Update to latest models

.changes/next-release/api-change-acmpca-6626.json

@@ -0,0 +1,5 @@
+{
+  "type": "api-change",
+  "category": "``acm-pca``",
+  "description": "AWS Certificate Manager (ACM) Private Certificate Authority (PCA) documentation updates"
+}

.changes/next-release/api-change-iot-79218.json

@@ -0,0 +1,5 @@
+{
+  "type": "api-change",
+  "category": "``iot``",
+  "description": "GA release the ability to enable/disable IoT Fleet Indexing for Device Defender and Named Shadow information, and search them through IoT Fleet Indexing APIs. This includes Named Shadow Selection as a part of the UpdateIndexingConfiguration API."
+}

botocore/data/acm-pca/2017-08-22/service-2.json

@@ -793,7 +793,7 @@
         },
         "KeyStorageSecurityStandard":{
           "shape":"KeyStorageSecurityStandard",
-          "documentation":"<p>Specifies a cryptographic key management compliance standard used for handling CA keys.</p> <p>Default: FIPS_140_2_LEVEL_3_OR_HIGHER</p> <p>Note: <code>FIPS_140_2_LEVEL_3_OR_HIGHER</code> is not supported in Region ap-northeast-3. When creating a CA in the ap-northeast-3, you must provide <code>FIPS_140_2_LEVEL_2_OR_HIGHER</code> as the argument for <code>KeyStorageSecurityStandard</code>. Failure to do this results in an <code>InvalidArgsException</code> with the message, \"A certificate authority cannot be created in this region with the specified security standard.\"</p>"
+          "documentation":"<p>Specifies a cryptographic key management compliance standard used for handling CA keys.</p> <p>Default: FIPS_140_2_LEVEL_3_OR_HIGHER</p> <p> <i>Note:</i> <code>FIPS_140_2_LEVEL_3_OR_HIGHER</code> is not supported in the following Regions:</p> <ul> <li> <p>ap-northeast-3</p> </li> <li> <p>ap-southeast-3</p> </li> </ul> <p>When creating a CA in these Regions, you must provide <code>FIPS_140_2_LEVEL_2_OR_HIGHER</code> as the argument for <code>KeyStorageSecurityStandard</code>. Failure to do this results in an <code>InvalidArgsException</code> with the message, \"A certificate authority cannot be created in this region with the specified security standard.\"</p>"
         },
         "Tags":{
           "shape":"TagList",
@@ -1113,7 +1113,7 @@
         },
         "CustomExtensions":{
           "shape":"CustomExtensionList",
-          "documentation":"<p/> <p>Contains a sequence of one or more X.509 extensions, each of which consists of an object identifier (OID), a base64-encoded value, and the critical flag. For more information, see the <a href=\"https://oidref.com/2.5.29\">Global OID reference database.</a> </p> <note> <p>The OID value of a <a href=\"https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_CustomExtension.html\">CustomExtension</a> must not match the OID of a predefined extension.</p> </note>"
+          "documentation":"<p/> <p>Contains a sequence of one or more X.509 extensions, each of which consists of an object identifier (OID), a base64-encoded value, and the critical flag. For more information, see the <a href=\"https://oidref.com/2.5.29\">Global OID reference database.</a> </p>"
         }
       },
       "documentation":"<p>Contains X.509 extension information for a certificate.</p>"

botocore/data/iot/2015-05-28/service-2.json

@@ -112,7 +112,7 @@
         {"shape":"InternalFailureException"},
         {"shape":"LimitExceededException"}
       ],
-      "documentation":"<p>Attaches the specified policy to the specified principal (certificate or other credential).</p> <p> <b>Note:</b> This action is deprecated. Please use <a>AttachPolicy</a> instead.</p> <p>Requires permission to access the <a href=\"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiot.html#awsiot-actions-as-permissions\">AttachPrincipalPolicy</a> action.</p>",
+      "documentation":"<p>Attaches the specified policy to the specified principal (certificate or other credential).</p> <p> <b>Note:</b> This action is deprecated and works as expected for backward compatibility, but we won't add enhancements. Use <a>AttachPolicy</a> instead.</p> <p>Requires permission to access the <a href=\"https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiot.html#awsiot-actions-as-permissions\">AttachPrincipalPolicy</a> action.</p>",
       "deprecated":true
     },
     "AttachSecurityProfile":{
@@ -11141,6 +11141,16 @@
         "REBUILDING"
       ]
     },
+    "IndexingFilter":{
+      "type":"structure",
+      "members":{
+        "namedShadowNames":{
+          "shape":"NamedShadowNamesFilter",
+          "documentation":"<p>The shadow names that you select to index. The default maximum number of shadow names for indexing is 10. To increase the limit, see <a href=\"https://docs.aws.amazon.com/general/latest/gr/iot_device_management.html#fleet-indexing-limits\">Amazon Web Services IoT Device Management Quotas</a> in the <i>Amazon Web Services General Reference</i>. </p>"
+        }
+      },
+      "documentation":"<p>Provides additional filters for specific data sources. Named shadow is the only data source that currently supports and requires a filter. To add named shadows to your fleet indexing configuration, set <code>namedShadowIndexingMode</code> to be <code>ON</code> and specify your shadow names in <code>filter</code>.</p>"
+    },
     "InlineDocument":{"type":"string"},
     "InputName":{
       "type":"string",
@@ -14624,6 +14634,10 @@
         "ON"
       ]
     },
+    "NamedShadowNamesFilter":{
+      "type":"list",
+      "member":{"shape":"ShadowName"}
+    },
     "NamespaceId":{
       "type":"string",
       "max":64,
@@ -16323,6 +16337,12 @@
         }
       }
     },
+    "ShadowName":{
+      "type":"string",
+      "max":64,
+      "min":1,
+      "pattern":"[a-zA-Z0-9:_-]+"
+    },
     "SigV4Authorization":{
       "type":"structure",
       "required":[
@@ -17383,6 +17403,10 @@
         "customFields":{
           "shape":"Fields",
           "documentation":"<p>Contains custom field names and their data type.</p>"
+        },
+        "filter":{
+          "shape":"IndexingFilter",
+          "documentation":"<p>Provides additional filters for specific data sources. Named shadow is the only data source that currently supports and requires a filter. To add named shadows to your fleet indexing configuration, set <code>namedShadowIndexingMode</code> to be <code>ON</code> and specify your shadow names in <code>filter</code>.</p>"
         }
       },
       "documentation":"<p>The thing indexing configuration. For more information, see <a href=\"https://docs.aws.amazon.com/iot/latest/developerguide/managing-index.html\">Managing Thing Indexing</a>.</p>"