" }, "ProductInformationList": { - "shape": "S1f" + "shape": "S1h" }, "AutomatedDiscoveryInformation": { - "shape": "S31" + "shape": "S33" }, "DisassociateWhenNotFound": { "type": "boolean" @@ -649,10 +652,10 @@ "LicenseConversionTaskId": {}, "ResourceArn": {}, "SourceLicenseContext": { - "shape": "S1l" + "shape": "S1n" }, "DestinationLicenseContext": { - "shape": "S1l" + "shape": "S1n" }, "StatusMessage": {}, "Status": {}, @@ -682,7 +685,7 @@ "type": "structure", "members": { "ReportGenerator": { - "shape": "S38" + "shape": "S3a" } } } @@ -736,7 +739,7 @@ "S3BucketArn": {}, "SnsTopicArn": {}, "OrganizationConfiguration": { - "shape": "S3h" + "shape": "S3j" }, "EnableCrossAccountsDiscovery": { "type": "boolean" @@ -786,10 +789,10 @@ "type": "structure", "members": { "GrantArns": { - "shape": "S1u" + "shape": "S1w" }, "Filters": { - "shape": "S3n" + "shape": "S3p" }, "NextToken": {}, "MaxResults": { @@ -801,7 +804,7 @@ "type": "structure", "members": { "Grants": { - "shape": "S3u" + "shape": "S3w" }, "NextToken": {} } @@ -853,14 +856,14 @@ "type": "structure", "members": { "LicenseConfigurationArns": { - "shape": "S1c" + "shape": "S1e" }, "MaxResults": { "type": "integer" }, "NextToken": {}, "Filters": { - "shape": "S40" + "shape": "S42" } } }, @@ -878,7 +881,7 @@ "Description": {}, "LicenseCountingType": {}, "LicenseRules": { - "shape": "S1c" + "shape": "S1e" }, "LicenseCount": { "type": "long" @@ -895,16 +898,16 @@ "Status": {}, "OwnerAccountId": {}, "ConsumedLicenseSummaryList": { - "shape": "S2w" + "shape": "S2y" }, "ManagedResourceSummaryList": { - "shape": "S2z" + "shape": "S31" }, "ProductInformationList": { - "shape": "S1f" + "shape": "S1h" }, "AutomatedDiscoveryInformation": { - "shape": "S31" + "shape": "S33" } } } @@ -922,7 +925,7 @@ "type": "integer" }, "Filters": { - "shape": "S40" + "shape": "S42" } } }, @@ -937,10 +940,10 @@ "LicenseConversionTaskId": {}, "ResourceArn": {}, "SourceLicenseContext": { - "shape": "S1l" + "shape": "S1n" }, "DestinationLicenseContext": { - "shape": "S1l" + "shape": "S1n" }, "Status": {}, "StatusMessage": {}, @@ -965,7 +968,7 @@ "type": "structure", "members": { "Filters": { - "shape": "S3n" + "shape": "S3p" }, "NextToken": {}, "MaxResults": { @@ -979,7 +982,7 @@ "ReportGenerators": { "type": "list", "member": { - "shape": "S38" + "shape": "S3a" } }, "NextToken": {} @@ -1004,7 +1007,7 @@ "type": "structure", "members": { "LicenseSpecifications": { - "shape": "S4d" + "shape": "S4f" }, "NextToken": {} } @@ -1028,7 +1031,7 @@ "type": "structure", "members": { "Licenses": { - "shape": "S4h" + "shape": "S4j" }, "NextToken": {} } @@ -1039,10 +1042,10 @@ "type": "structure", "members": { "LicenseArns": { - "shape": "S1u" + "shape": "S1w" }, "Filters": { - "shape": "S3n" + "shape": "S3p" }, "NextToken": {}, "MaxResults": { @@ -1054,7 +1057,7 @@ "type": "structure", "members": { "Licenses": { - "shape": "S4h" + "shape": "S4j" }, "NextToken": {} } @@ -1065,10 +1068,10 @@ "type": "structure", "members": { "GrantArns": { - "shape": "S1u" + "shape": "S1w" }, "Filters": { - "shape": "S3n" + "shape": "S3p" }, "NextToken": {}, "MaxResults": { @@ -1080,7 +1083,7 @@ "type": "structure", "members": { "Grants": { - "shape": "S3u" + "shape": "S3w" }, "NextToken": {} } @@ -1095,7 +1098,7 @@ "members": { "LicenseArn": {}, "Filters": { - "shape": "S3n" + "shape": "S3p" }, "NextToken": {}, "MaxResults": { @@ -1107,7 +1110,7 @@ "type": "structure", "members": { "Grants": { - "shape": "S3u" + "shape": "S3w" }, "NextToken": {} } @@ -1118,10 +1121,10 @@ "type": "structure", "members": { "LicenseArns": { - "shape": "S1u" + "shape": "S1w" }, "Filters": { - "shape": "S3n" + "shape": "S3p" }, "NextToken": {}, "MaxResults": { @@ -1133,7 +1136,7 @@ "type": "structure", "members": { "Licenses": { - "shape": "S4q" + "shape": "S4s" }, "NextToken": {} } @@ -1144,7 +1147,7 @@ "type": "structure", "members": { "Filters": { - "shape": "S3n" + "shape": "S3p" }, "NextToken": {}, "MaxResults": { @@ -1156,7 +1159,7 @@ "type": "structure", "members": { "Licenses": { - "shape": "S4q" + "shape": "S4s" }, "NextToken": {} } @@ -1222,7 +1225,7 @@ "type": "structure", "members": { "Tags": { - "shape": "S1d" + "shape": "S1f" } } } @@ -1232,10 +1235,10 @@ "type": "structure", "members": { "TokenIds": { - "shape": "S1c" + "shape": "S1e" }, "Filters": { - "shape": "S3n" + "shape": "S3p" }, "NextToken": {}, "MaxResults": { @@ -1256,10 +1259,10 @@ "LicenseArn": {}, "ExpirationTime": {}, "TokenProperties": { - "shape": "S23" + "shape": "S25" }, "RoleArns": { - "shape": "S1u" + "shape": "S1w" }, "Status": {} } @@ -1282,7 +1285,7 @@ }, "NextToken": {}, "Filters": { - "shape": "S40" + "shape": "S42" } } }, @@ -1340,7 +1343,7 @@ "members": { "ResourceArn": {}, "Tags": { - "shape": "S1d" + "shape": "S1f" } } }, @@ -1379,7 +1382,7 @@ "LicenseConfigurationArn": {}, "LicenseConfigurationStatus": {}, "LicenseRules": { - "shape": "S1c" + "shape": "S1e" }, "LicenseCount": { "type": "long" @@ -1390,7 +1393,7 @@ "Name": {}, "Description": {}, "ProductInformationList": { - "shape": "S1f" + "shape": "S1h" }, "DisassociateWhenNotFound": { "type": "boolean" @@ -1417,13 +1420,13 @@ "LicenseManagerReportGeneratorArn": {}, "ReportGeneratorName": {}, "Type": { - "shape": "S1r" + "shape": "S1t" }, "ReportContext": { - "shape": "S1t" + "shape": "S1v" }, "ReportFrequency": { - "shape": "S1v" + "shape": "S1x" }, "ClientToken": {}, "Description": {} @@ -1443,10 +1446,10 @@ "members": { "ResourceArn": {}, "AddLicenseSpecifications": { - "shape": "S4d" + "shape": "S4f" }, "RemoveLicenseSpecifications": { - "shape": "S4d" + "shape": "S4f" } } }, @@ -1462,7 +1465,7 @@ "S3BucketArn": {}, "SnsTopicArn": {}, "OrganizationConfiguration": { - "shape": "S3h" + "shape": "S3j" }, "EnableCrossAccountsDiscovery": { "type": "boolean" @@ -1505,7 +1508,13 @@ "type": "list", "member": {} }, - "Sv": { + "St": { + "type": "structure", + "members": { + "ActivationOverrideBehavior": {} + } + }, + "Sx": { "type": "structure", "required": [ "Name" @@ -1515,7 +1524,7 @@ "SignKey": {} } }, - "Sw": { + "Sy": { "type": "structure", "required": [ "Begin" @@ -1525,7 +1534,7 @@ "End": {} } }, - "Sx": { + "Sz": { "type": "list", "member": { "type": "structure", @@ -1549,7 +1558,7 @@ } } }, - "S12": { + "S14": { "type": "structure", "members": { "RenewType": {}, @@ -1581,11 +1590,11 @@ } } }, - "S1c": { + "S1e": { "type": "list", "member": {} }, - "S1d": { + "S1f": { "type": "list", "member": { "type": "structure", @@ -1595,7 +1604,7 @@ } } }, - "S1f": { + "S1h": { "type": "list", "member": { "type": "structure", @@ -1616,7 +1625,7 @@ "members": { "ProductInformationFilterName": {}, "ProductInformationFilterValue": { - "shape": "S1c" + "shape": "S1e" }, "ProductInformationFilterComparator": {} } @@ -1625,32 +1634,32 @@ } } }, - "S1l": { + "S1n": { "type": "structure", "members": { "UsageOperation": {} } }, - "S1r": { + "S1t": { "type": "list", "member": {} }, - "S1t": { + "S1v": { "type": "structure", "required": [ "licenseConfigurationArns" ], "members": { "licenseConfigurationArns": { - "shape": "S1u" + "shape": "S1w" } } }, - "S1u": { + "S1w": { "type": "list", "member": {} }, - "S1v": { + "S1x": { "type": "structure", "members": { "value": { @@ -1659,11 +1668,11 @@ "period": {} } }, - "S23": { + "S25": { "type": "list", "member": {} }, - "S2p": { + "S2r": { "type": "structure", "required": [ "GrantArn", @@ -1688,10 +1697,13 @@ "Version": {}, "GrantedOperations": { "shape": "So" + }, + "Options": { + "shape": "St" } } }, - "S2s": { + "S2u": { "type": "structure", "members": { "LicenseArn": {}, @@ -1699,19 +1711,19 @@ "ProductName": {}, "ProductSKU": {}, "Issuer": { - "shape": "S2t" + "shape": "S2v" }, "HomeRegion": {}, "Status": {}, "Validity": { - "shape": "Sw" + "shape": "Sy" }, "Beneficiary": {}, "Entitlements": { - "shape": "Sx" + "shape": "Sz" }, "ConsumptionConfiguration": { - "shape": "S12" + "shape": "S14" }, "LicenseMetadata": { "shape": "Sd" @@ -1720,7 +1732,7 @@ "Version": {} } }, - "S2t": { + "S2v": { "type": "structure", "members": { "Name": {}, @@ -1728,7 +1740,7 @@ "KeyFingerprint": {} } }, - "S2w": { + "S2y": { "type": "list", "member": { "type": "structure", @@ -1740,7 +1752,7 @@ } } }, - "S2z": { + "S31": { "type": "list", "member": { "type": "structure", @@ -1752,7 +1764,7 @@ } } }, - "S31": { + "S33": { "type": "structure", "members": { "LastRunTime": { @@ -1760,18 +1772,18 @@ } } }, - "S38": { + "S3a": { "type": "structure", "members": { "ReportGeneratorName": {}, "ReportType": { - "shape": "S1r" + "shape": "S1t" }, "ReportContext": { - "shape": "S1t" + "shape": "S1v" }, "ReportFrequency": { - "shape": "S1v" + "shape": "S1x" }, "LicenseManagerReportGeneratorArn": {}, "LastRunStatus": {}, @@ -1788,11 +1800,11 @@ }, "CreateTime": {}, "Tags": { - "shape": "S1d" + "shape": "S1f" } } }, - "S3h": { + "S3j": { "type": "structure", "required": [ "EnableIntegration" @@ -1803,13 +1815,13 @@ } } }, - "S3n": { + "S3p": { "type": "list", "member": { - "shape": "S3o" + "shape": "S3q" } }, - "S3o": { + "S3q": { "type": "structure", "members": { "Name": {}, @@ -1819,19 +1831,19 @@ } } }, - "S3u": { + "S3w": { "type": "list", "member": { - "shape": "S2p" + "shape": "S2r" } }, - "S40": { + "S42": { "type": "list", "member": { - "shape": "S3o" + "shape": "S3q" } }, - "S4d": { + "S4f": { "type": "list", "member": { "type": "structure", @@ -1844,13 +1856,13 @@ } } }, - "S4h": { + "S4j": { "type": "list", "member": { - "shape": "S2s" + "shape": "S2u" } }, - "S4q": { + "S4s": { "type": "list", "member": { "type": "structure", @@ -1860,19 +1872,19 @@ "ProductName": {}, "ProductSKU": {}, "Issuer": { - "shape": "S2t" + "shape": "S2v" }, "HomeRegion": {}, "Status": {}, "Validity": { - "shape": "Sw" + "shape": "Sy" }, "Beneficiary": {}, "Entitlements": { - "shape": "Sx" + "shape": "Sz" }, "ConsumptionConfiguration": { - "shape": "S12" + "shape": "S14" }, "LicenseMetadata": { "shape": "Sd" diff --git a/apis/license-manager-2018-08-01.normal.json b/apis/license-manager-2018-08-01.normal.json index b48ca1f7f3..d8dd388a52 100644 --- a/apis/license-manager-2018-08-01.normal.json +++ b/apis/license-manager-2018-08-01.normal.json @@ -219,7 +219,7 @@ "shape": "AccessDeniedException" } ], - "documentation": "Creates a grant for the specified license. A grant shares the use of license entitlements with specific Amazon Web Services accounts.
" + "documentation": "Creates a grant for the specified license. A grant shares the use of license entitlements with a specific Amazon Web Services account, an organization, or an organizational unit (OU). For more information, see Granted licenses in License Manager in the License Manager User Guide.
" }, "CreateGrantVersion": { "name": "CreateGrantVersion", @@ -256,7 +256,7 @@ "shape": "RateLimitExceededException" } ], - "documentation": "Creates a new version of the specified grant.
" + "documentation": "Creates a new version of the specified grant. For more information, see Granted licenses in License Manager in the License Manager User Guide.
" }, "CreateLicense": { "name": "CreateLicense", @@ -1309,7 +1309,7 @@ "shape": "RateLimitExceededException" } ], - "documentation": "Lists grants that are received but not accepted.
" + "documentation": "Lists grants that are received. Received grants are grants created while specifying the recipient as this Amazon Web Services account, your organization, or an organizational unit (OU) to which this member account belongs.
" }, "ListReceivedGrantsForOrganization": { "name": "ListReceivedGrantsForOrganization", @@ -1827,6 +1827,13 @@ } } }, + "ActivationOverrideBehavior": { + "type": "string", + "enum": [ + "DISTRIBUTED_GRANTS_ONLY", + "ALL_GRANTS_PERMITTED_BY_ISSUER" + ] + }, "AllowedOperation": { "type": "string", "enum": [ @@ -2147,7 +2154,7 @@ }, "Principals": { "shape": "PrincipalArnList", - "documentation": "The grant principals. This value should be specified as an Amazon Resource Name (ARN).
" + "documentation": "The grant principals. You can specify one of the following as an Amazon Resource Name (ARN):
An Amazon Web Services account, which includes only the account specified.
An organizational unit (OU), which includes all accounts in the OU.
An organization, which will include all accounts across your organization.
Current version of the grant.
" + }, + "Options": { + "shape": "Options", + "documentation": "The options specified for the grant.
" } } }, @@ -2298,11 +2309,11 @@ }, "SourceLicenseContext": { "shape": "LicenseConversionContext", - "documentation": "Information that identifies the license type you are converting from. For the structure of the source license, see Convert a license type using the Amazon Web Services CLI in the License Manager User Guide.
" + "documentation": "Information that identifies the license type you are converting from. For the structure of the source license, see Convert a license type using the CLI in the License Manager User Guide.
" }, "DestinationLicenseContext": { "shape": "LicenseConversionContext", - "documentation": "Information that identifies the license type you are converting to. For the structure of the destination license, see Convert a license type using the Amazon Web Services CLI in the License Manager User Guide.
" + "documentation": "Information that identifies the license type you are converting to. For the structure of the destination license, see Convert a license type using the CLI in the License Manager User Guide.
" } } }, @@ -2915,7 +2926,7 @@ }, "Values": { "shape": "FilterValues", - "documentation": "Filter values. Filter values are case-sensitive.
" + "documentation": "The value of the filter, which is case-sensitive. You can only specify one value for the filter.
" } }, "documentation": "A filter name and value pair that is used to return more specific results from a describe operation. Filters can be used to match a set of resources by specific criteria, such as tags, attributes, or IDs.
" @@ -3281,6 +3292,10 @@ "GrantedOperations": { "shape": "AllowedOperationList", "documentation": "Granted operations.
" + }, + "Options": { + "shape": "Options", + "documentation": "The options specified for the grant.
" } }, "documentation": "Describes a grant.
" @@ -4458,6 +4473,16 @@ "shape": "Metadata" } }, + "Options": { + "type": "structure", + "members": { + "ActivationOverrideBehavior": { + "shape": "ActivationOverrideBehavior", + "documentation": "An activation option for your grant that determines the behavior of activating a grant. Activation options can only be used with granted licenses sourced from the Amazon Web Services Marketplace. Additionally, the operation must specify the value of ACTIVE
for the Status
parameter.
As a license administrator, you can optionally specify an ActivationOverrideBehavior
when activating a grant.
As a grantor, you can optionally specify an ActivationOverrideBehavior
when you activate a grant for a grantee account in your organization.
As a grantee, if the grantor creating the distributed grant doesn’t specify an ActivationOverrideBehavior
, you can optionally specify one when you are activating the grant.
Use this value to activate a grant without replacing any member account’s active grants for the same product.
Use this value to activate a grant and disable other active grants in any member accounts for the same product. This action will also replace their previously activated grants with this activated grant.
The options you can specify when you create a new version of a grant, such as activation override behavior. For more information, see Granted licenses in License Manager in the License Manager User Guide.
