From 229c49ae2fa0c725e10ad59a9108aa19bb690fb9 Mon Sep 17 00:00:00 2001 From: aws-sdk-go-automation <43143561+aws-sdk-go-automation@users.noreply.github.com> Date: Wed, 15 Mar 2023 12:26:38 -0700 Subject: [PATCH] Release v1.44.222 (2023-03-15) (#4763) Release v1.44.222 (2023-03-15) === ### Service Client Updates * `service/migrationhubstrategy`: Updates service API and documentation * `service/s3control`: Updates service API and documentation * Added support for S3 Object Lambda aliases. * `service/securitylake`: Updates service API and documentation ### SDK Bugs * `private/protocol`: Fix error message being elided in restJson errors. * Use request body error message for unknown errors when header is absent. --- CHANGELOG.md | 14 + CHANGELOG_PENDING.md | 3 - aws/endpoints/defaults.go | 9 + aws/version.go | 2 +- .../2020-02-19/api-2.json | 79 ++++ .../2020-02-19/docs-2.json | 70 ++- .../2020-02-19/endpoint-tests-1.json | 96 ++--- models/apis/s3control/2018-08-20/api-2.json | 31 +- models/apis/s3control/2018-08-20/docs-2.json | 32 +- .../apis/securitylake/2018-05-10/api-2.json | 28 +- .../apis/securitylake/2018-05-10/docs-2.json | 49 ++- .../2018-05-10/endpoint-rule-set-1.json | 398 +++++++++-------- .../2018-05-10/endpoint-tests-1.json | 92 ++-- models/endpoints/endpoints.json | 3 + .../api.go | 400 +++++++++++++++--- .../doc.go | 13 +- .../errors.go | 5 +- service/s3control/api.go | 118 +++++- service/securitylake/api.go | 202 ++++++++- 19 files changed, 1250 insertions(+), 394 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 6e365c6b8da..f2652900dfe 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,3 +1,17 @@ +Release v1.44.222 (2023-03-15) +=== + +### Service Client Updates +* `service/migrationhubstrategy`: Updates service API and documentation +* `service/s3control`: Updates service API and documentation + * Added support for S3 Object Lambda aliases. +* `service/securitylake`: Updates service API and documentation + +### SDK Bugs + +* `private/protocol`: Fix error message being elided in restJson errors. + * Use request body error message for unknown errors when header is absent. + Release v1.44.221 (2023-03-14) === diff --git a/CHANGELOG_PENDING.md b/CHANGELOG_PENDING.md index 10e866f5c44..8a1927a39ca 100644 --- a/CHANGELOG_PENDING.md +++ b/CHANGELOG_PENDING.md @@ -3,6 +3,3 @@ ### SDK Enhancements ### SDK Bugs - -* `private/protocol`: Fix error message being elided in restJson errors. - * Use request body error message for unknown errors when header is absent. diff --git a/aws/endpoints/defaults.go b/aws/endpoints/defaults.go index 8ee9af87d6b..e950df717a0 100644 --- a/aws/endpoints/defaults.go +++ b/aws/endpoints/defaults.go @@ -11119,6 +11119,9 @@ var awsPartition = partition{ endpointKey{ Region: "ap-southeast-3", }: endpoint{}, + endpointKey{ + Region: "ap-southeast-4", + }: endpoint{}, endpointKey{ Region: "ca-central-1", }: endpoint{}, @@ -25779,6 +25782,9 @@ var awsPartition = partition{ endpointKey{ Region: "ap-south-1", }: endpoint{}, + endpointKey{ + Region: "ap-south-2", + }: endpoint{}, endpointKey{ Region: "ap-southeast-1", }: endpoint{}, @@ -25788,6 +25794,9 @@ var awsPartition = partition{ endpointKey{ Region: "ap-southeast-3", }: endpoint{}, + endpointKey{ + Region: "ap-southeast-4", + }: endpoint{}, endpointKey{ Region: "ca-central-1", }: endpoint{}, diff --git a/aws/version.go b/aws/version.go index 8b8c4e79db8..c5c2307ae6a 100644 --- a/aws/version.go +++ b/aws/version.go @@ -5,4 +5,4 @@ package aws const SDKName = "aws-sdk-go" // SDKVersion is the version of this SDK -const SDKVersion = "1.44.221" +const SDKVersion = "1.44.222" diff --git a/models/apis/migrationhubstrategy/2020-02-19/api-2.json b/models/apis/migrationhubstrategy/2020-02-19/api-2.json index c6c4c785b14..682308de8cd 100644 --- a/models/apis/migrationhubstrategy/2020-02-19/api-2.json +++ b/models/apis/migrationhubstrategy/2020-02-19/api-2.json @@ -366,6 +366,45 @@ }, "exception":true }, + "AnalysisStatusUnion":{ + "type":"structure", + "members":{ + "runtimeAnalysisStatus":{"shape":"RuntimeAnalysisStatus"}, + "srcCodeOrDbAnalysisStatus":{"shape":"SrcCodeOrDbAnalysisStatus"} + }, + "union":true + }, + "AnalysisType":{ + "type":"string", + "enum":[ + "SOURCE_CODE_ANALYSIS", + "DATABASE_ANALYSIS", + "RUNTIME_ANALYSIS", + "BINARY_ANALYSIS" + ] + }, + "AnalyzerNameUnion":{ + "type":"structure", + "members":{ + "binaryAnalyzerName":{"shape":"BinaryAnalyzerName"}, + "runTimeAnalyzerName":{"shape":"RunTimeAnalyzerName"}, + "sourceCodeAnalyzerName":{"shape":"SourceCodeAnalyzerName"} + }, + "union":true + }, + "AntipatternReportResult":{ + "type":"structure", + "members":{ + "analyzerName":{"shape":"AnalyzerNameUnion"}, + "antiPatternReportS3Object":{"shape":"S3Object"}, + "antipatternReportStatus":{"shape":"AntipatternReportStatus"}, + "antipatternReportStatusMessage":{"shape":"StatusMessage"} + } + }, + "AntipatternReportResultList":{ + "type":"list", + "member":{"shape":"AntipatternReportResult"} + }, "AntipatternReportStatus":{ "type":"string", "enum":[ @@ -458,6 +497,7 @@ "osVersion":{"shape":"String"}, "recommendationSet":{"shape":"RecommendationSet"}, "resourceSubType":{"shape":"ResourceSubType"}, + "resultList":{"shape":"ResultList"}, "runtimeStatus":{"shape":"RuntimeAnalysisStatus"}, "runtimeStatusMessage":{"shape":"StatusMessage"}, "sourceCodeRepositories":{"shape":"SourceCodeRepositories"}, @@ -618,6 +658,13 @@ "max":1, "min":1 }, + "BinaryAnalyzerName":{ + "type":"string", + "enum":[ + "DLL_ANALYZER", + "BYTECODE_ANALYZER" + ] + }, "Boolean":{ "type":"boolean", "box":true @@ -1411,6 +1458,29 @@ "DatabaseProcess" ] }, + "Result":{ + "type":"structure", + "members":{ + "analysisStatus":{"shape":"AnalysisStatusUnion"}, + "analysisType":{"shape":"AnalysisType"}, + "antipatternReportResultList":{"shape":"AntipatternReportResultList"}, + "statusMessage":{"shape":"StatusMessage"} + } + }, + "ResultList":{ + "type":"list", + "member":{"shape":"Result"} + }, + "RunTimeAnalyzerName":{ + "type":"string", + "enum":[ + "A2C_ANALYZER", + "REHOST_ANALYZER", + "EMP_PA_ANALYZER", + "DATABASE_ANALYZER", + "SCT_ANALYZER" + ] + }, "RunTimeAssessmentStatus":{ "type":"string", "enum":[ @@ -1625,6 +1695,15 @@ "versionControl":{"shape":"VersionControl"} } }, + "SourceCodeAnalyzerName":{ + "type":"string", + "enum":[ + "CSHARP_ANALYZER", + "JAVA_ANALYZER", + "BYTECODE_ANALYZER", + "PORTING_ASSISTANT" + ] + }, "SourceCodeList":{ "type":"list", "member":{"shape":"SourceCode"} diff --git a/models/apis/migrationhubstrategy/2020-02-19/docs-2.json b/models/apis/migrationhubstrategy/2020-02-19/docs-2.json index 5c9baf11199..25a1283f774 100644 --- a/models/apis/migrationhubstrategy/2020-02-19/docs-2.json +++ b/models/apis/migrationhubstrategy/2020-02-19/docs-2.json @@ -1,6 +1,6 @@ { "version": "2.0", - "service": "

Migration Hub Strategy Recommendations

 <p>This API reference provides descriptions, syntax, and other details about each of the actions and data types for Migration Hub Strategy Recommendations (Strategy Recommendations). The topic for each action shows the API request parameters and the response. Alternatively, you can use one of the AWS SDKs to access an API that is tailored to the programming language or platform that you're using. For more information, see <a href="http://aws.amazon.com/tools/#SDKs">AWS SDKs</a>.</p>
", + "service": "

Migration Hub Strategy Recommendations

This API reference provides descriptions, syntax, and other details about each of the actions and data types for Migration Hub Strategy Recommendations (Strategy Recommendations). The topic for each action shows the API request parameters and the response. Alternatively, you can use one of the AWS SDKs to access an API that is tailored to the programming language or platform that you're using. For more information, see AWS SDKs.

", "operations": { "GetApplicationComponentDetails": "

Retrieves details about an application component.

", "GetApplicationComponentStrategies": "

Retrieves a list of all the recommended strategies and tools for an application component running on a server.

", @@ -26,13 +26,44 @@ }, "shapes": { "AccessDeniedException": { - "base": "

The AWS user account does not have permission to perform the action. Check the AWS Identity and Access Management (IAM) policy associated with this account.

", + "base": "

The user does not have permission to perform the action. Check the AWS Identity and Access Management (IAM) policy associated with this user.

", "refs": { } }, + "AnalysisStatusUnion": { + "base": "

A combination of existing analysis statuses.

", + "refs": { + "Result$analysisStatus": "

The error in server analysis.

