Adds an application that is created from a resource group.
" }, @@ -426,11 +427,20 @@ } }, "shapes":{ + "AccessDeniedException":{ + "type":"structure", + "members":{ + "Message":{"shape":"ErrorMsg"} + }, + "documentation":"User does not have permissions to perform this action.
", + "exception":true + }, "AffectedResource":{"type":"string"}, "AmazonResourceName":{ "type":"string", "max":1011, - "min":1 + "min":1, + "pattern":"^arn:aws(-\\w+)*:[\\w\\d-]+:([\\w\\d-]*)?:[\\w\\d_-]*([:/].+)*$" }, "ApplicationComponent":{ "type":"structure", @@ -439,10 +449,18 @@ "shape":"ComponentName", "documentation":"The name of the component.
" }, + "ComponentRemarks":{ + "shape":"Remarks", + "documentation":"If logging is supported for the resource type, indicates whether the component has configured logs to be monitored.
" + }, "ResourceType":{ "shape":"ResourceType", "documentation":"The resource type. Supported resource types include EC2 instances, Auto Scaling group, Classic ELB, Application ELB, and SQS Queue.
" }, + "OsType":{ + "shape":"OsType", + "documentation":"The operating system of the component.
" + }, "Tier":{ "shape":"Tier", "documentation":"The stack tier of the application component.
" @@ -450,6 +468,10 @@ "Monitor":{ "shape":"Monitor", "documentation":"Indicates whether the application component is monitored.
" + }, + "DetectedWorkload":{ + "shape":"DetectedWorkload", + "documentation":"Workloads detected in the application component.
" } }, "documentation":"Describes a standalone resource or similarly grouped resources that the application is made up of.
" @@ -508,7 +530,8 @@ "enum":[ "EC2", "CODE_DEPLOY", - "HEALTH" + "HEALTH", + "RDS" ] }, "CodeDeployApplication":{"type":"string"}, @@ -519,9 +542,15 @@ "ComponentConfiguration":{ "type":"string", "max":10000, - "min":1 + "min":1, + "pattern":"[\\S\\s]+" + }, + "ComponentName":{ + "type":"string", + "max":1011, + "min":1, + "pattern":"(?:^[\\d\\w\\-_\\.+]*$)|(?:^arn:aws(-\\w+)*:[\\w\\d-]+:([\\w\\d-]*)?:[\\w\\d_-]*([:/].+)*$)" }, - "ComponentName":{"type":"string"}, "ConfigurationEvent":{ "type":"structure", "members":{ @@ -563,6 +592,7 @@ "type":"string", "enum":[ "CLOUDWATCH_ALARM", + "CLOUDWATCH_LOG", "CLOUDFORMATION", "SSM_ASSOCIATION" ] @@ -624,7 +654,7 @@ "documentation":"The name of the resource group.
" }, "ComponentName":{ - "shape":"ComponentName", + "shape":"CustomComponentName", "documentation":"The name of the component.
" }, "ResourceList":{ @@ -662,11 +692,11 @@ }, "Pattern":{ "shape":"LogPatternRegex", - "documentation":"The log pattern.
" + "documentation":"The log pattern. The pattern must be DFA compatible. Patterns that utilize forward lookahead or backreference constructions are not supported.
" }, "Rank":{ "shape":"LogPatternRank", - "documentation":"Rank of the log pattern.
" + "documentation":"Rank of the log pattern. Must be a value between 1 and 1,000,000. The patterns are sorted by rank, so we recommend that you set your highest priority patterns with the lowest rank. A pattern of rank 1 will be the first to get matched to a log line. A pattern of rank 1,000,000 will be last to get matched. When you configure custom log patterns from the console, a Low severity pattern translates to a 750,000 rank. A Medium severity pattern translates to a 500,000 rank. And a High severity pattern translates to a 250,000 rank. Rank values less than 1 or greater than 1,000,000 are reserved for AWS-provided patterns.
The name of the resource group.
" }, "ComponentName":{ - "shape":"ComponentName", + "shape":"CustomComponentName", "documentation":"The name of the component.
" } } @@ -950,6 +986,15 @@ } } }, + "DetectedWorkload":{ + "type":"map", + "key":{"shape":"Tier"}, + "value":{"shape":"WorkloadMetaData"} + }, + "EbsCause":{"type":"string"}, + "EbsEvent":{"type":"string"}, + "EbsRequestId":{"type":"string"}, + "EbsResult":{"type":"string"}, "Ec2State":{"type":"string"}, "EndTime":{"type":"timestamp"}, "ErrorMsg":{"type":"string"}, @@ -1232,19 +1277,19 @@ "members":{ "PatternSetName":{ "shape":"LogPatternSetName", - "documentation":"The name of the log pattern. A log pattern name can contains at many as 30 characters, and it cannot be empty. The characters can be Unicode letters, digits or one of the following symbols: period, dash, underscore.
" + "documentation":"The name of the log pattern. A log pattern name can contain as many as 30 characters, and it cannot be empty. The characters can be Unicode letters, digits, or one of the following symbols: period, dash, underscore.
" }, "PatternName":{ "shape":"LogPatternName", - "documentation":"The name of the log pattern. A log pattern name can contains at many as 50 characters, and it cannot be empty. The characters can be Unicode letters, digits or one of the following symbols: period, dash, underscore.
" + "documentation":"The name of the log pattern. A log pattern name can contain as many as 50 characters, and it cannot be empty. The characters can be Unicode letters, digits, or one of the following symbols: period, dash, underscore.
" }, "Pattern":{ "shape":"LogPatternRegex", - "documentation":"A regular expression that defines the log pattern. A log pattern can contains at many as 50 characters, and it cannot be empty.
" + "documentation":"A regular expression that defines the log pattern. A log pattern can contain as many as 50 characters, and it cannot be empty. The pattern must be DFA compatible. Patterns that utilize forward lookahead or backreference constructions are not supported.
" }, "Rank":{ "shape":"LogPatternRank", - "documentation":"Rank of the log pattern.
" + "documentation":"Rank of the log pattern. Must be a value between 1 and 1,000,000. The patterns are sorted by rank, so we recommend that you set your highest priority patterns with the lowest rank. A pattern of rank 1 will be the first to get matched to a log line. A pattern of rank 1,000,000 will be last to get matched. When you configure custom log patterns from the console, a Low severity pattern translates to a 750,000 rank. A Medium severity pattern translates to a 500,000 rank. And a High severity pattern translates to a 250,000 rank. Rank values less than 1 or greater than 1,000,000 are reserved for AWS-provided patterns.
An object that defines the log patterns that belongs to a LogPatternSet.
The state of the instance, such as STOPPING or TERMINATING.
The category of an RDS event.
" + }, + "RdsEventMessage":{ + "shape":"RdsEventMessage", + "documentation":"The message of an RDS event.
" + }, + "S3EventName":{ + "shape":"S3EventName", + "documentation":"The name of the S3 CloudWatch Event-based observation.
" + }, + "StatesExecutionArn":{ + "shape":"StatesExecutionArn", + "documentation":"The Amazon Resource Name (ARN) of the step function execution-based observation.
" + }, + "StatesArn":{ + "shape":"StatesArn", + "documentation":"The Amazon Resource Name (ARN) of the step function-based observation.
" + }, + "StatesStatus":{ + "shape":"StatesStatus", + "documentation":"The status of the step function-related observation.
" + }, + "StatesInput":{ + "shape":"StatesInput", + "documentation":"The input to the step function-based observation.
" + }, + "EbsEvent":{ + "shape":"EbsEvent", + "documentation":" The type of EBS CloudWatch event, such as createVolume, deleteVolume or attachVolume.
The result of an EBS CloudWatch event, such as failed or succeeded.
The cause of an EBS CloudWatch event.
" + }, + "EbsRequestId":{ + "shape":"EbsRequestId", + "documentation":"The request ID of an EBS CloudWatch event.
" + }, "XRayFaultPercent":{ "shape":"XRayFaultPercent", "documentation":"The X-Ray request fault percentage for this node.
" @@ -1441,9 +1532,22 @@ "OpsItemSNSTopicArn":{ "type":"string", "max":300, - "min":20 + "min":20, + "pattern":"^arn:aws(-\\w+)*:[\\w\\d-]+:([\\w\\d-]*)?:[\\w\\d_-]*([:/].+)*$" + }, + "OsType":{ + "type":"string", + "enum":[ + "WINDOWS", + "LINUX" + ] + }, + "PaginationToken":{ + "type":"string", + "max":1024, + "min":1, + "pattern":".+" }, - "PaginationToken":{"type":"string"}, "Problem":{ "type":"structure", "members":{ @@ -1500,6 +1604,8 @@ "type":"list", "member":{"shape":"Problem"} }, + "RdsEventCategories":{"type":"string"}, + "RdsEventMessage":{"type":"string"}, "RelatedObservations":{ "type":"structure", "members":{ @@ -1515,7 +1621,8 @@ "ResourceARN":{ "type":"string", "max":1011, - "min":1 + "min":1, + "pattern":"^arn:aws(-\\w+)*:[\\w\\d-]+:([\\w\\d-]*)?:[\\w\\d_-]*([:/].+)*$" }, "ResourceGroupName":{ "type":"string", @@ -1543,7 +1650,13 @@ "documentation":"The resource does not exist in the customer account.
", "exception":true }, - "ResourceType":{"type":"string"}, + "ResourceType":{ + "type":"string", + "max":50, + "min":1, + "pattern":"[0-9a-zA-Z:_]*" + }, + "S3EventName":{"type":"string"}, "SeverityLevel":{ "type":"string", "enum":[ @@ -1555,6 +1668,10 @@ "SourceARN":{"type":"string"}, "SourceType":{"type":"string"}, "StartTime":{"type":"timestamp"}, + "StatesArn":{"type":"string"}, + "StatesExecutionArn":{"type":"string"}, + "StatesInput":{"type":"string"}, + "StatesStatus":{"type":"string"}, "Status":{ "type":"string", "enum":[ @@ -1584,7 +1701,8 @@ "TagKey":{ "type":"string", "max":128, - "min":1 + "min":1, + "pattern":"^([\\p{L}\\p{Z}\\p{N}_.:/=+\\-@]*)$" }, "TagKeyList":{ "type":"list", @@ -1623,7 +1741,8 @@ "TagValue":{ "type":"string", "max":256, - "min":0 + "min":0, + "pattern":"^([\\p{L}\\p{Z}\\p{N}_.:/=+\\-@]*)$" }, "TagsAlreadyExistException":{ "type":"structure", @@ -1636,11 +1755,18 @@ "Tier":{ "type":"string", "enum":[ + "CUSTOM", "DEFAULT", "DOT_NET_CORE", "DOT_NET_WORKER", + "DOT_NET_WEB_TIER", "DOT_NET_WEB", - "SQL_SERVER" + "SQL_SERVER", + "SQL_SERVER_ALWAYSON_AVAILABILITY_GROUP", + "MYSQL", + "POSTGRESQL", + "JAVA_JMX", + "ORACLE" ], "max":50, "min":1 @@ -1762,11 +1888,11 @@ "documentation":"The name of the resource group.
" }, "ComponentName":{ - "shape":"ComponentName", + "shape":"CustomComponentName", "documentation":"The name of the component.
" }, "NewComponentName":{ - "shape":"NewComponentName", + "shape":"CustomComponentName", "documentation":"The new name of the component.
" }, "ResourceList":{ @@ -1802,11 +1928,11 @@ }, "Pattern":{ "shape":"LogPatternRegex", - "documentation":"The log pattern.
" + "documentation":"The log pattern. The pattern must be DFA compatible. Patterns that utilize forward lookahead or backreference constructions are not supported.
" }, "Rank":{ "shape":"LogPatternRank", - "documentation":"Rank of the log pattern.
" + "documentation":"Rank of the log pattern. Must be a value between 1 and 1,000,000. The patterns are sorted by rank, so we recommend that you set your highest priority patterns with the lowest rank. A pattern of rank 1 will be the first to get matched to a log line. A pattern of rank 1,000,000 will be last to get matched. When you configure custom log patterns from the console, a Low severity pattern translates to a 750,000 rank. A Medium severity pattern translates to a 500,000 rank. And a High severity pattern translates to a 250,000 rank. Rank values less than 1 or greater than 1,000,000 are reserved for AWS-provided patterns.
Amazon CloudWatch Application Insights for .NET and SQL Server is a service that helps you detect common problems with your .NET and SQL Server-based applications. It enables you to pinpoint the source of issues in your applications (built with technologies such as Microsoft IIS, .NET, and Microsoft SQL Server), by providing key insights into detected problems.
After you onboard your application, CloudWatch Application Insights for .NET and SQL Server identifies, recommends, and sets up metrics and logs. It continuously analyzes and correlates your metrics and logs for unusual behavior to surface actionable problems with your application. For example, if your application is slow and unresponsive and leading to HTTP 500 errors in your Application Load Balancer (ALB), Application Insights informs you that a memory pressure problem with your SQL Server database is occurring. It bases this analysis on impactful metrics and log errors.
" + "documentation":"Amazon CloudWatch Application Insights is a service that helps you detect common problems with your applications. It enables you to pinpoint the source of issues in your applications (built with technologies such as Microsoft IIS, .NET, and Microsoft SQL Server), by providing key insights into detected problems.
After you onboard your application, CloudWatch Application Insights identifies, recommends, and sets up metrics and logs. It continuously analyzes and correlates your metrics and logs for unusual behavior to surface actionable problems with your application. For example, if your application is slow and unresponsive and leading to HTTP 500 errors in your Application Load Balancer (ALB), Application Insights informs you that a memory pressure problem with your SQL Server database is occurring. It bases this analysis on impactful metrics and log errors.
" } diff --git a/services/appmesh/pom.xml b/services/appmesh/pom.xml index eb44204dc6c0..71f457215fcd 100644 --- a/services/appmesh/pom.xml +++ b/services/appmesh/pom.xml @@ -21,7 +21,7 @@Attaches one or more target groups to the specified Auto Scaling group.
To describe the target groups for an Auto Scaling group, call the DescribeLoadBalancerTargetGroups API. To detach the target group from the Auto Scaling group, call the DetachLoadBalancerTargetGroups API.
With Application Load Balancers and Network Load Balancers, instances are registered as targets with a target group. With Classic Load Balancers, instances are registered with the load balancer. For more information, see Attaching a load balancer to your Auto Scaling group in the Amazon EC2 Auto Scaling User Guide.
" + "documentation":"Attaches one or more target groups to the specified Auto Scaling group.
This operation is used with the following load balancer types:
Application Load Balancer - Operates at the application layer (layer 7) and supports HTTP and HTTPS.
Network Load Balancer - Operates at the transport layer (layer 4) and supports TCP, TLS, and UDP.
Gateway Load Balancer - Operates at the network layer (layer 3).
To describe the target groups for an Auto Scaling group, call the DescribeLoadBalancerTargetGroups API. To detach the target group from the Auto Scaling group, call the DetachLoadBalancerTargetGroups API.
For more information, see Elastic Load Balancing and Amazon EC2 Auto Scaling in the Amazon EC2 Auto Scaling User Guide.
" }, "AttachLoadBalancers":{ "name":"AttachLoadBalancers", @@ -56,7 +56,7 @@ {"shape":"ResourceContentionFault"}, {"shape":"ServiceLinkedRoleFailure"} ], - "documentation":"To attach an Application Load Balancer or a Network Load Balancer, use the AttachLoadBalancerTargetGroups API operation instead.
Attaches one or more Classic Load Balancers to the specified Auto Scaling group. Amazon EC2 Auto Scaling registers the running instances with these Classic Load Balancers.
To describe the load balancers for an Auto Scaling group, call the DescribeLoadBalancers API. To detach the load balancer from the Auto Scaling group, call the DetachLoadBalancers API.
For more information, see Attaching a load balancer to your Auto Scaling group in the Amazon EC2 Auto Scaling User Guide.
" + "documentation":"To attach an Application Load Balancer, Network Load Balancer, or Gateway Load Balancer, use the AttachLoadBalancerTargetGroups API operation instead.
Attaches one or more Classic Load Balancers to the specified Auto Scaling group. Amazon EC2 Auto Scaling registers the running instances with these Classic Load Balancers.
To describe the load balancers for an Auto Scaling group, call the DescribeLoadBalancers API. To detach the load balancer from the Auto Scaling group, call the DetachLoadBalancers API.
For more information, see Elastic Load Balancing and Amazon EC2 Auto Scaling in the Amazon EC2 Auto Scaling User Guide.
" }, "BatchDeleteScheduledAction":{ "name":"BatchDeleteScheduledAction", @@ -437,7 +437,7 @@ "errors":[ {"shape":"ResourceContentionFault"} ], - "documentation":"Describes the load balancers for the specified Auto Scaling group.
This operation describes only Classic Load Balancers. If you have Application Load Balancers or Network Load Balancers, use the DescribeLoadBalancerTargetGroups API instead.
" + "documentation":"Describes the load balancers for the specified Auto Scaling group.
This operation describes only Classic Load Balancers. If you have Application Load Balancers, Network Load Balancers, or Gateway Load Balancers, use the DescribeLoadBalancerTargetGroups API instead.
" }, "DescribeMetricCollectionTypes":{ "name":"DescribeMetricCollectionTypes", @@ -616,7 +616,7 @@ "errors":[ {"shape":"ResourceContentionFault"} ], - "documentation":"Detaches one or more Classic Load Balancers from the specified Auto Scaling group.
This operation detaches only Classic Load Balancers. If you have Application Load Balancers or Network Load Balancers, use the DetachLoadBalancerTargetGroups API instead.
When you detach a load balancer, it enters the Removing state while deregistering the instances in the group. When all instances are deregistered, then you can no longer describe the load balancer using the DescribeLoadBalancers API call. The instances remain running.
Detaches one or more Classic Load Balancers from the specified Auto Scaling group.
This operation detaches only Classic Load Balancers. If you have Application Load Balancers, Network Load Balancers, or Gateway Load Balancers, use the DetachLoadBalancerTargetGroups API instead.
When you detach a load balancer, it enters the Removing state while deregistering the instances in the group. When all instances are deregistered, then you can no longer describe the load balancer using the DescribeLoadBalancers API call. The instances remain running.
The Amazon Resource Names (ARN) of the target groups. You can specify up to 10 target groups.
" + "documentation":"The Amazon Resource Names (ARN) of the target groups. You can specify up to 10 target groups. To get the ARN of a target group, use the Elastic Load Balancing DescribeTargetGroups API operation.
" } } }, @@ -1519,7 +1519,7 @@ }, "MixedInstancesPolicy":{ "shape":"MixedInstancesPolicy", - "documentation":"An embedded object that specifies a mixed instances policy. The required parameters must be specified. If optional parameters are unspecified, their default values are used.
The policy includes parameters that not only define the distribution of On-Demand Instances and Spot Instances, the maximum price to pay for Spot Instances, and how the Auto Scaling group allocates instance types to fulfill On-Demand and Spot capacities, but also the parameters that specify the instance configuration information—the launch template and instance types. The policy can also include a weight for each instance type and different launch templates for individual instance types. For more information, see Auto Scaling groups with multiple instance types and purchase options in the Amazon EC2 Auto Scaling User Guide.
Conditional: You must specify either a launch template (LaunchTemplate or MixedInstancesPolicy) or a launch configuration (LaunchConfigurationName or InstanceId).
An embedded object that specifies a mixed instances policy. The required parameters must be specified. If optional parameters are unspecified, their default values are used.
The policy includes parameters that not only define the distribution of On-Demand Instances and Spot Instances, the maximum price to pay for Spot Instances, and how the Auto Scaling group allocates instance types to fulfill On-Demand and Spot capacities, but also the parameters that specify the instance configuration information—the launch template and instance types. The policy can also include a weight for each instance type and different launch templates for individual instance types. For more information, see Auto Scaling groups with multiple instance types and purchase options in the Amazon EC2 Auto Scaling User Guide.
" }, "InstanceId":{ "shape":"XmlStringMaxLen19", @@ -1547,7 +1547,7 @@ }, "LoadBalancerNames":{ "shape":"LoadBalancerNames", - "documentation":"A list of Classic Load Balancers associated with this Auto Scaling group. For Application Load Balancers and Network Load Balancers, specify TargetGroupARNs instead.
A list of Classic Load Balancers associated with this Auto Scaling group. For Application Load Balancers, Network Load Balancers, and Gateway Load Balancers, specify the TargetGroupARNs property instead.
The tenancy of the instance. An instance with dedicated tenancy runs on isolated, single-tenant hardware and can only be launched into a VPC.
To launch dedicated instances into a shared tenancy VPC (a VPC with the instance placement tenancy attribute set to default), you must set the value of this parameter to dedicated.
If you specify PlacementTenancy, you must specify at least one subnet for VPCZoneIdentifier when you create your group.
For more information, see Configuring instance tenancy with Amazon EC2 Auto Scaling in the Amazon EC2 Auto Scaling User Guide.
Valid Values: default | dedicated
The tenancy of the instance. An instance with dedicated tenancy runs on isolated, single-tenant hardware and can only be launched into a VPC.
To launch dedicated instances into a shared tenancy VPC (a VPC with the instance placement tenancy attribute set to default), you must set the value of this parameter to dedicated.
If you specify PlacementTenancy, you must specify at least one subnet for VPCZoneIdentifier when you create your group.
For more information, see Configuring instance tenancy with Amazon EC2 Auto Scaling in the Amazon EC2 Auto Scaling User Guide.
Valid Values: default | dedicated
Indicates how to allocate instances across Spot Instance pools. If the allocation strategy is lowest-price, the Auto Scaling group launches instances using the Spot pools with the lowest price, and evenly allocates your instances across the number of Spot pools that you specify. If the allocation strategy is capacity-optimized, the Auto Scaling group launches instances using Spot pools that are optimally chosen based on the available Spot capacity. Defaults to lowest-price if not specified.
Indicates how to allocate instances across Spot Instance pools. If the allocation strategy is capacity-optimized (recommended), the Auto Scaling group launches instances using Spot pools that are optimally chosen based on the available Spot capacity. If the allocation strategy is lowest-price, the Auto Scaling group launches instances using the Spot pools with the lowest price, and evenly allocates your instances across the number of Spot pools that you specify. Defaults to lowest-price if not specified.
The number of Spot Instance pools across which to allocate your Spot Instances. The Spot pools are determined from the different instance types in the overrides. Defaults to 2 if not specified. Valid only when the Spot allocation strategy is lowest-price.
Valid Range: Minimum value of 1. Maximum value of 20.
" + "documentation":"The number of Spot Instance pools across which to allocate your Spot Instances. The Spot pools are determined from the different instance types in the overrides. Valid only when the Spot allocation strategy is lowest-price. Value must be in the range of 1 to 20. Defaults to 2 if not specified.
The maximum price per unit hour that you are willing to pay for a Spot Instance. If you leave the value of this parameter blank (which is the default), the maximum Spot price is set at the On-Demand price. To remove a value that you previously set, include the parameter but leave the value blank.
" + "documentation":"The maximum price per unit hour that you are willing to pay for a Spot Instance. If you leave the value at its default (empty), Amazon EC2 Auto Scaling uses the On-Demand price as the maximum Spot price. To remove a value that you previously set, include the property but specify an empty string (\"\") for the value.
" } }, "documentation":"Describes an instances distribution for an Auto Scaling group with a MixedInstancesPolicy.
The instances distribution specifies the distribution of On-Demand Instances and Spot Instances, the maximum price to pay for Spot Instances, and how the Auto Scaling group allocates instance types to fulfill On-Demand and Spot capacities.
When you update SpotAllocationStrategy, SpotInstancePools, or SpotMaxPrice, this update action does not deploy any changes across the running Amazon EC2 instances in the group. Your existing Spot Instances continue to run as long as the maximum price for those instances is higher than the current Spot price. When scale out occurs, Amazon EC2 Auto Scaling launches instances based on the new settings. When scale in occurs, Amazon EC2 Auto Scaling terminates instances according to the group's termination policies.
The number of capacity units provided by the specified instance type in terms of virtual CPUs, memory, storage, throughput, or other relative performance characteristic. When a Spot or On-Demand Instance is provisioned, the capacity units count toward the desired capacity. Amazon EC2 Auto Scaling provisions instances until the desired capacity is totally fulfilled, even if this results in an overage. For example, if there are 2 units remaining to fulfill capacity, and Amazon EC2 Auto Scaling can only provision an instance with a WeightedCapacity of 5 units, the instance is provisioned, and the desired capacity is exceeded by 3 units. For more information, see Instance weighting for Amazon EC2 Auto Scaling in the Amazon EC2 Auto Scaling User Guide.
Valid Range: Minimum value of 1. Maximum value of 999.
" + "documentation":"The number of capacity units provided by the specified instance type in terms of virtual CPUs, memory, storage, throughput, or other relative performance characteristic. When a Spot or On-Demand Instance is provisioned, the capacity units count toward the desired capacity. Amazon EC2 Auto Scaling provisions instances until the desired capacity is totally fulfilled, even if this results in an overage. For example, if there are 2 units remaining to fulfill capacity, and Amazon EC2 Auto Scaling can only provision an instance with a WeightedCapacity of 5 units, the instance is provisioned, and the desired capacity is exceeded by 3 units. For more information, see Instance weighting for Amazon EC2 Auto Scaling in the Amazon EC2 Auto Scaling User Guide. Value must be in the range of 1 to 999.
The ID of the launch template. To get the template ID, use the Amazon EC2 DescribeLaunchTemplates API operation. New launch templates can be created using the Amazon EC2 CreateLaunchTemplate API. You must specify either a LaunchTemplateId or a LaunchTemplateName.
The ID of the launch template. To get the template ID, use the Amazon EC2 DescribeLaunchTemplates API operation. New launch templates can be created using the Amazon EC2 CreateLaunchTemplate API.
Conditional: You must specify either a LaunchTemplateId or a LaunchTemplateName.
The name of the launch template. To get the template name, use the Amazon EC2 DescribeLaunchTemplates API operation. New launch templates can be created using the Amazon EC2 CreateLaunchTemplate API. You must specify either a LaunchTemplateId or a LaunchTemplateName.
The name of the launch template. To get the template name, use the Amazon EC2 DescribeLaunchTemplates API operation. New launch templates can be created using the Amazon EC2 CreateLaunchTemplate API.
Conditional: You must specify either a LaunchTemplateId or a LaunchTemplateName.
Returns the endpoint of a repository for a specific package format. A repository has one endpoint for each package format:
npm
pypi
maven
Returns the endpoint of a repository for a specific package format. A repository has one endpoint for each package format:
npm
pypi
maven
nuget
The name of the external connection to add to the repository. The following values are supported:
public:npmjs - for the npm public repository.
public:pypi - for the Python Package Index.
public:maven-central - for Maven Central.
public:maven-googleandroid - for the Google Android repository.
public:maven-gradleplugins - for the Gradle plugins repository.
public:maven-commonsware - for the CommonsWare Android repository.
The name of the external connection to add to the repository. The following values are supported:
public:npmjs - for the npm public repository.
public:pypi - for the Python Package Index.
public:maven-central - for Maven Central.
public:maven-googleandroid - for the Google Android repository.
public:maven-gradleplugins - for the Gradle plugins repository.
public:maven-commonsware - for the CommonsWare Android repository.
public:nuget-org - for the NuGet Gallery.
The format of the package that is copied. The valid package types are:
npm: A Node Package Manager (npm) package.
pypi: A Python Package Index (PyPI) package.
maven: A Maven package that contains compiled code in a distributable format, such as a JAR file.
The format of the package that is copied. The valid package types are:
npm: A Node Package Manager (npm) package.
pypi: A Python Package Index (PyPI) package.
maven: A Maven package that contains compiled code in a distributable format, such as a JAR file.
nuget: A NuGet package.
The namespace of the package. The package component that specifies its namespace depends on its type. For example:
The namespace of a Maven package is its groupId.
The namespace of an npm package is its scope.
A Python package does not contain a corresponding component, so Python packages do not have a namespace.
The namespace of the package. The package component that specifies its namespace depends on its type. For example:
The namespace of a Maven package is its groupId.
The namespace of an npm package is its scope.
A Python package does not contain a corresponding component, so Python packages do not have a namespace.
A NuGet package does not contain a corresponding component, so NuGet packages do not have a namespace.
The format of the package versions to delete. The valid values are:
npm
pypi
maven
The format of the package versions to delete. The valid values are:
npm
pypi
maven
nuget
The namespace of the package. The package component that specifies its namespace depends on its type. For example:
The namespace of a Maven package is its groupId.
The namespace of an npm package is its scope.
A Python package does not contain a corresponding component, so Python packages do not have a namespace.
The namespace of the package. The package component that specifies its namespace depends on its type. For example:
The namespace of a Maven package is its groupId.
The namespace of an npm package is its scope.
A Python package does not contain a corresponding component, so Python packages do not have a namespace.
A NuGet package does not contain a corresponding component, so NuGet packages do not have a namespace.
A format that specifies the type of the requested package version. The valid values are:
npm
pypi
maven
A format that specifies the type of the requested package version. The valid values are:
npm
pypi
maven
nuget
The namespace of the package. The package component that specifies its namespace depends on its type. For example:
The namespace of a Maven package is its groupId.
The namespace of an npm package is its scope.
A Python package does not contain a corresponding component, so Python packages do not have a namespace.
The namespace of the package. The package component that specifies its namespace depends on its type. For example:
The namespace of a Maven package is its groupId.
The namespace of an npm package is its scope.
A Python package does not contain a corresponding component, so Python packages do not have a namespace.
A NuGet package does not contain a corresponding component, so NuGet packages do not have a namespace.
A format that specifies the type of package versions you want to dispose. The valid values are:
npm
pypi
maven
A format that specifies the type of package versions you want to dispose. The valid values are:
npm
pypi
maven
nuget
The namespace of the package. The package component that specifies its namespace depends on its type. For example:
The namespace of a Maven package is its groupId.
The namespace of an npm package is its scope.
A Python package does not contain a corresponding component, so Python packages do not have a namespace.
The namespace of the package. The package component that specifies its namespace depends on its type. For example:
The namespace of a Maven package is its groupId.
The namespace of an npm package is its scope.
A Python package does not contain a corresponding component, so Python packages do not have a namespace.
A NuGet package does not contain a corresponding component, so NuGet packages do not have a namespace.
A format that specifies the type of the package version with the requested asset file. The valid values are:
npm
pypi
maven
A format that specifies the type of the package version with the requested asset file. The valid values are:
npm
pypi
maven
nuget
The namespace of the package. The package component that specifies its namespace depends on its type. For example:
The namespace of a Maven package is its groupId.
The namespace of an npm package is its scope.
A Python package does not contain a corresponding component, so Python packages do not have a namespace.
The namespace of the package. The package component that specifies its namespace depends on its type. For example:
The namespace of a Maven package is its groupId.
The namespace of an npm package is its scope.
A Python package does not contain a corresponding component, so Python packages do not have a namespace.
A NuGet package does not contain a corresponding component, so NuGet packages do not have a namespace.
A format that specifies the type of the package version with the requested readme file. The valid values are:
npm
pypi
maven
A format that specifies the type of the package version with the requested readme file. The valid values are:
npm
pypi
maven
nuget
The namespace of the package. The package component that specifies its namespace depends on its type. For example:
The namespace of a Maven package is its groupId.
The namespace of an npm package is its scope.
A Python package does not contain a corresponding component, so Python packages do not have a namespace.
The namespace of the package. The package component that specifies its namespace depends on its type. For example:
The namespace of a Maven package is its groupId.
The namespace of an npm package is its scope.
A Python package does not contain a corresponding component, so Python packages do not have a namespace.
A NuGet package does not contain a corresponding component, so NuGet packages do not have a namespace.
The format of the package with the requested readme file. Valid format types are:
npm
pypi
maven
The format of the package with the requested readme file. Valid format types are:
npm
pypi
maven
nuget
The namespace of the package. The package component that specifies its namespace depends on its type. For example:
The namespace of a Maven package is its groupId.
The namespace of an npm package is its scope.
A Python package does not contain a corresponding component, so Python packages do not have a namespace.
The namespace of the package. The package component that specifies its namespace depends on its type. For example:
The namespace of a Maven package is its groupId.
The namespace of an npm package is its scope.
A Python package does not contain a corresponding component, so Python packages do not have a namespace.
A NuGet package does not contain a corresponding component, so NuGet packages do not have a namespace.
Returns which endpoint of a repository to return. A repository has one endpoint for each package format:
npm
pypi
maven
Returns which endpoint of a repository to return. A repository has one endpoint for each package format:
npm
pypi
maven
nuget
The format of the package that contains the returned package version assets. The valid package types are:
npm: A Node Package Manager (npm) package.
pypi: A Python Package Index (PyPI) package.
maven: A Maven package that contains compiled code in a distributable format, such as a JAR file.
The format of the package that contains the returned package version assets. The valid package types are:
npm: A Node Package Manager (npm) package.
pypi: A Python Package Index (PyPI) package.
maven: A Maven package that contains compiled code in a distributable format, such as a JAR file.
nuget: A NuGet package.
The namespace of the package. The package component that specifies its namespace depends on its type. For example:
The namespace of a Maven package is its groupId.
The namespace of an npm package is its scope.
A Python package does not contain a corresponding component, so Python packages do not have a namespace.
The namespace of the package. The package component that specifies its namespace depends on its type. For example:
The namespace of a Maven package is its groupId.
The namespace of an npm package is its scope.
A Python package does not contain a corresponding component, so Python packages do not have a namespace.
A NuGet package does not contain a corresponding component, so NuGet packages do not have a namespace.
The namespace of the package. The package component that specifies its namespace depends on its type. For example:
The namespace of a Maven package is its groupId.
The namespace of an npm package is its scope.
A Python package does not contain a corresponding component, so Python packages do not have a namespace.
The namespace of the package. The package component that specifies its namespace depends on its type. For example:
The namespace of a Maven package is its groupId.
The namespace of an npm package is its scope.
A Python package does not contain a corresponding component, so Python packages do not have a namespace.
A NuGet package does not contain a corresponding component, so NuGet packages do not have a namespace.
The format of the package with the requested dependencies. The valid package types are:
npm: A Node Package Manager (npm) package.
pypi: A Python Package Index (PyPI) package.
maven: A Maven package that contains compiled code in a distributable format, such as a JAR file.
The format of the package with the requested dependencies. The valid package types are:
npm: A Node Package Manager (npm) package.
pypi: A Python Package Index (PyPI) package.
maven: A Maven package that contains compiled code in a distributable format, such as a JAR file.
nuget: A NuGet package.
The namespace of the package. The package component that specifies its namespace depends on its type. For example:
The namespace of a Maven package is its groupId.
The namespace of an npm package is its scope.
A Python package does not contain a corresponding component, so Python packages do not have a namespace.
The namespace of the package. The package component that specifies its namespace depends on its type. For example:
The namespace of a Maven package is its groupId.
The namespace of an npm package is its scope.
A Python package does not contain a corresponding component, so Python packages do not have a namespace.
A NuGet package does not contain a corresponding component, so NuGet packages do not have a namespace.
A format that specifies the type of the package that contains the returned dependencies. The valid values are:
npm
pypi
maven
A format that specifies the type of the package that contains the returned dependencies. The valid values are:
npm
pypi
maven
nuget
The namespace of the package. The package component that specifies its namespace depends on its type. For example:
The namespace of a Maven package is its groupId.
The namespace of an npm package is its scope.
A Python package does not contain a corresponding component, so Python packages do not have a namespace.
The namespace of the package. The package component that specifies its namespace depends on its type. For example:
The namespace of a Maven package is its groupId.
The namespace of an npm package is its scope.
A Python package does not contain a corresponding component, so Python packages do not have a namespace.
A NuGet package does not contain a corresponding component, so NuGet packages do not have a namespace.
The format of the returned packages. The valid package types are:
npm: A Node Package Manager (npm) package.
pypi: A Python Package Index (PyPI) package.
maven: A Maven package that contains compiled code in a distributable format, such as a JAR file.
The format of the returned packages. The valid package types are:
npm: A Node Package Manager (npm) package.
pypi: A Python Package Index (PyPI) package.
maven: A Maven package that contains compiled code in a distributable format, such as a JAR file.
nuget: A NuGet package.