" + }, "OrganizationConfiguration": { "type": "structure", "required": [ diff --git a/apis/mwaa-2020-07-01.min.json b/apis/mwaa-2020-07-01.min.json index e0919f9161..510275442c 100644 --- a/apis/mwaa-2020-07-01.min.json +++ b/apis/mwaa-2020-07-01.min.json @@ -90,6 +90,8 @@ "type": "integer" }, "SourceBucketArn": {}, + "StartupScriptS3ObjectVersion": {}, + "StartupScriptS3Path": {}, "Tags": { "shape": "St" }, @@ -258,6 +260,8 @@ }, "ServiceRoleArn": {}, "SourceBucketArn": {}, + "StartupScriptS3ObjectVersion": {}, + "StartupScriptS3Path": {}, "Status": {}, "Tags": { "shape": "St" @@ -531,6 +535,8 @@ "type": "integer" }, "SourceBucketArn": {}, + "StartupScriptS3ObjectVersion": {}, + "StartupScriptS3Path": {}, "WebserverAccessMode": {}, "WeeklyMaintenanceWindowStart": {} } diff --git a/apis/mwaa-2020-07-01.normal.json b/apis/mwaa-2020-07-01.normal.json index e9b73a4611..691b7c8338 100644 --- a/apis/mwaa-2020-07-01.normal.json +++ b/apis/mwaa-2020-07-01.normal.json @@ -399,7 +399,7 @@ "members": { "AirflowConfigurationOptions": { "shape": "AirflowConfigurationOptions", - "documentation": "A list of key-value pairs containing the Apache Airflow configuration options you want to attach to your environment. To learn more, see Apache Airflow configuration options.
" + "documentation": "A list of key-value pairs containing the Apache Airflow configuration options you want to attach to your environment. For more information, see Apache Airflow configuration options.
" }, "AirflowVersion": { "shape": "AirflowVersion", @@ -407,19 +407,19 @@ }, "DagS3Path": { "shape": "RelativePath", - "documentation": "The relative path to the DAGs folder on your Amazon S3 bucket. For example, dags
. To learn more, see Adding or updating DAGs.
The relative path to the DAGs folder on your Amazon S3 bucket. For example, dags
. For more information, see Adding or updating DAGs.
The environment class type. Valid values: mw1.small
, mw1.medium
, mw1.large
. To learn more, see Amazon MWAA environment class.
The environment class type. Valid values: mw1.small
, mw1.medium
, mw1.large
. For more information, see Amazon MWAA environment class.
The Amazon Resource Name (ARN) of the execution role for your environment. An execution role is an Amazon Web Services Identity and Access Management (IAM) role that grants MWAA permission to access Amazon Web Services services and resources used by your environment. For example, arn:aws:iam::123456789:role/my-execution-role
. To learn more, see Amazon MWAA Execution role.
The Amazon Resource Name (ARN) of the execution role for your environment. An execution role is an Amazon Web Services Identity and Access Management (IAM) role that grants MWAA permission to access Amazon Web Services services and resources used by your environment. For example, arn:aws:iam::123456789:role/my-execution-role
. For more information, see Amazon MWAA Execution role.
The Amazon Web Services Key Management Service (KMS) key to encrypt the data in your environment. You can use an Amazon Web Services owned CMK, or a Customer managed CMK (advanced). To learn more, see Create an Amazon MWAA environment.
" + "documentation": "The Amazon Web Services Key Management Service (KMS) key to encrypt the data in your environment. You can use an Amazon Web Services owned CMK, or a Customer managed CMK (advanced). For more information, see Create an Amazon MWAA environment.
" }, "LoggingConfiguration": { "shape": "LoggingConfigurationInput", @@ -441,23 +441,23 @@ }, "NetworkConfiguration": { "shape": "NetworkConfiguration", - "documentation": "The VPC networking components used to secure and enable network traffic between the Amazon Web Services resources for your environment. To learn more, see About networking on Amazon MWAA.
" + "documentation": "The VPC networking components used to secure and enable network traffic between the Amazon Web Services resources for your environment. For more information, see About networking on Amazon MWAA.
" }, "PluginsS3ObjectVersion": { "shape": "S3ObjectVersion", - "documentation": "The version of the plugins.zip file on your Amazon S3 bucket. A version must be specified each time a plugins.zip file is updated. To learn more, see How S3 Versioning works.
" + "documentation": "The version of the plugins.zip file on your Amazon S3 bucket. You must specify a version each time a plugins.zip file is updated. For more information, see How S3 Versioning works.
" }, "PluginsS3Path": { "shape": "RelativePath", - "documentation": "The relative path to the plugins.zip
file on your Amazon S3 bucket. For example, plugins.zip
. If specified, then the plugins.zip version is required. To learn more, see Installing custom plugins.
The relative path to the plugins.zip
file on your Amazon S3 bucket. For example, plugins.zip
. If specified, then the plugins.zip
version is required. For more information, see Installing custom plugins.
The version of the requirements.txt file on your Amazon S3 bucket. A version must be specified each time a requirements.txt file is updated. To learn more, see How S3 Versioning works.
" + "documentation": "The version of the requirements.txt
file on your Amazon S3 bucket. You must specify a version each time a requirements.txt file is updated. For more information, see How S3 Versioning works.
The relative path to the requirements.txt
file on your Amazon S3 bucket. For example, requirements.txt
. If specified, then a file version is required. To learn more, see Installing Python dependencies.
The relative path to the requirements.txt
file on your Amazon S3 bucket. For example, requirements.txt
. If specified, then a version is required. For more information, see Installing Python dependencies.
The Amazon Resource Name (ARN) of the Amazon S3 bucket where your DAG code and supporting files are stored. For example, arn:aws:s3:::my-airflow-bucket-unique-name
. To learn more, see Create an Amazon S3 bucket for Amazon MWAA.
The Amazon Resource Name (ARN) of the Amazon S3 bucket where your DAG code and supporting files are stored. For example, arn:aws:s3:::my-airflow-bucket-unique-name
. For more information, see Create an Amazon S3 bucket for Amazon MWAA.
The version of the startup shell script in your Amazon S3 bucket. You must specify the version ID that Amazon S3 assigns to the file every time you update the script.
Version IDs are Unicode, UTF-8 encoded, URL-ready, opaque strings that are no more than 1,024 bytes long. The following is an example:
3sL4kqtJlcpXroDTDmJ+rmSpXd3dIbrHY+MTRCxf3vjVBH40Nr8X8gdRQBpUMLUo
For more information, see Using a startup script.
" + }, + "StartupScriptS3Path": { + "shape": "RelativePath", + "documentation": "The relative path to the startup shell script in your Amazon S3 bucket. For example, s3://mwaa-environment/startup.sh
.
Amazon MWAA runs the script as your environment starts, and before running the Apache Airflow process. You can use this script to install dependencies, modify Apache Airflow configuration options, and set environment variables. For more information, see Using a startup script.
" }, "Tags": { "shape": "TagMap", - "documentation": "The key-value tag pairs you want to associate to your environment. For example, \"Environment\": \"Staging\"
. To learn more, see Tagging Amazon Web Services resources.
The key-value tag pairs you want to associate to your environment. For example, \"Environment\": \"Staging\"
. For more information, see Tagging Amazon Web Services resources.
The Apache Airflow Web server access mode. To learn more, see Apache Airflow access modes.
" + "documentation": "The Apache Airflow Web server access mode. For more information, see Apache Airflow access modes.
" }, "WeeklyMaintenanceWindowStart": { "shape": "WeeklyMaintenanceWindowStart", @@ -572,7 +580,7 @@ "members": { "AirflowConfigurationOptions": { "shape": "AirflowConfigurationOptions", - "documentation": "A list of key-value pairs containing the Apache Airflow configuration options attached to your environment. To learn more, see Apache Airflow configuration options.
" + "documentation": "A list of key-value pairs containing the Apache Airflow configuration options attached to your environment. For more information, see Apache Airflow configuration options.
" }, "AirflowVersion": { "shape": "AirflowVersion", @@ -588,15 +596,15 @@ }, "DagS3Path": { "shape": "RelativePath", - "documentation": "The relative path to the DAGs folder on your Amazon S3 bucket. For example, dags
. To learn more, see Adding or updating DAGs.
The relative path to the DAGs folder in your Amazon S3 bucket. For example, s3://mwaa-environment/dags
. For more information, see Adding or updating DAGs.
The environment class type. Valid values: mw1.small
, mw1.medium
, mw1.large
. To learn more, see Amazon MWAA environment class.
The environment class type. Valid values: mw1.small
, mw1.medium
, mw1.large
. For more information, see Amazon MWAA environment class.
The Amazon Resource Name (ARN) of the execution role in IAM that allows MWAA to access Amazon Web Services resources in your environment. For example, arn:aws:iam::123456789:role/my-execution-role
. To learn more, see Amazon MWAA Execution role.
The Amazon Resource Name (ARN) of the execution role in IAM that allows MWAA to access Amazon Web Services resources in your environment. For example, arn:aws:iam::123456789:role/my-execution-role
. For more information, see Amazon MWAA Execution role.
Describes the VPC networking components used to secure and enable network traffic between the Amazon Web Services resources for your environment. To learn more, see About networking on Amazon MWAA.
" + "documentation": "Describes the VPC networking components used to secure and enable network traffic between the Amazon Web Services resources for your environment. For more information, see About networking on Amazon MWAA.
" }, "PluginsS3ObjectVersion": { "shape": "S3ObjectVersion", - "documentation": "The version of the plugins.zip file on your Amazon S3 bucket. To learn more, see Installing custom plugins.
" + "documentation": "The version of the plugins.zip
file in your Amazon S3 bucket. You must specify the version ID that Amazon S3 assigns to the file.
Version IDs are Unicode, UTF-8 encoded, URL-ready, opaque strings that are no more than 1,024 bytes long. The following is an example:
3sL4kqtJlcpXroDTDmJ+rmSpXd3dIbrHY+MTRCxf3vjVBH40Nr8X8gdRQBpUMLUo
For more information, see Installing custom plugins.
" }, "PluginsS3Path": { "shape": "RelativePath", - "documentation": "The relative path to the plugins.zip
file on your Amazon S3 bucket. For example, plugins.zip
. To learn more, see Installing custom plugins.
The relative path to the file in your Amazon S3 bucket. For example, s3://mwaa-environment/plugins.zip
. For more information, see Installing custom plugins.
The version of the requirements.txt file on your Amazon S3 bucket. To learn more, see Installing Python dependencies.
" + "documentation": "The version of the requirements.txt
file on your Amazon S3 bucket. You must specify the version ID that Amazon S3 assigns to the file.
Version IDs are Unicode, UTF-8 encoded, URL-ready, opaque strings that are no more than 1,024 bytes long. The following is an example:
3sL4kqtJlcpXroDTDmJ+rmSpXd3dIbrHY+MTRCxf3vjVBH40Nr8X8gdRQBpUMLUo
For more information, see Installing Python dependencies.
" }, "RequirementsS3Path": { "shape": "RelativePath", - "documentation": "The relative path to the requirements.txt
file on your Amazon S3 bucket. For example, requirements.txt
. To learn more, see Installing Python dependencies.
The relative path to the requirements.txt
file in your Amazon S3 bucket. For example, s3://mwaa-environment/requirements.txt
. For more information, see Installing Python dependencies.
The Amazon Resource Name (ARN) for the service-linked role of the environment. To learn more, see Amazon MWAA Service-linked role.
" + "documentation": "The Amazon Resource Name (ARN) for the service-linked role of the environment. For more information, see Amazon MWAA Service-linked role.
" }, "SourceBucketArn": { "shape": "S3BucketArn", - "documentation": "The Amazon Resource Name (ARN) of the Amazon S3 bucket where your DAG code and supporting files are stored. For example, arn:aws:s3:::my-airflow-bucket-unique-name
. To learn more, see Create an Amazon S3 bucket for Amazon MWAA.
The Amazon Resource Name (ARN) of the Amazon S3 bucket where your DAG code and supporting files are stored. For example, arn:aws:s3:::my-airflow-bucket-unique-name
. For more information, see Create an Amazon S3 bucket for Amazon MWAA.
The version of the startup shell script in your Amazon S3 bucket. You must specify the version ID that Amazon S3 assigns to the file.
Version IDs are Unicode, UTF-8 encoded, URL-ready, opaque strings that are no more than 1,024 bytes long. The following is an example:
3sL4kqtJlcpXroDTDmJ+rmSpXd3dIbrHY+MTRCxf3vjVBH40Nr8X8gdRQBpUMLUo
For more information, see Using a startup script.
" + }, + "StartupScriptS3Path": { + "shape": "String", + "documentation": "The relative path to the startup shell script in your Amazon S3 bucket. For example, s3://mwaa-environment/startup.sh
.
Amazon MWAA runs the script as your environment starts, and before running the Apache Airflow process. You can use this script to install dependencies, modify Apache Airflow configuration options, and set environment variables. For more information, see Using a startup script.
" }, "Status": { "shape": "EnvironmentStatus", - "documentation": "The status of the Amazon MWAA environment. Valid values:
CREATING
- Indicates the request to create the environment is in progress.
CREATE_FAILED
- Indicates the request to create the environment failed, and the environment could not be created.
AVAILABLE
- Indicates the request was successful and the environment is ready to use.
UPDATING
- Indicates the request to update the environment is in progress.
DELETING
- Indicates the request to delete the environment is in progress.
DELETED
- Indicates the request to delete the environment is complete, and the environment has been deleted.
UNAVAILABLE
- Indicates the request failed, but the environment was unable to rollback and is not in a stable state.
UPDATE_FAILED
- Indicates the request to update the environment failed, and the environment has rolled back successfully and is ready to use.
We recommend reviewing our troubleshooting guide for a list of common errors and their solutions. To learn more, see Amazon MWAA troubleshooting.
" + "documentation": "The status of the Amazon MWAA environment. Valid values:
CREATING
- Indicates the request to create the environment is in progress.
CREATE_FAILED
- Indicates the request to create the environment failed, and the environment could not be created.
AVAILABLE
- Indicates the request was successful and the environment is ready to use.
UPDATING
- Indicates the request to update the environment is in progress.
DELETING
- Indicates the request to delete the environment is in progress.
DELETED
- Indicates the request to delete the environment is complete, and the environment has been deleted.
UNAVAILABLE
- Indicates the request failed, but the environment was unable to rollback and is not in a stable state.
UPDATE_FAILED
- Indicates the request to update the environment failed, and the environment has rolled back successfully and is ready to use.
We recommend reviewing our troubleshooting guide for a list of common errors and their solutions. For more information, see Amazon MWAA troubleshooting.
" }, "Tags": { "shape": "TagMap", - "documentation": "The key-value tag pairs associated to your environment. For example, \"Environment\": \"Staging\"
. To learn more, see Tagging Amazon Web Services resources.
The key-value tag pairs associated to your environment. For example, \"Environment\": \"Staging\"
. For more information, see Tagging Amazon Web Services resources.
The Apache Airflow Web server access mode. To learn more, see Apache Airflow access modes.
" + "documentation": "The Apache Airflow Web server access mode. For more information, see Apache Airflow access modes.
" }, "WebserverUrl": { "shape": "WebserverUrl", - "documentation": "The Apache Airflow Web server host name for the Amazon MWAA environment. To learn more, see Accessing the Apache Airflow UI.
" + "documentation": "The Apache Airflow Web server host name for the Amazon MWAA environment. For more information, see Accessing the Apache Airflow UI.
" }, "WeeklyMaintenanceWindowStart": { "shape": "WeeklyMaintenanceWindowStart", @@ -847,7 +863,7 @@ "members": { "Tags": { "shape": "TagMap", - "documentation": "The key-value tag pairs associated to your environment. To learn more, see Tagging Amazon Web Services resources.
" + "documentation": "The key-value tag pairs associated to your environment. For more information, see Tagging Amazon Web Services resources.
" } } }, @@ -1008,14 +1024,14 @@ "members": { "SecurityGroupIds": { "shape": "SecurityGroupList", - "documentation": "A list of security group IDs. To learn more, see Security in your VPC on Amazon MWAA.
" + "documentation": "A list of security group IDs. For more information, see Security in your VPC on Amazon MWAA.
" }, "SubnetIds": { "shape": "SubnetList", - "documentation": "A list of subnet IDs. To learn more, see About networking on Amazon MWAA.
" + "documentation": "A list of subnet IDs. For more information, see About networking on Amazon MWAA.
" } }, - "documentation": "Describes the VPC networking components used to secure and enable network traffic between the Amazon Web Services resources for your environment. To learn more, see About networking on Amazon MWAA.
" + "documentation": "Describes the VPC networking components used to secure and enable network traffic between the Amazon Web Services resources for your environment. For more information, see About networking on Amazon MWAA.
" }, "NextToken": { "type": "string", @@ -1160,7 +1176,7 @@ }, "Tags": { "shape": "TagMap", - "documentation": "The key-value tag pairs you want to associate to your environment. For example, \"Environment\": \"Staging\"
. To learn more, see Tagging Amazon Web Services resources.
The key-value tag pairs you want to associate to your environment. For example, \"Environment\": \"Staging\"
. For more information, see Tagging Amazon Web Services resources.
A list of key-value pairs containing the Apache Airflow configuration options you want to attach to your environment. To learn more, see Apache Airflow configuration options.
" + "documentation": "A list of key-value pairs containing the Apache Airflow configuration options you want to attach to your environment. For more information, see Apache Airflow configuration options.
" }, "AirflowVersion": { "shape": "AirflowVersion", @@ -1257,15 +1273,15 @@ }, "DagS3Path": { "shape": "RelativePath", - "documentation": "The relative path to the DAGs folder on your Amazon S3 bucket. For example, dags
. To learn more, see Adding or updating DAGs.
The relative path to the DAGs folder on your Amazon S3 bucket. For example, dags
. For more information, see Adding or updating DAGs.
The environment class type. Valid values: mw1.small
, mw1.medium
, mw1.large
. To learn more, see Amazon MWAA environment class.
The environment class type. Valid values: mw1.small
, mw1.medium
, mw1.large
. For more information, see Amazon MWAA environment class.
The Amazon Resource Name (ARN) of the execution role in IAM that allows MWAA to access Amazon Web Services resources in your environment. For example, arn:aws:iam::123456789:role/my-execution-role
. To learn more, see Amazon MWAA Execution role.
The Amazon Resource Name (ARN) of the execution role in IAM that allows MWAA to access Amazon Web Services resources in your environment. For example, arn:aws:iam::123456789:role/my-execution-role
. For more information, see Amazon MWAA Execution role.
The VPC networking components used to secure and enable network traffic between the Amazon Web Services resources for your environment. To learn more, see About networking on Amazon MWAA.
" + "documentation": "The VPC networking components used to secure and enable network traffic between the Amazon Web Services resources for your environment. For more information, see About networking on Amazon MWAA.
" }, "PluginsS3ObjectVersion": { "shape": "S3ObjectVersion", - "documentation": "The version of the plugins.zip file on your Amazon S3 bucket. A version must be specified each time a plugins.zip file is updated. To learn more, see How S3 Versioning works.
" + "documentation": "The version of the plugins.zip file on your Amazon S3 bucket. You must specify a version each time a plugins.zip
file is updated. For more information, see How S3 Versioning works.