" + } + }, + "AnalysisType": { + "base": null, + "refs": { + "Result$analysisType": "

The error in server analysis.

" + } + }, + "AnalyzerNameUnion": { + "base": "

The combination of the existing analyzers.

", + "refs": { + "AntipatternReportResult$analyzerName": "

The analyzer name.

" + } + }, + "AntipatternReportResult": { + "base": "

The anti-pattern report result.

", + "refs": { + "AntipatternReportResultList$member": null + } + }, + "AntipatternReportResultList": { + "base": null, + "refs": { + "Result$antipatternReportResultList": "

The error in server analysis.

" + } + }, "AntipatternReportStatus": { "base": null, "refs": { + "AntipatternReportResult$antipatternReportStatus": "

The status of the anti-pattern report generation.

", "ApplicationComponentDetail$antipatternReportStatus": "

The status of the anti-pattern report generation.

", "AssessmentSummary$antipatternReportStatus": "

The status of the anti-pattern report.

", "ServerDetail$antipatternReportStatus": "

The status of the anti-pattern report generation.

" @@ -219,6 +250,12 @@ "AwsManagedResources$targetDestination": "

The choice of application destination that you specify.

" } }, + "BinaryAnalyzerName": { + "base": null, + "refs": { + "AnalyzerNameUnion$binaryAnalyzerName": "

The binary analyzer names.

" + } + }, "Boolean": { "base": null, "refs": { @@ -862,6 +899,24 @@ "ApplicationComponentDetail$resourceSubType": "

The application component subtype.

" } }, + "Result": { + "base": "

The error in server analysis.

", + "refs": { + "ResultList$member": null + } + }, + "ResultList": { + "base": null, + "refs": { + "ApplicationComponentDetail$resultList": "

A list of the analysis results.

" + } + }, + "RunTimeAnalyzerName": { + "base": null, + "refs": { + "AnalyzerNameUnion$runTimeAnalyzerName": "

The assessment analyzer names.

" + } + }, "RunTimeAssessmentStatus": { "base": null, "refs": { @@ -872,6 +927,7 @@ "RuntimeAnalysisStatus": { "base": null, "refs": { + "AnalysisStatusUnion$runtimeAnalysisStatus": "

The status of the analysis.

", "ApplicationComponentDetail$runtimeStatus": "

The status of the application unit.

" } }, @@ -896,6 +952,7 @@ "S3Object": { "base": "

Contains the S3 bucket name and the Amazon S3 key name.

", "refs": { + "AntipatternReportResult$antiPatternReportS3Object": null, "ApplicationComponentDetail$antipatternReportS3Object": "

The S3 bucket name and the Amazon S3 key name for the anti-pattern report.

", "AssessmentSummary$antipatternReportS3Object": "

The Amazon S3 object containing the anti-pattern report.

", "ServerDetail$antipatternReportS3Object": "

The S3 bucket name and Amazon S3 key name for anti-pattern report.

" @@ -1024,6 +1081,12 @@ "SourceCodeList$member": null } }, + "SourceCodeAnalyzerName": { + "base": null, + "refs": { + "AnalyzerNameUnion$sourceCodeAnalyzerName": "

The source code analyzer names.

" + } + }, "SourceCodeList": { "base": null, "refs": { @@ -1051,6 +1114,7 @@ "SrcCodeOrDbAnalysisStatus": { "base": null, "refs": { + "AnalysisStatusUnion$srcCodeOrDbAnalysisStatus": "

The status of the source code or database analysis.

", "ApplicationComponentDetail$analysisStatus": "

The status of analysis, if the application component has source code or an associated database.

", "ApplicationComponentStatusSummary$srcCodeOrDbAnalysisStatus": "

The status of database analysis.

" } @@ -1112,10 +1176,12 @@ "StatusMessage": { "base": null, "refs": { + "AntipatternReportResult$antipatternReportStatusMessage": "

The status message for the anti-pattern.

", "ApplicationComponentDetail$antipatternReportStatusMessage": "

The status message for the anti-pattern.

", "ApplicationComponentDetail$runtimeStatusMessage": "

The status message for the application unit.

", "ApplicationComponentDetail$statusMessage": "

A detailed description of the analysis status and any failure message.

", "AssessmentSummary$antipatternReportStatusMessage": "

The status message of the anti-pattern report.

", + "Result$statusMessage": "

The error in server analysis.

", "ServerDetail$antipatternReportStatusMessage": "

A message about the status of the anti-pattern report generation.

", "ServerDetail$statusMessage": "

A message about the status of data collection, which contains detailed descriptions of any error messages.

" } diff --git a/models/apis/migrationhubstrategy/2020-02-19/endpoint-tests-1.json b/models/apis/migrationhubstrategy/2020-02-19/endpoint-tests-1.json index 26060e5e0fe..bca07ef21bd 100644 --- a/models/apis/migrationhubstrategy/2020-02-19/endpoint-tests-1.json +++ b/models/apis/migrationhubstrategy/2020-02-19/endpoint-tests-1.json @@ -9,8 +9,8 @@ }, "params": { "Region": "ap-northeast-1", - "UseDualStack": false, - "UseFIPS": false + "UseFIPS": false, + "UseDualStack": false } }, { @@ -22,8 +22,8 @@ }, "params": { "Region": "ap-southeast-2", - "UseDualStack": false, - "UseFIPS": false + "UseFIPS": false, + "UseDualStack": false } }, { @@ -35,8 +35,8 @@ }, "params": { "Region": "eu-central-1", - "UseDualStack": false, - "UseFIPS": false + "UseFIPS": false, + "UseDualStack": false } }, { @@ -48,8 +48,8 @@ }, "params": { "Region": "eu-west-1", - "UseDualStack": false, - "UseFIPS": false + "UseFIPS": false, + "UseDualStack": false } }, { @@ -61,8 +61,8 @@ }, "params": { "Region": "eu-west-2", - "UseDualStack": false, - "UseFIPS": false + "UseFIPS": false, + "UseDualStack": false } }, { @@ -74,8 +74,8 @@ }, "params": { "Region": "us-east-1", - "UseDualStack": false, - "UseFIPS": false + "UseFIPS": false, + "UseDualStack": false } }, { @@ -87,8 +87,8 @@ }, "params": { "Region": "us-west-2", - "UseDualStack": false, - "UseFIPS": false + "UseFIPS": false, + "UseDualStack": false } }, { @@ -100,8 +100,8 @@ }, "params": { "Region": "us-east-1", - "UseDualStack": true, - "UseFIPS": true + "UseFIPS": true, + "UseDualStack": true } }, { @@ -113,8 +113,8 @@ }, "params": { "Region": "us-east-1", - "UseDualStack": false, - "UseFIPS": true + "UseFIPS": true, + "UseDualStack": false } }, { @@ -126,8 +126,8 @@ }, "params": { "Region": "us-east-1", - "UseDualStack": true, - "UseFIPS": false + "UseFIPS": false, + "UseDualStack": true } }, { @@ -139,8 +139,8 @@ }, "params": { "Region": "cn-north-1", - "UseDualStack": true, - "UseFIPS": true + "UseFIPS": true, + "UseDualStack": true } }, { @@ -152,8 +152,8 @@ }, "params": { "Region": "cn-north-1", - "UseDualStack": false, - "UseFIPS": true + "UseFIPS": true, + "UseDualStack": false } }, { @@ -165,8 +165,8 @@ }, "params": { "Region": "cn-north-1", - "UseDualStack": true, - "UseFIPS": false + "UseFIPS": false, + "UseDualStack": true } }, { @@ -178,8 +178,8 @@ }, "params": { "Region": "cn-north-1", - "UseDualStack": false, - "UseFIPS": false + "UseFIPS": false, + "UseDualStack": false } }, { @@ -191,8 +191,8 @@ }, "params": { "Region": "us-gov-east-1", - "UseDualStack": true, - "UseFIPS": true + "UseFIPS": true, + "UseDualStack": true } }, { @@ -204,8 +204,8 @@ }, "params": { "Region": "us-gov-east-1", - "UseDualStack": false, - "UseFIPS": true + "UseFIPS": true, + "UseDualStack": false } }, { @@ -217,8 +217,8 @@ }, "params": { "Region": "us-gov-east-1", - "UseDualStack": true, - "UseFIPS": false + "UseFIPS": false, + "UseDualStack": true } }, { @@ -230,8 +230,8 @@ }, "params": { "Region": "us-gov-east-1", - "UseDualStack": false, - "UseFIPS": false + "UseFIPS": false, + "UseDualStack": false } }, { @@ -243,8 +243,8 @@ }, "params": { "Region": "us-iso-east-1", - "UseDualStack": false, - "UseFIPS": true + "UseFIPS": true, + "UseDualStack": false } }, { @@ -256,8 +256,8 @@ }, "params": { "Region": "us-iso-east-1", - "UseDualStack": false, - "UseFIPS": false + "UseFIPS": false, + "UseDualStack": false } }, { @@ -269,8 +269,8 @@ }, "params": { "Region": "us-isob-east-1", - "UseDualStack": false, - "UseFIPS": true + "UseFIPS": true, + "UseDualStack": false } }, { @@ -282,8 +282,8 @@ }, "params": { "Region": "us-isob-east-1", - "UseDualStack": false, - "UseFIPS": false + "UseFIPS": false, + "UseDualStack": false } }, { @@ -295,8 +295,8 @@ }, "params": { "Region": "us-east-1", - "UseDualStack": false, "UseFIPS": false, + "UseDualStack": false, "Endpoint": "https://example.com" } }, @@ -308,8 +308,8 @@ } }, "params": { - "UseDualStack": false, "UseFIPS": false, + "UseDualStack": false, "Endpoint": "https://example.com" } }, @@ -320,8 +320,8 @@ }, "params": { "Region": "us-east-1", - "UseDualStack": false, "UseFIPS": true, + "UseDualStack": false, "Endpoint": "https://example.com" } }, @@ -332,8 +332,8 @@ }, "params": { "Region": "us-east-1", - "UseDualStack": true, "UseFIPS": false, + "UseDualStack": true, "Endpoint": "https://example.com" } } diff --git a/models/apis/s3control/2018-08-20/api-2.json b/models/apis/s3control/2018-08-20/api-2.json index e7b4e3de330..18a7745fe47 100644 --- a/models/apis/s3control/2018-08-20/api-2.json +++ b/models/apis/s3control/2018-08-20/api-2.json @@ -1336,7 +1336,8 @@ "CreateAccessPointForObjectLambdaResult":{ "type":"structure", "members":{ - "ObjectLambdaAccessPointArn":{"shape":"ObjectLambdaAccessPointArn"} + "ObjectLambdaAccessPointArn":{"shape":"ObjectLambdaAccessPointArn"}, + "Alias":{"shape":"ObjectLambdaAccessPointAlias"} } }, "CreateAccessPointRequest":{ @@ -2082,7 +2083,8 @@ "members":{ "Name":{"shape":"ObjectLambdaAccessPointName"}, "PublicAccessBlockConfiguration":{"shape":"PublicAccessBlockConfiguration"}, - "CreationDate":{"shape":"CreationDate"} + "CreationDate":{"shape":"CreationDate"}, + "Alias":{"shape":"ObjectLambdaAccessPointAlias"} } }, "GetAccessPointPolicyForObjectLambdaRequest":{ @@ -3510,9 +3512,32 @@ "required":["Name"], "members":{ "Name":{"shape":"ObjectLambdaAccessPointName"}, - "ObjectLambdaAccessPointArn":{"shape":"ObjectLambdaAccessPointArn"} + "ObjectLambdaAccessPointArn":{"shape":"ObjectLambdaAccessPointArn"}, + "Alias":{"shape":"ObjectLambdaAccessPointAlias"} } }, + "ObjectLambdaAccessPointAlias":{ + "type":"structure", + "members":{ + "Value":{"shape":"ObjectLambdaAccessPointAliasValue"}, + "Status":{"shape":"ObjectLambdaAccessPointAliasStatus"} + } + }, + "ObjectLambdaAccessPointAliasStatus":{ + "type":"string", + "enum":[ + "PROVISIONING", + "READY" + ], + "max":16, + "min":2 + }, + "ObjectLambdaAccessPointAliasValue":{ + "type":"string", + "max":63, + "min":3, + "pattern":"^[0-9a-z\\\\-]{3,63}" + }, "ObjectLambdaAccessPointArn":{ "type":"string", "max":2048, diff --git a/models/apis/s3control/2018-08-20/docs-2.json b/models/apis/s3control/2018-08-20/docs-2.json index 3d05c24096e..8a27d4dcde0 100644 --- a/models/apis/s3control/2018-08-20/docs-2.json +++ b/models/apis/s3control/2018-08-20/docs-2.json @@ -14,7 +14,7 @@ "DeleteBucket": "