The namespace of the package. The package component that specifies its namespace depends on its type. For example:
The namespace of a Maven package is its groupId.
The namespace of an npm package is its scope.
A Python package does not contain a corresponding component, so Python packages do not have a namespace.
The namespace of the package. The package component that specifies its namespace depends on its type. For example:
The namespace of a Maven package is its groupId.
The namespace of an npm package is its scope.
A Python package does not contain a corresponding component, so Python packages do not have a namespace.
A NuGet package does not contain a corresponding component, so NuGet packages do not have a namespace.
A format of the package. Valid package format values are:
npm
pypi
maven
A format of the package. Valid package format values are:
npm
pypi
maven
nuget
The namespace of the package. The package component that specifies its namespace depends on its type. For example:
The namespace of a Maven package is its groupId.
The namespace of an npm package is its scope.
A Python package does not contain a corresponding component, so Python packages do not have a namespace.
The namespace of the package. The package component that specifies its namespace depends on its type. For example:
The namespace of a Maven package is its groupId.
The namespace of an npm package is its scope.
A Python package does not contain a corresponding component, so Python packages do not have a namespace.
A NuGet package does not contain a corresponding component, so NuGet packages do not have a namespace.
The format of the packages. The valid package types are:
npm: A Node Package Manager (npm) package.
pypi: A Python Package Index (PyPI) package.
maven: A Maven package that contains compiled code in a distributable format, such as a JAR file.
The format of the packages. The valid package types are:
npm: A Node Package Manager (npm) package.
pypi: A Python Package Index (PyPI) package.
maven: A Maven package that contains compiled code in a distributable format, such as a JAR file.
nuget: A NuGet package.
The namespace of the package. The package component that specifies its namespace depends on its type. For example:
The namespace of a Maven package is its groupId.
The namespace of an npm package is its scope.
A Python package does not contain a corresponding component, so Python packages do not have a namespace.
The namespace of the package. The package component that specifies its namespace depends on its type. For example:
The namespace of a Maven package is its groupId.
The namespace of an npm package is its scope.
A Python package does not contain a corresponding component, so Python packages do not have a namespace.
A NuGet package does not contain a corresponding component, so NuGet packages do not have a namespace.
A prefix used to filter returned repositories. Only repositories with names that start with repositoryPrefix are returned.
A prefix used to filter returned packages. Only packages with names that start with packagePrefix are returned.
The namespace of the package. The package component that specifies its namespace depends on its type. For example:
The namespace of a Maven package is its groupId.
The namespace of an npm package is its scope.
A Python package does not contain a corresponding component, so Python packages do not have a namespace.
The namespace of the package. The package component that specifies its namespace depends on its type. For example:
The namespace of a Maven package is its groupId.
The namespace of an npm package is its scope.
A Python package does not contain a corresponding component, so Python packages do not have a namespace.
A NuGet package does not contain a corresponding component, so NuGet packages do not have a namespace.
The format of the package. Valid values are:
npm
pypi
maven
The format of the package. Valid values are:
npm
pypi
maven
nuget
The namespace of the package. The package component that specifies its namespace depends on its type. For example:
The namespace of a Maven package is its groupId.
The namespace of an npm package is its scope.
A Python package does not contain a corresponding component, so Python packages do not have a namespace.
The namespace of the package. The package component that specifies its namespace depends on its type. For example:
The namespace of a Maven package is its groupId.
The namespace of an npm package is its scope.
A Python package does not contain a corresponding component, so Python packages do not have a namespace.
A NuGet package does not contain a corresponding component, so NuGet packages do not have a namespace.
The format of the package version. The valid package formats are:
npm: A Node Package Manager (npm) package.
pypi: A Python Package Index (PyPI) package.
maven: A Maven package that contains compiled code in a distributable format, such as a JAR file.
The format of the package version. The valid package formats are:
npm: A Node Package Manager (npm) package.
pypi: A Python Package Index (PyPI) package.
maven: A Maven package that contains compiled code in a distributable format, such as a JAR file.
nuget: A NuGet package.
The namespace of the package. The package component that specifies its namespace depends on its type. For example:
The namespace of a Maven package is its groupId.
The namespace of an npm package is its scope.
A Python package does not contain a corresponding component, so Python packages do not have a namespace.
The namespace of the package. The package component that specifies its namespace depends on its type. For example:
The namespace of a Maven package is its groupId.
The namespace of an npm package is its scope.
A Python package does not contain a corresponding component, so Python packages do not have a namespace.
A NuGet package does not contain a corresponding component, so NuGet packages do not have a namespace.
The package format associated with a repository's external connection. The valid package formats are:
npm: A Node Package Manager (npm) package.
pypi: A Python Package Index (PyPI) package.
maven: A Maven package that contains compiled code in a distributable format, such as a JAR file.
The package format associated with a repository's external connection. The valid package formats are:
npm: A Node Package Manager (npm) package.
pypi: A Python Package Index (PyPI) package.
maven: A Maven package that contains compiled code in a distributable format, such as a JAR file.
nuget: A NuGet package.
The tag's key.
" + "documentation":"The tag key.
" }, "value":{ "shape":"TagValue", - "documentation":"The tag's value.
" + "documentation":"The tag value.
" } }, "documentation":"A tag is a key-value pair that can be used to manage, search for, or filter resources in AWS CodeArtifact.
" @@ -2891,7 +2893,7 @@ "members":{ "resourceArn":{ "shape":"Arn", - "documentation":"The Amazon Resource Name (ARN) of the resource to which you want to add or update tags.
", + "documentation":"The Amazon Resource Name (ARN) of the resource that you want to add or update tags for.
", "location":"querystring", "locationName":"resourceArn" }, @@ -2937,7 +2939,7 @@ "members":{ "resourceArn":{ "shape":"Arn", - "documentation":"The Amazon Resource Name (ARN) of the resource to which you want to remove tags.
", + "documentation":"The Amazon Resource Name (ARN) of the resource that you want to remove tags from.
", "location":"querystring", "locationName":"resourceArn" }, @@ -2983,13 +2985,13 @@ }, "format":{ "shape":"PackageFormat", - "documentation":"A format that specifies the type of the package with the statuses to update. The valid values are:
npm
pypi
maven
A format that specifies the type of the package with the statuses to update. The valid values are:
npm
pypi
maven
nuget
The namespace of the package. The package component that specifies its namespace depends on its type. For example:
The namespace of a Maven package is its groupId.
The namespace of an npm package is its scope.
A Python package does not contain a corresponding component, so Python packages do not have a namespace.
The namespace of the package. The package component that specifies its namespace depends on its type. For example:
The namespace of a Maven package is its groupId.
The namespace of an npm package is its scope.
A Python package does not contain a corresponding component, so Python packages do not have a namespace.
A NuGet package does not contain a corresponding component, so NuGet packages do not have a namespace.
AWS CodeArtifact is a fully managed artifact repository compatible with language-native package managers and build tools such as npm, Apache Maven, and pip. You can use CodeArtifact to share packages with development teams and pull packages. Packages can be pulled from both public and CodeArtifact repositories. You can also create an upstream relationship between a CodeArtifact repository and another repository, which effectively merges their contents from the point of view of a package manager client.
AWS CodeArtifact Components
Use the information in this guide to help you work with the following CodeArtifact components:
Repository: A CodeArtifact repository contains a set of package versions, each of which maps to a set of assets, or files. Repositories are polyglot, so a single repository can contain packages of any supported type. Each repository exposes endpoints for fetching and publishing packages using tools like the npm CLI, the Maven CLI ( mvn ), and pip .
Domain: Repositories are aggregated into a higher-level entity known as a domain. All package assets and metadata are stored in the domain, but are consumed through repositories. A given package asset, such as a Maven JAR file, is stored once per domain, no matter how many repositories it's present in. All of the assets and metadata in a domain are encrypted with the same customer master key (CMK) stored in AWS Key Management Service (AWS KMS).
Each repository is a member of a single domain and can't be moved to a different domain.
The domain allows organizational policy to be applied across multiple repositories, such as which accounts can access repositories in the domain, and which public repositories can be used as sources of packages.
Although an organization can have multiple domains, we recommend a single production domain that contains all published artifacts so that teams can find and share packages across their organization.
Package: A package is a bundle of software and the metadata required to resolve dependencies and install the software. CodeArtifact supports npm, PyPI, and Maven package formats.
In CodeArtifact, a package consists of:
A name (for example, webpack is the name of a popular npm package)
An optional namespace (for example, @types in @types/node)
A set of versions (for example, 1.0.0, 1.0.1, 1.0.2, etc.)
Package-level metadata (for example, npm tags)
Package version: A version of a package, such as @types/node 12.6.9. The version number format and semantics vary for different package formats. For example, npm package versions must conform to the Semantic Versioning specification. In CodeArtifact, a package version consists of the version identifier, metadata at the package version level, and a set of assets.
Upstream repository: One repository is upstream of another when the package versions in it can be accessed from the repository endpoint of the downstream repository, effectively merging the contents of the two repositories from the point of view of a client. CodeArtifact allows creating an upstream relationship between two repositories.
Asset: An individual file stored in CodeArtifact associated with a package version, such as an npm .tgz file or Maven POM and JAR files.
CodeArtifact supports these operations:
AssociateExternalConnection: Adds an existing external connection to a repository.
CopyPackageVersions: Copies package versions from one repository to another repository in the same domain.
CreateDomain: Creates a domain
CreateRepository: Creates a CodeArtifact repository in a domain.
DeleteDomain: Deletes a domain. You cannot delete a domain that contains repositories.
DeleteDomainPermissionsPolicy: Deletes the resource policy that is set on a domain.
DeletePackageVersions: Deletes versions of a package. After a package has been deleted, it can be republished, but its assets and metadata cannot be restored because they have been permanently removed from storage.
DeleteRepository: Deletes a repository.
DeleteRepositoryPermissionsPolicy: Deletes the resource policy that is set on a repository.
DescribeDomain: Returns a DomainDescription object that contains information about the requested domain.
DescribePackageVersion: Returns a PackageVersionDescription object that contains details about a package version.
DescribeRepository: Returns a RepositoryDescription object that contains detailed information about the requested repository.
DisposePackageVersions: Disposes versions of a package. A package version with the status Disposed cannot be restored because they have been permanently removed from storage.
DisassociateExternalConnection: Removes an existing external connection from a repository.
GetAuthorizationToken: Generates a temporary authorization token for accessing repositories in the domain. The token expires the authorization period has passed. The default authorization period is 12 hours and can be customized to any length with a maximum of 12 hours.
GetDomainPermissionsPolicy: Returns the policy of a resource that is attached to the specified domain.
GetPackageVersionAsset: Returns the contents of an asset that is in a package version.
GetPackageVersionReadme: Gets the readme file or descriptive text for a package version.
GetRepositoryEndpoint: Returns the endpoint of a repository for a specific package format. A repository has one endpoint for each package format:
npm
pypi
maven
GetRepositoryPermissionsPolicy: Returns the resource policy that is set on a repository.
ListDomains: Returns a list of DomainSummary objects. Each returned DomainSummary object contains information about a domain.
ListPackages: Lists the packages in a repository.
ListPackageVersionAssets: Lists the assets for a given package version.
ListPackageVersionDependencies: Returns a list of the direct dependencies for a package version.
ListPackageVersions: Returns a list of package versions for a specified package in a repository.
ListRepositories: Returns a list of repositories owned by the AWS account that called this method.
ListRepositoriesInDomain: Returns a list of the repositories in a domain.
PutDomainPermissionsPolicy: Attaches a resource policy to a domain.
PutRepositoryPermissionsPolicy: Sets the resource policy on a repository that specifies permissions to access it.
UpdatePackageVersionsStatus: Updates the status of one or more versions of a package.
UpdateRepository: Updates the properties of a repository.
AWS CodeArtifact is a fully managed artifact repository compatible with language-native package managers and build tools such as npm, Apache Maven, NuGet, and pip. You can use CodeArtifact to share packages with development teams and pull packages. Packages can be pulled from both public and CodeArtifact repositories. You can also create an upstream relationship between a CodeArtifact repository and another repository, which effectively merges their contents from the point of view of a package manager client.
AWS CodeArtifact Components
Use the information in this guide to help you work with the following CodeArtifact components:
Repository: A CodeArtifact repository contains a set of package versions, each of which maps to a set of assets, or files. Repositories are polyglot, so a single repository can contain packages of any supported type. Each repository exposes endpoints for fetching and publishing packages using tools like the npm CLI, the NuGet CLI, the Maven CLI ( mvn ), and pip .
Domain: Repositories are aggregated into a higher-level entity known as a domain. All package assets and metadata are stored in the domain, but are consumed through repositories. A given package asset, such as a Maven JAR file, is stored once per domain, no matter how many repositories it's present in. All of the assets and metadata in a domain are encrypted with the same customer master key (CMK) stored in AWS Key Management Service (AWS KMS).
Each repository is a member of a single domain and can't be moved to a different domain.
The domain allows organizational policy to be applied across multiple repositories, such as which accounts can access repositories in the domain, and which public repositories can be used as sources of packages.
Although an organization can have multiple domains, we recommend a single production domain that contains all published artifacts so that teams can find and share packages across their organization.
Package: A package is a bundle of software and the metadata required to resolve dependencies and install the software. CodeArtifact supports npm, PyPI, Maven, and NuGet package formats.
In CodeArtifact, a package consists of:
A name (for example, webpack is the name of a popular npm package)
An optional namespace (for example, @types in @types/node)
A set of versions (for example, 1.0.0, 1.0.1, 1.0.2, etc.)
Package-level metadata (for example, npm tags)
Package version: A version of a package, such as @types/node 12.6.9. The version number format and semantics vary for different package formats. For example, npm package versions must conform to the Semantic Versioning specification. In CodeArtifact, a package version consists of the version identifier, metadata at the package version level, and a set of assets.
Upstream repository: One repository is upstream of another when the package versions in it can be accessed from the repository endpoint of the downstream repository, effectively merging the contents of the two repositories from the point of view of a client. CodeArtifact allows creating an upstream relationship between two repositories.
Asset: An individual file stored in CodeArtifact associated with a package version, such as an npm .tgz file or Maven POM and JAR files.
CodeArtifact supports these operations:
AssociateExternalConnection: Adds an existing external connection to a repository.
CopyPackageVersions: Copies package versions from one repository to another repository in the same domain.
CreateDomain: Creates a domain
CreateRepository: Creates a CodeArtifact repository in a domain.
DeleteDomain: Deletes a domain. You cannot delete a domain that contains repositories.
DeleteDomainPermissionsPolicy: Deletes the resource policy that is set on a domain.
DeletePackageVersions: Deletes versions of a package. After a package has been deleted, it can be republished, but its assets and metadata cannot be restored because they have been permanently removed from storage.
DeleteRepository: Deletes a repository.
DeleteRepositoryPermissionsPolicy: Deletes the resource policy that is set on a repository.
DescribeDomain: Returns a DomainDescription object that contains information about the requested domain.
DescribePackageVersion: Returns a PackageVersionDescription object that contains details about a package version.
DescribeRepository: Returns a RepositoryDescription object that contains detailed information about the requested repository.
DisposePackageVersions: Disposes versions of a package. A package version with the status Disposed cannot be restored because they have been permanently removed from storage.
DisassociateExternalConnection: Removes an existing external connection from a repository.
GetAuthorizationToken: Generates a temporary authorization token for accessing repositories in the domain. The token expires the authorization period has passed. The default authorization period is 12 hours and can be customized to any length with a maximum of 12 hours.
GetDomainPermissionsPolicy: Returns the policy of a resource that is attached to the specified domain.
GetPackageVersionAsset: Returns the contents of an asset that is in a package version.
GetPackageVersionReadme: Gets the readme file or descriptive text for a package version.
GetRepositoryEndpoint: Returns the endpoint of a repository for a specific package format. A repository has one endpoint for each package format:
npm
pypi
maven
nuget
GetRepositoryPermissionsPolicy: Returns the resource policy that is set on a repository.
ListDomains: Returns a list of DomainSummary objects. Each returned DomainSummary object contains information about a domain.
ListPackages: Lists the packages in a repository.
ListPackageVersionAssets: Lists the assets for a given package version.
ListPackageVersionDependencies: Returns a list of the direct dependencies for a package version.
ListPackageVersions: Returns a list of package versions for a specified package in a repository.
ListRepositories: Returns a list of repositories owned by the AWS account that called this method.
ListRepositoriesInDomain: Returns a list of the repositories in a domain.
ListTagsForResource: Returns a list of the tags associated with a resource.
PutDomainPermissionsPolicy: Attaches a resource policy to a domain.
PutRepositoryPermissionsPolicy: Sets the resource policy on a repository that specifies permissions to access it.
TagResource: Adds or updates tags for a resource.
UntagResource: Removes a tag from a resource.
UpdatePackageVersionsStatus: Updates the status of one or more versions of a package.
UpdateRepository: Updates the properties of a repository.
Returns the host ARN and details such as status, provider type, endpoint, and, if applicable, the VPC configuration.
" }, @@ -154,6 +155,22 @@ {"shape":"ResourceNotFoundException"} ], "documentation":"Removes tags from an AWS resource.
" + }, + "UpdateHost":{ + "name":"UpdateHost", + "http":{ + "method":"POST", + "requestUri":"/" + }, + "input":{"shape":"UpdateHostInput"}, + "output":{"shape":"UpdateHostOutput"}, + "errors":[ + {"shape":"ConflictException"}, + {"shape":"ResourceNotFoundException"}, + {"shape":"ResourceUnavailableException"}, + {"shape":"UnsupportedOperationException"} + ], + "documentation":"Updates a specified host with the provided configurations.
" } }, "shapes":{ @@ -166,7 +183,16 @@ "AmazonResourceName":{ "type":"string", "max":1011, - "min":1 + "min":1, + "pattern":"arn:aws(-[\\w]+)*:.+:.+:[0-9]{12}:.+" + }, + "ConflictException":{ + "type":"structure", + "members":{ + "Message":{"shape":"ErrorMessage"} + }, + "documentation":"Two conflicting operations have been made on the same resource.
", + "exception":true }, "Connection":{ "type":"structure", @@ -181,7 +207,7 @@ }, "ProviderType":{ "shape":"ProviderType", - "documentation":"The name of the external provider where your third-party code repository is configured. The valid provider type is Bitbucket.
" + "documentation":"The name of the external provider where your third-party code repository is configured.
" }, "OwnerAccountId":{ "shape":"AccountId", @@ -211,7 +237,8 @@ "ConnectionName":{ "type":"string", "max":32, - "min":1 + "min":1, + "pattern":"[\\s\\S]*" }, "ConnectionStatus":{ "type":"string", @@ -227,7 +254,7 @@ "members":{ "ProviderType":{ "shape":"ProviderType", - "documentation":"The name of the external provider where your third-party code repository is configured. The valid provider type is Bitbucket.
" + "documentation":"The name of the external provider where your third-party code repository is configured.
" }, "ConnectionName":{ "shape":"ConnectionName", @@ -426,8 +453,9 @@ }, "HostName":{ "type":"string", - "max":32, - "min":1 + "max":64, + "min":1, + "pattern":".*" }, "HostStatus":{"type":"string"}, "HostStatusMessage":{"type":"string"}, @@ -526,7 +554,8 @@ "NextToken":{ "type":"string", "max":1024, - "min":1 + "min":1, + "pattern":".*" }, "ProviderType":{ "type":"string", @@ -554,6 +583,8 @@ }, "SecurityGroupId":{ "type":"string", + "max":20, + "min":11, "pattern":"sg-\\w{8}(\\w{9})?" }, "SecurityGroupIds":{ @@ -564,6 +595,8 @@ }, "SubnetId":{ "type":"string", + "max":24, + "min":15, "pattern":"subnet-\\w{8}(\\w{9})?" }, "SubnetIds":{ @@ -593,7 +626,8 @@ "TagKey":{ "type":"string", "max":128, - "min":1 + "min":1, + "pattern":".*" }, "TagKeyList":{ "type":"list", @@ -632,12 +666,22 @@ "TagValue":{ "type":"string", "max":256, - "min":0 + "min":0, + "pattern":".*" }, "TlsCertificate":{ "type":"string", "max":16384, - "min":1 + "min":1, + "pattern":"[\\s\\S]*" + }, + "UnsupportedOperationException":{ + "type":"structure", + "members":{ + "Message":{"shape":"ErrorMessage"} + }, + "documentation":"The operation is not supported. Check the connection status and try again.
", + "exception":true }, "UntagResourceInput":{ "type":"structure", @@ -661,10 +705,34 @@ "members":{ } }, + "UpdateHostInput":{ + "type":"structure", + "required":["HostArn"], + "members":{ + "HostArn":{ + "shape":"HostArn", + "documentation":"The Amazon Resource Name (ARN) of the host to be updated.
" + }, + "ProviderEndpoint":{ + "shape":"Url", + "documentation":"The URL or endpoint of the host to be updated.
" + }, + "VpcConfiguration":{ + "shape":"VpcConfiguration", + "documentation":"The VPC configuration of the host to be updated. A VPC must be configured and the infrastructure to be represented by the host must already be connected to the VPC.
" + } + } + }, + "UpdateHostOutput":{ + "type":"structure", + "members":{ + } + }, "Url":{ "type":"string", "max":512, - "min":1 + "min":1, + "pattern":".*" }, "VpcConfiguration":{ "type":"structure", @@ -695,8 +763,10 @@ }, "VpcId":{ "type":"string", + "max":21, + "min":12, "pattern":"vpc-\\w{8}(\\w{9})?" } }, - "documentation":"The CodeStar Connections feature is in preview release and is subject to change.
This AWS CodeStar Connections API Reference provides descriptions and usage examples of the operations and data types for the AWS CodeStar Connections API. You can use the connections API to work with connections and installations.
Connections are configurations that you use to connect AWS resources to external code repositories. Each connection is a resource that can be given to services such as CodePipeline to connect to a third-party repository such as Bitbucket. For example, you can add the connection in CodePipeline so that it triggers your pipeline when a code change is made to your third-party code repository. Each connection is named and associated with a unique ARN that is used to reference the connection.
When you create a connection, the console initiates a third-party connection handshake. Installations are the apps that are used to conduct this handshake. For example, the installation for the Bitbucket provider type is the Bitbucket Cloud app. When you create a connection, you can choose an existing installation or create one.
When you want to create a connection to an installed provider type such as GitHub Enterprise Server, you create a host for your connections.
You can work with connections by calling:
CreateConnection, which creates a uniquely named connection that can be referenced by services such as CodePipeline.
DeleteConnection, which deletes the specified connection.
GetConnection, which returns information about the connection, including the connection status.
ListConnections, which lists the connections associated with your account.
You can work with hosts by calling:
CreateHost, which creates a host that represents the infrastructure where your provider is installed.
DeleteHost, which deletes the specified host.
GetHost, which returns information about the host, including the setup status.
ListHosts, which lists the hosts associated with your account.
You can work with tags in AWS CodeStar Connections by calling the following:
ListTagsForResource, which gets information about AWS tags for a specified Amazon Resource Name (ARN) in AWS CodeStar Connections.
TagResource, which adds or updates tags for a resource in AWS CodeStar Connections.
UntagResource, which removes tags for a resource in AWS CodeStar Connections.
For information about how to use AWS CodeStar Connections, see the Developer Tools User Guide.
" + "documentation":"This AWS CodeStar Connections API Reference provides descriptions and usage examples of the operations and data types for the AWS CodeStar Connections API. You can use the connections API to work with connections and installations.
Connections are configurations that you use to connect AWS resources to external code repositories. Each connection is a resource that can be given to services such as CodePipeline to connect to a third-party repository such as Bitbucket. For example, you can add the connection in CodePipeline so that it triggers your pipeline when a code change is made to your third-party code repository. Each connection is named and associated with a unique ARN that is used to reference the connection.
When you create a connection, the console initiates a third-party connection handshake. Installations are the apps that are used to conduct this handshake. For example, the installation for the Bitbucket provider type is the Bitbucket app. When you create a connection, you can choose an existing installation or create one.
When you want to create a connection to an installed provider type such as GitHub Enterprise Server, you create a host for your connections.
You can work with connections by calling:
CreateConnection, which creates a uniquely named connection that can be referenced by services such as CodePipeline.
DeleteConnection, which deletes the specified connection.
GetConnection, which returns information about the connection, including the connection status.
ListConnections, which lists the connections associated with your account.
You can work with hosts by calling:
CreateHost, which creates a host that represents the infrastructure where your provider is installed.
DeleteHost, which deletes the specified host.
GetHost, which returns information about the host, including the setup status.
ListHosts, which lists the hosts associated with your account.
You can work with tags in AWS CodeStar Connections by calling the following:
ListTagsForResource, which gets information about AWS tags for a specified Amazon Resource Name (ARN) in AWS CodeStar Connections.
TagResource, which adds or updates tags for a resource in AWS CodeStar Connections.
UntagResource, which removes tags for a resource in AWS CodeStar Connections.
For information about how to use AWS CodeStar Connections, see the Developer Tools User Guide.
" } diff --git a/services/codestarnotifications/pom.xml b/services/codestarnotifications/pom.xml index 1467913bfdab..5cb583b3dfbb 100644 --- a/services/codestarnotifications/pom.xml +++ b/services/codestarnotifications/pom.xml @@ -21,7 +21,7 @@This operation allows you to perform batch reads and writes on data stored in DynamoDB, using PartiQL.
" + }, "BatchGetItem":{ "name":"BatchGetItem", "http":{ @@ -266,6 +280,22 @@ "endpointdiscovery":{ } }, + "DescribeKinesisStreamingDestination":{ + "name":"DescribeKinesisStreamingDestination", + "http":{ + "method":"POST", + "requestUri":"/" + }, + "input":{"shape":"DescribeKinesisStreamingDestinationInput"}, + "output":{"shape":"DescribeKinesisStreamingDestinationOutput"}, + "errors":[ + {"shape":"ResourceNotFoundException"}, + {"shape":"InternalServerError"} + ], + "documentation":"Returns information about the status of Kinesis streaming.
", + "endpointdiscovery":{ + } + }, "DescribeLimits":{ "name":"DescribeLimits", "http":{ @@ -327,6 +357,81 @@ "endpointdiscovery":{ } }, + "DisableKinesisStreamingDestination":{ + "name":"DisableKinesisStreamingDestination", + "http":{ + "method":"POST", + "requestUri":"/" + }, + "input":{"shape":"KinesisStreamingDestinationInput"}, + "output":{"shape":"KinesisStreamingDestinationOutput"}, + "errors":[ + {"shape":"InternalServerError"}, + {"shape":"LimitExceededException"}, + {"shape":"ResourceInUseException"}, + {"shape":"ResourceNotFoundException"} + ], + "documentation":"Stops replication from the DynamoDB table to the Kinesis data stream. This is done without deleting either of the resources.
", + "endpointdiscovery":{ + } + }, + "EnableKinesisStreamingDestination":{ + "name":"EnableKinesisStreamingDestination", + "http":{ + "method":"POST", + "requestUri":"/" + }, + "input":{"shape":"KinesisStreamingDestinationInput"}, + "output":{"shape":"KinesisStreamingDestinationOutput"}, + "errors":[ + {"shape":"InternalServerError"}, + {"shape":"LimitExceededException"}, + {"shape":"ResourceInUseException"}, + {"shape":"ResourceNotFoundException"} + ], + "documentation":"Starts table data replication to the specified Kinesis data stream at a timestamp chosen during the enable workflow. If this operation doesn't return results immediately, use DescribeKinesisStreamingDestination to check if streaming to the Kinesis data stream is ACTIVE.
", + "endpointdiscovery":{ + } + }, + "ExecuteStatement":{ + "name":"ExecuteStatement", + "http":{ + "method":"POST", + "requestUri":"/" + }, + "input":{"shape":"ExecuteStatementInput"}, + "output":{"shape":"ExecuteStatementOutput"}, + "errors":[ + {"shape":"ConditionalCheckFailedException"}, + {"shape":"ProvisionedThroughputExceededException"}, + {"shape":"ResourceNotFoundException"}, + {"shape":"ItemCollectionSizeLimitExceededException"}, + {"shape":"TransactionConflictException"}, + {"shape":"RequestLimitExceeded"}, + {"shape":"InternalServerError"}, + {"shape":"DuplicateItemException"} + ], + "documentation":"This operation allows you to perform reads and singleton writes on data stored in DynamoDB, using PartiQL.
" + }, + "ExecuteTransaction":{ + "name":"ExecuteTransaction", + "http":{ + "method":"POST", + "requestUri":"/" + }, + "input":{"shape":"ExecuteTransactionInput"}, + "output":{"shape":"ExecuteTransactionOutput"}, + "errors":[ + {"shape":"ResourceNotFoundException"}, + {"shape":"TransactionCanceledException"}, + {"shape":"TransactionInProgressException"}, + {"shape":"IdempotentParameterMismatchException"}, + {"shape":"ProvisionedThroughputExceededException"}, + {"shape":"RequestLimitExceeded"}, + {"shape":"InternalServerError"} + ], + "documentation":"This operation allows you to perform transactional reads or writes on data stored in DynamoDB, using PartiQL.
" + }, "ExportTableToPointInTime":{ "name":"ExportTableToPointInTime", "http":{ @@ -1216,6 +1321,25 @@ "max":100, "min":1 }, + "BatchExecuteStatementInput":{ + "type":"structure", + "required":["Statements"], + "members":{ + "Statements":{ + "shape":"PartiQLBatchRequest", + "documentation":"The list of PartiQL statements representing the batch to run.
" + } + } + }, + "BatchExecuteStatementOutput":{ + "type":"structure", + "members":{ + "Responses":{ + "shape":"PartiQLBatchResponse", + "documentation":"The response to each PartiQL statement in the batch.
" + } + } + }, "BatchGetItemInput":{ "type":"structure", "required":["RequestItems"], @@ -1258,6 +1382,73 @@ "key":{"shape":"TableName"}, "value":{"shape":"ItemList"} }, + "BatchStatementError":{ + "type":"structure", + "members":{ + "Code":{ + "shape":"BatchStatementErrorCodeEnum", + "documentation":"The error code associated with the failed PartiQL batch statement.
" + }, + "Message":{ + "shape":"String", + "documentation":"The error message associated with the PartiQL batch resposne.
" + } + }, + "documentation":"An error associated with a statement in a PartiQL batch that was run.
" + }, + "BatchStatementErrorCodeEnum":{ + "type":"string", + "enum":[ + "ConditionalCheckFailed", + "ItemCollectionSizeLimitExceeded", + "RequestLimitExceeded", + "ValidationError", + "ProvisionedThroughputExceeded", + "TransactionConflict", + "ThrottlingError", + "InternalServerError", + "ResourceNotFound", + "AccessDenied", + "DuplicateItem" + ] + }, + "BatchStatementRequest":{ + "type":"structure", + "required":["Statement"], + "members":{ + "Statement":{ + "shape":"PartiQLStatement", + "documentation":"A valid PartiQL statement.
" + }, + "Parameters":{ + "shape":"PreparedStatementParameters", + "documentation":"The parameters associated with a PartiQL statement in the batch request.
" + }, + "ConsistentRead":{ + "shape":"ConsistentRead", + "documentation":"The read consistency of the PartiQL batch request.
" + } + }, + "documentation":"A PartiQL batch statement request.
" + }, + "BatchStatementResponse":{ + "type":"structure", + "members":{ + "Error":{ + "shape":"BatchStatementError", + "documentation":"The error associated with a failed PartiQL batch statement.
" + }, + "TableName":{ + "shape":"TableName", + "documentation":"The table name associated with a failed PartiQL batch statement.
" + }, + "Item":{ + "shape":"AttributeMap", + "documentation":"A DynamoDB item associated with a BatchStatementResponse
" + } + }, + "documentation":"A PartiQL batch statement response..
" + }, "BatchWriteItemInput":{ "type":"structure", "required":["RequestItems"], @@ -2099,6 +2290,29 @@ } } }, + "DescribeKinesisStreamingDestinationInput":{ + "type":"structure", + "required":["TableName"], + "members":{ + "TableName":{ + "shape":"TableName", + "documentation":"The name of the table being described.
" + } + } + }, + "DescribeKinesisStreamingDestinationOutput":{ + "type":"structure", + "members":{ + "TableName":{ + "shape":"TableName", + "documentation":"The name of the table being described.
" + }, + "KinesisDataStreamDestinations":{ + "shape":"KinesisDataStreamDestinations", + "documentation":"The list of replica structures for the table being described.
" + } + } + }, "DescribeLimitsInput":{ "type":"structure", "members":{ @@ -2186,7 +2400,25 @@ } } }, + "DestinationStatus":{ + "type":"string", + "enum":[ + "ENABLING", + "ACTIVE", + "DISABLING", + "DISABLED", + "ENABLE_FAILED" + ] + }, "Double":{"type":"double"}, + "DuplicateItemException":{ + "type":"structure", + "members":{ + "message":{"shape":"ErrorMessage"} + }, + "documentation":"There was an attempt to insert an item with the same primary key as an item that already exists in the DynamoDB table.
", + "exception":true + }, "Endpoint":{ "type":"structure", "required":[ @@ -2212,6 +2444,65 @@ "ErrorMessage":{"type":"string"}, "ExceptionDescription":{"type":"string"}, "ExceptionName":{"type":"string"}, + "ExecuteStatementInput":{ + "type":"structure", + "required":["Statement"], + "members":{ + "Statement":{ + "shape":"PartiQLStatement", + "documentation":"The PartiQL statement representing the operation to run.
" + }, + "Parameters":{ + "shape":"PreparedStatementParameters", + "documentation":"The parameters for the PartiQL statement, if any.
" + }, + "ConsistentRead":{ + "shape":"ConsistentRead", + "documentation":" The consistency of a read operation. If set to true, then a strongly consistent read is used; otherwise, an eventually consistent read is used.
Set this value to get remaining results, if NextToken was returned in the statement response.
If a read operation was used, this property will contain the result of the reade operation; a map of attribute names and their values. For the write operations this value will be empty.
" + }, + "NextToken":{ + "shape":"PartiQLNextToken", + "documentation":"If the response of a read request exceeds the response payload limit DynamoDB will set this value in the response. If set, you can use that this value in the subsequent request to get the remaining results.
" + } + } + }, + "ExecuteTransactionInput":{ + "type":"structure", + "required":["TransactStatements"], + "members":{ + "TransactStatements":{ + "shape":"ParameterizedStatements", + "documentation":"The list of PartiQL statements representing the transaction to run.
" + }, + "ClientRequestToken":{ + "shape":"ClientRequestToken", + "documentation":" Set this value to get remaining results, if NextToken was returned in the statement response.
The response to a PartiQL transaction.
" + } + } + }, "ExpectedAttributeMap":{ "type":"map", "key":{"shape":"AttributeName"}, @@ -2990,6 +3281,62 @@ }, "documentation":"Represents a set of primary keys and, for each key, the attributes to retrieve from the table.
For each primary key, you must provide all of the key attributes. For example, with a simple primary key, you only need to provide the partition key. For a composite primary key, you must provide both the partition key and the sort key.
" }, + "KinesisDataStreamDestination":{ + "type":"structure", + "members":{ + "StreamArn":{ + "shape":"StreamArn", + "documentation":"The ARN for a specific Kinesis data stream.
" + }, + "DestinationStatus":{ + "shape":"DestinationStatus", + "documentation":"The current status of replication.
" + }, + "DestinationStatusDescription":{ + "shape":"String", + "documentation":"The human-readable string that corresponds to the replica status.
" + } + }, + "documentation":"Describes a Kinesis data stream destination.
" + }, + "KinesisDataStreamDestinations":{ + "type":"list", + "member":{"shape":"KinesisDataStreamDestination"} + }, + "KinesisStreamingDestinationInput":{ + "type":"structure", + "required":[ + "TableName", + "StreamArn" + ], + "members":{ + "TableName":{ + "shape":"TableName", + "documentation":"The name of the DynamoDB table.
" + }, + "StreamArn":{ + "shape":"StreamArn", + "documentation":"The ARN for a Kinesis data stream.
" + } + } + }, + "KinesisStreamingDestinationOutput":{ + "type":"structure", + "members":{ + "TableName":{ + "shape":"TableName", + "documentation":"The name of the table being modified.