The relative path to the plugins.zip
file on your Amazon S3 bucket. For example, plugins.zip
. If specified, then the plugins.zip version is required. To learn more, see Installing custom plugins.
The relative path to the plugins.zip
file on your Amazon S3 bucket. For example, plugins.zip
. If specified, then the plugins.zip version is required. For more information, see Installing custom plugins.
The version of the requirements.txt file on your Amazon S3 bucket. A version must be specified each time a requirements.txt file is updated. To learn more, see How S3 Versioning works.
" + "documentation": "The version of the requirements.txt file on your Amazon S3 bucket. You must specify a version each time a requirements.txt
file is updated. For more information, see How S3 Versioning works.
The relative path to the requirements.txt
file on your Amazon S3 bucket. For example, requirements.txt
. If specified, then a file version is required. To learn more, see Installing Python dependencies.
The relative path to the requirements.txt
file on your Amazon S3 bucket. For example, requirements.txt
. If specified, then a file version is required. For more information, see Installing Python dependencies.
The Amazon Resource Name (ARN) of the Amazon S3 bucket where your DAG code and supporting files are stored. For example, arn:aws:s3:::my-airflow-bucket-unique-name
. To learn more, see Create an Amazon S3 bucket for Amazon MWAA.
The Amazon Resource Name (ARN) of the Amazon S3 bucket where your DAG code and supporting files are stored. For example, arn:aws:s3:::my-airflow-bucket-unique-name
. For more information, see Create an Amazon S3 bucket for Amazon MWAA.
The version of the startup shell script in your Amazon S3 bucket. You must specify the version ID that Amazon S3 assigns to the file every time you update the script.
Version IDs are Unicode, UTF-8 encoded, URL-ready, opaque strings that are no more than 1,024 bytes long. The following is an example:
3sL4kqtJlcpXroDTDmJ+rmSpXd3dIbrHY+MTRCxf3vjVBH40Nr8X8gdRQBpUMLUo
For more information, see Using a startup script.
" + }, + "StartupScriptS3Path": { + "shape": "RelativePath", + "documentation": "The relative path to the startup shell script in your Amazon S3 bucket. For example, s3://mwaa-environment/startup.sh
.
Amazon MWAA runs the script as your environment starts, and before running the Apache Airflow process. You can use this script to install dependencies, modify Apache Airflow configuration options, and set environment variables. For more information, see Using a startup script.
" }, "WebserverAccessMode": { "shape": "WebserverAccessMode", - "documentation": "The Apache Airflow Web server access mode. To learn more, see Apache Airflow access modes.
" + "documentation": "The Apache Airflow Web server access mode. For more information, see Apache Airflow access modes.
" }, "WeeklyMaintenanceWindowStart": { "shape": "WeeklyMaintenanceWindowStart", @@ -1354,10 +1378,10 @@ "members": { "SecurityGroupIds": { "shape": "SecurityGroupList", - "documentation": "A list of security group IDs. A security group must be attached to the same VPC as the subnets. To learn more, see Security in your VPC on Amazon MWAA.
" + "documentation": "A list of security group IDs. A security group must be attached to the same VPC as the subnets. For more information, see Security in your VPC on Amazon MWAA.
" } }, - "documentation": "Defines the VPC networking components used to secure and enable network traffic between the Amazon Web Services resources for your environment. To learn more, see About networking on Amazon MWAA.
" + "documentation": "Defines the VPC networking components used to secure and enable network traffic between the Amazon Web Services resources for your environment. For more information, see About networking on Amazon MWAA.
" }, "UpdateSource": { "type": "string", diff --git a/apis/servicecatalog-2015-12-10.min.json b/apis/servicecatalog-2015-12-10.min.json index 4bf3b9a025..4d321043d5 100644 --- a/apis/servicecatalog-2015-12-10.min.json +++ b/apis/servicecatalog-2015-12-10.min.json @@ -1966,6 +1966,96 @@ } } }, + "NotifyProvisionProductEngineWorkflowResult": { + "input": { + "type": "structure", + "required": [ + "WorkflowToken", + "RecordId", + "Status", + "IdempotencyToken" + ], + "members": { + "WorkflowToken": {}, + "RecordId": {}, + "Status": {}, + "FailureReason": {}, + "ResourceIdentifier": { + "type": "structure", + "members": { + "UniqueTag": { + "type": "structure", + "members": { + "Key": {}, + "Value": {} + } + } + } + }, + "Outputs": { + "shape": "S7q" + }, + "IdempotencyToken": { + "idempotencyToken": true + } + } + }, + "output": { + "type": "structure", + "members": {} + } + }, + "NotifyTerminateProvisionedProductEngineWorkflowResult": { + "input": { + "type": "structure", + "required": [ + "WorkflowToken", + "RecordId", + "Status", + "IdempotencyToken" + ], + "members": { + "WorkflowToken": {}, + "RecordId": {}, + "Status": {}, + "FailureReason": {}, + "IdempotencyToken": { + "idempotencyToken": true + } + } + }, + "output": { + "type": "structure", + "members": {} + } + }, + "NotifyUpdateProvisionedProductEngineWorkflowResult": { + "input": { + "type": "structure", + "required": [ + "WorkflowToken", + "RecordId", + "Status", + "IdempotencyToken" + ], + "members": { + "WorkflowToken": {}, + "RecordId": {}, + "Status": {}, + "FailureReason": {}, + "Outputs": { + "shape": "S7q" + }, + "IdempotencyToken": { + "idempotencyToken": true + } + } + }, + "output": { + "type": "structure", + "members": {} + } + }, "ProvisionProduct": { "input": { "type": "structure", @@ -2085,7 +2175,7 @@ "members": { "AcceptLanguage": {}, "Filters": { - "shape": "Sba" + "shape": "Sbn" }, "PageSize": { "type": "integer" @@ -2131,7 +2221,7 @@ "AcceptLanguage": {}, "PortfolioId": {}, "Filters": { - "shape": "Sba" + "shape": "Sbn" }, "SortBy": {}, "SortOrder": {}, @@ -2290,7 +2380,7 @@ "shape": "S1i" }, "RemoveTags": { - "shape": "Scb" + "shape": "Sco" } } }, @@ -2355,7 +2445,7 @@ "shape": "S1i" }, "RemoveTags": { - "shape": "Scb" + "shape": "Sco" }, "SourceConnection": { "shape": "S2c" @@ -2446,7 +2536,7 @@ "AcceptLanguage": {}, "ProvisionedProductId": {}, "ProvisionedProductProperties": { - "shape": "Scn" + "shape": "Sd0" }, "IdempotencyToken": { "idempotencyToken": true @@ -2458,7 +2548,7 @@ "members": { "ProvisionedProductId": {}, "ProvisionedProductProperties": { - "shape": "Scn" + "shape": "Sd0" }, "RecordId": {}, "Status": {} @@ -2963,7 +3053,7 @@ "shape": "S3n" } }, - "Sba": { + "Sbn": { "type": "map", "key": {}, "value": { @@ -2971,11 +3061,11 @@ "member": {} } }, - "Scb": { + "Sco": { "type": "list", "member": {} }, - "Scn": { + "Sd0": { "type": "map", "key": {}, "value": {} diff --git a/apis/servicecatalog-2015-12-10.normal.json b/apis/servicecatalog-2015-12-10.normal.json index b6c68d84ba..ee42875d52 100644 --- a/apis/servicecatalog-2015-12-10.normal.json +++ b/apis/servicecatalog-2015-12-10.normal.json @@ -136,6 +136,9 @@ }, { "shape": "LimitExceededException" + }, + { + "shape": "InvalidParametersException" } ], "documentation": "Associates a self-service action with a provisioning artifact.
" @@ -1652,6 +1655,72 @@ ], "documentation": "Lists the specified TagOptions or all TagOptions.
" }, + "NotifyProvisionProductEngineWorkflowResult": { + "name": "NotifyProvisionProductEngineWorkflowResult", + "http": { + "method": "POST", + "requestUri": "/" + }, + "input": { + "shape": "NotifyProvisionProductEngineWorkflowResultInput" + }, + "output": { + "shape": "NotifyProvisionProductEngineWorkflowResultOutput" + }, + "errors": [ + { + "shape": "InvalidParametersException" + }, + { + "shape": "ResourceNotFoundException" + } + ], + "documentation": "Notifies the result of the provisioning engine execution.
" + }, + "NotifyTerminateProvisionedProductEngineWorkflowResult": { + "name": "NotifyTerminateProvisionedProductEngineWorkflowResult", + "http": { + "method": "POST", + "requestUri": "/" + }, + "input": { + "shape": "NotifyTerminateProvisionedProductEngineWorkflowResultInput" + }, + "output": { + "shape": "NotifyTerminateProvisionedProductEngineWorkflowResultOutput" + }, + "errors": [ + { + "shape": "InvalidParametersException" + }, + { + "shape": "ResourceNotFoundException" + } + ], + "documentation": "Notifies the result of the terminate engine execution.
" + }, + "NotifyUpdateProvisionedProductEngineWorkflowResult": { + "name": "NotifyUpdateProvisionedProductEngineWorkflowResult", + "http": { + "method": "POST", + "requestUri": "/" + }, + "input": { + "shape": "NotifyUpdateProvisionedProductEngineWorkflowResultInput" + }, + "output": { + "shape": "NotifyUpdateProvisionedProductEngineWorkflowResultOutput" + }, + "errors": [ + { + "shape": "InvalidParametersException" + }, + { + "shape": "ResourceNotFoundException" + } + ], + "documentation": "Notifies the result of the update engine execution.
" + }, "ProvisionProduct": { "name": "ProvisionProduct", "http": { @@ -2030,7 +2099,7 @@ "members": { "AcceptLanguage": { "shape": "AcceptLanguage", - "documentation": "The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
The ARN of the principal (IAM user, role, or group). This field allows an ARN with no accountID
if PrincipalType
is IAM_PATTERN
.
You can associate multiple IAM
patterns even if the account has no principal with that name. This is useful in Principal Name Sharing if you want to share a principal without creating it in the account that owns the portfolio.
The ARN of the principal (user, role, or group). This field allows an ARN with no accountID
if PrincipalType
is IAM_PATTERN
.
You can associate multiple IAM
patterns even if the account has no principal with that name. This is useful in Principal Name Sharing if you want to share a principal without creating it in the account that owns the portfolio.
The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
The ARN of the principal (IAM user, role, or group). This field allows an ARN with no accountID
if PrincipalType
is IAM_PATTERN
.
The ARN of the principal (user, role, or group). This field allows an ARN with no accountID
if PrincipalType
is IAM_PATTERN
.
The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
The unique key-value pair for a tag that identifies provisioned product resources.
" + } + }, + "documentation": "The ID for the provisioned product resources that are part of a resource group.
" + }, + "EngineWorkflowStatus": { + "type": "string", + "enum": [ + "SUCCEEDED", + "FAILED" + ] + }, + "EngineWorkflowToken": { + "type": "string", + "max": 20000, + "min": 1, + "pattern": "[0-9A-Za-z+\\/=]+" + }, "Error": { "type": "string" }, @@ -3901,7 +3999,7 @@ "members": { "AcceptLanguage": { "shape": "AcceptLanguage", - "documentation": "The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
The encrypted contents of the provisioning engine execution payload that Service Catalog sends after the Terraform product provisioning workflow starts.
" + }, + "RecordId": { + "shape": "Id", + "documentation": "The identifier of the record.
" + }, + "Status": { + "shape": "EngineWorkflowStatus", + "documentation": "The status of the provisioning engine execution.
" + }, + "FailureReason": { + "shape": "EngineWorkflowFailureReason", + "documentation": "The reason why the provisioning engine execution failed.
" + }, + "ResourceIdentifier": { + "shape": "EngineWorkflowResourceIdentifier", + "documentation": "The ID for the provisioned product resources that are part of a resource group.
" + }, + "Outputs": { + "shape": "RecordOutputs", + "documentation": "The output of the provisioning engine execution.
" + }, + "IdempotencyToken": { + "shape": "IdempotencyToken", + "documentation": "The idempotency token that identifies the provisioning engine execution.
", + "idempotencyToken": true + } + } + }, + "NotifyProvisionProductEngineWorkflowResultOutput": { + "type": "structure", + "members": {} + }, + "NotifyTerminateProvisionedProductEngineWorkflowResultInput": { + "type": "structure", + "required": [ + "WorkflowToken", + "RecordId", + "Status", + "IdempotencyToken" + ], + "members": { + "WorkflowToken": { + "shape": "EngineWorkflowToken", + "documentation": "The encrypted contents of the terminate engine execution payload that Service Catalog sends after the Terraform product terminate workflow starts.
" + }, + "RecordId": { + "shape": "Id", + "documentation": "The identifier of the record.
" + }, + "Status": { + "shape": "EngineWorkflowStatus", + "documentation": "The status of the terminate engine execution.
" + }, + "FailureReason": { + "shape": "EngineWorkflowFailureReason", + "documentation": "The reason why the terminate engine execution failed.
" + }, + "IdempotencyToken": { + "shape": "IdempotencyToken", + "documentation": "The idempotency token that identifies the terminate engine execution.
", + "idempotencyToken": true + } + } + }, + "NotifyTerminateProvisionedProductEngineWorkflowResultOutput": { + "type": "structure", + "members": {} + }, + "NotifyUpdateProvisionedProductEngineWorkflowResultInput": { + "type": "structure", + "required": [ + "WorkflowToken", + "RecordId", + "Status", + "IdempotencyToken" + ], + "members": { + "WorkflowToken": { + "shape": "EngineWorkflowToken", + "documentation": "The encrypted contents of the update engine execution payload that Service Catalog sends after the Terraform product update workflow starts.
" + }, + "RecordId": { + "shape": "Id", + "documentation": "The identifier of the record.
" + }, + "Status": { + "shape": "EngineWorkflowStatus", + "documentation": "The status of the update engine execution.
" + }, + "FailureReason": { + "shape": "EngineWorkflowFailureReason", + "documentation": "The reason why the update engine execution failed.
" + }, + "Outputs": { + "shape": "RecordOutputs", + "documentation": "The output of the update engine execution.
" + }, + "IdempotencyToken": { + "shape": "IdempotencyToken", + "documentation": "The idempotency token that identifies the update engine execution.
", + "idempotencyToken": true + } + } + }, + "NotifyUpdateProvisionedProductEngineWorkflowResultOutput": { + "type": "structure", + "members": {} + }, "NullableBoolean": { "type": "boolean", "box": true @@ -5206,7 +5424,7 @@ "members": { "PrincipalARN": { "shape": "PrincipalARN", - "documentation": "The ARN of the principal (IAM user, role, or group). This field allows for an ARN with no accountID
if the PrincipalType
is an IAM_PATTERN
.
The ARN of the principal (user, role, or group). This field allows for an ARN with no accountID
if the PrincipalType
is an IAM_PATTERN
.
The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
The Amazon Resource Name (ARN) of the IAM user.
" + "documentation": "The Amazon Resource Name (ARN) of the user.
" }, "UserArnSession": { "shape": "UserArnSession", - "documentation": "The ARN of the IAM user in the session. This ARN might contain a session ID.
" + "documentation": "The ARN of the user in the session. This ARN might contain a session ID.
" } }, "documentation": "Information about a provisioned product.
" @@ -6117,7 +6337,9 @@ "enum": [ "CLOUD_FORMATION_TEMPLATE", "MARKETPLACE_AMI", - "MARKETPLACE_CAR" + "MARKETPLACE_CAR", + "DEFAULT_CUSTOM", + "TERRAFORM_OPEN_SOURCE" ] }, "ProvisioningArtifactView": { @@ -6365,7 +6587,7 @@ "members": { "AcceptLanguage": { "shape": "AcceptLanguage", - "documentation": "The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
A unique key that's attached to a resource.
" + }, + "Value": { + "shape": "UniqueTagValue", + "documentation": "A unique value that's attached to a resource.
" + } + }, + "documentation": "The unique key-value pair for a tag that identifies provisioned product resources.
" + }, + "UniqueTagValue": { + "type": "string", + "max": 256, + "min": 1, + "pattern": "^([\\p{L}\\p{Z}\\p{N}_.:\\/=+\\-@]*)$" + }, "UpdateConstraintInput": { "type": "structure", "required": [ @@ -7307,7 +7556,7 @@ "members": { "AcceptLanguage": { "shape": "AcceptLanguage", - "documentation": "The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
A map that contains the provisioned product properties to be updated.
The LAUNCH_ROLE
key accepts role ARNs. This key allows an administrator to call UpdateProvisionedProductProperties
to update the launch role that is associated with a provisioned product. This role is used when an end user calls a provisioning operation such as UpdateProvisionedProduct
, TerminateProvisionedProduct
, or ExecuteProvisionedProductServiceAction
. Only a role ARN is valid. A user ARN is invalid.
The OWNER
key accepts IAM user ARNs, IAM role ARNs, and STS assumed-role ARNs. The owner is the user that has permission to see, update, terminate, and execute service actions in the provisioned product.
The administrator can change the owner of a provisioned product to another IAM or STS entity within the same account. Both end user owners and administrators can see ownership history of the provisioned product using the ListRecordHistory
API. The new owner can describe all past records for the provisioned product using the DescribeRecord
API. The previous owner can no longer use DescribeRecord
, but can still see the product's history from when he was an owner using ListRecordHistory
.
If a provisioned product ownership is assigned to an end user, they can see and perform any action through the API or Service Catalog console such as update, terminate, and execute service actions. If an end user provisions a product and the owner is updated to someone else, they will no longer be able to see or perform any actions through API or the Service Catalog console on that provisioned product.
" + "documentation": "A map that contains the provisioned product properties to be updated.
The LAUNCH_ROLE
key accepts role ARNs. This key allows an administrator to call UpdateProvisionedProductProperties
to update the launch role that is associated with a provisioned product. This role is used when an end user calls a provisioning operation such as UpdateProvisionedProduct
, TerminateProvisionedProduct
, or ExecuteProvisionedProductServiceAction
. Only a role ARN is valid. A user ARN is invalid.
The OWNER
key accepts user ARNs, IAM role ARNs, and STS assumed-role ARNs. The owner is the user that has permission to see, update, terminate, and execute service actions in the provisioned product.
The administrator can change the owner of a provisioned product to another IAM or STS entity within the same account. Both end user owners and administrators can see ownership history of the provisioned product using the ListRecordHistory
API. The new owner can describe all past records for the provisioned product using the DescribeRecord
API. The previous owner can no longer use DescribeRecord
, but can still see the product's history from when he was an owner using ListRecordHistory
.
If a provisioned product ownership is assigned to an end user, they can see and perform any action through the API or Service Catalog console such as update, terminate, and execute service actions. If an end user provisions a product and the owner is updated to someone else, they will no longer be able to see or perform any actions through API or the Service Catalog console on that provisioned product.
