diff --git a/.changes/2.1664.0.json b/.changes/2.1664.0.json new file mode 100644 index 0000000000..86e130a295 --- /dev/null +++ b/.changes/2.1664.0.json @@ -0,0 +1,62 @@ +[ + { + "type": "feature", + "category": "ApplicationAutoScaling", + "description": "Application Auto Scaling is now more responsive to the changes in demand of your SageMaker Inference endpoints. To get started, create or update a Target Tracking policy based on High Resolution CloudWatch metrics." + }, + { + "type": "feature", + "category": "ApplicationSignals", + "description": "CloudWatch Application Signals now supports application logs correlation with traces and operational health metrics of applications running on EC2 instances. Users can view the most relevant telemetry to troubleshoot application health anomalies such as spikes in latency, errors, and availability." + }, + { + "type": "feature", + "category": "BedrockRuntime", + "description": "Provides ServiceUnavailableException error message" + }, + { + "type": "feature", + "category": "CodeCommit", + "description": "CreateRepository API now throws OperationNotAllowedException when the account has been restricted from creating a repository." + }, + { + "type": "feature", + "category": "DataZone", + "description": "Introduces GetEnvironmentCredentials operation to SDK" + }, + { + "type": "feature", + "category": "EC2", + "description": "EC2 Fleet now supports using custom identifiers to reference Amazon Machine Images (AMI) in launch requests that are configured to choose from a diversified list of instance types." + }, + { + "type": "feature", + "category": "ECR", + "description": "API and documentation updates for Amazon ECR, adding support for creating, updating, describing and deleting ECR Repository Creation Template." + }, + { + "type": "feature", + "category": "EKS", + "description": "This release adds support for EKS cluster to manage extended support." + }, + { + "type": "feature", + "category": "ELBv2", + "description": "This release adds support for sharing trust stores across accounts and organizations through integration with AWS Resource Access Manager." + }, + { + "type": "feature", + "category": "NetworkFirewall", + "description": "You can now log events that are related to TLS inspection, in addition to the existing alert and flow logging." + }, + { + "type": "feature", + "category": "Outposts", + "description": "Adding default vCPU information to GetOutpostSupportedInstanceTypes and GetOutpostInstanceTypes responses" + }, + { + "type": "feature", + "category": "StepFunctions", + "description": "This release adds support to customer managed KMS key encryption in AWS Step Functions." + } +] \ No newline at end of file diff --git a/CHANGELOG.md b/CHANGELOG.md index 100e7fb14c..051b24cc4f 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,7 +1,21 @@ # Changelog for AWS SDK for JavaScript - + +## 2.1664.0 +* feature: ApplicationAutoScaling: Application Auto Scaling is now more responsive to the changes in demand of your SageMaker Inference endpoints. To get started, create or update a Target Tracking policy based on High Resolution CloudWatch metrics. +* feature: ApplicationSignals: CloudWatch Application Signals now supports application logs correlation with traces and operational health metrics of applications running on EC2 instances. Users can view the most relevant telemetry to troubleshoot application health anomalies such as spikes in latency, errors, and availability. +* feature: BedrockRuntime: Provides ServiceUnavailableException error message +* feature: CodeCommit: CreateRepository API now throws OperationNotAllowedException when the account has been restricted from creating a repository. +* feature: DataZone: Introduces GetEnvironmentCredentials operation to SDK +* feature: EC2: EC2 Fleet now supports using custom identifiers to reference Amazon Machine Images (AMI) in launch requests that are configured to choose from a diversified list of instance types. +* feature: ECR: API and documentation updates for Amazon ECR, adding support for creating, updating, describing and deleting ECR Repository Creation Template. +* feature: EKS: This release adds support for EKS cluster to manage extended support. +* feature: ELBv2: This release adds support for sharing trust stores across accounts and organizations through integration with AWS Resource Access Manager. +* feature: NetworkFirewall: You can now log events that are related to TLS inspection, in addition to the existing alert and flow logging. +* feature: Outposts: Adding default vCPU information to GetOutpostSupportedInstanceTypes and GetOutpostInstanceTypes responses +* feature: StepFunctions: This release adds support to customer managed KMS key encryption in AWS Step Functions. + ## 2.1663.0 * feature: CleanRooms: Three enhancements to the AWS Clean Rooms: Disallowed Output Columns, Flexible Result Receivers, SQL as a Seed * feature: IoTSiteWise: Adds support for creating SiteWise Edge gateways that run on a Siemens Industrial Edge Device. diff --git a/README.md b/README.md index 328a84a6cb..377f1f5e12 100644 --- a/README.md +++ b/README.md @@ -64,7 +64,7 @@ require('aws-sdk/lib/maintenance_mode_message').suppress = true; To use the SDK in the browser, simply add the following script tag to your HTML pages: - + You can also build a custom browser SDK with your specified set of AWS services. This can allow you to reduce the SDK's size, specify different API versions of diff --git a/apis/application-autoscaling-2016-02-06.normal.json b/apis/application-autoscaling-2016-02-06.normal.json index 72f13c6ae7..301a823739 100644 --- a/apis/application-autoscaling-2016-02-06.normal.json +++ b/apis/application-autoscaling-2016-02-06.normal.json @@ -840,7 +840,9 @@ "SageMakerVariantProvisionedConcurrencyUtilization", "ElastiCacheDatabaseCapacityUsageCountedForEvictPercentage", "SageMakerInferenceComponentInvocationsPerCopy", - "WorkSpacesAverageUserSessionsCapacityUtilization" + "WorkSpacesAverageUserSessionsCapacityUtilization", + "SageMakerInferenceComponentConcurrentRequestsPerCopyHighResolution", + "SageMakerVariantConcurrentRequestsPerModelHighResolution" ] }, "MetricUnit": { diff --git a/apis/application-signals-2024-04-15.min.json b/apis/application-signals-2024-04-15.min.json index 4713375d87..770cdf6ac6 100644 --- a/apis/application-signals-2024-04-15.min.json +++ b/apis/application-signals-2024-04-15.min.json @@ -2,6 +2,9 @@ "version": "2.0", "metadata": { "apiVersion": "2024-04-15", + "auth": [ + "aws.auth#sigv4" + ], "endpointPrefix": "application-signals", "protocol": "rest-json", "protocols": [ @@ -210,6 +213,9 @@ }, "MetricReferences": { "shape": "S22" + }, + "LogGroupReferences": { + "shape": "S25" } } }, @@ -218,6 +224,9 @@ }, "EndTime": { "type": "timestamp" + }, + "LogGroupReferences": { + "shape": "S25" } } } @@ -970,6 +979,12 @@ "MetricName": {} } } + }, + "S25": { + "type": "list", + "member": { + "shape": "Sg" + } } } } \ No newline at end of file diff --git a/apis/application-signals-2024-04-15.normal.json b/apis/application-signals-2024-04-15.normal.json index 06cb32b02c..14a56369db 100644 --- a/apis/application-signals-2024-04-15.normal.json +++ b/apis/application-signals-2024-04-15.normal.json @@ -2,6 +2,9 @@ "version": "2.0", "metadata": { "apiVersion": "2024-04-15", + "auth": [ + "aws.auth#sigv4" + ], "endpointPrefix": "application-signals", "protocol": "rest-json", "protocols": [ @@ -613,13 +616,13 @@ "members": { "StartTime": { "shape": "Timestamp", - "documentation": "
The start of the time period to retrieve information about. When used in a raw HTTP Query API, it is formatted as be epoch time in seconds. For example: 1698778057
The start of the time period to retrieve information about. When used in a raw HTTP Query API, it is formatted as be epoch time in seconds. For example: 1698778057
Your requested start time will be rounded to the nearest hour.
", "location": "querystring", "locationName": "StartTime" }, "EndTime": { "shape": "Timestamp", - "documentation": "The end of the time period to retrieve information about. When used in a raw HTTP Query API, it is formatted as be epoch time in seconds. For example: 1698778057
The end of the time period to retrieve information about. When used in a raw HTTP Query API, it is formatted as be epoch time in seconds. For example: 1698778057
Your requested start time will be rounded to the nearest hour.
", "location": "querystring", "locationName": "EndTime" }, @@ -669,11 +672,15 @@ }, "StartTime": { "shape": "Timestamp", - "documentation": "The start time of the data included in the response. In a raw HTTP Query API, it is formatted as be epoch time in seconds. For example: 1698778057
.
The start time of the data included in the response. In a raw HTTP Query API, it is formatted as be epoch time in seconds. For example: 1698778057
.
This displays the time that Application Signals used for the request. It might not match your request exactly, because it was rounded to the nearest hour.
" }, "EndTime": { "shape": "Timestamp", - "documentation": "The end time of the data included in the response. In a raw HTTP Query API, it is formatted as be epoch time in seconds. For example: 1698778057
.
The end time of the data included in the response. In a raw HTTP Query API, it is formatted as be epoch time in seconds. For example: 1698778057
.
This displays the time that Application Signals used for the request. It might not match your request exactly, because it was rounded to the nearest hour.
" + }, + "LogGroupReferences": { + "shape": "LogGroupReferences", + "documentation": "An array of string-to-string maps that each contain information about one log group associated with this service. Each string-to-string map includes the following fields:
\"Type\": \"AWS::Resource\"
\"ResourceType\": \"AWS::Logs::LogGroup\"
\"Identifier\": \"name-of-log-group\"
The start of the time period to retrieve information about. When used in a raw HTTP Query API, it is formatted as be epoch time in seconds. For example: 1698778057
The start of the time period to retrieve information about. When used in a raw HTTP Query API, it is formatted as be epoch time in seconds. For example: 1698778057
Your requested start time will be rounded to the nearest hour.
", "location": "querystring", "locationName": "StartTime" }, "EndTime": { "shape": "Timestamp", - "documentation": "The end of the time period to retrieve information about. When used in a raw HTTP Query API, it is formatted as be epoch time in seconds. For example: 1698778057
The end of the time period to retrieve information about. When used in a raw HTTP Query API, it is formatted as be epoch time in seconds. For example: 1698778057
Your requested end time will be rounded to the nearest hour.
", "location": "querystring", "locationName": "EndTime" }, @@ -774,11 +781,11 @@ "members": { "StartTime": { "shape": "Timestamp", - "documentation": "The start of the time period that the returned information applies to. When used in a raw HTTP Query API, it is formatted as be epoch time in seconds. For example: 1698778057
The start of the time period that the returned information applies to. When used in a raw HTTP Query API, it is formatted as be epoch time in seconds. For example: 1698778057
This displays the time that Application Signals used for the request. It might not match your request exactly, because it was rounded to the nearest hour.
" }, "EndTime": { "shape": "Timestamp", - "documentation": "The end of the time period that the returned information applies to. When used in a raw HTTP Query API, it is formatted as be epoch time in seconds. For example: 1698778057
The end of the time period that the returned information applies to. When used in a raw HTTP Query API, it is formatted as be epoch time in seconds. For example: 1698778057
This displays the time that Application Signals used for the request. It might not match your request exactly, because it was rounded to the nearest hour.
" }, "ServiceDependencies": { "shape": "ServiceDependencies", @@ -800,13 +807,13 @@ "members": { "StartTime": { "shape": "Timestamp", - "documentation": "The start of the time period to retrieve information about. When used in a raw HTTP Query API, it is formatted as be epoch time in seconds. For example: 1698778057
The start of the time period to retrieve information about. When used in a raw HTTP Query API, it is formatted as be epoch time in seconds. For example: 1698778057
Your requested start time will be rounded to the nearest hour.
", "location": "querystring", "locationName": "StartTime" }, "EndTime": { "shape": "Timestamp", - "documentation": "The end of the time period to retrieve information about. When used in a raw HTTP Query API, it is formatted as be epoch time in seconds. For example: 1698778057
The end of the time period to retrieve information about. When used in a raw HTTP Query API, it is formatted as be epoch time in seconds. For example: 1698778057
Your requested start time will be rounded to the nearest hour.
", "location": "querystring", "locationName": "EndTime" }, @@ -844,11 +851,11 @@ "members": { "StartTime": { "shape": "Timestamp", - "documentation": "The start of the time period that the returned information applies to. When used in a raw HTTP Query API, it is formatted as be epoch time in seconds. For example: 1698778057
The start of the time period that the returned information applies to. When used in a raw HTTP Query API, it is formatted as be epoch time in seconds. For example: 1698778057
This displays the time that Application Signals used for the request. It might not match your request exactly, because it was rounded to the nearest hour.
" }, "EndTime": { "shape": "Timestamp", - "documentation": "The end of the time period that the returned information applies to. When used in a raw HTTP Query API, it is formatted as be epoch time in seconds. For example: 1698778057
The end of the time period that the returned information applies to. When used in a raw HTTP Query API, it is formatted as be epoch time in seconds. For example: 1698778057
This displays the time that Application Signals used for the request. It might not match your request exactly, because it was rounded to the nearest hour.
" }, "ServiceDependents": { "shape": "ServiceDependents", @@ -922,13 +929,13 @@ "members": { "StartTime": { "shape": "Timestamp", - "documentation": "The start of the time period to retrieve information about. When used in a raw HTTP Query API, it is formatted as be epoch time in seconds. For example: 1698778057
The start of the time period to retrieve information about. When used in a raw HTTP Query API, it is formatted as be epoch time in seconds. For example: 1698778057
Your requested start time will be rounded to the nearest hour.
", "location": "querystring", "locationName": "StartTime" }, "EndTime": { "shape": "Timestamp", - "documentation": "The end of the time period to retrieve information about. When used in a raw HTTP Query API, it is formatted as be epoch time in seconds. For example: 1698778057
The end of the time period to retrieve information about. When used in a raw HTTP Query API, it is formatted as be epoch time in seconds. For example: 1698778057
Your requested end time will be rounded to the nearest hour.
", "location": "querystring", "locationName": "EndTime" }, @@ -960,11 +967,11 @@ "members": { "StartTime": { "shape": "Timestamp", - "documentation": "The start of the time period that the returned information applies to. When used in a raw HTTP Query API, it is formatted as be epoch time in seconds. For example: 1698778057
The start of the time period that the returned information applies to. When used in a raw HTTP Query API, it is formatted as be epoch time in seconds. For example: 1698778057
This displays the time that Application Signals used for the request. It might not match your request exactly, because it was rounded to the nearest hour.
" }, "EndTime": { "shape": "Timestamp", - "documentation": "The end of the time period that the returned information applies to. When used in a raw HTTP Query API, it is formatted as be epoch time in seconds. For example: 1698778057
The end of the time period that the returned information applies to. When used in a raw HTTP Query API, it is formatted as be epoch time in seconds. For example: 1698778057
This displays the time that Application Signals used for the request. It might not match your request exactly, because it was rounded to the nearest hour.
" }, "ServiceOperations": { "shape": "ServiceOperations", @@ -985,13 +992,13 @@ "members": { "StartTime": { "shape": "Timestamp", - "documentation": "The start of the time period to retrieve information about. When used in a raw HTTP Query API, it is formatted as be epoch time in seconds. For example: 1698778057
The start of the time period to retrieve information about. When used in a raw HTTP Query API, it is formatted as be epoch time in seconds. For example: 1698778057
Your requested start time will be rounded to the nearest hour.
", "location": "querystring", "locationName": "StartTime" }, "EndTime": { "shape": "Timestamp", - "documentation": "The end of the time period to retrieve information about. When used in a raw HTTP Query API, it is formatted as be epoch time in seconds. For example: 1698778057
The end of the time period to retrieve information about. When used in a raw HTTP Query API, it is formatted as be epoch time in seconds. For example: 1698778057
Your requested start time will be rounded to the nearest hour.
", "location": "querystring", "locationName": "EndTime" }, @@ -1025,11 +1032,11 @@ "members": { "StartTime": { "shape": "Timestamp", - "documentation": "The start of the time period that the returned information applies to. When used in a raw HTTP Query API, it is formatted as be epoch time in seconds. For example: 1698778057
The start of the time period that the returned information applies to. When used in a raw HTTP Query API, it is formatted as be epoch time in seconds. For example: 1698778057
This displays the time that Application Signals used for the request. It might not match your request exactly, because it was rounded to the nearest hour.
" }, "EndTime": { "shape": "Timestamp", - "documentation": "The end of the time period that the returned information applies to. When used in a raw HTTP Query API, it is formatted as be epoch time in seconds. For example: 1698778057
The end of the time period that the returned information applies to. When used in a raw HTTP Query API, it is formatted as be epoch time in seconds. For example: 1698778057
This displays the time that Application Signals used for the request. It might not match your request exactly, because it was rounded to the nearest hour.
" }, "ServiceSummaries": { "shape": "ServiceSummaries", @@ -1064,6 +1071,12 @@ } } }, + "LogGroupReferences": { + "type": "list", + "member": { + "shape": "Attributes" + } + }, "Metric": { "type": "structure", "members": { @@ -1277,6 +1290,10 @@ "MetricReferences": { "shape": "MetricReferences", "documentation": "An array of structures that each contain information about one metric associated with this service.
" + }, + "LogGroupReferences": { + "shape": "LogGroupReferences", + "documentation": "An array of string-to-string maps that each contain information about one log group associated with this service. Each string-to-string map includes the following fields:
\"Type\": \"AWS::Resource\"
\"ResourceType\": \"AWS::Logs::LogGroup\"
\"Identifier\": \"name-of-log-group\"
This structure contains information about one of your services that was discovered by Application Signals.
" @@ -1919,5 +1936,5 @@ "box": true } }, - "documentation": "This is a Preview release of the Application Signals API Reference. Operations and parameters are subject to change before the general availability release.
Use CloudWatch Application Signals for comprehensive observability of your cloud-based applications. It enables real-time service health dashboards and helps you track long-term performance trends against your business goals. The application-centric view provides you with unified visibility across your applications, services, and dependencies, so you can proactively monitor and efficiently triage any issues that may arise, ensuring optimal customer experience.
Application Signals provides the following benefits:
Automatically collect metrics and traces from your applications, and display key metrics such as call volume, availability, latency, faults, and errors.
Create and monitor service level objectives (SLOs).
See a map of your application topology that Application Signals automatically discovers, that gives you a visual representation of your applications, dependencies, and their connectivity.
Use CloudWatch Application Signals for comprehensive observability of your cloud-based applications. It enables real-time service health dashboards and helps you track long-term performance trends against your business goals. The application-centric view provides you with unified visibility across your applications, services, and dependencies, so you can proactively monitor and efficiently triage any issues that may arise, ensuring optimal customer experience.
Application Signals provides the following benefits:
Automatically collect metrics and traces from your applications, and display key metrics such as call volume, availability, latency, faults, and errors.
Create and monitor service level objectives (SLOs).
See a map of your application topology that Application Signals automatically discovers, that gives you a visual representation of your applications, dependencies, and their connectivity.
Application Signals works with CloudWatch RUM, CloudWatch Synthetics canaries, and Amazon Web Services Service Catalog AppRegistry, to display your client pages, Synthetics canaries, and application names within dashboards and maps.