" + }, + "StreamArn":{ + "shape":"StreamArn", + "documentation":"The ARN for the specific Kinesis data stream.
" + }, + "DestinationStatus":{ + "shape":"DestinationStatus", + "documentation":"The current status of the replication.
" + } + } + }, "LastUpdateDateTime":{"type":"timestamp"}, "LimitExceededException":{ "type":"structure", @@ -3318,6 +3665,47 @@ "type":"list", "member":{"shape":"NumberAttributeValue"} }, + "ParameterizedStatement":{ + "type":"structure", + "required":["Statement"], + "members":{ + "Statement":{ + "shape":"PartiQLStatement", + "documentation":"A PartiQL statment that uses parameters.
" + }, + "Parameters":{ + "shape":"PreparedStatementParameters", + "documentation":"The parameter values.
" + } + }, + "documentation":"Represents a PartiQL statment that uses parameters.
" + }, + "ParameterizedStatements":{ + "type":"list", + "member":{"shape":"ParameterizedStatement"}, + "max":25, + "min":1 + }, + "PartiQLBatchRequest":{ + "type":"list", + "member":{"shape":"BatchStatementRequest"}, + "max":25, + "min":1 + }, + "PartiQLBatchResponse":{ + "type":"list", + "member":{"shape":"BatchStatementResponse"} + }, + "PartiQLNextToken":{ + "type":"string", + "max":32768, + "min":1 + }, + "PartiQLStatement":{ + "type":"string", + "max":8192, + "min":1 + }, "PointInTimeRecoveryDescription":{ "type":"structure", "members":{ @@ -3370,6 +3758,11 @@ "type":"long", "min":1 }, + "PreparedStatementParameters":{ + "type":"list", + "member":{"shape":"AttributeValue"}, + "min":1 + }, "Projection":{ "type":"structure", "members":{ diff --git a/services/ebs/pom.xml b/services/ebs/pom.xml index ee262f7f768b..7317183d6e26 100644 --- a/services/ebs/pom.xml +++ b/services/ebs/pom.xml @@ -21,7 +21,7 @@The private DNS name assigned to the VPC endpoint service.
", + "locationName":"privateDnsName" + } + }, + "documentation":"Information about the Private DNS name for interface endpoints.
" + }, + "PrivateDnsDetailsSet":{ + "type":"list", + "member":{ + "shape":"PrivateDnsDetails", + "locationName":"item" + } + }, "PrivateDnsNameConfiguration":{ "type":"structure", "members":{ @@ -34580,6 +34598,11 @@ "documentation":"The private DNS name for the service.
", "locationName":"privateDnsName" }, + "PrivateDnsNames":{ + "shape":"PrivateDnsDetailsSet", + "documentation":"The private DNS names assigned to the VPC endpoint service.
", + "locationName":"privateDnsNameSet" + }, "VpcEndpointPolicySupported":{ "shape":"Boolean", "documentation":"Indicates whether the service supports endpoint policies.
", diff --git a/services/ec2instanceconnect/pom.xml b/services/ec2instanceconnect/pom.xml index 824f87b2cb45..dd4d0a100f10 100644 --- a/services/ec2instanceconnect/pom.xml +++ b/services/ec2instanceconnect/pom.xml @@ -21,7 +21,7 @@Deletes specified tags from a resource.
" }, + "UpdateCapacityProvider":{ + "name":"UpdateCapacityProvider", + "http":{ + "method":"POST", + "requestUri":"/" + }, + "input":{"shape":"UpdateCapacityProviderRequest"}, + "output":{"shape":"UpdateCapacityProviderResponse"}, + "errors":[ + {"shape":"ServerException"}, + {"shape":"ClientException"}, + {"shape":"InvalidParameterException"} + ], + "documentation":"Modifies the parameters for a capacity provider.
" + }, "UpdateClusterSettings":{ "name":"UpdateClusterSettings", "http":{ @@ -961,6 +976,17 @@ }, "documentation":"The details of the Auto Scaling group for the capacity provider.
" }, + "AutoScalingGroupProviderUpdate":{ + "type":"structure", + "members":{ + "managedScaling":{"shape":"ManagedScaling"}, + "managedTerminationProtection":{ + "shape":"ManagedTerminationProtection", + "documentation":"The managed termination protection setting to use for the Auto Scaling group capacity provider. This determines whether the Auto Scaling group has managed termination protection.
When using managed termination protection, managed scaling must also be used otherwise managed termination protection will not work.
When managed termination protection is enabled, Amazon ECS prevents the Amazon EC2 instances in an Auto Scaling group that contain tasks from being terminated during a scale-in action. The Auto Scaling group and each instance in the Auto Scaling group must have instance protection from scale-in actions enabled as well. For more information, see Instance Protection in the AWS Auto Scaling User Guide.
When managed termination protection is disabled, your Amazon EC2 instances are not protected from termination when the Auto Scaling group scales in.
" + } + }, + "documentation":"The details of the Auto Scaling group capacity provider to update.
" + }, "AwsVpcConfiguration":{ "type":"structure", "required":["subnets"], @@ -1083,7 +1109,10 @@ "enum":[ "DELETE_IN_PROGRESS", "DELETE_COMPLETE", - "DELETE_FAILED" + "DELETE_FAILED", + "UPDATE_IN_PROGRESS", + "UPDATE_COMPLETE", + "UPDATE_FAILED" ] }, "CapacityProviders":{ @@ -1413,7 +1442,7 @@ }, "user":{ "shape":"String", - "documentation":"The user name to use inside the container. This parameter maps to User in the Create a container section of the Docker Remote API and the --user option to docker run.
You can use the following formats. If specifying a UID or GID, you must specify it as a positive integer.
user
user:group
uid
uid:gid
user:gid
uid:group
This parameter is not supported for Windows containers or tasks that use the awsvpc network mode.
The user to use inside the container. This parameter maps to User in the Create a container section of the Docker Remote API and the --user option to docker run.
When running tasks using the host network mode, you should not run containers using the root user (UID 0). It is considered best practice to use a non-root user.
You can specify the user using the following formats. If specifying a UID or GID, you must specify it as a positive integer.
user
user:group
uid
uid:gid
user:gid
uid:group
This parameter is not supported for Windows containers or tasks that use the awsvpc network mode.
The number of tasks in the deployment that are in the RUNNING status.
The number of consecutively failed tasks in the deployment. A task is considered a failure if the service scheduler can't launch the task, the task doesn't transition to a RUNNING state, or if it fails any of its defined health checks and is stopped.
Once a service deployment has one or more successfully running tasks, the failed task count resets to zero and stops being evaluated.
The Unix timestamp for when the service deployment was created.
" @@ -2107,13 +2140,43 @@ "networkConfiguration":{ "shape":"NetworkConfiguration", "documentation":"The VPC subnet and security group configuration for tasks that receive their own elastic network interface by using the awsvpc networking mode.
The rolloutState of a service is only returned for services that use the rolling update (ECS) deployment type that are not behind a Classic Load Balancer.
The rollout state of the deployment. When a service deployment is started, it begins in an IN_PROGRESS state. When the service reaches a steady state, the deployment will transition to a COMPLETED state. If the service fails to reach a steady state and circuit breaker is enabled, the deployment will transition to a FAILED state. A deployment in FAILED state will launch no new tasks. For more information, see DeploymentCircuitBreaker.
A description of the rollout state of a deployment.
" } }, "documentation":"The details of an Amazon ECS service deployment. This is used only when a service uses the ECS deployment controller type.
Whether to enable the deployment circuit breaker logic for the service.
" + }, + "rollback":{ + "shape":"Boolean", + "documentation":"Whether to enable Amazon ECS to roll back the service if a service deployment fails. If rollback is enabled, when a service deployment fails, the service is rolled back to the last deployment that completed successfully.
" + } + }, + "documentation":"The deployment circuit breaker can only be used for services using the rolling update (ECS) deployment type that are not behind a Classic Load Balancer.
The deployment circuit breaker determines whether a service deployment will fail if the service can't reach a steady state. If enabled, a service deployment will transition to a failed state and stop launching new tasks. You can also enable Amazon ECS to roll back your service to the last completed deployment after a failure. For more information, see Rolling update in the Amazon Elastic Container Service Developer Guide.
" + }, "DeploymentConfiguration":{ "type":"structure", "members":{ + "deploymentCircuitBreaker":{ + "shape":"DeploymentCircuitBreaker", + "documentation":"The deployment circuit breaker can only be used for services using the rolling update (ECS) deployment type.
The deployment circuit breaker determines whether a service deployment will fail if the service can't reach a steady state. If deployment circuit breaker is enabled, a service deployment will transition to a failed state and stop launching new tasks. If rollback is enabled, when a service deployment fails, the service is rolled back to the last deployment that completed successfully.
" + }, "maximumPercent":{ "shape":"BoxedInteger", "documentation":"If a service is using the rolling update (ECS) deployment type, the maximum percent parameter represents an upper limit on the number of tasks in a service that are allowed in the RUNNING or PENDING state during a deployment, as a percentage of the desired number of tasks (rounded down to the nearest integer), and while any container instances are in the DRAINING state if the service contains tasks using the EC2 launch type. This parameter enables you to define the deployment batch size. For example, if your service has a desired number of four tasks and a maximum percent value of 200%, the scheduler may start four new tasks before stopping the four older tasks (provided that the cluster resources required to do this are available). The default value for maximum percent is 200%.
If a service is using the blue/green (CODE_DEPLOY) or EXTERNAL deployment types and tasks that use the EC2 launch type, the maximum percent value is set to the default value and is used to define the upper limit on the number of the tasks in the service that remain in the RUNNING state while the container instances are in the DRAINING state. If the tasks in the service use the Fargate launch type, the maximum percent value is not used, although it is returned when describing your service.
The authorization credential option to use.
The authorization credential options can be provided using either the AWS Secrets Manager ARN or the AWS Systems Manager ARN. The ARNs refer to the stored credentials.
options:
ARN of an AWS Secrets Manager secret.
ARN of an AWS Systems Manager parameter.
The authorization credential option to use. The authorization credential options can be provided using either the Amazon Resource Name (ARN) of an AWS Secrets Manager secret or AWS Systems Manager Parameter Store parameter. The ARNs refer to the stored credentials.
" }, "domain":{ "shape":"String", - "documentation":"A fully qualified domain name hosted by an AWS Directory Service Managed Microsoft AD (Active Directory) or self-hosted EC2 AD.
" + "documentation":"A fully qualified domain name hosted by an AWS Directory Service Managed Microsoft AD (Active Directory) or self-hosted AD on Amazon EC2.
" } }, "documentation":"The authorization configuration details for Amazon FSx for Windows File Server file system. See FSxWindowsFileServerVolumeConfiguration in the Amazon Elastic Container Service API Reference.
For more information and the input format, see Amazon FSx for Windows File Server Volumes in the Amazon Elastic Container Service Developer Guide.
" @@ -3304,15 +3375,24 @@ }, "minimumScalingStepSize":{ "shape":"ManagedScalingStepSize", - "documentation":"The minimum number of Amazon EC2 instances that Amazon ECS will scale out at one time. The scale in process is not affected by this parameter If this parameter is omitted, the default value of 1 is used.
When additional capacity is required, Amazon ECS will scale up the minimum scaling step size even if the actual demand is less than the minimum scaling step size.
If you use a capacity provider with an Auto Scaling group configured with more than one Amazon EC2 instance type or Availability Zone, Amazon ECS will scale up by the exact minimum scaling step size value and will ignore both the maximum scaling step size as well as the capacity demand.
" + "documentation":"The minimum number of container instances that Amazon ECS will scale in or scale out at one time. If this parameter is omitted, the default value of 1 is used.
The maximum number of Amazon EC2 instances that Amazon ECS will scale out at one time. The scale in process is not affected by this parameter. If this parameter is omitted, the default value of 10000 is used.
The maximum number of container instances that Amazon ECS will scale in or scale out at one time. If this parameter is omitted, the default value of 10000 is used.
The period of time, in seconds, after a newly launched Amazon EC2 instance can contribute to CloudWatch metrics for Auto Scaling group. If this parameter is omitted, the default value of 300 seconds is used.
The managed scaling settings for the Auto Scaling group capacity provider.
When managed scaling is enabled, Amazon ECS manages the scale-in and scale-out actions of the Auto Scaling group. Amazon ECS manages a target tracking scaling policy using an Amazon ECS-managed CloudWatch metric with the specified targetCapacity value as the target value for the metric. For more information, see Using Managed Scaling in the Amazon Elastic Container Service Developer Guide.
If managed scaling is disabled, the user must manage the scaling of the Auto Scaling group.
" }, + "ManagedScalingInstanceWarmupPeriod":{ + "type":"integer", + "max":10000, + "min":0 + }, "ManagedScalingStatus":{ "type":"string", "enum":[ @@ -3584,7 +3664,7 @@ "documentation":"The set of network configuration parameters to provide the Container Network Interface (CNI) plugin, specified as key-value pairs.
IgnoredUID - (Required) The user ID (UID) of the proxy container as defined by the user parameter in a container definition. This is used to ensure the proxy ignores its own traffic. If IgnoredGID is specified, this field can be empty.
IgnoredGID - (Required) The group ID (GID) of the proxy container as defined by the user parameter in a container definition. This is used to ensure the proxy ignores its own traffic. If IgnoredUID is specified, this field can be empty.
AppPorts - (Required) The list of ports that the application uses. Network traffic to these ports is forwarded to the ProxyIngressPort and ProxyEgressPort.
ProxyIngressPort - (Required) Specifies the port that incoming traffic to the AppPorts is directed to.
ProxyEgressPort - (Required) Specifies the port that outgoing traffic from the AppPorts is directed to.
EgressIgnoredPorts - (Required) The egress traffic going to the specified ports is ignored and not redirected to the ProxyEgressPort. It can be an empty list.
EgressIgnoredIPs - (Required) The egress traffic going to the specified IP addresses is ignored and not redirected to the ProxyEgressPort. It can be an empty list.
The configuration details for the App Mesh proxy.
For tasks using the EC2 launch type, the container instances require at least version 1.26.0 of the container agent and at least version 1.26.0-1 of the ecs-init package to enable a proxy configuration. If your container instances are launched from the Amazon ECS-optimized AMI version 20190301 or later, then they contain the required versions of the container agent and ecs-init. For more information, see Amazon ECS-optimized Linux AMI in the Amazon Elastic Container Service Developer Guide.
For tasks using the Fargate launch type, the task or service requires platform version 1.3.0 or later.
" + "documentation":"The configuration details for the App Mesh proxy.
For tasks using the EC2 launch type, the container instances require at least version 1.26.0 of the container agent and at least version 1.26.0-1 of the ecs-init package to enable a proxy configuration. If your container instances are launched from the Amazon ECS-optimized AMI version 20190301 or later, then they contain the required versions of the container agent and ecs-init. For more information, see Amazon ECS-optimized Linux AMI
The Docker networking mode to use for the containers in the task. The valid values are none, bridge, awsvpc, and host. The default Docker network mode is bridge. If you are using the Fargate launch type, the awsvpc network mode is required. If you are using the EC2 launch type, any network mode can be used. If the network mode is set to none, you cannot specify port mappings in your container definitions, and the tasks containers do not have external connectivity. The host and awsvpc network modes offer the highest networking performance for containers because they use the EC2 network stack instead of the virtualized network stack provided by the bridge mode.
With the host and awsvpc network modes, exposed container ports are mapped directly to the corresponding host port (for the host network mode) or the attached elastic network interface port (for the awsvpc network mode), so you cannot take advantage of dynamic host port mappings.
If the network mode is awsvpc, the task is allocated an elastic network interface, and you must specify a NetworkConfiguration value when you create a service or run a task with the task definition. For more information, see Task Networking in the Amazon Elastic Container Service Developer Guide.
Currently, only Amazon ECS-optimized AMIs, other Amazon Linux variants with the ecs-init package, or AWS Fargate infrastructure support the awsvpc network mode.
If the network mode is host, you cannot run multiple instantiations of the same task on a single container instance when port mappings are used.
Docker for Windows uses different network modes than Docker for Linux. When you register a task definition with Windows containers, you must not specify a network mode. If you use the console to register a task definition with Windows containers, you must choose the <default> network mode object.
For more information, see Network settings in the Docker run reference.
" + "documentation":"The Docker networking mode to use for the containers in the task. The valid values are none, bridge, awsvpc, and host. If no network mode is specified, the default is bridge.
For Amazon ECS tasks on Fargate, the awsvpc network mode is required. For Amazon ECS tasks on Amazon EC2 instances, any network mode can be used. If the network mode is set to none, you cannot specify port mappings in your container definitions, and the tasks containers do not have external connectivity. The host and awsvpc network modes offer the highest networking performance for containers because they use the EC2 network stack instead of the virtualized network stack provided by the bridge mode.
With the host and awsvpc network modes, exposed container ports are mapped directly to the corresponding host port (for the host network mode) or the attached elastic network interface port (for the awsvpc network mode), so you cannot take advantage of dynamic host port mappings.
When using the host network mode, you should not run containers using the root user (UID 0). It is considered best practice to use a non-root user.
If the network mode is awsvpc, the task is allocated an elastic network interface, and you must specify a NetworkConfiguration value when you create a service or run a task with the task definition. For more information, see Task Networking in the Amazon Elastic Container Service Developer Guide.
Currently, only Amazon ECS-optimized AMIs, other Amazon Linux variants with the ecs-init package, or AWS Fargate infrastructure support the awsvpc network mode.
If the network mode is host, you cannot run multiple instantiations of the same task on a single container instance when port mappings are used.
Docker for Windows uses different network modes than Docker for Linux. When you register a task definition with Windows containers, you must not specify a network mode. If you use the console to register a task definition with Windows containers, you must choose the <default> network mode object.
For more information, see Network settings in the Docker run reference.
" }, "containerDefinitions":{ "shape":"ContainerDefinitions", @@ -4783,7 +4863,7 @@ }, "networkMode":{ "shape":"NetworkMode", - "documentation":"The Docker networking mode to use for the containers in the task. The valid values are none, bridge, awsvpc, and host. The default Docker network mode is bridge. If you are using the Fargate launch type, the awsvpc network mode is required. If you are using the EC2 launch type, any network mode can be used. If the network mode is set to none, you cannot specify port mappings in your container definitions, and the tasks containers do not have external connectivity. The host and awsvpc network modes offer the highest networking performance for containers because they use the EC2 network stack instead of the virtualized network stack provided by the bridge mode.
With the host and awsvpc network modes, exposed container ports are mapped directly to the corresponding host port (for the host network mode) or the attached elastic network interface port (for the awsvpc network mode), so you cannot take advantage of dynamic host port mappings.
If the network mode is awsvpc, the task is allocated an elastic network interface, and you must specify a NetworkConfiguration value when you create a service or run a task with the task definition. For more information, see Task Networking in the Amazon Elastic Container Service Developer Guide.
Currently, only Amazon ECS-optimized AMIs, other Amazon Linux variants with the ecs-init package, or AWS Fargate infrastructure support the awsvpc network mode.
If the network mode is host, you cannot run multiple instantiations of the same task on a single container instance when port mappings are used.
Docker for Windows uses different network modes than Docker for Linux. When you register a task definition with Windows containers, you must not specify a network mode. If you use the console to register a task definition with Windows containers, you must choose the <default> network mode object.
For more information, see Network settings in the Docker run reference.
" + "documentation":"The Docker networking mode to use for the containers in the task. The valid values are none, bridge, awsvpc, and host. If no network mode is specified, the default is bridge.
For Amazon ECS tasks on Fargate, the awsvpc network mode is required. For Amazon ECS tasks on Amazon EC2 instances, any network mode can be used. If the network mode is set to none, you cannot specify port mappings in your container definitions, and the tasks containers do not have external connectivity. The host and awsvpc network modes offer the highest networking performance for containers because they use the EC2 network stack instead of the virtualized network stack provided by the bridge mode.
With the host and awsvpc network modes, exposed container ports are mapped directly to the corresponding host port (for the host network mode) or the attached elastic network interface port (for the awsvpc network mode), so you cannot take advantage of dynamic host port mappings.
When using the host network mode, you should not run containers using the root user (UID 0). It is considered best practice to use a non-root user.
If the network mode is awsvpc, the task is allocated an elastic network interface, and you must specify a NetworkConfiguration value when you create a service or run a task with the task definition. For more information, see Task Networking in the Amazon Elastic Container Service Developer Guide.
Currently, only Amazon ECS-optimized AMIs, other Amazon Linux variants with the ecs-init package, or AWS Fargate infrastructure support the awsvpc network mode.
If the network mode is host, you cannot run multiple instantiations of the same task on a single container instance when port mappings are used.
Docker for Windows uses different network modes than Docker for Linux. When you register a task definition with Windows containers, you must not specify a network mode. If you use the console to register a task definition with Windows containers, you must choose the <default> network mode object.
For more information, see Network settings in the Docker run reference.
" }, "revision":{ "shape":"Integer", @@ -5162,6 +5242,29 @@ "members":{ } }, + "UpdateCapacityProviderRequest":{ + "type":"structure", + "required":[ + "name", + "autoScalingGroupProvider" + ], + "members":{ + "name":{ + "shape":"String", + "documentation":"An object representing the parameters to update for the Auto Scaling group capacity provider.
" + }, + "autoScalingGroupProvider":{ + "shape":"AutoScalingGroupProviderUpdate", + "documentation":"The name of the capacity provider to update.
" + } + } + }, + "UpdateCapacityProviderResponse":{ + "type":"structure", + "members":{ + "capacityProvider":{"shape":"CapacityProvider"} + } + }, "UpdateClusterSettingsRequest":{ "type":"structure", "required":[ diff --git a/services/efs/pom.xml b/services/efs/pom.xml index 650885ccdb71..454d7bc0088f 100644 --- a/services/efs/pom.xml +++ b/services/efs/pom.xml @@ -21,7 +21,7 @@The offering type filter value. Use this parameter to show only the available offerings matching the specified offering type.
Valid Values: \"Light Utilization\"|\"Medium Utilization\"|\"Heavy Utilization\"
The offering type filter value. Use this parameter to show only the available offerings matching the specified offering type.
Valid Values: \"Light Utilization\"|\"Medium Utilization\"|\"Heavy Utilization\" |\"All Upfront\"|\"Partial Upfront\"| \"No Upfront\"
Cancels a pending step or steps in a running cluster. Available only in Amazon EMR versions 4.8.0 and later, excluding version 5.0.0. A maximum of 256 steps are allowed in each CancelSteps request. CancelSteps is idempotent but asynchronous; it does not guarantee a step will be canceled, even if the request is successfully submitted. You can only cancel steps that are in a PENDING state.
Cancels a pending step or steps in a running cluster. Available only in Amazon EMR versions 4.8.0 and later, excluding version 5.0.0. A maximum of 256 steps are allowed in each CancelSteps request. CancelSteps is idempotent but asynchronous; it does not guarantee that a step will be canceled, even if the request is successfully submitted. You can only cancel steps that are in a PENDING state.
Creates a security configuration, which is stored in the service and can be specified when a cluster is created.
" }, + "CreateStudio":{ + "name":"CreateStudio", + "http":{ + "method":"POST", + "requestUri":"/" + }, + "input":{"shape":"CreateStudioInput"}, + "output":{"shape":"CreateStudioOutput"}, + "errors":[ + {"shape":"InternalServerException"}, + {"shape":"InvalidRequestException"} + ], + "documentation":"The Amazon EMR Studio APIs are in preview release for Amazon EMR and are subject to change.
Creates a new Amazon EMR Studio.
" + }, + "CreateStudioSessionMapping":{ + "name":"CreateStudioSessionMapping", + "http":{ + "method":"POST", + "requestUri":"/" + }, + "input":{"shape":"CreateStudioSessionMappingInput"}, + "errors":[ + {"shape":"InternalServerError"}, + {"shape":"InvalidRequestException"} + ], + "documentation":"The Amazon EMR Studio APIs are in preview release for Amazon EMR and are subject to change.
Maps a user or group to the Amazon EMR Studio specified by StudioId, and applies a session policy to refine Studio permissions for that user or group.
Deletes a security configuration.
" }, + "DeleteStudio":{ + "name":"DeleteStudio", + "http":{ + "method":"POST", + "requestUri":"/" + }, + "input":{"shape":"DeleteStudioInput"}, + "errors":[ + {"shape":"InternalServerException"}, + {"shape":"InvalidRequestException"} + ], + "documentation":"The Amazon EMR Studio APIs are in preview release for Amazon EMR and are subject to change.
Removes an Amazon EMR Studio from the Studio metadata store.
" + }, + "DeleteStudioSessionMapping":{ + "name":"DeleteStudioSessionMapping", + "http":{ + "method":"POST", + "requestUri":"/" + }, + "input":{"shape":"DeleteStudioSessionMappingInput"}, + "errors":[ + {"shape":"InternalServerError"}, + {"shape":"InvalidRequestException"} + ], + "documentation":"The Amazon EMR Studio APIs are in preview release for Amazon EMR and are subject to change.
Removes a user or group from an Amazon EMR Studio.
" + }, "DescribeCluster":{ "name":"DescribeCluster", "http":{ @@ -134,7 +187,7 @@ "errors":[ {"shape":"InternalServerError"} ], - "documentation":"This API is deprecated and will eventually be removed. We recommend you use ListClusters, DescribeCluster, ListSteps, ListInstanceGroups and ListBootstrapActions instead.
DescribeJobFlows returns a list of job flows that match all of the supplied parameters. The parameters can include a list of job flow IDs, job flow states, and restrictions on job flow creation date and time.
Regardless of supplied parameters, only job flows created within the last two months are returned.
If no parameters are supplied, then job flows matching either of the following criteria are returned:
Job flows created and completed in the last two weeks
Job flows created within the last two months that are in one of the following states: RUNNING, WAITING, SHUTTING_DOWN, STARTING
Amazon EMR can return a maximum of 512 job flow descriptions.
", + "documentation":"This API is no longer supported and will eventually be removed. We recommend you use ListClusters, DescribeCluster, ListSteps, ListInstanceGroups and ListBootstrapActions instead.
DescribeJobFlows returns a list of job flows that match all of the supplied parameters. The parameters can include a list of job flow IDs, job flow states, and restrictions on job flow creation date and time.
Regardless of supplied parameters, only job flows created within the last two months are returned.
If no parameters are supplied, then job flows matching either of the following criteria are returned:
Job flows created and completed in the last two weeks
Job flows created within the last two months that are in one of the following states: RUNNING, WAITING, SHUTTING_DOWN, STARTING
Amazon EMR can return a maximum of 512 job flow descriptions.
", "deprecated":true }, "DescribeNotebookExecution":{ @@ -179,6 +232,20 @@ ], "documentation":"Provides more detail about the cluster step.
" }, + "DescribeStudio":{ + "name":"DescribeStudio", + "http":{ + "method":"POST", + "requestUri":"/" + }, + "input":{"shape":"DescribeStudioInput"}, + "output":{"shape":"DescribeStudioOutput"}, + "errors":[ + {"shape":"InternalServerException"}, + {"shape":"InvalidRequestException"} + ], + "documentation":"The Amazon EMR Studio APIs are in preview release for Amazon EMR and are subject to change.
Returns details for the specified Amazon EMR Studio including ID, Name, VPC, Studio access URL, and so on.
" + }, "GetBlockPublicAccessConfiguration":{ "name":"GetBlockPublicAccessConfiguration", "http":{ @@ -201,7 +268,21 @@ }, "input":{"shape":"GetManagedScalingPolicyInput"}, "output":{"shape":"GetManagedScalingPolicyOutput"}, - "documentation":"Fetches the attached managed scaling policy for an Amazon EMR cluster.
" + "documentation":"Fetches the attached managed scaling policy for an Amazon EMR cluster.
" + }, + "GetStudioSessionMapping":{ + "name":"GetStudioSessionMapping", + "http":{ + "method":"POST", + "requestUri":"/" + }, + "input":{"shape":"GetStudioSessionMappingInput"}, + "output":{"shape":"GetStudioSessionMappingOutput"}, + "errors":[ + {"shape":"InternalServerError"}, + {"shape":"InvalidRequestException"} + ], + "documentation":"The Amazon EMR Studio APIs are in preview release for Amazon EMR and are subject to change.
Fetches mapping details for the specified Amazon EMR Studio and identity (user or group).
" }, "ListBootstrapActions":{ "name":"ListBootstrapActions", @@ -315,6 +396,34 @@ ], "documentation":"Provides a list of steps for the cluster in reverse order unless you specify stepIds with the request of filter by StepStates. You can specify a maximum of ten stepIDs.
The Amazon EMR Studio APIs are in preview release for Amazon EMR and are subject to change.
Returns a list of all user or group session mappings for the EMR Studio specified by StudioId.
The Amazon EMR Studio APIs are in preview release for Amazon EMR and are subject to change.
Returns a list of all Amazon EMR Studios associated with the AWS account. The list includes details such as ID, Studio Access URL, and creation time for each Studio.
" + }, "ModifyCluster":{ "name":"ModifyCluster", "http":{ @@ -386,7 +495,7 @@ }, "input":{"shape":"PutManagedScalingPolicyInput"}, "output":{"shape":"PutManagedScalingPolicyOutput"}, - "documentation":"Creates or updates a managed scaling policy for an Amazon EMR cluster. The managed scaling policy defines the limits for resources, such as EC2 instances that can be added or terminated from a cluster. The policy only applies to the core and task nodes. The master node cannot be scaled after initial configuration.
" + "documentation":"Creates or updates a managed scaling policy for an Amazon EMR cluster. The managed scaling policy defines the limits for resources, such as EC2 instances that can be added or terminated from a cluster. The policy only applies to the core and task nodes. The master node cannot be scaled after initial configuration.
" }, "RemoveAutoScalingPolicy":{ "name":"RemoveAutoScalingPolicy", @@ -497,6 +606,19 @@ {"shape":"InternalServerError"} ], "documentation":"TerminateJobFlows shuts a list of clusters (job flows) down. When a job flow is shut down, any step not yet completed is canceled and the EC2 instances on which the cluster is running are stopped. Any log files not already saved are uploaded to Amazon S3 if a LogUri was specified when the cluster was created.
The maximum number of clusters allowed is 10. The call to TerminateJobFlows is asynchronous. Depending on the configuration of the cluster, it may take up to 1-5 minutes for the cluster to completely terminate and release allocated resources, such as Amazon EC2 instances.
The Amazon EMR Studio APIs are in preview release for Amazon EMR and are subject to change.
Updates the session policy attached to the user or group for the specified Amazon EMR Studio.
" } }, "shapes":{ @@ -620,7 +742,7 @@ }, "Tags":{ "shape":"TagList", - "documentation":"A list of tags to associate with a cluster and propagate to EC2 instances. Tags are user-defined key/value pairs that consist of a required key string with a maximum of 128 characters, and an optional value string with a maximum of 256 characters.
" + "documentation":"A list of tags to associate with a cluster and propagate to EC2 instances. Tags are user-defined key-value pairs that consist of a required key string with a maximum of 128 characters, and an optional value string with a maximum of 256 characters.
" } }, "documentation":"This input identifies a cluster and a list of tags to attach.
" @@ -670,6 +792,13 @@ "max":2048, "min":20 }, + "AuthMode":{ + "type":"string", + "enum":[ + "SSO", + "IAM" + ] + }, "AutoScalingPolicy":{ "type":"structure", "required":[ @@ -759,7 +888,7 @@ "members":{ "BlockPublicSecurityGroupRules":{ "shape":"Boolean", - "documentation":"Indicates whether EMR block public access is enabled (true) or disabled (false). By default, the value is false for accounts that have created EMR clusters before July 2019. For accounts created after this, the default is true.
Indicates whether Amazon EMR block public access is enabled (true) or disabled (false). By default, the value is false for accounts that have created EMR clusters before July 2019. For accounts created after this, the default is true.
The ClusterID for which specified steps will be canceled. Use RunJobFlow and ListClusters to get ClusterIDs.
The ClusterID for the specified steps that will be canceled. Use RunJobFlow and ListClusters to get ClusterIDs.
The option to choose for cancelling RUNNING steps. By default, the value is SEND_INTERRUPT.
The option to choose to cancel RUNNING steps. By default, the value is SEND_INTERRUPT.
The input argument to the CancelSteps operation.
" @@ -1022,7 +1151,7 @@ }, "ScaleDownBehavior":{ "shape":"ScaleDownBehavior", - "documentation":"The way that individual Amazon EC2 instances terminate when an automatic scale-in activity occurs or an instance group is resized. TERMINATE_AT_INSTANCE_HOUR indicates that Amazon EMR terminates nodes at the instance-hour boundary, regardless of when the request to terminate the instance was submitted. This option is only available with Amazon EMR 5.1.0 and later and is the default for clusters created using that version. TERMINATE_AT_TASK_COMPLETION indicates that Amazon EMR blacklists and drains tasks from nodes before terminating the Amazon EC2 instances, regardless of the instance-hour boundary. With either behavior, Amazon EMR removes the least active nodes first and blocks instance termination if it could lead to HDFS corruption. TERMINATE_AT_TASK_COMPLETION is available only in Amazon EMR version 4.1.0 and later, and is the default for versions of Amazon EMR earlier than 5.1.0.
The way that individual Amazon EC2 instances terminate when an automatic scale-in activity occurs or an instance group is resized. TERMINATE_AT_INSTANCE_HOUR indicates that Amazon EMR terminates nodes at the instance-hour boundary, regardless of when the request to terminate the instance was submitted. This option is only available with Amazon EMR 5.1.0 and later and is the default for clusters created using that version. TERMINATE_AT_TASK_COMPLETION indicates that Amazon EMR adds nodes to a deny list and drains tasks from nodes before terminating the Amazon EC2 instances, regardless of the instance-hour boundary. With either behavior, Amazon EMR removes the least active nodes first and blocks instance termination if it could lead to HDFS corruption. TERMINATE_AT_TASK_COMPLETION is available only in Amazon EMR version 4.1.0 and later, and is the default for versions of Amazon EMR earlier than 5.1.0.
The size, in GiB, of the EBS root device volume of the Linux AMI that is used for each EC2 instance. Available in Amazon EMR version 4.x and later.
" + "documentation":"The size, in GiB, of the Amazon EBS root device volume of the Linux AMI that is used for each EC2 instance. Available in Amazon EMR version 4.x and later.
" }, "RepoUpgradeOnBoot":{ "shape":"RepoUpgradeOnBoot", @@ -1038,7 +1167,7 @@ }, "KerberosAttributes":{ "shape":"KerberosAttributes", - "documentation":"Attributes for Kerberos configuration when Kerberos authentication is enabled using a security configuration. For more information see Use Kerberos Authentication in the EMR Management Guide.
" + "documentation":"Attributes for Kerberos configuration when Kerberos authentication is enabled using a security configuration. For more information see Use Kerberos Authentication in the Amazon EMR Management Guide.
" }, "ClusterArn":{ "shape":"ArnType", @@ -1164,7 +1293,7 @@ }, "ReadyDateTime":{ "shape":"Date", - "documentation":"The date and time when the cluster was ready to execute steps.
" + "documentation":"The date and time when the cluster was ready to run steps.
" }, "EndDateTime":{ "shape":"Date", @@ -1218,19 +1347,19 @@ }, "MinimumCapacityUnits":{ "shape":"Integer", - "documentation":"The lower boundary of EC2 units. It is measured through VCPU cores or instances for instance groups and measured through units for instance fleets. Managed scaling activities are not allowed beyond this boundary. The limit only applies to the core and task nodes. The master node cannot be scaled after initial configuration.
" + "documentation":"The lower boundary of EC2 units. It is measured through vCPU cores or instances for instance groups and measured through units for instance fleets. Managed scaling activities are not allowed beyond this boundary. The limit only applies to the core and task nodes. The master node cannot be scaled after initial configuration.
" }, "MaximumCapacityUnits":{ "shape":"Integer", - "documentation":"The upper boundary of EC2 units. It is measured through VCPU cores or instances for instance groups and measured through units for instance fleets. Managed scaling activities are not allowed beyond this boundary. The limit only applies to the core and task nodes. The master node cannot be scaled after initial configuration.