" }, "IdempotencyToken": { "shape": "IdempotencyToken", @@ -7629,7 +7878,7 @@ "members": { "AcceptLanguage": { "shape": "AcceptLanguage", - "documentation": "The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
The language code.
en
- English (default)
jp
- Japanese
zh
- Chinese
The language code.
jp
- Japanese
zh
- Chinese
Associates a web ACL with a regional application resource, to protect the resource. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service.
For Amazon CloudFront, don't use this call. Instead, use your CloudFront distribution configuration. To associate a web ACL, in the CloudFront call UpdateDistribution
, set the web ACL ID to the Amazon Resource Name (ARN) of the web ACL. For information, see UpdateDistribution.
When you make changes to web ACLs or web ACL components, like rules and rule groups, WAF propagates the changes everywhere that the web ACL and its components are stored and used. Your changes are applied within seconds, but there might be a brief period of inconsistency when the changes have arrived in some places and not in others. So, for example, if you change a rule action setting, the action might be the old action in one area and the new action in another area. Or if you add an IP address to an IP set used in a blocking rule, the new address might briefly be blocked in one area while still allowed in another. This temporary inconsistency can occur when you first associate a web ACL with an Amazon Web Services resource and when you change a web ACL that is already associated with a resource. Generally, any inconsistencies of this type last only a few seconds.
" + "documentation": "Associates a web ACL with a regional application resource, to protect the resource. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service.
For Amazon CloudFront, don't use this call. Instead, use your CloudFront distribution configuration. To associate a web ACL, in the CloudFront call UpdateDistribution
, set the web ACL ID to the Amazon Resource Name (ARN) of the web ACL. For information, see UpdateDistribution in the Amazon CloudFront Developer Guide.
When you make changes to web ACLs or web ACL components, like rules and rule groups, WAF propagates the changes everywhere that the web ACL and its components are stored and used. Your changes are applied within seconds, but there might be a brief period of inconsistency when the changes have arrived in some places and not in others. So, for example, if you change a rule action setting, the action might be the old action in one area and the new action in another area. Or if you add an IP address to an IP set used in a blocking rule, the new address might briefly be blocked in one area while still allowed in another. This temporary inconsistency can occur when you first associate a web ACL with an Amazon Web Services resource and when you change a web ACL that is already associated with a resource. Generally, any inconsistencies of this type last only a few seconds.
" }, "CheckCapacity": { "name": "CheckCapacity", @@ -85,7 +85,7 @@ "shape": "WAFInvalidOperationException" } ], - "documentation": "Returns the web ACL capacity unit (WCU) requirements for a specified scope and set of rules. You can use this to check the capacity requirements for the rules you want to use in a RuleGroup or WebACL.
WAF uses WCUs to calculate and control the operating resources that are used to run your rules, rule groups, and web ACLs. WAF calculates capacity differently for each rule type, to reflect the relative cost of each rule. Simple rules that cost little to run use fewer WCUs than more complex rules that use more processing power. Rule group capacity is fixed at creation, which helps users plan their web ACL WCU usage when they use a rule group. The WCU limit for web ACLs is 1,500.
" + "documentation": "Returns the web ACL capacity unit (WCU) requirements for a specified scope and set of rules. You can use this to check the capacity requirements for the rules you want to use in a RuleGroup or WebACL.
WAF uses WCUs to calculate and control the operating resources that are used to run your rules, rule groups, and web ACLs. WAF calculates capacity differently for each rule type, to reflect the relative cost of each rule. Simple rules that cost little to run use fewer WCUs than more complex rules that use more processing power. Rule group capacity is fixed at creation, which helps users plan their web ACL WCU usage when they use a rule group. For more information, see WAF web ACL capacity units (WCU) in the WAF Developer Guide.
" }, "CreateIPSet": { "name": "CreateIPSet", @@ -272,7 +272,7 @@ "shape": "WAFExpiredManagedRuleGroupVersionException" } ], - "documentation": "Creates a WebACL per the specifications provided.
A web ACL defines a collection of rules to use to inspect and control web requests. Each rule has an action defined (allow, block, or count) for requests that match the statement of the rule. In the web ACL, you assign a default action to take (allow, block) for any request that does not match any of the rules. The rules in a web ACL can be a combination of the types Rule, RuleGroup, and managed rule group. You can associate a web ACL with one or more Amazon Web Services resources to protect. The resources can be an Amazon CloudFront distribution, an Amazon API Gateway REST API, an Application Load Balancer, an AppSync GraphQL API, Amazon Cognito user pool, or an App Runner service.
" + "documentation": "Creates a WebACL per the specifications provided.
A web ACL defines a collection of rules to use to inspect and control web requests. Each rule has an action defined (allow, block, or count) for requests that match the statement of the rule. In the web ACL, you assign a default action to take (allow, block) for any request that does not match any of the rules. The rules in a web ACL can be a combination of the types Rule, RuleGroup, and managed rule group. You can associate a web ACL with one or more Amazon Web Services resources to protect. The resources can be an Amazon CloudFront distribution, an Amazon API Gateway REST API, an Application Load Balancer, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service.
" }, "DeleteFirewallManagerRuleGroups": { "name": "DeleteFirewallManagerRuleGroups", @@ -519,7 +519,7 @@ "shape": "WAFInvalidOperationException" } ], - "documentation": "Deletes the specified WebACL.
You can only use this if ManagedByFirewallManager
is false in the specified WebACL.
Before deleting any web ACL, first disassociate it from all resources.
To retrieve a list of the resources that are associated with a web ACL, use the following calls:
For regional resources, call ListResourcesForWebACL.
For Amazon CloudFront distributions, use the CloudFront call ListDistributionsByWebACLId
. For information, see ListDistributionsByWebACLId.
To disassociate a resource from a web ACL, use the following calls:
For regional resources, call DisassociateWebACL.
For Amazon CloudFront distributions, provide an empty web ACL ID in the CloudFront call UpdateDistribution
. For information, see UpdateDistribution.
Deletes the specified WebACL.
You can only use this if ManagedByFirewallManager
is false in the specified WebACL.
Before deleting any web ACL, first disassociate it from all resources.
To retrieve a list of the resources that are associated with a web ACL, use the following calls:
For regional resources, call ListResourcesForWebACL.
For Amazon CloudFront distributions, use the CloudFront call ListDistributionsByWebACLId
. For information, see ListDistributionsByWebACLId in the Amazon CloudFront API Reference.
To disassociate a resource from a web ACL, use the following calls:
For regional resources, call DisassociateWebACL.
For Amazon CloudFront distributions, provide an empty web ACL ID in the CloudFront call UpdateDistribution
. For information, see UpdateDistribution in the Amazon CloudFront API Reference.
Disassociates the specified regional application resource from any existing web ACL association. A resource can have at most one web ACL association. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service.
For Amazon CloudFront, don't use this call. Instead, use your CloudFront distribution configuration. To disassociate a web ACL, provide an empty web ACL ID in the CloudFront call UpdateDistribution
. For information, see UpdateDistribution.
Disassociates the specified regional application resource from any existing web ACL association. A resource can have at most one web ACL association. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service.
For Amazon CloudFront, don't use this call. Instead, use your CloudFront distribution configuration. To disassociate a web ACL, provide an empty web ACL ID in the CloudFront call UpdateDistribution
. For information, see UpdateDistribution in the Amazon CloudFront API Reference.
Updates the specified WebACL. While updating a web ACL, WAF provides continuous coverage to the resources that you have associated with the web ACL.
This operation completely replaces the mutable specifications that you already have for the web ACL with the ones that you provide to this call.
To modify a web ACL, do the following:
Retrieve it by calling GetWebACL
Update its settings as needed
Provide the complete web ACL specification to this call
When you make changes to web ACLs or web ACL components, like rules and rule groups, WAF propagates the changes everywhere that the web ACL and its components are stored and used. Your changes are applied within seconds, but there might be a brief period of inconsistency when the changes have arrived in some places and not in others. So, for example, if you change a rule action setting, the action might be the old action in one area and the new action in another area. Or if you add an IP address to an IP set used in a blocking rule, the new address might briefly be blocked in one area while still allowed in another. This temporary inconsistency can occur when you first associate a web ACL with an Amazon Web Services resource and when you change a web ACL that is already associated with a resource. Generally, any inconsistencies of this type last only a few seconds.
A web ACL defines a collection of rules to use to inspect and control web requests. Each rule has an action defined (allow, block, or count) for requests that match the statement of the rule. In the web ACL, you assign a default action to take (allow, block) for any request that does not match any of the rules. The rules in a web ACL can be a combination of the types Rule, RuleGroup, and managed rule group. You can associate a web ACL with one or more Amazon Web Services resources to protect. The resources can be an Amazon CloudFront distribution, an Amazon API Gateway REST API, an Application Load Balancer, an AppSync GraphQL API, Amazon Cognito user pool, or an App Runner service.
" + "documentation": "Updates the specified WebACL. While updating a web ACL, WAF provides continuous coverage to the resources that you have associated with the web ACL.
This operation completely replaces the mutable specifications that you already have for the web ACL with the ones that you provide to this call.
To modify a web ACL, do the following:
Retrieve it by calling GetWebACL
Update its settings as needed
Provide the complete web ACL specification to this call
When you make changes to web ACLs or web ACL components, like rules and rule groups, WAF propagates the changes everywhere that the web ACL and its components are stored and used. Your changes are applied within seconds, but there might be a brief period of inconsistency when the changes have arrived in some places and not in others. So, for example, if you change a rule action setting, the action might be the old action in one area and the new action in another area. Or if you add an IP address to an IP set used in a blocking rule, the new address might briefly be blocked in one area while still allowed in another. This temporary inconsistency can occur when you first associate a web ACL with an Amazon Web Services resource and when you change a web ACL that is already associated with a resource. Generally, any inconsistencies of this type last only a few seconds.
A web ACL defines a collection of rules to use to inspect and control web requests. Each rule has an action defined (allow, block, or count) for requests that match the statement of the rule. In the web ACL, you assign a default action to take (allow, block) for any request that does not match any of the rules. The rules in a web ACL can be a combination of the types Rule, RuleGroup, and managed rule group. You can associate a web ACL with one or more Amazon Web Services resources to protect. The resources can be an Amazon CloudFront distribution, an Amazon API Gateway REST API, an Application Load Balancer, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service.
" } }, "shapes": { @@ -1610,7 +1610,7 @@ "members": { "InspectionLevel": { "shape": "InspectionLevel", - "documentation": "The inspection level to use for the Bot Control rule group. The common level is the least expensive. The targeted level includes all common level rules and adds rules with more advanced inspection criteria. For details, see WAF Bot Control rule group.
" + "documentation": "The inspection level to use for the Bot Control rule group. The common level is the least expensive. The targeted level includes all common level rules and adds rules with more advanced inspection criteria. For details, see WAF Bot Control rule group in the WAF Developer Guide.
" } }, "documentation": "Details for your use of the Bot Control managed rule group, AWSManagedRulesBotControlRuleSet
. This configuration is used in ManagedRuleGroupConfig
.
Defines custom handling for the web request.
For information about customizing web requests and responses, see Customizing web requests and responses in WAF in the WAF Developer Guide.
" + "documentation": "Defines custom handling for the web request.
For information about customizing web requests and responses, see Customizing web requests and responses in WAF in the WAF Developer Guide.
" } }, "documentation": "Specifies that WAF should allow the request and optionally defines additional custom handling for the request.
This is used in the context of other settings, for example to specify values for RuleAction and web ACL DefaultAction.
" @@ -1688,7 +1688,7 @@ }, "ResourceArn": { "shape": "ResourceArn", - "documentation": "The Amazon Resource Name (ARN) of the resource to associate with the web ACL.
The ARN must be in one of the following formats:
For an Application Load Balancer: arn:aws:elasticloadbalancing:region:account-id:loadbalancer/app/load-balancer-name/load-balancer-id
For an Amazon API Gateway REST API: arn:aws:apigateway:region::/restapis/api-id/stages/stage-name
For an AppSync GraphQL API: arn:aws:appsync:region:account-id:apis/GraphQLApiId
For an Amazon Cognito user pool: arn:aws:cognito-idp:region:account-id:userpool/user-pool-id
For an App Runner service: arn:aws:apprunner:region:account-id:service/apprunner-service-name/apprunner-service-id
The Amazon Resource Name (ARN) of the resource to associate with the web ACL.
The ARN must be in one of the following formats:
For an Application Load Balancer: arn:partition:elasticloadbalancing:region:account-id:loadbalancer/app/load-balancer-name/load-balancer-id
For an Amazon API Gateway REST API: arn:partition:apigateway:region::/restapis/api-id/stages/stage-name
For an AppSync GraphQL API: arn:partition:appsync:region:account-id:apis/GraphQLApiId
For an Amazon Cognito user pool: arn:partition:cognito-idp:region:account-id:userpool/user-pool-id
For an App Runner service: arn:partition:apprunner:region:account-id:service/apprunner-service-name/apprunner-service-id
Customizes the maximum size of the request body that your protected CloudFront distributions forward to WAF for inspection. The default size is 16 KB (16,384 kilobytes).
You are charged additional fees when your protected resources forward body sizes that are larger than the default. For more information, see WAF Pricing.
Specifies custom configurations for the associations between the web ACL and protected resources.
Use this to customize the maximum size of the request body that your protected CloudFront distributions forward to WAF for inspection. The default is 16 KB (16,384 kilobytes).
You are charged additional fees when your protected resources forward body sizes that are larger than the default. For more information, see WAF Pricing.
Defines a custom response for the web request.
For information about customizing web requests and responses, see Customizing web requests and responses in WAF in the WAF Developer Guide.
" + "documentation": "Defines a custom response for the web request.
For information about customizing web requests and responses, see Customizing web requests and responses in WAF in the WAF Developer Guide.
" } }, "documentation": "Specifies that WAF should block the request and optionally defines additional custom handling for the response to the web request.
This is used in the context of other settings, for example to specify values for RuleAction and web ACL DefaultAction.
" @@ -1711,7 +1727,7 @@ "members": { "OversizeHandling": { "shape": "OversizeHandling", - "documentation": "What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service.
The options for oversize handling are the following:
CONTINUE
- Inspect the body normally, according to the rule inspection criteria.
MATCH
- Treat the web request as matching the rule statement. WAF applies the rule action to the request.
NO_MATCH
- Treat the web request as not matching the rule statement.
You can combine the MATCH
or NO_MATCH
settings for oversize handling with your rule and web ACL action settings, so that you block any request whose body is over 8 KB.
Default: CONTINUE
What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the web request body if the body exceeds the limit for the resource type. If the body is larger than the limit, the underlying host service only forwards the contents that are below the limit to WAF for inspection.
The default limit is 8 KB (8,192 kilobytes) for regional resources and 16 KB (16,384 kilobytes) for CloudFront distributions. For CloudFront distributions, you can increase the limit in the web ACL AssociationConfig
, for additional processing fees.
The options for oversize handling are the following:
CONTINUE
- Inspect the body normally, according to the rule inspection criteria.
MATCH
- Treat the web request as matching the rule statement. WAF applies the rule action to the request.
NO_MATCH
- Treat the web request as not matching the rule statement.
You can combine the MATCH
or NO_MATCH
settings for oversize handling with your rule and web ACL action settings, so that you block any request whose body is over the limit.
Default: CONTINUE
Inspect the body of the web request. The body immediately follows the request headers.
This is used to indicate the web request component to inspect, in the FieldToMatch specification.
" @@ -1764,7 +1780,7 @@ "members": { "CustomRequestHandling": { "shape": "CustomRequestHandling", - "documentation": "Defines custom handling for the web request, used when the CAPTCHA
inspection determines that the request's token is valid and unexpired.
For information about customizing web requests and responses, see Customizing web requests and responses in WAF in the WAF Developer Guide.
" + "documentation": "Defines custom handling for the web request, used when the CAPTCHA
inspection determines that the request's token is valid and unexpired.
For information about customizing web requests and responses, see Customizing web requests and responses in WAF in the WAF Developer Guide.
" } }, "documentation": "Specifies that WAF should run a CAPTCHA
check against the request:
If the request includes a valid, unexpired CAPTCHA
token, WAF applies any custom request handling and labels that you've configured and then allows the web request inspection to proceed to the next rule, similar to a CountAction
.
If the request doesn't include a valid, unexpired token, WAF discontinues the web ACL evaluation of the request and blocks it from going to its intended destination.
WAF generates a response that it sends back to the client, which includes the following:
The header x-amzn-waf-action
with a value of captcha
.
The HTTP status code 405 Method Not Allowed
.
If the request contains an Accept
header with a value of text/html
, the response includes a CAPTCHA
JavaScript page interstitial.
You can configure the expiration time in the CaptchaConfig
ImmunityTimeProperty
setting at the rule and web ACL level. The rule setting overrides the web ACL setting.
This action option is available for rules. It isn't available for web ACL default actions.
" @@ -1802,7 +1818,7 @@ "members": { "CustomRequestHandling": { "shape": "CustomRequestHandling", - "documentation": "Defines custom handling for the web request, used when the challenge inspection determines that the request's token is valid and unexpired.
For information about customizing web requests and responses, see Customizing web requests and responses in WAF in the WAF Developer Guide.
" + "documentation": "Defines custom handling for the web request, used when the challenge inspection determines that the request's token is valid and unexpired.
For information about customizing web requests and responses, see Customizing web requests and responses in WAF in the WAF Developer Guide.
" } }, "documentation": "Specifies that WAF should run a Challenge
check against the request to verify that the request is coming from a legitimate client session:
If the request includes a valid, unexpired challenge token, WAF applies any custom request handling and labels that you've configured and then allows the web request inspection to proceed to the next rule, similar to a CountAction
.
If the request doesn't include a valid, unexpired challenge token, WAF discontinues the web ACL evaluation of the request and blocks it from going to its intended destination.
WAF then generates a challenge response that it sends back to the client, which includes the following:
The header x-amzn-waf-action
with a value of challenge
.
The HTTP status code 202 Request Accepted
.
If the request contains an Accept
header with a value of text/html
, the response includes a JavaScript page interstitial with a challenge script.
Challenges run silent browser interrogations in the background, and don't generally affect the end user experience.
A challenge enforces token acquisition using an interstitial JavaScript challenge that inspects the client session for legitimate behavior. The challenge blocks bots or at least increases the cost of operating sophisticated bots.
After the client session successfully responds to the challenge, it receives a new token from WAF, which the challenge script uses to resubmit the original request.