" } \ No newline at end of file diff --git a/apis/bedrock-runtime-2023-09-30.min.json b/apis/bedrock-runtime-2023-09-30.min.json index 1efef711ae..4236a05212 100644 --- a/apis/bedrock-runtime-2023-09-30.min.json +++ b/apis/bedrock-runtime-2023-09-30.min.json @@ -2,9 +2,14 @@ "version": "2.0", "metadata": { "apiVersion": "2023-09-30", + "auth": [ + "aws.auth#sigv4" + ], "endpointPrefix": "bedrock-runtime", - "jsonVersion": "1.1", "protocol": "rest-json", + "protocols": [ + "rest-json" + ], "serviceFullName": "Amazon Bedrock Runtime", "serviceId": "Bedrock Runtime", "signatureVersion": "v4", @@ -404,6 +409,9 @@ }, "throttlingException": { "shape": "S41" + }, + "serviceUnavailableException": { + "shape": "S42" } }, "eventstream": true @@ -425,7 +433,7 @@ ], "members": { "body": { - "shape": "S43" + "shape": "S44" }, "contentType": { "location": "header", @@ -462,7 +470,7 @@ ], "members": { "body": { - "shape": "S43" + "shape": "S44" }, "contentType": { "location": "header", @@ -485,7 +493,7 @@ ], "members": { "body": { - "shape": "S43" + "shape": "S44" }, "contentType": { "location": "header", @@ -557,6 +565,9 @@ "senderFault": true }, "exception": true + }, + "serviceUnavailableException": { + "shape": "S42" } }, "eventstream": true @@ -1061,7 +1072,18 @@ }, "exception": true }, - "S43": { + "S42": { + "type": "structure", + "members": { + "message": {} + }, + "error": { + "httpStatusCode": 503 + }, + "exception": true, + "fault": true + }, + "S44": { "type": "blob", "sensitive": true } diff --git a/apis/bedrock-runtime-2023-09-30.normal.json b/apis/bedrock-runtime-2023-09-30.normal.json index aa4eadf555..9a9aed4a38 100644 --- a/apis/bedrock-runtime-2023-09-30.normal.json +++ b/apis/bedrock-runtime-2023-09-30.normal.json @@ -2,9 +2,14 @@ "version": "2.0", "metadata": { "apiVersion": "2023-09-30", + "auth": [ + "aws.auth#sigv4" + ], "endpointPrefix": "bedrock-runtime", - "jsonVersion": "1.1", "protocol": "rest-json", + "protocols": [ + "rest-json" + ], "serviceFullName": "Amazon Bedrock Runtime", "serviceId": "Bedrock Runtime", "signatureVersion": "v4", @@ -76,6 +81,9 @@ { "shape": "InternalServerException" }, + { + "shape": "ServiceUnavailableException" + }, { "shape": "ValidationException" }, @@ -86,7 +94,7 @@ "shape": "ModelErrorException" } ], - "documentation": "Sends messages to the specified Amazon Bedrock model. Converse
provides a consistent interface that works with all models that support messages. This allows you to write code once and use it with different models. Should a model have unique inference parameters, you can also pass those unique parameters to the model.
For information about the Converse API, see Use the Converse API in the Amazon Bedrock User Guide. To use a guardrail, see Use a guardrail with the Converse API in the Amazon Bedrock User Guide. To use a tool with a model, see Tool use (Function calling) in the Amazon Bedrock User Guide
For example code, see Converse API examples in the Amazon Bedrock User Guide.
This operation requires permission for the bedrock:InvokeModel
action.
Sends messages to the specified Amazon Bedrock model. Converse
provides a consistent interface that works with all models that support messages. This allows you to write code once and use it with different models. If a model has unique inference parameters, you can also pass those unique parameters to the model.
Amazon Bedrock doesn't store any text, images, or documents that you provide as content. The data is only used to generate the response.
For information about the Converse API, see Use the Converse API in the Amazon Bedrock User Guide. To use a guardrail, see Use a guardrail with the Converse API in the Amazon Bedrock User Guide. To use a tool with a model, see Tool use (Function calling) in the Amazon Bedrock User Guide
For example code, see Converse API examples in the Amazon Bedrock User Guide.
This operation requires permission for the bedrock:InvokeModel
action.
Sends messages to the specified Amazon Bedrock model and returns the response in a stream. ConverseStream
provides a consistent API that works with all Amazon Bedrock models that support messages. This allows you to write code once and use it with different models. Should a model have unique inference parameters, you can also pass those unique parameters to the model.
To find out if a model supports streaming, call GetFoundationModel and check the responseStreamingSupported
field in the response.
For information about the Converse API, see Use the Converse API in the Amazon Bedrock User Guide. To use a guardrail, see Use a guardrail with the Converse API in the Amazon Bedrock User Guide. To use a tool with a model, see Tool use (Function calling) in the Amazon Bedrock User Guide
For example code, see Conversation streaming example in the Amazon Bedrock User Guide.
This operation requires permission for the bedrock:InvokeModelWithResponseStream
action.
Sends messages to the specified Amazon Bedrock model and returns the response in a stream. ConverseStream
provides a consistent API that works with all Amazon Bedrock models that support messages. This allows you to write code once and use it with different models. Should a model have unique inference parameters, you can also pass those unique parameters to the model.
To find out if a model supports streaming, call GetFoundationModel and check the responseStreamingSupported
field in the response.
The CLI doesn't support streaming operations in Amazon Bedrock, including ConverseStream
.
Amazon Bedrock doesn't store any text, images, or documents that you provide as content. The data is only used to generate the response.
For information about the Converse API, see Use the Converse API in the Amazon Bedrock User Guide. To use a guardrail, see Use a guardrail with the Converse API in the Amazon Bedrock User Guide. To use a tool with a model, see Tool use (Function calling) in the Amazon Bedrock User Guide
For example code, see Conversation streaming example in the Amazon Bedrock User Guide.
This operation requires permission for the bedrock:InvokeModelWithResponseStream
action.
Invoke the specified Amazon Bedrock model to run inference using the prompt and inference parameters provided in the request body. The response is returned in a stream.
To see if a model supports streaming, call GetFoundationModel and check the responseStreamingSupported
field in the response.
The CLI doesn't support InvokeModelWithResponseStream
.
For example code, see Invoke model with streaming code example in the Amazon Bedrock User Guide.
This operation requires permissions to perform the bedrock:InvokeModelWithResponseStream
action.
Invoke the specified Amazon Bedrock model to run inference using the prompt and inference parameters provided in the request body. The response is returned in a stream.
To see if a model supports streaming, call GetFoundationModel and check the responseStreamingSupported
field in the response.
The CLI doesn't support streaming operations in Amazon Bedrock, including InvokeModelWithResponseStream
.
For example code, see Invoke model with streaming code example in the Amazon Bedrock User Guide.
This operation requires permissions to perform the bedrock:InvokeModelWithResponseStream
action.
The number of requests exceeds the limit. Resubmit your request later.
" + }, + "serviceUnavailableException": { + "shape": "ServiceUnavailableException", + "documentation": "The service isn't currently available. Try again later.
" } }, "documentation": "The messages output stream
", @@ -1897,16 +1918,33 @@ }, "throttlingException": { "shape": "ThrottlingException", - "documentation": "The number or frequency of requests exceeds the limit. Resubmit your request later.
" + "documentation": "Your request was throttled because of service-wide limitations. Resubmit your request later or in a different region. You can also purchase Provisioned Throughput to increase the rate or number of tokens you can process.
" }, "modelTimeoutException": { "shape": "ModelTimeoutException", "documentation": "The request took too long to process. Processing time exceeded the model timeout length.
" + }, + "serviceUnavailableException": { + "shape": "ServiceUnavailableException" } }, "documentation": "Definition of content in the response stream.
", "eventstream": true }, + "ServiceUnavailableException": { + "type": "structure", + "members": { + "message": { + "shape": "NonBlankString" + } + }, + "documentation": "The service isn't currently available. Try again later.
", + "error": { + "httpStatusCode": 503 + }, + "exception": true, + "fault": true + }, "SpecificToolChoice": { "type": "structure", "required": [ @@ -1968,7 +2006,7 @@ "shape": "NonBlankString" } }, - "documentation": "The number of requests exceeds the limit. Resubmit your request later.
", + "documentation": "Your request was throttled because of service-wide limitations. Resubmit your request later or in a different region. You can also purchase Provisioned Throughput to increase the rate or number of tokens you can process.
", "error": { "httpStatusCode": 429, "senderFault": true diff --git a/apis/codecommit-2015-04-13.min.json b/apis/codecommit-2015-04-13.min.json index 74a49782b9..3119e5d58d 100644 --- a/apis/codecommit-2015-04-13.min.json +++ b/apis/codecommit-2015-04-13.min.json @@ -5,12 +5,18 @@ "endpointPrefix": "codecommit", "jsonVersion": "1.1", "protocol": "json", + "protocols": [ + "json" + ], "serviceAbbreviation": "CodeCommit", "serviceFullName": "AWS CodeCommit", "serviceId": "CodeCommit", "signatureVersion": "v4", "targetPrefix": "CodeCommit_20150413", - "uid": "codecommit-2015-04-13" + "uid": "codecommit-2015-04-13", + "auth": [ + "aws.auth#sigv4" + ] }, "operations": { "AssociateApprovalRuleTemplateWithRepository": { diff --git a/apis/codecommit-2015-04-13.normal.json b/apis/codecommit-2015-04-13.normal.json index 6d3e44efa2..f1ff00b90c 100644 --- a/apis/codecommit-2015-04-13.normal.json +++ b/apis/codecommit-2015-04-13.normal.json @@ -5,12 +5,18 @@ "endpointPrefix": "codecommit", "jsonVersion": "1.1", "protocol": "json", + "protocols": [ + "json" + ], "serviceAbbreviation": "CodeCommit", "serviceFullName": "AWS CodeCommit", "serviceId": "CodeCommit", "signatureVersion": "v4", "targetPrefix": "CodeCommit_20150413", - "uid": "codecommit-2015-04-13" + "uid": "codecommit-2015-04-13", + "auth": [ + "aws.auth#sigv4" + ] }, "operations": { "AssociateApprovalRuleTemplateWithRepository": { @@ -721,6 +727,9 @@ { "shape": "RepositoryLimitExceededException" }, + { + "shape": "OperationNotAllowedException" + }, { "shape": "EncryptionIntegrityChecksFailedException" }, @@ -5727,7 +5736,7 @@ }, "kmsKeyId": { "shape": "KmsKeyId", - "documentation": "The ID of the encryption key. You can view the ID of an encryption key in the KMS console, or use the KMS APIs to programmatically retrieve a key ID. For more information about acceptable values for kmsKeyID, see KeyId in the Decrypt API description in the Key Management Service API Reference.
If no key is specified, the default aws/codecommit
Amazon Web Services managed key is used.
The ID of the encryption key. You can view the ID of an encryption key in the KMS console, or use the KMS APIs to programmatically retrieve a key ID. For more information about acceptable values for kmsKeyID, see KeyId in the Decrypt API description in the Key Management Service API Reference.
If no key is specified, the default aws/codecommit
Amazon Web Services managed key is used.
Represents the input of a create repository operation.
" @@ -9480,7 +9489,7 @@ }, "kmsKeyId": { "shape": "KmsKeyId", - "documentation": "The ID of the encryption key. You can view the ID of an encryption key in the KMS console, or use the KMS APIs to programmatically retrieve a key ID. For more information about acceptable values for keyID, see KeyId in the Decrypt API description in the Key Management Service API Reference.
" + "documentation": "The ID of the encryption key. You can view the ID of an encryption key in the KMS console, or use the KMS APIs to programmatically retrieve a key ID. For more information about acceptable values for keyID, see KeyId in the Decrypt API description in the Key Management Service API Reference.
" } } }, diff --git a/apis/datazone-2018-05-10.min.json b/apis/datazone-2018-05-10.min.json index b91ef11b3e..fcc47a701c 100644 --- a/apis/datazone-2018-05-10.min.json +++ b/apis/datazone-2018-05-10.min.json @@ -2996,6 +2996,42 @@ } } }, + "GetEnvironmentCredentials": { + "http": { + "method": "GET", + "requestUri": "/v2/domains/{domainIdentifier}/environments/{environmentIdentifier}/credentials", + "responseCode": 200 + }, + "input": { + "type": "structure", + "required": [ + "domainIdentifier", + "environmentIdentifier" + ], + "members": { + "domainIdentifier": { + "location": "uri", + "locationName": "domainIdentifier" + }, + "environmentIdentifier": { + "location": "uri", + "locationName": "environmentIdentifier" + } + } + }, + "output": { + "type": "structure", + "members": { + "accessKeyId": {}, + "expiration": { + "shape": "S4v" + }, + "secretAccessKey": {}, + "sessionToken": {} + }, + "sensitive": true + } + }, "GetEnvironmentProfile": { "http": { "method": "GET", @@ -3099,7 +3135,7 @@ }, "domainId": {}, "imports": { - "shape": "Sab" + "shape": "Sad" }, "model": { "shape": "S5t" @@ -3335,7 +3371,7 @@ "description": {}, "domainId": {}, "downstreamNodes": { - "shape": "Sao" + "shape": "Saq" }, "eventTimestamp": { "type": "timestamp" @@ -3353,7 +3389,7 @@ }, "updatedBy": {}, "upstreamNodes": { - "shape": "Sao" + "shape": "Saq" } } } @@ -3477,7 +3513,7 @@ "owningProjectId": {}, "status": {}, "target": { - "shape": "Say" + "shape": "Sb0" }, "type": {} } @@ -3849,7 +3885,7 @@ "entityId": {}, "entityType": {}, "form": { - "shape": "Sbh" + "shape": "Sbj" }, "formName": {} } @@ -4915,7 +4951,7 @@ "owningProjectId": {}, "status": {}, "target": { - "shape": "Say" + "shape": "Sb0" }, "type": {} } @@ -5816,7 +5852,7 @@ "forms": { "type": "list", "member": { - "shape": "Sbh" + "shape": "Sbj" } } } @@ -6111,14 +6147,14 @@ ], "members": { "additionalAttributes": { - "shape": "Sfd" + "shape": "Sff" }, "domainIdentifier": { "location": "uri", "locationName": "domainIdentifier" }, "filters": { - "shape": "Sff" + "shape": "Sfh" }, "maxResults": { "type": "integer" @@ -6126,12 +6162,12 @@ "nextToken": {}, "owningProjectIdentifier": {}, "searchIn": { - "shape": "Sfk" + "shape": "Sfm" }, "searchScope": {}, "searchText": {}, "sort": { - "shape": "Sfo" + "shape": "Sfq" } } }, @@ -6332,25 +6368,25 @@ ], "members": { "additionalAttributes": { - "shape": "Sfd" + "shape": "Sff" }, "domainIdentifier": { "location": "uri", "locationName": "domainIdentifier" }, "filters": { - "shape": "Sff" + "shape": "Sfh" }, "maxResults": { "type": "integer" }, "nextToken": {}, "searchIn": { - "shape": "Sfk" + "shape": "Sfm" }, "searchText": {}, "sort": { - "shape": "Sfo" + "shape": "Sfq" } } }, @@ -6425,7 +6461,7 @@ "locationName": "domainIdentifier" }, "filters": { - "shape": "Sff" + "shape": "Sfh" }, "managed": { "type": "boolean" @@ -6435,12 +6471,12 @@ }, "nextToken": {}, "searchIn": { - "shape": "Sfk" + "shape": "Sfm" }, "searchScope": {}, "searchText": {}, "sort": { - "shape": "Sfo" + "shape": "Sfq" } } }, @@ -6501,7 +6537,7 @@ }, "domainId": {}, "imports": { - "shape": "Sab" + "shape": "Sad" }, "model": { "shape": "S5t" @@ -6691,7 +6727,7 @@ }, "owningProjectIdentifier": {}, "target": { - "shape": "Say" + "shape": "Sb0" }, "type": {} } @@ -8711,7 +8747,7 @@ "value": {} } }, - "Sab": { + "Sad": { "type": "list", "member": { "type": "structure", @@ -8727,7 +8763,7 @@ } } }, - "Sao": { + "Saq": { "type": "list", "member": { "type": "structure", @@ -8739,7 +8775,7 @@ } } }, - "Say": { + "Sb0": { "type": "structure", "required": [ "identifier", @@ -8751,7 +8787,7 @@ "type": {} } }, - "Sbh": { + "Sbj": { "type": "structure", "required": [ "formName", @@ -8769,15 +8805,15 @@ "typeRevision": {} } }, - "Sfd": { + "Sff": { "type": "list", "member": {} }, - "Sff": { + "Sfh": { "type": "structure", "members": { "and": { - "shape": "Sfg" + "shape": "Sfi" }, "filter": { "type": "structure", @@ -8791,18 +8827,18 @@ } }, "or": { - "shape": "Sfg" + "shape": "Sfi" } }, "union": true }, - "Sfg": { + "Sfi": { "type": "list", "member": { - "shape": "Sff" + "shape": "Sfh" } }, - "Sfk": { + "Sfm": { "type": "list", "member": { "type": "structure", @@ -8814,7 +8850,7 @@ } } }, - "Sfo": { + "Sfq": { "type": "structure", "required": [ "attribute" diff --git a/apis/datazone-2018-05-10.normal.json b/apis/datazone-2018-05-10.normal.json index 861d5e7ac3..6fa2e76466 100644 --- a/apis/datazone-2018-05-10.normal.json +++ b/apis/datazone-2018-05-10.normal.json @@ -2092,6 +2092,41 @@ ], "documentation": "Gets the blueprint configuration in Amazon DataZone.
" }, + "GetEnvironmentCredentials": { + "name": "GetEnvironmentCredentials", + "http": { + "method": "GET", + "requestUri": "/v2/domains/{domainIdentifier}/environments/{environmentIdentifier}/credentials", + "responseCode": 200 + }, + "input": { + "shape": "GetEnvironmentCredentialsInput" + }, + "output": { + "shape": "GetEnvironmentCredentialsOutput" + }, + "errors": [ + { + "shape": "InternalServerException" + }, + { + "shape": "ResourceNotFoundException" + }, + { + "shape": "AccessDeniedException" + }, + { + "shape": "ThrottlingException" + }, + { + "shape": "ValidationException" + }, + { + "shape": "UnauthorizedException" + } + ], + "documentation": "Gets the credentials of an environment in Amazon DataZone.
" + }, "GetEnvironmentProfile": { "name": "GetEnvironmentProfile", "http": { @@ -10229,6 +10264,49 @@ } } }, + "GetEnvironmentCredentialsInput": { + "type": "structure", + "required": [ + "domainIdentifier", + "environmentIdentifier" + ], + "members": { + "domainIdentifier": { + "shape": "DomainId", + "documentation": "The ID of the Amazon DataZone domain in which this environment and its credentials exist.
", + "location": "uri", + "locationName": "domainIdentifier" + }, + "environmentIdentifier": { + "shape": "EnvironmentId", + "documentation": "The ID of the environment whose credentials this operation gets.
", + "location": "uri", + "locationName": "environmentIdentifier" + } + } + }, + "GetEnvironmentCredentialsOutput": { + "type": "structure", + "members": { + "accessKeyId": { + "shape": "String", + "documentation": "The access key ID of the environment.
" + }, + "expiration": { + "shape": "SyntheticTimestamp_date_time", + "documentation": "The expiration timestamp of the environment credentials.
" + }, + "secretAccessKey": { + "shape": "String", + "documentation": "The secret access key of the environment credentials.
" + }, + "sessionToken": { + "shape": "String", + "documentation": "The session token of the environment credentials.
" + } + }, + "sensitive": true + }, "GetEnvironmentInput": { "type": "structure", "required": [ diff --git a/apis/ec2-2016-11-15.normal.json b/apis/ec2-2016-11-15.normal.json index 2e5ab0c22c..03013cd235 100644 --- a/apis/ec2-2016-11-15.normal.json +++ b/apis/ec2-2016-11-15.normal.json @@ -32878,7 +32878,7 @@ }, "ImageId": { "shape": "ImageId", - "documentation": "The ID of the AMI. An AMI is required to launch an instance. This parameter is only available for fleets of type instant
. For fleets of type maintain
and request
, you must specify the AMI ID in the launch template.
The ID of the AMI in the format ami-17characters00000
.
Alternatively, you can specify a Systems Manager parameter, using one of the following formats. The Systems Manager parameter will resolve to an AMI ID on launch.
To reference a public parameter:
resolve:ssm:public-parameter
To reference a parameter stored in the same account:
resolve:ssm:parameter-name
resolve:ssm:parameter-name:version-number
resolve:ssm:parameter-name:label
To reference a parameter shared from another Amazon Web Services account:
resolve:ssm:parameter-ARN
resolve:ssm:parameter-ARN:version-number
resolve:ssm:parameter-ARN:label
For more information, see Use a Systems Manager parameter instead of an AMI ID in the Amazon EC2 User Guide.
This parameter is only available for fleets of type instant
. For fleets of type maintain
and request
, you must specify the AMI ID in the launch template.
The ID of the AMI. An AMI is required to launch an instance. This parameter is only available for fleets of type instant
. For fleets of type maintain
and request
, you must specify the AMI ID in the launch template.
The ID of the AMI in the format ami-17characters00000
.
Alternatively, you can specify a Systems Manager parameter, using one of the following formats. The Systems Manager parameter will resolve to an AMI ID on launch.