" + "documentation":"The upper boundary of EC2 units. It is measured through vCPU cores or instances for instance groups and measured through units for instance fleets. Managed scaling activities are not allowed beyond this boundary. The limit only applies to the core and task nodes. The master node cannot be scaled after initial configuration.
" }, "MaximumOnDemandCapacityUnits":{ "shape":"Integer", - "documentation":"The upper boundary of On-Demand EC2 units. It is measured through VCPU cores or instances for instance groups and measured through units for instance fleets. The On-Demand units are not allowed to scale beyond this boundary. The parameter is used to split capacity allocation between On-Demand and Spot instances.
" + "documentation":"The upper boundary of On-Demand EC2 units. It is measured through vCPU cores or instances for instance groups and measured through units for instance fleets. The On-Demand units are not allowed to scale beyond this boundary. The parameter is used to split capacity allocation between On-Demand and Spot Instances.
" }, "MaximumCoreCapacityUnits":{ "shape":"Integer", - "documentation":"The upper boundary of EC2 units for core node type in a cluster. It is measured through VCPU cores or instances for instance groups and measured through units for instance fleets. The core units are not allowed to scale beyond this boundary. The parameter is used to split capacity allocation between core and task nodes.
" + "documentation":"The upper boundary of EC2 units for core node type in a cluster. It is measured through vCPU cores or instances for instance groups and measured through units for instance fleets. The core units are not allowed to scale beyond this boundary. The parameter is used to split capacity allocation between core and task nodes.
" } }, "documentation":"The EC2 unit limits for a managed scaling policy. The managed scaling activity of a cluster can not be above or below these limits. The limit only applies to the core and task nodes. The master node cannot be scaled after initial configuration.
" @@ -1299,6 +1428,108 @@ } } }, + "CreateStudioInput":{ + "type":"structure", + "required":[ + "Name", + "AuthMode", + "VpcId", + "SubnetIds", + "ServiceRole", + "UserRole", + "WorkspaceSecurityGroupId", + "EngineSecurityGroupId" + ], + "members":{ + "Name":{ + "shape":"XmlStringMaxLen256", + "documentation":"A descriptive name for the Amazon EMR Studio.
" + }, + "Description":{ + "shape":"XmlStringMaxLen256", + "documentation":"A detailed description of the Studio.
" + }, + "AuthMode":{ + "shape":"AuthMode", + "documentation":"Specifies whether the Studio authenticates users using single sign-on (SSO) or IAM. Amazon EMR Studio currently only supports SSO authentication.
" + }, + "VpcId":{ + "shape":"XmlStringMaxLen256", + "documentation":"The ID of the Amazon Virtual Private Cloud (Amazon VPC) to associate with the Studio.
" + }, + "SubnetIds":{ + "shape":"SubnetIdList", + "documentation":"A list of subnet IDs to associate with the Studio. The subnets must belong to the VPC specified by VpcId. Studio users can create a Workspace in any of the specified subnets.
The IAM role that will be assumed by the Amazon EMR Studio. The service role provides a way for Amazon EMR Studio to interoperate with other AWS services.
" + }, + "UserRole":{ + "shape":"XmlString", + "documentation":"The IAM user role that will be assumed by users and groups logged in to a Studio. The permissions attached to this IAM role can be scoped down for each user or group using session policies.
" + }, + "WorkspaceSecurityGroupId":{ + "shape":"XmlStringMaxLen256", + "documentation":"The ID of the Amazon EMR Studio Workspace security group. The Workspace security group allows outbound network traffic to resources in the Engine security group, and it must be in the same VPC specified by VpcId.
The ID of the Amazon EMR Studio Engine security group. The Engine security group allows inbound network traffic from the Workspace security group, and it must be in the same VPC specified by VpcId.
The default Amazon S3 location to back up EMR Studio Workspaces and notebook files. A Studio user can select an alternative Amazon S3 location when creating a Workspace.
" + }, + "Tags":{ + "shape":"TagList", + "documentation":"A list of tags to associate with the Studio. Tags are user-defined key-value pairs that consist of a required key string with a maximum of 128 characters, and an optional value string with a maximum of 256 characters.
" + } + } + }, + "CreateStudioOutput":{ + "type":"structure", + "members":{ + "StudioId":{ + "shape":"XmlStringMaxLen256", + "documentation":"The ID of the Amazon EMR Studio.
" + }, + "Url":{ + "shape":"XmlString", + "documentation":"The unique Studio access URL.
" + } + } + }, + "CreateStudioSessionMappingInput":{ + "type":"structure", + "required":[ + "StudioId", + "IdentityType", + "SessionPolicyArn" + ], + "members":{ + "StudioId":{ + "shape":"XmlStringMaxLen256", + "documentation":"The ID of the Amazon EMR Studio to which the user or group will be mapped.
" + }, + "IdentityId":{ + "shape":"XmlStringMaxLen256", + "documentation":"The globally unique identifier (GUID) of the user or group from the AWS SSO Identity Store. For more information, see UserId and GroupId in the AWS SSO Identity Store API Reference. Either IdentityName or IdentityId must be specified.
The name of the user or group. For more information, see UserName and DisplayName in the AWS SSO Identity Store API Reference. Either IdentityName or IdentityId must be specified.
Specifies whether the identity to map to the Studio is a user or a group.
" + }, + "SessionPolicyArn":{ + "shape":"XmlStringMaxLen256", + "documentation":"The Amazon Resource Name (ARN) for the session policy that will be applied to the user or group. Session policies refine Studio user permissions without the need to use multiple IAM user roles.
" + } + } + }, "Date":{"type":"timestamp"}, "DeleteSecurityConfigurationInput":{ "type":"structure", @@ -1315,6 +1546,41 @@ "members":{ } }, + "DeleteStudioInput":{ + "type":"structure", + "required":["StudioId"], + "members":{ + "StudioId":{ + "shape":"XmlStringMaxLen256", + "documentation":"The ID of the Amazon EMR Studio.
" + } + } + }, + "DeleteStudioSessionMappingInput":{ + "type":"structure", + "required":[ + "StudioId", + "IdentityType" + ], + "members":{ + "StudioId":{ + "shape":"XmlStringMaxLen256", + "documentation":"The ID of the Amazon EMR Studio.
" + }, + "IdentityId":{ + "shape":"XmlStringMaxLen256", + "documentation":"The globally unique identifier (GUID) of the user or group to remove from the Amazon EMR Studio. For more information, see UserId and GroupId in the AWS SSO Identity Store API Reference. Either IdentityName or IdentityId must be specified.
The name of the user name or group to remove from the Studio. For more information, see UserName and DisplayName in the AWS SSO Identity Store API Reference. Either IdentityName or IdentityId must be specified.
Specifies whether the identity to delete from the Studio is a user or a group.
" + } + } + }, "DescribeClusterInput":{ "type":"structure", "required":["ClusterId"], @@ -1442,6 +1708,25 @@ }, "documentation":"This output contains the description of the cluster step.
" }, + "DescribeStudioInput":{ + "type":"structure", + "required":["StudioId"], + "members":{ + "StudioId":{ + "shape":"XmlStringMaxLen256", + "documentation":"The Amazon EMR Studio ID.
" + } + } + }, + "DescribeStudioOutput":{ + "type":"structure", + "members":{ + "Studio":{ + "shape":"Studio", + "documentation":"The Amazon EMR Studio details.
" + } + } + }, "EC2InstanceIdsList":{ "type":"list", "member":{"shape":"InstanceId"} @@ -1607,7 +1892,7 @@ }, "Message":{ "shape":"String", - "documentation":"The descriptive message including the error the EMR service has identified as the cause of step failure. This is text from an error log that describes the root cause of the failure.
" + "documentation":"The descriptive message including the error the Amazon EMR service has identified as the cause of step failure. This is text from an error log that describes the root cause of the failure.
" }, "LogFile":{ "shape":"String", @@ -1644,7 +1929,7 @@ "members":{ "ClusterId":{ "shape":"ClusterId", - "documentation":"Specifies the ID of the cluster for which the managed scaling policy will be fetched.
" + "documentation":"Specifies the ID of the cluster for which the managed scaling policy will be fetched.
" } } }, @@ -1653,7 +1938,41 @@ "members":{ "ManagedScalingPolicy":{ "shape":"ManagedScalingPolicy", - "documentation":"Specifies the managed scaling policy that is attached to an Amazon EMR cluster.
" + "documentation":"Specifies the managed scaling policy that is attached to an Amazon EMR cluster.
" + } + } + }, + "GetStudioSessionMappingInput":{ + "type":"structure", + "required":[ + "StudioId", + "IdentityType" + ], + "members":{ + "StudioId":{ + "shape":"XmlStringMaxLen256", + "documentation":"The ID of the Amazon EMR Studio.
" + }, + "IdentityId":{ + "shape":"XmlStringMaxLen256", + "documentation":"The globally unique identifier (GUID) of the user or group. For more information, see UserId and GroupId in the AWS SSO Identity Store API Reference. Either IdentityName or IdentityId must be specified.
The name of the user or group to fetch. For more information, see UserName and DisplayName in the AWS SSO Identity Store API Reference. Either IdentityName or IdentityId must be specified.
Specifies whether the identity to fetch is a user or a group.
" + } + } + }, + "GetStudioSessionMappingOutput":{ + "type":"structure", + "members":{ + "SessionMapping":{ + "shape":"SessionMappingDetail", + "documentation":"The session mapping details for the specified Amazon EMR Studio and identity, including session policy ARN and creation time.
" } } }, @@ -1689,7 +2008,7 @@ }, "Properties":{ "shape":"StringMap", - "documentation":"The list of Java properties that are set when the step runs. You can use these properties to pass key value pairs to your main function.
" + "documentation":"The list of Java properties that are set when the step runs. You can use these properties to pass key-value pairs to your main function.
" }, "MainClass":{ "shape":"String", @@ -1702,6 +2021,13 @@ }, "documentation":"A cluster step consisting of a JAR file whose main function will be executed. The main function submits a job for Hadoop to execute and waits for the job to finish or fail.
" }, + "IdentityType":{ + "type":"string", + "enum":[ + "USER", + "GROUP" + ] + }, "Instance":{ "type":"structure", "members":{ @@ -1784,7 +2110,7 @@ }, "TargetOnDemandCapacity":{ "shape":"WholeNumber", - "documentation":"The target capacity of On-Demand units for the instance fleet, which determines how many On-Demand instances to provision. When the instance fleet launches, Amazon EMR tries to provision On-Demand instances as specified by InstanceTypeConfig. Each instance configuration has a specified WeightedCapacity. When an On-Demand instance is provisioned, the WeightedCapacity units count toward the target capacity. Amazon EMR provisions instances until the target capacity is totally fulfilled, even if this results in an overage. For example, if there are 2 units remaining to fulfill capacity, and Amazon EMR can only provision an instance with a WeightedCapacity of 5 units, the instance is provisioned, and the target capacity is exceeded by 3 units. You can use InstanceFleet$ProvisionedOnDemandCapacity to determine the Spot capacity units that have been provisioned for the instance fleet.
If not specified or set to 0, only Spot instances are provisioned for the instance fleet using TargetSpotCapacity. At least one of TargetSpotCapacity and TargetOnDemandCapacity should be greater than 0. For a master instance fleet, only one of TargetSpotCapacity and TargetOnDemandCapacity can be specified, and its value must be 1.
The target capacity of On-Demand units for the instance fleet, which determines how many On-Demand Instances to provision. When the instance fleet launches, Amazon EMR tries to provision On-Demand Instances as specified by InstanceTypeConfig. Each instance configuration has a specified WeightedCapacity. When an On-Demand Instance is provisioned, the WeightedCapacity units count toward the target capacity. Amazon EMR provisions instances until the target capacity is totally fulfilled, even if this results in an overage. For example, if there are 2 units remaining to fulfill capacity, and Amazon EMR can only provision an instance with a WeightedCapacity of 5 units, the instance is provisioned, and the target capacity is exceeded by 3 units. You can use InstanceFleet$ProvisionedOnDemandCapacity to determine the Spot capacity units that have been provisioned for the instance fleet.
If not specified or set to 0, only Spot Instances are provisioned for the instance fleet using TargetSpotCapacity. At least one of TargetSpotCapacity and TargetOnDemandCapacity should be greater than 0. For a master instance fleet, only one of TargetSpotCapacity and TargetOnDemandCapacity can be specified, and its value must be 1.
Describes the launch specification for an instance fleet.
" } }, - "documentation":"Describes an instance fleet, which is a group of EC2 instances that host a particular node type (master, core, or task) in an Amazon EMR cluster. Instance fleets can consist of a mix of instance types and On-Demand and Spot instances, which are provisioned to meet a defined target capacity.
The instance fleet configuration is available only in Amazon EMR versions 4.8.0 and later, excluding 5.0.x versions.
Describes an instance fleet, which is a group of EC2 instances that host a particular node type (master, core, or task) in an Amazon EMR cluster. Instance fleets can consist of a mix of instance types and On-Demand and Spot Instances, which are provisioned to meet a defined target capacity.
The instance fleet configuration is available only in Amazon EMR versions 4.8.0 and later, excluding 5.0.x versions.
The target capacity of On-Demand units for the instance fleet, which determines how many On-Demand instances to provision. When the instance fleet launches, Amazon EMR tries to provision On-Demand instances as specified by InstanceTypeConfig. Each instance configuration has a specified WeightedCapacity. When an On-Demand instance is provisioned, the WeightedCapacity units count toward the target capacity. Amazon EMR provisions instances until the target capacity is totally fulfilled, even if this results in an overage. For example, if there are 2 units remaining to fulfill capacity, and Amazon EMR can only provision an instance with a WeightedCapacity of 5 units, the instance is provisioned, and the target capacity is exceeded by 3 units.
If not specified or set to 0, only Spot instances are provisioned for the instance fleet using TargetSpotCapacity. At least one of TargetSpotCapacity and TargetOnDemandCapacity should be greater than 0. For a master instance fleet, only one of TargetSpotCapacity and TargetOnDemandCapacity can be specified, and its value must be 1.
The target capacity of On-Demand units for the instance fleet, which determines how many On-Demand Instances to provision. When the instance fleet launches, Amazon EMR tries to provision On-Demand Instances as specified by InstanceTypeConfig. Each instance configuration has a specified WeightedCapacity. When an On-Demand Instance is provisioned, the WeightedCapacity units count toward the target capacity. Amazon EMR provisions instances until the target capacity is totally fulfilled, even if this results in an overage. For example, if there are 2 units remaining to fulfill capacity, and Amazon EMR can only provision an instance with a WeightedCapacity of 5 units, the instance is provisioned, and the target capacity is exceeded by 3 units.
If not specified or set to 0, only Spot Instances are provisioned for the instance fleet using TargetSpotCapacity. At least one of TargetSpotCapacity and TargetOnDemandCapacity should be greater than 0. For a master instance fleet, only one of TargetSpotCapacity and TargetOnDemandCapacity can be specified, and its value must be 1.
The target capacity of Spot units for the instance fleet, which determines how many Spot instances to provision. When the instance fleet launches, Amazon EMR tries to provision Spot instances as specified by InstanceTypeConfig. Each instance configuration has a specified WeightedCapacity. When a Spot instance is provisioned, the WeightedCapacity units count toward the target capacity. Amazon EMR provisions instances until the target capacity is totally fulfilled, even if this results in an overage. For example, if there are 2 units remaining to fulfill capacity, and Amazon EMR can only provision an instance with a WeightedCapacity of 5 units, the instance is provisioned, and the target capacity is exceeded by 3 units.
If not specified or set to 0, only On-Demand instances are provisioned for the instance fleet. At least one of TargetSpotCapacity and TargetOnDemandCapacity should be greater than 0. For a master instance fleet, only one of TargetSpotCapacity and TargetOnDemandCapacity can be specified, and its value must be 1.
The target capacity of Spot units for the instance fleet, which determines how many Spot Instances to provision. When the instance fleet launches, Amazon EMR tries to provision Spot Instances as specified by InstanceTypeConfig. Each instance configuration has a specified WeightedCapacity. When a Spot Instance is provisioned, the WeightedCapacity units count toward the target capacity. Amazon EMR provisions instances until the target capacity is totally fulfilled, even if this results in an overage. For example, if there are 2 units remaining to fulfill capacity, and Amazon EMR can only provision an instance with a WeightedCapacity of 5 units, the instance is provisioned, and the target capacity is exceeded by 3 units.
If not specified or set to 0, only On-Demand Instances are provisioned for the instance fleet. At least one of TargetSpotCapacity and TargetOnDemandCapacity should be greater than 0. For a master instance fleet, only one of TargetSpotCapacity and TargetOnDemandCapacity can be specified, and its value must be 1.
The launch specification for Spot instances in the fleet, which determines the defined duration, provisioning timeout behavior, and allocation strategy.
" + "documentation":"The launch specification for Spot Instances in the fleet, which determines the defined duration, provisioning timeout behavior, and allocation strategy.
" }, "OnDemandSpecification":{ "shape":"OnDemandProvisioningSpecification", - "documentation":"The launch specification for On-Demand instances in the instance fleet, which determines the allocation strategy.
The instance fleet configuration is available only in Amazon EMR versions 4.8.0 and later, excluding 5.0.x versions. On-Demand instances allocation strategy is available in Amazon EMR version 5.12.1 and later.
The launch specification for On-Demand Instances in the instance fleet, which determines the allocation strategy.
The instance fleet configuration is available only in Amazon EMR versions 4.8.0 and later, excluding 5.0.x versions. On-Demand Instances allocation strategy is available in Amazon EMR version 5.12.1 and later.
The launch specification for Spot instances in the fleet, which determines the defined duration, provisioning timeout behavior, and allocation strategy.
The instance fleet configuration is available only in Amazon EMR versions 4.8.0 and later, excluding 5.0.x versions. On-Demand and Spot instance allocation strategies are available in Amazon EMR version 5.12.1 and later.
The launch specification for Spot Instances in the fleet, which determines the defined duration, provisioning timeout behavior, and allocation strategy.
The instance fleet configuration is available only in Amazon EMR versions 4.8.0 and later, excluding 5.0.x versions. On-Demand and Spot Instance allocation strategies are available in Amazon EMR version 5.12.1 and later.
The bid price for each EC2 Spot instance type as defined by InstanceType. Expressed in USD. If neither BidPrice nor BidPriceAsPercentageOfOnDemandPrice is provided, BidPriceAsPercentageOfOnDemandPrice defaults to 100%.
The bid price for each EC2 Spot Instance type as defined by InstanceType. Expressed in USD. If neither BidPrice nor BidPriceAsPercentageOfOnDemandPrice is provided, BidPriceAsPercentageOfOnDemandPrice defaults to 100%.
The bid price for each EC2 Spot instance type as defined by InstanceType. Expressed in USD. If neither BidPrice nor BidPriceAsPercentageOfOnDemandPrice is provided, BidPriceAsPercentageOfOnDemandPrice defaults to 100%.
The bid price for each EC2 Spot Instance type as defined by InstanceType. Expressed in USD. If neither BidPrice nor BidPriceAsPercentageOfOnDemandPrice is provided, BidPriceAsPercentageOfOnDemandPrice defaults to 100%.
The bid price for each EC2 Spot instance type as defined by InstanceType. Expressed in USD. If neither BidPrice nor BidPriceAsPercentageOfOnDemandPrice is provided, BidPriceAsPercentageOfOnDemandPrice defaults to 100%.
The bid price for each EC2 Spot Instance type as defined by InstanceType. Expressed in USD. If neither BidPrice nor BidPriceAsPercentageOfOnDemandPrice is provided, BidPriceAsPercentageOfOnDemandPrice defaults to 100%.
Unique ID of the instance group to expand or shrink.
" + "documentation":"Unique ID of the instance group to modify.
" }, "InstanceCount":{ "shape":"Integer", @@ -2413,22 +2739,22 @@ }, "BidPrice":{ "shape":"XmlStringMaxLen256", - "documentation":"The bid price for each EC2 Spot instance type as defined by InstanceType. Expressed in USD. If neither BidPrice nor BidPriceAsPercentageOfOnDemandPrice is provided, BidPriceAsPercentageOfOnDemandPrice defaults to 100%.
The bid price for each EC2 Spot Instance type as defined by InstanceType. Expressed in USD. If neither BidPrice nor BidPriceAsPercentageOfOnDemandPrice is provided, BidPriceAsPercentageOfOnDemandPrice defaults to 100%.
The bid price, as a percentage of On-Demand price, for each EC2 Spot instance as defined by InstanceType. Expressed as a number (for example, 20 specifies 20%). If neither BidPrice nor BidPriceAsPercentageOfOnDemandPrice is provided, BidPriceAsPercentageOfOnDemandPrice defaults to 100%.
The bid price, as a percentage of On-Demand price, for each EC2 Spot Instance as defined by InstanceType. Expressed as a number (for example, 20 specifies 20%). If neither BidPrice nor BidPriceAsPercentageOfOnDemandPrice is provided, BidPriceAsPercentageOfOnDemandPrice defaults to 100%.
The configuration of Amazon Elastic Block Storage (EBS) attached to each instance as defined by InstanceType.
The configuration of Amazon Elastic Block Storage (Amazon EBS) attached to each instance as defined by InstanceType.
A configuration classification that applies when provisioning cluster instances, which can include configurations for applications and software that run on the cluster.
" } }, - "documentation":"An instance type configuration for each instance type in an instance fleet, which determines the EC2 instances Amazon EMR attempts to provision to fulfill On-Demand and Spot target capacities. There can be a maximum of 5 instance type configurations in a fleet.
The instance fleet configuration is available only in Amazon EMR versions 4.8.0 and later, excluding 5.0.x versions.
An instance type configuration for each instance type in an instance fleet, which determines the EC2 instances Amazon EMR attempts to provision to fulfill On-Demand and Spot target capacities. There can be a maximum of five instance type configurations in a fleet.
The instance fleet configuration is available only in Amazon EMR versions 4.8.0 and later, excluding 5.0.x versions.
The bid price for each EC2 Spot instance type as defined by InstanceType. Expressed in USD.
The bid price for each EC2 Spot Instance type as defined by InstanceType. Expressed in USD.
The bid price, as a percentage of On-Demand price, for each EC2 Spot instance as defined by InstanceType. Expressed as a number (for example, 20 specifies 20%).
The bid price, as a percentage of On-Demand price, for each EC2 Spot Instance as defined by InstanceType. Expressed as a number (for example, 20 specifies 20%).
The configuration of Amazon Elastic Block Storage (EBS) attached to each instance as defined by InstanceType.
The configuration of Amazon Elastic Block Storage (Amazon EBS) attached to each instance as defined by InstanceType.
A list of strings set by third party software when the job flow is launched. If you are not using third party software to manage the job flow this value is empty.
" + "documentation":"A list of strings set by third-party software when the job flow is launched. If you are not using third-party software to manage the job flow, this value is empty.
" }, "VisibleToAllUsers":{ "shape":"Boolean", @@ -2566,7 +2892,7 @@ }, "ServiceRole":{ "shape":"XmlString", - "documentation":"The IAM role that will be assumed by the Amazon EMR service to access AWS resources on your behalf.
" + "documentation":"The IAM role that is assumed by the Amazon EMR service to access AWS resources on your behalf.
" }, "AutoScalingRole":{ "shape":"XmlString", @@ -2574,7 +2900,7 @@ }, "ScaleDownBehavior":{ "shape":"ScaleDownBehavior", - "documentation":"The way that individual Amazon EC2 instances terminate when an automatic scale-in activity occurs or an instance group is resized. TERMINATE_AT_INSTANCE_HOUR indicates that Amazon EMR terminates nodes at the instance-hour boundary, regardless of when the request to terminate the instance was submitted. This option is only available with Amazon EMR 5.1.0 and later and is the default for clusters created using that version. TERMINATE_AT_TASK_COMPLETION indicates that Amazon EMR blacklists and drains tasks from nodes before terminating the Amazon EC2 instances, regardless of the instance-hour boundary. With either behavior, Amazon EMR removes the least active nodes first and blocks instance termination if it could lead to HDFS corruption. TERMINATE_AT_TASK_COMPLETION available only in Amazon EMR version 4.1.0 and later, and is the default for versions of Amazon EMR earlier than 5.1.0.
The way that individual Amazon EC2 instances terminate when an automatic scale-in activity occurs or an instance group is resized. TERMINATE_AT_INSTANCE_HOUR indicates that Amazon EMR terminates nodes at the instance-hour boundary, regardless of when the request to terminate the instance was submitted. This option is only available with Amazon EMR 5.1.0 and later and is the default for clusters created using that version. TERMINATE_AT_TASK_COMPLETION indicates that Amazon EMR adds nodes to a deny list and drains tasks from nodes before terminating the Amazon EC2 instances, regardless of the instance-hour boundary. With either behavior, Amazon EMR removes the least active nodes first and blocks instance termination if it could lead to HDFS corruption. TERMINATE_AT_TASK_COMPLETION available only in Amazon EMR version 4.1.0 and later, and is the default for versions of Amazon EMR earlier than 5.1.0.
A description of a cluster (job flow).
" @@ -2660,7 +2986,7 @@ }, "Ec2KeyName":{ "shape":"XmlStringMaxLen256", - "documentation":"The name of the EC2 key pair that can be used to ssh to the master node as the user called \"hadoop.\"
" + "documentation":"The name of the EC2 key pair that can be used to connect to the master node using SSH as the user called \"hadoop.\"
" }, "Placement":{ "shape":"PlacementType", @@ -2676,7 +3002,7 @@ }, "HadoopVersion":{ "shape":"XmlStringMaxLen256", - "documentation":"Applies only to Amazon EMR release versions earlier than 4.0. The Hadoop version for the cluster. Valid inputs are \"0.18\" (deprecated), \"0.20\" (deprecated), \"0.20.205\" (deprecated), \"1.0.3\", \"2.2.0\", or \"2.4.0\". If you do not set this value, the default of 0.18 is used, unless the AmiVersion parameter is set in the RunJobFlow call, in which case the default version of Hadoop for that AMI version is used.
Applies only to Amazon EMR release versions earlier than 4.0. The Hadoop version for the cluster. Valid inputs are \"0.18\" (no longer maintained), \"0.20\" (no longer maintained), \"0.20.205\" (no longer maintained), \"1.0.3\", \"2.2.0\", or \"2.4.0\". If you do not set this value, the default of 0.18 is used, unless the AmiVersion parameter is set in the RunJobFlow call, in which case the default version of Hadoop for that AMI version is used.
A list of additional Amazon EC2 security group IDs for the core and task nodes.
" } }, - "documentation":"A description of the Amazon EC2 instance on which the cluster (job flow) runs. A valid JobFlowInstancesConfig must contain either InstanceGroups or InstanceFleets, which is the recommended configuration. They cannot be used together. You may also have MasterInstanceType, SlaveInstanceType, and InstanceCount (all three must be present), but we don't recommend this configuration.
" + "documentation":"A description of the Amazon EC2 instance on which the cluster (job flow) runs. A valid JobFlowInstancesConfig must contain either InstanceGroups or InstanceFleets. They cannot be used together. You may also have MasterInstanceType, SlaveInstanceType, and InstanceCount (all three must be present), but we don't recommend this configuration.
" }, "JobFlowInstancesDetail":{ "type":"structure", @@ -2743,11 +3069,11 @@ }, "NormalizedInstanceHours":{ "shape":"Integer", - "documentation":"An approximation of the cost of the cluster, represented in m1.small/hours. This value is incremented one time for every hour that an m1.small runs. Larger instances are weighted more, so an Amazon EC2 instance that is roughly four times more expensive would result in the normalized instance hours being incremented by four. This result is only an approximation and does not reflect the actual billing rate.
" + "documentation":"An approximation of the cost of the cluster, represented in m1.small/hours. This value is increased one time for every hour that an m1.small instance runs. Larger instances are weighted more heavily, so an Amazon EC2 instance that is roughly four times more expensive would result in the normalized instance hours being increased incrementally four times. This result is only an approximation and does not reflect the actual billing rate.
" }, "Ec2KeyName":{ "shape":"XmlStringMaxLen256", - "documentation":"The name of an Amazon EC2 key pair that can be used to ssh to the master node.
" + "documentation":"The name of an Amazon EC2 key pair that can be used to connect to the master node using SSH.
" }, "Ec2SubnetId":{ "shape":"XmlStringMaxLen256", @@ -2800,21 +3126,21 @@ "documentation":"The Active Directory password for ADDomainJoinUser.
Attributes for Kerberos configuration when Kerberos authentication is enabled using a security configuration. For more information see Use Kerberos Authentication in the EMR Management Guide.
" + "documentation":"Attributes for Kerberos configuration when Kerberos authentication is enabled using a security configuration. For more information see Use Kerberos Authentication in the Amazon EMR Management Guide.
" }, "KeyValue":{ "type":"structure", "members":{ "Key":{ "shape":"XmlString", - "documentation":"The unique identifier of a key value pair.
" + "documentation":"The unique identifier of a key-value pair.
" }, "Value":{ "shape":"XmlString", "documentation":"The value part of the identified key.
" } }, - "documentation":"A key value pair.
" + "documentation":"A key-value pair.
" }, "KeyValueList":{ "type":"list", @@ -3087,6 +3413,58 @@ }, "documentation":"This output contains the list of steps returned in reverse order. This means that the last step is the first element in the list.
" }, + "ListStudioSessionMappingsInput":{ + "type":"structure", + "members":{ + "StudioId":{ + "shape":"XmlStringMaxLen256", + "documentation":"The ID of the Amazon EMR Studio.
" + }, + "IdentityType":{ + "shape":"IdentityType", + "documentation":"Specifies whether to return session mappings for users or groups. If not specified, the results include session mapping details for both users and groups.
" + }, + "Marker":{ + "shape":"Marker", + "documentation":"The pagination token that indicates the set of results to retrieve.
" + } + } + }, + "ListStudioSessionMappingsOutput":{ + "type":"structure", + "members":{ + "SessionMappings":{ + "shape":"SessionMappingSummaryList", + "documentation":"A list of session mapping summary objects. Each object includes session mapping details such as creation time, identity type (user or group), and Studio ID.
" + }, + "Marker":{ + "shape":"Marker", + "documentation":"The pagination token that indicates the next set of results to retrieve.
" + } + } + }, + "ListStudiosInput":{ + "type":"structure", + "members":{ + "Marker":{ + "shape":"Marker", + "documentation":"The pagination token that indicates the set of results to retrieve.
" + } + } + }, + "ListStudiosOutput":{ + "type":"structure", + "members":{ + "Studios":{ + "shape":"StudioSummaryList", + "documentation":"The list of Studio summary objects.
" + }, + "Marker":{ + "shape":"Marker", + "documentation":"The pagination token that indicates the next set of results to retrieve.
" + } + } + }, "Long":{"type":"long"}, "ManagedScalingPolicy":{ "type":"structure", @@ -3239,7 +3617,7 @@ }, "Tags":{ "shape":"TagList", - "documentation":"A list of tags associated with a notebook execution. Tags are user-defined key value pairs that consist of a required key string with a maximum of 128 characters and an optional value string with a maximum of 256 characters.
" + "documentation":"A list of tags associated with a notebook execution. Tags are user-defined key-value pairs that consist of a required key string with a maximum of 128 characters and an optional value string with a maximum of 256 characters.
" } }, "documentation":"A notebook execution. An execution is a specific instance that an EMR Notebook is run using the StartNotebookExecution action.
Specifies the strategy to use in launching On-Demand instance fleets. Currently, the only option is lowest-price (the default), which launches the lowest price first.
" + "documentation":"Specifies the strategy to use in launching On-Demand Instance fleets. Currently, the only option is lowest-price (the default), which launches the lowest price first.
" } }, - "documentation":"The launch specification for On-Demand instances in the instance fleet, which determines the allocation strategy.
The instance fleet configuration is available only in Amazon EMR versions 4.8.0 and later, excluding 5.0.x versions. On-Demand instances allocation strategy is available in Amazon EMR version 5.12.1 and later.
The launch specification for On-Demand Instances in the instance fleet, which determines the allocation strategy.
The instance fleet configuration is available only in Amazon EMR versions 4.8.0 and later, excluding 5.0.x versions. On-Demand Instances allocation strategy is available in Amazon EMR version 5.12.1 and later.
Specifies the ID of an EMR cluster where the managed scaling policy is attached.
" + "documentation":"Specifies the ID of an EMR cluster where the managed scaling policy is attached.
" }, "ManagedScalingPolicy":{ "shape":"ManagedScalingPolicy", - "documentation":"Specifies the constraints for the managed scaling policy.
" + "documentation":"Specifies the constraints for the managed scaling policy.
" } } }, @@ -3545,7 +3923,7 @@ }, "LogEncryptionKmsKeyId":{ "shape":"XmlString", - "documentation":"The AWS KMS customer master key (CMK) used for encrypting log files. If a value is not provided, the logs will remain encrypted by AES-256. This attribute is only available with EMR version 5.30.0 and later, excluding EMR 6.0.0.
" + "documentation":"The AWS KMS customer master key (CMK) used for encrypting log files. If a value is not provided, the logs remain encrypted by AES-256. This attribute is only available with Amazon EMR version 5.30.0 and later, excluding Amazon EMR 6.0.0.
" }, "AdditionalInfo":{ "shape":"XmlString", @@ -3613,7 +3991,7 @@ }, "ScaleDownBehavior":{ "shape":"ScaleDownBehavior", - "documentation":"Specifies the way that individual Amazon EC2 instances terminate when an automatic scale-in activity occurs or an instance group is resized. TERMINATE_AT_INSTANCE_HOUR indicates that Amazon EMR terminates nodes at the instance-hour boundary, regardless of when the request to terminate the instance was submitted. This option is only available with Amazon EMR 5.1.0 and later and is the default for clusters created using that version. TERMINATE_AT_TASK_COMPLETION indicates that Amazon EMR blacklists and drains tasks from nodes before terminating the Amazon EC2 instances, regardless of the instance-hour boundary. With either behavior, Amazon EMR removes the least active nodes first and blocks instance termination if it could lead to HDFS corruption. TERMINATE_AT_TASK_COMPLETION available only in Amazon EMR version 4.1.0 and later, and is the default for versions of Amazon EMR earlier than 5.1.0.
Specifies the way that individual Amazon EC2 instances terminate when an automatic scale-in activity occurs or an instance group is resized. TERMINATE_AT_INSTANCE_HOUR indicates that Amazon EMR terminates nodes at the instance-hour boundary, regardless of when the request to terminate the instance was submitted. This option is only available with Amazon EMR 5.1.0 and later and is the default for clusters created using that version. TERMINATE_AT_TASK_COMPLETION indicates that Amazon EMR adds nodes to a deny list and drains tasks from nodes before terminating the Amazon EC2 instances, regardless of the instance-hour boundary. With either behavior, Amazon EMR removes the least active nodes first and blocks instance termination if it could lead to HDFS corruption. TERMINATE_AT_TASK_COMPLETION available only in Amazon EMR version 4.1.0 and later, and is the default for versions of Amazon EMR earlier than 5.1.0.
The size, in GiB, of the EBS root device volume of the Linux AMI that is used for each EC2 instance. Available in Amazon EMR version 4.x and later.
" + "documentation":"The size, in GiB, of the Amazon EBS root device volume of the Linux AMI that is used for each EC2 instance. Available in Amazon EMR version 4.x and later.
" }, "RepoUpgradeOnBoot":{ "shape":"RepoUpgradeOnBoot", @@ -3629,7 +4007,7 @@ }, "KerberosAttributes":{ "shape":"KerberosAttributes", - "documentation":"Attributes for Kerberos configuration when Kerberos authentication is enabled using a security configuration. For more information see Use Kerberos Authentication in the EMR Management Guide.
" + "documentation":"Attributes for Kerberos configuration when Kerberos authentication is enabled using a security configuration. For more information see Use Kerberos Authentication in the Amazon EMR Management Guide.
" }, "StepConcurrencyLevel":{ "shape":"Integer", @@ -3779,6 +4157,74 @@ "type":"list", "member":{"shape":"XmlStringMaxLen256"} }, + "SessionMappingDetail":{ + "type":"structure", + "members":{ + "StudioId":{ + "shape":"XmlStringMaxLen256", + "documentation":"The ID of the Amazon EMR Studio.