You can configure the expiration time in the ChallengeConfig
ImmunityTimeProperty
setting at the rule and web ACL level. The rule setting overrides the web ACL setting.
This action option is available for rules. It isn't available for web ACL default actions.
" @@ -1844,7 +1860,7 @@ "members": { "Scope": { "shape": "Scope", - "documentation": "Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service.
To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows:
CLI - Specify the Region when you use the CloudFront scope: --scope=CLOUDFRONT --region=us-east-1
.
API and SDKs - For all calls, use the Region endpoint us-east-1.
Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service.
To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows:
CLI - Specify the Region when you use the CloudFront scope: --scope=CLOUDFRONT --region=us-east-1
.
API and SDKs - For all calls, use the Region endpoint us-east-1.
Defines custom handling for the web request.
For information about customizing web requests and responses, see Customizing web requests and responses in WAF in the WAF Developer Guide.
" + "documentation": "Defines custom handling for the web request.
For information about customizing web requests and responses, see Customizing web requests and responses in WAF in the WAF Developer Guide.
" } }, "documentation": "Specifies that WAF should count the request. Optionally defines additional custom handling for the request.
This is used in the context of other settings, for example to specify values for RuleAction and web ACL DefaultAction.
" @@ -2236,7 +2252,7 @@ }, "Scope": { "shape": "Scope", - "documentation": "Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service.
To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows:
CLI - Specify the Region when you use the CloudFront scope: --scope=CLOUDFRONT --region=us-east-1
.
API and SDKs - For all calls, use the Region endpoint us-east-1.
Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service.
To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows:
CLI - Specify the Region when you use the CloudFront scope: --scope=CLOUDFRONT --region=us-east-1
.
API and SDKs - For all calls, use the Region endpoint us-east-1.
Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service.
To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows:
CLI - Specify the Region when you use the CloudFront scope: --scope=CLOUDFRONT --region=us-east-1
.
API and SDKs - For all calls, use the Region endpoint us-east-1.
Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service.
To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows:
CLI - Specify the Region when you use the CloudFront scope: --scope=CLOUDFRONT --region=us-east-1
.
API and SDKs - For all calls, use the Region endpoint us-east-1.
Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service.
To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows:
CLI - Specify the Region when you use the CloudFront scope: --scope=CLOUDFRONT --region=us-east-1
.
API and SDKs - For all calls, use the Region endpoint us-east-1.
Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service.
To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows:
CLI - Specify the Region when you use the CloudFront scope: --scope=CLOUDFRONT --region=us-east-1
.
API and SDKs - For all calls, use the Region endpoint us-east-1.
The web ACL capacity units (WCUs) required for this rule group.
When you create your own rule group, you define this, and you cannot change it after creation. When you add or modify the rules in a rule group, WAF enforces this limit. You can check the capacity for a set of rules using CheckCapacity.
WAF uses WCUs to calculate and control the operating resources that are used to run your rules, rule groups, and web ACLs. WAF calculates capacity differently for each rule type, to reflect the relative cost of each rule. Simple rules that cost little to run use fewer WCUs than more complex rules that use more processing power. Rule group capacity is fixed at creation, which helps users plan their web ACL WCU usage when they use a rule group. The WCU limit for web ACLs is 1,500.
" + "documentation": "The web ACL capacity units (WCUs) required for this rule group.
When you create your own rule group, you define this, and you cannot change it after creation. When you add or modify the rules in a rule group, WAF enforces this limit. You can check the capacity for a set of rules using CheckCapacity.
WAF uses WCUs to calculate and control the operating resources that are used to run your rules, rule groups, and web ACLs. WAF calculates capacity differently for each rule type, to reflect the relative cost of each rule. Simple rules that cost little to run use fewer WCUs than more complex rules that use more processing power. Rule group capacity is fixed at creation, which helps users plan their web ACL WCU usage when they use a rule group. For more information, see WAF web ACL capacity units (WCU) in the WAF Developer Guide.
" }, "Description": { "shape": "EntityDescription", @@ -2343,7 +2359,7 @@ }, "CustomResponseBodies": { "shape": "CustomResponseBodies", - "documentation": "A map of custom response keys and content bodies. When you create a rule with a block action, you can send a custom response to the web request. You define these for the rule group, and then use them in the rules that you define in the rule group.
For information about customizing web requests and responses, see Customizing web requests and responses in WAF in the WAF Developer Guide.
For information about the limits on count and size for custom request and response settings, see WAF quotas in the WAF Developer Guide.
" + "documentation": "A map of custom response keys and content bodies. When you create a rule with a block action, you can send a custom response to the web request. You define these for the rule group, and then use them in the rules that you define in the rule group.
For information about customizing web requests and responses, see Customizing web requests and responses in WAF in the WAF Developer Guide.
For information about the limits on count and size for custom request and response settings, see WAF quotas in the WAF Developer Guide.
" } } }, @@ -2371,7 +2387,7 @@ }, "Scope": { "shape": "Scope", - "documentation": "Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service.
To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows:
CLI - Specify the Region when you use the CloudFront scope: --scope=CLOUDFRONT --region=us-east-1
.
API and SDKs - For all calls, use the Region endpoint us-east-1.
Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service.
To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows:
CLI - Specify the Region when you use the CloudFront scope: --scope=CLOUDFRONT --region=us-east-1
.
API and SDKs - For all calls, use the Region endpoint us-east-1.
A map of custom response keys and content bodies. When you create a rule with a block action, you can send a custom response to the web request. You define these for the web ACL, and then use them in the rules and default actions that you define in the web ACL.
For information about customizing web requests and responses, see Customizing web requests and responses in WAF in the WAF Developer Guide.
For information about the limits on count and size for custom request and response settings, see WAF quotas in the WAF Developer Guide.
" + "documentation": "A map of custom response keys and content bodies. When you create a rule with a block action, you can send a custom response to the web request. You define these for the web ACL, and then use them in the rules and default actions that you define in the web ACL.
For information about customizing web requests and responses, see Customizing web requests and responses in WAF in the WAF Developer Guide.
For information about the limits on count and size for custom request and response settings, see WAF quotas in the WAF Developer Guide.
" }, "CaptchaConfig": { "shape": "CaptchaConfig", @@ -2408,6 +2424,10 @@ "TokenDomains": { "shape": "TokenDomains", "documentation": "Specifies the domains that WAF should accept in a web request token. This enables the use of tokens across multiple protected websites. When WAF provides a token, it uses the domain of the Amazon Web Services resource that the web ACL is protecting. If you don't specify a list of token domains, WAF accepts tokens only for the domain of the protected resource. With a token domain list, WAF accepts the resource's host domain plus all domains in the token domain list, including their prefixed subdomains.
Example JSON: \"TokenDomains\": { \"mywebsite.com\", \"myotherwebsite.com\" }
Public suffixes aren't allowed. For example, you can't use usa.gov
or co.uk
as token domains.
Specifies custom configurations for the associations between the web ACL and protected resources.
Use this to customize the maximum size of the request body that your protected CloudFront distributions forward to WAF for inspection. The default is 16 KB (16,384 kilobytes).
You are charged additional fees when your protected resources forward body sizes that are larger than the default. For more information, see WAF Pricing.
The HTTP headers to insert into the request. Duplicate header names are not allowed.
For information about the limits on count and size for custom request and response settings, see WAF quotas in the WAF Developer Guide.
" + "documentation": "The HTTP headers to insert into the request. Duplicate header names are not allowed.
For information about the limits on count and size for custom request and response settings, see WAF quotas in the WAF Developer Guide.
" } }, - "documentation": "Custom request handling behavior that inserts custom headers into a web request. You can add custom request handling for WAF to use when the rule action doesn't block the request. For example, CaptchaAction
for requests with valid t okens, and AllowAction
.
For information about customizing web requests and responses, see Customizing web requests and responses in WAF in the WAF Developer Guide.
" + "documentation": "Custom request handling behavior that inserts custom headers into a web request. You can add custom request handling for WAF to use when the rule action doesn't block the request. For example, CaptchaAction
for requests with valid t okens, and AllowAction
.
For information about customizing web requests and responses, see Customizing web requests and responses in WAF in the WAF Developer Guide.
" }, "CustomResponse": { "type": "structure", @@ -2478,7 +2498,7 @@ "members": { "ResponseCode": { "shape": "ResponseStatusCode", - "documentation": "The HTTP status code to return to the client.
For a list of status codes that you can use in your custom responses, see Supported status codes for custom response in the WAF Developer Guide.
" + "documentation": "The HTTP status code to return to the client.
For a list of status codes that you can use in your custom responses, see Supported status codes for custom response in the WAF Developer Guide.
" }, "CustomResponseBodyKey": { "shape": "EntityName", @@ -2486,10 +2506,10 @@ }, "ResponseHeaders": { "shape": "CustomHTTPHeaders", - "documentation": "The HTTP headers to use in the response. Duplicate header names are not allowed.
For information about the limits on count and size for custom request and response settings, see WAF quotas in the WAF Developer Guide.
" + "documentation": "The HTTP headers to use in the response. Duplicate header names are not allowed.
For information about the limits on count and size for custom request and response settings, see WAF quotas in the WAF Developer Guide.
" } }, - "documentation": "A custom response to send to the client. You can define a custom response for rule actions and default web ACL actions that are set to BlockAction.
For information about customizing web requests and responses, see Customizing web requests and responses in WAF in the WAF Developer Guide.
" + "documentation": "A custom response to send to the client. You can define a custom response for rule actions and default web ACL actions that are set to BlockAction.
For information about customizing web requests and responses, see Customizing web requests and responses in WAF in the WAF Developer Guide.
" }, "CustomResponseBodies": { "type": "map", @@ -2514,7 +2534,7 @@ }, "Content": { "shape": "ResponseContent", - "documentation": "The payload of the custom response.
You can use JSON escape strings in JSON content. To do this, you must specify JSON content in the ContentType
setting.
For information about the limits on count and size for custom request and response settings, see WAF quotas in the WAF Developer Guide.
" + "documentation": "The payload of the custom response.
You can use JSON escape strings in JSON content. To do this, you must specify JSON content in the ContentType
setting.
For information about the limits on count and size for custom request and response settings, see WAF quotas in the WAF Developer Guide.
" } }, "documentation": "The response body to use in a custom response to a web request. This is referenced by key from CustomResponse CustomResponseBodyKey
.
Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service.
To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows:
CLI - Specify the Region when you use the CloudFront scope: --scope=CLOUDFRONT --region=us-east-1
.
API and SDKs - For all calls, use the Region endpoint us-east-1.
Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service.
To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows:
CLI - Specify the Region when you use the CloudFront scope: --scope=CLOUDFRONT --region=us-east-1
.
API and SDKs - For all calls, use the Region endpoint us-east-1.
Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service.
To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows:
CLI - Specify the Region when you use the CloudFront scope: --scope=CLOUDFRONT --region=us-east-1
.
API and SDKs - For all calls, use the Region endpoint us-east-1.
Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service.
To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows:
CLI - Specify the Region when you use the CloudFront scope: --scope=CLOUDFRONT --region=us-east-1
.
API and SDKs - For all calls, use the Region endpoint us-east-1.
Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service.
To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows:
CLI - Specify the Region when you use the CloudFront scope: --scope=CLOUDFRONT --region=us-east-1
.
API and SDKs - For all calls, use the Region endpoint us-east-1.
Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service.
To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows:
CLI - Specify the Region when you use the CloudFront scope: --scope=CLOUDFRONT --region=us-east-1
.
API and SDKs - For all calls, use the Region endpoint us-east-1.
Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service.
To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows:
CLI - Specify the Region when you use the CloudFront scope: --scope=CLOUDFRONT --region=us-east-1
.
API and SDKs - For all calls, use the Region endpoint us-east-1.
Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service.
To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows:
CLI - Specify the Region when you use the CloudFront scope: --scope=CLOUDFRONT --region=us-east-1
.
API and SDKs - For all calls, use the Region endpoint us-east-1.
Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service.
To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows:
CLI - Specify the Region when you use the CloudFront scope: --scope=CLOUDFRONT --region=us-east-1
.
API and SDKs - For all calls, use the Region endpoint us-east-1.
Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service.
To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows:
CLI - Specify the Region when you use the CloudFront scope: --scope=CLOUDFRONT --region=us-east-1
.
API and SDKs - For all calls, use the Region endpoint us-east-1.
The web ACL capacity units (WCUs) required for this rule group. WAF uses web ACL capacity units (WCU) to calculate and control the operating resources that are used to run your rules, rule groups, and web ACLs. WAF calculates capacity differently for each rule type, to reflect each rule's relative cost. Rule group capacity is fixed at creation, so users can plan their web ACL WCU usage when they use a rule group. The WCU limit for web ACLs is 1,500.
" + "documentation": "The web ACL capacity units (WCUs) required for this rule group.
WAF uses WCUs to calculate and control the operating resources that are used to run your rules, rule groups, and web ACLs. WAF calculates capacity differently for each rule type, to reflect the relative cost of each rule. Simple rules that cost little to run use fewer WCUs than more complex rules that use more processing power. Rule group capacity is fixed at creation, which helps users plan their web ACL WCU usage when they use a rule group. For more information, see WAF web ACL capacity units (WCU) in the WAF Developer Guide.
" }, "Rules": { "shape": "RuleSummaries", @@ -2782,7 +2802,7 @@ "members": { "ResourceArn": { "shape": "ResourceArn", - "documentation": "The Amazon Resource Name (ARN) of the resource to disassociate from the web ACL.
The ARN must be in one of the following formats:
For an Application Load Balancer: arn:aws:elasticloadbalancing:region:account-id:loadbalancer/app/load-balancer-name/load-balancer-id
For an Amazon API Gateway REST API: arn:aws:apigateway:region::/restapis/api-id/stages/stage-name
For an AppSync GraphQL API: arn:aws:appsync:region:account-id:apis/GraphQLApiId
For an Amazon Cognito user pool: arn:aws:cognito-idp:region:account-id:userpool/user-pool-id
For an App Runner service: arn:aws:apprunner:region:account-id:service/apprunner-service-name/apprunner-service-id
The Amazon Resource Name (ARN) of the resource to disassociate from the web ACL.
The ARN must be in one of the following formats:
For an Application Load Balancer: arn:partition:elasticloadbalancing:region:account-id:loadbalancer/app/load-balancer-name/load-balancer-id
For an Amazon API Gateway REST API: arn:partition:apigateway:region::/restapis/api-id/stages/stage-name
For an AppSync GraphQL API: arn:partition:appsync:region:account-id:apis/GraphQLApiId
For an Amazon Cognito user pool: arn:partition:cognito-idp:region:account-id:userpool/user-pool-id
For an App Runner service: arn:partition:apprunner:region:account-id:service/apprunner-service-name/apprunner-service-id
Inspect the request body as plain text. The request body immediately follows the request headers. This is the part of a request that contains any additional data that you want to send to your web server as the HTTP request body, such as data from a form.
Only the first 8 KB (8192 bytes) of the request body are forwarded to WAF for inspection by the underlying host service. For information about how to handle oversized request bodies, see the Body
object configuration.
Inspect the request body as plain text. The request body immediately follows the request headers. This is the part of a request that contains any additional data that you want to send to your web server as the HTTP request body, such as data from a form.
A limited amount of the request body is forwarded to WAF for inspection by the underlying host service. For regional resources, the limit is 8 KB (8,192 kilobytes) and for CloudFront distributions, the limit is 16 KB (16,384 kilobytes). For CloudFront distributions, you can increase the limit in the web ACL's AssociationConfig
, for additional processing fees.
For information about how to handle oversized request bodies, see the Body
object configuration.
Inspect the request body as JSON. The request body immediately follows the request headers. This is the part of a request that contains any additional data that you want to send to your web server as the HTTP request body, such as data from a form.
Only the first 8 KB (8192 bytes) of the request body are forwarded to WAF for inspection by the underlying host service. For information about how to handle oversized request bodies, see the JsonBody
object configuration.
Inspect the request body as JSON. The request body immediately follows the request headers. This is the part of a request that contains any additional data that you want to send to your web server as the HTTP request body, such as data from a form.
A limited amount of the request body is forwarded to WAF for inspection by the underlying host service. For regional resources, the limit is 8 KB (8,192 kilobytes) and for CloudFront distributions, the limit is 16 KB (16,384 kilobytes). For CloudFront distributions, you can increase the limit in the web ACL's AssociationConfig
, for additional processing fees.
For information about how to handle oversized request bodies, see the JsonBody
object configuration.
A rule statement used to run the rules that are defined in a managed rule group. To use this, provide the vendor name and the name of the rule group in this statement. You can retrieve the required names by calling ListAvailableManagedRuleGroups.
You cannot nest a ManagedRuleGroupStatement
, for example for use inside a NotStatement
or OrStatement
. It can only be referenced as a top-level statement within a rule.
You are charged additional fees when you use the WAF Bot Control managed rule group AWSManagedRulesBotControlRuleSet
or the WAF Fraud Control account takeover prevention (ATP) managed rule group AWSManagedRulesATPRuleSet
. For more information, see WAF Pricing.
A statement used by Firewall Manager to run the rules that are defined in a managed rule group. This is managed by Firewall Manager for an Firewall Manager WAF policy.
" }, "RuleGroupReferenceStatement": { "shape": "RuleGroupReferenceStatement", - "documentation": "A rule statement used to run the rules that are defined in a RuleGroup. To use this, create a rule group with your rules, then provide the ARN of the rule group in this statement.
You cannot nest a RuleGroupReferenceStatement
, for example for use inside a NotStatement
or OrStatement
. You can only use a rule group reference statement at the top level inside a web ACL.
A statement used by Firewall Manager to run the rules that are defined in a rule group. This is managed by Firewall Manager for an Firewall Manager WAF policy.
" } }, - "documentation": "The processing guidance for an Firewall Manager rule. This is like a regular rule Statement, but it can only contain a rule group reference.
" + "documentation": "The processing guidance for an Firewall Manager rule. This is like a regular rule Statement, but it can only contain a single rule group reference.
" }, "ForwardedIPConfig": { "type": "structure", @@ -3099,7 +3119,7 @@ }, "Scope": { "shape": "Scope", - "documentation": "Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service.
To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows:
CLI - Specify the Region when you use the CloudFront scope: --scope=CLOUDFRONT --region=us-east-1
.
API and SDKs - For all calls, use the Region endpoint us-east-1.
Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service.
To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows:
CLI - Specify the Region when you use the CloudFront scope: --scope=CLOUDFRONT --region=us-east-1
.
API and SDKs - For all calls, use the Region endpoint us-east-1.
Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service.
To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows:
CLI - Specify the Region when you use the CloudFront scope: --scope=CLOUDFRONT --region=us-east-1
.