To reference a public parameter:
resolve:ssm:public-parameter
To reference a parameter stored in the same account:
resolve:ssm:parameter-name
resolve:ssm:parameter-name:version-number
resolve:ssm:parameter-name:label
To reference a parameter shared from another Amazon Web Services account:
resolve:ssm:parameter-ARN
resolve:ssm:parameter-ARN:version-number
resolve:ssm:parameter-ARN:label
For more information, see Use a Systems Manager parameter instead of an AMI ID in the Amazon EC2 User Guide.
This parameter is only available for fleets of type instant
. For fleets of type maintain
and request
, you must specify the AMI ID in the launch template.
Describes overrides for a launch template.
" @@ -53327,7 +53327,7 @@ }, "ImageId": { "shape": "ImageId", - "documentation": "The ID of the AMI. Alternatively, you can specify a Systems Manager parameter, which will resolve to an AMI ID on launch.
Valid formats:
ami-17characters00000
resolve:ssm:parameter-name
resolve:ssm:parameter-name:version-number
resolve:ssm:parameter-name:label
resolve:ssm:public-parameter
Currently, EC2 Fleet and Spot Fleet do not support specifying a Systems Manager parameter. If the launch template will be used by an EC2 Fleet or Spot Fleet, you must specify the AMI ID.
For more information, see Use a Systems Manager parameter instead of an AMI ID in the Amazon EC2 User Guide.
" + "documentation": "The ID of the AMI in the format ami-17characters00000
.
Alternatively, you can specify a Systems Manager parameter, using one of the following formats. The Systems Manager parameter will resolve to an AMI ID on launch.
To reference a public parameter:
resolve:ssm:public-parameter
To reference a parameter stored in the same account:
resolve:ssm:parameter-name
resolve:ssm:parameter-name:version-number
resolve:ssm:parameter-name:label
To reference a parameter shared from another Amazon Web Services account:
resolve:ssm:parameter-ARN
resolve:ssm:parameter-ARN:version-number
resolve:ssm:parameter-ARN:label
For more information, see Use a Systems Manager parameter instead of an AMI ID in the Amazon EC2 User Guide.
If the launch template will be used for an EC2 Fleet or Spot Fleet, note the following:
Only EC2 Fleets of type instant
support specifying a Systems Manager parameter.
For EC2 Fleets of type maintain
or request
, or for Spot Fleets, you must specify the AMI ID.
Creates a repository. For more information, see Amazon ECR repositories in the Amazon Elastic Container Registry User Guide.
" }, + "CreateRepositoryCreationTemplate": { + "name": "CreateRepositoryCreationTemplate", + "http": { + "method": "POST", + "requestUri": "/" + }, + "input": { + "shape": "CreateRepositoryCreationTemplateRequest" + }, + "output": { + "shape": "CreateRepositoryCreationTemplateResponse" + }, + "errors": [ + { + "shape": "ServerException" + }, + { + "shape": "ValidationException" + }, + { + "shape": "InvalidParameterException" + }, + { + "shape": "LimitExceededException" + }, + { + "shape": "TemplateAlreadyExistsException" + } + ], + "documentation": "Creates a repository creation template. This template is used to define the settings for repositories created by Amazon ECR on your behalf. For example, repositories created through pull through cache actions. For more information, see Private repository creation templates in the Amazon Elastic Container Registry User Guide.
" + }, "DeleteLifecyclePolicy": { "name": "DeleteLifecyclePolicy", "http": { @@ -370,6 +401,34 @@ ], "documentation": "Deletes a repository. If the repository isn't empty, you must either delete the contents of the repository or use the force
option to delete the repository and have Amazon ECR delete all of its contents on your behalf.
Deletes a repository creation template.
" + }, "DeleteRepositoryPolicy": { "name": "DeleteRepositoryPolicy", "http": { @@ -569,6 +628,31 @@ ], "documentation": "Describes image repositories in a registry.
" }, + "DescribeRepositoryCreationTemplates": { + "name": "DescribeRepositoryCreationTemplates", + "http": { + "method": "POST", + "requestUri": "/" + }, + "input": { + "shape": "DescribeRepositoryCreationTemplatesRequest" + }, + "output": { + "shape": "DescribeRepositoryCreationTemplatesResponse" + }, + "errors": [ + { + "shape": "ServerException" + }, + { + "shape": "ValidationException" + }, + { + "shape": "InvalidParameterException" + } + ], + "documentation": "Returns details about the repository creation templates in a registry. The prefixes
request parameter can be used to return the details for a specific repository creation template.
Creates or updates the replication configuration for a registry. The existing replication configuration for a repository can be retrieved with the DescribeRegistry API action. The first time the PutReplicationConfiguration API is called, a service-linked IAM role is created in your account for the replication process. For more information, see Using service-linked roles for Amazon ECR in the Amazon Elastic Container Registry User Guide.
When configuring cross-account replication, the destination account must grant the source account permission to replicate. This permission is controlled using a registry permissions policy. For more information, see PutRegistryPolicy.
Creates or updates the replication configuration for a registry. The existing replication configuration for a repository can be retrieved with the DescribeRegistry API action. The first time the PutReplicationConfiguration API is called, a service-linked IAM role is created in your account for the replication process. For more information, see Using service-linked roles for Amazon ECR in the Amazon Elastic Container Registry User Guide. For more information on the custom role for replication, see Creating an IAM role for replication.
When configuring cross-account replication, the destination account must grant the source account permission to replicate. This permission is controlled using a registry permissions policy. For more information, see PutRegistryPolicy.
Updates an existing pull through cache rule.
" }, + "UpdateRepositoryCreationTemplate": { + "name": "UpdateRepositoryCreationTemplate", + "http": { + "method": "POST", + "requestUri": "/" + }, + "input": { + "shape": "UpdateRepositoryCreationTemplateRequest" + }, + "output": { + "shape": "UpdateRepositoryCreationTemplateResponse" + }, + "errors": [ + { + "shape": "ServerException" + }, + { + "shape": "ValidationException" + }, + { + "shape": "InvalidParameterException" + }, + { + "shape": "TemplateNotFoundException" + } + ], + "documentation": "Updates an existing repository creation template.
" + }, "UploadLayerPart": { "name": "UploadLayerPart", "http": { @@ -1628,7 +1740,7 @@ }, "upstreamRegistryUrl": { "shape": "Url", - "documentation": "The registry URL of the upstream public registry to use as the source for the pull through cache rule. The following is the syntax to use for each supported upstream registry.
Amazon ECR Public (ecr-public
) - public.ecr.aws
Docker Hub (docker-hub
) - registry-1.docker.io
Quay (quay
) - quay.io
Kubernetes (k8s
) - registry.k8s.io
GitHub Container Registry (github-container-registry
) - ghcr.io
Microsoft Azure Container Registry (azure-container-registry
) - <custom>.azurecr.io
GitLab Container Registry (gitlab-container-registry
) - registry.gitlab.com
The registry URL of the upstream public registry to use as the source for the pull through cache rule. The following is the syntax to use for each supported upstream registry.
Amazon ECR Public (ecr-public
) - public.ecr.aws
Docker Hub (docker-hub
) - registry-1.docker.io
Quay (quay
) - quay.io
Kubernetes (k8s
) - registry.k8s.io
GitHub Container Registry (github-container-registry
) - ghcr.io
Microsoft Azure Container Registry (azure-container-registry
) - <custom>.azurecr.io
The repository namespace prefix to associate with the template. All repositories created using this namespace prefix will have the settings defined in this template applied. For example, a prefix of prod
would apply to all repositories beginning with prod/
. Similarly, a prefix of prod/team
would apply to all repositories beginning with prod/team/
.
To apply a template to all repositories in your registry that don't have an associated creation template, you can use ROOT
as the prefix.
There is always an assumed /
applied to the end of the prefix. If you specify ecr-public
as the prefix, Amazon ECR treats that as ecr-public/
. When using a pull through cache rule, the repository prefix you specify during rule creation is what you should specify as your repository creation template prefix as well.
A description for the repository creation template.
" + }, + "encryptionConfiguration": { + "shape": "EncryptionConfigurationForRepositoryCreationTemplate", + "documentation": "The encryption configuration to use for repositories created using the template.
" + }, + "resourceTags": { + "shape": "TagList", + "documentation": "The metadata to apply to the repository to help you categorize and organize. Each tag consists of a key and an optional value, both of which you define. Tag keys can have a maximum character length of 128 characters, and tag values can have a maximum length of 256 characters.
" + }, + "imageTagMutability": { + "shape": "ImageTagMutability", + "documentation": "The tag mutability setting for the repository. If this parameter is omitted, the default setting of MUTABLE
will be used which will allow image tags to be overwritten. If IMMUTABLE
is specified, all image tags within the repository will be immutable which will prevent them from being overwritten.
The repository policy to apply to repositories created using the template. A repository policy is a permissions policy associated with a repository to control access permissions.
" + }, + "lifecyclePolicy": { + "shape": "LifecyclePolicyTextForRepositoryCreationTemplate", + "documentation": "The lifecycle policy to use for repositories created using the template.
" + }, + "appliedFor": { + "shape": "RCTAppliedForList", + "documentation": "A list of enumerable strings representing the Amazon ECR repository creation scenarios that this template will apply towards. The two supported scenarios are PULL_THROUGH_CACHE
and REPLICATION
The ARN of the role to be assumed by Amazon ECR. This role must be in the same account as the registry that you are configuring.
" + } + } + }, + "CreateRepositoryCreationTemplateResponse": { + "type": "structure", + "members": { + "registryId": { + "shape": "RegistryId", + "documentation": "The registry ID associated with the request.
" + }, + "repositoryCreationTemplate": { + "shape": "RepositoryCreationTemplate", + "documentation": "The details of the repository creation template associated with the request.
" + } + } + }, "CreateRepositoryRequest": { "type": "structure", "required": [ @@ -1723,6 +1893,10 @@ "min": 50, "pattern": "^arn:aws:secretsmanager:[a-zA-Z0-9-:]+:secret:ecr\\-pullthroughcache\\/[a-zA-Z0-9\\/_+=.@-]+$" }, + "CustomRoleArn": { + "type": "string", + "max": 2048 + }, "CvssScore": { "type": "structure", "members": { @@ -1895,6 +2069,31 @@ } } }, + "DeleteRepositoryCreationTemplateRequest": { + "type": "structure", + "required": [ + "prefix" + ], + "members": { + "prefix": { + "shape": "Prefix", + "documentation": "The repository namespace prefix associated with the repository creation template.
" + } + } + }, + "DeleteRepositoryCreationTemplateResponse": { + "type": "structure", + "members": { + "registryId": { + "shape": "RegistryId", + "documentation": "The registry ID associated with the request.
" + }, + "repositoryCreationTemplate": { + "shape": "RepositoryCreationTemplate", + "documentation": "The details of the repository creation template that was deleted.
" + } + } + }, "DeleteRepositoryPolicyRequest": { "type": "structure", "required": [ @@ -2147,7 +2346,7 @@ "members": { "registryId": { "shape": "RegistryId", - "documentation": "The ID of the registry.
" + "documentation": "The registry ID associated with the request.
" }, "replicationConfiguration": { "shape": "ReplicationConfiguration", @@ -2189,6 +2388,40 @@ } } }, + "DescribeRepositoryCreationTemplatesRequest": { + "type": "structure", + "members": { + "prefixes": { + "shape": "PrefixList", + "documentation": "The repository namespace prefixes associated with the repository creation templates to describe. If this value is not specified, all repository creation templates are returned.
" + }, + "nextToken": { + "shape": "NextToken", + "documentation": "The nextToken
value returned from a previous paginated DescribeRepositoryCreationTemplates
request where maxResults
was used and the results exceeded the value of that parameter. Pagination continues from the end of the previous results that returned the nextToken
value. This value is null
when there are no more results to return.
This token should be treated as an opaque identifier that is only used to retrieve the next items in a list and not for other programmatic purposes.
The maximum number of repository results returned by DescribeRepositoryCreationTemplatesRequest
in paginated output. When this parameter is used, DescribeRepositoryCreationTemplatesRequest
only returns maxResults
results in a single page along with a nextToken
response element. The remaining results of the initial request can be seen by sending another DescribeRepositoryCreationTemplatesRequest
request with the returned nextToken
value. This value can be between 1 and 1000. If this parameter is not used, then DescribeRepositoryCreationTemplatesRequest
returns up to 100 results and a nextToken
value, if applicable.
The registry ID associated with the request.
" + }, + "repositoryCreationTemplates": { + "shape": "RepositoryCreationTemplateList", + "documentation": "The details of the repository creation templates.
" + }, + "nextToken": { + "shape": "NextToken", + "documentation": "The nextToken
value to include in a future DescribeRepositoryCreationTemplates
request. When the results of a DescribeRepositoryCreationTemplates
request exceed maxResults
, this value can be used to retrieve the next page of results. This value is null
when there are no more results to return.
The encryption type to use.
If you use the KMS
encryption type, the contents of the repository will be encrypted using server-side encryption with Key Management Service key stored in KMS. When you use KMS to encrypt your data, you can either use the default Amazon Web Services managed KMS key for Amazon ECR, or specify your own KMS key, which you already created. For more information, see Protecting data using server-side encryption with an KMS key stored in Key Management Service (SSE-KMS) in the Amazon Simple Storage Service Console Developer Guide.
If you use the AES256
encryption type, Amazon ECR uses server-side encryption with Amazon S3-managed encryption keys which encrypts the images in the repository using an AES-256 encryption algorithm. For more information, see Protecting data using server-side encryption with Amazon S3-managed encryption keys (SSE-S3) in the Amazon Simple Storage Service Console Developer Guide.
The encryption type to use.
If you use the KMS
encryption type, the contents of the repository will be encrypted using server-side encryption with Key Management Service key stored in KMS. When you use KMS to encrypt your data, you can either use the default Amazon Web Services managed KMS key for Amazon ECR, or specify your own KMS key, which you already created. For more information, see Protecting data using server-side encryption with an KMS key stored in Key Management Service (SSE-KMS) in the Amazon Simple Storage Service Console Developer Guide.
If you use the AES256
encryption type, Amazon ECR uses server-side encryption with Amazon S3-managed encryption keys which encrypts the images in the repository using an AES256 encryption algorithm. For more information, see Protecting data using server-side encryption with Amazon S3-managed encryption keys (SSE-S3) in the Amazon Simple Storage Service Console Developer Guide.
If you use the KMS
encryption type, specify the KMS key to use for encryption. The alias, key ID, or full ARN of the KMS key can be specified. The key must exist in the same Region as the repository. If no key is specified, the default Amazon Web Services managed KMS key for Amazon ECR will be used.
The encryption configuration for the repository. This determines how the contents of your repository are encrypted at rest.
By default, when no encryption configuration is set or the AES256
encryption type is used, Amazon ECR uses server-side encryption with Amazon S3-managed encryption keys which encrypts your data at rest using an AES-256 encryption algorithm. This does not require any action on your part.
For more control over the encryption of the contents of your repository, you can use server-side encryption with Key Management Service key stored in Key Management Service (KMS) to encrypt your images. For more information, see Amazon ECR encryption at rest in the Amazon Elastic Container Registry User Guide.
" + "documentation": "The encryption configuration for the repository. This determines how the contents of your repository are encrypted at rest.
By default, when no encryption configuration is set or the AES256
encryption type is used, Amazon ECR uses server-side encryption with Amazon S3-managed encryption keys which encrypts your data at rest using an AES256 encryption algorithm. This does not require any action on your part.
For more control over the encryption of the contents of your repository, you can use server-side encryption with Key Management Service key stored in Key Management Service (KMS) to encrypt your images. For more information, see Amazon ECR encryption at rest in the Amazon Elastic Container Registry User Guide.
" + }, + "EncryptionConfigurationForRepositoryCreationTemplate": { + "type": "structure", + "required": [ + "encryptionType" + ], + "members": { + "encryptionType": { + "shape": "EncryptionType", + "documentation": "The encryption type to use.
If you use the KMS
encryption type, the contents of the repository will be encrypted using server-side encryption with Key Management Service key stored in KMS. When you use KMS to encrypt your data, you can either use the default Amazon Web Services managed KMS key for Amazon ECR, or specify your own KMS key, which you already created. For more information, see Protecting data using server-side encryption with an KMS key stored in Key Management Service (SSE-KMS) in the Amazon Simple Storage Service Console Developer Guide.
If you use the AES256
encryption type, Amazon ECR uses server-side encryption with Amazon S3-managed encryption keys which encrypts the images in the repository using an AES256 encryption algorithm. For more information, see Protecting data using server-side encryption with Amazon S3-managed encryption keys (SSE-S3) in the Amazon Simple Storage Service Console Developer Guide.
If you use the KMS
encryption type, specify the KMS key to use for encryption. The full ARN of the KMS key must be specified. The key must exist in the same Region as the repository. If no key is specified, the default Amazon Web Services managed KMS key for Amazon ECR will be used.
The encryption configuration to associate with the repository creation template.
" }, "EncryptionType": { "type": "string", @@ -2502,7 +2752,7 @@ "members": { "registryId": { "shape": "RegistryId", - "documentation": "The ID of the registry.
" + "documentation": "The registry ID associated with the request.
" }, "policyText": { "shape": "RegistryPolicyText", @@ -2519,7 +2769,7 @@ "members": { "registryId": { "shape": "RegistryId", - "documentation": "The ID of the registry.
" + "documentation": "The registry ID associated with the request.
" }, "scanningConfiguration": { "shape": "RegistryScanningConfiguration", @@ -2922,6 +3172,12 @@ "max": 2048, "min": 1 }, + "KmsKeyForRepositoryCreationTemplate": { + "type": "string", + "max": 2048, + "min": 0, + "pattern": "^$|arn:aws:kms:[a-z0-9-]+:[0-9]{12}:key\\/[a-z0-9-]+" + }, "Layer": { "type": "structure", "members": { @@ -3091,6 +3347,11 @@ "max": 30720, "min": 100 }, + "LifecyclePolicyTextForRepositoryCreationTemplate": { + "type": "string", + "max": 30720, + "min": 0 + }, "LifecyclePreviewMaxResults": { "type": "integer", "max": 100, @@ -3249,6 +3510,18 @@ "Platform": { "type": "string" }, + "Prefix": { + "type": "string", + "max": 256, + "min": 1, + "pattern": "^((?:[a-z0-9]+(?:[._-][a-z0-9]+)*/)*[a-z0-9]+(?:[._-][a-z0-9]+)*/?|ROOT)$" + }, + "PrefixList": { + "type": "list", + "member": { + "shape": "Prefix" + } + }, "ProxyEndpoint": { "type": "string" }, @@ -3482,7 +3755,7 @@ "members": { "registryId": { "shape": "RegistryId", - "documentation": "The registry ID.
" + "documentation": "The registry ID associated with the request.
" }, "policyText": { "shape": "RegistryPolicyText", @@ -3533,6 +3806,19 @@ } } }, + "RCTAppliedFor": { + "type": "string", + "enum": [ + "REPLICATION", + "PULL_THROUGH_CACHE" + ] + }, + "RCTAppliedForList": { + "type": "list", + "member": { + "shape": "RCTAppliedFor" + } + }, "Reason": { "type": "string" }, @@ -3751,6 +4037,62 @@ }, "documentation": "An object representing a repository.
" }, + "RepositoryCreationTemplate": { + "type": "structure", + "members": { + "prefix": { + "shape": "Prefix", + "documentation": "The repository namespace prefix associated with the repository creation template.
" + }, + "description": { + "shape": "RepositoryTemplateDescription", + "documentation": "The description associated with the repository creation template.
" + }, + "encryptionConfiguration": { + "shape": "EncryptionConfigurationForRepositoryCreationTemplate", + "documentation": "The encryption configuration associated with the repository creation template.
" + }, + "resourceTags": { + "shape": "TagList", + "documentation": "The metadata to apply to the repository to help you categorize and organize. Each tag consists of a key and an optional value, both of which you define. Tag keys can have a maximum character length of 128 characters, and tag values can have a maximum length of 256 characters.
" + }, + "imageTagMutability": { + "shape": "ImageTagMutability", + "documentation": "The tag mutability setting for the repository. If this parameter is omitted, the default setting of MUTABLE will be used which will allow image tags to be overwritten. If IMMUTABLE is specified, all image tags within the repository will be immutable which will prevent them from being overwritten.