This action deletes an Amazon S3 on Outposts bucket. To delete an S3 bucket, see DeleteBucket in the Amazon S3 API Reference.

Deletes the Amazon S3 on Outposts bucket. All objects (including all object versions and delete markers) in the bucket must be deleted before the bucket itself can be deleted. For more information, see Using Amazon S3 on Outposts in Amazon S3 User Guide.

All Amazon S3 on Outposts REST API requests for this action require an additional parameter of x-amz-outpost-id to be passed with the request. In addition, you must use an S3 on Outposts endpoint hostname prefix instead of s3-control. For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and the x-amz-outpost-id derived by using the access point ARN, see the Examples section.

Related Resources

", "DeleteBucketLifecycleConfiguration": "

This action deletes an Amazon S3 on Outposts bucket's lifecycle configuration. To delete an S3 bucket's lifecycle configuration, see DeleteBucketLifecycle in the Amazon S3 API Reference.

Deletes the lifecycle configuration from the specified Outposts bucket. Amazon S3 on Outposts removes all the lifecycle configuration rules in the lifecycle subresource associated with the bucket. Your objects never expire, and Amazon S3 on Outposts no longer automatically deletes any objects on the basis of rules contained in the deleted lifecycle configuration. For more information, see Using Amazon S3 on Outposts in Amazon S3 User Guide.

To use this action, you must have permission to perform the s3-outposts:DeleteLifecycleConfiguration action. By default, the bucket owner has this permission and the Outposts bucket owner can grant this permission to others.

All Amazon S3 on Outposts REST API requests for this action require an additional parameter of x-amz-outpost-id to be passed with the request. In addition, you must use an S3 on Outposts endpoint hostname prefix instead of s3-control. For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and the x-amz-outpost-id derived by using the access point ARN, see the Examples section.

For more information about object expiration, see Elements to Describe Lifecycle Actions.

Related actions include:

", "DeleteBucketPolicy": "

This action deletes an Amazon S3 on Outposts bucket policy. To delete an S3 bucket policy, see DeleteBucketPolicy in the Amazon S3 API Reference.

This implementation of the DELETE action uses the policy subresource to delete the policy of a specified Amazon S3 on Outposts bucket. If you are using an identity other than the root user of the Amazon Web Services account that owns the bucket, the calling identity must have the s3-outposts:DeleteBucketPolicy permissions on the specified Outposts bucket and belong to the bucket owner's account to use this action. For more information, see Using Amazon S3 on Outposts in Amazon S3 User Guide.

If you don't have DeleteBucketPolicy permissions, Amazon S3 returns a 403 Access Denied error. If you have the correct permissions, but you're not using an identity that belongs to the bucket owner's account, Amazon S3 returns a 405 Method Not Allowed error.

As a security precaution, the root user of the Amazon Web Services account that owns a bucket can always use this action, even if the policy explicitly denies the root user the ability to perform this action.

For more information about bucket policies, see Using Bucket Policies and User Policies.

All Amazon S3 on Outposts REST API requests for this action require an additional parameter of x-amz-outpost-id to be passed with the request. In addition, you must use an S3 on Outposts endpoint hostname prefix instead of s3-control. For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and the x-amz-outpost-id derived by using the access point ARN, see the Examples section.

The following actions are related to DeleteBucketPolicy:

", - "DeleteBucketReplication": "

This operation deletes an Amazon S3 on Outposts bucket's replication configuration. To delete an S3 bucket's replication configuration, see DeleteBucketReplication in the Amazon S3 API Reference.

Deletes the replication configuration from the specified S3 on Outposts bucket.

To use this operation, you must have permissions to perform the s3-outposts:PutReplicationConfiguration action. The Outposts bucket owner has this permission by default and can grant it to others. For more information about permissions, see Setting up IAM with S3 on Outposts and Managing access to S3 on Outposts buckets in the Amazon S3 User Guide.

It can take a while to propagate PUT or DELETE requests for a replication configuration to all S3 on Outposts systems. Therefore, the replication configuration that's returned by a GET request soon after a PUT or DELETE request might return a more recent result than what's on the Outpost. If an Outpost is offline, the delay in updating the replication configuration on that Outpost can be significant.

All Amazon S3 on Outposts REST API requests for this action require an additional parameter of x-amz-outpost-id to be passed with the request. In addition, you must use an S3 on Outposts endpoint hostname prefix instead of s3-control. For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and the x-amz-outpost-id derived by using the access point ARN, see the Examples section.

For information about S3 replication on Outposts configuration, see Replicating objects for Amazon Web Services Outposts in the Amazon S3 User Guide.

The following operations are related to DeleteBucketReplication:

", + "DeleteBucketReplication": "

This operation deletes an Amazon S3 on Outposts bucket's replication configuration. To delete an S3 bucket's replication configuration, see DeleteBucketReplication in the Amazon S3 API Reference.

Deletes the replication configuration from the specified S3 on Outposts bucket.

To use this operation, you must have permissions to perform the s3-outposts:PutReplicationConfiguration action. The Outposts bucket owner has this permission by default and can grant it to others. For more information about permissions, see Setting up IAM with S3 on Outposts and Managing access to S3 on Outposts buckets in the Amazon S3 User Guide.

It can take a while to propagate PUT or DELETE requests for a replication configuration to all S3 on Outposts systems. Therefore, the replication configuration that's returned by a GET request soon after a PUT or DELETE request might return a more recent result than what's on the Outpost. If an Outpost is offline, the delay in updating the replication configuration on that Outpost can be significant.

All Amazon S3 on Outposts REST API requests for this action require an additional parameter of x-amz-outpost-id to be passed with the request. In addition, you must use an S3 on Outposts endpoint hostname prefix instead of s3-control. For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and the x-amz-outpost-id derived by using the access point ARN, see the Examples section.

For information about S3 replication on Outposts configuration, see Replicating objects for S3 on Outposts in the Amazon S3 User Guide.

The following operations are related to DeleteBucketReplication:

", "DeleteBucketTagging": "

This action deletes an Amazon S3 on Outposts bucket's tags. To delete an S3 bucket tags, see DeleteBucketTagging in the Amazon S3 API Reference.

Deletes the tags from the Outposts bucket. For more information, see Using Amazon S3 on Outposts in Amazon S3 User Guide.

To use this action, you must have permission to perform the PutBucketTagging action. By default, the bucket owner has this permission and can grant this permission to others.

All Amazon S3 on Outposts REST API requests for this action require an additional parameter of x-amz-outpost-id to be passed with the request. In addition, you must use an S3 on Outposts endpoint hostname prefix instead of s3-control. For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and the x-amz-outpost-id derived by using the access point ARN, see the Examples section.

The following actions are related to DeleteBucketTagging:

", "DeleteJobTagging": "

Removes the entire tag set from the specified S3 Batch Operations job. To use the DeleteJobTagging operation, you must have permission to perform the s3:DeleteJobTagging action. For more information, see Controlling access and labeling jobs using tags in the Amazon S3 User Guide.

Related actions include:

", "DeleteMultiRegionAccessPoint": "

Deletes a Multi-Region Access Point. This action does not delete the buckets associated with the Multi-Region Access Point, only the Multi-Region Access Point itself.

This action will always be routed to the US West (Oregon) Region. For more information about the restrictions around managing Multi-Region Access Points, see Managing Multi-Region Access Points in the Amazon S3 User Guide.