API and SDKs - For all calls, use the Region endpoint us-east-1.
Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service.
To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows:
CLI - Specify the Region when you use the CloudFront scope: --scope=CLOUDFRONT --region=us-east-1
.
API and SDKs - For all calls, use the Region endpoint us-east-1.
Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service.
To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows:
CLI - Specify the Region when you use the CloudFront scope: --scope=CLOUDFRONT --region=us-east-1
.
API and SDKs - For all calls, use the Region endpoint us-east-1.
Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service.
To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows:
CLI - Specify the Region when you use the CloudFront scope: --scope=CLOUDFRONT --region=us-east-1
.
API and SDKs - For all calls, use the Region endpoint us-east-1.
Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service.
To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows:
CLI - Specify the Region when you use the CloudFront scope: --scope=CLOUDFRONT --region=us-east-1
.
API and SDKs - For all calls, use the Region endpoint us-east-1.
Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service.
To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows:
CLI - Specify the Region when you use the CloudFront scope: --scope=CLOUDFRONT --region=us-east-1
.
API and SDKs - For all calls, use the Region endpoint us-east-1.
Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service.
To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows:
CLI - Specify the Region when you use the CloudFront scope: --scope=CLOUDFRONT --region=us-east-1
.
API and SDKs - For all calls, use the Region endpoint us-east-1.
Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service.
To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows:
CLI - Specify the Region when you use the CloudFront scope: --scope=CLOUDFRONT --region=us-east-1
.
API and SDKs - For all calls, use the Region endpoint us-east-1.
Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service.
To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows:
CLI - Specify the Region when you use the CloudFront scope: --scope=CLOUDFRONT --region=us-east-1
.
API and SDKs - For all calls, use the Region endpoint us-east-1.
Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service.
To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows:
CLI - Specify the Region when you use the CloudFront scope: --scope=CLOUDFRONT --region=us-east-1
.
API and SDKs - For all calls, use the Region endpoint us-east-1.
The Amazon Resource Name (ARN) of the resource whose web ACL you want to retrieve.
The ARN must be in one of the following formats:
For an Application Load Balancer: arn:aws:elasticloadbalancing:region:account-id:loadbalancer/app/load-balancer-name/load-balancer-id
For an Amazon API Gateway REST API: arn:aws:apigateway:region::/restapis/api-id/stages/stage-name
For an AppSync GraphQL API: arn:aws:appsync:region:account-id:apis/GraphQLApiId
For an Amazon Cognito user pool: arn:aws:cognito-idp:region:account-id:userpool/user-pool-id
For an App Runner service: arn:aws:apprunner:region:account-id:service/apprunner-service-name/apprunner-service-id
The Amazon Resource Name (ARN) of the resource whose web ACL you want to retrieve.
The ARN must be in one of the following formats:
For an Application Load Balancer: arn:partition:elasticloadbalancing:region:account-id:loadbalancer/app/load-balancer-name/load-balancer-id
For an Amazon API Gateway REST API: arn:partition:apigateway:region::/restapis/api-id/stages/stage-name
For an AppSync GraphQL API: arn:partition:appsync:region:account-id:apis/GraphQLApiId
For an Amazon Cognito user pool: arn:partition:cognito-idp:region:account-id:userpool/user-pool-id
For an App Runner service: arn:partition:apprunner:region:account-id:service/apprunner-service-name/apprunner-service-id
Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service.
To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows:
CLI - Specify the Region when you use the CloudFront scope: --scope=CLOUDFRONT --region=us-east-1
.
API and SDKs - For all calls, use the Region endpoint us-east-1.
Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service.
To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows:
CLI - Specify the Region when you use the CloudFront scope: --scope=CLOUDFRONT --region=us-east-1
.
API and SDKs - For all calls, use the Region endpoint us-east-1.
What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the body of a web request when the body exceeds 8 KB (8192 bytes). Only the first 8 KB of the request body are forwarded to WAF by the underlying host service.
The options for oversize handling are the following:
CONTINUE
- Inspect the body normally, according to the rule inspection criteria.
MATCH
- Treat the web request as matching the rule statement. WAF applies the rule action to the request.
NO_MATCH
- Treat the web request as not matching the rule statement.
You can combine the MATCH
or NO_MATCH
settings for oversize handling with your rule and web ACL action settings, so that you block any request whose body is over 8 KB.
Default: CONTINUE
What WAF should do if the body is larger than WAF can inspect. WAF does not support inspecting the entire contents of the web request body if the body exceeds the limit for the resource type. If the body is larger than the limit, the underlying host service only forwards the contents that are below the limit to WAF for inspection.
The default limit is 8 KB (8,192 kilobytes) for regional resources and 16 KB (16,384 kilobytes) for CloudFront distributions. For CloudFront distributions, you can increase the limit in the web ACL AssociationConfig
, for additional processing fees.
The options for oversize handling are the following:
CONTINUE
- Inspect the body normally, according to the rule inspection criteria.
MATCH
- Treat the web request as matching the rule statement. WAF applies the rule action to the request.
NO_MATCH
- Treat the web request as not matching the rule statement.
You can combine the MATCH
or NO_MATCH
settings for oversize handling with your rule and web ACL action settings, so that you block any request whose body is over the limit.
Default: CONTINUE
Inspect the body of the web request as JSON. The body immediately follows the request headers.
This is used to indicate the web request component to inspect, in the FieldToMatch specification.
Use the specifications in this object to indicate which parts of the JSON body to inspect using the rule's inspection criteria. WAF inspects only the parts of the JSON that result from the matches that you indicate.
Example JSON: \"JsonBody\": { \"MatchPattern\": { \"All\": {} }, \"MatchScope\": \"ALL\" }
Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service.
To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows:
CLI - Specify the Region when you use the CloudFront scope: --scope=CLOUDFRONT --region=us-east-1
.
API and SDKs - For all calls, use the Region endpoint us-east-1.
Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service.
To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows:
CLI - Specify the Region when you use the CloudFront scope: --scope=CLOUDFRONT --region=us-east-1
.
API and SDKs - For all calls, use the Region endpoint us-east-1.
Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service.
To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows:
CLI - Specify the Region when you use the CloudFront scope: --scope=CLOUDFRONT --region=us-east-1
.
API and SDKs - For all calls, use the Region endpoint us-east-1.
Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service.
To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows:
CLI - Specify the Region when you use the CloudFront scope: --scope=CLOUDFRONT --region=us-east-1
.
API and SDKs - For all calls, use the Region endpoint us-east-1.
Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service.
To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows:
CLI - Specify the Region when you use the CloudFront scope: --scope=CLOUDFRONT --region=us-east-1
.
API and SDKs - For all calls, use the Region endpoint us-east-1.
Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service.
To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows:
CLI - Specify the Region when you use the CloudFront scope: --scope=CLOUDFRONT --region=us-east-1
.
API and SDKs - For all calls, use the Region endpoint us-east-1.
Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service.
To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows:
CLI - Specify the Region when you use the CloudFront scope: --scope=CLOUDFRONT --region=us-east-1
.
API and SDKs - For all calls, use the Region endpoint us-east-1.
Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service.
To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows:
CLI - Specify the Region when you use the CloudFront scope: --scope=CLOUDFRONT --region=us-east-1
.
API and SDKs - For all calls, use the Region endpoint us-east-1.
Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service.
To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows:
CLI - Specify the Region when you use the CloudFront scope: --scope=CLOUDFRONT --region=us-east-1
.
API and SDKs - For all calls, use the Region endpoint us-east-1.
Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service.
To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows:
CLI - Specify the Region when you use the CloudFront scope: --scope=CLOUDFRONT --region=us-east-1
.
API and SDKs - For all calls, use the Region endpoint us-east-1.
Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service.
To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows:
CLI - Specify the Region when you use the CloudFront scope: --scope=CLOUDFRONT --region=us-east-1
.
API and SDKs - For all calls, use the Region endpoint us-east-1.
Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service.
To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows:
CLI - Specify the Region when you use the CloudFront scope: --scope=CLOUDFRONT --region=us-east-1
.
API and SDKs - For all calls, use the Region endpoint us-east-1.
Used for web ACLs that are scoped for regional applications. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service.
If you don't provide a resource type, the call uses the resource type APPLICATION_LOAD_BALANCER
.
Default: APPLICATION_LOAD_BALANCER
Used for web ACLs that are scoped for regional applications. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service.
If you don't provide a resource type, the call uses the resource type APPLICATION_LOAD_BALANCER
.
Default: APPLICATION_LOAD_BALANCER
Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service.
To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows:
CLI - Specify the Region when you use the CloudFront scope: --scope=CLOUDFRONT --region=us-east-1
.
API and SDKs - For all calls, use the Region endpoint us-east-1.
Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service.
To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows:
CLI - Specify the Region when you use the CloudFront scope: --scope=CLOUDFRONT --region=us-east-1
.
API and SDKs - For all calls, use the Region endpoint us-east-1.
Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service.
To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows:
CLI - Specify the Region when you use the CloudFront scope: --scope=CLOUDFRONT --region=us-east-1
.
API and SDKs - For all calls, use the Region endpoint us-east-1.
Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service.
To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows:
CLI - Specify the Region when you use the CloudFront scope: --scope=CLOUDFRONT --region=us-east-1
.
API and SDKs - For all calls, use the Region endpoint us-east-1.
The web ACL capacity units (WCUs) required for this rule group.
WAF uses WCUs to calculate and control the operating resources that are used to run your rules, rule groups, and web ACLs. WAF calculates capacity differently for each rule type, to reflect the relative cost of each rule. Simple rules that cost little to run use fewer WCUs than more complex rules that use more processing power. Rule group capacity is fixed at creation, which helps users plan their web ACL WCU usage when they use a rule group. The WCU limit for web ACLs is 1,500.
" + "documentation": "The web ACL capacity units (WCUs) required for this rule group.
WAF uses WCUs to calculate and control the operating resources that are used to run your rules, rule groups, and web ACLs. WAF calculates capacity differently for each rule type, to reflect the relative cost of each rule. Simple rules that cost little to run use fewer WCUs than more complex rules that use more processing power. Rule group capacity is fixed at creation, which helps users plan their web ACL WCU usage when they use a rule group. For more information, see WAF web ACL capacity units (WCU) in the WAF Developer Guide.
" }, "ForecastedLifetime": { "shape": "TimeWindowDay", @@ -4735,7 +4755,7 @@ }, "Scope": { "shape": "Scope", - "documentation": "Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service.
To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows:
CLI - Specify the Region when you use the CloudFront scope: --scope=CLOUDFRONT --region=us-east-1
.
API and SDKs - For all calls, use the Region endpoint us-east-1.
Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service.
To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows:
CLI - Specify the Region when you use the CloudFront scope: --scope=CLOUDFRONT --region=us-east-1
.
API and SDKs - For all calls, use the Region endpoint us-east-1.
The policy to attach to the specified rule group.
The policy specifications must conform to the following:
The policy must be composed using IAM Policy version 2012-10-17 or version 2015-01-01.
The policy must include specifications for Effect
, Action
, and Principal
.
Effect
must specify Allow
.
Action
must specify wafv2:CreateWebACL
, wafv2:UpdateWebACL
, and wafv2:PutFirewallManagerRuleGroups
and may optionally specify wafv2:GetRuleGroup
. WAF rejects any extra actions or wildcard actions in the policy.
The policy must not include a Resource
parameter.
For more information, see IAM Policies.
" + "documentation": "The policy to attach to the specified rule group.
The policy specifications must conform to the following:
The policy must be composed using IAM Policy version 2012-10-17.
The policy must include specifications for Effect
, Action
, and Principal
.
Effect
must specify Allow
.
Action
must specify wafv2:CreateWebACL
, wafv2:UpdateWebACL
, and wafv2:PutFirewallManagerRuleGroups
and may optionally specify wafv2:GetRuleGroup
. WAF rejects any extra actions or wildcard actions in the policy.
The policy must not include a Resource
parameter.
For more information, see IAM Policies.
" } } }, @@ -4998,6 +5018,28 @@ }, "documentation": "High level information for an SDK release.
" }, + "RequestBody": { + "type": "map", + "key": { + "shape": "AssociatedResourceType" + }, + "value": { + "shape": "RequestBodyAssociatedResourceTypeConfig" + } + }, + "RequestBodyAssociatedResourceTypeConfig": { + "type": "structure", + "required": [ + "DefaultSizeInspectionLimit" + ], + "members": { + "DefaultSizeInspectionLimit": { + "shape": "SizeInspectionLimit", + "documentation": "Specifies the maximum size of the web request body component that an associated CloudFront distribution should send to WAF for inspection. This applies to statements in the web ACL that inspect the body or JSON body.
Default: 16 KB (16,384 kilobytes)
Customizes the maximum size of the request body that your protected CloudFront distributions forward to WAF for inspection. The default size is 16 KB (16,384 kilobytes).
You are charged additional fees when your protected resources forward body sizes that are larger than the default. For more information, see WAF Pricing.
This is used in the AssociationConfig
of the web ACL.
The web ACL capacity units (WCUs) required for this rule group.
When you create your own rule group, you define this, and you cannot change it after creation. When you add or modify the rules in a rule group, WAF enforces this limit. You can check the capacity for a set of rules using CheckCapacity.
WAF uses WCUs to calculate and control the operating resources that are used to run your rules, rule groups, and web ACLs. WAF calculates capacity differently for each rule type, to reflect the relative cost of each rule. Simple rules that cost little to run use fewer WCUs than more complex rules that use more processing power. Rule group capacity is fixed at creation, which helps users plan their web ACL WCU usage when they use a rule group. The WCU limit for web ACLs is 1,500.
" + "documentation": "The web ACL capacity units (WCUs) required for this rule group.
When you create your own rule group, you define this, and you cannot change it after creation. When you add or modify the rules in a rule group, WAF enforces this limit. You can check the capacity for a set of rules using CheckCapacity.
WAF uses WCUs to calculate and control the operating resources that are used to run your rules, rule groups, and web ACLs. WAF calculates capacity differently for each rule type, to reflect the relative cost of each rule. Simple rules that cost little to run use fewer WCUs than more complex rules that use more processing power. Rule group capacity is fixed at creation, which helps users plan their web ACL WCU usage when they use a rule group. For more information, see WAF web ACL capacity units (WCU) in the WAF Developer Guide.
" }, "ARN": { "shape": "ResourceArn", @@ -5383,7 +5425,7 @@ }, "CustomResponseBodies": { "shape": "CustomResponseBodies", - "documentation": "A map of custom response keys and content bodies. When you create a rule with a block action, you can send a custom response to the web request. You define these for the rule group, and then use them in the rules that you define in the rule group.
For information about customizing web requests and responses, see Customizing web requests and responses in WAF in the WAF Developer Guide.
For information about the limits on count and size for custom request and response settings, see WAF quotas in the WAF Developer Guide.
" + "documentation": "A map of custom response keys and content bodies. When you create a rule with a block action, you can send a custom response to the web request. You define these for the rule group, and then use them in the rules that you define in the rule group.
For information about customizing web requests and responses, see Customizing web requests and responses in WAF in the WAF Developer Guide.
For information about the limits on count and size for custom request and response settings, see WAF quotas in the WAF Developer Guide.
" }, "AvailableLabels": { "shape": "LabelSummaries", @@ -5623,7 +5665,16 @@ "documentation": "Text transformations eliminate some of the unusual formatting that attackers use in web requests in an effort to bypass detection. If you specify one or more transformations in a rule statement, WAF performs all transformations on the content of the request component identified by FieldToMatch
, starting from the lowest priority setting, before inspecting the content for a match.
A rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). For example, you can use a size constraint statement to look for query strings that are longer than 100 bytes.
If you configure WAF to inspect the request body, WAF inspects only the first 8192 bytes (8 KB). If the request body for your web requests never exceeds 8192 bytes, you could use a size constraint statement to block requests that have a request body greater than 8192 bytes.
If you choose URI for the value of Part of the request to filter on, the slash (/) in the URI counts as one character. For example, the URI /logo.jpg
is nine characters long.
A rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). For example, you can use a size constraint statement to look for query strings that are longer than 100 bytes.
If you configure WAF to inspect the request body, WAF inspects only the number of bytes of the body up to the limit for the web ACL. By default, for regional web ACLs, this limit is 8 KB (8,192 kilobytes) and for CloudFront web ACLs, this limit is 16 KB (16,384 kilobytes). For CloudFront web ACLs, you can increase the limit in the web ACL AssociationConfig
, for additional fees. If you know that the request body for your web requests should never exceed the inspection limit, you could use a size constraint statement to block requests that have a larger request body size.
If you choose URI for the value of Part of the request to filter on, the slash (/) in the URI counts as one character. For example, the URI /logo.jpg
is nine characters long.
A rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). For example, you can use a size constraint statement to look for query strings that are longer than 100 bytes.
If you configure WAF to inspect the request body, WAF inspects only the first 8192 bytes (8 KB). If the request body for your web requests never exceeds 8192 bytes, you could use a size constraint statement to block requests that have a request body greater than 8192 bytes.
If you choose URI for the value of Part of the request to filter on, the slash (/) in the URI counts as one character. For example, the URI /logo.jpg
is nine characters long.
A rule statement that compares a number of bytes against the size of a request component, using a comparison operator, such as greater than (>) or less than (<). For example, you can use a size constraint statement to look for query strings that are longer than 100 bytes.
If you configure WAF to inspect the request body, WAF inspects only the number of bytes of the body up to the limit for the web ACL. By default, for regional web ACLs, this limit is 8 KB (8,192 kilobytes) and for CloudFront web ACLs, this limit is 16 KB (16,384 kilobytes). For CloudFront web ACLs, you can increase the limit in the web ACL AssociationConfig
, for additional fees. If you know that the request body for your web requests should never exceed the inspection limit, you could use a size constraint statement to block requests that have a larger request body size.
If you choose URI for the value of Part of the request to filter on, the slash (/) in the URI counts as one character. For example, the URI /logo.jpg
is nine characters long.
Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service.
To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows:
CLI - Specify the Region when you use the CloudFront scope: --scope=CLOUDFRONT --region=us-east-1
.
API and SDKs - For all calls, use the Region endpoint us-east-1.
Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service.
To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows:
CLI - Specify the Region when you use the CloudFront scope: --scope=CLOUDFRONT --region=us-east-1
.
API and SDKs - For all calls, use the Region endpoint us-east-1.
Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service.
To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows:
CLI - Specify the Region when you use the CloudFront scope: --scope=CLOUDFRONT --region=us-east-1
.
API and SDKs - For all calls, use the Region endpoint us-east-1.
Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service.