" + }, + "repositoryPolicy": { + "shape": "RepositoryPolicyText", + "documentation": "he repository policy to apply to repositories created using the template. A repository policy is a permissions policy associated with a repository to control access permissions.
" + }, + "lifecyclePolicy": { + "shape": "LifecyclePolicyTextForRepositoryCreationTemplate", + "documentation": "The lifecycle policy to use for repositories created using the template.
" + }, + "appliedFor": { + "shape": "RCTAppliedForList", + "documentation": "A list of enumerable Strings representing the repository creation scenarios that this template will apply towards. The two supported scenarios are PULL_THROUGH_CACHE and REPLICATION
" + }, + "customRoleArn": { + "shape": "CustomRoleArn", + "documentation": "The ARN of the role to be assumed by Amazon ECR.
" + }, + "createdAt": { + "shape": "Date", + "documentation": "The date and time, in JavaScript date format, when the repository creation template was created.
" + }, + "updatedAt": { + "shape": "Date", + "documentation": "The date and time, in JavaScript date format, when the repository creation template was last updated.
" + } + }, + "documentation": "The details of the repository creation template associated with the request.
" + }, + "RepositoryCreationTemplateList": { + "type": "list", + "member": { + "shape": "RepositoryCreationTemplate" + } + }, "RepositoryFilter": { "type": "structure", "required": [ @@ -3870,6 +4212,10 @@ "shape": "RepositoryScanningConfiguration" } }, + "RepositoryTemplateDescription": { + "type": "string", + "max": 256 + }, "Resource": { "type": "structure", "members": { @@ -4301,6 +4647,62 @@ } } }, + "UpdateRepositoryCreationTemplateRequest": { + "type": "structure", + "required": [ + "prefix" + ], + "members": { + "prefix": { + "shape": "Prefix", + "documentation": "The repository namespace prefix that matches an existing repository creation template in the registry. All repositories created using this namespace prefix will have the settings defined in this template applied. For example, a prefix of prod
would apply to all repositories beginning with prod/
. This includes a repository named prod/team1
as well as a repository named prod/repository1
.
To apply a template to all repositories in your registry that don't have an associated creation template, you can use ROOT
as the prefix.
A description for the repository creation template.
" + }, + "encryptionConfiguration": { + "shape": "EncryptionConfigurationForRepositoryCreationTemplate" + }, + "resourceTags": { + "shape": "TagList", + "documentation": "The metadata to apply to the repository to help you categorize and organize. Each tag consists of a key and an optional value, both of which you define. Tag keys can have a maximum character length of 128 characters, and tag values can have a maximum length of 256 characters.
" + }, + "imageTagMutability": { + "shape": "ImageTagMutability", + "documentation": "Updates the tag mutability setting for the repository. If this parameter is omitted, the default setting of MUTABLE
will be used which will allow image tags to be overwritten. If IMMUTABLE
is specified, all image tags within the repository will be immutable which will prevent them from being overwritten.
Updates the repository policy created using the template. A repository policy is a permissions policy associated with a repository to control access permissions.
" + }, + "lifecyclePolicy": { + "shape": "LifecyclePolicyTextForRepositoryCreationTemplate", + "documentation": "Updates the lifecycle policy associated with the specified repository creation template.
" + }, + "appliedFor": { + "shape": "RCTAppliedForList", + "documentation": "Updates the list of enumerable strings representing the Amazon ECR repository creation scenarios that this template will apply towards. The two supported scenarios are PULL_THROUGH_CACHE
and REPLICATION
The ARN of the role to be assumed by Amazon ECR. This role must be in the same account as the registry that you are configuring.
" + } + } + }, + "UpdateRepositoryCreationTemplateResponse": { + "type": "structure", + "members": { + "registryId": { + "shape": "RegistryId", + "documentation": "The registry ID associated with the request.
" + }, + "repositoryCreationTemplate": { + "shape": "RepositoryCreationTemplate", + "documentation": "The details of the repository creation template associated with the request.
" + } + } + }, "UpdatedTimestamp": { "type": "timestamp" }, diff --git a/apis/ecr-2015-09-21.paginators.json b/apis/ecr-2015-09-21.paginators.json index e382b79e44..ff500182c5 100644 --- a/apis/ecr-2015-09-21.paginators.json +++ b/apis/ecr-2015-09-21.paginators.json @@ -34,6 +34,15 @@ "output_token": "nextToken", "result_key": "repositories" }, + "DescribeRepositoryCreationTemplates": { + "input_token": "nextToken", + "limit_key": "maxResults", + "non_aggregate_keys": [ + "registryId" + ], + "output_token": "nextToken", + "result_key": "repositoryCreationTemplates" + }, "GetLifecyclePolicyPreview": { "input_token": "nextToken", "limit_key": "maxResults", diff --git a/apis/eks-2017-11-01.min.json b/apis/eks-2017-11-01.min.json index 8977d82b9b..b7518aed1b 100644 --- a/apis/eks-2017-11-01.min.json +++ b/apis/eks-2017-11-01.min.json @@ -289,6 +289,9 @@ }, "bootstrapSelfManagedAddons": { "type": "boolean" + }, + "upgradePolicy": { + "shape": "S1r" } } }, @@ -296,7 +299,7 @@ "type": "structure", "members": { "cluster": { - "shape": "S1s" + "shape": "S1u" } } } @@ -314,7 +317,7 @@ "members": { "name": {}, "term": { - "shape": "S2a" + "shape": "S2d" }, "licenseQuantity": { "type": "integer" @@ -335,7 +338,7 @@ "type": "structure", "members": { "subscription": { - "shape": "S2f" + "shape": "S2i" } } } @@ -362,7 +365,7 @@ "shape": "S5" }, "selectors": { - "shape": "S2h" + "shape": "S2k" }, "clientRequestToken": { "idempotencyToken": true @@ -376,7 +379,7 @@ "type": "structure", "members": { "fargateProfile": { - "shape": "S2l" + "shape": "S2o" } } } @@ -400,7 +403,7 @@ }, "nodegroupName": {}, "scalingConfig": { - "shape": "S2s" + "shape": "S2v" }, "diskSize": { "type": "integer" @@ -413,14 +416,14 @@ }, "amiType": {}, "remoteAccess": { - "shape": "S2x" + "shape": "S30" }, "nodeRole": {}, "labels": { - "shape": "S2y" + "shape": "S31" }, "taints": { - "shape": "S31" + "shape": "S34" }, "tags": { "shape": "Ss" @@ -429,10 +432,10 @@ "idempotencyToken": true }, "launchTemplate": { - "shape": "S36" + "shape": "S39" }, "updateConfig": { - "shape": "S37" + "shape": "S3a" }, "capacityType": {}, "version": {}, @@ -443,7 +446,7 @@ "type": "structure", "members": { "nodegroup": { - "shape": "S3c" + "shape": "S3f" } } } @@ -480,7 +483,7 @@ "type": "structure", "members": { "association": { - "shape": "S3n" + "shape": "S3q" } } } @@ -569,7 +572,7 @@ "type": "structure", "members": { "cluster": { - "shape": "S1s" + "shape": "S1u" } } } @@ -595,7 +598,7 @@ "type": "structure", "members": { "subscription": { - "shape": "S2f" + "shape": "S2i" } } } @@ -626,7 +629,7 @@ "type": "structure", "members": { "fargateProfile": { - "shape": "S2l" + "shape": "S2o" } } } @@ -657,7 +660,7 @@ "type": "structure", "members": { "nodegroup": { - "shape": "S3c" + "shape": "S3f" } } } @@ -688,7 +691,7 @@ "type": "structure", "members": { "association": { - "shape": "S3n" + "shape": "S3q" } } } @@ -714,7 +717,7 @@ "type": "structure", "members": { "cluster": { - "shape": "S1s" + "shape": "S1u" } } } @@ -942,7 +945,7 @@ "type": "structure", "members": { "cluster": { - "shape": "S1s" + "shape": "S1u" } } } @@ -968,7 +971,7 @@ "type": "structure", "members": { "subscription": { - "shape": "S2f" + "shape": "S2i" } } } @@ -999,7 +1002,7 @@ "type": "structure", "members": { "fargateProfile": { - "shape": "S2l" + "shape": "S2o" } } } @@ -1020,7 +1023,7 @@ "locationName": "name" }, "identityProviderConfig": { - "shape": "S4s" + "shape": "S4v" } } }, @@ -1096,7 +1099,7 @@ }, "description": {}, "insightStatus": { - "shape": "S51" + "shape": "S54" }, "recommendation": {}, "additionalInfo": { @@ -1110,7 +1113,7 @@ "type": "structure", "members": { "insightStatus": { - "shape": "S51" + "shape": "S54" }, "kubernetesResourceUri": {}, "arn": {} @@ -1180,7 +1183,7 @@ "type": "structure", "members": { "nodegroup": { - "shape": "S3c" + "shape": "S3f" } } } @@ -1211,7 +1214,7 @@ "type": "structure", "members": { "association": { - "shape": "S3n" + "shape": "S3q" } } } @@ -1303,7 +1306,7 @@ "locationName": "name" }, "identityProviderConfig": { - "shape": "S4s" + "shape": "S4v" }, "clientRequestToken": { "idempotencyToken": true @@ -1543,7 +1546,7 @@ "subscriptions": { "type": "list", "member": { - "shape": "S2f" + "shape": "S2i" } }, "nextToken": {} @@ -1618,7 +1621,7 @@ "identityProviderConfigs": { "type": "list", "member": { - "shape": "S4s" + "shape": "S4v" } }, "nextToken": {} @@ -1681,7 +1684,7 @@ }, "description": {}, "insightStatus": { - "shape": "S51" + "shape": "S54" } } } @@ -1886,7 +1889,7 @@ "type": "structure", "members": { "cluster": { - "shape": "S1s" + "shape": "S1u" } } } @@ -2050,6 +2053,9 @@ "members": { "authenticationMode": {} } + }, + "upgradePolicy": { + "shape": "S1r" } } }, @@ -2119,7 +2125,7 @@ "type": "structure", "members": { "subscription": { - "shape": "S2f" + "shape": "S2i" } } } @@ -2147,7 +2153,7 @@ "type": "structure", "members": { "addOrUpdateLabels": { - "shape": "S2y" + "shape": "S31" }, "removeLabels": { "type": "list", @@ -2159,18 +2165,18 @@ "type": "structure", "members": { "addOrUpdateTaints": { - "shape": "S31" + "shape": "S34" }, "removeTaints": { - "shape": "S31" + "shape": "S34" } } }, "scalingConfig": { - "shape": "S2s" + "shape": "S2v" }, "updateConfig": { - "shape": "S37" + "shape": "S3a" }, "clientRequestToken": { "idempotencyToken": true @@ -2208,7 +2214,7 @@ "version": {}, "releaseVersion": {}, "launchTemplate": { - "shape": "S36" + "shape": "S39" }, "force": { "type": "boolean" @@ -2256,7 +2262,7 @@ "type": "structure", "members": { "association": { - "shape": "S3n" + "shape": "S3q" } } } @@ -2482,7 +2488,13 @@ } } }, - "S1s": { + "S1r": { + "type": "structure", + "members": { + "supportType": {} + } + }, + "S1u": { "type": "structure", "members": { "name": {}, @@ -2610,10 +2622,16 @@ }, "authenticationMode": {} } + }, + "upgradePolicy": { + "type": "structure", + "members": { + "supportType": {} + } } } }, - "S2a": { + "S2d": { "type": "structure", "members": { "duration": { @@ -2622,7 +2640,7 @@ "unit": {} } }, - "S2f": { + "S2i": { "type": "structure", "members": { "id": {}, @@ -2641,7 +2659,7 @@ }, "licenseType": {}, "term": { - "shape": "S2a" + "shape": "S2d" }, "status": {}, "autoRenew": { @@ -2655,7 +2673,7 @@ } } }, - "S2h": { + "S2k": { "type": "list", "member": { "type": "structure", @@ -2669,7 +2687,7 @@ } } }, - "S2l": { + "S2o": { "type": "structure", "members": { "fargateProfileName": {}, @@ -2683,7 +2701,7 @@ "shape": "S5" }, "selectors": { - "shape": "S2h" + "shape": "S2k" }, "status": {}, "tags": { @@ -2709,7 +2727,7 @@ } } }, - "S2s": { + "S2v": { "type": "structure", "members": { "minSize": { @@ -2723,7 +2741,7 @@ } } }, - "S2x": { + "S30": { "type": "structure", "members": { "ec2SshKey": {}, @@ -2732,12 +2750,12 @@ } } }, - "S2y": { + "S31": { "type": "map", "key": {}, "value": {} }, - "S31": { + "S34": { "type": "list", "member": { "type": "structure", @@ -2748,7 +2766,7 @@ } } }, - "S36": { + "S39": { "type": "structure", "members": { "name": {}, @@ -2756,7 +2774,7 @@ "id": {} } }, - "S37": { + "S3a": { "type": "structure", "members": { "maxUnavailable": { @@ -2767,7 +2785,7 @@ } } }, - "S3c": { + "S3f": { "type": "structure", "members": { "nodegroupName": {}, @@ -2784,7 +2802,7 @@ "status": {}, "capacityType": {}, "scalingConfig": { - "shape": "S2s" + "shape": "S2v" }, "instanceTypes": { "shape": "S5" @@ -2793,15 +2811,15 @@ "shape": "S5" }, "remoteAccess": { - "shape": "S2x" + "shape": "S30" }, "amiType": {}, "nodeRole": {}, "labels": { - "shape": "S2y" + "shape": "S31" }, "taints": { - "shape": "S31" + "shape": "S34" }, "resources": { "type": "structure", @@ -2840,17 +2858,17 @@ } }, "updateConfig": { - "shape": "S37" + "shape": "S3a" }, "launchTemplate": { - "shape": "S36" + "shape": "S39" }, "tags": { "shape": "Ss" } } }, - "S3n": { + "S3q": { "type": "structure", "members": { "clusterName": {}, @@ -2871,7 +2889,7 @@ "ownerArn": {} } }, - "S4s": { + "S4v": { "type": "structure", "required": [ "type", @@ -2882,7 +2900,7 @@ "name": {} } }, - "S51": { + "S54": { "type": "structure", "members": { "status": {}, diff --git a/apis/eks-2017-11-01.normal.json b/apis/eks-2017-11-01.normal.json index f01693a098..8b75498d94 100644 --- a/apis/eks-2017-11-01.normal.json +++ b/apis/eks-2017-11-01.normal.json @@ -2381,6 +2381,10 @@ "accessConfig": { "shape": "AccessConfigResponse", "documentation": "The access configuration for the cluster.
" + }, + "upgradePolicy": { + "shape": "UpgradePolicyResponse", + "documentation": "This value indicates if extended support is enabled or disabled for the cluster.
Learn more about EKS Extended Support in the EKS User Guide.
" } }, "documentation": "An object representing an Amazon EKS cluster.
" @@ -2736,6 +2740,10 @@ "bootstrapSelfManagedAddons": { "shape": "BoxedBoolean", "documentation": "If you set this value to False
when creating a cluster, the default networking add-ons will not be installed.
The default networking addons include vpc-cni, coredns, and kube-proxy.
Use this option when you plan to install third-party alternative add-ons or self-manage the default networking add-ons.
" + }, + "upgradePolicy": { + "shape": "UpgradePolicyRequest", + "documentation": "New clusters, by default, have extended support enabled. You can disable extended support when creating a cluster by setting this value to STANDARD
.
One part of a key-value pair that make up a tag. A key
is a general label that acts like a category for more specific tag values.
The access configuration for the cluster.
" + }, + "upgradePolicy": { + "shape": "UpgradePolicyRequest", + "documentation": "You can enable or disable extended support for clusters currently on standard support. You cannot disable extended support once it starts. You must enable extended support before your cluster exits standard support.
" } } }, @@ -6012,7 +6031,8 @@ "SecurityGroups", "Subnets", "AuthenticationMode", - "PodIdentityAssociations" + "PodIdentityAssociations", + "UpgradePolicy" ] }, "UpdateParams": { @@ -6095,9 +6115,30 @@ "AssociateEncryptionConfig", "AddonUpdate", "VpcConfigUpdate", - "AccessConfigUpdate" + "AccessConfigUpdate", + "UpgradePolicyUpdate" ] }, + "UpgradePolicyRequest": { + "type": "structure", + "members": { + "supportType": { + "shape": "SupportType", + "documentation": "If the cluster is set to EXTENDED
, it will enter extended support at the end of standard support. If the cluster is set to STANDARD
, it will be automatically upgraded at the end of standard support.
Learn more about EKS Extended Support in the EKS User Guide.
" + } + }, + "documentation": "The support policy to use for the cluster. Extended support allows you to remain on specific Kubernetes versions for longer. Clusters in extended support have higher costs. The default value is EXTENDED
. Use STANDARD
to disable extended support.
Learn more about EKS Extended Support in the EKS User Guide.
" + }, + "UpgradePolicyResponse": { + "type": "structure", + "members": { + "supportType": { + "shape": "SupportType", + "documentation": "If the cluster is set to EXTENDED
, it will enter extended support at the end of standard support. If the cluster is set to STANDARD
, it will be automatically upgraded at the end of standard support.
Learn more about EKS Extended Support in the EKS User Guide.
" + } + }, + "documentation": "This value indicates if extended support is enabled or disabled for the cluster.
Learn more about EKS Extended Support in the EKS User Guide.