This request is asynchronous, meaning that you might receive a response before the command has completed. When this request provides a response, it provides a token that you can use to monitor the status of the request with DescribeMultiRegionAccessPointOperation.

The following actions are related to DeleteMultiRegionAccessPoint:

", @@ -33,7 +33,7 @@ "GetBucket": "

Gets an Amazon S3 on Outposts bucket. For more information, see Using Amazon S3 on Outposts in the Amazon S3 User Guide.

If you are using an identity other than the root user of the Amazon Web Services account that owns the Outposts bucket, the calling identity must have the s3-outposts:GetBucket permissions on the specified Outposts bucket and belong to the Outposts bucket owner's account in order to use this action. Only users from Outposts bucket owner account with the right permissions can perform actions on an Outposts bucket.

If you don't have s3-outposts:GetBucket permissions or you're not using an identity that belongs to the bucket owner's account, Amazon S3 returns a 403 Access Denied error.

The following actions are related to GetBucket for Amazon S3 on Outposts:

All Amazon S3 on Outposts REST API requests for this action require an additional parameter of x-amz-outpost-id to be passed with the request. In addition, you must use an S3 on Outposts endpoint hostname prefix instead of s3-control. For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and the x-amz-outpost-id derived by using the access point ARN, see the Examples section.

", "GetBucketLifecycleConfiguration": "

This action gets an Amazon S3 on Outposts bucket's lifecycle configuration. To get an S3 bucket's lifecycle configuration, see GetBucketLifecycleConfiguration in the Amazon S3 API Reference.

Returns the lifecycle configuration information set on the Outposts bucket. For more information, see Using Amazon S3 on Outposts and for information about lifecycle configuration, see Object Lifecycle Management in Amazon S3 User Guide.

To use this action, you must have permission to perform the s3-outposts:GetLifecycleConfiguration action. The Outposts bucket owner has this permission, by default. The bucket owner can grant this permission to others. For more information about permissions, see Permissions Related to Bucket Subresource Operations and Managing Access Permissions to Your Amazon S3 Resources.

All Amazon S3 on Outposts REST API requests for this action require an additional parameter of x-amz-outpost-id to be passed with the request. In addition, you must use an S3 on Outposts endpoint hostname prefix instead of s3-control. For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and the x-amz-outpost-id derived by using the access point ARN, see the Examples section.

GetBucketLifecycleConfiguration has the following special error:

The following actions are related to GetBucketLifecycleConfiguration:

", "GetBucketPolicy": "

This action gets a bucket policy for an Amazon S3 on Outposts bucket. To get a policy for an S3 bucket, see GetBucketPolicy in the Amazon S3 API Reference.

Returns the policy of a specified Outposts bucket. For more information, see Using Amazon S3 on Outposts in the Amazon S3 User Guide.

If you are using an identity other than the root user of the Amazon Web Services account that owns the bucket, the calling identity must have the GetBucketPolicy permissions on the specified bucket and belong to the bucket owner's account in order to use this action.

Only users from Outposts bucket owner account with the right permissions can perform actions on an Outposts bucket. If you don't have s3-outposts:GetBucketPolicy permissions or you're not using an identity that belongs to the bucket owner's account, Amazon S3 returns a 403 Access Denied error.

As a security precaution, the root user of the Amazon Web Services account that owns a bucket can always use this action, even if the policy explicitly denies the root user the ability to perform this action.

For more information about bucket policies, see Using Bucket Policies and User Policies.

All Amazon S3 on Outposts REST API requests for this action require an additional parameter of x-amz-outpost-id to be passed with the request. In addition, you must use an S3 on Outposts endpoint hostname prefix instead of s3-control. For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and the x-amz-outpost-id derived by using the access point ARN, see the Examples section.

The following actions are related to GetBucketPolicy:

", - "GetBucketReplication": "

This operation gets an Amazon S3 on Outposts bucket's replication configuration. To get an S3 bucket's replication configuration, see GetBucketReplication in the Amazon S3 API Reference.

Returns the replication configuration of an S3 on Outposts bucket. For more information about S3 on Outposts, see Using Amazon S3 on Outposts in the Amazon S3 User Guide. For information about S3 replication on Outposts configuration, see Replicating objects for Amazon Web Services Outposts in the Amazon S3 User Guide.

It can take a while to propagate PUT or DELETE requests for a replication configuration to all S3 on Outposts systems. Therefore, the replication configuration that's returned by a GET request soon after a PUT or DELETE request might return a more recent result than what's on the Outpost. If an Outpost is offline, the delay in updating the replication configuration on that Outpost can be significant.

This action requires permissions for the s3-outposts:GetReplicationConfiguration action. The Outposts bucket owner has this permission by default and can grant it to others. For more information about permissions, see Setting up IAM with S3 on Outposts and Managing access to S3 on Outposts bucket in the Amazon S3 User Guide.

All Amazon S3 on Outposts REST API requests for this action require an additional parameter of x-amz-outpost-id to be passed with the request. In addition, you must use an S3 on Outposts endpoint hostname prefix instead of s3-control. For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and the x-amz-outpost-id derived by using the access point ARN, see the Examples section.

If you include the Filter element in a replication configuration, you must also include the DeleteMarkerReplication, Status, and Priority elements. The response also returns those elements.

For information about S3 on Outposts replication failure reasons, see Replication failure reasons in the Amazon S3 User Guide.

The following operations are related to GetBucketReplication:

", + "GetBucketReplication": "

This operation gets an Amazon S3 on Outposts bucket's replication configuration. To get an S3 bucket's replication configuration, see GetBucketReplication in the Amazon S3 API Reference.

Returns the replication configuration of an S3 on Outposts bucket. For more information about S3 on Outposts, see Using Amazon S3 on Outposts in the Amazon S3 User Guide. For information about S3 replication on Outposts configuration, see Replicating objects for S3 on Outposts in the Amazon S3 User Guide.

It can take a while to propagate PUT or DELETE requests for a replication configuration to all S3 on Outposts systems. Therefore, the replication configuration that's returned by a GET request soon after a PUT or DELETE request might return a more recent result than what's on the Outpost. If an Outpost is offline, the delay in updating the replication configuration on that Outpost can be significant.

This action requires permissions for the s3-outposts:GetReplicationConfiguration action. The Outposts bucket owner has this permission by default and can grant it to others. For more information about permissions, see Setting up IAM with S3 on Outposts and Managing access to S3 on Outposts bucket in the Amazon S3 User Guide.

All Amazon S3 on Outposts REST API requests for this action require an additional parameter of x-amz-outpost-id to be passed with the request. In addition, you must use an S3 on Outposts endpoint hostname prefix instead of s3-control. For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and the x-amz-outpost-id derived by using the access point ARN, see the Examples section.

If you include the Filter element in a replication configuration, you must also include the DeleteMarkerReplication, Status, and Priority elements. The response also returns those elements.

For information about S3 on Outposts replication failure reasons, see Replication failure reasons in the Amazon S3 User Guide.

The following operations are related to GetBucketReplication:

", "GetBucketTagging": "

This action gets an Amazon S3 on Outposts bucket's tags. To get an S3 bucket tags, see GetBucketTagging in the Amazon S3 API Reference.

Returns the tag set associated with the Outposts bucket. For more information, see Using Amazon S3 on Outposts in the Amazon S3 User Guide.

To use this action, you must have permission to perform the GetBucketTagging action. By default, the bucket owner has this permission and can grant this permission to others.

GetBucketTagging has the following special error:

All Amazon S3 on Outposts REST API requests for this action require an additional parameter of x-amz-outpost-id to be passed with the request. In addition, you must use an S3 on Outposts endpoint hostname prefix instead of s3-control. For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and the x-amz-outpost-id derived by using the access point ARN, see the Examples section.

The following actions are related to GetBucketTagging:

", "GetBucketVersioning": "

This operation returns the versioning state for S3 on Outposts buckets only. To return the versioning state for an S3 bucket, see GetBucketVersioning in the Amazon S3 API Reference.

Returns the versioning state for an S3 on Outposts bucket. With S3 Versioning, you can save multiple distinct copies of your objects and recover from unintended user actions and application failures.

If you've never set versioning on your bucket, it has no versioning state. In that case, the GetBucketVersioning request does not return a versioning state value.

For more information about versioning, see Versioning in the Amazon S3 User Guide.

All Amazon S3 on Outposts REST API requests for this action require an additional parameter of x-amz-outpost-id to be passed with the request. In addition, you must use an S3 on Outposts endpoint hostname prefix instead of s3-control. For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and the x-amz-outpost-id derived by using the access point ARN, see the Examples section.

The following operations are related to GetBucketVersioning for S3 on Outposts.

", "GetJobTagging": "

Returns the tags on an S3 Batch Operations job. To use the GetJobTagging operation, you must have permission to perform the s3:GetJobTagging action. For more information, see Controlling access and labeling jobs using tags in the Amazon S3 User Guide.

Related actions include:

", @@ -55,9 +55,9 @@ "PutAccessPointPolicyForObjectLambda": "

Creates or replaces resource policy for an Object Lambda Access Point. For an example policy, see Creating Object Lambda Access Points in the Amazon S3 User Guide.

The following actions are related to PutAccessPointPolicyForObjectLambda:

", "PutBucketLifecycleConfiguration": "

This action puts a lifecycle configuration to an Amazon S3 on Outposts bucket. To put a lifecycle configuration to an S3 bucket, see PutBucketLifecycleConfiguration in the Amazon S3 API Reference.

Creates a new lifecycle configuration for the S3 on Outposts bucket or replaces an existing lifecycle configuration. Outposts buckets only support lifecycle configurations that delete/expire objects after a certain period of time and abort incomplete multipart uploads.

All Amazon S3 on Outposts REST API requests for this action require an additional parameter of x-amz-outpost-id to be passed with the request. In addition, you must use an S3 on Outposts endpoint hostname prefix instead of s3-control. For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and the x-amz-outpost-id derived by using the access point ARN, see the Examples section.

The following actions are related to PutBucketLifecycleConfiguration:

", "PutBucketPolicy": "

This action puts a bucket policy to an Amazon S3 on Outposts bucket. To put a policy on an S3 bucket, see PutBucketPolicy in the Amazon S3 API Reference.