" + }, + "IdentityId":{ + "shape":"XmlStringMaxLen256", + "documentation":"The globally unique identifier (GUID) of the user or group.
" + }, + "IdentityName":{ + "shape":"XmlStringMaxLen256", + "documentation":"The name of the user or group. For more information, see UserName and DisplayName in the AWS SSO Identity Store API Reference.
" + }, + "IdentityType":{ + "shape":"IdentityType", + "documentation":"Specifies whether the identity mapped to the Studio is a user or a group.
" + }, + "SessionPolicyArn":{ + "shape":"XmlStringMaxLen256", + "documentation":"The Amazon Resource Name (ARN) of the session policy associated with the user or group.
" + }, + "CreationTime":{ + "shape":"Date", + "documentation":"The time the session mapping was created.
" + }, + "LastModifiedTime":{ + "shape":"Date", + "documentation":"The time the session mapping was last modified.
" + } + }, + "documentation":"Details for an Amazon EMR Studio session mapping including creation time, user or group ID, Studio ID, and so on.
" + }, + "SessionMappingSummary":{ + "type":"structure", + "members":{ + "StudioId":{ + "shape":"XmlStringMaxLen256", + "documentation":"The ID of the Amazon EMR Studio.
" + }, + "IdentityId":{ + "shape":"XmlStringMaxLen256", + "documentation":"The globally unique identifier (GUID) of the user or group from the AWS SSO Identity Store.
" + }, + "IdentityName":{ + "shape":"XmlStringMaxLen256", + "documentation":"The name of the user or group. For more information, see UserName and DisplayName in the AWS SSO Identity Store API Reference.
" + }, + "IdentityType":{ + "shape":"IdentityType", + "documentation":"Specifies whether the identity mapped to the Studio is a user or a group.
" + }, + "SessionPolicyArn":{ + "shape":"XmlStringMaxLen256", + "documentation":"The Amazon Resource Name (ARN) of the session policy associated with the user or group.
" + }, + "CreationTime":{ + "shape":"Date", + "documentation":"The time the session mapping was created.
" + } + }, + "documentation":"Details for an Amazon EMR Studio session mapping. The details do not include the time the session mapping was last modified.
" + }, + "SessionMappingSummaryList":{ + "type":"list", + "member":{"shape":"SessionMappingSummary"} + }, "SetTerminationProtectionInput":{ "type":"structure", "required":[ @@ -3861,22 +4307,22 @@ "members":{ "TimeoutDurationMinutes":{ "shape":"WholeNumber", - "documentation":"The spot provisioning timeout period in minutes. If Spot instances are not provisioned within this time period, the TimeOutAction is taken. Minimum value is 5 and maximum value is 1440. The timeout applies only during initial provisioning, when the cluster is first created.
The spot provisioning timeout period in minutes. If Spot Instances are not provisioned within this time period, the TimeOutAction is taken. Minimum value is 5 and maximum value is 1440. The timeout applies only during initial provisioning, when the cluster is first created.
The action to take when TargetSpotCapacity has not been fulfilled when the TimeoutDurationMinutes has expired; that is, when all Spot instances could not be provisioned within the Spot provisioning timeout. Valid values are TERMINATE_CLUSTER and SWITCH_TO_ON_DEMAND. SWITCH_TO_ON_DEMAND specifies that if no Spot instances are available, On-Demand Instances should be provisioned to fulfill any remaining Spot capacity.
The action to take when TargetSpotCapacity has not been fulfilled when the TimeoutDurationMinutes has expired; that is, when all Spot Instances could not be provisioned within the Spot provisioning timeout. Valid values are TERMINATE_CLUSTER and SWITCH_TO_ON_DEMAND. SWITCH_TO_ON_DEMAND specifies that if no Spot Instances are available, On-Demand Instances should be provisioned to fulfill any remaining Spot capacity.
The defined duration for Spot instances (also known as Spot blocks) in minutes. When specified, the Spot instance does not terminate before the defined duration expires, and defined duration pricing for Spot instances applies. Valid values are 60, 120, 180, 240, 300, or 360. The duration period starts as soon as a Spot instance receives its instance ID. At the end of the duration, Amazon EC2 marks the Spot instance for termination and provides a Spot instance termination notice, which gives the instance a two-minute warning before it terminates.
" + "documentation":"The defined duration for Spot Instances (also known as Spot blocks) in minutes. When specified, the Spot Instance does not terminate before the defined duration expires, and defined duration pricing for Spot instances applies. Valid values are 60, 120, 180, 240, 300, or 360. The duration period starts as soon as a Spot Instance receives its instance ID. At the end of the duration, Amazon EC2 marks the Spot Instance for termination and provides a Spot Instance termination notice, which gives the instance a two-minute warning before it terminates.
" }, "AllocationStrategy":{ "shape":"SpotProvisioningAllocationStrategy", - "documentation":"Specifies the strategy to use in launching Spot instance fleets. Currently, the only option is capacity-optimized (the default), which launches instances from Spot instance pools with optimal capacity for the number of instances that are launching.
" + "documentation":"Specifies the strategy to use in launching Spot Instance fleets. Currently, the only option is capacity-optimized (the default), which launches instances from Spot Instance pools with optimal capacity for the number of instances that are launching.
" } }, - "documentation":"The launch specification for Spot instances in the instance fleet, which determines the defined duration, provisioning timeout behavior, and allocation strategy.
The instance fleet configuration is available only in Amazon EMR versions 4.8.0 and later, excluding 5.0.x versions. Spot instance allocation strategy is available in Amazon EMR version 5.12.1 and later.
The launch specification for Spot Instances in the instance fleet, which determines the defined duration, provisioning timeout behavior, and allocation strategy.
The instance fleet configuration is available only in Amazon EMR versions 4.8.0 and later, excluding 5.0.x versions. Spot Instance allocation strategy is available in Amazon EMR version 5.12.1 and later.
A list of tags associated with a notebook execution. Tags are user-defined key value pairs that consist of a required key string with a maximum of 128 characters and an optional value string with a maximum of 256 characters.
" + "documentation":"A list of tags associated with a notebook execution. Tags are user-defined key-value pairs that consist of a required key string with a maximum of 128 characters and an optional value string with a maximum of 256 characters.
" } } }, @@ -4199,6 +4645,110 @@ "key":{"shape":"String"}, "value":{"shape":"String"} }, + "Studio":{ + "type":"structure", + "members":{ + "StudioId":{ + "shape":"XmlStringMaxLen256", + "documentation":"The ID of the EMR Studio.
" + }, + "StudioArn":{ + "shape":"XmlStringMaxLen256", + "documentation":"The Amazon Resource Name (ARN) of the EMR Studio.
" + }, + "Name":{ + "shape":"XmlStringMaxLen256", + "documentation":"The name of the EMR Studio.
" + }, + "Description":{ + "shape":"XmlStringMaxLen256", + "documentation":"The detailed description of the EMR Studio.
" + }, + "AuthMode":{ + "shape":"AuthMode", + "documentation":"Specifies whether the Studio authenticates users using single sign-on (SSO) or IAM.
" + }, + "VpcId":{ + "shape":"XmlStringMaxLen256", + "documentation":"The ID of the VPC associated with the EMR Studio.
" + }, + "SubnetIds":{ + "shape":"SubnetIdList", + "documentation":"The list of IDs of the subnets associated with the Amazon EMR Studio.
" + }, + "ServiceRole":{ + "shape":"XmlString", + "documentation":"The name of the IAM role assumed by the Amazon EMR Studio.
" + }, + "UserRole":{ + "shape":"XmlString", + "documentation":"The name of the IAM role assumed by users logged in to the Amazon EMR Studio.
" + }, + "WorkspaceSecurityGroupId":{ + "shape":"XmlStringMaxLen256", + "documentation":"The ID of the Workspace security group associated with the Amazon EMR Studio. The Workspace security group allows outbound network traffic to resources in the Engine security group and to the internet.
" + }, + "EngineSecurityGroupId":{ + "shape":"XmlStringMaxLen256", + "documentation":"The ID of the Engine security group associated with the Amazon EMR Studio. The Engine security group allows inbound network traffic from resources in the Workspace security group.
" + }, + "Url":{ + "shape":"XmlString", + "documentation":"The unique access URL of the Amazon EMR Studio.
" + }, + "CreationTime":{ + "shape":"Date", + "documentation":"The time the Amazon EMR Studio was created.
" + }, + "DefaultS3Location":{ + "shape":"XmlString", + "documentation":"The default Amazon S3 location to back up Amazon EMR Studio Workspaces and notebook files.
" + }, + "Tags":{ + "shape":"TagList", + "documentation":"A list of tags associated with the Amazon EMR Studio.
" + } + }, + "documentation":"Details for an Amazon EMR Studio including ID, creation time, name, and so on.
" + }, + "StudioSummary":{ + "type":"structure", + "members":{ + "StudioId":{ + "shape":"XmlStringMaxLen256", + "documentation":"The ID of the Amazon EMR Studio.
" + }, + "Name":{ + "shape":"XmlStringMaxLen256", + "documentation":"The name of the Amazon EMR Studio.
" + }, + "VpcId":{ + "shape":"XmlStringMaxLen256", + "documentation":"The ID of the Virtual Private Cloud (Amazon VPC) associated with the Amazon EMR Studio.
" + }, + "Description":{ + "shape":"XmlStringMaxLen256", + "documentation":"The detailed description of the EMR Studio.
" + }, + "Url":{ + "shape":"XmlStringMaxLen256", + "documentation":"The unique access URL of the Amazon EMR Studio.
" + }, + "CreationTime":{ + "shape":"Date", + "documentation":"The time when the Amazon EMR Studio was created.
" + } + }, + "documentation":"Details for an Amazon EMR Studio, including ID, Name, VPC, and Description. The details do not include subnets, IAM roles, security groups, or tags associated with the Studio.
" + }, + "StudioSummaryList":{ + "type":"list", + "member":{"shape":"StudioSummary"} + }, + "SubnetIdList":{ + "type":"list", + "member":{"shape":"String"} + }, "SupportedProductConfig":{ "type":"structure", "members":{ @@ -4229,7 +4779,7 @@ "documentation":"A user-defined value, which is optional in a tag. For more information, see Tag Clusters.
" } }, - "documentation":"A key/value pair containing user-defined metadata that you can associate with an Amazon EMR resource. Tags make it easier to associate clusters in various ways, such as grouping clusters to track your Amazon EMR resource allocation costs. For more information, see Tag Clusters.
" + "documentation":"A key-value pair containing user-defined metadata that you can associate with an Amazon EMR resource. Tags make it easier to associate clusters in various ways, such as grouping clusters to track your Amazon EMR resource allocation costs. For more information, see Tag Clusters.
" }, "TagList":{ "type":"list", @@ -4241,7 +4791,7 @@ "members":{ "JobFlowIds":{ "shape":"XmlStringList", - "documentation":"A list of job flows to be shutdown.
" + "documentation":"A list of job flows to be shut down.
" } }, "documentation":"Input to the TerminateJobFlows operation.
" @@ -4278,6 +4828,36 @@ "COUNT_PER_SECOND" ] }, + "UpdateStudioSessionMappingInput":{ + "type":"structure", + "required":[ + "StudioId", + "IdentityType", + "SessionPolicyArn" + ], + "members":{ + "StudioId":{ + "shape":"XmlStringMaxLen256", + "documentation":"The ID of the EMR Studio.
" + }, + "IdentityId":{ + "shape":"XmlStringMaxLen256", + "documentation":"The globally unique identifier (GUID) of the user or group. For more information, see UserId and GroupId in the AWS SSO Identity Store API Reference. Either IdentityName or IdentityId must be specified.
The name of the user or group to update. For more information, see UserName and DisplayName in the AWS SSO Identity Store API Reference. Either IdentityName or IdentityId must be specified.
Specifies whether the identity to update is a user or a group.
" + }, + "SessionPolicyArn":{ + "shape":"XmlStringMaxLen256", + "documentation":"The Amazon Resource Name (ARN) of the session policy to associate with the specified user or group.
" + } + } + }, "VolumeSpecification":{ "type":"structure", "required":[ @@ -4325,5 +4905,5 @@ "member":{"shape":"XmlStringMaxLen256"} } }, - "documentation":"Amazon EMR is a web service that makes it easy to process large amounts of data efficiently. Amazon EMR uses Hadoop processing combined with several AWS products to do tasks such as web indexing, data mining, log file analysis, machine learning, scientific simulation, and data warehousing.
" + "documentation":"Amazon EMR is a web service that makes it easier to process large amounts of data efficiently. Amazon EMR uses Hadoop processing combined with several AWS services to do tasks such as web indexing, data mining, log file analysis, machine learning, scientific simulation, and data warehouse management.
" } diff --git a/services/eventbridge/pom.xml b/services/eventbridge/pom.xml index c95c1308317c..5c317ddc71d2 100644 --- a/services/eventbridge/pom.xml +++ b/services/eventbridge/pom.xml @@ -21,7 +21,7 @@Creates an Amazon Forecast predictor.
In the request, provide a dataset group and either specify an algorithm or let Amazon Forecast choose an algorithm for you using AutoML. If you specify an algorithm, you also can override algorithm-specific hyperparameters.
Amazon Forecast uses the algorithm to train a predictor using the latest version of the datasets in the specified dataset group. You can then generate a forecast using the CreateForecast operation.
To see the evaluation metrics, use the GetAccuracyMetrics operation.
You can specify a featurization configuration to fill and aggregate the data fields in the TARGET_TIME_SERIES dataset to improve model training. For more information, see FeaturizationConfig.
For RELATED_TIME_SERIES datasets, CreatePredictor verifies that the DataFrequency specified when the dataset was created matches the ForecastFrequency. TARGET_TIME_SERIES datasets don't have this restriction. Amazon Forecast also verifies the delimiter and timestamp format. For more information, see howitworks-datasets-groups.
By default, predictors are trained and evaluated at the 0.1 (P10), 0.5 (P50), and 0.9 (P90) quantiles. You can choose custom forecast types to train and evaluate your predictor by setting the ForecastTypes.
AutoML
If you want Amazon Forecast to evaluate each algorithm and choose the one that minimizes the objective function, set PerformAutoML to true. The objective function is defined as the mean of the weighted losses over the forecast types. By default, these are the p10, p50, and p90 quantile losses. For more information, see EvaluationResult.
When AutoML is enabled, the following properties are disallowed:
AlgorithmArn
HPOConfig
PerformHPO
TrainingParameters
To get a list of all of your predictors, use the ListPredictors operation.
Before you can use the predictor to create a forecast, the Status of the predictor must be ACTIVE, signifying that training has completed. To get the status, use the DescribePredictor operation.
Exports backtest forecasts and accuracy metrics generated by the CreatePredictor operation. Two CSV files are exported to a specified S3 bucket.
You must specify a DataDestination object that includes an AWS Identity and Access Management (IAM) role that Amazon Forecast can assume to access the Amazon S3 bucket. For more information, see aws-forecast-iam-roles.
" + }, "DeleteDataset":{ "name":"DeleteDataset", "http":{ @@ -203,6 +220,21 @@ "documentation":"Deletes a predictor created using the CreatePredictor operation. You can delete only predictor that have a status of ACTIVE or CREATE_FAILED. To get the status, use the DescribePredictor operation.
Deletes a predictor backtest export job.
", + "idempotent":true + }, "DescribeDataset":{ "name":"DescribeDataset", "http":{ @@ -293,6 +325,21 @@ "documentation":"Describes a predictor created using the CreatePredictor operation.
In addition to listing the properties provided in the CreatePredictor request, this operation lists the following properties:
DatasetImportJobArns - The dataset import jobs used to import training data.
AutoMLAlgorithmArns - If AutoML is performed, the algorithms that were evaluated.
CreationTime
LastModificationTime
Status
Message - If an error occurred, information about the error.
Describes a predictor backtest export job created using the CreatePredictorBacktestExportJob operation.
In addition to listing the properties provided by the user in the CreatePredictorBacktestExportJob request, this operation lists the following properties:
CreationTime
LastModificationTime
Status
Message (if an error occurred)
Returns a list of forecasts created using the CreateForecast operation. For each forecast, this operation returns a summary of its properties, including its Amazon Resource Name (ARN). To retrieve the complete set of properties, specify the ARN with the DescribeForecast operation. You can filter the list using an array of Filter objects.
", "idempotent":true }, + "ListPredictorBacktestExportJobs":{ + "name":"ListPredictorBacktestExportJobs", + "http":{ + "method":"POST", + "requestUri":"/" + }, + "input":{"shape":"ListPredictorBacktestExportJobsRequest"}, + "output":{"shape":"ListPredictorBacktestExportJobsResponse"}, + "errors":[ + {"shape":"InvalidNextTokenException"}, + {"shape":"InvalidInputException"} + ], + "documentation":"Returns a list of predictor backtest export jobs created using the CreatePredictorBacktestExportJob operation. This operation returns a summary for each backtest export job. You can filter the list using an array of Filter objects.
To retrieve the complete set of properties for a particular backtest export job, use the ARN with the DescribePredictorBacktestExportJob operation.
", + "idempotent":true + }, "ListPredictors":{ "name":"ListPredictors", "http":{ @@ -724,6 +786,38 @@ } } }, + "CreatePredictorBacktestExportJobRequest":{ + "type":"structure", + "required":[ + "PredictorBacktestExportJobName", + "PredictorArn", + "Destination" + ], + "members":{ + "PredictorBacktestExportJobName":{ + "shape":"Name", + "documentation":"The name for the backtest export job.
" + }, + "PredictorArn":{ + "shape":"Arn", + "documentation":"The Amazon Resource Name (ARN) of the predictor that you want to export.
" + }, + "Destination":{"shape":"DataDestination"}, + "Tags":{ + "shape":"Tags", + "documentation":"Optional metadata to help you categorize and organize your backtests. Each tag consists of a key and an optional value, both of which you define. Tag keys and values are case sensitive.
The following restrictions apply to tags:
For each resource, each tag key must be unique and each tag key must have one value.
Maximum number of tags per resource: 50.
Maximum key length: 128 Unicode characters in UTF-8.
Maximum value length: 256 Unicode characters in UTF-8.
Accepted characters: all letters and numbers, spaces representable in UTF-8, and + - = . _ : / @. If your tagging schema is used across other services and resources, the character restrictions of those services also apply.
Key prefixes cannot include any upper or lowercase combination of aws: or AWS:. Values can have this prefix. If a tag value has aws as its prefix but the key does not, Forecast considers it to be a user tag and will count against the limit of 50 tags. Tags with only the key prefix of aws do not count against your tags per resource limit. You cannot edit or delete tag keys with this prefix.
The Amazon Resource Name (ARN) of the predictor backtest export job that you want to export.
" + } + } + }, "CreatePredictorRequest":{ "type":"structure", "required":[ @@ -805,7 +899,7 @@ "documentation":"The path to an Amazon Simple Storage Service (Amazon S3) bucket along with the credentials to access the bucket.
" } }, - "documentation":"The destination for an exported forecast, an AWS Identity and Access Management (IAM) role that allows Amazon Forecast to access the location and, optionally, an AWS Key Management Service (KMS) key. This object is submitted in the CreateForecastExportJob request.
" + "documentation":"The destination for an export job, an AWS Identity and Access Management (IAM) role that allows Amazon Forecast to access the location and, optionally, an AWS Key Management Service (KMS) key.
" }, "DataSource":{ "type":"structure", @@ -974,6 +1068,16 @@ } } }, + "DeletePredictorBacktestExportJobRequest":{ + "type":"structure", + "required":["PredictorBacktestExportJobArn"], + "members":{ + "PredictorBacktestExportJobArn":{ + "shape":"Arn", + "documentation":"The Amazon Resource Name (ARN) of the predictor backtest export job to delete.
" + } + } + }, "DeletePredictorRequest":{ "type":"structure", "required":["PredictorArn"], @@ -1239,6 +1343,50 @@ } } }, + "DescribePredictorBacktestExportJobRequest":{ + "type":"structure", + "required":["PredictorBacktestExportJobArn"], + "members":{ + "PredictorBacktestExportJobArn":{ + "shape":"Arn", + "documentation":"The Amazon Resource Name (ARN) of the predictor backtest export job.
" + } + } + }, + "DescribePredictorBacktestExportJobResponse":{ + "type":"structure", + "members":{ + "PredictorBacktestExportJobArn":{ + "shape":"Arn", + "documentation":"The Amazon Resource Name (ARN) of the predictor backtest export job.
" + }, + "PredictorBacktestExportJobName":{ + "shape":"Name", + "documentation":"The name of the predictor backtest export job.
" + }, + "PredictorArn":{ + "shape":"Arn", + "documentation":"The Amazon Resource Name (ARN) of the predictor.
" + }, + "Destination":{"shape":"DataDestination"}, + "Message":{ + "shape":"Message", + "documentation":"Information about any errors that may have occurred during the backtest export.
" + }, + "Status":{ + "shape":"Status", + "documentation":"The status of the predictor backtest export job. States include:
ACTIVE
CREATE_PENDING
CREATE_IN_PROGRESS
CREATE_FAILED
DELETE_PENDING
DELETE_IN_PROGRESS
DELETE_FAILED
When the predictor backtest export job was created.
" + }, + "LastModificationTime":{ + "shape":"Timestamp", + "documentation":"When the last successful export job finished.
" + } + } + }, "DescribePredictorRequest":{ "type":"structure", "required":["PredictorArn"], @@ -1371,7 +1519,7 @@ "members":{ "ForecastType":{ "shape":"ForecastType", - "documentation":"Forecast types can be quantiles from 0.01 to 0.99 (by increments of 0.01), and the mean.
" + "documentation":"The Forecast type used to compute WAPE and RMSE.
" }, "WAPE":{ "shape":"Double", @@ -1883,6 +2031,36 @@ } } }, + "ListPredictorBacktestExportJobsRequest":{ + "type":"structure", + "members":{ + "NextToken":{ + "shape":"NextToken", + "documentation":"If the result of the previous request was truncated, the response includes a NextToken. To retrieve the next set of results, use the token in the next request. Tokens expire after 24 hours.
" + }, + "MaxResults":{ + "shape":"MaxResults", + "documentation":"The number of items to return in the response.
" + }, + "Filters":{ + "shape":"Filters", + "documentation":"An array of filters. For each filter, provide a condition and a match statement. The condition is either IS or IS_NOT, which specifies whether to include or exclude the predictor backtest export jobs that match the statement from the list. The match statement consists of a key and a value.
Filter properties
Condition - The condition to apply. Valid values are IS and IS_NOT. To include the predictor backtest export jobs that match the statement, specify IS. To exclude matching predictor backtest export jobs, specify IS_NOT.
Key - The name of the parameter to filter on. Valid values are PredictorBacktestExportJobArn and Status.
Value - The value to match.
An array of objects that summarize the properties of each predictor backtest export job.
" + }, + "NextToken":{ + "shape":"NextToken", + "documentation":"Returns this token if the response is truncated. To retrieve the next set of results, use the token in the next request.
" + } + } + }, "ListPredictorsRequest":{ "type":"structure", "members":{ @@ -1997,6 +2175,41 @@ "max":256, "pattern":"^[a-zA-Z0-9\\-\\_\\.\\/\\[\\]\\,\\\"\\\\\\s]+$" }, + "PredictorBacktestExportJobSummary":{ + "type":"structure", + "members":{ + "PredictorBacktestExportJobArn":{ + "shape":"Arn", + "documentation":"The Amazon Resource Name (ARN) of the predictor backtest export job.
" + }, + "PredictorBacktestExportJobName":{ + "shape":"Name", + "documentation":"The name of the predictor backtest export job.
" + }, + "Destination":{"shape":"DataDestination"}, + "Status":{ + "shape":"Status", + "documentation":"The status of the predictor backtest export job. States include:
ACTIVE
CREATE_PENDING
CREATE_IN_PROGRESS
CREATE_FAILED
DELETE_PENDING
DELETE_IN_PROGRESS
DELETE_FAILED
Information about any errors that may have occurred during the backtest export.
" + }, + "CreationTime":{ + "shape":"Timestamp", + "documentation":"When the predictor backtest export job was created.
" + }, + "LastModificationTime":{ + "shape":"Timestamp", + "documentation":"When the last successful export job finished.
" + } + }, + "documentation":"Provides a summary of the predictor backtest export job properties used in the ListPredictorBacktestExportJobs operation. To get a complete set of properties, call the DescribePredictorBacktestExportJob operation, and provide the listed PredictorBacktestExportJobArn.
The Amazon Resource Name (ARN) of an AWS Key Management Service (KMS) key.
" } }, - "documentation":"The path to the file(s) in an Amazon Simple Storage Service (Amazon S3) bucket, and an AWS Identity and Access Management (IAM) role that Amazon Forecast can assume to access the file(s). Optionally, includes an AWS Key Management Service (KMS) key. This object is part of the DataSource object that is submitted in the CreateDatasetImportJob request, and part of the DataDestination object that is submitted in the CreateForecastExportJob request.
" + "documentation":"The path to the file(s) in an Amazon Simple Storage Service (Amazon S3) bucket, and an AWS Identity and Access Management (IAM) role that Amazon Forecast can assume to access the file(s). Optionally, includes an AWS Key Management Service (KMS) key. This object is part of the DataSource object that is submitted in the CreateDatasetImportJob request, and part of the DataDestination object.
" }, "S3Path":{ "type":"string", diff --git a/services/forecastquery/pom.xml b/services/forecastquery/pom.xml index 97605c7ae216..1fb91c06b4aa 100644 --- a/services/forecastquery/pom.xml +++ b/services/forecastquery/pom.xml @@ -21,7 +21,7 @@Creates a new partition.
" }, + "CreatePartitionIndex":{ + "name":"CreatePartitionIndex", + "http":{ + "method":"POST", + "requestUri":"/" + }, + "input":{"shape":"CreatePartitionIndexRequest"}, + "output":{"shape":"CreatePartitionIndexResponse"}, + "errors":[ + {"shape":"AlreadyExistsException"}, + {"shape":"InvalidInputException"}, + {"shape":"EntityNotFoundException"}, + {"shape":"ResourceNumberLimitExceededException"}, + {"shape":"InternalServiceException"}, + {"shape":"OperationTimeoutException"}, + {"shape":"GlueEncryptionException"} + ], + "documentation":"Creates a specified partition index in an existing table.
" + }, "CreateRegistry":{ "name":"CreateRegistry", "http":{ @@ -691,6 +710,24 @@ ], "documentation":"Deletes a specified partition.
" }, + "DeletePartitionIndex":{ + "name":"DeletePartitionIndex", + "http":{ + "method":"POST", + "requestUri":"/" + }, + "input":{"shape":"DeletePartitionIndexRequest"}, + "output":{"shape":"DeletePartitionIndexResponse"}, + "errors":[ + {"shape":"InternalServiceException"}, + {"shape":"OperationTimeoutException"}, + {"shape":"InvalidInputException"}, + {"shape":"EntityNotFoundException"}, + {"shape":"ConflictException"}, + {"shape":"GlueEncryptionException"} + ], + "documentation":"Deletes a specified partition index from an existing table.
" + }, "DeleteRegistry":{ "name":"DeleteRegistry", "http":{ @@ -2603,6 +2640,38 @@ "exception":true }, "AttemptCount":{"type":"integer"}, + "BackfillError":{ + "type":"structure", + "members":{ + "Code":{ + "shape":"BackfillErrorCode", + "documentation":"The error code for an error that occurred when registering partition indexes for an existing table.
" + }, + "Partitions":{ + "shape":"BackfillErroredPartitionsList", + "documentation":"A list of a limited number of partitions in the response.
" + } + }, + "documentation":"A list of errors that can occur when registering partition indexes for an existing table.
These errors give the details about why an index registration failed and provide a limited number of partitions in the response, so that you can fix the partitions at fault and try registering the index again. The most common set of errors that can occur are categorized as follows:
EncryptedPartitionError: The partitions are encrypted.
InvalidPartitionTypeDataError: The partition value doesn't match the data type for that partition column.
MissingPartitionValueError: The partitions are encrypted.
UnsupportedPartitionCharacterError: Characters inside the partition value are not supported. For example: U+0000 , U+0001, U+0002.
InternalError: Any error which does not belong to other error codes.
The policy that specifies update and delete behaviors for the crawler.
" }, + "LineageConfiguration":{ + "shape":"LineageConfiguration", + "documentation":"A configuration that specifies whether data lineage is enabled for the crawler.
" + }, "State":{ "shape":"CrawlerState", "documentation":"Indicates whether the crawler is running, or whether a run is pending.
" @@ -3999,6 +4072,13 @@ "documentation":"Specifies a crawler program that examines a data source and uses classifiers to try to determine its schema. If successful, the crawler records metadata concerning the data source in the AWS Glue Data Catalog.
" }, "CrawlerConfiguration":{"type":"string"}, + "CrawlerLineageSettings":{ + "type":"string", + "enum":[ + "ENABLE", + "DISABLE" + ] + }, "CrawlerList":{ "type":"list", "member":{"shape":"Crawler"} @@ -4226,6 +4306,10 @@ "shape":"RecrawlPolicy", "documentation":"A policy that specifies whether to crawl the entire dataset again, or to crawl only folders that were added since the last crawler run.
" }, + "LineageConfiguration":{ + "shape":"LineageConfiguration", + "documentation":"Specifies data lineage configuration settings for the crawler.
" + }, "Configuration":{ "shape":"CrawlerConfiguration", "documentation":"Crawler configuration information. This versioned JSON string allows users to specify aspects of a crawler's behavior. For more information, see Configuring a Crawler.
" @@ -4663,6 +4747,37 @@ } } }, + "CreatePartitionIndexRequest":{ + "type":"structure", + "required":[ + "DatabaseName", + "TableName", + "PartitionIndex" + ], + "members":{ + "CatalogId":{ + "shape":"CatalogIdString", + "documentation":"The catalog ID where the table resides.
" + }, + "DatabaseName":{ + "shape":"NameString", + "documentation":"Specifies the name of a database in which you want to create a partition index.
" + }, + "TableName":{ + "shape":"NameString", + "documentation":"Specifies the name of a table in which you want to create a partition index.
" + }, + "PartitionIndex":{ + "shape":"PartitionIndex", + "documentation":"Specifies a PartitionIndex structure to create a partition index in an existing table.
The catalog ID where the table resides.
" + }, + "DatabaseName":{ + "shape":"NameString", + "documentation":"Specifies the name of a database from which you want to delete a partition index.
" + }, + "TableName":{ + "shape":"NameString", + "documentation":"Specifies the name of a table from which you want to delete a partition index.
" + }, + "IndexName":{ + "shape":"NameString", + "documentation":"The name of the partition index to be deleted.
" + } + } + }, + "DeletePartitionIndexResponse":{ + "type":"structure", + "members":{ + } + }, "DeletePartitionRequest":{ "type":"structure", "required":[ @@ -8712,6 +8858,16 @@ ] }, "LatestSchemaVersionBoolean":{"type":"boolean"}, + "LineageConfiguration":{ + "type":"structure", + "members":{ + "CrawlerLineageSettings":{ + "shape":"CrawlerLineageSettings", + "documentation":"Specifies whether data lineage is enabled for the crawler. Valid values are:
ENABLE: enables data lineage for the crawler
DISABLE: disables data lineage for the crawler
Specifies data lineage configuration settings for the crawler.
" + }, "ListCrawlersRequest":{ "type":"structure", "members":{ @@ -9570,7 +9726,11 @@ }, "IndexStatus":{ "shape":"PartitionIndexStatus", - "documentation":"The status of the partition index.
" + "documentation":"The status of the partition index.
The possible statuses are:
CREATING: The index is being created. When an index is in a CREATING state, the index or its table cannot be deleted.
ACTIVE: The index creation succeeds.
FAILED: The index creation fails.
DELETING: The index is deleted from the list of indexes.
A list of errors that can occur when registering partition indexes for an existing table.
" } }, "documentation":"A descriptor for a partition index in a table.
" @@ -9586,7 +9746,12 @@ }, "PartitionIndexStatus":{ "type":"string", - "enum":["ACTIVE"] + "enum":[ + "CREATING", + "ACTIVE", + "DELETING", + "FAILED" + ] }, "PartitionInput":{ "type":"structure", @@ -11990,6 +12155,10 @@ "shape":"RecrawlPolicy", "documentation":"A policy that specifies whether to crawl the entire dataset again, or to crawl only folders that were added since the last crawler run.
" }, + "LineageConfiguration":{ + "shape":"LineageConfiguration", + "documentation":"Specifies data lineage configuration settings for the crawler.
" + }, "Configuration":{ "shape":"CrawlerConfiguration", "documentation":"Crawler configuration information. This versioned JSON string allows users to specify aspects of a crawler's behavior. For more information, see Configuring a Crawler.
" diff --git a/services/greengrass/pom.xml b/services/greengrass/pom.xml index b3c3001536ba..a1c4d7cfebc7 100644 --- a/services/greengrass/pom.xml +++ b/services/greengrass/pom.xml @@ -21,7 +21,7 @@The location of the OTA update.
" }, "FileName":{"type":"string"}, + "FileType":{ + "type":"integer", + "max":255, + "min":0 + }, "FindingId":{ "type":"string", "max":128, @@ -12638,6 +12643,10 @@ "shape":"FileName", "documentation":"The name of the file.
" }, + "fileType":{ + "shape":"FileType", + "documentation":"An integer value you can include in the job document to allow your devices to identify the type of file received from the cloud.
" + }, "fileVersion":{ "shape":"OTAUpdateFileVersion", "documentation":"The file version.
" diff --git a/services/iot1clickdevices/pom.xml b/services/iot1clickdevices/pom.xml index 13a762899db1..7c961a42b559 100644 --- a/services/iot1clickdevices/pom.xml +++ b/services/iot1clickdevices/pom.xml @@ -21,7 +21,7 @@The state of the cluster. The possible states are CREATING, ACTIVE, and FAILED.
\n " + "documentation": "\nThe state of the cluster. The possible states are ACTIVE, CREATING, DELETING, FAILED, MAINTENANCE, REBOOTING_BROKER, and UPDATING.
\n " }, "StateInfo" : { "shape" : "StateInfo", @@ -1529,9 +1529,11 @@ "enum": [ "ACTIVE", "CREATING", - "UPDATING", "DELETING", - "FAILED" + "FAILED", + "MAINTENANCE", + "REBOOTING_BROKER", + "UPDATING" ] }, "CompatibleKafkaVersion" : { @@ -1755,7 +1757,7 @@ "State": { "shape": "ClusterState", "locationName": "state", - "documentation": "\nThe state of the cluster. The possible states are CREATING, ACTIVE, and FAILED.
\n " + "documentation": "\nThe state of the cluster. The possible states are ACTIVE, CREATING, DELETING, FAILED, MAINTENANCE, REBOOTING_BROKER, and UPDATING.
\n " } } }, @@ -1849,7 +1851,7 @@ "State": { "shape": "ClusterState", "locationName": "state", - "documentation": "\nThe state of the cluster. The possible states are CREATING, ACTIVE, and FAILED.
\n " + "documentation": "\nThe state of the cluster. The possible states are ACTIVE, CREATING, DELETING, FAILED, MAINTENANCE, REBOOTING_BROKER, and UPDATING.
\n " } } }, diff --git a/services/kendra/pom.xml b/services/kendra/pom.xml index c8f571eaf512..4ca8f5d95ce4 100644 --- a/services/kendra/pom.xml +++ b/services/kendra/pom.xml @@ -21,7 +21,7 @@Creates an alias for a Lambda function version. Use aliases to provide clients with a function identifier that you can update to invoke a different version.
You can also map an alias to split invocation requests between two versions. Use the RoutingConfig parameter to specify a second version and the percentage of invocation requests that it receives.
Creates a code signing configuration. A code signing configuration defines a list of allowed signing profiles and defines the code-signing validation policy (action to be taken if deployment validation checks fail).