" + }, "VpcConfigRequest": { "type": "structure", "members": { diff --git a/apis/elasticloadbalancingv2-2015-12-01.examples.json b/apis/elasticloadbalancingv2-2015-12-01.examples.json index 508b0991ca..0d0eaaf462 100644 --- a/apis/elasticloadbalancingv2-2015-12-01.examples.json +++ b/apis/elasticloadbalancingv2-2015-12-01.examples.json @@ -363,6 +363,23 @@ "title": "To delete a rule" } ], + "DeleteSharedTrustStoreAssociation": [ + { + "input": { + "ResourceArn": "arn:aws:elasticloadbalancing:us-east-1:123456789012:loadbalancer/app/my-load-balancer/80233fa81d678c2c", + "TrustStoreArn": "arn:aws:elasticloadbalancing:us-east-1:123456789012:truststore/my-trust-store/73e2d6bc24d8a063" + }, + "comments": { + "input": { + }, + "output": { + } + }, + "description": "This example deletes the association between the specified trust store and the specified load balancer.", + "id": "delete-a-shared-trust-store-association-1721684063527", + "title": "Delete a shared trust store association" + } + ], "DeleteTargetGroup": [ { "input": { @@ -859,6 +876,22 @@ "title": "To describe the health of a target" } ], + "GetResourcePolicy": [ + { + "input": { + "ResourceArn": "arn:aws:elasticloadbalancing:us-east-1:123456789012:truststore/my-trust-store/73e2d6bc24d8a067" + }, + "comments": { + "input": { + }, + "output": { + } + }, + "description": "This example retrieves the resource policy for the specified trust store.", + "id": "retrieve-a-resource-policy-1721684356628", + "title": "Retrieve a resource policy" + } + ], "ModifyListener": [ { "input": { diff --git a/apis/elasticloadbalancingv2-2015-12-01.min.json b/apis/elasticloadbalancingv2-2015-12-01.min.json index 32e4de0e8f..98dbcb3f46 100644 --- a/apis/elasticloadbalancingv2-2015-12-01.min.json +++ b/apis/elasticloadbalancingv2-2015-12-01.min.json @@ -12,7 +12,10 @@ "serviceId": "Elastic Load Balancing v2", "signatureVersion": "v4", "uid": "elasticloadbalancingv2-2015-12-01", - "xmlNamespace": "http://elasticloadbalancing.amazonaws.com/doc/2015-12-01/" + "xmlNamespace": "http://elasticloadbalancing.amazonaws.com/doc/2015-12-01/", + "auth": [ + "aws.auth#sigv4" + ] }, "operations": { "AddListenerCertificates": { @@ -142,7 +145,7 @@ "type": "structure", "members": { "Listeners": { - "shape": "S2h" + "shape": "S2i" } } } @@ -156,13 +159,13 @@ "members": { "Name": {}, "Subnets": { - "shape": "S2l" + "shape": "S2m" }, "SubnetMappings": { - "shape": "S2n" + "shape": "S2o" }, "SecurityGroups": { - "shape": "S2s" + "shape": "S2t" }, "Scheme": {}, "Tags": { @@ -178,7 +181,7 @@ "type": "structure", "members": { "LoadBalancers": { - "shape": "S2z" + "shape": "S30" } } } @@ -195,7 +198,7 @@ "members": { "ListenerArn": {}, "Conditions": { - "shape": "S3h" + "shape": "S3i" }, "Priority": { "type": "integer" @@ -213,7 +216,7 @@ "type": "structure", "members": { "Rules": { - "shape": "S3x" + "shape": "S3y" } } } @@ -251,7 +254,7 @@ "type": "integer" }, "Matcher": { - "shape": "S4b" + "shape": "S4c" }, "TargetType": {}, "Tags": { @@ -265,7 +268,7 @@ "type": "structure", "members": { "TargetGroups": { - "shape": "S4h" + "shape": "S4i" } } } @@ -293,7 +296,7 @@ "type": "structure", "members": { "TrustStores": { - "shape": "S4n" + "shape": "S4o" } } } @@ -346,6 +349,24 @@ "members": {} } }, + "DeleteSharedTrustStoreAssociation": { + "input": { + "type": "structure", + "required": [ + "TrustStoreArn", + "ResourceArn" + ], + "members": { + "TrustStoreArn": {}, + "ResourceArn": {} + } + }, + "output": { + "resultWrapper": "DeleteSharedTrustStoreAssociationResult", + "type": "structure", + "members": {} + } + }, "DeleteTargetGroup": { "input": { "type": "structure", @@ -388,7 +409,7 @@ "members": { "TargetGroupArn": {}, "Targets": { - "shape": "S53" + "shape": "S56" } } }, @@ -471,7 +492,7 @@ "type": "structure", "members": { "Listeners": { - "shape": "S2h" + "shape": "S2i" }, "NextMarker": {} } @@ -492,7 +513,7 @@ "type": "structure", "members": { "Attributes": { - "shape": "S5m" + "shape": "S5p" } } } @@ -502,7 +523,7 @@ "type": "structure", "members": { "LoadBalancerArns": { - "shape": "S4j" + "shape": "S4k" }, "Names": { "type": "list", @@ -519,7 +540,7 @@ "type": "structure", "members": { "LoadBalancers": { - "shape": "S2z" + "shape": "S30" }, "NextMarker": {} } @@ -545,7 +566,7 @@ "type": "structure", "members": { "Rules": { - "shape": "S3x" + "shape": "S3y" }, "NextMarker": {} } @@ -593,7 +614,7 @@ }, "Name": {}, "SupportedLoadBalancerTypes": { - "shape": "S3k" + "shape": "S3l" } } } @@ -648,7 +669,7 @@ "type": "structure", "members": { "Attributes": { - "shape": "S6d" + "shape": "S6g" } } } @@ -677,7 +698,7 @@ "type": "structure", "members": { "TargetGroups": { - "shape": "S4h" + "shape": "S4i" }, "NextMarker": {} } @@ -692,7 +713,7 @@ "members": { "TargetGroupArn": {}, "Targets": { - "shape": "S53" + "shape": "S56" }, "Include": { "type": "list", @@ -710,7 +731,7 @@ "type": "structure", "members": { "Target": { - "shape": "S54" + "shape": "S57" }, "HealthCheckPort": {}, "TargetHealth": { @@ -774,7 +795,7 @@ "members": { "TrustStoreArn": {}, "RevocationIds": { - "shape": "S74" + "shape": "S77" }, "Marker": {}, "PageSize": { @@ -829,12 +850,30 @@ "type": "structure", "members": { "TrustStores": { - "shape": "S4n" + "shape": "S4o" }, "NextMarker": {} } } }, + "GetResourcePolicy": { + "input": { + "type": "structure", + "required": [ + "ResourceArn" + ], + "members": { + "ResourceArn": {} + } + }, + "output": { + "resultWrapper": "GetResourcePolicyResult", + "type": "structure", + "members": { + "Policy": {} + } + } + }, "GetTrustStoreCaCertificatesBundle": { "input": { "type": "structure", @@ -907,7 +946,7 @@ "type": "structure", "members": { "Listeners": { - "shape": "S2h" + "shape": "S2i" } } } @@ -922,7 +961,7 @@ "members": { "LoadBalancerArn": {}, "Attributes": { - "shape": "S5m" + "shape": "S5p" } } }, @@ -931,7 +970,7 @@ "type": "structure", "members": { "Attributes": { - "shape": "S5m" + "shape": "S5p" } } } @@ -945,7 +984,7 @@ "members": { "RuleArn": {}, "Conditions": { - "shape": "S3h" + "shape": "S3i" }, "Actions": { "shape": "Sy" @@ -957,7 +996,7 @@ "type": "structure", "members": { "Rules": { - "shape": "S3x" + "shape": "S3y" } } } @@ -989,7 +1028,7 @@ "type": "integer" }, "Matcher": { - "shape": "S4b" + "shape": "S4c" } } }, @@ -998,7 +1037,7 @@ "type": "structure", "members": { "TargetGroups": { - "shape": "S4h" + "shape": "S4i" } } } @@ -1013,7 +1052,7 @@ "members": { "TargetGroupArn": {}, "Attributes": { - "shape": "S6d" + "shape": "S6g" } } }, @@ -1022,7 +1061,7 @@ "type": "structure", "members": { "Attributes": { - "shape": "S6d" + "shape": "S6g" } } } @@ -1047,7 +1086,7 @@ "type": "structure", "members": { "TrustStores": { - "shape": "S4n" + "shape": "S4o" } } } @@ -1062,7 +1101,7 @@ "members": { "TargetGroupArn": {}, "Targets": { - "shape": "S53" + "shape": "S56" } } }, @@ -1125,7 +1164,7 @@ "members": { "TrustStoreArn": {}, "RevocationIds": { - "shape": "S74" + "shape": "S77" } } }, @@ -1181,7 +1220,7 @@ "type": "structure", "members": { "Rules": { - "shape": "S3x" + "shape": "S3y" } } } @@ -1196,7 +1235,7 @@ "members": { "LoadBalancerArn": {}, "SecurityGroups": { - "shape": "S2s" + "shape": "S2t" }, "EnforceSecurityGroupInboundRulesOnPrivateLinkTraffic": {} } @@ -1206,7 +1245,7 @@ "type": "structure", "members": { "SecurityGroupIds": { - "shape": "S2s" + "shape": "S2t" }, "EnforceSecurityGroupInboundRulesOnPrivateLinkTraffic": {} } @@ -1221,10 +1260,10 @@ "members": { "LoadBalancerArn": {}, "Subnets": { - "shape": "S2l" + "shape": "S2m" }, "SubnetMappings": { - "shape": "S2n" + "shape": "S2o" }, "IpAddressType": {} } @@ -1234,7 +1273,7 @@ "type": "structure", "members": { "AvailabilityZones": { - "shape": "S38" + "shape": "S39" }, "IpAddressType": {} } @@ -1407,10 +1446,11 @@ "TrustStoreArn": {}, "IgnoreClientCertificateExpiry": { "type": "boolean" - } + }, + "TrustStoreAssociationStatus": {} } }, - "S2h": { + "S2i": { "type": "list", "member": { "type": "structure", @@ -1437,11 +1477,11 @@ } } }, - "S2l": { + "S2m": { "type": "list", "member": {} }, - "S2n": { + "S2o": { "type": "list", "member": { "type": "structure", @@ -1453,11 +1493,11 @@ } } }, - "S2s": { + "S2t": { "type": "list", "member": {} }, - "S2z": { + "S30": { "type": "list", "member": { "type": "structure", @@ -1480,10 +1520,10 @@ }, "Type": {}, "AvailabilityZones": { - "shape": "S38" + "shape": "S39" }, "SecurityGroups": { - "shape": "S2s" + "shape": "S2t" }, "IpAddressType": {}, "CustomerOwnedIpv4Pool": {}, @@ -1491,7 +1531,7 @@ } } }, - "S38": { + "S39": { "type": "list", "member": { "type": "structure", @@ -1514,20 +1554,20 @@ } } }, - "S3h": { + "S3i": { "type": "list", "member": { "type": "structure", "members": { "Field": {}, "Values": { - "shape": "S3k" + "shape": "S3l" }, "HostHeaderConfig": { "type": "structure", "members": { "Values": { - "shape": "S3k" + "shape": "S3l" } } }, @@ -1535,7 +1575,7 @@ "type": "structure", "members": { "Values": { - "shape": "S3k" + "shape": "S3l" } } }, @@ -1544,7 +1584,7 @@ "members": { "HttpHeaderName": {}, "Values": { - "shape": "S3k" + "shape": "S3l" } } }, @@ -1567,7 +1607,7 @@ "type": "structure", "members": { "Values": { - "shape": "S3k" + "shape": "S3l" } } }, @@ -1575,18 +1615,18 @@ "type": "structure", "members": { "Values": { - "shape": "S3k" + "shape": "S3l" } } } } } }, - "S3k": { + "S3l": { "type": "list", "member": {} }, - "S3x": { + "S3y": { "type": "list", "member": { "type": "structure", @@ -1594,7 +1634,7 @@ "RuleArn": {}, "Priority": {}, "Conditions": { - "shape": "S3h" + "shape": "S3i" }, "Actions": { "shape": "Sy" @@ -1605,14 +1645,14 @@ } } }, - "S4b": { + "S4c": { "type": "structure", "members": { "HttpCode": {}, "GrpcCode": {} } }, - "S4h": { + "S4i": { "type": "list", "member": { "type": "structure", @@ -1643,10 +1683,10 @@ }, "HealthCheckPath": {}, "Matcher": { - "shape": "S4b" + "shape": "S4c" }, "LoadBalancerArns": { - "shape": "S4j" + "shape": "S4k" }, "TargetType": {}, "ProtocolVersion": {}, @@ -1654,11 +1694,11 @@ } } }, - "S4j": { + "S4k": { "type": "list", "member": {} }, - "S4n": { + "S4o": { "type": "list", "member": { "type": "structure", @@ -1675,13 +1715,13 @@ } } }, - "S53": { + "S56": { "type": "list", "member": { - "shape": "S54" + "shape": "S57" } }, - "S54": { + "S57": { "type": "structure", "required": [ "Id" @@ -1694,7 +1734,7 @@ "AvailabilityZone": {} } }, - "S5m": { + "S5p": { "type": "list", "member": { "type": "structure", @@ -1704,7 +1744,7 @@ } } }, - "S6d": { + "S6g": { "type": "list", "member": { "type": "structure", @@ -1714,7 +1754,7 @@ } } }, - "S74": { + "S77": { "type": "list", "member": { "type": "long" diff --git a/apis/elasticloadbalancingv2-2015-12-01.normal.json b/apis/elasticloadbalancingv2-2015-12-01.normal.json index 5df5167952..09a6734473 100644 --- a/apis/elasticloadbalancingv2-2015-12-01.normal.json +++ b/apis/elasticloadbalancingv2-2015-12-01.normal.json @@ -12,7 +12,10 @@ "serviceId": "Elastic Load Balancing v2", "signatureVersion": "v4", "uid": "elasticloadbalancingv2-2015-12-01", - "xmlNamespace": "http://elasticloadbalancing.amazonaws.com/doc/2015-12-01/" + "xmlNamespace": "http://elasticloadbalancing.amazonaws.com/doc/2015-12-01/", + "auth": [ + "aws.auth#sigv4" + ] }, "operations": { "AddListenerCertificates": { @@ -439,6 +442,32 @@ ], "documentation": "Deletes the specified rule.
You can't delete the default rule.
" }, + "DeleteSharedTrustStoreAssociation": { + "name": "DeleteSharedTrustStoreAssociation", + "http": { + "method": "POST", + "requestUri": "/" + }, + "input": { + "shape": "DeleteSharedTrustStoreAssociationInput" + }, + "output": { + "shape": "DeleteSharedTrustStoreAssociationOutput", + "resultWrapper": "DeleteSharedTrustStoreAssociationResult" + }, + "errors": [ + { + "shape": "TrustStoreNotFoundException" + }, + { + "shape": "DeleteAssociationSameAccountException" + }, + { + "shape": "TrustStoreAssociationNotFoundException" + } + ], + "documentation": "Deletes a shared trust store association.
" + }, "DeleteTargetGroup": { "name": "DeleteTargetGroup", "http": { @@ -794,7 +823,7 @@ "shape": "RevocationIdNotFoundException" } ], - "documentation": "Describes the revocation files in use by the specified trust store arn, or revocation ID.
" + "documentation": "Describes the revocation files in use by the specified trust store or revocation files.
" }, "DescribeTrustStores": { "name": "DescribeTrustStores", @@ -814,7 +843,27 @@ "shape": "TrustStoreNotFoundException" } ], - "documentation": "Describes all trust stores for a given account by trust store arn’s or name.
" + "documentation": "Describes all trust stores for the specified account.
" + }, + "GetResourcePolicy": { + "name": "GetResourcePolicy", + "http": { + "method": "POST", + "requestUri": "/" + }, + "input": { + "shape": "GetResourcePolicyInput" + }, + "output": { + "shape": "GetResourcePolicyOutput", + "resultWrapper": "GetResourcePolicyResult" + }, + "errors": [ + { + "shape": "ResourceNotFoundException" + } + ], + "documentation": "Retrieves the resource policy for a specified resource.
" }, "GetTrustStoreCaCertificatesBundle": { "name": "GetTrustStoreCaCertificatesBundle", @@ -1076,7 +1125,7 @@ "shape": "CaCertificatesBundleNotFoundException" } ], - "documentation": "Update the ca certificate bundle for a given trust store.
" + "documentation": "Update the ca certificate bundle for the specified trust store.
" }, "RegisterTargets": { "name": "RegisterTargets", @@ -2085,6 +2134,27 @@ "type": "structure", "members": {} }, + "DeleteSharedTrustStoreAssociationInput": { + "type": "structure", + "required": [ + "TrustStoreArn", + "ResourceArn" + ], + "members": { + "TrustStoreArn": { + "shape": "TrustStoreArn", + "documentation": "The Amazon Resource Name (ARN) of the trust store.
" + }, + "ResourceArn": { + "shape": "ResourceArn", + "documentation": "The Amazon Resource Name (ARN) of the resource.
" + } + } + }, + "DeleteSharedTrustStoreAssociationOutput": { + "type": "structure", + "members": {} + }, "DeleteTargetGroupInput": { "type": "structure", "required": [ @@ -2450,7 +2520,7 @@ }, "Include": { "shape": "ListOfDescribeTargetHealthIncludeOptions", - "documentation": "Used to inclue anomaly detection information.
" + "documentation": "Used to include anomaly detection information.
" } } }, @@ -2664,6 +2734,27 @@ }, "documentation": "Information about a forward action.
" }, + "GetResourcePolicyInput": { + "type": "structure", + "required": [ + "ResourceArn" + ], + "members": { + "ResourceArn": { + "shape": "ResourceArn", + "documentation": "The Amazon Resource Name (ARN) of the resource.
" + } + } + }, + "GetResourcePolicyOutput": { + "type": "structure", + "members": { + "Policy": { + "shape": "Policy", + "documentation": "The content of the resource policy.
" + } + } + }, "GetTrustStoreCaCertificatesBundleInput": { "type": "structure", "required": [ @@ -3335,6 +3426,10 @@ "IgnoreClientCertificateExpiry": { "shape": "IgnoreClientCertificateExpiry", "documentation": "Indicates whether expired client certificates are ignored.
" + }, + "TrustStoreAssociationStatus": { + "shape": "TrustStoreAssociationStatusEnum", + "documentation": "Indicates a shared trust stores association status.
" } }, "documentation": "Information about the mutual authentication attributes of a listener.
" @@ -3371,6 +3466,10 @@ }, "documentation": "Information about a path pattern condition.
" }, + "Policy": { + "type": "string", + "min": 1 + }, "Port": { "type": "integer", "max": 65535, @@ -3763,7 +3862,7 @@ }, "IpAddressType": { "shape": "IpAddressType", - "documentation": "Note: Internal load balancers must use the ipv4
IP address type.
[Application Load Balancers] The IP address type. The possible values are ipv4
(for only IPv4 addresses), dualstack
(for IPv4 and IPv6 addresses), and dualstack-without-public-ipv4
(for IPv6 only public addresses, with private IPv4 and IPv6 addresses).
[Network Load Balancers] The IP address type. The possible values are ipv4
(for only IPv4 addresses) and dualstack
(for IPv4 and IPv6 addresses). You can’t specify dualstack
for a load balancer with a UDP or TCP_UDP listener.
[Gateway Load Balancers] The IP address type. The possible values are ipv4
(for only IPv4 addresses) and dualstack
(for IPv4 and IPv6 addresses).
Note: Internal load balancers must use the ipv4
IP address type.
[Application Load Balancers] The IP address type. The possible values are ipv4
(for only IPv4 addresses), dualstack
(for IPv4 and IPv6 addresses), and dualstack-without-public-ipv4
(for IPv6 only public addresses, with private IPv4 and IPv6 addresses).
Note: Application Load Balancer authentication only supports IPv4 addresses when connecting to an Identity Provider (IdP) or Amazon Cognito endpoint. Without a public IPv4 address the load balancer cannot complete the authentication process, resulting in HTTP 500 errors.
[Network Load Balancers] The IP address type. The possible values are ipv4
(for only IPv4 addresses) and dualstack
(for IPv4 and IPv6 addresses). You can’t specify dualstack
for a load balancer with a UDP or TCP_UDP listener.
[Gateway Load Balancers] The IP address type. The possible values are ipv4
(for only IPv4 addresses) and dualstack
(for IPv4 and IPv6 addresses).
Creates an Network Firewall TLS inspection configuration. A TLS inspection configuration contains Certificate Manager certificate associations between and the scope configurations that Network Firewall uses to decrypt and re-encrypt traffic traveling through your firewall.
After you create a TLS inspection configuration, you can associate it with a new firewall policy.
To update the settings for a TLS inspection configuration, use UpdateTLSInspectionConfiguration.
To manage a TLS inspection configuration's tags, use the standard Amazon Web Services resource tagging operations, ListTagsForResource, TagResource, and UntagResource.
To retrieve information about TLS inspection configurations, use ListTLSInspectionConfigurations and DescribeTLSInspectionConfiguration.
For more information about TLS inspection configurations, see Inspecting SSL/TLS traffic with TLS inspection configurations in the Network Firewall Developer Guide.
" + "documentation": "Creates an Network Firewall TLS inspection configuration. Network Firewall uses TLS inspection configurations to decrypt your firewall's inbound and outbound SSL/TLS traffic. After decryption, Network Firewall inspects the traffic according to your firewall policy's stateful rules, and then re-encrypts it before sending it to its destination. You can enable inspection of your firewall's inbound traffic, outbound traffic, or both. To use TLS inspection with your firewall, you must first import or provision certificates using ACM, create a TLS inspection configuration, add that configuration to a new firewall policy, and then associate that policy with your firewall.
To update the settings for a TLS inspection configuration, use UpdateTLSInspectionConfiguration.
To manage a TLS inspection configuration's tags, use the standard Amazon Web Services resource tagging operations, ListTagsForResource, TagResource, and UntagResource.
To retrieve information about TLS inspection configurations, use ListTLSInspectionConfigurations and DescribeTLSInspectionConfiguration.
For more information about TLS inspection configurations, see Inspecting SSL/TLS traffic with TLS inspection configurations in the Network Firewall Developer Guide.
" }, "DeleteFirewall": { "name": "DeleteFirewall", @@ -2669,18 +2675,18 @@ "members": { "LogType": { "shape": "LogType", - "documentation": "The type of log to send. Alert logs report traffic that matches a StatefulRule with an action setting that sends an alert log message. Flow logs are standard network traffic flow logs.
" + "documentation": "The type of log to record. You can record the following types of logs from your Network Firewall stateful engine.
ALERT
- Logs for traffic that matches your stateful rules and that have an action that sends an alert. A stateful rule sends alerts for the rule actions DROP, ALERT, and REJECT. For more information, see StatefulRule.
FLOW
- Standard network traffic flow logs. The stateful rules engine records flow logs for all network traffic that it receives. Each flow log record captures the network flow for a specific standard stateless rule group.