Applies an Amazon S3 bucket policy to an Outposts bucket. For more information, see Using Amazon S3 on Outposts in the Amazon S3 User Guide.

If you are using an identity other than the root user of the Amazon Web Services account that owns the Outposts bucket, the calling identity must have the PutBucketPolicy permissions on the specified Outposts bucket and belong to the bucket owner's account in order to use this action.

If you don't have PutBucketPolicy permissions, Amazon S3 returns a 403 Access Denied error. If you have the correct permissions, but you're not using an identity that belongs to the bucket owner's account, Amazon S3 returns a 405 Method Not Allowed error.

As a security precaution, the root user of the Amazon Web Services account that owns a bucket can always use this action, even if the policy explicitly denies the root user the ability to perform this action.

For more information about bucket policies, see Using Bucket Policies and User Policies.

All Amazon S3 on Outposts REST API requests for this action require an additional parameter of x-amz-outpost-id to be passed with the request. In addition, you must use an S3 on Outposts endpoint hostname prefix instead of s3-control. For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and the x-amz-outpost-id derived by using the access point ARN, see the Examples section.

The following actions are related to PutBucketPolicy:

", - "PutBucketReplication": "

This action creates an Amazon S3 on Outposts bucket's replication configuration. To create an S3 bucket's replication configuration, see PutBucketReplication in the Amazon S3 API Reference.

Creates a replication configuration or replaces an existing one. For information about S3 replication on Outposts configuration, see Replicating objects for Amazon Web Services Outposts in the Amazon S3 User Guide.

It can take a while to propagate PUT or DELETE requests for a replication configuration to all S3 on Outposts systems. Therefore, the replication configuration that's returned by a GET request soon after a PUT or DELETE request might return a more recent result than what's on the Outpost. If an Outpost is offline, the delay in updating the replication configuration on that Outpost can be significant.

Specify the replication configuration in the request body. In the replication configuration, you provide the following information:

A replication configuration must include at least one rule and can contain a maximum of 100. Each rule identifies a subset of objects to replicate by filtering the objects in the source Outposts bucket. To choose additional subsets of objects to replicate, add a rule for each subset.

To specify a subset of the objects in the source Outposts bucket to apply a replication rule to, add the Filter element as a child of the Rule element. You can filter objects based on an object key prefix, one or more object tags, or both. When you add the Filter element in the configuration, you must also add the following elements: DeleteMarkerReplication, Status, and Priority.

Using PutBucketReplication on Outposts requires that both the source and destination buckets must have versioning enabled. For information about enabling versioning on a bucket, see Managing S3 Versioning for your S3 on Outposts bucket.

For information about S3 on Outposts replication failure reasons, see Replication failure reasons in the Amazon S3 User Guide.

Handling Replication of Encrypted Objects

Outposts buckets are encrypted at all times. All the objects in the source Outposts bucket are encrypted and can be replicated. Also, all the replicas in the destination Outposts bucket are encrypted with the same encryption key as the objects in the source Outposts bucket.

Permissions

To create a PutBucketReplication request, you must have s3-outposts:PutReplicationConfiguration permissions for the bucket. The Outposts bucket owner has this permission by default and can grant it to others. For more information about permissions, see Setting up IAM with S3 on Outposts and Managing access to S3 on Outposts buckets.

To perform this operation, the user or role must also have the iam:PassRole permission.

All Amazon S3 on Outposts REST API requests for this action require an additional parameter of x-amz-outpost-id to be passed with the request. In addition, you must use an S3 on Outposts endpoint hostname prefix instead of s3-control. For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and the x-amz-outpost-id derived by using the access point ARN, see the Examples section.

The following operations are related to PutBucketReplication:

", + "PutBucketReplication": "

This action creates an Amazon S3 on Outposts bucket's replication configuration. To create an S3 bucket's replication configuration, see PutBucketReplication in the Amazon S3 API Reference.

Creates a replication configuration or replaces an existing one. For information about S3 replication on Outposts configuration, see Replicating objects for S3 on Outposts in the Amazon S3 User Guide.

It can take a while to propagate PUT or DELETE requests for a replication configuration to all S3 on Outposts systems. Therefore, the replication configuration that's returned by a GET request soon after a PUT or DELETE request might return a more recent result than what's on the Outpost. If an Outpost is offline, the delay in updating the replication configuration on that Outpost can be significant.

Specify the replication configuration in the request body. In the replication configuration, you provide the following information:

A replication configuration must include at least one rule and can contain a maximum of 100. Each rule identifies a subset of objects to replicate by filtering the objects in the source Outposts bucket. To choose additional subsets of objects to replicate, add a rule for each subset.

To specify a subset of the objects in the source Outposts bucket to apply a replication rule to, add the Filter element as a child of the Rule element. You can filter objects based on an object key prefix, one or more object tags, or both. When you add the Filter element in the configuration, you must also add the following elements: DeleteMarkerReplication, Status, and Priority.

Using PutBucketReplication on Outposts requires that both the source and destination buckets must have versioning enabled. For information about enabling versioning on a bucket, see Managing S3 Versioning for your S3 on Outposts bucket.

For information about S3 on Outposts replication failure reasons, see Replication failure reasons in the Amazon S3 User Guide.

Handling Replication of Encrypted Objects

Outposts buckets are encrypted at all times. All the objects in the source Outposts bucket are encrypted and can be replicated. Also, all the replicas in the destination Outposts bucket are encrypted with the same encryption key as the objects in the source Outposts bucket.

Permissions

To create a PutBucketReplication request, you must have s3-outposts:PutReplicationConfiguration permissions for the bucket. The Outposts bucket owner has this permission by default and can grant it to others. For more information about permissions, see Setting up IAM with S3 on Outposts and Managing access to S3 on Outposts buckets.

To perform this operation, the user or role must also have the iam:CreateRole and iam:PassRole permissions. For more information, see Granting a user permissions to pass a role to an Amazon Web Services service.

All Amazon S3 on Outposts REST API requests for this action require an additional parameter of x-amz-outpost-id to be passed with the request. In addition, you must use an S3 on Outposts endpoint hostname prefix instead of s3-control. For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and the x-amz-outpost-id derived by using the access point ARN, see the Examples section.

The following operations are related to PutBucketReplication:

", "PutBucketTagging": "

This action puts tags on an Amazon S3 on Outposts bucket. To put tags on an S3 bucket, see PutBucketTagging in the Amazon S3 API Reference.

Sets the tags for an S3 on Outposts bucket. For more information, see Using Amazon S3 on Outposts in the Amazon S3 User Guide.

Use tags to organize your Amazon Web Services bill to reflect your own cost structure. To do this, sign up to get your Amazon Web Services account bill with tag key values included. Then, to see the cost of combined resources, organize your billing information according to resources with the same tag key values. For example, you can tag several resources with a specific application name, and then organize your billing information to see the total cost of that application across several services. For more information, see Cost allocation and tagging.

Within a bucket, if you add a tag that has the same key as an existing tag, the new value overwrites the old value. For more information, see Using cost allocation in Amazon S3 bucket tags.

To use this action, you must have permissions to perform the s3-outposts:PutBucketTagging action. The Outposts bucket owner has this permission by default and can grant this permission to others. For more information about permissions, see Permissions Related to Bucket Subresource Operations and Managing access permissions to your Amazon S3 resources.

PutBucketTagging has the following special errors:

All Amazon S3 on Outposts REST API requests for this action require an additional parameter of x-amz-outpost-id to be passed with the request. In addition, you must use an S3 on Outposts endpoint hostname prefix instead of s3-control. For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and the x-amz-outpost-id derived by using the access point ARN, see the Examples section.

The following actions are related to PutBucketTagging:

", - "PutBucketVersioning": "

This operation sets the versioning state for S3 on Outposts buckets only. To set the versioning state for an S3 bucket, see PutBucketVersioning in the Amazon S3 API Reference.

Sets the versioning state for an S3 on Outposts bucket. With S3 Versioning, you can save multiple distinct copies of your objects and recover from unintended user actions and application failures.

You can set the versioning state to one of the following:

If you've never set versioning on your bucket, it has no versioning state. In that case, a GetBucketVersioning request does not return a versioning state value.

When you enable S3 Versioning, for each object in your bucket, you have a current version and zero or more noncurrent versions. You can configure your bucket S3 Lifecycle rules to expire noncurrent versions after a specified time period. For more information, see Creating and managing a lifecycle configuration for your S3 on Outposts bucket in the Amazon S3 User Guide.

If you have an object expiration lifecycle policy in your non-versioned bucket and you want to maintain the same permanent delete behavior when you enable versioning, you must add a noncurrent expiration policy. The noncurrent expiration lifecycle policy will manage the deletions of the noncurrent object versions in the version-enabled bucket. For more information, see Versioning in the Amazon S3 User Guide.

All Amazon S3 on Outposts REST API requests for this action require an additional parameter of x-amz-outpost-id to be passed with the request. In addition, you must use an S3 on Outposts endpoint hostname prefix instead of s3-control. For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and the x-amz-outpost-id derived by using the access point ARN, see the Examples section.

The following operations are related to PutBucketVersioning for S3 on Outposts.

", + "PutBucketVersioning": "

This operation sets the versioning state for S3 on Outposts buckets only. To set the versioning state for an S3 bucket, see PutBucketVersioning in the Amazon S3 API Reference.

Sets the versioning state for an S3 on Outposts bucket. With S3 Versioning, you can save multiple distinct copies of your objects and recover from unintended user actions and application failures.

You can set the versioning state to one of the following:

If you've never set versioning on your bucket, it has no versioning state. In that case, a GetBucketVersioning request does not return a versioning state value.

When you enable S3 Versioning, for each object in your bucket, you have a current version and zero or more noncurrent versions. You can configure your bucket S3 Lifecycle rules to expire noncurrent versions after a specified time period. For more information, see Creating and managing a lifecycle configuration for your S3 on Outposts bucket in the Amazon S3 User Guide.