To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows:
CLI - Specify the Region when you use the CloudFront scope: --scope=CLOUDFRONT --region=us-east-1
.
API and SDKs - For all calls, use the Region endpoint us-east-1.
Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service.
To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows:
CLI - Specify the Region when you use the CloudFront scope: --scope=CLOUDFRONT --region=us-east-1
.
API and SDKs - For all calls, use the Region endpoint us-east-1.
Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service.
To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows:
CLI - Specify the Region when you use the CloudFront scope: --scope=CLOUDFRONT --region=us-east-1
.
API and SDKs - For all calls, use the Region endpoint us-east-1.
Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service.
To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows:
CLI - Specify the Region when you use the CloudFront scope: --scope=CLOUDFRONT --region=us-east-1
.
API and SDKs - For all calls, use the Region endpoint us-east-1.
Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service.
To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows:
CLI - Specify the Region when you use the CloudFront scope: --scope=CLOUDFRONT --region=us-east-1
.
API and SDKs - For all calls, use the Region endpoint us-east-1.
A map of custom response keys and content bodies. When you create a rule with a block action, you can send a custom response to the web request. You define these for the rule group, and then use them in the rules that you define in the rule group.
For information about customizing web requests and responses, see Customizing web requests and responses in WAF in the WAF Developer Guide.
For information about the limits on count and size for custom request and response settings, see WAF quotas in the WAF Developer Guide.
" + "documentation": "A map of custom response keys and content bodies. When you create a rule with a block action, you can send a custom response to the web request. You define these for the rule group, and then use them in the rules that you define in the rule group.
For information about customizing web requests and responses, see Customizing web requests and responses in WAF in the WAF Developer Guide.
For information about the limits on count and size for custom request and response settings, see WAF quotas in the WAF Developer Guide.
" } } }, @@ -6150,7 +6201,7 @@ }, "Scope": { "shape": "Scope", - "documentation": "Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service.
To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows:
CLI - Specify the Region when you use the CloudFront scope: --scope=CLOUDFRONT --region=us-east-1
.
API and SDKs - For all calls, use the Region endpoint us-east-1.
Specifies whether this is for an Amazon CloudFront distribution or for a regional application. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service.
To work with CloudFront, you must also specify the Region US East (N. Virginia) as follows:
CLI - Specify the Region when you use the CloudFront scope: --scope=CLOUDFRONT --region=us-east-1
.
API and SDKs - For all calls, use the Region endpoint us-east-1.
A map of custom response keys and content bodies. When you create a rule with a block action, you can send a custom response to the web request. You define these for the web ACL, and then use them in the rules and default actions that you define in the web ACL.
For information about customizing web requests and responses, see Customizing web requests and responses in WAF in the WAF Developer Guide.
For information about the limits on count and size for custom request and response settings, see WAF quotas in the WAF Developer Guide.
" + "documentation": "A map of custom response keys and content bodies. When you create a rule with a block action, you can send a custom response to the web request. You define these for the web ACL, and then use them in the rules and default actions that you define in the web ACL.
For information about customizing web requests and responses, see Customizing web requests and responses in WAF in the WAF Developer Guide.
For information about the limits on count and size for custom request and response settings, see WAF quotas in the WAF Developer Guide.
" }, "CaptchaConfig": { "shape": "CaptchaConfig", @@ -6191,6 +6242,10 @@ "TokenDomains": { "shape": "TokenDomains", "documentation": "Specifies the domains that WAF should accept in a web request token. This enables the use of tokens across multiple protected websites. When WAF provides a token, it uses the domain of the Amazon Web Services resource that the web ACL is protecting. If you don't specify a list of token domains, WAF accepts tokens only for the domain of the protected resource. With a token domain list, WAF accepts the resource's host domain plus all domains in the token domain list, including their prefixed subdomains.
Example JSON: \"TokenDomains\": { \"mywebsite.com\", \"myotherwebsite.com\" }
Public suffixes aren't allowed. For example, you can't use usa.gov
or co.uk
as token domains.
Specifies custom configurations for the associations between the web ACL and protected resources.
Use this to customize the maximum size of the request body that your protected CloudFront distributions forward to WAF for inspection. The default is 16 KB (16,384 kilobytes).
You are charged additional fees when your protected resources forward body sizes that are larger than the default. For more information, see WAF Pricing.
A boolean indicating whether the associated resource sends metrics to Amazon CloudWatch. For the list of available metrics, see WAF Metrics.
" + "documentation": "A boolean indicating whether the associated resource sends metrics to Amazon CloudWatch. For the list of available metrics, see WAF Metrics in the WAF Developer Guide.
" }, "MetricName": { "shape": "MetricName", @@ -6319,7 +6374,7 @@ }, "Capacity": { "shape": "ConsumedCapacity", - "documentation": "The web ACL capacity units (WCUs) currently being used by this web ACL.
WAF uses WCUs to calculate and control the operating resources that are used to run your rules, rule groups, and web ACLs. WAF calculates capacity differently for each rule type, to reflect the relative cost of each rule. Simple rules that cost little to run use fewer WCUs than more complex rules that use more processing power. Rule group capacity is fixed at creation, which helps users plan their web ACL WCU usage when they use a rule group. The WCU limit for web ACLs is 1,500.
" + "documentation": "The web ACL capacity units (WCUs) currently being used by this web ACL.
WAF uses WCUs to calculate and control the operating resources that are used to run your rules, rule groups, and web ACLs. WAF calculates capacity differently for each rule type, to reflect the relative cost of each rule. Simple rules that cost little to run use fewer WCUs than more complex rules that use more processing power. Rule group capacity is fixed at creation, which helps users plan their web ACL WCU usage when they use a rule group. For more information, see WAF web ACL capacity units (WCU) in the WAF Developer Guide.
" }, "PreProcessFirewallManagerRuleGroups": { "shape": "FirewallManagerRuleGroups", @@ -6339,7 +6394,7 @@ }, "CustomResponseBodies": { "shape": "CustomResponseBodies", - "documentation": "A map of custom response keys and content bodies. When you create a rule with a block action, you can send a custom response to the web request. You define these for the web ACL, and then use them in the rules and default actions that you define in the web ACL.
For information about customizing web requests and responses, see Customizing web requests and responses in WAF in the WAF Developer Guide.
For information about the limits on count and size for custom request and response settings, see WAF quotas in the WAF Developer Guide.
" + "documentation": "A map of custom response keys and content bodies. When you create a rule with a block action, you can send a custom response to the web request. You define these for the web ACL, and then use them in the rules and default actions that you define in the web ACL.
For information about customizing web requests and responses, see Customizing web requests and responses in WAF in the WAF Developer Guide.
For information about the limits on count and size for custom request and response settings, see WAF quotas in the WAF Developer Guide.
" }, "CaptchaConfig": { "shape": "CaptchaConfig", @@ -6352,9 +6407,13 @@ "TokenDomains": { "shape": "TokenDomains", "documentation": "Specifies the domains that WAF should accept in a web request token. This enables the use of tokens across multiple protected websites. When WAF provides a token, it uses the domain of the Amazon Web Services resource that the web ACL is protecting. If you don't specify a list of token domains, WAF accepts tokens only for the domain of the protected resource. With a token domain list, WAF accepts the resource's host domain plus all domains in the token domain list, including their prefixed subdomains.
" + }, + "AssociationConfig": { + "shape": "AssociationConfig", + "documentation": "Specifies custom configurations for the associations between the web ACL and protected resources.
Use this to customize the maximum size of the request body that your protected CloudFront distributions forward to WAF for inspection. The default is 16 KB (16,384 kilobytes).
You are charged additional fees when your protected resources forward body sizes that are larger than the default. For more information, see WAF Pricing.
A web ACL defines a collection of rules to use to inspect and control web requests. Each rule has an action defined (allow, block, or count) for requests that match the statement of the rule. In the web ACL, you assign a default action to take (allow, block) for any request that does not match any of the rules. The rules in a web ACL can be a combination of the types Rule, RuleGroup, and managed rule group. You can associate a web ACL with one or more Amazon Web Services resources to protect. The resources can be an Amazon CloudFront distribution, an Amazon API Gateway REST API, an Application Load Balancer, an AppSync GraphQL API, Amazon Cognito user pool, or an App Runner service.
" + "documentation": "A web ACL defines a collection of rules to use to inspect and control web requests. Each rule has an action defined (allow, block, or count) for requests that match the statement of the rule. In the web ACL, you assign a default action to take (allow, block) for any request that does not match any of the rules. The rules in a web ACL can be a combination of the types Rule, RuleGroup, and managed rule group. You can associate a web ACL with one or more Amazon Web Services resources to protect. The resources can be an Amazon CloudFront distribution, an Amazon API Gateway REST API, an Application Load Balancer, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service.
" }, "WebACLSummaries": { "type": "list", @@ -6407,5 +6466,5 @@ "documentation": "A rule statement that inspects for cross-site scripting (XSS) attacks. In XSS attacks, the attacker uses vulnerabilities in a benign website as a vehicle to inject malicious client-site scripts into other legitimate web browsers.
" } }, - "documentation": "This is the latest version of the WAF API, released in November, 2019. The names of the entities that you use to access this API, like endpoints and namespaces, all have the versioning information added, like \"V2\" or \"v2\", to distinguish from the prior version. We recommend migrating your resources to this version, because it has a number of significant improvements.
If you used WAF prior to this release, you can't use this WAFV2 API to access any WAF resources that you created before. You can access your old rules, web ACLs, and other WAF resources only through the WAF Classic APIs. The WAF Classic APIs have retained the prior names, endpoints, and namespaces.
For information, including how to migrate your WAF resources to this version, see the WAF Developer Guide.
WAF is a web application firewall that lets you monitor the HTTP and HTTPS requests that are forwarded to an Amazon CloudFront distribution, Amazon API Gateway REST API, Application Load Balancer, AppSync GraphQL API, Amazon Cognito user pool, or App Runner service. WAF also lets you control access to your content, to protect the Amazon Web Services resource that WAF is monitoring. Based on conditions that you specify, such as the IP addresses that requests originate from or the values of query strings, the protected resource responds to requests with either the requested content, an HTTP 403 status code (Forbidden), or with a custom response.
This API guide is for developers who need detailed information about WAF API actions, data types, and errors. For detailed information about WAF features and guidance for configuring and using WAF, see the WAF Developer Guide.
You can make calls using the endpoints listed in WAF endpoints and quotas.
For regional applications, you can use any of the endpoints in the list. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, a Amazon Cognito user pool, or an App Runner service.
For Amazon CloudFront applications, you must use the API endpoint listed for US East (N. Virginia): us-east-1.
Alternatively, you can use one of the Amazon Web Services SDKs to access an API that's tailored to the programming language or platform that you're using. For more information, see Amazon Web Services SDKs.
We currently provide two versions of the WAF API: this API and the prior versions, the classic WAF APIs. This new API provides the same functionality as the older versions, with the following major improvements:
You use one API for both global and regional applications. Where you need to distinguish the scope, you specify a Scope
parameter and set it to CLOUDFRONT
or REGIONAL
.
You can define a web ACL or rule group with a single call, and update it with a single call. You define all rule specifications in JSON format, and pass them to your rule group or web ACL calls.
The limits WAF places on the use of rules more closely reflects the cost of running each type of rule. Rule groups include capacity settings, so you know the maximum cost of a rule group when you use it.
This is the latest version of the WAF API, released in November, 2019. The names of the entities that you use to access this API, like endpoints and namespaces, all have the versioning information added, like \"V2\" or \"v2\", to distinguish from the prior version. We recommend migrating your resources to this version, because it has a number of significant improvements.
If you used WAF prior to this release, you can't use this WAFV2 API to access any WAF resources that you created before. You can access your old rules, web ACLs, and other WAF resources only through the WAF Classic APIs. The WAF Classic APIs have retained the prior names, endpoints, and namespaces.
For information, including how to migrate your WAF resources to this version, see the WAF Developer Guide.
WAF is a web application firewall that lets you monitor the HTTP and HTTPS requests that are forwarded to an Amazon CloudFront distribution, Amazon API Gateway REST API, Application Load Balancer, AppSync GraphQL API, Amazon Cognito user pool, or App Runner service. WAF also lets you control access to your content, to protect the Amazon Web Services resource that WAF is monitoring. Based on conditions that you specify, such as the IP addresses that requests originate from or the values of query strings, the protected resource responds to requests with either the requested content, an HTTP 403 status code (Forbidden), or with a custom response.
This API guide is for developers who need detailed information about WAF API actions, data types, and errors. For detailed information about WAF features and guidance for configuring and using WAF, see the WAF Developer Guide.
You can make calls using the endpoints listed in WAF endpoints and quotas.
For regional applications, you can use any of the endpoints in the list. A regional application can be an Application Load Balancer (ALB), an Amazon API Gateway REST API, an AppSync GraphQL API, an Amazon Cognito user pool, or an App Runner service.
For Amazon CloudFront applications, you must use the API endpoint listed for US East (N. Virginia): us-east-1.
Alternatively, you can use one of the Amazon Web Services SDKs to access an API that's tailored to the programming language or platform that you're using. For more information, see Amazon Web Services SDKs.
We currently provide two versions of the WAF API: this API and the prior versions, the classic WAF APIs. This new API provides the same functionality as the older versions, with the following major improvements:
You use one API for both global and regional applications. Where you need to distinguish the scope, you specify a Scope
parameter and set it to CLOUDFRONT
or REGIONAL
.
You can define a web ACL or rule group with a single call, and update it with a single call. You define all rule specifications in JSON format, and pass them to your rule group or web ACL calls.
The limits WAF places on the use of rules more closely reflects the cost of running each type of rule. Rule groups include capacity settings, so you know the maximum cost of a rule group when you use it.