TLS
- Logs for events that are related to TLS inspection. For more information, see Inspecting SSL/TLS traffic with TLS inspection configurations in the Network Firewall Developer Guide.
The type of storage destination to send these logs to. You can send logs to an Amazon S3 bucket, a CloudWatch log group, or a Kinesis Data Firehose delivery stream.
" + "documentation": "The type of storage destination to send these logs to. You can send logs to an Amazon S3 bucket, a CloudWatch log group, or a Firehose delivery stream.
" }, "LogDestination": { "shape": "LogDestinationMap", - "documentation": "The named location for the logs, provided in a key:value mapping that is specific to the chosen destination type.
For an Amazon S3 bucket, provide the name of the bucket, with key bucketName
, and optionally provide a prefix, with key prefix
. The following example specifies an Amazon S3 bucket named DOC-EXAMPLE-BUCKET
and the prefix alerts
:
\"LogDestination\": { \"bucketName\": \"DOC-EXAMPLE-BUCKET\", \"prefix\": \"alerts\" }
For a CloudWatch log group, provide the name of the CloudWatch log group, with key logGroup
. The following example specifies a log group named alert-log-group
:
\"LogDestination\": { \"logGroup\": \"alert-log-group\" }
For a Kinesis Data Firehose delivery stream, provide the name of the delivery stream, with key deliveryStream
. The following example specifies a delivery stream named alert-delivery-stream
:
\"LogDestination\": { \"deliveryStream\": \"alert-delivery-stream\" }
The named location for the logs, provided in a key:value mapping that is specific to the chosen destination type.
For an Amazon S3 bucket, provide the name of the bucket, with key bucketName
, and optionally provide a prefix, with key prefix
.
The following example specifies an Amazon S3 bucket named DOC-EXAMPLE-BUCKET
and the prefix alerts
:
\"LogDestination\": { \"bucketName\": \"DOC-EXAMPLE-BUCKET\", \"prefix\": \"alerts\" }
For a CloudWatch log group, provide the name of the CloudWatch log group, with key logGroup
. The following example specifies a log group named alert-log-group
:
\"LogDestination\": { \"logGroup\": \"alert-log-group\" }
For a Firehose delivery stream, provide the name of the delivery stream, with key deliveryStream
. The following example specifies a delivery stream named alert-delivery-stream
:
\"LogDestination\": { \"deliveryStream\": \"alert-delivery-stream\" }
Defines where Network Firewall sends logs for the firewall for one log type. This is used in LoggingConfiguration. You can send each type of log to an Amazon S3 bucket, a CloudWatch log group, or a Kinesis Data Firehose delivery stream.
Network Firewall generates logs for stateful rule groups. You can save alert and flow log types. The stateful rules engine records flow logs for all network traffic that it receives. It records alert logs for traffic that matches stateful rules that have the rule action set to DROP
or ALERT
.
Defines where Network Firewall sends logs for the firewall for one log type. This is used in LoggingConfiguration. You can send each type of log to an Amazon S3 bucket, a CloudWatch log group, or a Firehose delivery stream.
Network Firewall generates logs for stateful rule groups. You can save alert, flow, and TLS log types.
" }, "LogDestinationConfigs": { "type": "list", @@ -2712,7 +2718,8 @@ "type": "string", "enum": [ "ALERT", - "FLOW" + "FLOW", + "TLS" ] }, "LoggingConfiguration": { @@ -3381,7 +3388,7 @@ "members": { "Action": { "shape": "StatefulAction", - "documentation": "Defines what Network Firewall should do with the packets in a traffic flow when the flow matches the stateful rule criteria. For all actions, Network Firewall performs the specified action and discontinues stateful inspection of the traffic flow.
The actions for a stateful rule are defined as follows:
PASS - Permits the packets to go to the intended destination.
DROP - Blocks the packets from going to the intended destination and sends an alert log message, if alert logging is configured in the Firewall LoggingConfiguration.
ALERT - Sends an alert log message, if alert logging is configured in the Firewall LoggingConfiguration.
You can use this action to test a rule that you intend to use to drop traffic. You can enable the rule with ALERT
action, verify in the logs that the rule is filtering as you want, then change the action to DROP
.
Defines what Network Firewall should do with the packets in a traffic flow when the flow matches the stateful rule criteria. For all actions, Network Firewall performs the specified action and discontinues stateful inspection of the traffic flow.
The actions for a stateful rule are defined as follows:
PASS - Permits the packets to go to the intended destination.
DROP - Blocks the packets from going to the intended destination and sends an alert log message, if alert logging is configured in the Firewall LoggingConfiguration.
ALERT - Sends an alert log message, if alert logging is configured in the Firewall LoggingConfiguration.
You can use this action to test a rule that you intend to use to drop traffic. You can enable the rule with ALERT
action, verify in the logs that the rule is filtering as you want, then change the action to DROP
.
REJECT - Drops traffic that matches the conditions of the stateful rule, and sends a TCP reset packet back to sender of the packet. A TCP reset packet is a packet with no payload and an RST bit contained in the TCP header flags. REJECT is available only for TCP traffic. This option doesn't support FTP or IMAP protocols.
The number of default VCPUs in an instance type.
" } }, "documentation": "Information about an instance type.
" @@ -3330,6 +3340,10 @@ "UPLINK_100G" ] }, + "VCPUCount": { + "type": "integer", + "box": true + }, "WireGuardPublicKey": { "type": "string", "max": 44, diff --git a/apis/states-2016-11-23.min.json b/apis/states-2016-11-23.min.json index a2ffe7f838..74a3dadcdd 100644 --- a/apis/states-2016-11-23.min.json +++ b/apis/states-2016-11-23.min.json @@ -29,6 +29,9 @@ "name": {}, "tags": { "shape": "S3" + }, + "encryptionConfiguration": { + "shape": "S7" } } }, @@ -58,24 +61,27 @@ "members": { "name": {}, "definition": { - "shape": "Sb" + "shape": "Sf" }, "roleArn": {}, "type": {}, "loggingConfiguration": { - "shape": "Sd" + "shape": "Sh" }, "tags": { "shape": "S3" }, "tracingConfiguration": { - "shape": "Sj" + "shape": "Sn" }, "publish": { "type": "boolean" }, "versionDescription": { - "shape": "Sm" + "shape": "Sq" + }, + "encryptionConfiguration": { + "shape": "S7" } } }, @@ -104,11 +110,11 @@ ], "members": { "description": { - "shape": "Sp" + "shape": "St" }, "name": {}, "routingConfiguration": { - "shape": "Sr" + "shape": "Sv" } } }, @@ -208,6 +214,9 @@ "name": {}, "creationDate": { "type": "timestamp" + }, + "encryptionConfiguration": { + "shape": "S7" } } } @@ -219,7 +228,8 @@ "executionArn" ], "members": { - "executionArn": {} + "executionArn": {}, + "includedData": {} } }, "output": { @@ -242,24 +252,24 @@ "type": "timestamp" }, "input": { - "shape": "S19" + "shape": "S1e" }, "inputDetails": { - "shape": "S1a" + "shape": "S1f" }, "output": { - "shape": "S19" + "shape": "S1e" }, "outputDetails": { - "shape": "S1a" + "shape": "S1f" }, "traceHeader": {}, "mapRunArn": {}, "error": { - "shape": "S1d" + "shape": "S1i" }, "cause": { - "shape": "S1e" + "shape": "S1j" }, "stateMachineVersionArn": {}, "stateMachineAliasArn": {}, @@ -271,7 +281,7 @@ }, "redriveStatus": {}, "redriveStatusReason": { - "shape": "S19" + "shape": "S1e" } } } @@ -424,7 +434,8 @@ "stateMachineArn" ], "members": { - "stateMachineArn": {} + "stateMachineArn": {}, + "includedData": {} } }, "output": { @@ -442,7 +453,7 @@ "name": {}, "status": {}, "definition": { - "shape": "Sb" + "shape": "Sf" }, "roleArn": {}, "type": {}, @@ -450,15 +461,18 @@ "type": "timestamp" }, "loggingConfiguration": { - "shape": "Sd" + "shape": "Sh" }, "tracingConfiguration": { - "shape": "Sj" + "shape": "Sn" }, "label": {}, "revisionId": {}, "description": { - "shape": "Sm" + "shape": "Sq" + }, + "encryptionConfiguration": { + "shape": "S7" } } } @@ -479,10 +493,10 @@ "stateMachineAliasArn": {}, "name": {}, "description": { - "shape": "Sp" + "shape": "St" }, "routingConfiguration": { - "shape": "Sr" + "shape": "Sv" }, "creationDate": { "type": "timestamp" @@ -500,7 +514,8 @@ "executionArn" ], "members": { - "executionArn": {} + "executionArn": {}, + "includedData": {} } }, "output": { @@ -516,21 +531,24 @@ "stateMachineArn": {}, "name": {}, "definition": { - "shape": "Sb" + "shape": "Sf" }, "roleArn": {}, "updateDate": { "type": "timestamp" }, "loggingConfiguration": { - "shape": "Sd" + "shape": "Sh" }, "tracingConfiguration": { - "shape": "Sj" + "shape": "Sn" }, "mapRunArn": {}, "label": {}, - "revisionId": {} + "revisionId": {}, + "encryptionConfiguration": { + "shape": "S7" + } } } }, @@ -606,10 +624,10 @@ "type": "structure", "members": { "error": { - "shape": "S1d" + "shape": "S1i" }, "cause": { - "shape": "S1e" + "shape": "S1j" } } }, @@ -617,10 +635,10 @@ "type": "structure", "members": { "error": { - "shape": "S1d" + "shape": "S1i" }, "cause": { - "shape": "S1e" + "shape": "S1j" } } }, @@ -632,10 +650,10 @@ "members": { "resource": {}, "input": { - "shape": "S19" + "shape": "S1e" }, "inputDetails": { - "shape": "S2h" + "shape": "S2m" }, "timeoutInSeconds": { "type": "long" @@ -655,10 +673,10 @@ "type": "structure", "members": { "output": { - "shape": "S19" + "shape": "S1e" }, "outputDetails": { - "shape": "S2h" + "shape": "S2m" } } }, @@ -666,10 +684,10 @@ "type": "structure", "members": { "error": { - "shape": "S1d" + "shape": "S1i" }, "cause": { - "shape": "S1e" + "shape": "S1j" } } }, @@ -683,10 +701,10 @@ "resourceType": {}, "resource": {}, "error": { - "shape": "S1d" + "shape": "S1i" }, "cause": { - "shape": "S1e" + "shape": "S1j" } } }, @@ -713,7 +731,7 @@ "type": "long" }, "taskCredentials": { - "shape": "S2r" + "shape": "S2w" } } }, @@ -727,10 +745,10 @@ "resourceType": {}, "resource": {}, "error": { - "shape": "S1d" + "shape": "S1i" }, "cause": { - "shape": "S1e" + "shape": "S1j" } } }, @@ -755,10 +773,10 @@ "resourceType": {}, "resource": {}, "error": { - "shape": "S1d" + "shape": "S1i" }, "cause": { - "shape": "S1e" + "shape": "S1j" } } }, @@ -772,10 +790,10 @@ "resourceType": {}, "resource": {}, "output": { - "shape": "S19" + "shape": "S1e" }, "outputDetails": { - "shape": "S2h" + "shape": "S2m" } } }, @@ -789,10 +807,10 @@ "resourceType": {}, "resource": {}, "output": { - "shape": "S19" + "shape": "S1e" }, "outputDetails": { - "shape": "S2h" + "shape": "S2m" } } }, @@ -806,10 +824,10 @@ "resourceType": {}, "resource": {}, "error": { - "shape": "S1d" + "shape": "S1i" }, "cause": { - "shape": "S1e" + "shape": "S1j" } } }, @@ -817,10 +835,10 @@ "type": "structure", "members": { "error": { - "shape": "S1d" + "shape": "S1i" }, "cause": { - "shape": "S1e" + "shape": "S1j" } } }, @@ -828,10 +846,10 @@ "type": "structure", "members": { "input": { - "shape": "S19" + "shape": "S1e" }, "inputDetails": { - "shape": "S2h" + "shape": "S2m" }, "roleArn": {}, "stateMachineAliasArn": {}, @@ -842,10 +860,10 @@ "type": "structure", "members": { "output": { - "shape": "S19" + "shape": "S1e" }, "outputDetails": { - "shape": "S2h" + "shape": "S2m" } } }, @@ -853,10 +871,10 @@ "type": "structure", "members": { "error": { - "shape": "S1d" + "shape": "S1i" }, "cause": { - "shape": "S1e" + "shape": "S1j" } } }, @@ -864,10 +882,10 @@ "type": "structure", "members": { "error": { - "shape": "S1d" + "shape": "S1i" }, "cause": { - "shape": "S1e" + "shape": "S1j" } } }, @@ -888,25 +906,25 @@ } }, "mapIterationStartedEventDetails": { - "shape": "S36" + "shape": "S3b" }, "mapIterationSucceededEventDetails": { - "shape": "S36" + "shape": "S3b" }, "mapIterationFailedEventDetails": { - "shape": "S36" + "shape": "S3b" }, "mapIterationAbortedEventDetails": { - "shape": "S36" + "shape": "S3b" }, "lambdaFunctionFailedEventDetails": { "type": "structure", "members": { "error": { - "shape": "S1d" + "shape": "S1i" }, "cause": { - "shape": "S1e" + "shape": "S1j" } } }, @@ -914,10 +932,10 @@ "type": "structure", "members": { "error": { - "shape": "S1d" + "shape": "S1i" }, "cause": { - "shape": "S1e" + "shape": "S1j" } } }, @@ -929,16 +947,16 @@ "members": { "resource": {}, "input": { - "shape": "S19" + "shape": "S1e" }, "inputDetails": { - "shape": "S2h" + "shape": "S2m" }, "timeoutInSeconds": { "type": "long" }, "taskCredentials": { - "shape": "S2r" + "shape": "S2w" } } }, @@ -946,10 +964,10 @@ "type": "structure", "members": { "error": { - "shape": "S1d" + "shape": "S1i" }, "cause": { - "shape": "S1e" + "shape": "S1j" } } }, @@ -957,10 +975,10 @@ "type": "structure", "members": { "output": { - "shape": "S19" + "shape": "S1e" }, "outputDetails": { - "shape": "S2h" + "shape": "S2m" } } }, @@ -968,10 +986,10 @@ "type": "structure", "members": { "error": { - "shape": "S1d" + "shape": "S1i" }, "cause": { - "shape": "S1e" + "shape": "S1j" } } }, @@ -983,10 +1001,10 @@ "members": { "name": {}, "input": { - "shape": "S19" + "shape": "S1e" }, "inputDetails": { - "shape": "S2h" + "shape": "S2m" } } }, @@ -998,10 +1016,10 @@ "members": { "name": {}, "output": { - "shape": "S19" + "shape": "S1e" }, "outputDetails": { - "shape": "S2h" + "shape": "S2m" } } }, @@ -1015,10 +1033,10 @@ "type": "structure", "members": { "error": { - "shape": "S1d" + "shape": "S1i" }, "cause": { - "shape": "S1e" + "shape": "S1j" } } }, @@ -1333,7 +1351,7 @@ "stateMachineArn": {}, "revisionId": {}, "description": { - "shape": "Sm" + "shape": "Sq" } } }, @@ -1387,10 +1405,10 @@ "members": { "taskToken": {}, "error": { - "shape": "S1d" + "shape": "S1i" }, "cause": { - "shape": "S1e" + "shape": "S1j" } } }, @@ -1424,7 +1442,7 @@ "members": { "taskToken": {}, "output": { - "shape": "S19" + "shape": "S1e" } } }, @@ -1443,7 +1461,7 @@ "stateMachineArn": {}, "name": {}, "input": { - "shape": "S19" + "shape": "S1e" }, "traceHeader": {} } @@ -1473,9 +1491,10 @@ "stateMachineArn": {}, "name": {}, "input": { - "shape": "S19" + "shape": "S1e" }, - "traceHeader": {} + "traceHeader": {}, + "includedData": {} } }, "output": { @@ -1498,22 +1517,22 @@ }, "status": {}, "error": { - "shape": "S1d" + "shape": "S1i" }, "cause": { - "shape": "S1e" + "shape": "S1j" }, "input": { - "shape": "S19" + "shape": "S1e" }, "inputDetails": { - "shape": "S1a" + "shape": "S1f" }, "output": { - "shape": "S19" + "shape": "S1e" }, "outputDetails": { - "shape": "S1a" + "shape": "S1f" }, "traceHeader": {}, "billingDetails": { @@ -1542,10 +1561,10 @@ "members": { "executionArn": {}, "error": { - "shape": "S1d" + "shape": "S1i" }, "cause": { - "shape": "S1e" + "shape": "S1j" } } }, @@ -1589,11 +1608,11 @@ ], "members": { "definition": { - "shape": "Sb" + "shape": "Sf" }, "roleArn": {}, "input": { - "shape": "S19" + "shape": "S1e" }, "inspectionLevel": {}, "revealSecrets": { @@ -1605,34 +1624,34 @@ "type": "structure", "members": { "output": { - "shape": "S19" + "shape": "S1e" }, "error": { - "shape": "S1d" + "shape": "S1i" }, "cause": { - "shape": "S1e" + "shape": "S1j" }, "inspectionData": { "type": "structure", "members": { "input": { - "shape": "S19" + "shape": "S1e" }, "afterInputPath": { - "shape": "S19" + "shape": "S1e" }, "afterParameters": { - "shape": "S19" + "shape": "S1e" }, "result": { - "shape": "S19" + "shape": "S1e" }, "afterResultSelector": { - "shape": "S19" + "shape": "S1e" }, "afterResultPath": { - "shape": "S19" + "shape": "S1e" }, "request": { "type": "structure", @@ -1718,20 +1737,23 @@ "members": { "stateMachineArn": {}, "definition": { - "shape": "Sb" + "shape": "Sf" }, "roleArn": {}, "loggingConfiguration": { - "shape": "Sd" + "shape": "Sh" }, "tracingConfiguration": { - "shape": "Sj" + "shape": "Sn" }, "publish": { "type": "boolean" }, "versionDescription": { - "shape": "Sm" + "shape": "Sq" + }, + "encryptionConfiguration": { + "shape": "S7" } } }, @@ -1759,10 +1781,10 @@ "members": { "stateMachineAliasArn": {}, "description": { - "shape": "Sp" + "shape": "St" }, "routingConfiguration": { - "shape": "Sr" + "shape": "Sv" } } }, @@ -1786,7 +1808,7 @@ ], "members": { "definition": { - "shape": "Sb" + "shape": "Sf" }, "type": {} } @@ -1831,11 +1853,24 @@ } } }, - "Sb": { + "S7": { + "type": "structure", + "required": [ + "type" + ], + "members": { + "kmsKeyId": {}, + "kmsDataKeyReusePeriodSeconds": { + "type": "integer" + }, + "type": {} + } + }, + "Sf": { "type": "string", "sensitive": true }, - "Sd": { + "Sh": { "type": "structure", "members": { "level": {}, @@ -1858,7 +1893,7 @@ } } }, - "Sj": { + "Sn": { "type": "structure", "members": { "enabled": { @@ -1866,15 +1901,15 @@ } } }, - "Sm": { + "Sq": { "type": "string", "sensitive": true }, - "Sp": { + "St": { "type": "string", "sensitive": true }, - "Sr": { + "Sv": { "type": "list", "member": { "type": "structure", @@ -1890,11 +1925,11 @@ } } }, - "S19": { + "S1e": { "type": "string", "sensitive": true }, - "S1a": { + "S1f": { "type": "structure", "members": { "included": { @@ -1902,15 +1937,15 @@ } } }, - "S1d": { + "S1i": { "type": "string", "sensitive": true }, - "S1e": { + "S1j": { "type": "string", "sensitive": true }, - "S2h": { + "S2m": { "type": "structure", "members": { "truncated": { @@ -1918,13 +1953,13 @@ } } }, - "S2r": { + "S2w": { "type": "structure", "members": { "roleArn": {} } }, - "S36": { + "S3b": { "type": "structure", "members": { "name": {}, diff --git a/apis/states-2016-11-23.normal.json b/apis/states-2016-11-23.normal.json index f74b84ccef..0b3ced1983 100644 --- a/apis/states-2016-11-23.normal.json +++ b/apis/states-2016-11-23.normal.json @@ -35,11 +35,23 @@ { "shape": "ActivityLimitExceeded" }, + { + "shape": "ActivityAlreadyExists" + }, { "shape": "InvalidName" }, { "shape": "TooManyTags" + }, + { + "shape": "InvalidEncryptionConfiguration" + }, + { + "shape": "KmsAccessDeniedException" + }, + { + "shape": "KmsThrottlingException" } ], "documentation": "Creates an activity. An activity is a task that you write in any programming language and host on any machine that has access to Step Functions. Activities must poll Step Functions using the GetActivityTask
API action and respond using SendTask*
API actions. This function lets Step Functions know the existence of your activity and returns an identifier for use in a state machine and when polling from the activity.