If you have an object expiration lifecycle configuration in your non-versioned bucket and you want to maintain the same permanent delete behavior when you enable versioning, you must add a noncurrent expiration policy. The noncurrent expiration lifecycle configuration will manage the deletes of the noncurrent object versions in the version-enabled bucket. For more information, see Versioning in the Amazon S3 User Guide.

All Amazon S3 on Outposts REST API requests for this action require an additional parameter of x-amz-outpost-id to be passed with the request. In addition, you must use an S3 on Outposts endpoint hostname prefix instead of s3-control. For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and the x-amz-outpost-id derived by using the access point ARN, see the Examples section.

The following operations are related to PutBucketVersioning for S3 on Outposts.

", "PutJobTagging": "

Sets the supplied tag-set on an S3 Batch Operations job.

A tag is a key-value pair. You can associate S3 Batch Operations tags with any job by sending a PUT request against the tagging subresource that is associated with the job. To modify the existing tag set, you can either replace the existing tag set entirely, or make changes within the existing tag set by retrieving the existing tag set using GetJobTagging, modify that tag set, and use this action to replace the tag set with the one you modified. For more information, see Controlling access and labeling jobs using tags in the Amazon S3 User Guide.

To use the PutJobTagging operation, you must have permission to perform the s3:PutJobTagging action.

Related actions include:

", "PutMultiRegionAccessPointPolicy": "

Associates an access control policy with the specified Multi-Region Access Point. Each Multi-Region Access Point can have only one policy, so a request made to this action replaces any existing policy that is associated with the specified Multi-Region Access Point.

This action will always be routed to the US West (Oregon) Region. For more information about the restrictions around managing Multi-Region Access Points, see Managing Multi-Region Access Points in the Amazon S3 User Guide.

The following actions are related to PutMultiRegionAccessPointPolicy:

", "PutPublicAccessBlock": "

Creates or modifies the PublicAccessBlock configuration for an Amazon Web Services account. For this operation, users must have the s3:PutAccountPublicAccessBlock permission. For more information, see Using Amazon S3 block public access.

Related actions include:

", @@ -71,7 +71,7 @@ "AbortIncompleteMultipartUpload": { "base": "

The container for abort incomplete multipart upload

", "refs": { - "LifecycleRule$AbortIncompleteMultipartUpload": "

Specifies the days since the initiation of an incomplete multipart upload that Amazon S3 waits before permanently removing all parts of the upload. For more information, see Aborting Incomplete Multipart Uploads Using a Bucket Lifecycle Policy in the Amazon S3 User Guide.

" + "LifecycleRule$AbortIncompleteMultipartUpload": "

Specifies the days since the initiation of an incomplete multipart upload that Amazon S3 waits before permanently removing all parts of the upload. For more information, see Aborting Incomplete Multipart Uploads Using a Bucket Lifecycle Configuration in the Amazon S3 User Guide.

" } }, "AccessControlTranslation": { @@ -1664,6 +1664,26 @@ "ObjectLambdaAccessPointList$member": null } }, + "ObjectLambdaAccessPointAlias": { + "base": "

The alias of an Object Lambda Access Point. For more information, see How to use a bucket-style alias for your S3 bucket Object Lambda Access Point.

", + "refs": { + "CreateAccessPointForObjectLambdaResult$Alias": "

The alias of the Object Lambda Access Point.

", + "GetAccessPointForObjectLambdaResult$Alias": "

The alias of the Object Lambda Access Point.

", + "ObjectLambdaAccessPoint$Alias": "

The alias of the Object Lambda Access Point.

" + } + }, + "ObjectLambdaAccessPointAliasStatus": { + "base": null, + "refs": { + "ObjectLambdaAccessPointAlias$Status": "

The status of the Object Lambda Access Point alias. If the status is PROVISIONING, the Object Lambda Access Point is provisioning the alias and the alias is not ready for use yet. If the status is READY, the Object Lambda Access Point alias is successfully provisioned and ready for use.

" + } + }, + "ObjectLambdaAccessPointAliasValue": { + "base": null, + "refs": { + "ObjectLambdaAccessPointAlias$Value": "

The alias value of the Object Lambda Access Point.

" + } + }, "ObjectLambdaAccessPointArn": { "base": null, "refs": { @@ -1840,7 +1860,7 @@ "Priority": { "base": null, "refs": { - "ReplicationRule$Priority": "

The priority indicates which rule has precedence whenever two or more replication rules conflict. S3 on Outposts attempts to replicate objects according to all replication rules. However, if there are two or more rules with the same destination Outposts bucket, then objects will be replicated according to the rule with the highest priority. The higher the number, the higher the priority.

For more information, see Creating replication rules between Outposts in the Amazon S3 User Guide.

" + "ReplicationRule$Priority": "

The priority indicates which rule has precedence whenever two or more replication rules conflict. S3 on Outposts attempts to replicate objects according to all replication rules. However, if there are two or more rules with the same destination Outposts bucket, then objects will be replicated according to the rule with the highest priority. The higher the number, the higher the priority.

For more information, see Creating replication rules on Outposts in the Amazon S3 User Guide.

" } }, "ProposedMultiRegionAccessPointPolicy": { diff --git a/models/apis/securitylake/2018-05-10/api-2.json b/models/apis/securitylake/2018-05-10/api-2.json index 73e1bd3a572..90f4c1a0b9e 100644 --- a/models/apis/securitylake/2018-05-10/api-2.json +++ b/models/apis/securitylake/2018-05-10/api-2.json @@ -544,6 +544,7 @@ "type":"structure", "required":["message"], "members":{ + "errorCode":{"shape":"String"}, "message":{"shape":"String"} }, "error":{ @@ -835,6 +836,8 @@ "type":"structure", "required":["subscriptionId"], "members":{ + "resourceShareArn":{"shape":"ResourceShareArn"}, + "resourceShareName":{"shape":"ResourceShareName"}, "roleArn":{"shape":"RoleArn"}, "s3BucketArn":{"shape":"S3BucketArn"}, "snsArn":{"shape":"SnsTopicArn"}, @@ -1200,7 +1203,8 @@ "retentionSettings":{"shape":"RetentionSettingList"}, "s3BucketArn":{"shape":"S3BucketArn"}, "status":{"shape":"settingsStatus"}, - "tagsMap":{"shape":"TagsMap"} + "tagsMap":{"shape":"TagsMap"}, + "updateStatus":{"shape":"UpdateStatus"} } }, "LakeConfigurationResponseMap":{ @@ -1208,6 +1212,13 @@ "key":{"shape":"Region"}, "value":{"shape":"LakeConfigurationResponse"} }, + "LastUpdateFailure":{ + "type":"structure", + "members":{ + "code":{"shape":"String"}, + "reason":{"shape":"String"} + } + }, "ListDatalakeExceptionsRequest":{ "type":"structure", "members":{ @@ -1368,6 +1379,11 @@ }, "exception":true }, + "ResourceShareArn":{"type":"string"}, + "ResourceShareName":{ + "type":"string", + "pattern":"^LakeFormation(?:-V[0-9]+)-([a-zA-Z0-9]+)-([\\\\\\w\\-_:/.@=+]*)$" + }, "RetentionSetting":{ "type":"structure", "members":{ @@ -1477,6 +1493,8 @@ "accountId":{"shape":"AwsAccountId"}, "createdAt":{"shape":"SyntheticTimestamp_date_time"}, "externalId":{"shape":"SafeString"}, + "resourceShareArn":{"shape":"ResourceShareArn"}, + "resourceShareName":{"shape":"ResourceShareName"}, "roleArn":{"shape":"RoleArn"}, "s3BucketArn":{"shape":"S3BucketArn"}, "snsArn":{"shape":"SnsTopicArn"}, @@ -1596,6 +1614,14 @@ "members":{ } }, + "UpdateStatus":{ + "type":"structure", + "members":{ + "lastUpdateFailure":{"shape":"LastUpdateFailure"}, + "lastUpdateRequestId":{"shape":"String"}, + "lastUpdateStatus":{"shape":"settingsStatus"} + } + }, "UpdateSubscriberRequest":{ "type":"structure", "required":[ diff --git a/models/apis/securitylake/2018-05-10/docs-2.json b/models/apis/securitylake/2018-05-10/docs-2.json index 709321aaa2f..67cbb2ecb69 100644 --- a/models/apis/securitylake/2018-05-10/docs-2.json +++ b/models/apis/securitylake/2018-05-10/docs-2.json @@ -9,11 +9,11 @@ "CreateDatalakeDelegatedAdmin": "

Designates the Amazon Security Lake delegated administrator account for the organization. This API can only be called by the organization management account. The organization management account cannot be the delegated administrator account.

", "CreateDatalakeExceptionsSubscription": "

Creates the specified notification subscription in Amazon Security Lake for the organization you specify.

", "CreateSubscriber": "

Creates a subscription permission for accounts that are already enabled in Amazon Security Lake. You can create a subscriber with access to data in the current Amazon Web Services Region.

", - "CreateSubscriptionNotificationConfiguration": "

Notifies the subscriber when new data is written to the data lake for the sources that the subscriber consumes in Security Lake.

", + "CreateSubscriptionNotificationConfiguration": "

Notifies the subscriber when new data is written to the data lake for the sources that the subscriber consumes in Security Lake. You can create only one subscriber notification per subscriber.

", "DeleteAwsLogSource": "

Removes a natively supported Amazon Web Service as an Amazon Security Lake source. When you remove the source, Security Lake stops collecting data from that source, and subscribers can no longer consume new data from the source. Subscribers can still consume data that Security Lake collected from the source before disablement.

You can choose any source type in any Amazon Web Services Region for either accounts that are part of a trusted organization or standalone accounts. At least one of the three dimensions is a mandatory input to this API. However, you can supply any combination of the three dimensions to this API.

By default, a dimension refers to the entire set. This is overridden when you supply any one of the inputs. For instance, when you do not specify members, the API disables all Security Lake member accounts for sources. Similarly, when you do not specify Regions, Security Lake is disabled for all the Regions where Security Lake is available as a service.

When you don't provide a dimension, Security Lake assumes that the missing dimension refers to the entire set. For example, if you don't provide specific accounts, the API applies to the entire set of accounts in your organization.