>1,l=23===i?Math.pow(2,-24)-Math.pow(2,-77):0,d=a?0:s-1,y=a?1:-1,b=t<0||0===t&&1/t<0?1:0;for(t=Math.abs(t),isNaN(t)||t===1/0?(n=isNaN(t)?1:0,o=m):(o=Math.floor(Math.log(t)/Math.LN2),t*(u=Math.pow(2,-o))<1&&(o--,u*=2),t+=o+c>=1?l/u:l*Math.pow(2,1-c),t*u>=2&&(o++,u/=2),o+c>=m?(n=0,o=m):o+c>=1?(n=(t*u-1)*Math.pow(2,i),o+=c):(n=t*Math.pow(2,c-1)*Math.pow(2,i),o=0));i>=8;e[r+d]=255&n,d+=y,n/=256,i-=8);for(o=o<0;e[r+d]=255&o,d+=y,o/=256,p-=8);e[r+d-y]|=128*b}},{}],438:[function(e,t,r){var a={}.toString;t.exports=Array.isArray||function(e){return"[object Array]"==a.call(e)}},{}],439:[function(e,t,r){!function(e){"use strict";function t(e){return null!==e&&"[object Array]"===Object.prototype.toString.call(e)}function r(e){return null!==e&&"[object Object]"===Object.prototype.toString.call(e)}function a(e,i){if(e===i)return!0;if(Object.prototype.toString.call(e)!==Object.prototype.toString.call(i))return!1;if(!0===t(e)){if(e.length!==i.length)return!1;for(var s=0;s =0?this.expression(e):"Lbracket"===t?(this._match("Lbracket"),this._parseMultiselectList()):"Lbrace"===t?(this._match("Lbrace"),this._parseMultiselectHash()):void 0},_parseProjectionRHS:function(e){var t;if(P[this._lookahead(0)]<10)t={type:"Identity"};else if("Lbracket"===this._lookahead(0))t=this.expression(e);else if("Filter"===this._lookahead(0))t=this.expression(e);else{if("Dot"!==this._lookahead(0)){var r=this._lookaheadToken(0),a=new Error("Sytanx error, unexpected token: "+r.value+"("+r.type+")");throw a.name="ParserError",a}this._match("Dot"),t=this._parseDotRHS(e)}return t},_parseMultiselectList:function(){for(var e=[];"Rbracket"!==this._lookahead(0);){var t=this.expression(0);if(e.push(t),"Comma"===this._lookahead(0)&&(this._match("Comma"),"Rbracket"===this._lookahead(0)))throw new Error("Unexpected token Rbracket")}return this._match("Rbracket"),{type:"MultiSelectList",children:e}},_parseMultiselectHash:function(){for(var e,t,r,a,i=[],s=["UnquotedIdentifier","QuotedIdentifier"];;){if(e=this._lookaheadToken(0),s.indexOf(e.type)<0)throw new Error("Expecting an identifier token, got: "+e.type);if(t=e.value,this._advance(),this._match("Colon"),r=this.expression(0),a={type:"KeyValuePair",name:t,value:r},i.push(a),"Comma"===this._lookahead(0))this._match("Comma");else if("Rbrace"===this._lookahead(0)){this._match("Rbrace");break}}return{type:"MultiSelectHash",children:i}}},c.prototype={search:function(e,t){return this.visit(e,t)},visit:function(e,o){var n,u,p,m,c,l,d,y,b;switch(e.type){case"Field":return null!==o&&r(o)?(l=o[e.name],void 0===l?null:l):null;case"Subexpression":for(p=this.visit(e.children[0],o),b=1;b G((f-r)/g)&&i("overflow"),r+=(p-t)*g,t=p,u=0;u =0?(c=b.substr(0,S),l=b.substr(S+1)):(c=b,l=""),d=decodeURIComponent(c),y=decodeURIComponent(l),a(o,d)?i(o[d])?o[d].push(y):o[d]=[o[d],y]:o[d]=y}return o};var i=Array.isArray||function(e){return"[object Array]"===Object.prototype.toString.call(e)}},{}],443:[function(e,t,r){"use strict";function a(e,t){if(e.map)return e.map(t);for(var r=[],a=0;a >1,l=23===i?Math.pow(2,-24)-Math.pow(2,-77):0,d=a?0:s-1,y=a?1:-1,b=t<0||0===t&&1/t<0?1:0;for(t=Math.abs(t),isNaN(t)||t===1/0?(n=isNaN(t)?1:0,o=m):(o=Math.floor(Math.log(t)/Math.LN2),t*(u=Math.pow(2,-o))<1&&(o--,u*=2),t+=o+c>=1?l/u:l*Math.pow(2,1-c),t*u>=2&&(o++,u/=2),o+c>=m?(n=0,o=m):o+c>=1?(n=(t*u-1)*Math.pow(2,i),o+=c):(n=t*Math.pow(2,c-1)*Math.pow(2,i),o=0));i>=8;e[r+d]=255&n,d+=y,n/=256,i-=8);for(o=o<0;e[r+d]=255&o,d+=y,o/=256,p-=8);e[r+d-y]|=128*b}},{}],438:[function(e,t,r){var a={}.toString;t.exports=Array.isArray||function(e){return"[object Array]"==a.call(e)}},{}],439:[function(e,t,r){!function(e){"use strict";function t(e){return null!==e&&"[object Array]"===Object.prototype.toString.call(e)}function r(e){return null!==e&&"[object Object]"===Object.prototype.toString.call(e)}function a(e,i){if(e===i)return!0;if(Object.prototype.toString.call(e)!==Object.prototype.toString.call(i))return!1;if(!0===t(e)){if(e.length!==i.length)return!1;for(var s=0;s =0?this.expression(e):"Lbracket"===t?(this._match("Lbracket"),this._parseMultiselectList()):"Lbrace"===t?(this._match("Lbrace"),this._parseMultiselectHash()):void 0},_parseProjectionRHS:function(e){var t;if(P[this._lookahead(0)]<10)t={type:"Identity"};else if("Lbracket"===this._lookahead(0))t=this.expression(e);else if("Filter"===this._lookahead(0))t=this.expression(e);else{if("Dot"!==this._lookahead(0)){var r=this._lookaheadToken(0),a=new Error("Sytanx error, unexpected token: "+r.value+"("+r.type+")");throw a.name="ParserError",a}this._match("Dot"),t=this._parseDotRHS(e)}return t},_parseMultiselectList:function(){for(var e=[];"Rbracket"!==this._lookahead(0);){var t=this.expression(0);if(e.push(t),"Comma"===this._lookahead(0)&&(this._match("Comma"),"Rbracket"===this._lookahead(0)))throw new Error("Unexpected token Rbracket")}return this._match("Rbracket"),{type:"MultiSelectList",children:e}},_parseMultiselectHash:function(){for(var e,t,r,a,i=[],s=["UnquotedIdentifier","QuotedIdentifier"];;){if(e=this._lookaheadToken(0),s.indexOf(e.type)<0)throw new Error("Expecting an identifier token, got: "+e.type)
+;if(t=e.value,this._advance(),this._match("Colon"),r=this.expression(0),a={type:"KeyValuePair",name:t,value:r},i.push(a),"Comma"===this._lookahead(0))this._match("Comma");else if("Rbrace"===this._lookahead(0)){this._match("Rbrace");break}}return{type:"MultiSelectHash",children:i}}},c.prototype={search:function(e,t){return this.visit(e,t)},visit:function(e,o){var n,u,p,m,c,l,d,y,b;switch(e.type){case"Field":return null!==o&&r(o)?(l=o[e.name],void 0===l?null:l):null;case"Subexpression":for(p=this.visit(e.children[0],o),b=1;b G((f-r)/g)&&i("overflow"),r+=(p-t)*g,t=p,u=0;u =0?(c=b.substr(0,S),l=b.substr(S+1)):(c=b,l=""),d=decodeURIComponent(c),y=decodeURIComponent(l),a(o,d)?i(o[d])?o[d].push(y):o[d]=[o[d],y]:o[d]=y}return o};var i=Array.isArray||function(e){return"[object Array]"===Object.prototype.toString.call(e)}},{}],443:[function(e,t,r){"use strict";function a(e,t){if(e.map)return e.map(t);for(var r=[],a=0;a=55296&&t<=56319&&i65535&&(e-=65536,t+=w(e>>>10&1023|55296),e=56320|1023&e),t+=w(e)}).join("")}function p(e){return e-48<10?e-22:e-65<26?e-65:e-97<26?e-97:T}function m(e,t){return e+22+75*(e<26)-((0!=t)<<5)}function c(e,t,r){var a=0;for(e=r?G(e/R):e>>1,e+=G(e/t);e>L*k>>1;a+=T)e=G(e/L);return G(a+(L+1)*e/(e+A))}function l(e){var t,r,a,s,o,n,m,l,d,y,b=[],S=e.length,g=0,h=v,N=D;for(r=e.lastIndexOf(P),r<0&&(r=0),a=0;a=S&&i("invalid-input"),l=p(e.charCodeAt(s++)),(l>=T||l>G((f-g)/n))&&i("overflow"),g+=l*n,d=m<=N?C:m>=N+k?k:m-N,!(l=t&&bf&&i("overflow"),b==t){for(l=r,d=T;y=d<=o?C:d>=o+k?k:d-o,!(l=0&&delete e.httpRequest.headers["Content-Length"]}function i(e){var t=new l,r=e.service.api.operations[e.operation].input;if(r.payload){var a={},i=r.members[r.payload];a=e.params[r.payload],"structure"===i.type?(e.httpRequest.body=t.build(a||{},i),s(e)):void 0!==a&&(e.httpRequest.body=a,("binary"===i.type||i.isStreaming)&&s(e,!0))}else e.httpRequest.body=t.build(e.params,r),s(e)}function s(e,t){if(!e.httpRequest.headers["Content-Type"]){var r=t?"binary/octet-stream":"application/json";e.httpRequest.headers["Content-Type"]=r}}function o(e){m.buildRequest(e),y.indexOf(e.httpRequest.method)<0&&i(e)}function n(e){c.extractError(e)}function u(e){m.extractData(e);var t,r=e.request,a=r.service.api.operations[r.operation],i=r.service.api.operations[r.operation].output||{};a.hasEventOutput;if(i.payload){var s=i.members[i.payload],o=e.httpResponse.body;if(s.isEventStream)t=new d,e.data[payload]=p.createEventStream(2===AWS.HttpClient.streamsApiVersion?e.httpResponse.stream:o,t,s);else if("structure"===s.type||"list"===s.type){var t=new d;e.data[i.payload]=t.parse(o,s)
+}else"binary"===s.type||s.isStreaming?e.data[i.payload]=o:e.data[i.payload]=s.toType(o)}else{var n=e.data;c.extractData(e),e.data=p.merge(n,e.data)}}var p=e("../util"),m=e("./rest"),c=e("./json"),l=e("../json/builder"),d=e("../json/parser"),y=["GET","HEAD","DELETE"];t.exports={buildRequest:o,extractError:n,extractData:u,unsetContentLength:a}},{"../json/builder":369,"../json/parser":370,"../util":423,"./json":381,"./rest":383}],385:[function(e,t,r){function a(e){var t=e.service.api.operations[e.operation].input,r=new n.XML.Builder,a=e.params,i=t.payload;if(i){var s=t.members[i];if(void 0===(a=a[i]))return;if("structure"===s.type){var o=s.name;e.httpRequest.body=r.toXML(a,s,o,!0)}else e.httpRequest.body=a}else e.httpRequest.body=r.toXML(a,t,t.name||t.shape||u.string.upperFirst(e.operation)+"Request")}function i(e){p.buildRequest(e),["GET","HEAD"].indexOf(e.httpRequest.method)<0&&a(e)}function s(e){p.extractError(e);var t;try{t=(new n.XML.Parser).parse(e.httpResponse.body.toString())}catch(r){t={Code:e.httpResponse.statusCode,Message:e.httpResponse.statusMessage}}t.Errors&&(t=t.Errors),t.Error&&(t=t.Error),t.Code?e.error=u.error(new Error,{code:t.Code,message:t.Message}):e.error=u.error(new Error,{code:e.httpResponse.statusCode,message:null})}function o(e){p.extractData(e);var t,r=e.request,a=e.httpResponse.body,i=r.service.api.operations[r.operation],s=i.output,o=(i.hasEventOutput,s.payload);if(o){var m=s.members[o];m.isEventStream?(t=new n.XML.Parser,e.data[o]=u.createEventStream(2===n.HttpClient.streamsApiVersion?e.httpResponse.stream:e.httpResponse.body,t,m)):"structure"===m.type?(t=new n.XML.Parser,e.data[o]=t.parse(a.toString(),m)):"binary"===m.type||m.isStreaming?e.data[o]=a:e.data[o]=m.toType(a)}else if(a.length>0){t=new n.XML.Parser;var c=t.parse(a.toString(),s);u.update(e.data,c)}}var n=e("../core"),u=e("../util"),p=e("./rest");t.exports={buildRequest:i,extractError:s,extractData:o}},{"../core":345,"../util":423,"./rest":383}],386:[function(e,t,r){function a(){}function i(e){return e.isQueryName||"ec2"!==e.api.protocol?e.name:e.name[0].toUpperCase()+e.name.substr(1)}function s(e,t,r,a){p.each(r.members,function(r,s){var o=t[r];if(null!==o&&void 0!==o){var n=i(s);n=e?e+"."+n:n,u(n,o,s,a)}})}function o(e,t,r,a){var i=1;p.each(t,function(t,s){var o=r.flattened?".":".entry.",n=o+i+++".",p=n+(r.key.name||"key"),m=n+(r.value.name||"value");u(e+p,t,r.key,a),u(e+m,s,r.value,a)})}function n(e,t,r,a){var s=r.member||{};if(0===t.length)return void a.call(this,e,null);p.arrayEach(t,function(t,o){var n="."+(o+1);if("ec2"===r.api.protocol)n+="";else if(r.flattened){if(s.name){var p=e.split(".");p.pop(),p.push(i(s)),e=p.join(".")}}else n="."+(s.name?s.name:"member")+n;u(e+n,t,s,a)})}function u(e,t,r,a){null!==t&&void 0!==t&&("structure"===r.type?s(e,t,r,a):"list"===r.type?n(e,t,r,a):"map"===r.type?o(e,t,r,a):a(e,r.toWireFormat(t).toString()))}var p=e("../util");a.prototype.serialize=function(e,t,r){s("",e,t,r)},t.exports=a},{"../util":423}],387:[function(e,t,r){var a=e("../core"),i=null,s={signatureVersion:"v4",signingName:"rds-db",operations:{}},o={region:"string",hostname:"string",port:"number",username:"string"};a.RDS.Signer=a.util.inherit({constructor:function(e){this.options=e||{}},convertUrlToAuthToken:function(e){if(0===e.indexOf("https://"))return e.substring("https://".length)},getAuthToken:function(e,t){"function"==typeof e&&void 0===t&&(t=e,e={});var r=this,o="function"==typeof t;e=a.util.merge(this.options,e);var n=this.validateAuthTokenOptions(e);if(!0!==n){if(o)return t(n,null);throw n}var u={region:e.region,endpoint:new a.Endpoint(e.hostname+":"+e.port),paramValidation:!1,signatureVersion:"v4"};e.credentials&&(u.credentials=e.credentials),i=new a.Service(u),i.api=s;var p=i.makeRequest();if(this.modifyRequestForAuthToken(p,e),!o){var m=p.presign(900);return this.convertUrlToAuthToken(m)}p.presign(900,function(e,a){a&&(a=r.convertUrlToAuthToken(a)),t(e,a)})},modifyRequestForAuthToken:function(e,t){e.on("build",e.buildAsGet),e.httpRequest.body=a.util.queryParamsToString({Action:"connect",DBUser:t.username})},validateAuthTokenOptions:function(e){var t="";e=e||{};for(var r in o)Object.prototype.hasOwnProperty.call(o,r)&&typeof e[r]!==o[r]&&(t+="option '"+r+"' should have been type '"+o[r]+"', was '"+typeof e[r]+"'.\n");return!t.length||a.util.error(new Error,{code:"InvalidParameter",message:t})}})},{"../core":345}],388:[function(e,t,r){t.exports={now:function(){return"undefined"!=typeof performance&&"function"==typeof performance.now?performance.now():Date.now()}}},{}],389:[function(e,t,r){function a(e){return"string"==typeof e&&(e.startsWith("fips-")||e.endsWith("-fips"))}function i(e){return"string"==typeof e&&["aws-global","aws-us-gov-global"].includes(e)}function s(e){return["fips-aws-global","aws-fips","aws-global"].includes(e)?"us-east-1":["fips-aws-us-gov-global","aws-us-gov-global"].includes(e)?"us-gov-west-1":e.replace(/fips-(dkr-|prod-)?|-fips/,"")}t.exports={isFipsRegion:a,isGlobalRegion:i,getRealRegion:s}},{}],390:[function(e,t,r){function a(e){if(!e)return null;var t=e.split("-");return t.length<3?null:t.slice(0,t.length-2).join("-")+"-*"}function i(e){var t=e.config.region,r=a(t),i=e.api.endpointPrefix;return[[t,i],[r,i],[t,"*"],[r,"*"],["*",i],["*","*"]].map(function(e){return e[0]&&e[1]?e.join("/"):null})}function s(e,t){u.each(t,function(t,r){"globalEndpoint"!==t&&(void 0!==e.config[t]&&null!==e.config[t]||(e.config[t]=r))})}function o(e){for(var t=i(e),r=e.config.useFipsEndpoint,a=e.config.useDualstackEndpoint,o=0;o=a())throw new RangeError("Attempt to allocate Buffer larger than maximum size: 0x"+a().toString(16)+" bytes");return 0|e}function b(e){return+e!=e&&(e=0),s.alloc(+e)}function S(e,t){if(s.isBuffer(e))return e.length;if("undefined"!=typeof ArrayBuffer&&"function"==typeof ArrayBuffer.isView&&(ArrayBuffer.isView(e)||e instanceof ArrayBuffer))return e.byteLength;"string"!=typeof e&&(e=""+e);var r=e.length;if(0===r)return 0;for(var a=!1;;)switch(t){case"ascii":case"latin1":case"binary":return r;case"utf8":case"utf-8":case void 0:return K(e).length;case"ucs2":case"ucs-2":case"utf16le":case"utf-16le":return 2*r;case"hex":return r>>>1;case"base64":return H(e).length;default:if(a)return K(e).length;t=(""+t).toLowerCase(),a=!0}}function g(e,t,r){var a=!1;if((void 0===t||t<0)&&(t=0),t>this.length)return"";if((void 0===r||r>this.length)&&(r=this.length),r<=0)return"";if(r>>>=0,t>>>=0,r<=t)return"";for(e||(e="utf8");;)switch(e){case"hex":return E(this,t,r);case"utf8":case"utf-8":return v(this,t,r);case"ascii":return x(this,t,r);case"latin1":case"binary":return q(this,t,r);case"base64":return D(this,t,r);case"ucs2":case"ucs-2":case"utf16le":case"utf-16le":return M(this,t,r);default:if(a)throw new TypeError("Unknown encoding: "+e);e=(e+"").toLowerCase(),a=!0}}function h(e,t,r){var a=e[t];e[t]=e[r],e[r]=a}function N(e,t,r,a,i){if(0===e.length)return-1;if("string"==typeof r?(a=r,r=0):r>2147483647?r=2147483647:r<-2147483648&&(r=-2147483648),r=+r,isNaN(r)&&(r=i?0:e.length-1),r<0&&(r=e.length+r),r>=e.length){if(i)return-1;r=e.length-1}else if(r<0){if(!i)return-1;r=0}if("string"==typeof t&&(t=s.from(t,a)),s.isBuffer(t))return 0===t.length?-1:I(e,t,r,a,i);if("number"==typeof t)return t&=255,s.TYPED_ARRAY_SUPPORT&&"function"==typeof Uint8Array.prototype.indexOf?i?Uint8Array.prototype.indexOf.call(e,t,r):Uint8Array.prototype.lastIndexOf.call(e,t,r):I(e,[t],r,a,i);throw new TypeError("val must be string, number or Buffer")}function I(e,t,r,a,i){function s(e,t){return 1===o?e[t]:e.readUInt16BE(t*o)}var o=1,n=e.length,u=t.length;if(void 0!==a&&("ucs2"===(a=String(a).toLowerCase())||"ucs-2"===a||"utf16le"===a||"utf-16le"===a)){if(e.length<2||t.length<2)return-1;o=2,n/=2,u/=2,r/=2}var p;if(i){var m=-1;for(p=r;p>>8*(a?i:1-i)}function B(e,t,r,a){t<0&&(t=4294967295+t+1);for(var i=0,s=Math.min(e.length-r,4);i>>8*(a?i:3-i)&255}function U(e,t,r,a,i,s){if(r+a>e.length)throw new RangeError("Index out of range");if(r<0)throw new RangeError("Index out of range")}function _(e,t,r,a,i){return i||U(e,t,r,4,3.4028234663852886e38,-3.4028234663852886e38),X.write(e,t,r,a,23,4),r+4}function F(e,t,r,a,i){return i||U(e,t,r,8,1.7976931348623157e308,-1.7976931348623157e308),X.write(e,t,r,a,52,8),r+8}function O(e){if(e=V(e).replace(ee,""),e.length<2)return"";for(;e.length%4!=0;)e+="=";return e}function V(e){return e.trim?e.trim():e.replace(/^\s+|\s+$/g,"")}function z(e){return e<16?"0"+e.toString(16):e.toString(16)}function K(e,t){t=t||1/0;for(var r,a=e.length,i=null,s=[],o=0;o55295&&r<57344){if(!i){if(r>56319){(t-=3)>-1&&s.push(239,191,189);continue}if(o+1===a){(t-=3)>-1&&s.push(239,191,189);continue}i=r;continue}if(r<56320){(t-=3)>-1&&s.push(239,191,189),i=r;continue}r=65536+(i-55296<<10|r-56320)}else i&&(t-=3)>-1&&s.push(239,191,189);if(i=null,r<128){if((t-=1)<0)break;s.push(r)}else if(r<2048){if((t-=2)<0)break;s.push(r>>6|192,63&r|128)}else if(r<65536){if((t-=3)<0)break;s.push(r>>12|224,r>>6&63|128,63&r|128)}else{if(!(r<1114112))throw new Error("Invalid code point");if((t-=4)<0)break;s.push(r>>18|240,r>>12&63|128,r>>6&63|128,63&r|128)}}return s}function j(e){for(var t=[],r=0;r=55296&&t<=56319&&i65535&&(e-=65536,t+=w(e>>>10&1023|55296),e=56320|1023&e),t+=w(e)}).join("")}function p(e){return e-48<10?e-22:e-65<26?e-65:e-97<26?e-97:T}function m(e,t){return e+22+75*(e<26)-((0!=t)<<5)}function c(e,t,r){var a=0;for(e=r?G(e/R):e>>1,e+=G(e/t);e>L*k>>1;a+=T)e=G(e/L);return G(a+(L+1)*e/(e+A))}function l(e){var t,r,a,s,o,n,m,l,d,y,b=[],S=e.length,g=0,h=v,N=D;for(r=e.lastIndexOf(P),r<0&&(r=0),a=0;a=S&&i("invalid-input"),l=p(e.charCodeAt(s++)),(l>=T||l>G((f-g)/n))&&i("overflow"),g+=l*n,d=m<=N?C:m>=N+k?k:m-N,!(l=t&&bf&&i("overflow"),b==t){for(l=r,d=T;y=d<=o?C:d>=o+k?k:d-o,!(l