" + }, "CreateEventSourceMapping":{ "name":"CreateEventSourceMapping", "http":{ @@ -101,9 +116,12 @@ {"shape":"ResourceNotFoundException"}, {"shape":"ResourceConflictException"}, {"shape":"TooManyRequestsException"}, - {"shape":"CodeStorageExceededException"} + {"shape":"CodeStorageExceededException"}, + {"shape":"CodeVerificationFailedException"}, + {"shape":"InvalidCodeSignatureException"}, + {"shape":"CodeSigningConfigNotFoundException"} ], - "documentation":"Creates a Lambda function. To create a function, you need a deployment package and an execution role. The deployment package contains your function code. The execution role grants the function permission to use AWS services, such as Amazon CloudWatch Logs for log streaming and AWS X-Ray for request tracing.
When you create a function, Lambda provisions an instance of the function and its supporting resources. If your function connects to a VPC, this process can take a minute or so. During this time, you can't invoke or modify the function. The State, StateReason, and StateReasonCode fields in the response from GetFunctionConfiguration indicate when the function is ready to invoke. For more information, see Function States.
A function has an unpublished version, and can have published versions and aliases. The unpublished version changes when you update your function's code and configuration. A published version is a snapshot of your function code and configuration that can't be changed. An alias is a named resource that maps to a version, and can be changed to map to a different version. Use the Publish parameter to create version 1 of your function from its initial configuration.
The other parameters let you configure version-specific and function-level settings. You can modify version-specific settings later with UpdateFunctionConfiguration. Function-level settings apply to both the unpublished and published versions of the function, and include tags (TagResource) and per-function concurrency limits (PutFunctionConcurrency).
If another account or an AWS service invokes your function, use AddPermission to grant permission by creating a resource-based IAM policy. You can grant permissions at the function level, on a version, or on an alias.
To invoke your function directly, use Invoke. To invoke your function in response to events in other AWS services, create an event source mapping (CreateEventSourceMapping), or configure a function trigger in the other service. For more information, see Invoking Functions.
" + "documentation":"Creates a Lambda function. To create a function, you need a deployment package and an execution role. The deployment package contains your function code. The execution role grants the function permission to use AWS services, such as Amazon CloudWatch Logs for log streaming and AWS X-Ray for request tracing.
When you create a function, Lambda provisions an instance of the function and its supporting resources. If your function connects to a VPC, this process can take a minute or so. During this time, you can't invoke or modify the function. The State, StateReason, and StateReasonCode fields in the response from GetFunctionConfiguration indicate when the function is ready to invoke. For more information, see Function States.
A function has an unpublished version, and can have published versions and aliases. The unpublished version changes when you update your function's code and configuration. A published version is a snapshot of your function code and configuration that can't be changed. An alias is a named resource that maps to a version, and can be changed to map to a different version. Use the Publish parameter to create version 1 of your function from its initial configuration.
The other parameters let you configure version-specific and function-level settings. You can modify version-specific settings later with UpdateFunctionConfiguration. Function-level settings apply to both the unpublished and published versions of the function, and include tags (TagResource) and per-function concurrency limits (PutFunctionConcurrency).
To enable code signing for this function, specify the ARN of a code-signing configuration. When a user attempts to deploy a code package with UpdateFunctionCode, Lambda checks that the code package has a valid signature from a trusted publisher. The code-signing configuration includes set set of signing profiles, which define the trusted publishers for this function.
If another account or an AWS service invokes your function, use AddPermission to grant permission by creating a resource-based IAM policy. You can grant permissions at the function level, on a version, or on an alias.
To invoke your function directly, use Invoke. To invoke your function in response to events in other AWS services, create an event source mapping (CreateEventSourceMapping), or configure a function trigger in the other service. For more information, see Invoking Functions.
" }, "DeleteAlias":{ "name":"DeleteAlias", @@ -121,6 +139,23 @@ ], "documentation":"Deletes a Lambda function alias.
" }, + "DeleteCodeSigningConfig":{ + "name":"DeleteCodeSigningConfig", + "http":{ + "method":"DELETE", + "requestUri":"/2020-04-22/code-signing-configs/{CodeSigningConfigArn}", + "responseCode":204 + }, + "input":{"shape":"DeleteCodeSigningConfigRequest"}, + "output":{"shape":"DeleteCodeSigningConfigResponse"}, + "errors":[ + {"shape":"ServiceException"}, + {"shape":"InvalidParameterValueException"}, + {"shape":"ResourceNotFoundException"}, + {"shape":"ResourceConflictException"} + ], + "documentation":"Deletes the code signing configuration. You can delete the code signing configuration only if no function is using it.
" + }, "DeleteEventSourceMapping":{ "name":"DeleteEventSourceMapping", "http":{ @@ -156,6 +191,24 @@ ], "documentation":"Deletes a Lambda function. To delete a specific function version, use the Qualifier parameter. Otherwise, all versions and aliases are deleted.
To delete Lambda event source mappings that invoke a function, use DeleteEventSourceMapping. For AWS services and resources that invoke your function directly, delete the trigger in the service where you originally configured it.
" }, + "DeleteFunctionCodeSigningConfig":{ + "name":"DeleteFunctionCodeSigningConfig", + "http":{ + "method":"DELETE", + "requestUri":"/2020-06-30/functions/{FunctionName}/code-signing-config", + "responseCode":204 + }, + "input":{"shape":"DeleteFunctionCodeSigningConfigRequest"}, + "errors":[ + {"shape":"InvalidParameterValueException"}, + {"shape":"CodeSigningConfigNotFoundException"}, + {"shape":"ResourceNotFoundException"}, + {"shape":"ServiceException"}, + {"shape":"TooManyRequestsException"}, + {"shape":"ResourceConflictException"} + ], + "documentation":"Removes the code signing configuration from the function.
" + }, "DeleteFunctionConcurrency":{ "name":"DeleteFunctionConcurrency", "http":{ @@ -252,6 +305,22 @@ ], "documentation":"Returns details about a Lambda function alias.
" }, + "GetCodeSigningConfig":{ + "name":"GetCodeSigningConfig", + "http":{ + "method":"GET", + "requestUri":"/2020-04-22/code-signing-configs/{CodeSigningConfigArn}", + "responseCode":200 + }, + "input":{"shape":"GetCodeSigningConfigRequest"}, + "output":{"shape":"GetCodeSigningConfigResponse"}, + "errors":[ + {"shape":"ServiceException"}, + {"shape":"InvalidParameterValueException"}, + {"shape":"ResourceNotFoundException"} + ], + "documentation":"Returns information about the specified code signing configuration.
" + }, "GetEventSourceMapping":{ "name":"GetEventSourceMapping", "http":{ @@ -286,6 +355,23 @@ ], "documentation":"Returns information about the function or function version, with a link to download the deployment package that's valid for 10 minutes. If you specify a function version, only details that are specific to that version are returned.
" }, + "GetFunctionCodeSigningConfig":{ + "name":"GetFunctionCodeSigningConfig", + "http":{ + "method":"GET", + "requestUri":"/2020-06-30/functions/{FunctionName}/code-signing-config", + "responseCode":200 + }, + "input":{"shape":"GetFunctionCodeSigningConfigRequest"}, + "output":{"shape":"GetFunctionCodeSigningConfigResponse"}, + "errors":[ + {"shape":"InvalidParameterValueException"}, + {"shape":"ResourceNotFoundException"}, + {"shape":"ServiceException"}, + {"shape":"TooManyRequestsException"} + ], + "documentation":"Returns the code signing configuration for the specified function.
" + }, "GetFunctionConcurrency":{ "name":"GetFunctionConcurrency", "http":{ @@ -497,6 +583,21 @@ ], "documentation":"Returns a list of aliases for a Lambda function.
" }, + "ListCodeSigningConfigs":{ + "name":"ListCodeSigningConfigs", + "http":{ + "method":"GET", + "requestUri":"/2020-04-22/code-signing-configs/", + "responseCode":200 + }, + "input":{"shape":"ListCodeSigningConfigsRequest"}, + "output":{"shape":"ListCodeSigningConfigsResponse"}, + "errors":[ + {"shape":"ServiceException"}, + {"shape":"InvalidParameterValueException"} + ], + "documentation":"Returns a list of code signing configurations for the specified function. A request returns up to 10,000 configurations per call. You can use the MaxItems parameter to return fewer configurations per call.
Returns a list of Lambda functions, with the version-specific configuration of each. Lambda returns up to 50 functions per call.
Set FunctionVersion to ALL to include all published versions of each function in addition to the unpublished version. To get more information about a function or version, use GetFunction.
List the functions that use the specified code signing configuration. You can use this method prior to deleting a code signing configuration, to verify that no functions are using it.
" + }, "ListLayerVersions":{ "name":"ListLayerVersions", "http":{ @@ -668,6 +785,25 @@ ], "documentation":"Creates a version from the current code and configuration of a function. Use versions to create a snapshot of your function code and configuration that doesn't change.
AWS Lambda doesn't publish a version if the function's configuration and code haven't changed since the last version. Use UpdateFunctionCode or UpdateFunctionConfiguration to update the function before publishing a version.
Clients can invoke versions directly or with an alias. To create an alias, use CreateAlias.
" }, + "PutFunctionCodeSigningConfig":{ + "name":"PutFunctionCodeSigningConfig", + "http":{ + "method":"PUT", + "requestUri":"/2020-06-30/functions/{FunctionName}/code-signing-config", + "responseCode":200 + }, + "input":{"shape":"PutFunctionCodeSigningConfigRequest"}, + "output":{"shape":"PutFunctionCodeSigningConfigResponse"}, + "errors":[ + {"shape":"ServiceException"}, + {"shape":"InvalidParameterValueException"}, + {"shape":"ResourceNotFoundException"}, + {"shape":"TooManyRequestsException"}, + {"shape":"ResourceConflictException"}, + {"shape":"CodeSigningConfigNotFoundException"} + ], + "documentation":"Update the code signing configuration for the function. Changes to the code signing configuration take effect the next time a user tries to deploy a code package to the function.
" + }, "PutFunctionConcurrency":{ "name":"PutFunctionConcurrency", "http":{ @@ -808,6 +944,22 @@ ], "documentation":"Updates the configuration of a Lambda function alias.
" }, + "UpdateCodeSigningConfig":{ + "name":"UpdateCodeSigningConfig", + "http":{ + "method":"PUT", + "requestUri":"/2020-04-22/code-signing-configs/{CodeSigningConfigArn}", + "responseCode":200 + }, + "input":{"shape":"UpdateCodeSigningConfigRequest"}, + "output":{"shape":"UpdateCodeSigningConfigResponse"}, + "errors":[ + {"shape":"ServiceException"}, + {"shape":"InvalidParameterValueException"}, + {"shape":"ResourceNotFoundException"} + ], + "documentation":"Update the code signing configuration. Changes to the code signing configuration take effect the next time a user tries to deploy a code package to the function.
" + }, "UpdateEventSourceMapping":{ "name":"UpdateEventSourceMapping", "http":{ @@ -843,9 +995,12 @@ {"shape":"TooManyRequestsException"}, {"shape":"CodeStorageExceededException"}, {"shape":"PreconditionFailedException"}, - {"shape":"ResourceConflictException"} + {"shape":"ResourceConflictException"}, + {"shape":"CodeVerificationFailedException"}, + {"shape":"InvalidCodeSignatureException"}, + {"shape":"CodeSigningConfigNotFoundException"} ], - "documentation":"Updates a Lambda function's code.
The function's code is locked when you publish a version. You can't modify the code of a published version, only the unpublished version.
" + "documentation":"Updates a Lambda function's code. If code signing is enabled for the function, the code package must be signed by a trusted publisher. For more information, see Configuring code signing.
The function's code is locked when you publish a version. You can't modify the code of a published version, only the unpublished version.
" }, "UpdateFunctionConfiguration":{ "name":"UpdateFunctionConfiguration", @@ -862,7 +1017,10 @@ {"shape":"InvalidParameterValueException"}, {"shape":"TooManyRequestsException"}, {"shape":"ResourceConflictException"}, - {"shape":"PreconditionFailedException"} + {"shape":"PreconditionFailedException"}, + {"shape":"CodeVerificationFailedException"}, + {"shape":"InvalidCodeSignatureException"}, + {"shape":"CodeSigningConfigNotFoundException"} ], "documentation":"Modify the version-specific settings of a Lambda function.
When you update a function, Lambda provisions an instance of the function and its supporting resources. If your function connects to a VPC, this process can take a minute. During this time, you can't modify the function, but you can still invoke it. The LastUpdateStatus, LastUpdateStatusReason, and LastUpdateStatusReasonCode fields in the response from GetFunctionConfiguration indicate when the update is complete and the function is processing events with the new configuration. For more information, see Function States.
These settings can vary between versions of a function and are locked when you publish a version. You can't modify the configuration of a published version, only the unpublished version.
To configure function concurrency, use PutFunctionConcurrency. To grant invoke permissions to an account or AWS service, use AddPermission.
" }, @@ -1109,6 +1267,17 @@ }, "documentation":"The traffic-shifting configuration of a Lambda function alias.
" }, + "AllowedPublishers":{ + "type":"structure", + "required":["SigningProfileVersionArns"], + "members":{ + "SigningProfileVersionArns":{ + "shape":"SigningProfileVersionArns", + "documentation":"The Amazon Resource Name (ARN) for each of the signing profiles. A signing profile defines a trusted user who can sign a code package.
" + } + }, + "documentation":"List of signing profiles that can sign a code package.
" + }, "Arn":{ "type":"string", "pattern":"arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\\-])+:([a-z]{2}(-gov)?-[a-z]+-\\d{1})?:(\\d{12})?:(.*)" @@ -1128,6 +1297,83 @@ "streaming":true }, "Boolean":{"type":"boolean"}, + "CodeSigningConfig":{ + "type":"structure", + "required":[ + "CodeSigningConfigId", + "CodeSigningConfigArn", + "AllowedPublishers", + "CodeSigningPolicies", + "LastModified" + ], + "members":{ + "CodeSigningConfigId":{ + "shape":"CodeSigningConfigId", + "documentation":"Unique identifer for the Code signing configuration.
" + }, + "CodeSigningConfigArn":{ + "shape":"CodeSigningConfigArn", + "documentation":"The Amazon Resource Name (ARN) of the Code signing configuration.
" + }, + "Description":{ + "shape":"Description", + "documentation":"Code signing configuration description.
" + }, + "AllowedPublishers":{ + "shape":"AllowedPublishers", + "documentation":"List of allowed publishers.
" + }, + "CodeSigningPolicies":{ + "shape":"CodeSigningPolicies", + "documentation":"The code signing policy controls the validation failure action for signature mismatch or expiry.
" + }, + "LastModified":{ + "shape":"Timestamp", + "documentation":"The date and time that the Code signing configuration was last modified, in ISO-8601 format (YYYY-MM-DDThh:mm:ss.sTZD).
" + } + }, + "documentation":"Details about a Code signing configuration.
" + }, + "CodeSigningConfigArn":{ + "type":"string", + "max":200, + "pattern":"arn:(aws[a-zA-Z-]*)?:lambda:[a-z]{2}((-gov)|(-iso(b?)))?-[a-z]+-\\d{1}:\\d{12}:code-signing-config:csc-[a-z0-9]{17}" + }, + "CodeSigningConfigId":{ + "type":"string", + "pattern":"csc-[a-zA-Z0-9-_\\.]{17}" + }, + "CodeSigningConfigList":{ + "type":"list", + "member":{"shape":"CodeSigningConfig"} + }, + "CodeSigningConfigNotFoundException":{ + "type":"structure", + "members":{ + "Type":{"shape":"String"}, + "Message":{"shape":"String"} + }, + "documentation":"The specified code signing configuration does not exist.
", + "error":{"httpStatusCode":404}, + "exception":true + }, + "CodeSigningPolicies":{ + "type":"structure", + "members":{ + "UntrustedArtifactOnDeployment":{ + "shape":"CodeSigningPolicy", + "documentation":"Code signing configuration policy for deployment validation failure. If you set the policy to Enforce, Lambda blocks the deployment request if code-signing validation checks fail. If you set the policy to Warn, Lambda allows the deployment and creates a CloudWatch log.
Default value: Warn
Code signing configuration policies specifies the validation failure action for signature mismatch or expiry.
" + }, + "CodeSigningPolicy":{ + "type":"string", + "enum":[ + "Warn", + "Enforce" + ] + }, "CodeStorageExceededException":{ "type":"structure", "members":{ @@ -1141,10 +1387,20 @@ "error":{"httpStatusCode":400}, "exception":true }, + "CodeVerificationFailedException":{ + "type":"structure", + "members":{ + "Type":{"shape":"String"}, + "Message":{"shape":"String"} + }, + "documentation":"The code signature failed one or more of the validation checks for signature mismatch or expiry, and the code signing policy is set to ENFORCE. Lambda blocks the deployment.
", + "error":{"httpStatusCode":400}, + "exception":true + }, "CompatibleRuntimes":{ "type":"list", "member":{"shape":"Runtime"}, - "max":5 + "max":15 }, "Concurrency":{ "type":"structure", @@ -1187,6 +1443,34 @@ } } }, + "CreateCodeSigningConfigRequest":{ + "type":"structure", + "required":["AllowedPublishers"], + "members":{ + "Description":{ + "shape":"Description", + "documentation":"Descriptive name for this code signing configuration.
" + }, + "AllowedPublishers":{ + "shape":"AllowedPublishers", + "documentation":"Signing profiles for this code signing configuration.
" + }, + "CodeSigningPolicies":{ + "shape":"CodeSigningPolicies", + "documentation":"The code signing policies define the actions to take if the validation checks fail.
" + } + } + }, + "CreateCodeSigningConfigResponse":{ + "type":"structure", + "required":["CodeSigningConfig"], + "members":{ + "CodeSigningConfig":{ + "shape":"CodeSigningConfig", + "documentation":"The code signing configuration.
" + } + } + }, "CreateEventSourceMappingRequest":{ "type":"structure", "required":[ @@ -1333,6 +1617,10 @@ "FileSystemConfigs":{ "shape":"FileSystemConfigList", "documentation":"Connection settings for an Amazon EFS file system.
" + }, + "CodeSigningConfigArn":{ + "shape":"CodeSigningConfigArn", + "documentation":"To enable code signing for this function, specify the ARN of a code-signing configuration. A code-signing configuration includes set set of signing profiles, which define the trusted publishers for this function.
" } } }, @@ -1368,6 +1656,23 @@ } } }, + "DeleteCodeSigningConfigRequest":{ + "type":"structure", + "required":["CodeSigningConfigArn"], + "members":{ + "CodeSigningConfigArn":{ + "shape":"CodeSigningConfigArn", + "documentation":"The The Amazon Resource Name (ARN) of the code signing configuration.
", + "location":"uri", + "locationName":"CodeSigningConfigArn" + } + } + }, + "DeleteCodeSigningConfigResponse":{ + "type":"structure", + "members":{ + } + }, "DeleteEventSourceMappingRequest":{ "type":"structure", "required":["UUID"], @@ -1380,6 +1685,18 @@ } } }, + "DeleteFunctionCodeSigningConfigRequest":{ + "type":"structure", + "required":["FunctionName"], + "members":{ + "FunctionName":{ + "shape":"FunctionName", + "documentation":"The name of the Lambda function.
Name formats
Function name - MyFunction.
Function ARN - arn:aws:lambda:us-west-2:123456789012:function:MyFunction.
Partial ARN - 123456789012:function:MyFunction.
The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", + "location":"uri", + "locationName":"FunctionName" + } + } + }, "DeleteFunctionConcurrencyRequest":{ "type":"structure", "required":["FunctionName"], @@ -1762,6 +2079,10 @@ "type":"string", "pattern":"arn:(aws[a-zA-Z-]*)?:lambda:[a-z]{2}(-gov)?-[a-z]+-\\d{1}:\\d{12}:function:[a-zA-Z0-9-_]+(:(\\$LATEST|[a-zA-Z0-9-_]+))?" }, + "FunctionArnList":{ + "type":"list", + "member":{"shape":"FunctionArn"} + }, "FunctionCode":{ "type":"structure", "members":{ @@ -1908,6 +2229,14 @@ "FileSystemConfigs":{ "shape":"FileSystemConfigList", "documentation":"Connection settings for an Amazon EFS file system.
" + }, + "SigningProfileVersionArn":{ + "shape":"Arn", + "documentation":"The ARN of the signing profile version.
" + }, + "SigningJobArn":{ + "shape":"Arn", + "documentation":"The ARN of the signing job.
" } }, "documentation":"Details about a function's configuration.
" @@ -1994,6 +2323,28 @@ } } }, + "GetCodeSigningConfigRequest":{ + "type":"structure", + "required":["CodeSigningConfigArn"], + "members":{ + "CodeSigningConfigArn":{ + "shape":"CodeSigningConfigArn", + "documentation":"The The Amazon Resource Name (ARN) of the code signing configuration.
", + "location":"uri", + "locationName":"CodeSigningConfigArn" + } + } + }, + "GetCodeSigningConfigResponse":{ + "type":"structure", + "required":["CodeSigningConfig"], + "members":{ + "CodeSigningConfig":{ + "shape":"CodeSigningConfig", + "documentation":"The code signing configuration
" + } + } + }, "GetEventSourceMappingRequest":{ "type":"structure", "required":["UUID"], @@ -2006,6 +2357,35 @@ } } }, + "GetFunctionCodeSigningConfigRequest":{ + "type":"structure", + "required":["FunctionName"], + "members":{ + "FunctionName":{ + "shape":"FunctionName", + "documentation":"The name of the Lambda function.
Name formats
Function name - MyFunction.
Function ARN - arn:aws:lambda:us-west-2:123456789012:function:MyFunction.
Partial ARN - 123456789012:function:MyFunction.
The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", + "location":"uri", + "locationName":"FunctionName" + } + } + }, + "GetFunctionCodeSigningConfigResponse":{ + "type":"structure", + "required":[ + "CodeSigningConfigArn", + "FunctionName" + ], + "members":{ + "CodeSigningConfigArn":{ + "shape":"CodeSigningConfigArn", + "documentation":"The The Amazon Resource Name (ARN) of the code signing configuration.
" + }, + "FunctionName":{ + "shape":"FunctionName", + "documentation":"The name of the Lambda function.
Name formats
Function name - MyFunction.
Function ARN - arn:aws:lambda:us-west-2:123456789012:function:MyFunction.
Partial ARN - 123456789012:function:MyFunction.
The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
" + } + } + }, "GetFunctionConcurrencyRequest":{ "type":"structure", "required":["FunctionName"], @@ -2294,6 +2674,16 @@ }, "HttpStatus":{"type":"integer"}, "Integer":{"type":"integer"}, + "InvalidCodeSignatureException":{ + "type":"structure", + "members":{ + "Type":{"shape":"String"}, + "Message":{"shape":"String"} + }, + "documentation":"The code signature failed the integrity check. Lambda always blocks deployment if the integrity check fails, even if code signing policy is set to WARN.
", + "error":{"httpStatusCode":400}, + "exception":true + }, "InvalidParameterValueException":{ "type":"structure", "members":{ @@ -2556,6 +2946,14 @@ "CodeSize":{ "shape":"Long", "documentation":"The size of the layer archive in bytes.
" + }, + "SigningProfileVersionArn":{ + "shape":"Arn", + "documentation":"The Amazon Resource Name (ARN) for a signing profile version.
" + }, + "SigningJobArn":{ + "shape":"Arn", + "documentation":"The Amazon Resource Name (ARN) of a signing job.
" } }, "documentation":"An AWS Lambda layer.
" @@ -2626,6 +3024,14 @@ "CodeSize":{ "shape":"Long", "documentation":"The size of the layer archive in bytes.
" + }, + "SigningProfileVersionArn":{ + "shape":"String", + "documentation":"The Amazon Resource Name (ARN) for a signing profile version.
" + }, + "SigningJobArn":{ + "shape":"String", + "documentation":"The Amazon Resource Name (ARN) of a signing job.
" } }, "documentation":"Details about a version of an AWS Lambda layer.
" @@ -2738,6 +3144,36 @@ } } }, + "ListCodeSigningConfigsRequest":{ + "type":"structure", + "members":{ + "Marker":{ + "shape":"String", + "documentation":"Specify the pagination token that's returned by a previous request to retrieve the next page of results.
", + "location":"querystring", + "locationName":"Marker" + }, + "MaxItems":{ + "shape":"MaxListItems", + "documentation":"Maximum number of items to return.
", + "location":"querystring", + "locationName":"MaxItems" + } + } + }, + "ListCodeSigningConfigsResponse":{ + "type":"structure", + "members":{ + "NextMarker":{ + "shape":"String", + "documentation":"The pagination token that's included if more results are available.
" + }, + "CodeSigningConfigs":{ + "shape":"CodeSigningConfigList", + "documentation":"The code signing configurations
" + } + } + }, "ListEventSourceMappingsRequest":{ "type":"structure", "members":{ @@ -2817,6 +3253,43 @@ } } }, + "ListFunctionsByCodeSigningConfigRequest":{ + "type":"structure", + "required":["CodeSigningConfigArn"], + "members":{ + "CodeSigningConfigArn":{ + "shape":"CodeSigningConfigArn", + "documentation":"The The Amazon Resource Name (ARN) of the code signing configuration.
", + "location":"uri", + "locationName":"CodeSigningConfigArn" + }, + "Marker":{ + "shape":"String", + "documentation":"Specify the pagination token that's returned by a previous request to retrieve the next page of results.
", + "location":"querystring", + "locationName":"Marker" + }, + "MaxItems":{ + "shape":"MaxListItems", + "documentation":"Maximum number of items to return.
", + "location":"querystring", + "locationName":"MaxItems" + } + } + }, + "ListFunctionsByCodeSigningConfigResponse":{ + "type":"structure", + "members":{ + "NextMarker":{ + "shape":"String", + "documentation":"The pagination token that's included if more results are available.
" + }, + "FunctionArns":{ + "shape":"FunctionArnList", + "documentation":"The function ARNs.
" + } + } + }, "ListFunctionsRequest":{ "type":"structure", "members":{ @@ -3332,6 +3805,42 @@ } } }, + "PutFunctionCodeSigningConfigRequest":{ + "type":"structure", + "required":[ + "CodeSigningConfigArn", + "FunctionName" + ], + "members":{ + "CodeSigningConfigArn":{ + "shape":"CodeSigningConfigArn", + "documentation":"The The Amazon Resource Name (ARN) of the code signing configuration.
" + }, + "FunctionName":{ + "shape":"FunctionName", + "documentation":"The name of the Lambda function.
Name formats
Function name - MyFunction.
Function ARN - arn:aws:lambda:us-west-2:123456789012:function:MyFunction.
Partial ARN - 123456789012:function:MyFunction.
The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
", + "location":"uri", + "locationName":"FunctionName" + } + } + }, + "PutFunctionCodeSigningConfigResponse":{ + "type":"structure", + "required":[ + "CodeSigningConfigArn", + "FunctionName" + ], + "members":{ + "CodeSigningConfigArn":{ + "shape":"CodeSigningConfigArn", + "documentation":"The The Amazon Resource Name (ARN) of the code signing configuration.
" + }, + "FunctionName":{ + "shape":"FunctionName", + "documentation":"The name of the Lambda function.
Name formats
Function name - MyFunction.
Function ARN - arn:aws:lambda:us-west-2:123456789012:function:MyFunction.
Partial ARN - 123456789012:function:MyFunction.
The length constraint applies only to the full ARN. If you specify only the function name, it is limited to 64 characters in length.
" + } + } + }, "PutFunctionConcurrencyRequest":{ "type":"structure", "required":[ @@ -3659,6 +4168,12 @@ "error":{"httpStatusCode":500}, "exception":true }, + "SigningProfileVersionArns":{ + "type":"list", + "member":{"shape":"Arn"}, + "max":20, + "min":1 + }, "SourceAccessConfiguration":{ "type":"structure", "members":{ @@ -3908,6 +4423,40 @@ } } }, + "UpdateCodeSigningConfigRequest":{ + "type":"structure", + "required":["CodeSigningConfigArn"], + "members":{ + "CodeSigningConfigArn":{ + "shape":"CodeSigningConfigArn", + "documentation":"The The Amazon Resource Name (ARN) of the code signing configuration.
", + "location":"uri", + "locationName":"CodeSigningConfigArn" + }, + "Description":{ + "shape":"Description", + "documentation":"Descriptive name for this code signing configuration.
" + }, + "AllowedPublishers":{ + "shape":"AllowedPublishers", + "documentation":"Signing profiles for this code signing configuration.
" + }, + "CodeSigningPolicies":{ + "shape":"CodeSigningPolicies", + "documentation":"The code signing policy.
" + } + } + }, + "UpdateCodeSigningConfigResponse":{ + "type":"structure", + "required":["CodeSigningConfig"], + "members":{ + "CodeSigningConfig":{ + "shape":"CodeSigningConfig", + "documentation":"The code signing configuration
" + } + } + }, "UpdateEventSourceMappingRequest":{ "type":"structure", "required":["UUID"], diff --git a/services/lexmodelbuilding/pom.xml b/services/lexmodelbuilding/pom.xml index 791d28de46f1..cd79a7d7b8df 100644 --- a/services/lexmodelbuilding/pom.xml +++ b/services/lexmodelbuilding/pom.xml @@ -21,7 +21,7 @@Time when the license configuration was associated with the resource.
" + }, + "AmiAssociationScope":{ + "shape":"String", + "documentation":"Scope of AMI associations.
" } }, "documentation":"Describes an association with a license configuration.
" @@ -803,6 +807,10 @@ "LicenseConfigurationArn":{ "shape":"String", "documentation":"Amazon Resource Name (ARN) of the license configuration.
" + }, + "AmiAssociationScope":{ + "shape":"String", + "documentation":"Scope of AMI associations.
" } }, "documentation":"Details for associating a license configuration with a resource.
" diff --git a/services/lightsail/pom.xml b/services/lightsail/pom.xml index b76e8c2fd5a2..b2b1c9ecaed3 100644 --- a/services/lightsail/pom.xml +++ b/services/lightsail/pom.xml @@ -21,7 +21,7 @@The tags to apply to the Outpost.
" + } } }, "CreateOutpostOutput":{ @@ -360,7 +364,11 @@ "Description":{"shape":"OutpostDescription"}, "LifeCycleStatus":{"shape":"LifeCycleStatus"}, "AvailabilityZone":{"shape":"AvailabilityZone"}, - "AvailabilityZoneId":{"shape":"AvailabilityZoneId"} + "AvailabilityZoneId":{"shape":"AvailabilityZoneId"}, + "Tags":{ + "shape":"TagMap", + "documentation":"The Outpost tags.
" + } }, "documentation":"Information about an Outpost.
" }, @@ -414,7 +422,11 @@ "SiteId":{"shape":"SiteId"}, "AccountId":{"shape":"AccountId"}, "Name":{"shape":"SiteName"}, - "Description":{"shape":"SiteDescription"} + "Description":{"shape":"SiteDescription"}, + "Tags":{ + "shape":"TagMap", + "documentation":"The site tags.
" + } }, "documentation":"Information about a site.
" }, @@ -439,6 +451,24 @@ "min":1, "pattern":"^[\\S ]+$" }, + "TagKey":{ + "type":"string", + "max":128, + "min":1, + "pattern":"^(?!aws:)[a-zA-Z+-=._:/]+$" + }, + "TagMap":{ + "type":"map", + "key":{"shape":"TagKey"}, + "value":{"shape":"TagValue"}, + "max":50, + "min":1 + }, + "TagValue":{ + "type":"string", + "max":256, + "pattern":"^[\\S \\n]+$" + }, "Token":{ "type":"string", "documentation":"The pagination token.
", diff --git a/services/personalize/pom.xml b/services/personalize/pom.xml index 8fb9429718d3..81b2e6e7b7fc 100644 --- a/services/personalize/pom.xml +++ b/services/personalize/pom.xml @@ -21,7 +21,7 @@Accepts the invitation to be a member account and be monitored by the Security Hub master account that the invitation was sent from.
When the member account accepts the invitation, permission is granted to the master account to view findings generated in the member account.
" + "documentation":"Accepts the invitation to be a member account and be monitored by the Security Hub master account that the invitation was sent from.
This operation is only used by member accounts that are not added through Organizations.
When the member account accepts the invitation, permission is granted to the master account to view findings generated in the member account.
" }, "BatchDisableStandards":{ "name":"BatchDisableStandards", @@ -142,7 +142,7 @@ {"shape":"InvalidAccessException"}, {"shape":"ResourceConflictException"} ], - "documentation":"Creates a member association in Security Hub between the specified accounts and the account used to make the request, which is the master account. To successfully create a member, you must use this action from an account that already has Security Hub enabled. To enable Security Hub, you can use the EnableSecurityHub operation.
After you use CreateMembers to create member account associations in Security Hub, you must use the InviteMembers operation to invite the accounts to enable Security Hub and become member accounts in Security Hub.
If the account owner accepts the invitation, the account becomes a member account in Security Hub. A permissions policy is added that permits the master account to view the findings generated in the member account. When Security Hub is enabled in the invited account, findings start to be sent to both the member and master accounts.
To remove the association between the master and member accounts, use the DisassociateFromMasterAccount or DisassociateMembers operation.
Creates a member association in Security Hub between the specified accounts and the account used to make the request, which is the master account. If you are integrated with Organizations, then the master account is the Security Hub administrator account that is designated by the organization management account.
CreateMembers is always used to add accounts that are not organization members.
For accounts that are part of an organization, CreateMembers is only used in the following cases:
Security Hub is not configured to automatically add new accounts in an organization.
The account was disassociated or deleted in Security Hub.
This action can only be used by an account that has Security Hub enabled. To enable Security Hub, you can use the EnableSecurityHub operation.
For accounts that are not organization members, you create the account association and then send an invitation to the member account. To send the invitation, you use the InviteMembers operation. If the account owner accepts the invitation, the account becomes a member account in Security Hub.
Accounts that are part of an organization do not receive an invitation. They automatically become a member account in Security Hub.
A permissions policy is added that permits the master account to view the findings generated in the member account. When Security Hub is enabled in a member account, findings are sent to both the member and master accounts.
To remove the association between the master and member accounts, use the DisassociateFromMasterAccount or DisassociateMembers operation.
Declines invitations to become a member account.
" + "documentation":"Declines invitations to become a member account.
This operation is only used by accounts that are not part of an organization. Organization accounts do not receive invitations.
" }, "DeleteActionTarget":{ "name":"DeleteActionTarget", @@ -208,7 +208,7 @@ {"shape":"ResourceNotFoundException"}, {"shape":"InvalidAccessException"} ], - "documentation":"Deletes invitations received by the AWS account to become a member account.
" + "documentation":"Deletes invitations received by the AWS account to become a member account.
This operation is only used by accounts that are not part of an organization. Organization accounts do not receive invitations.
" }, "DeleteMembers":{ "name":"DeleteMembers", @@ -225,7 +225,7 @@ {"shape":"LimitExceededException"}, {"shape":"ResourceNotFoundException"} ], - "documentation":"Deletes the specified member accounts from Security Hub.
" + "documentation":"Deletes the specified member accounts from Security Hub.
Can be used to delete member accounts that belong to an organization as well as member accounts that were invited manually.
" }, "DescribeActionTargets":{ "name":"DescribeActionTargets", @@ -260,6 +260,22 @@ ], "documentation":"Returns details about the Hub resource in your account, including the HubArn and the time when you enabled Security Hub.
Returns information about the Organizations configuration for Security Hub. Can only be called from a Security Hub administrator account.
" + }, "DescribeProducts":{ "name":"DescribeProducts", "http":{ @@ -324,6 +340,22 @@ ], "documentation":"Disables the integration of the specified product with Security Hub. After the integration is disabled, findings from that product are no longer sent to Security Hub.
" }, + "DisableOrganizationAdminAccount":{ + "name":"DisableOrganizationAdminAccount", + "http":{ + "method":"POST", + "requestUri":"/organization/admin/disable" + }, + "input":{"shape":"DisableOrganizationAdminAccountRequest"}, + "output":{"shape":"DisableOrganizationAdminAccountResponse"}, + "errors":[ + {"shape":"InternalException"}, + {"shape":"InvalidInputException"}, + {"shape":"InvalidAccessException"}, + {"shape":"LimitExceededException"} + ], + "documentation":"Disables a Security Hub administrator account. Can only be called by the organization management account.