This operation is eventually consistent. The results are best effort and may not reflect very recent updates and changes.
CreateActivity
is an idempotent API. Subsequent requests won’t create a duplicate resource if it was already created. CreateActivity
's idempotency check is based on the activity name
. If a following request has different tags
values, Step Functions will ignore these differences and treat it as an idempotent request of the previous. In this case, tags
will not be updated, even if they are different.
Creates a state machine. A state machine consists of a collection of states that can do work (Task
states), determine to which states to transition next (Choice
states), stop an execution with an error (Fail
states), and so on. State machines are specified using a JSON-based, structured language. For more information, see Amazon States Language in the Step Functions User Guide.
If you set the publish
parameter of this API action to true
, it publishes version 1
as the first revision of the state machine.
This operation is eventually consistent. The results are best effort and may not reflect very recent updates and changes.
CreateStateMachine
is an idempotent API. Subsequent requests won’t create a duplicate resource if it was already created. CreateStateMachine
's idempotency check is based on the state machine name
, definition
, type
, LoggingConfiguration
, and TracingConfiguration
. The check is also based on the publish
and versionDescription
parameters. If a following request has a different roleArn
or tags
, Step Functions will ignore these differences and treat it as an idempotent request of the previous. In this case, roleArn
and tags
will not be updated, even if they are different.
Creates a state machine. A state machine consists of a collection of states that can do work (Task
states), determine to which states to transition next (Choice
states), stop an execution with an error (Fail
states), and so on. State machines are specified using a JSON-based, structured language. For more information, see Amazon States Language in the Step Functions User Guide.
If you set the publish
parameter of this API action to true
, it publishes version 1
as the first revision of the state machine.
For additional control over security, you can encrypt your data using a customer-managed key for Step Functions state machines. You can configure a symmetric KMS key and data key reuse period when creating or updating a State Machine. The execution history and state machine definition will be encrypted with the key applied to the State Machine.
This operation is eventually consistent. The results are best effort and may not reflect very recent updates and changes.
CreateStateMachine
is an idempotent API. Subsequent requests won’t create a duplicate resource if it was already created. CreateStateMachine
's idempotency check is based on the state machine name
, definition
, type
, LoggingConfiguration
, TracingConfiguration
, and EncryptionConfiguration
The check is also based on the publish
and versionDescription
parameters. If a following request has a different roleArn
or tags
, Step Functions will ignore these differences and treat it as an idempotent request of the previous. In this case, roleArn
and tags
will not be updated, even if they are different.
Provides information about a state machine execution, such as the state machine associated with the execution, the execution input and output, and relevant execution metadata. If you've redriven an execution, you can use this API action to return information about the redrives of that execution. In addition, you can use this API action to return the Map Run Amazon Resource Name (ARN) if the execution was dispatched by a Map Run.
If you specify a version or alias ARN when you call the StartExecution API action, DescribeExecution
returns that ARN.
This operation is eventually consistent. The results are best effort and may not reflect very recent updates and changes.
Executions of an EXPRESS
state machine aren't supported by DescribeExecution
unless a Map Run dispatched them.
Provides information about a state machine's definition, its IAM role Amazon Resource Name (ARN), and configuration.
A qualified state machine ARN can either refer to a Distributed Map state defined within a state machine, a version ARN, or an alias ARN.
The following are some examples of qualified and unqualified state machine ARNs:
The following qualified state machine ARN refers to a Distributed Map state with a label mapStateLabel
in a state machine named myStateMachine
.
arn:partition:states:region:account-id:stateMachine:myStateMachine/mapStateLabel
If you provide a qualified state machine ARN that refers to a Distributed Map state, the request fails with ValidationException
.
The following qualified state machine ARN refers to an alias named PROD
.
arn:<partition>:states:<region>:<account-id>:stateMachine:<myStateMachine:PROD>
If you provide a qualified state machine ARN that refers to a version ARN or an alias ARN, the request starts execution for that version or alias.
The following unqualified state machine ARN refers to a state machine named myStateMachine
.
arn:<partition>:states:<region>:<account-id>:stateMachine:<myStateMachine>
This API action returns the details for a state machine version if the stateMachineArn
you specify is a state machine version ARN.
This operation is eventually consistent. The results are best effort and may not reflect very recent updates and changes.
Provides information about a state machine's definition, its execution role ARN, and configuration. If a Map Run dispatched the execution, this action returns the Map Run Amazon Resource Name (ARN) in the response. The state machine returned is the state machine associated with the Map Run.
This operation is eventually consistent. The results are best effort and may not reflect very recent updates and changes.
This API action is not supported by EXPRESS
state machines.
Used by workers to retrieve a task (with the specified activity ARN) which has been scheduled for execution by a running state machine. This initiates a long poll, where the service holds the HTTP connection open and responds as soon as a task becomes available (i.e. an execution of a task of this type is needed.) The maximum time the service holds on to the request before responding is 60 seconds. If no task is available within 60 seconds, the poll returns a taskToken
with a null string.
This API action isn't logged in CloudTrail.
Workers should set their client side socket timeout to at least 65 seconds (5 seconds higher than the maximum time the service may hold the poll request).
Polling with GetActivityTask
can cause latency in some implementations. See Avoid Latency When Polling for Activity Tasks in the Step Functions Developer Guide.
Returns the history of the specified execution as a list of events. By default, the results are returned in ascending order of the timeStamp
of the events. Use the reverseOrder
parameter to get the latest events first.
If nextToken
is returned, there are more results available. The value of nextToken
is a unique pagination token for each page. Make the call again using the returned token to retrieve the next page. Keep all other arguments unchanged. Each pagination token expires after 24 hours. Using an expired pagination token will return an HTTP 400 InvalidToken error.
This API action is not supported by EXPRESS
state machines.
Used by activity workers, Task states using the callback pattern, and optionally Task states using the job run pattern to report that the task identified by the taskToken
failed.
Used by activity workers, Task states using the callback pattern, and optionally Task states using the job run pattern to report that the task identified by the taskToken
failed.
For an execution with encryption enabled, Step Functions will encrypt the error and cause fields using the KMS key for the execution role.
A caller can mark a task as fail without using any KMS permissions in the execution role if the caller provides a null value for both error
and cause
fields because no data needs to be encrypted.
Used by activity workers, Task states using the callback pattern, and optionally Task states using the job run pattern to report that the task identified by the taskToken
completed successfully.
Starts a state machine execution.
A qualified state machine ARN can either refer to a Distributed Map state defined within a state machine, a version ARN, or an alias ARN.
The following are some examples of qualified and unqualified state machine ARNs:
The following qualified state machine ARN refers to a Distributed Map state with a label mapStateLabel
in a state machine named myStateMachine
.
arn:partition:states:region:account-id:stateMachine:myStateMachine/mapStateLabel
If you provide a qualified state machine ARN that refers to a Distributed Map state, the request fails with ValidationException
.
The following qualified state machine ARN refers to an alias named PROD
.
arn:<partition>:states:<region>:<account-id>:stateMachine:<myStateMachine:PROD>
If you provide a qualified state machine ARN that refers to a version ARN or an alias ARN, the request starts execution for that version or alias.
The following unqualified state machine ARN refers to a state machine named myStateMachine
.
arn:<partition>:states:<region>:<account-id>:stateMachine:<myStateMachine>
If you start an execution with an unqualified state machine ARN, Step Functions uses the latest revision of the state machine for the execution.
To start executions of a state machine version, call StartExecution
and provide the version ARN or the ARN of an alias that points to the version.
StartExecution
is idempotent for STANDARD
workflows. For a STANDARD
workflow, if you call StartExecution
with the same name and input as a running execution, the call succeeds and return the same response as the original request. If the execution is closed or if the input is different, it returns a 400 ExecutionAlreadyExists
error. You can reuse names after 90 days.
StartExecution
isn't idempotent for EXPRESS
workflows.
Starts a Synchronous Express state machine execution. StartSyncExecution
is not available for STANDARD
workflows.
StartSyncExecution
will return a 200 OK
response, even if your execution fails, because the status code in the API response doesn't reflect function errors. Error codes are reserved for errors that prevent your execution from running, such as permissions errors, limit errors, or issues with your state machine code and configuration.
This API action isn't logged in CloudTrail.
Stops an execution.
This API action is not supported by EXPRESS
state machines.
Stops an execution.
This API action is not supported by EXPRESS
state machines.
For an execution with encryption enabled, Step Functions will encrypt the error and cause fields using the KMS key for the execution role.
A caller can stop an execution without using any KMS permissions in the execution role if the caller provides a null value for both error
and cause
fields because no data needs to be encrypted.
Updates an existing state machine by modifying its definition
, roleArn
, or loggingConfiguration
. Running executions will continue to use the previous definition
and roleArn
. You must include at least one of definition
or roleArn
or you will receive a MissingRequiredParameter
error.
A qualified state machine ARN refers to a Distributed Map state defined within a state machine. For example, the qualified state machine ARN arn:partition:states:region:account-id:stateMachine:stateMachineName/mapStateLabel
refers to a Distributed Map state with a label mapStateLabel
in the state machine named stateMachineName
.
A qualified state machine ARN can either refer to a Distributed Map state defined within a state machine, a version ARN, or an alias ARN.
The following are some examples of qualified and unqualified state machine ARNs:
The following qualified state machine ARN refers to a Distributed Map state with a label mapStateLabel
in a state machine named myStateMachine
.
arn:partition:states:region:account-id:stateMachine:myStateMachine/mapStateLabel
If you provide a qualified state machine ARN that refers to a Distributed Map state, the request fails with ValidationException
.
The following qualified state machine ARN refers to an alias named PROD
.
arn:<partition>:states:<region>:<account-id>:stateMachine:<myStateMachine:PROD>
If you provide a qualified state machine ARN that refers to a version ARN or an alias ARN, the request starts execution for that version or alias.
The following unqualified state machine ARN refers to a state machine named myStateMachine
.
arn:<partition>:states:<region>:<account-id>:stateMachine:<myStateMachine>
After you update your state machine, you can set the publish
parameter to true
in the same action to publish a new version. This way, you can opt-in to strict versioning of your state machine.
Step Functions assigns monotonically increasing integers for state machine versions, starting at version number 1.
All StartExecution
calls within a few seconds use the updated definition
and roleArn
. Executions started immediately after you call UpdateStateMachine
may use the previous state machine definition
and roleArn
.
Updates an existing state machine by modifying its definition
, roleArn
, loggingConfiguration
, or EncryptionConfiguration
. Running executions will continue to use the previous definition
and roleArn
. You must include at least one of definition
or roleArn
or you will receive a MissingRequiredParameter
error.
A qualified state machine ARN refers to a Distributed Map state defined within a state machine. For example, the qualified state machine ARN arn:partition:states:region:account-id:stateMachine:stateMachineName/mapStateLabel
refers to a Distributed Map state with a label mapStateLabel
in the state machine named stateMachineName
.
A qualified state machine ARN can either refer to a Distributed Map state defined within a state machine, a version ARN, or an alias ARN.
The following are some examples of qualified and unqualified state machine ARNs:
The following qualified state machine ARN refers to a Distributed Map state with a label mapStateLabel
in a state machine named myStateMachine
.
arn:partition:states:region:account-id:stateMachine:myStateMachine/mapStateLabel
If you provide a qualified state machine ARN that refers to a Distributed Map state, the request fails with ValidationException
.
The following qualified state machine ARN refers to an alias named PROD
.
arn:<partition>:states:<region>:<account-id>:stateMachine:<myStateMachine:PROD>
If you provide a qualified state machine ARN that refers to a version ARN or an alias ARN, the request starts execution for that version or alias.
The following unqualified state machine ARN refers to a state machine named myStateMachine
.
arn:<partition>:states:<region>:<account-id>:stateMachine:<myStateMachine>
After you update your state machine, you can set the publish
parameter to true
in the same action to publish a new version. This way, you can opt-in to strict versioning of your state machine.
Step Functions assigns monotonically increasing integers for state machine versions, starting at version number 1.
All StartExecution
calls within a few seconds use the updated definition
and roleArn
. Executions started immediately after you call UpdateStateMachine
may use the previous state machine definition
and roleArn
.
The list of tags to add to a resource.
An array of key-value pairs. For more information, see Using Cost Allocation Tags in the Amazon Web Services Billing and Cost Management User Guide, and Controlling Access Using IAM Tags.
Tags may only contain Unicode letters, digits, white space, or these symbols: _ . : / = + - @
.
Settings to configure server-side encryption.
" } } }, @@ -1349,6 +1473,10 @@ "versionDescription": { "shape": "VersionDescription", "documentation": "Sets description about the state machine version. You can only set the description if the publish
parameter is set to true
. Otherwise, if you set versionDescription
, but publish
to false
, this API action throws ValidationException
.
Settings to configure server-side encryption.
" } } }, @@ -1474,6 +1602,10 @@ "creationDate": { "shape": "Timestamp", "documentation": "The date the activity is created.
" + }, + "encryptionConfiguration": { + "shape": "EncryptionConfiguration", + "documentation": "Settings for configured server-side encryption.
" } } }, @@ -1486,6 +1618,10 @@ "executionArn": { "shape": "Arn", "documentation": "The Amazon Resource Name (ARN) of the execution to describe.
" + }, + "includedData": { + "shape": "IncludedData", + "documentation": "If your state machine definition is encrypted with a KMS key, callers must have kms:Decrypt
permission to decrypt the definition. Alternatively, you can call DescribeStateMachine API with includedData = METADATA_ONLY
to get a successful response without the encrypted definition.
The Amazon Resource Name (ARN) of the execution you want state machine information for.
" + }, + "includedData": { + "shape": "IncludedData", + "documentation": "If your state machine definition is encrypted with a KMS key, callers must have kms:Decrypt
permission to decrypt the definition. Alternatively, you can call the API with includedData = METADATA_ONLY
to get a successful response without the encrypted definition.
The revision identifier for the state machine. The first revision ID when you create the state machine is null.
Use the state machine revisionId
parameter to compare the revision of a state machine with the configuration of the state machine used for executions without performing a diff of the properties, such as definition
and roleArn
.
Settings to configure server-side encryption.
" } } }, @@ -1767,6 +1911,10 @@ "stateMachineArn": { "shape": "Arn", "documentation": "The Amazon Resource Name (ARN) of the state machine for which you want the information.
If you specify a state machine version ARN, this API returns details about that version. The version ARN is a combination of state machine ARN and the version number separated by a colon (:). For example, stateMachineARN:1
.
If your state machine definition is encrypted with a KMS key, callers must have kms:Decrypt
permission to decrypt the definition. Alternatively, you can call the API with includedData = METADATA_ONLY
to get a successful response without the encrypted definition.
When calling a labelled ARN for an encrypted state machine, the includedData = METADATA_ONLY
parameter will not apply because Step Functions needs to decrypt the entire state machine definition to get the Distributed Map state’s definition. In this case, the API caller needs to have kms:Decrypt
permission.
The Amazon States Language definition of the state machine. See Amazon States Language.
" + "documentation": "The Amazon States Language definition of the state machine. See Amazon States Language.
If called with includedData = METADATA_ONLY
, the returned definition will be {}
.
The description of the state machine version.
" + }, + "encryptionConfiguration": { + "shape": "EncryptionConfiguration", + "documentation": "Settings to configure server-side encryption.
" } } }, "Enabled": { "type": "boolean" }, + "EncryptionConfiguration": { + "type": "structure", + "required": [ + "type" + ], + "members": { + "kmsKeyId": { + "shape": "KmsKeyId", + "documentation": "An alias, alias ARN, key ID, or key ARN of a symmetric encryption KMS key to encrypt data. To specify a KMS key in a different Amazon Web Services account, you must use the key ARN or alias ARN.
" + }, + "kmsDataKeyReusePeriodSeconds": { + "shape": "KmsDataKeyReusePeriodSeconds", + "documentation": "Maximum duration that Step Functions will reuse data keys. When the period expires, Step Functions will call GenerateDataKey
. Only applies to customer managed keys.
Encryption type
" + } + }, + "documentation": "Settings to configure server-side encryption.
For additional control over security, you can encrypt your data using a customer-managed key for Step Functions state machines and activities. You can configure a symmetric KMS key and data key reuse period when creating or updating a State Machine, and when creating an Activity. The execution history and state machine definition will be encrypted with the key applied to the State Machine. Activity inputs will be encrypted with the key applied to the Activity.
Step Functions automatically enables encryption at rest using Amazon Web Services owned keys at no charge. However, KMS charges apply when using a customer managed key. For more information about pricing, see Key Management Service pricing.
For more information on KMS, see What is Key Management Service?
" + }, + "EncryptionType": { + "type": "string", + "enum": [ + "AWS_OWNED_KEY", + "CUSTOMER_MANAGED_KMS_KEY" + ] + }, "EventId": { "type": "long" }, @@ -2363,6 +2544,13 @@ "type": "boolean", "box": true }, + "IncludedData": { + "type": "string", + "enum": [ + "ALL_DATA", + "METADATA_ONLY" + ] + }, "InspectionData": { "type": "structure", "members": { @@ -2462,6 +2650,17 @@ "TRACE" ] }, + "KmsDataKeyReusePeriodSeconds": { + "type": "integer", + "box": true, + "max": 900, + "min": 60 + }, + "KmsKeyId": { + "type": "string", + "max": 2048, + "min": 1 + }, "LambdaFunctionFailedEventDetails": { "type": "structure", "members": { @@ -3345,6 +3544,10 @@ "traceHeader": { "shape": "TraceHeader", "documentation": "Passes the X-Ray trace header. The trace header can also be passed in the request payload.
" + }, + "includedData": { + "shape": "IncludedData", + "documentation": "If your state machine definition is encrypted with a KMS key, callers must have kms:Decrypt
permission to decrypt the definition. Alternatively, you can call the API with includedData = METADATA_ONLY
to get a successful response without the encrypted definition.
An optional description of the state machine version to publish.
You can only specify the versionDescription
parameter if you've set publish
to true
.
Settings to configure server-side encryption.
" } } }, @@ -4238,5 +4445,5 @@ "type": "boolean" } }, - "documentation": "Step Functions is a service that lets you coordinate the components of distributed applications and microservices using visual workflows.
You can use Step Functions to build applications from individual components, each of which performs a discrete function, or task, allowing you to scale and change applications quickly. Step Functions provides a console that helps visualize the components of your application as a series of steps. Step Functions automatically triggers and tracks each step, and retries steps when there are errors, so your application executes predictably and in the right order every time. Step Functions logs the state of each step, so you can quickly diagnose and debug any issues.
Step Functions manages operations and underlying infrastructure to ensure your application is available at any scale. You can run tasks on Amazon Web Services, your own servers, or any system that has access to Amazon Web Services. You can access and use Step Functions using the console, the Amazon Web Services SDKs, or an HTTP API. For more information about Step Functions, see the Step Functions Developer Guide .
If you use the Step Functions API actions using Amazon Web Services SDK integrations, make sure the API actions are in camel case and parameter names are in Pascal case. For example, you could use Step Functions API action startSyncExecution
and specify its parameter as StateMachineArn
.
Step Functions coordinates the components of distributed applications and microservices using visual workflows.
You can use Step Functions to build applications from individual components, each of which performs a discrete function, or task, allowing you to scale and change applications quickly. Step Functions provides a console that helps visualize the components of your application as a series of steps. Step Functions automatically triggers and tracks each step, and retries steps when there are errors, so your application executes predictably and in the right order every time. Step Functions logs the state of each step, so you can quickly diagnose and debug any issues.