", "DeleteCustomLogSource": "

Removes a custom log source from Amazon Security Lake.

", "DeleteDatalake": "

When you delete Amazon Security Lake from your account, Security Lake is disabled in all Amazon Web Services Regions. Also, this API automatically takes steps to remove the account from Security Lake .

This operation disables security data collection from sources, deletes data stored, and stops making data accessible to subscribers. Security Lake also deletes all the existing settings and resources that it stores or maintains for your Amazon Web Services account in the current Region, including security log and event data. The DeleteDatalake operation does not delete the Amazon S3 bucket, which is owned by your Amazon Web Services account. For more information, see the Amazon Security Lake User Guide.

", - "DeleteDatalakeAutoEnable": "

Automatically deletes Amazon Security Lake to stop collecting security data. When you delete Amazon Security Lake from your account, Security Lake is disabled in all Regions. Also, this API automatically takes steps to remove the account from Security Lake .

This operation disables security data collection from sources, deletes data stored, and stops making data accessible to subscribers. Security Lake also deletes all the existing settings and resources that it stores or maintains for your Amazon Web Services account in the current Region, including security log and event data. The DeleteDatalake operation does not delete the Amazon S3 bucket, which is owned by your Amazon Web Services account. For more information, see the Amazon Security Lake User Guide.

", + "DeleteDatalakeAutoEnable": "

DeleteDatalakeAutoEnable removes automatic enablement of configuration settings for new member accounts (but keeps settings for the delegated administrator) from Amazon Security Lake. You must run this API using credentials of the delegated administrator. When you run this API, new member accounts that are added after the organization enables Security Lake won't contribute to the data lake.

", "DeleteDatalakeDelegatedAdmin": "

Deletes the Amazon Security Lake delegated administrator account for the organization. This API can only be called by the organization management account. The organization management account cannot be the delegated administrator account.

", "DeleteDatalakeExceptionsSubscription": "

Deletes the specified notification subscription in Amazon Security Lake for the organization you specify.

", "DeleteSubscriber": "

Deletes the subscription permission for accounts that are already enabled in Amazon Security Lake. You can delete a subscriber and remove access to data in the current Amazon Web Services Region.

", @@ -31,7 +31,7 @@ "UpdateDatalakeExceptionsExpiry": "

Update the expiration period for the exception message to your preferred time, and control the time-to-live (TTL) for the exception message to remain. Exceptions are stored by default for 2 weeks from when a record was created in Amazon Security Lake.

", "UpdateDatalakeExceptionsSubscription": "

Updates the specified notification subscription in Amazon Security Lake for the organization you specify.

", "UpdateSubscriber": "

Updates an existing subscription for the given Amazon Security Lake account ID. You can update a subscriber by changing the sources that the subscriber consumes data from.

", - "UpdateSubscriptionNotificationConfiguration": "

Creates a new subscription notification or adds the existing subscription notification setting for the specified subscription ID.

" + "UpdateSubscriptionNotificationConfiguration": "

Updates an existing notification method for the subscription (SQS or HTTPs endpoint) or switches the notification subscription endpoint for a subscriber.

" }, "shapes": { "AccessDeniedException": { @@ -97,7 +97,7 @@ "base": null, "refs": { "CreateDatalakeAutoEnableRequest$configurationForNewAccounts": "

Enable Security Lake with the specified configuration settings to begin collecting security data for new accounts in your organization.

", - "DeleteDatalakeAutoEnableRequest$removeFromConfigurationForNewAccounts": "

Delete Amazon Security Lake with the specified configuration settings to stop ingesting security data for new accounts in Security Lake.

", + "DeleteDatalakeAutoEnableRequest$removeFromConfigurationForNewAccounts": "

Remove automatic enablement of configuration settings for new member accounts in Security Lake.

", "GetDatalakeAutoEnableResponse$autoEnableNewAccounts": "

The configuration for new accounts.

" } }, @@ -512,6 +512,12 @@ "GetDatalakeResponse$configurations": "

Retrieves the Security Lake configuration object.

" } }, + "LastUpdateFailure": { + "base": "

The details of the last UpdateDatalake or DeleteDatalake API request which failed.

", + "refs": { + "UpdateStatus$lastUpdateFailure": "

The details of the last UpdateDatalakeor DeleteDatalake API request which failed.

" + } + }, "ListDatalakeExceptionsRequest": { "base": null, "refs": { @@ -602,6 +608,20 @@ "refs": { } }, + "ResourceShareArn": { + "base": null, + "refs": { + "CreateSubscriberResponse$resourceShareArn": "

The Amazon Resource Name (ARN) which uniquely defines the AWS RAM resource share. Before accepting the RAM resource share invitation, you can view details related to the RAM resource share.

", + "SubscriberResource$resourceShareArn": "

The Amazon Resource Name (ARN) which uniquely defines the AWS RAM resource share. Before accepting the RAM resource share invitation, you can view details related to the RAM resource share.

This field is available only for Lake Formation subscribers created after March 8, 2023.

" + } + }, + "ResourceShareName": { + "base": null, + "refs": { + "CreateSubscriberResponse$resourceShareName": "

The name of the resource share.

", + "SubscriberResource$resourceShareName": "

The name of the resource share.

" + } + }, "RetentionSetting": { "base": "

Retention settings for the destination Amazon S3 buckets in Amazon Security Lake.

", "refs": { @@ -626,12 +646,12 @@ "refs": { "CreateCustomLogSourceRequest$glueInvocationRoleArn": "

The Amazon Resource Name (ARN) of the Identity and Access Management (IAM) role to be used by the Glue crawler. The recommended IAM policies are:

", "CreateDatalakeRequest$metaStoreManagerRoleArn": "

The Amazon Resource Name (ARN) used to create and update the Glue table. This table contains partitions generated by the ingestion and normalization of Amazon Web Services log sources and custom sources.

", - "CreateSubscriberResponse$roleArn": "

The Amazon Resource Name (ARN) created by you to provide to the subscriber. For more information about ARNs and how to use them in policies, see IAM identifiers in the Identity and Access Management (IAM) User Guide. .

", - "CreateSubscriptionNotificationConfigurationRequest$roleArn": "

The Amazon Resource Name (ARN) of the EventBridge API destinations IAM role that you created.

", + "CreateSubscriberResponse$roleArn": "

The Amazon Resource Name (ARN) created by you to provide to the subscriber. For more information about ARNs and how to use them in policies, see Amazon Security Lake User Guide.

", + "CreateSubscriptionNotificationConfigurationRequest$roleArn": "

The Amazon Resource Name (ARN) of the EventBridge API destinations IAM role that you created. For more information about ARNs and how to use them in policies, see Managing data access and Amazon Web Services Managed Policies in the Amazon Security Lake User Guide.

", "LakeConfigurationRequest$replicationRoleArn": "

Replication settings for the Amazon S3 buckets. This parameter uses the Identity and Access Management (IAM) role you created that is managed by Security Lake, to ensure the replication setting is correct.

", "LakeConfigurationResponse$replicationRoleArn": "

Replication settings for the Amazon S3 buckets. This parameter uses the IAM role you created that is managed by Security Lake, to ensure the replication setting is correct.

", "SubscriberResource$roleArn": "

The Amazon Resource Name (ARN) specifying the role of the subscriber.

", - "UpdateSubscriptionNotificationConfigurationRequest$roleArn": "

The Amazon Resource Name (ARN) specifying the role of the subscriber.

" + "UpdateSubscriptionNotificationConfigurationRequest$roleArn": "

The Amazon Resource Name (ARN) specifying the role of the subscriber. For more information about ARNs and how to use them in policies, see, see the Managing data access and Amazon Web Services Managed Policiesin the Amazon Security Lake User Guide.

" } }, "S3BucketArn": { @@ -716,6 +736,7 @@ "String": { "base": null, "refs": { + "AccessDeniedException$errorCode": "

A coded string to provide more information about the access denied exception. You can use the error code to check the exception type.

", "AccessDeniedException$message": null, "AccountList$member": null, "AccountNotFoundException$message": null, @@ -745,6 +766,8 @@ "InvalidInputException$message": null, "LakeConfigurationRequest$encryptionKey": "

The type of encryption key used by Amazon Security Lake to encrypt the Security Lake configuration object.

", "LakeConfigurationResponse$encryptionKey": "

The type of encryption key used by secure the Security Lake configuration object.

", + "LastUpdateFailure$code": "

The reason code for the failure of the last UpdateDatalake or DeleteDatalake API request.

", + "LastUpdateFailure$reason": "

The reason for the failure of the last UpdateDatalakeor DeleteDatalake API request.

", "ListLogSourcesResponse$nextToken": "

If nextToken is returned, there are more results available. You can repeat the call using the returned token to retrieve the next page.

", "ListSubscribersRequest$nextToken": "

If nextToken is returned, there are more results available. You can repeat the call using the returned token to retrieve the next page.

", "ListSubscribersResponse$nextToken": "

If nextToken is returned, there are more results available. You can repeat the call using the returned token to retrieve the next page.

", @@ -765,6 +788,7 @@ "ThrottlingException$quotaCode": "

That the rate of requests to Security Lake is exceeding the request quotas for your Amazon Web Services account.

", "ThrottlingException$serviceCode": "

The code for the service in Service Quotas.

", "TwoDimensionsMap$key": null, + "UpdateStatus$lastUpdateRequestId": "

The unique ID for the UpdateDatalake or DeleteDatalake API request.

", "UpdateSubscriberRequest$id": "

A value created by Security Lake that uniquely identifies your subscription.

", "UpdateSubscriptionNotificationConfigurationRequest$httpsApiKeyName": "

The key name for the subscription notification.

", "UpdateSubscriptionNotificationConfigurationRequest$httpsApiKeyValue": "

The key value for the subscription notification.

", @@ -834,7 +858,7 @@ "base": null, "refs": { "CreateSubscriberResponse$subscriptionId": "

The subscriptionId created by the CreateSubscriber API call.