" + }, "DisableSecurityHub":{ "name":"DisableSecurityHub", "http":{ @@ -355,7 +387,7 @@ {"shape":"LimitExceededException"}, {"shape":"ResourceNotFoundException"} ], - "documentation":"Disassociates the current Security Hub member account from the associated master account.
" + "documentation":"Disassociates the current Security Hub member account from the associated master account.
This operation is only used by accounts that are not part of an organization. For organization accounts, only the master account (the designated Security Hub administrator) can disassociate a member account.
" }, "DisassociateMembers":{ "name":"DisassociateMembers", @@ -372,7 +404,7 @@ {"shape":"LimitExceededException"}, {"shape":"ResourceNotFoundException"} ], - "documentation":"Disassociates the specified member accounts from the associated master account.
" + "documentation":"Disassociates the specified member accounts from the associated master account.
Can be used to disassociate both accounts that are in an organization and accounts that were invited manually.
" }, "EnableImportFindingsForProduct":{ "name":"EnableImportFindingsForProduct", @@ -391,6 +423,22 @@ ], "documentation":"Enables the integration of a partner product with Security Hub. Integrated products send findings to Security Hub.
When you enable a product integration, a permissions policy that grants permission for the product to send findings to Security Hub is applied.
" }, + "EnableOrganizationAdminAccount":{ + "name":"EnableOrganizationAdminAccount", + "http":{ + "method":"POST", + "requestUri":"/organization/admin/enable" + }, + "input":{"shape":"EnableOrganizationAdminAccountRequest"}, + "output":{"shape":"EnableOrganizationAdminAccountResponse"}, + "errors":[ + {"shape":"InternalException"}, + {"shape":"InvalidInputException"}, + {"shape":"InvalidAccessException"}, + {"shape":"LimitExceededException"} + ], + "documentation":"Designates the Security Hub administrator account for an organization. Can only be called by the organization management account.
" + }, "EnableSecurityHub":{ "name":"EnableSecurityHub", "http":{ @@ -505,7 +553,7 @@ {"shape":"LimitExceededException"}, {"shape":"ResourceNotFoundException"} ], - "documentation":"Provides the details for the Security Hub master account for the current member account.
" + "documentation":"Provides the details for the Security Hub master account for the current member account.
Can be used by both member accounts that are in an organization and accounts that were invited manually.
" }, "GetMembers":{ "name":"GetMembers", @@ -522,7 +570,7 @@ {"shape":"LimitExceededException"}, {"shape":"ResourceNotFoundException"} ], - "documentation":"Returns the details for the Security Hub member accounts for the specified account IDs.
" + "documentation":"Returns the details for the Security Hub member accounts for the specified account IDs.
A master account can be either a delegated Security Hub administrator account for an organization or a master account that enabled Security Hub manually.
The results include both member accounts that are in an organization and accounts that were invited manually.
" }, "InviteMembers":{ "name":"InviteMembers", @@ -539,7 +587,7 @@ {"shape":"LimitExceededException"}, {"shape":"ResourceNotFoundException"} ], - "documentation":"Invites other AWS accounts to become member accounts for the Security Hub master account that the invitation is sent from.
Before you can use this action to invite a member, you must first use the CreateMembers action to create the member account in Security Hub.
When the account owner accepts the invitation to become a member account and enables Security Hub, the master account can view the findings generated from the member account.
" + "documentation":"Invites other AWS accounts to become member accounts for the Security Hub master account that the invitation is sent from.
This operation is only used to invite accounts that do not belong to an organization. Organization accounts do not receive invitations.
Before you can use this action to invite a member, you must first use the CreateMembers action to create the member account in Security Hub.
When the account owner enables Security Hub and accepts the invitation to become a member account, the master account can view the findings generated from the member account.
" }, "ListEnabledProductsForImport":{ "name":"ListEnabledProductsForImport", @@ -570,7 +618,7 @@ {"shape":"InvalidAccessException"}, {"shape":"LimitExceededException"} ], - "documentation":"Lists all Security Hub membership invitations that were sent to the current AWS account.
" + "documentation":"Lists all Security Hub membership invitations that were sent to the current AWS account.
This operation is only used by accounts that do not belong to an organization. Organization accounts do not receive invitations.
" }, "ListMembers":{ "name":"ListMembers", @@ -586,7 +634,23 @@ {"shape":"InvalidAccessException"}, {"shape":"LimitExceededException"} ], - "documentation":"Lists details about all member accounts for the current Security Hub master account.
" + "documentation":"Lists details about all member accounts for the current Security Hub master account.
The results include both member accounts that belong to an organization and member accounts that were invited manually.
" + }, + "ListOrganizationAdminAccounts":{ + "name":"ListOrganizationAdminAccounts", + "http":{ + "method":"GET", + "requestUri":"/organization/admin" + }, + "input":{"shape":"ListOrganizationAdminAccountsRequest"}, + "output":{"shape":"ListOrganizationAdminAccountsResponse"}, + "errors":[ + {"shape":"InternalException"}, + {"shape":"InvalidInputException"}, + {"shape":"InvalidAccessException"}, + {"shape":"LimitExceededException"} + ], + "documentation":"Lists the Security Hub administrator accounts. Can only be called by the organization management account.
" }, "ListTagsForResource":{ "name":"ListTagsForResource", @@ -684,6 +748,22 @@ ], "documentation":"Updates the Security Hub insight identified by the specified insight ARN.
" }, + "UpdateOrganizationConfiguration":{ + "name":"UpdateOrganizationConfiguration", + "http":{ + "method":"POST", + "requestUri":"/organization/configuration" + }, + "input":{"shape":"UpdateOrganizationConfigurationRequest"}, + "output":{"shape":"UpdateOrganizationConfigurationResponse"}, + "errors":[ + {"shape":"InternalException"}, + {"shape":"InvalidInputException"}, + {"shape":"InvalidAccessException"}, + {"shape":"LimitExceededException"} + ], + "documentation":"Used to update the configuration related to Organizations. Can only be called from a Security Hub administrator account.
" + }, "UpdateSecurityHubConfiguration":{ "name":"UpdateSecurityHubConfiguration", "http":{ @@ -753,6 +833,7 @@ }, "AccountDetails":{ "type":"structure", + "required":["AccountId"], "members":{ "AccountId":{ "shape":"AccountId", @@ -801,6 +882,36 @@ "type":"list", "member":{"shape":"ActionTarget"} }, + "AdminAccount":{ + "type":"structure", + "members":{ + "AccountId":{ + "shape":"NonEmptyString", + "documentation":"The AWS account identifier of the Security Hub administrator account.
" + }, + "Status":{ + "shape":"AdminStatus", + "documentation":"The current status of the Security Hub administrator account. Indicates whether the account is currently enabled as a Security Hub administrator.
" + } + }, + "documentation":"Represents a Security Hub administrator account designated by an organization management account.
" + }, + "AdminAccounts":{ + "type":"list", + "member":{"shape":"AdminAccount"} + }, + "AdminStatus":{ + "type":"string", + "enum":[ + "ENABLED", + "DISABLE_IN_PROGRESS" + ] + }, + "AdminsMaxResults":{ + "type":"integer", + "max":10, + "min":1 + }, "ArnList":{ "type":"list", "member":{"shape":"NonEmptyString"} @@ -6222,10 +6333,11 @@ }, "CreateMembersRequest":{ "type":"structure", + "required":["AccountDetails"], "members":{ "AccountDetails":{ "shape":"AccountDetailsList", - "documentation":"The list of accounts to associate with the Security Hub master account. For each account, the list includes the account ID and the email address.
" + "documentation":"The list of accounts to associate with the Security Hub master account. For each account, the list includes the account ID and optionally the email address.
" } } }, @@ -6238,6 +6350,11 @@ } } }, + "CrossAccountMaxResults":{ + "type":"integer", + "max":50, + "min":1 + }, "Cvss":{ "type":"structure", "members":{ @@ -6384,6 +6501,7 @@ }, "DeleteMembersRequest":{ "type":"structure", + "required":["AccountIds"], "members":{ "AccountIds":{ "shape":"AccountIdList", @@ -6459,6 +6577,24 @@ } } }, + "DescribeOrganizationConfigurationRequest":{ + "type":"structure", + "members":{ + } + }, + "DescribeOrganizationConfigurationResponse":{ + "type":"structure", + "members":{ + "AutoEnable":{ + "shape":"Boolean", + "documentation":"Whether to automatically enable Security Hub for new accounts in the organization.
If set to true, then Security Hub is enabled for new accounts. If set to false, then new accounts are not added automatically.
Whether the maximum number of allowed member accounts are already associated with the Security Hub administrator account.
" + } + } + }, "DescribeProductsRequest":{ "type":"structure", "members":{ @@ -6496,7 +6632,7 @@ "members":{ "StandardsSubscriptionArn":{ "shape":"NonEmptyString", - "documentation":"The ARN of a resource that represents your subscription to a supported standard.
", + "documentation":"The ARN of a resource that represents your subscription to a supported standard. To get the subscription ARNs of the standards you have enabled, use the GetEnabledStandards operation.
The AWS account identifier of the Security Hub administrator account.
" + } + } + }, + "DisableOrganizationAdminAccountResponse":{ + "type":"structure", + "members":{ + } + }, "DisableSecurityHubRequest":{ "type":"structure", "members":{ @@ -6596,6 +6747,7 @@ }, "DisassociateMembersRequest":{ "type":"structure", + "required":["AccountIds"], "members":{ "AccountIds":{ "shape":"AccountIdList", @@ -6628,6 +6780,21 @@ } } }, + "EnableOrganizationAdminAccountRequest":{ + "type":"structure", + "required":["AdminAccountId"], + "members":{ + "AdminAccountId":{ + "shape":"NonEmptyString", + "documentation":"The AWS account identifier of the account to designate as the Security Hub administrator account.
" + } + } + }, + "EnableOrganizationAdminAccountResponse":{ + "type":"structure", + "members":{ + } + }, "EnableSecurityHubRequest":{ "type":"structure", "members":{ @@ -6952,7 +7119,7 @@ "Message":{"shape":"NonEmptyString"}, "Code":{"shape":"NonEmptyString"} }, - "documentation":"AWS Security Hub isn't enabled for the account used to make this request.
", + "documentation":"There is an issue with the account used to make the request. Either Security Hub is not enabled for the account, or the account does not have permission to perform this action.
", "error":{"httpStatusCode":401}, "exception":true }, @@ -6994,6 +7161,7 @@ }, "InviteMembersRequest":{ "type":"structure", + "required":["AccountIds"], "members":{ "AccountIds":{ "shape":"AccountIdList", @@ -7066,7 +7234,7 @@ "Message":{"shape":"NonEmptyString"}, "Code":{"shape":"NonEmptyString"} }, - "documentation":"The request was rejected because it attempted to create resources beyond the current AWS account limits. The error code describes the limit exceeded.
", + "documentation":"The request was rejected because it attempted to create resources beyond the current AWS account or throttling limits. The error code describes the limit exceeded.
", "error":{"httpStatusCode":429}, "exception":true }, @@ -7104,7 +7272,7 @@ "type":"structure", "members":{ "MaxResults":{ - "shape":"MaxResults", + "shape":"CrossAccountMaxResults", "documentation":"The maximum number of items to return in the response.
", "location":"querystring", "locationName":"MaxResults" @@ -7135,12 +7303,12 @@ "members":{ "OnlyAssociated":{ "shape":"Boolean", - "documentation":"Specifies which member accounts to include in the response based on their relationship status with the master account. The default value is TRUE.
If OnlyAssociated is set to TRUE, the response includes member accounts whose relationship status with the master is set to ENABLED or DISABLED.
If OnlyAssociated is set to FALSE, the response includes all existing member accounts.
Specifies which member accounts to include in the response based on their relationship status with the master account. The default value is TRUE.
If OnlyAssociated is set to TRUE, the response includes member accounts whose relationship status with the master is set to ENABLED.
If OnlyAssociated is set to FALSE, the response includes all existing member accounts.
The maximum number of items to return in the response.
", "location":"querystring", "locationName":"MaxResults" @@ -7166,6 +7334,36 @@ } } }, + "ListOrganizationAdminAccountsRequest":{ + "type":"structure", + "members":{ + "MaxResults":{ + "shape":"AdminsMaxResults", + "documentation":"The maximum number of items to return in the response.
", + "location":"querystring", + "locationName":"MaxResults" + }, + "NextToken":{ + "shape":"NextToken", + "documentation":"The token that is required for pagination. On your first call to the ListOrganizationAdminAccounts operation, set the value of this parameter to NULL. For subsequent calls to the operation, to continue listing data, set the value of this parameter to the value returned from the previous response.
The list of Security Hub administrator accounts.
" + }, + "NextToken":{ + "shape":"NextToken", + "documentation":"The pagination token to use to request the next page of results.
" + } + } + }, "ListTagsForResourceRequest":{ "type":"structure", "required":["ResourceArn"], @@ -7308,7 +7506,7 @@ }, "MemberStatus":{ "shape":"NonEmptyString", - "documentation":"The status of the relationship between the member account and its master account.
The status can have one of the following values:
CREATED - Indicates that the master account added the member account, but has not yet invited the member account.
INVITED - Indicates that the master account invited the member account. The member account has not yet responded to the invitation.
ASSOCIATED - Indicates that the member account accepted the invitation.
REMOVED - Indicates that the master account disassociated the member account.
RESIGNED - Indicates that the member account disassociated themselves from the master account.
DELETED - Indicates that the master account deleted the member account.
The status of the relationship between the member account and its master account.
The status can have one of the following values:
CREATED - Indicates that the master account added the member account, but has not yet invited the member account.
INVITED - Indicates that the master account invited the member account. The member account has not yet responded to the invitation.
ENABLED - Indicates that the member account is currently active. For manually invited member accounts, indicates that the member account accepted the invitation.
REMOVED - Indicates that the master account disassociated the member account.
RESIGNED - Indicates that the member account disassociated themselves from the master account.
DELETED - Indicates that the master account deleted the member account.
Whether to automatically enable Security Hub for new accounts in the organization.
By default, this is false, and new accounts are not added automatically.
To automatically enable Security Hub for new accounts, set this to true.
Adds cross-account permissions to a signing profile.
" + }, "CancelSigningProfile":{ "name":"CancelSigningProfile", "http":{ @@ -23,7 +42,7 @@ "errors":[ {"shape":"ResourceNotFoundException"}, {"shape":"AccessDeniedException"}, - {"shape":"ThrottlingException"}, + {"shape":"TooManyRequestsException"}, {"shape":"InternalServiceErrorException"} ], "documentation":"Changes the state of an ACTIVE signing profile to CANCELED. A canceled profile is still viewable with the ListSigningProfiles operation, but it cannot perform new signing jobs, and is deleted two years after cancelation.
Returns information about a specific code signing job. You specify the job by using the jobId value that is returned by the StartSigningJob operation.
Returns information on a specific signing platform.
" @@ -69,11 +90,28 @@ "errors":[ {"shape":"ResourceNotFoundException"}, {"shape":"AccessDeniedException"}, - {"shape":"ThrottlingException"}, + {"shape":"TooManyRequestsException"}, {"shape":"InternalServiceErrorException"} ], "documentation":"Returns information on a specific signing profile.
" }, + "ListProfilePermissions":{ + "name":"ListProfilePermissions", + "http":{ + "method":"GET", + "requestUri":"/signing-profiles/{profileName}/permissions" + }, + "input":{"shape":"ListProfilePermissionsRequest"}, + "output":{"shape":"ListProfilePermissionsResponse"}, + "errors":[ + {"shape":"ValidationException"}, + {"shape":"ResourceNotFoundException"}, + {"shape":"AccessDeniedException"}, + {"shape":"TooManyRequestsException"}, + {"shape":"InternalServiceErrorException"} + ], + "documentation":"Lists the cross-account permissions associated with a signing profile.
" + }, "ListSigningJobs":{ "name":"ListSigningJobs", "http":{ @@ -85,7 +123,7 @@ "errors":[ {"shape":"ValidationException"}, {"shape":"AccessDeniedException"}, - {"shape":"ThrottlingException"}, + {"shape":"TooManyRequestsException"}, {"shape":"InternalServiceErrorException"} ], "documentation":"Lists all your signing jobs. You can use the maxResults parameter to limit the number of signing jobs that are returned in the response. If additional jobs remain to be listed, code signing returns a nextToken value. Use this value in subsequent calls to ListSigningJobs to fetch the remaining values. You can continue calling ListSigningJobs with your maxResults parameter and with new values that code signing returns in the nextToken parameter until all of your signing jobs have been returned.
Lists all signing platforms available in code signing that match the request parameters. If additional jobs remain to be listed, code signing returns a nextToken value. Use this value in subsequent calls to ListSigningJobs to fetch the remaining values. You can continue calling ListSigningJobs with your maxResults parameter and with new values that code signing returns in the nextToken parameter until all of your signing jobs have been returned.
Lists all available signing profiles in your AWS account. Returns only profiles with an ACTIVE status unless the includeCanceled request field is set to true. If additional jobs remain to be listed, code signing returns a nextToken value. Use this value in subsequent calls to ListSigningJobs to fetch the remaining values. You can continue calling ListSigningJobs with your maxResults parameter and with new values that code signing returns in the nextToken parameter until all of your signing jobs have been returned.
Returns a list of the tags associated with a signing profile resource.
" }, @@ -148,11 +187,61 @@ {"shape":"ResourceNotFoundException"}, {"shape":"AccessDeniedException"}, {"shape":"ValidationException"}, - {"shape":"ThrottlingException"}, + {"shape":"TooManyRequestsException"}, {"shape":"InternalServiceErrorException"} ], "documentation":"Creates a signing profile. A signing profile is a code signing template that can be used to carry out a pre-defined signing job. For more information, see http://docs.aws.amazon.com/signer/latest/developerguide/gs-profile.html
" }, + "RemoveProfilePermission":{ + "name":"RemoveProfilePermission", + "http":{ + "method":"DELETE", + "requestUri":"/signing-profiles/{profileName}/permissions/{statementId}" + }, + "input":{"shape":"RemoveProfilePermissionRequest"}, + "output":{"shape":"RemoveProfilePermissionResponse"}, + "errors":[ + {"shape":"ValidationException"}, + {"shape":"ResourceNotFoundException"}, + {"shape":"AccessDeniedException"}, + {"shape":"ConflictException"}, + {"shape":"TooManyRequestsException"}, + {"shape":"InternalServiceErrorException"} + ], + "documentation":"Removes cross-account permissions from a signing profile.
" + }, + "RevokeSignature":{ + "name":"RevokeSignature", + "http":{ + "method":"PUT", + "requestUri":"/signing-jobs/{jobId}/revoke" + }, + "input":{"shape":"RevokeSignatureRequest"}, + "errors":[ + {"shape":"ValidationException"}, + {"shape":"AccessDeniedException"}, + {"shape":"ResourceNotFoundException"}, + {"shape":"TooManyRequestsException"}, + {"shape":"InternalServiceErrorException"} + ], + "documentation":"Changes the state of a signing job to REVOKED. This indicates that the signature is no longer valid.
" + }, + "RevokeSigningProfile":{ + "name":"RevokeSigningProfile", + "http":{ + "method":"PUT", + "requestUri":"/signing-profiles/{profileName}/revoke" + }, + "input":{"shape":"RevokeSigningProfileRequest"}, + "errors":[ + {"shape":"ValidationException"}, + {"shape":"AccessDeniedException"}, + {"shape":"ResourceNotFoundException"}, + {"shape":"TooManyRequestsException"}, + {"shape":"InternalServiceErrorException"} + ], + "documentation":"Changes the state of a signing profile to REVOKED. This indicates that signatures generated using the signing profile after an effective start date are no longer valid.
" + }, "StartSigningJob":{ "name":"StartSigningJob", "http":{ @@ -166,6 +255,7 @@ {"shape":"ResourceNotFoundException"}, {"shape":"AccessDeniedException"}, {"shape":"ThrottlingException"}, + {"shape":"TooManyRequestsException"}, {"shape":"InternalServiceErrorException"} ], "documentation":"Initiates a signing job to be performed on the code provided. Signing jobs are viewable by the ListSigningJobs operation for two years after they are performed. Note the following requirements:
You must create an Amazon S3 source bucket. For more information, see Create a Bucket in the Amazon S3 Getting Started Guide.
Your S3 source bucket must be version enabled.
You must create an S3 destination bucket. Code signing uses your S3 destination bucket to write your signed code.
You specify the name of the source and destination buckets when calling the StartSigningJob operation.
You must also specify a request token that identifies your request to code signing.
You can call the DescribeSigningJob and the ListSigningJobs actions after you call StartSigningJob.
For a Java example that shows how to use this action, see http://docs.aws.amazon.com/acm/latest/userguide/
" @@ -181,7 +271,8 @@ "errors":[ {"shape":"InternalServiceErrorException"}, {"shape":"BadRequestException"}, - {"shape":"NotFoundException"} + {"shape":"NotFoundException"}, + {"shape":"TooManyRequestsException"} ], "documentation":"Adds one or more tags to a signing profile. Tags are labels that you can use to identify and organize your AWS resources. Each tag consists of a key and an optional value. To specify the signing profile, use its Amazon Resource Name (ARN). To specify the tag, use a key-value pair.
" }, @@ -196,26 +287,85 @@ "errors":[ {"shape":"InternalServiceErrorException"}, {"shape":"BadRequestException"}, - {"shape":"NotFoundException"} + {"shape":"NotFoundException"}, + {"shape":"TooManyRequestsException"} ], "documentation":"Removes one or more tags from a signing profile. To remove the tags, specify a list of tag keys.
" } }, "shapes":{ - "key":{"type":"string"}, "AccessDeniedException":{ "type":"structure", "members":{ - "message":{"shape":"ErrorMessage"} + "message":{"shape":"ErrorMessage"}, + "code":{"shape":"ErrorCode"} }, "documentation":"You do not have sufficient access to perform this action.
", "error":{"httpStatusCode":403}, "exception":true }, + "AccountId":{ + "type":"string", + "max":12, + "min":12, + "pattern":"^[0-9]{12}$" + }, + "AddProfilePermissionRequest":{ + "type":"structure", + "required":[ + "action", + "principal", + "statementId", + "profileName" + ], + "members":{ + "profileName":{ + "shape":"ProfileName", + "documentation":"The human-readable name of the signing profile.
", + "location":"uri", + "locationName":"profileName" + }, + "profileVersion":{ + "shape":"ProfileVersion", + "documentation":"The version of the signing profile.
" + }, + "action":{ + "shape":"String", + "documentation":"The AWS Signer action permitted as part of cross-account permissions.
" + }, + "principal":{ + "shape":"String", + "documentation":"The AWS principal receiving cross-account permissions. This may be an IAM role or another AWS account ID.
" + }, + "revisionId":{ + "shape":"String", + "documentation":"A unique identifier for the current profile revision.
" + }, + "statementId":{ + "shape":"String", + "documentation":"A unique identifier for the cross-account permission statement.
" + } + } + }, + "AddProfilePermissionResponse":{ + "type":"structure", + "members":{ + "revisionId":{ + "shape":"String", + "documentation":"A unique identifier for the current profile revision.
" + } + } + }, + "Arn":{ + "type":"string", + "max":2048, + "min":20 + }, "BadRequestException":{ "type":"structure", "members":{ - "message":{"shape":"ErrorMessage"} + "message":{"shape":"ErrorMessage"}, + "code":{"shape":"ErrorCode"} }, "documentation":"The request contains invalid parameters for the ARN or tags. This exception also occurs when you call a tagging API on a cancelled signing profile.
", "error":{"httpStatusCode":400}, @@ -240,8 +390,16 @@ }, "CertificateArn":{"type":"string"}, "ClientRequestToken":{"type":"string"}, - "CompletedAt":{"type":"timestamp"}, - "CreatedAt":{"type":"timestamp"}, + "ConflictException":{ + "type":"structure", + "members":{ + "message":{"shape":"ErrorMessage"}, + "code":{"shape":"ErrorCode"} + }, + "documentation":"The resource encountered a conflicting state.
", + "error":{"httpStatusCode":409}, + "exception":true + }, "DescribeSigningJobRequest":{ "type":"structure", "required":["jobId"], @@ -273,10 +431,18 @@ "shape":"PlatformId", "documentation":"The microcontroller platform to which your signed code image will be distributed.
" }, + "platformDisplayName":{ + "shape":"DisplayName", + "documentation":"A human-readable name for the signing platform associated with the signing job.
" + }, "profileName":{ "shape":"ProfileName", "documentation":"The name of the profile that initiated the signing operation.
" }, + "profileVersion":{ + "shape":"ProfileVersion", + "documentation":"The version of the signing profile used to initiate the signing job.
" + }, "overrides":{ "shape":"SigningPlatformOverrides", "documentation":"A list of any overrides that were applied to the signing operation.
" @@ -286,13 +452,17 @@ "documentation":"Map of user-assigned key-value pairs used during signing. These values contain any information that you specified for use in your signing job.
" }, "createdAt":{ - "shape":"CreatedAt", + "shape":"Timestamp", "documentation":"Date and time that the signing job was created.
" }, "completedAt":{ - "shape":"CompletedAt", + "shape":"Timestamp", "documentation":"Date and time that the signing job was completed.
" }, + "signatureExpiresAt":{ + "shape":"Timestamp", + "documentation":"Thr expiration timestamp for the signature generated by the signing job.
" + }, "requestedBy":{ "shape":"RequestedBy", "documentation":"The IAM principal that requested the signing job.
" @@ -305,9 +475,21 @@ "shape":"StatusReason", "documentation":"String value that contains the status reason.
" }, + "revocationRecord":{ + "shape":"SigningJobRevocationRecord", + "documentation":"A revocation record if the signature generated by the signing job has been revoked. Contains a timestamp and the ID of the IAM entity that revoked the signature.
" + }, "signedObject":{ "shape":"SignedObject", "documentation":"Name of the S3 bucket where the signed code image is saved by code signing.
" + }, + "jobOwner":{ + "shape":"AccountId", + "documentation":"The AWS account ID of the job owner.
" + }, + "jobInvoker":{ + "shape":"AccountId", + "documentation":"The IAM entity that initiated the signing job.
" } } }, @@ -351,6 +533,7 @@ "type":"list", "member":{"shape":"EncryptionAlgorithm"} }, + "ErrorCode":{"type":"string"}, "ErrorMessage":{"type":"string"}, "GetSigningPlatformRequest":{ "type":"structure", @@ -398,6 +581,10 @@ "maxSizeInMB":{ "shape":"MaxSizeInMB", "documentation":"The maximum size (in MB) of the payload that can be signed by the target platform.
" + }, + "revocationSupported":{ + "shape":"bool", + "documentation":"A flag indicating whether signatures generated for the signing platform can be revoked.
" } } }, @@ -410,6 +597,12 @@ "documentation":"The name of the target signing profile.
", "location":"uri", "locationName":"profileName" + }, + "profileOwner":{ + "shape":"AccountId", + "documentation":"The AWS account ID of the profile owner.
", + "location":"querystring", + "locationName":"profileOwner" } } }, @@ -420,6 +613,15 @@ "shape":"ProfileName", "documentation":"The name of the target signing profile.
" }, + "profileVersion":{ + "shape":"ProfileVersion", + "documentation":"The current version of the signing profile.
" + }, + "profileVersionArn":{ + "shape":"Arn", + "documentation":"The signing profile ARN, including the profile version.
" + }, + "revocationRecord":{"shape":"SigningProfileRevocationRecord"}, "signingMaterial":{ "shape":"SigningMaterial", "documentation":"The ARN of the certificate that the target profile uses for signing operations.
" @@ -428,6 +630,11 @@ "shape":"PlatformId", "documentation":"The ID of the platform that is used by the target signing profile.
" }, + "platformDisplayName":{ + "shape":"DisplayName", + "documentation":"A human-readable name for the signing platform associated with the signing profile.
" + }, + "signatureValidityPeriod":{"shape":"SignatureValidityPeriod"}, "overrides":{ "shape":"SigningPlatformOverrides", "documentation":"A list of overrides applied by the target signing profile for signing operations.
" @@ -440,6 +647,10 @@ "shape":"SigningProfileStatus", "documentation":"The status of the target signing profile.
" }, + "statusReason":{ + "shape":"String", + "documentation":"Reason for the status of the target signing profile.
" + }, "arn":{ "shape":"string", "documentation":"The Amazon Resource Name (ARN) for the signing profile.
" @@ -491,10 +702,12 @@ "type":"list", "member":{"shape":"ImageFormat"} }, + "Integer":{"type":"integer"}, "InternalServiceErrorException":{ "type":"structure", "members":{ - "message":{"shape":"ErrorMessage"} + "message":{"shape":"ErrorMessage"}, + "code":{"shape":"ErrorCode"} }, "documentation":"An internal error occurred.
", "error":{"httpStatusCode":500}, @@ -502,6 +715,45 @@ }, "JobId":{"type":"string"}, "Key":{"type":"string"}, + "ListProfilePermissionsRequest":{ + "type":"structure", + "required":["profileName"], + "members":{ + "profileName":{ + "shape":"ProfileName", + "documentation":"Name of the signing profile containing the cross-account permissions.
", + "location":"uri", + "locationName":"profileName" + }, + "nextToken":{ + "shape":"String", + "documentation":"String for specifying the next set of paginated results.
", + "location":"querystring", + "locationName":"nextToken" + } + } + }, + "ListProfilePermissionsResponse":{ + "type":"structure", + "members":{ + "revisionId":{ + "shape":"String", + "documentation":"The identifier for the current revision of profile permissions.
" + }, + "policySizeBytes":{ + "shape":"PolicySizeBytes", + "documentation":"Total size of the policy associated with the Signing Profile in bytes.
" + }, + "permissions":{ + "shape":"Permissions", + "documentation":"List of permissions associated with the Signing Profile.
" + }, + "nextToken":{ + "shape":"String", + "documentation":"String for specifying the next set of paginated results.
" + } + } + }, "ListSigningJobsRequest":{ "type":"structure", "members":{ @@ -534,6 +786,30 @@ "documentation":"String for specifying the next set of paginated results to return. After you receive a response with truncated results, use this parameter in a subsequent request. Set it to the value of nextToken from the response that you just received.
Filters results to return only signing jobs with revoked signatures.
", + "location":"querystring", + "locationName":"isRevoked" + }, + "signatureExpiresBefore":{ + "shape":"Timestamp", + "documentation":"Filters results to return only signing jobs with signatures expiring before a specified timestamp.
", + "location":"querystring", + "locationName":"signatureExpiresBefore" + }, + "signatureExpiresAfter":{ + "shape":"Timestamp", + "documentation":"Filters results to return only signing jobs with signatures expiring after a specified timestamp.
", + "location":"querystring", + "locationName":"signatureExpiresAfter" + }, + "jobInvoker":{ + "shape":"AccountId", + "documentation":"Filters results to return only signing jobs initiated by a specified IAM entity.
", + "location":"querystring", + "locationName":"jobInvoker" } } }, @@ -618,6 +894,18 @@ "documentation":"Value for specifying the next set of paginated results to return. After you receive a response with truncated results, use this parameter in a subsequent request. Set it to the value of nextToken from the response that you just received.
Filters results to return only signing jobs initiated for a specified signing platform.
", + "location":"querystring", + "locationName":"platformId" + }, + "statuses":{ + "shape":"Statuses", + "documentation":"Filters results to return only signing jobs with statuses in the specified list.
", + "location":"querystring", + "locationName":"statuses" } } }, @@ -666,13 +954,41 @@ "NotFoundException":{ "type":"structure", "members":{ - "message":{"shape":"ErrorMessage"} + "message":{"shape":"ErrorMessage"}, + "code":{"shape":"ErrorCode"} }, "documentation":"The signing profile was not found.
", "error":{"httpStatusCode":404}, "exception":true }, + "Permission":{ + "type":"structure", + "members":{ + "action":{ + "shape":"String", + "documentation":"An AWS Signer action permitted as part of cross-account permissions.
" + }, + "principal":{ + "shape":"String", + "documentation":"The AWS principal that has been granted a cross-account permission.
" + }, + "statementId":{ + "shape":"String", + "documentation":"A unique identifier for a cross-account permission statement.
" + }, + "profileVersion":{ + "shape":"ProfileVersion", + "documentation":"The signing profile version that a permission applies to.
" + } + }, + "documentation":"A cross-account permission for a signing profile.
" + }, + "Permissions":{ + "type":"list", + "member":{"shape":"Permission"} + }, "PlatformId":{"type":"string"}, + "PolicySizeBytes":{"type":"integer"}, "Prefix":{"type":"string"}, "ProfileName":{ "type":"string", @@ -680,11 +996,16 @@ "min":2, "pattern":"^[a-zA-Z0-9_]{2,}" }, + "ProfileVersion":{ + "type":"string", + "max":10, + "min":10, + "pattern":"^[a-zA-Z0-9]{10}$" + }, "PutSigningProfileRequest":{ "type":"structure", "required":[ "profileName", - "signingMaterial", "platformId" ], "members":{ @@ -698,6 +1019,10 @@ "shape":"SigningMaterial", "documentation":"The AWS Certificate Manager certificate that will be used to sign code with the new signing profile.
" }, + "signatureValidityPeriod":{ + "shape":"SignatureValidityPeriod", + "documentation":"The default validity period override for any signature generated using this signing profile. If unspecified, the default is 135 months.
" + }, "platformId":{ "shape":"PlatformId", "documentation":"The ID of the signing platform to be created.
" @@ -722,6 +1047,51 @@ "arn":{ "shape":"string", "documentation":"The Amazon Resource Name (ARN) of the signing profile created.
" + }, + "profileVersion":{ + "shape":"ProfileVersion", + "documentation":"The version of the signing profile being created.
" + }, + "profileVersionArn":{ + "shape":"Arn", + "documentation":"The signing profile ARN, including the profile version.
" + } + } + }, + "RemoveProfilePermissionRequest":{ + "type":"structure", + "required":[ + "revisionId", + "profileName", + "statementId" + ], + "members":{ + "profileName":{ + "shape":"ProfileName", + "documentation":"A human-readable name for the signing profile with permissions to be removed.
", + "location":"uri", + "locationName":"profileName" + }, + "revisionId":{ + "shape":"String", + "documentation":"An identifier for the current revision of the signing profile permissions.
", + "location":"querystring", + "locationName":"revisionId" + }, + "statementId":{ + "shape":"String", + "documentation":"A unique identifier for the cross-account permissions statement.
", + "location":"uri", + "locationName":"statementId" + } + } + }, + "RemoveProfilePermissionResponse":{ + "type":"structure", + "members":{ + "revisionId":{ + "shape":"String", + "documentation":"An identifier for the current revision of the profile permissions.
" } } }, @@ -729,12 +1099,70 @@ "ResourceNotFoundException":{ "type":"structure", "members":{ - "message":{"shape":"ErrorMessage"} + "message":{"shape":"ErrorMessage"}, + "code":{"shape":"ErrorCode"} }, "documentation":"A specified resource could not be found.
", "error":{"httpStatusCode":404}, "exception":true }, + "RevocationReasonString":{ + "type":"string", + "max":500, + "min":1 + }, + "RevokeSignatureRequest":{ + "type":"structure", + "required":[ + "reason", + "jobId" + ], + "members":{ + "jobId":{ + "shape":"JobId", + "documentation":"ID of the signing job to be revoked.
", + "location":"uri", + "locationName":"jobId" + }, + "jobOwner":{ + "shape":"AccountId", + "documentation":"AWS account ID of the job owner.
" + }, + "reason":{ + "shape":"RevocationReasonString", + "documentation":"The reason for revoking the signing job.
" + } + } + }, + "RevokeSigningProfileRequest":{ + "type":"structure", + "required":[ + "profileVersion", + "reason", + "effectiveTime", + "profileName" + ], + "members":{ + "profileName":{ + "shape":"ProfileName", + "documentation":"The name of the signing profile to be revoked.
", + "location":"uri", + "locationName":"profileName" + }, + "profileVersion":{ + "shape":"ProfileVersion", + "documentation":"The version of the signing profile to be revoked.
" + }, + "reason":{ + "shape":"RevocationReasonString", + "documentation":"The reason for revoking a signing profile.