Step Functions manages operations and underlying infrastructure to ensure your application is available at any scale. You can run tasks on Amazon Web Services, your own servers, or any system that has access to Amazon Web Services. You can access and use Step Functions using the console, the Amazon Web Services SDKs, or an HTTP API. For more information about Step Functions, see the Step Functions Developer Guide .
If you use the Step Functions API actions using Amazon Web Services SDK integrations, make sure the API actions are in camel case and parameter names are in Pascal case. For example, you could use Step Functions API action startSyncExecution
and specify its parameter as StateMachineArn
.
>1,l=23===i?Math.pow(2,-24)-Math.pow(2,-77):0,d=a?0:s-1,y=a?1:-1,b=t<0||0===t&&1/t<0?1:0;for(t=Math.abs(t),isNaN(t)||t===1/0?(n=isNaN(t)?1:0,o=m):(o=Math.floor(Math.log(t)/Math.LN2),t*(u=Math.pow(2,-o))<1&&(o--,u*=2),t+=o+c>=1?l/u:l*Math.pow(2,1-c),t*u>=2&&(o++,u/=2),o+c>=m?(n=0,o=m):o+c>=1?(n=(t*u-1)*Math.pow(2,i),o+=c):(n=t*Math.pow(2,c-1)*Math.pow(2,i),o=0));i>=8;e[r+d]=255&n,d+=y,n/=256,i-=8);for(o=o<0;e[r+d]=255&o,d+=y,o/=256,p-=8);e[r+d-y]|=128*b}},{}],443:[function(e,t,r){var a={}.toString;t.exports=Array.isArray||function(e){return"[object Array]"==a.call(e)}},{}],444:[function(e,t,r){!function(e){"use strict";function t(e){return null!==e&&"[object Array]"===Object.prototype.toString.call(e)}function r(e){return null!==e&&"[object Object]"===Object.prototype.toString.call(e)}function a(e,i){if(e===i)return!0;if(Object.prototype.toString.call(e)!==Object.prototype.toString.call(i))return!1;if(!0===t(e)){if(e.length!==i.length)return!1;for(var s=0;s G((f-r)/g)&&i("overflow"),r+=(p-t)*g,t=p,u=0;u =0?(c=b.substr(0,S),l=b.substr(S+1)):(c=b,l=""),d=decodeURIComponent(c),y=decodeURIComponent(l),a(o,d)?i(o[d])?o[d].push(y):o[d]=[o[d],y]:o[d]=y}return o};var i=Array.isArray||function(e){return"[object Array]"===Object.prototype.toString.call(e)}},{}],448:[function(e,t,r){"use strict";function a(e,t){if(e.map)return e.map(t);for(var r=[],a=0;a >1,l=23===i?Math.pow(2,-24)-Math.pow(2,-77):0,d=a?0:s-1,y=a?1:-1,b=t<0||0===t&&1/t<0?1:0;for(t=Math.abs(t),isNaN(t)||t===1/0?(n=isNaN(t)?1:0,o=m):(o=Math.floor(Math.log(t)/Math.LN2),t*(u=Math.pow(2,-o))<1&&(o--,u*=2),t+=o+c>=1?l/u:l*Math.pow(2,1-c),t*u>=2&&(o++,u/=2),o+c>=m?(n=0,o=m):o+c>=1?(n=(t*u-1)*Math.pow(2,i),o+=c):(n=t*Math.pow(2,c-1)*Math.pow(2,i),o=0));i>=8;e[r+d]=255&n,d+=y,n/=256,i-=8);for(o=o<0;e[r+d]=255&o,d+=y,o/=256,p-=8);e[r+d-y]|=128*b}},{}],443:[function(e,t,r){var a={}.toString;t.exports=Array.isArray||function(e){return"[object Array]"==a.call(e)}},{}],444:[function(e,t,r){!function(e){"use strict";function t(e){return null!==e&&"[object Array]"===Object.prototype.toString.call(e)}function r(e){return null!==e&&"[object Object]"===Object.prototype.toString.call(e)}function a(e,i){if(e===i)return!0;if(Object.prototype.toString.call(e)!==Object.prototype.toString.call(i))return!1;if(!0===t(e)){if(e.length!==i.length)return!1;for(var s=0;s G((f-r)/g)&&i("overflow"),r+=(p-t)*g,t=p,u=0;u =0?(c=b.substr(0,S),l=b.substr(S+1)):(c=b,l=""),d=decodeURIComponent(c),y=decodeURIComponent(l),a(o,d)?i(o[d])?o[d].push(y):o[d]=[o[d],y]:o[d]=y}return o};var i=Array.isArray||function(e){return"[object Array]"===Object.prototype.toString.call(e)}},{}],448:[function(e,t,r){"use strict";function a(e,t){if(e.map)return e.map(t);for(var r=[],a=0;a=55296&&t<=56319&&i65535&&(e-=65536,t+=w(e>>>10&1023|55296),e=56320|1023&e),t+=w(e)}).join("")}function p(e){return e-48<10?e-22:e-65<26?e-65:e-97<26?e-97:T}function m(e,t){return e+22+75*(e<26)-((0!=t)<<5)}function c(e,t,r){var a=0;for(e=r?G(e/R):e>>1,e+=G(e/t);e>L*k>>1;a+=T)e=G(e/L);return G(a+(L+1)*e/(e+A))}function l(e){var t,r,a,s,o,n,m,l,d,y,b=[],S=e.length,g=0,h=v,I=D;for(r=e.lastIndexOf(x),r<0&&(r=0),a=0;a=S&&i("invalid-input"),l=p(e.charCodeAt(s++)),(l>=T||l>G((f-g)/n))&&i("overflow"),g+=l*n,d=m<=I?C:m>=I+k?k:m-I,!(l=t&&bf&&i("overflow"),b==t){for(l=r,d=T;y=d<=o?C:d>=o+k?k:d-o,!(l=0&&delete e.httpRequest.headers["Content-Length"]}function i(e){var t=new d,r=e.service.api.operations[e.operation].input;if(r.payload){var a={},i=r.members[r.payload];a=e.params[r.payload],"structure"===i.type?(e.httpRequest.body=t.build(a||{},i),s(e)):void 0!==a&&(e.httpRequest.body=a,("binary"===i.type||i.isStreaming)&&s(e,!0))}else e.httpRequest.body=t.build(e.params,r),s(e)}function s(e,t){if(!e.httpRequest.headers["Content-Type"]){var r=t?"binary/octet-stream":"application/json";e.httpRequest.headers["Content-Type"]=r}}function o(e){c.buildRequest(e),b.indexOf(e.httpRequest.method)<0&&i(e)}function n(e){l.extractError(e)}function u(e){c.extractData(e);var t,r=e.request,a=r.service.api.operations[r.operation],i=r.service.api.operations[r.operation].output||{};a.hasEventOutput;if(i.payload){var s=i.members[i.payload],o=e.httpResponse.body;if(s.isEventStream)t=new y,e.data[i.payload]=m.createEventStream(2===p.HttpClient.streamsApiVersion?e.httpResponse.stream:o,t,s);else if("structure"===s.type||"list"===s.type){var t=new y;e.data[i.payload]=t.parse(o,s)}else"binary"===s.type||s.isStreaming?e.data[i.payload]=o:e.data[i.payload]=s.toType(o)}else{var n=e.data;l.extractData(e),e.data=m.merge(n,e.data)}}var p=e("../core"),m=e("../util"),c=e("./rest"),l=e("./json"),d=e("../json/builder"),y=e("../json/parser"),b=["GET","HEAD","DELETE"];t.exports={buildRequest:o,extractError:n,extractData:u,unsetContentLength:a}},{"../core":350,"../json/builder":374,"../json/parser":375,"../util":428,"./json":386,"./rest":388}],390:[function(e,t,r){function a(e){var t=e.service.api.operations[e.operation].input,r=new n.XML.Builder,a=e.params,i=t.payload;if(i){var s=t.members[i];if(void 0===(a=a[i]))return;if("structure"===s.type){var o=s.name;e.httpRequest.body=r.toXML(a,s,o,!0)}else e.httpRequest.body=a}else e.httpRequest.body=r.toXML(a,t,t.name||t.shape||u.string.upperFirst(e.operation)+"Request")}function i(e){p.buildRequest(e),["GET","HEAD"].indexOf(e.httpRequest.method)<0&&a(e)}function s(e){p.extractError(e);var t;try{t=(new n.XML.Parser).parse(e.httpResponse.body.toString())}catch(r){t={Code:e.httpResponse.statusCode,Message:e.httpResponse.statusMessage}}t.Errors&&(t=t.Errors),t.Error&&(t=t.Error),t.Code?e.error=u.error(new Error,{code:t.Code,message:t.Message}):e.error=u.error(new Error,{code:e.httpResponse.statusCode,message:null})}function o(e){p.extractData(e);var t,r=e.request,a=e.httpResponse.body,i=r.service.api.operations[r.operation],s=i.output,o=(i.hasEventOutput,s.payload);if(o){var m=s.members[o];m.isEventStream?(t=new n.XML.Parser,e.data[o]=u.createEventStream(2===n.HttpClient.streamsApiVersion?e.httpResponse.stream:e.httpResponse.body,t,m)):"structure"===m.type?(t=new n.XML.Parser,e.data[o]=t.parse(a.toString(),m)):"binary"===m.type||m.isStreaming?e.data[o]=a:e.data[o]=m.toType(a)}else if(a.length>0){t=new n.XML.Parser;var c=t.parse(a.toString(),s);u.update(e.data,c)}}var n=e("../core"),u=e("../util"),p=e("./rest");t.exports={buildRequest:i,extractError:s,extractData:o}},{"../core":350,"../util":428,"./rest":388}],391:[function(e,t,r){function a(){}function i(e){return e.isQueryName||"ec2"!==e.api.protocol?e.name:e.name[0].toUpperCase()+e.name.substr(1)}function s(e,t,r,a){p.each(r.members,function(r,s){var o=t[r];if(null!==o&&void 0!==o){var n=i(s);n=e?e+"."+n:n,u(n,o,s,a)}})}function o(e,t,r,a){var i=1;p.each(t,function(t,s){var o=r.flattened?".":".entry.",n=o+i+++".",p=n+(r.key.name||"key"),m=n+(r.value.name||"value");u(e+p,t,r.key,a),u(e+m,s,r.value,a)})}function n(e,t,r,a){var s=r.member||{};if(0===t.length)return void("ec2"!==r.api.protocol&&a.call(this,e,null));p.arrayEach(t,function(t,o){var n="."+(o+1);if("ec2"===r.api.protocol)n+="";else if(r.flattened){if(s.name){var p=e.split(".");p.pop(),p.push(i(s)),e=p.join(".")}}else n="."+(s.name?s.name:"member")+n;u(e+n,t,s,a)})}function u(e,t,r,a){null!==t&&void 0!==t&&("structure"===r.type?s(e,t,r,a):"list"===r.type?n(e,t,r,a):"map"===r.type?o(e,t,r,a):a(e,r.toWireFormat(t).toString()))}var p=e("../util");a.prototype.serialize=function(e,t,r){s("",e,t,r)},t.exports=a},{"../util":428}],392:[function(e,t,r){var a=e("../core"),i=null,s={signatureVersion:"v4",signingName:"rds-db",operations:{}},o={region:"string",hostname:"string",port:"number",username:"string"};a.RDS.Signer=a.util.inherit({constructor:function(e){this.options=e||{}},convertUrlToAuthToken:function(e){if(0===e.indexOf("https://"))return e.substring("https://".length)},getAuthToken:function(e,t){"function"==typeof e&&void 0===t&&(t=e,e={});var r=this,o="function"==typeof t;e=a.util.merge(this.options,e);var n=this.validateAuthTokenOptions(e);if(!0!==n){if(o)return t(n,null);throw n}var u={region:e.region,endpoint:new a.Endpoint(e.hostname+":"+e.port),paramValidation:!1,signatureVersion:"v4"};e.credentials&&(u.credentials=e.credentials),i=new a.Service(u),i.api=s;var p=i.makeRequest();if(this.modifyRequestForAuthToken(p,e),!o){var m=p.presign(900);return this.convertUrlToAuthToken(m)}p.presign(900,function(e,a){a&&(a=r.convertUrlToAuthToken(a)),t(e,a)})},modifyRequestForAuthToken:function(e,t){e.on("build",e.buildAsGet),e.httpRequest.body=a.util.queryParamsToString({Action:"connect",DBUser:t.username})},validateAuthTokenOptions:function(e){var t="";e=e||{};for(var r in o)Object.prototype.hasOwnProperty.call(o,r)&&typeof e[r]!==o[r]&&(t+="option '"+r+"' should have been type '"+o[r]+"', was '"+typeof e[r]+"'.\n");return!t.length||a.util.error(new Error,{code:"InvalidParameter",message:t})}})},{"../core":350}],393:[function(e,t,r){t.exports={now:function(){return"undefined"!=typeof performance&&"function"==typeof performance.now?performance.now():Date.now()}}},{}],394:[function(e,t,r){function a(e){return"string"==typeof e&&(e.startsWith("fips-")||e.endsWith("-fips"))}function i(e){return"string"==typeof e&&["aws-global","aws-us-gov-global"].includes(e)}function s(e){return["fips-aws-global","aws-fips","aws-global"].includes(e)?"us-east-1":["fips-aws-us-gov-global","aws-us-gov-global"].includes(e)?"us-gov-west-1":e.replace(/fips-(dkr-|prod-)?|-fips/,"")}t.exports={isFipsRegion:a,isGlobalRegion:i,getRealRegion:s}},{}],395:[function(e,t,r){function a(e){if(!e)return null;var t=e.split("-");return t.length<3?null:t.slice(0,t.length-2).join("-")+"-*"}function i(e){var t=e.config.region,r=a(t),i=e.api.endpointPrefix;return[[t,i],[r,i],[t,"*"],[r,"*"],["*",i],[t,"internal-*"],["*","*"]].map(function(e){return e[0]&&e[1]?e.join("/"):null})}function s(e,t){u.each(t,function(t,r){"globalEndpoint"!==t&&(void 0!==e.config[t]&&null!==e.config[t]||(e.config[t]=r))})}function o(e){for(var t=i(e),r=e.config.useFipsEndpoint,a=e.config.useDualstackEndpoint,o=0;o=a())throw new RangeError("Attempt to allocate Buffer larger than maximum size: 0x"+a().toString(16)+" bytes");return 0|e}function b(e){return+e!=e&&(e=0),s.alloc(+e)}function S(e,t){if(s.isBuffer(e))return e.length;if("undefined"!=typeof ArrayBuffer&&"function"==typeof ArrayBuffer.isView&&(ArrayBuffer.isView(e)||e instanceof ArrayBuffer))return e.byteLength;"string"!=typeof e&&(e=""+e);var r=e.length;if(0===r)return 0;for(var a=!1;;)switch(t){case"ascii":case"latin1":case"binary":return r;case"utf8":case"utf-8":case void 0:return K(e).length;case"ucs2":case"ucs-2":case"utf16le":case"utf-16le":return 2*r;case"hex":return r>>>1;case"base64":return H(e).length;default:if(a)return K(e).length;t=(""+t).toLowerCase(),a=!0}}function g(e,t,r){var a=!1;if((void 0===t||t<0)&&(t=0),t>this.length)return"";if((void 0===r||r>this.length)&&(r=this.length),r<=0)return"";if(r>>>=0,t>>>=0,r<=t)return"";for(e||(e="utf8");;)switch(e){case"hex":return E(this,t,r);case"utf8":case"utf-8":return v(this,t,r);case"ascii":return P(this,t,r);case"latin1":case"binary":return q(this,t,r);case"base64":return D(this,t,r);case"ucs2":case"ucs-2":case"utf16le":case"utf-16le":return M(this,t,r);default:if(a)throw new TypeError("Unknown encoding: "+e);e=(e+"").toLowerCase(),a=!0}}function h(e,t,r){var a=e[t];e[t]=e[r],e[r]=a}function I(e,t,r,a,i){if(0===e.length)return-1;if("string"==typeof r?(a=r,r=0):r>2147483647?r=2147483647:r<-2147483648&&(r=-2147483648),r=+r,isNaN(r)&&(r=i?0:e.length-1),r<0&&(r=e.length+r),r>=e.length){if(i)return-1;r=e.length-1}else if(r<0){if(!i)return-1;r=0}if("string"==typeof t&&(t=s.from(t,a)),s.isBuffer(t))return 0===t.length?-1:N(e,t,r,a,i);if("number"==typeof t)return t&=255,s.TYPED_ARRAY_SUPPORT&&"function"==typeof Uint8Array.prototype.indexOf?i?Uint8Array.prototype.indexOf.call(e,t,r):Uint8Array.prototype.lastIndexOf.call(e,t,r):N(e,[t],r,a,i);throw new TypeError("val must be string, number or Buffer")}function N(e,t,r,a,i){function s(e,t){return 1===o?e[t]:e.readUInt16BE(t*o)}var o=1,n=e.length,u=t.length;if(void 0!==a&&("ucs2"===(a=String(a).toLowerCase())||"ucs-2"===a||"utf16le"===a||"utf-16le"===a)){if(e.length<2||t.length<2)return-1;o=2,n/=2,u/=2,r/=2}var p;if(i){var m=-1;for(p=r;p>>8*(a?i:1-i)}function B(e,t,r,a){t<0&&(t=4294967295+t+1);for(var i=0,s=Math.min(e.length-r,4);i>>8*(a?i:3-i)&255}function U(e,t,r,a,i,s){if(r+a>e.length)throw new RangeError("Index out of range");if(r<0)throw new RangeError("Index out of range")}function _(e,t,r,a,i){return i||U(e,t,r,4,3.4028234663852886e38,-3.4028234663852886e38),X.write(e,t,r,a,23,4),r+4}function F(e,t,r,a,i){return i||U(e,t,r,8,1.7976931348623157e308,-1.7976931348623157e308),X.write(e,t,r,a,52,8),r+8}function O(e){if(e=V(e).replace(ee,""),e.length<2)return"";for(;e.length%4!=0;)e+="=";return e}function V(e){return e.trim?e.trim():e.replace(/^\s+|\s+$/g,"")}function z(e){return e<16?"0"+e.toString(16):e.toString(16)}function K(e,t){t=t||1/0;for(var r,a=e.length,i=null,s=[],o=0;o55295&&r<57344){if(!i){if(r>56319){(t-=3)>-1&&s.push(239,191,189);continue}if(o+1===a){(t-=3)>-1&&s.push(239,191,189);continue}i=r;continue}if(r<56320){(t-=3)>-1&&s.push(239,191,189),i=r;continue}r=65536+(i-55296<<10|r-56320)}else i&&(t-=3)>-1&&s.push(239,191,189);if(i=null,r<128){if((t-=1)<0)break;s.push(r)}else if(r<2048){if((t-=2)<0)break;s.push(r>>6|192,63&r|128)}else if(r<65536){if((t-=3)<0)break;s.push(r>>12|224,r>>6&63|128,63&r|128)}else{if(!(r<1114112))throw new Error("Invalid code point");if((t-=4)<0)break;s.push(r>>18|240,r>>12&63|128,r>>6&63|128,63&r|128)}}return s}function j(e){for(var t=[],r=0;r=55296&&t<=56319&&i65535&&(e-=65536,t+=w(e>>>10&1023|55296),e=56320|1023&e),t+=w(e)}).join("")}function p(e){return e-48<10?e-22:e-65<26?e-65:e-97<26?e-97:T}function m(e,t){return e+22+75*(e<26)-((0!=t)<<5)}function c(e,t,r){var a=0;for(e=r?G(e/R):e>>1,e+=G(e/t);e>L*k>>1;a+=T)e=G(e/L);return G(a+(L+1)*e/(e+A))}function l(e){var t,r,a,s,o,n,m,l,d,y,b=[],S=e.length,g=0,h=v,I=D;for(r=e.lastIndexOf(x),r<0&&(r=0),a=0;a=S&&i("invalid-input"),l=p(e.charCodeAt(s++)),(l>=T||l>G((f-g)/n))&&i("overflow"),g+=l*n,d=m<=I?C:m>=I+k?k:m-I,!(l=t&&bf&&i("overflow"),b==t){for(l=r,d=T;y=d<=o?C:d>=o+k?k:d-o,!(l