" + }, + "effectiveTime":{ + "shape":"Timestamp", + "documentation":"A timestamp for when revocation of a Signing Profile should become effective. Signatures generated using the signing profile after this timestamp are not trusted.
" + } + } + }, "S3Destination":{ "type":"structure", "members":{ @@ -757,7 +1185,7 @@ "documentation":"Name of the S3 bucket.
" }, "key":{ - "shape":"key", + "shape":"Key", "documentation":"Key name that uniquely identifies a signed code image in your bucket.
" } }, @@ -786,6 +1214,30 @@ }, "documentation":"Information about the S3 bucket where you saved your unsigned code.
" }, + "ServiceLimitExceededException":{ + "type":"structure", + "members":{ + "message":{"shape":"ErrorMessage"}, + "code":{"shape":"ErrorCode"} + }, + "documentation":"The client is making a request that exceeds service limits.
", + "error":{"httpStatusCode":402}, + "exception":true + }, + "SignatureValidityPeriod":{ + "type":"structure", + "members":{ + "value":{ + "shape":"Integer", + "documentation":"The numerical value of the time unit for signature validity.
" + }, + "type":{ + "shape":"ValidityType", + "documentation":"The time unit for signature validity.
" + } + }, + "documentation":"The validity period for a signing job.
" + }, "SignedObject":{ "type":"structure", "members":{ @@ -866,16 +1318,66 @@ "documentation":"A SigningMaterial object that contains the Amazon Resource Name (ARN) of the certificate used for the signing job.
The date and time that the signing job was created.
" }, "status":{ "shape":"SigningStatus", "documentation":"The status of the signing job.
" + }, + "isRevoked":{ + "shape":"bool", + "documentation":"Indicates whether the signing job is revoked.
" + }, + "profileName":{ + "shape":"ProfileName", + "documentation":"The name of the signing profile that created a signing job.
" + }, + "profileVersion":{ + "shape":"ProfileVersion", + "documentation":"The version of the signing profile that created a signing job.
" + }, + "platformId":{ + "shape":"PlatformId", + "documentation":"The unique identifier for a signing platform.
" + }, + "platformDisplayName":{ + "shape":"DisplayName", + "documentation":"The name of a signing platform.
" + }, + "signatureExpiresAt":{ + "shape":"Timestamp", + "documentation":"The time when the signature of a signing job expires.
" + }, + "jobOwner":{ + "shape":"AccountId", + "documentation":"The AWS account ID of the job owner.
" + }, + "jobInvoker":{ + "shape":"AccountId", + "documentation":"The AWS account ID of the job invoker.
" } }, "documentation":"Contains information about a signing job.
" }, + "SigningJobRevocationRecord":{ + "type":"structure", + "members":{ + "reason":{ + "shape":"String", + "documentation":"A caller-supplied reason for revocation.
" + }, + "revokedAt":{ + "shape":"Timestamp", + "documentation":"The time of revocation.
" + }, + "revokedBy":{ + "shape":"String", + "documentation":"The identity of the revoker.
" + } + }, + "documentation":"Revocation information for a signing job.
" + }, "SigningJobs":{ "type":"list", "member":{"shape":"SigningJob"} @@ -929,6 +1431,10 @@ "maxSizeInMB":{ "shape":"MaxSizeInMB", "documentation":"The maximum size (in MB) of code that can be signed by a code signing platform.
" + }, + "revocationSupported":{ + "shape":"bool", + "documentation":"Indicates whether revocation is supported for the platform.
" } }, "documentation":"Contains information about the signing configurations and parameters that are used to perform a code signing job.
" @@ -958,14 +1464,30 @@ "shape":"ProfileName", "documentation":"The name of the signing profile.
" }, + "profileVersion":{ + "shape":"ProfileVersion", + "documentation":"The version of a signing profile.
" + }, + "profileVersionArn":{ + "shape":"Arn", + "documentation":"The ARN of a signing profile, including the profile version.
" + }, "signingMaterial":{ "shape":"SigningMaterial", "documentation":"The ACM certificate that is available for use by a signing profile.
" }, + "signatureValidityPeriod":{ + "shape":"SignatureValidityPeriod", + "documentation":"The validity period for a signing job created using this signing profile.
" + }, "platformId":{ "shape":"PlatformId", "documentation":"The ID of a platform that is available for use by a signing profile.
" }, + "platformDisplayName":{ + "shape":"DisplayName", + "documentation":"The name of the signing platform.
" + }, "signingParameters":{ "shape":"SigningParameters", "documentation":"The parameters that are available for use by a code signing user.
" @@ -985,11 +1507,30 @@ }, "documentation":"Contains information about the ACM certificates and code signing configuration parameters that can be used by a given code signing user.
" }, + "SigningProfileRevocationRecord":{ + "type":"structure", + "members":{ + "revocationEffectiveFrom":{ + "shape":"Timestamp", + "documentation":"The time when revocation becomes effective.
" + }, + "revokedAt":{ + "shape":"Timestamp", + "documentation":"The time when the signing profile was revoked.
" + }, + "revokedBy":{ + "shape":"String", + "documentation":"The identity of the revoker.
" + } + }, + "documentation":"Revocation information for a signing profile.
" + }, "SigningProfileStatus":{ "type":"string", "enum":[ "Active", - "Canceled" + "Canceled", + "Revoked" ] }, "SigningProfiles":{ @@ -1019,6 +1560,7 @@ "required":[ "source", "destination", + "profileName", "clientRequestToken" ], "members":{ @@ -1038,6 +1580,10 @@ "shape":"ClientRequestToken", "documentation":"String that identifies the signing request. All calls after the first that use this token return the same response as the first call.
", "idempotencyToken":true + }, + "profileOwner":{ + "shape":"AccountId", + "documentation":"The AWS account ID of the signing profile owner.
" } } }, @@ -1047,10 +1593,18 @@ "jobId":{ "shape":"JobId", "documentation":"The ID of your signing job.
" + }, + "jobOwner":{ + "shape":"AccountId", + "documentation":"The AWS account ID of the signing job owner.
" } } }, "StatusReason":{"type":"string"}, + "Statuses":{ + "type":"list", + "member":{"shape":"SigningProfileStatus"} + }, "String":{"type":"string"}, "TagKey":{ "type":"string", @@ -1102,9 +1656,23 @@ "ThrottlingException":{ "type":"structure", "members":{ - "message":{"shape":"ErrorMessage"} + "message":{"shape":"ErrorMessage"}, + "code":{"shape":"ErrorCode"} + }, + "documentation":"The request was denied due to request throttling.
Instead of this error, TooManyRequestsException should be used.
The signing job has been throttled.
", + "documentation":"The allowed number of job-signing requests has been exceeded.
This error supersedes the error ThrottlingException.
You signing certificate could not be validated.
", "error":{"httpStatusCode":400}, "exception":true }, + "ValidityType":{ + "type":"string", + "enum":[ + "DAYS", + "MONTHS", + "YEARS" + ] + }, "Version":{"type":"string"}, "bool":{"type":"boolean"}, "string":{"type":"string"} }, - "documentation":"With code signing for IoT, you can sign code that you create for any IoT device that is supported by Amazon Web Services (AWS). Code signing is available through Amazon FreeRTOS and AWS IoT Device Management, and integrated with AWS Certificate Manager (ACM). In order to sign code, you import a third-party code signing certificate with ACM that is used to sign updates in Amazon FreeRTOS and AWS IoT Device Management. For general information about using code signing, see the Code Signing for IoT Developer Guide.
" + "documentation":"AWS Signer is a fully managed code signing service to help you ensure the trust and integrity of your code.
AWS Signer supports the following applications:
With code signing for AWS Lambda, you can sign AWS Lambda deployment packages. Integrated support is provided for Amazon S3, Amazon CloudWatch, and AWS CloudTrail. In order to sign code, you create a signing profile and then use Signer to sign Lambda zip files in S3.
With code signing for IoT, you can sign code for any IoT device that is supported by AWS. IoT code signing is available for Amazon FreeRTOS and AWS IoT Device Management, and is integrated with AWS Certificate Manager (ACM). In order to sign code, you import a third-party code signing certificate using ACM, and use that to sign updates in Amazon FreeRTOS and AWS IoT Device Management.
For more information about AWS Signer, see the AWS Signer Developer Guide.
" } diff --git a/services/sms/pom.xml b/services/sms/pom.xml index f21ffc6d4cff..781a26de9f4b 100644 --- a/services/sms/pom.xml +++ b/services/sms/pom.xml @@ -21,7 +21,7 @@Assigns access to a principal for a specified AWS account using a specified permission set.
The term principal here refers to a user or group that is defined in AWS SSO.
As part of a successful CreateAccountAssignment call, the specified permission set will automatically be provisioned to the account in the form of an IAM policy attached to the SSO-created IAM role. If the permission set is subsequently updated, the corresponding IAM policies attached to roles in your accounts will not be updated automatically. In this case, you will need to call ProvisionPermissionSet to make these updates.
Enables the attributes-based access control (ABAC) feature for the specified AWS SSO instance. You can also specify new attributes to add to your ABAC configuration during the enabling process. For more information about ABAC, see Attribute-Based Access Control in the AWS SSO User Guide.
" + }, "CreatePermissionSet":{ "name":"CreatePermissionSet", "http":{ @@ -107,6 +125,24 @@ ], "documentation":"Deletes the inline policy from a specified permission set.
" }, + "DeleteInstanceAccessControlAttributeConfiguration":{ + "name":"DeleteInstanceAccessControlAttributeConfiguration", + "http":{ + "method":"POST", + "requestUri":"/" + }, + "input":{"shape":"DeleteInstanceAccessControlAttributeConfigurationRequest"}, + "output":{"shape":"DeleteInstanceAccessControlAttributeConfigurationResponse"}, + "errors":[ + {"shape":"InternalServerException"}, + {"shape":"AccessDeniedException"}, + {"shape":"ThrottlingException"}, + {"shape":"ValidationException"}, + {"shape":"ResourceNotFoundException"}, + {"shape":"ConflictException"} + ], + "documentation":"Disables the attributes-based access control (ABAC) feature for the specified AWS SSO instance and deletes all of the attribute mappings that have been configured. Once deleted, any attributes that are received from an identity source and any custom attributes you have previously configured will not be passed. For more information about ABAC, see Attribute-Based Access Control in the AWS SSO User Guide.
" + }, "DeletePermissionSet":{ "name":"DeletePermissionSet", "http":{ @@ -159,6 +195,23 @@ ], "documentation":"Describes the status of the assignment deletion request.
" }, + "DescribeInstanceAccessControlAttributeConfiguration":{ + "name":"DescribeInstanceAccessControlAttributeConfiguration", + "http":{ + "method":"POST", + "requestUri":"/" + }, + "input":{"shape":"DescribeInstanceAccessControlAttributeConfigurationRequest"}, + "output":{"shape":"DescribeInstanceAccessControlAttributeConfigurationResponse"}, + "errors":[ + {"shape":"ResourceNotFoundException"}, + {"shape":"InternalServerException"}, + {"shape":"AccessDeniedException"}, + {"shape":"ThrottlingException"}, + {"shape":"ValidationException"} + ], + "documentation":"Returns the list of AWS SSO identity store attributes that have been configured to work with attributes-based access control (ABAC) for the specified AWS SSO instance. This will not return attributes configured and sent by an external identity provider. For more information about ABAC, see Attribute-Based Access Control in the AWS SSO User Guide.
" + }, "DescribePermissionSet":{ "name":"DescribePermissionSet", "http":{ @@ -471,6 +524,24 @@ ], "documentation":"Disassociates a set of tags from a specified resource.
" }, + "UpdateInstanceAccessControlAttributeConfiguration":{ + "name":"UpdateInstanceAccessControlAttributeConfiguration", + "http":{ + "method":"POST", + "requestUri":"/" + }, + "input":{"shape":"UpdateInstanceAccessControlAttributeConfigurationRequest"}, + "output":{"shape":"UpdateInstanceAccessControlAttributeConfigurationResponse"}, + "errors":[ + {"shape":"InternalServerException"}, + {"shape":"AccessDeniedException"}, + {"shape":"ThrottlingException"}, + {"shape":"ValidationException"}, + {"shape":"ResourceNotFoundException"}, + {"shape":"ConflictException"} + ], + "documentation":"Updates the AWS SSO identity store attributes to use with the AWS SSO instance for attributes-based access control (ABAC). When using an external identity provider as an identity source, you can pass attributes through the SAML assertion as an alternative to configuring attributes from the AWS SSO identity store. If a SAML assertion passes any of these attributes, AWS SSO will replace the attribute value with the value from the AWS SSO identity store. For more information about ABAC, see Attribute-Based Access Control in the AWS SSO User Guide.
" + }, "UpdatePermissionSet":{ "name":"UpdatePermissionSet", "http":{ @@ -491,6 +562,59 @@ } }, "shapes":{ + "AccessControlAttribute":{ + "type":"structure", + "required":[ + "Key", + "Value" + ], + "members":{ + "Key":{ + "shape":"AccessControlAttributeKey", + "documentation":"The name of the attribute associated with your identities in your identity source. This is used to map a specified attribute in your identity source with an attribute in AWS SSO.
" + }, + "Value":{ + "shape":"AccessControlAttributeValue", + "documentation":"The value used for mapping a specified attribute to an identity source.
" + } + }, + "documentation":"These are AWS SSO identity store attributes that you can configure for use in attributes-based access control (ABAC). You can create permission policies that determine who can access your AWS resources based upon the configured attribute value(s). When you enable ABAC and specify AccessControlAttributes, AWS SSO passes the attribute(s) value of the authenticated user into IAM for use in policy evaluation.
" + }, + "AccessControlAttributeKey":{ + "type":"string", + "max":128, + "min":1, + "pattern":"[\\p{L}\\p{Z}\\p{N}_.:\\/=+\\-@]+" + }, + "AccessControlAttributeList":{ + "type":"list", + "member":{"shape":"AccessControlAttribute"}, + "max":50, + "min":0 + }, + "AccessControlAttributeValue":{ + "type":"structure", + "required":["Source"], + "members":{ + "Source":{ + "shape":"AccessControlAttributeValueSourceList", + "documentation":"The identity source to use when mapping a specified attribute to AWS SSO.
" + } + }, + "documentation":"The value used for mapping a specified attribute to an identity source.
" + }, + "AccessControlAttributeValueSource":{ + "type":"string", + "max":256, + "min":0, + "pattern":"[\\p{L}\\p{Z}\\p{N}_.:\\/=+\\-@\\[\\]\\{\\}\\$\\\\\"]*" + }, + "AccessControlAttributeValueSourceList":{ + "type":"list", + "member":{"shape":"AccessControlAttributeValueSource"}, + "max":1, + "min":1 + }, "AccessDeniedException":{ "type":"structure", "members":{ @@ -698,6 +822,28 @@ } } }, + "CreateInstanceAccessControlAttributeConfigurationRequest":{ + "type":"structure", + "required":[ + "InstanceArn", + "InstanceAccessControlAttributeConfiguration" + ], + "members":{ + "InstanceArn":{ + "shape":"InstanceArn", + "documentation":"The ARN of the SSO instance under which the operation will be executed.
" + }, + "InstanceAccessControlAttributeConfiguration":{ + "shape":"InstanceAccessControlAttributeConfiguration", + "documentation":"Specifies the AWS SSO identity store attributes to add to your ABAC configuration. When using an external identity provider as an identity source, you can pass attributes through the SAML assertion as an alternative to configuring attributes from the AWS SSO identity store. If a SAML assertion passes any of these attributes, AWS SSO will replace the attribute value with the value from the AWS SSO identity store.
" + } + } + }, + "CreateInstanceAccessControlAttributeConfigurationResponse":{ + "type":"structure", + "members":{ + } + }, "CreatePermissionSetRequest":{ "type":"structure", "required":[ @@ -809,6 +955,21 @@ "members":{ } }, + "DeleteInstanceAccessControlAttributeConfigurationRequest":{ + "type":"structure", + "required":["InstanceArn"], + "members":{ + "InstanceArn":{ + "shape":"InstanceArn", + "documentation":"The ARN of the SSO instance under which the operation will be executed.
" + } + } + }, + "DeleteInstanceAccessControlAttributeConfigurationResponse":{ + "type":"structure", + "members":{ + } + }, "DeletePermissionSetRequest":{ "type":"structure", "required":[ @@ -883,6 +1044,33 @@ } } }, + "DescribeInstanceAccessControlAttributeConfigurationRequest":{ + "type":"structure", + "required":["InstanceArn"], + "members":{ + "InstanceArn":{ + "shape":"InstanceArn", + "documentation":"The ARN of the SSO instance under which the operation will be executed.
" + } + } + }, + "DescribeInstanceAccessControlAttributeConfigurationResponse":{ + "type":"structure", + "members":{ + "Status":{ + "shape":"InstanceAccessControlAttributeConfigurationStatus", + "documentation":"The status of the attribute configuration process.
" + }, + "StatusReason":{ + "shape":"InstanceAccessControlAttributeConfigurationStatusReason", + "documentation":"Provides more details about the current status of the specified attribute.
" + }, + "InstanceAccessControlAttributeConfiguration":{ + "shape":"InstanceAccessControlAttributeConfiguration", + "documentation":"Gets the list of AWS SSO identity store attributes added to your ABAC configuration.
" + } + } + }, "DescribePermissionSetProvisioningStatusRequest":{ "type":"structure", "required":[ @@ -1006,6 +1194,26 @@ "min":1, "pattern":"^[a-zA-Z0-9-]*" }, + "InstanceAccessControlAttributeConfiguration":{ + "type":"structure", + "required":["AccessControlAttributes"], + "members":{ + "AccessControlAttributes":{ + "shape":"AccessControlAttributeList", + "documentation":"Lists the attributes that are configured for ABAC in the specified AWS SSO instance.
" + } + }, + "documentation":"Specifies the attributes to add to your attribute-based access control (ABAC) configuration.
" + }, + "InstanceAccessControlAttributeConfigurationStatus":{ + "type":"string", + "enum":[ + "ENABLED", + "CREATION_IN_PROGRESS", + "CREATION_FAILED" + ] + }, + "InstanceAccessControlAttributeConfigurationStatusReason":{"type":"string"}, "InstanceArn":{ "type":"string", "max":1224, @@ -1779,6 +1987,28 @@ "members":{ } }, + "UpdateInstanceAccessControlAttributeConfigurationRequest":{ + "type":"structure", + "required":[ + "InstanceArn", + "InstanceAccessControlAttributeConfiguration" + ], + "members":{ + "InstanceArn":{ + "shape":"InstanceArn", + "documentation":"The ARN of the SSO instance under which the operation will be executed.
" + }, + "InstanceAccessControlAttributeConfiguration":{ + "shape":"InstanceAccessControlAttributeConfiguration", + "documentation":"Updates the attributes for your ABAC configuration.
" + } + } + }, + "UpdateInstanceAccessControlAttributeConfigurationResponse":{ + "type":"structure", + "members":{ + } + }, "UpdatePermissionSetRequest":{ "type":"structure", "required":[ diff --git a/services/ssooidc/pom.xml b/services/ssooidc/pom.xml index 2c12a74f21b7..260c00f860a0 100644 --- a/services/ssooidc/pom.xml +++ b/services/ssooidc/pom.xml @@ -21,7 +21,7 @@The column data types of the returned result set.
" + }, + "QueryStatus":{ + "shape":"QueryStatus", + "documentation":"Information about the status of the query, including progress and bytes scannned.
" } } }, + "QueryStatus":{ + "type":"structure", + "members":{ + "ProgressPercentage":{ + "shape":"Double", + "documentation":"The progress of the query, expressed as a percentage.
" + }, + "CumulativeBytesScanned":{ + "shape":"Long", + "documentation":"The amount of data scanned by the query in bytes. This is a cumulative sum and represents the total amount of bytes scanned since the query was started.
" + }, + "CumulativeBytesMetered":{ + "shape":"Long", + "documentation":"The amount of data scanned by the query in bytes that you will be charged for. This is a cumulative sum and represents the total amount of data that you will be charged for since the query was started. The charge is applied only once and is either applied when the query completes execution or when the query is cancelled.
" + } + }, + "documentation":"Information about the status of the query, including progress and bytes scannned.
" + }, "QueryString":{ "type":"string", "sensitive":true diff --git a/services/timestreamwrite/pom.xml b/services/timestreamwrite/pom.xml index 8d3bf3229e4a..f6c38fdec537 100644 --- a/services/timestreamwrite/pom.xml +++ b/services/timestreamwrite/pom.xml @@ -21,7 +21,7 @@Creates a parallel data resource in Amazon Translate by importing an input file from Amazon S3. Parallel data files contain examples of source phrases and their translations from your translation memory. By adding parallel data, you can influence the style, tone, and word choice in your translation output.
" + }, + "DeleteParallelData":{ + "name":"DeleteParallelData", + "http":{ + "method":"POST", + "requestUri":"/" + }, + "input":{"shape":"DeleteParallelDataRequest"}, + "output":{"shape":"DeleteParallelDataResponse"}, + "errors":[ + {"shape":"ConcurrentModificationException"}, + {"shape":"ResourceNotFoundException"}, + {"shape":"TooManyRequestsException"}, + {"shape":"InternalServerException"} + ], + "documentation":"Deletes a parallel data resource in Amazon Translate.
" + }, "DeleteTerminology":{ "name":"DeleteTerminology", "http":{ @@ -43,6 +77,22 @@ ], "documentation":"Gets the properties associated with an asycnhronous batch translation job including name, ID, status, source and target languages, input/output S3 buckets, and so on.
" }, + "GetParallelData":{ + "name":"GetParallelData", + "http":{ + "method":"POST", + "requestUri":"/" + }, + "input":{"shape":"GetParallelDataRequest"}, + "output":{"shape":"GetParallelDataResponse"}, + "errors":[ + {"shape":"ResourceNotFoundException"}, + {"shape":"InvalidParameterValueException"}, + {"shape":"TooManyRequestsException"}, + {"shape":"InternalServerException"} + ], + "documentation":"Provides information about a parallel data resource.
" + }, "GetTerminology":{ "name":"GetTerminology", "http":{ @@ -75,6 +125,21 @@ ], "documentation":"Creates or updates a custom terminology, depending on whether or not one already exists for the given terminology name. Importing a terminology with the same name as an existing one will merge the terminologies based on the chosen merge strategy. Currently, the only supported merge strategy is OVERWRITE, and so the imported terminology will overwrite an existing terminology of the same name.
If you import a terminology that overwrites an existing one, the new terminology take up to 10 minutes to fully propagate and be available for use in a translation due to cache policies with the DataPlane service that performs the translations.
" }, + "ListParallelData":{ + "name":"ListParallelData", + "http":{ + "method":"POST", + "requestUri":"/" + }, + "input":{"shape":"ListParallelDataRequest"}, + "output":{"shape":"ListParallelDataResponse"}, + "errors":[ + {"shape":"InvalidParameterValueException"}, + {"shape":"TooManyRequestsException"}, + {"shape":"InternalServerException"} + ], + "documentation":"Provides a list of your parallel data resources in Amazon Translate.
" + }, "ListTerminologies":{ "name":"ListTerminologies", "http":{ @@ -157,6 +222,26 @@ {"shape":"ServiceUnavailableException"} ], "documentation":"Translates input text from the source language to the target language. For a list of available languages and language codes, see what-is-languages.
" + }, + "UpdateParallelData":{ + "name":"UpdateParallelData", + "http":{ + "method":"POST", + "requestUri":"/" + }, + "input":{"shape":"UpdateParallelDataRequest"}, + "output":{"shape":"UpdateParallelDataResponse"}, + "errors":[ + {"shape":"ConcurrentModificationException"}, + {"shape":"InvalidParameterValueException"}, + {"shape":"InvalidRequestException"}, + {"shape":"LimitExceededException"}, + {"shape":"TooManyRequestsException"}, + {"shape":"ConflictException"}, + {"shape":"ResourceNotFoundException"}, + {"shape":"InternalServerException"} + ], + "documentation":"Updates a previously created parallel data resource by importing a new input file from Amazon S3.
" } }, "shapes":{ @@ -190,11 +275,91 @@ "min":1, "pattern":"^[a-zA-Z0-9-]+$" }, + "ConcurrentModificationException":{ + "type":"structure", + "members":{ + "Message":{"shape":"String"} + }, + "documentation":"Another modification is being made. That modification must complete before you can make your change.
", + "exception":true + }, + "ConflictException":{ + "type":"structure", + "members":{ + "Message":{"shape":"String"} + }, + "documentation":"There was a conflict processing the request. Try your request again.
", + "exception":true + }, "ContentType":{ "type":"string", "max":256, "pattern":"^[-\\w.]+\\/[-\\w.+]+$" }, + "CreateParallelDataRequest":{ + "type":"structure", + "required":[ + "Name", + "ParallelDataConfig", + "ClientToken" + ], + "members":{ + "Name":{ + "shape":"ResourceName", + "documentation":"A custom name for the parallel data resource in Amazon Translate. You must assign a name that is unique in the account and region.
" + }, + "Description":{ + "shape":"Description", + "documentation":"A custom description for the parallel data resource in Amazon Translate.
" + }, + "ParallelDataConfig":{ + "shape":"ParallelDataConfig", + "documentation":"Specifies the format and S3 location of the parallel data input file.
" + }, + "EncryptionKey":{"shape":"EncryptionKey"}, + "ClientToken":{ + "shape":"ClientTokenString", + "documentation":"A unique identifier for the request. This token is automatically generated when you use Amazon Translate through an AWS SDK.
", + "idempotencyToken":true + } + } + }, + "CreateParallelDataResponse":{ + "type":"structure", + "members":{ + "Name":{ + "shape":"ResourceName", + "documentation":"The custom name that you assigned to the parallel data resource.
" + }, + "Status":{ + "shape":"ParallelDataStatus", + "documentation":"The status of the parallel data resource. When the resource is ready for you to use, the status is ACTIVE.
The name of the parallel data resource that is being deleted.
" + } + } + }, + "DeleteParallelDataResponse":{ + "type":"structure", + "members":{ + "Name":{ + "shape":"ResourceName", + "documentation":"The name of the parallel data resource that is being deleted.
" + }, + "Status":{ + "shape":"ParallelDataStatus", + "documentation":"The status of the parallel data deletion.
" + } + } + }, "DeleteTerminologyRequest":{ "type":"structure", "required":["Name"], @@ -257,7 +422,7 @@ "documentation":"The Amazon Resource Name (ARN) of the encryption key being used to encrypt the custom terminology.
" } }, - "documentation":"The encryption key used to encrypt the custom terminologies used by Amazon Translate.
" + "documentation":"The encryption key used to encrypt this object.
" }, "EncryptionKeyID":{ "type":"string", @@ -269,6 +434,37 @@ "type":"string", "enum":["KMS"] }, + "GetParallelDataRequest":{ + "type":"structure", + "required":["Name"], + "members":{ + "Name":{ + "shape":"ResourceName", + "documentation":"The name of the parallel data resource that is being retrieved.
" + } + } + }, + "GetParallelDataResponse":{ + "type":"structure", + "members":{ + "ParallelDataProperties":{ + "shape":"ParallelDataProperties", + "documentation":"The properties of the parallel data resource that is being retrieved.
" + }, + "DataLocation":{ + "shape":"ParallelDataDataLocation", + "documentation":"The location of the most recent parallel data input file that was successfully imported into Amazon Translate. The location is returned as a presigned URL that has a 30 minute expiration.
" + }, + "AuxiliaryDataLocation":{ + "shape":"ParallelDataDataLocation", + "documentation":"The Amazon S3 location of a file that provides any errors or warnings that were produced by your input file. This file was created when Amazon Translate attempted to create a parallel data resource. The location is returned as a presigned URL to that has a 30 minute expiration.
" + }, + "LatestUpdateAttemptAuxiliaryDataLocation":{ + "shape":"ParallelDataDataLocation", + "documentation":"The Amazon S3 location of a file that provides any errors or warnings that were produced by your input file. This file was created when Amazon Translate attempted to update a parallel data resource. The location is returned as a presigned URL to that has a 30 minute expiration.
" + } + } + }, "GetTerminologyRequest":{ "type":"structure", "required":[ @@ -455,6 +651,32 @@ "documentation":"The specified limit has been exceeded. Review your request and retry it with a quantity below the stated limit.
", "exception":true }, + "ListParallelDataRequest":{ + "type":"structure", + "members":{ + "NextToken":{ + "shape":"NextToken", + "documentation":"A string that specifies the next page of results to return in a paginated response.
" + }, + "MaxResults":{ + "shape":"MaxResultsInteger", + "documentation":"The maximum number of parallel data resources returned for each request.
" + } + } + }, + "ListParallelDataResponse":{ + "type":"structure", + "members":{ + "ParallelDataPropertiesList":{ + "shape":"ParallelDataPropertiesList", + "documentation":"The properties of the parallel data resources returned by this request.
" + }, + "NextToken":{ + "shape":"NextToken", + "documentation":"The string to use in a subsequent request to get the next page of results in a paginated response. This value is null if there are no additional pages.
" + } + } + }, "ListTerminologiesRequest":{ "type":"structure", "members":{ @@ -511,6 +733,7 @@ } } }, + "Long":{"type":"long"}, "MaxResultsInteger":{ "type":"integer", "max":500, @@ -536,6 +759,140 @@ }, "documentation":"The output configuration properties for a batch translation job.
" }, + "ParallelDataArn":{ + "type":"string", + "max":512, + "min":1 + }, + "ParallelDataConfig":{ + "type":"structure", + "required":[ + "S3Uri", + "Format" + ], + "members":{ + "S3Uri":{ + "shape":"S3Uri", + "documentation":"The URI of the Amazon S3 folder that contains the parallel data input file. The folder must be in the same Region as the API endpoint you are calling.
" + }, + "Format":{ + "shape":"ParallelDataFormat", + "documentation":"The format of the parallel data input file.
" + } + }, + "documentation":"Specifies the format and S3 location of the parallel data input file.
" + }, + "ParallelDataDataLocation":{ + "type":"structure", + "required":[ + "RepositoryType", + "Location" + ], + "members":{ + "RepositoryType":{ + "shape":"String", + "documentation":"Describes the repository that contains the parallel data input file.
" + }, + "Location":{ + "shape":"String", + "documentation":"The Amazon S3 location of the parallel data input file. The location is returned as a presigned URL to that has a 30 minute expiration.
" + } + }, + "documentation":"The location of the most recent parallel data input file that was successfully imported into Amazon Translate.
" + }, + "ParallelDataFormat":{ + "type":"string", + "enum":[ + "TSV", + "CSV", + "TMX" + ] + }, + "ParallelDataProperties":{ + "type":"structure", + "members":{ + "Name":{ + "shape":"ResourceName", + "documentation":"The custom name assigned to the parallel data resource.
" + }, + "Arn":{ + "shape":"ParallelDataArn", + "documentation":"The Amazon Resource Name (ARN) of the parallel data resource.
" + }, + "Description":{ + "shape":"Description", + "documentation":"The description assigned to the parallel data resource.
" + }, + "Status":{ + "shape":"ParallelDataStatus", + "documentation":"The status of the parallel data resource. When the parallel data is ready for you to use, the status is ACTIVE.
The source language of the translations in the parallel data file.
" + }, + "TargetLanguageCodes":{ + "shape":"LanguageCodeStringList", + "documentation":"The language codes for the target languages available in the parallel data file. All possible target languages are returned as an array.
" + }, + "ParallelDataConfig":{ + "shape":"ParallelDataConfig", + "documentation":"Specifies the format and S3 location of the parallel data input file.
" + }, + "Message":{ + "shape":"UnboundedLengthString", + "documentation":"Additional information from Amazon Translate about the parallel data resource.
" + }, + "ImportedDataSize":{ + "shape":"Long", + "documentation":"The number of UTF-8 characters that Amazon Translate imported from the parallel data input file. This number includes only the characters in your translation examples. It does not include characters that are used to format your file. For example, if you provided a Translation Memory Exchange (.tmx) file, this number does not include the tags.
" + }, + "ImportedRecordCount":{ + "shape":"Long", + "documentation":"The number of records successfully imported from the parallel data input file.
" + }, + "FailedRecordCount":{ + "shape":"Long", + "documentation":"The number of records unsuccessfully imported from the parallel data input file.
" + }, + "SkippedRecordCount":{ + "shape":"Long", + "documentation":"The number of items in the input file that Amazon Translate skipped when you created or updated the parallel data resource. For example, Amazon Translate skips empty records, empty target texts, and empty lines.
" + }, + "EncryptionKey":{"shape":"EncryptionKey"}, + "CreatedAt":{ + "shape":"Timestamp", + "documentation":"The time at which the parallel data resource was created.
" + }, + "LastUpdatedAt":{ + "shape":"Timestamp", + "documentation":"The time at which the parallel data resource was last updated.
" + }, + "LatestUpdateAttemptStatus":{ + "shape":"ParallelDataStatus", + "documentation":"The status of the most recent update attempt for the parallel data resource.
" + }, + "LatestUpdateAttemptAt":{ + "shape":"Timestamp", + "documentation":"The time that the most recent update was attempted.
" + } + }, + "documentation":"The properties of a parallel data resource.
" + }, + "ParallelDataPropertiesList":{ + "type":"list", + "member":{"shape":"ParallelDataProperties"} + }, + "ParallelDataStatus":{ + "type":"string", + "enum":[ + "CREATING", + "UPDATING", + "ACTIVE", + "DELETING", + "FAILED" + ] + }, "ResourceName":{ "type":"string", "max":256, @@ -607,6 +964,10 @@ "shape":"ResourceNameList", "documentation":"The name of the terminology to use in the batch translation job. For a list of available terminologies, use the ListTerminologies operation.
" }, + "ParallelDataNames":{ + "shape":"ResourceNameList", + "documentation":"The names of the parallel data resources to use in the batch translation job. For a list of available parallel data resources, use the ListParallelData operation.
" + }, "ClientToken":{ "shape":"ClientTokenString", "documentation":"A unique identifier for the request. This token is auto-generated when using the Amazon Translate SDK.
", @@ -843,6 +1204,10 @@ "shape":"ResourceNameList", "documentation":"A list containing the names of the terminologies applied to a translation job. Only one terminology can be applied per StartTextTranslationJob request at this time.
" }, + "ParallelDataNames":{ + "shape":"ResourceNameList", + "documentation":"A list containing the names of the parallel data resources applied to the translation job.
" + }, "Message":{ "shape":"UnboundedLengthString", "documentation":"An explanation of any errors that may have occured during the translation job.
" @@ -951,6 +1316,54 @@ }, "documentation":"Amazon Translate does not support translation from the language of the source text into the requested target language. For more information, see how-to-error-msg.
", "exception":true + }, + "UpdateParallelDataRequest":{ + "type":"structure", + "required":[ + "Name", + "ParallelDataConfig", + "ClientToken" + ], + "members":{ + "Name":{ + "shape":"ResourceName", + "documentation":"The name of the parallel data resource being updated.
" + }, + "Description":{ + "shape":"Description", + "documentation":"A custom description for the parallel data resource in Amazon Translate.
" + }, + "ParallelDataConfig":{ + "shape":"ParallelDataConfig", + "documentation":"Specifies the format and S3 location of the parallel data input file.
" + }, + "ClientToken":{ + "shape":"ClientTokenString", + "documentation":"A unique identifier for the request. This token is automatically generated when you use Amazon Translate through an AWS SDK.
", + "idempotencyToken":true + } + } + }, + "UpdateParallelDataResponse":{ + "type":"structure", + "members":{ + "Name":{ + "shape":"ResourceName", + "documentation":"The name of the parallel data resource being updated.
" + }, + "Status":{ + "shape":"ParallelDataStatus", + "documentation":"The status of the parallel data resource that you are attempting to update. Your update request is accepted only if this status is either ACTIVE or FAILED.
The status of the parallel data update attempt. When the updated parallel data resource is ready for you to use, the status is ACTIVE.
The time that the most recent update was attempted.
" + } + } } }, "documentation":"Provides translation between one source language and another of the same set of languages.
" diff --git a/services/waf/pom.xml b/services/waf/pom.xml index 11b1c8292a93..87048cdb7411 100644 --- a/services/waf/pom.xml +++ b/services/waf/pom.xml @@ -21,7 +21,7 @@