", - "CreateSubscriptionNotificationConfigurationRequest$subscriptionId": "

The subscription ID for the notification subscription/

", + "CreateSubscriptionNotificationConfigurationRequest$subscriptionId": "

The subscription ID for the notification subscription.

", "DeleteSubscriptionNotificationConfigurationRequest$subscriptionId": "

The ID of the Security Lake subscriber account.

", "SubscriberResource$subscriptionId": "

The subscription ID of the Amazon Security Lake subscriber account.

", "UpdateSubscriptionNotificationConfigurationRequest$subscriptionId": "

The subscription ID for which the subscription notification is specified.

" @@ -876,6 +900,12 @@ "refs": { } }, + "UpdateStatus": { + "base": "

The status of the last UpdateDatalake or DeleteDatalake API request. This is set to Completed after the configuration is updated, or removed if deletion of the data lake is successful.

", + "refs": { + "LakeConfigurationResponse$updateStatus": "

The status of the last UpdateDatalake or DeleteDatalake API request.

" + } + }, "UpdateSubscriberRequest": { "base": null, "refs": { @@ -940,7 +970,8 @@ "settingsStatus": { "base": null, "refs": { - "LakeConfigurationResponse$status": "

Retrieves the status of the configuration operation for an account in Amazon Security Lake.

" + "LakeConfigurationResponse$status": "

Retrieves the status of the configuration operation for an account in Amazon Security Lake.

", + "UpdateStatus$lastUpdateStatus": "

The status of the last UpdateDatalake or DeleteDatalake API request that was requested.

" } } } diff --git a/models/apis/securitylake/2018-05-10/endpoint-rule-set-1.json b/models/apis/securitylake/2018-05-10/endpoint-rule-set-1.json index de451521e86..565deb8ab10 100644 --- a/models/apis/securitylake/2018-05-10/endpoint-rule-set-1.json +++ b/models/apis/securitylake/2018-05-10/endpoint-rule-set-1.json @@ -3,7 +3,7 @@ "parameters": { "Region": { "builtIn": "AWS::Region", - "required": true, + "required": false, "documentation": "The AWS region used to dispatch the request.", "type": "String" }, @@ -32,13 +32,12 @@ { "conditions": [ { - "fn": "aws.partition", + "fn": "isSet", "argv": [ { - "ref": "Region" + "ref": "Endpoint" } - ], - "assign": "PartitionResult" + ] } ], "type": "tree", @@ -46,14 +45,20 @@ { "conditions": [ { - "fn": "isSet", + "fn": "booleanEquals", "argv": [ { - "ref": "Endpoint" - } + "ref": "UseFIPS" + }, + true ] } ], + "error": "Invalid Configuration: FIPS and custom endpoint are not supported", + "type": "error" + }, + { + "conditions": [], "type": "tree", "rules": [ { @@ -62,67 +67,42 @@ "fn": "booleanEquals", "argv": [ { - "ref": "UseFIPS" + "ref": "UseDualStack" }, true ] } ], - "error": "Invalid Configuration: FIPS and custom endpoint are not supported", + "error": "Invalid Configuration: Dualstack and custom endpoint are not supported", "type": "error" }, { "conditions": [], - "type": "tree", - "rules": [ - { - "conditions": [ - { - "fn": "booleanEquals", - "argv": [ - { - "ref": "UseDualStack" - }, - true - ] - } - ], - "error": "Invalid Configuration: Dualstack and custom endpoint are not supported", - "type": "error" + "endpoint": { + "url": { + "ref": "Endpoint" }, - { - "conditions": [], - "endpoint": { - "url": { - "ref": "Endpoint" - }, - "properties": {}, - "headers": {} - }, - "type": "endpoint" - } - ] + "properties": {}, + "headers": {} + }, + "type": "endpoint" } ] - }, + } + ] + }, + { + "conditions": [], + "type": "tree", + "rules": [ { "conditions": [ { - "fn": "booleanEquals", - "argv": [ - { - "ref": "UseFIPS" - }, - true - ] - }, - { - "fn": "booleanEquals", + "fn": "isSet", "argv": [ { - "ref": "UseDualStack" - }, - true + "ref": "Region" + } ] } ], @@ -131,168 +111,238 @@ { "conditions": [ { - "fn": "booleanEquals", + "fn": "aws.partition", "argv": [ - true, { - "fn": "getAttr", + "ref": "Region" + } + ], + "assign": "PartitionResult" + } + ], + "type": "tree", + "rules": [ + { + "conditions": [ + { + "fn": "booleanEquals", "argv": [ { - "ref": "PartitionResult" + "ref": "UseFIPS" }, - "supportsFIPS" + true ] - } - ] - }, - { - "fn": "booleanEquals", - "argv": [ - true, + }, { - "fn": "getAttr", + "fn": "booleanEquals", "argv": [ { - "ref": "PartitionResult" + "ref": "UseDualStack" }, - "supportsDualStack" + true ] } + ], + "type": "tree", + "rules": [ + { + "conditions": [ + { + "fn": "booleanEquals", + "argv": [ + true, + { + "fn": "getAttr", + "argv": [ + { + "ref": "PartitionResult" + }, + "supportsFIPS" + ] + } + ] + }, + { + "fn": "booleanEquals", + "argv": [ + true, + { + "fn": "getAttr", + "argv": [ + { + "ref": "PartitionResult" + }, + "supportsDualStack" + ] + } + ] + } + ], + "type": "tree", + "rules": [ + { + "conditions": [], + "type": "tree", + "rules": [ + { + "conditions": [], + "endpoint": { + "url": "https://securitylake-fips.{Region}.{PartitionResult#dualStackDnsSuffix}", + "properties": {}, + "headers": {} + }, + "type": "endpoint" + } + ] + } + ] + }, + { + "conditions": [], + "error": "FIPS and DualStack are enabled, but this partition does not support one or both", + "type": "error" + } ] - } - ], - "type": "tree", - "rules": [ - { - "conditions": [], - "endpoint": { - "url": "https://securitylake-fips.{Region}.{PartitionResult#dualStackDnsSuffix}", - "properties": {}, - "headers": {} - }, - "type": "endpoint" - } - ] - }, - { - "conditions": [], - "error": "FIPS and DualStack are enabled, but this partition does not support one or both", - "type": "error" - } - ] - }, - { - "conditions": [ - { - "fn": "booleanEquals", - "argv": [ - { - "ref": "UseFIPS" }, - true - ] - } - ], - "type": "tree", - "rules": [ - { - "conditions": [ { - "fn": "booleanEquals", - "argv": [ - true, + "conditions": [ { - "fn": "getAttr", + "fn": "booleanEquals", "argv": [ { - "ref": "PartitionResult" + "ref": "UseFIPS" }, - "supportsFIPS" + true ] } + ], + "type": "tree", + "rules": [ + { + "conditions": [ + { + "fn": "booleanEquals", + "argv": [ + true, + { + "fn": "getAttr", + "argv": [ + { + "ref": "PartitionResult" + }, + "supportsFIPS" + ] + } + ] + } + ], + "type": "tree", + "rules": [ + { + "conditions": [], + "type": "tree", + "rules": [ + { + "conditions": [], + "endpoint": { + "url": "https://securitylake-fips.{Region}.{PartitionResult#dnsSuffix}", + "properties": {}, + "headers": {} + }, + "type": "endpoint" + } + ] + } + ] + }, + { + "conditions": [], + "error": "FIPS is enabled but this partition does not support FIPS", + "type": "error" + } ] - } - ], - "type": "tree", - "rules": [ - { - "conditions": [], - "endpoint": { - "url": "https://securitylake-fips.{Region}.{PartitionResult#dnsSuffix}", - "properties": {}, - "headers": {} - }, - "type": "endpoint" - } - ] - }, - { - "conditions": [], - "error": "FIPS is enabled but this partition does not support FIPS", - "type": "error" - } - ] - }, - { - "conditions": [ - { - "fn": "booleanEquals", - "argv": [ - { - "ref": "UseDualStack" }, - true - ] - } - ], - "type": "tree", - "rules": [ - { - "conditions": [ { - "fn": "booleanEquals", - "argv": [ - true, + "conditions": [ { - "fn": "getAttr", + "fn": "booleanEquals", "argv": [ { - "ref": "PartitionResult" + "ref": "UseDualStack" }, - "supportsDualStack" + true + ] + } + ], + "type": "tree", + "rules": [ + { + "conditions": [ + { + "fn": "booleanEquals", + "argv": [ + true, + { + "fn": "getAttr", + "argv": [ + { + "ref": "PartitionResult" + }, + "supportsDualStack" + ] + } + ] + } + ], + "type": "tree", + "rules": [ + { + "conditions": [], + "type": "tree", + "rules": [ + { + "conditions": [], + "endpoint": { + "url": "https://securitylake.{Region}.{PartitionResult#dualStackDnsSuffix}", + "properties": {}, + "headers": {} + }, + "type": "endpoint" + } + ] + } ] + }, + { + "conditions": [], + "error": "DualStack is enabled but this partition does not support DualStack", + "type": "error" } ] - } - ], - "type": "tree", - "rules": [ + }, { "conditions": [], - "endpoint": { - "url": "https://securitylake.{Region}.{PartitionResult#dualStackDnsSuffix}", - "properties": {}, - "headers": {} - }, - "type": "endpoint" + "type": "tree", + "rules": [ + { + "conditions": [], + "endpoint": { + "url": "https://securitylake.{Region}.{PartitionResult#dnsSuffix}", + "properties": {}, + "headers": {} + }, + "type": "endpoint" + } + ] } ] - }, - { - "conditions": [], - "error": "DualStack is enabled but this partition does not support DualStack", - "type": "error" } ] }, { "conditions": [], - "endpoint": { - "url": "https://securitylake.{Region}.{PartitionResult#dnsSuffix}", - "properties": {}, - "headers": {} - }, - "type": "endpoint" + "error": "Invalid Configuration: Missing Region", + "type": "error" } ] } diff --git a/models/apis/securitylake/2018-05-10/endpoint-tests-1.json b/models/apis/securitylake/2018-05-10/endpoint-tests-1.json index c25bed0b2a3..391f37669d9 100644 --- a/models/apis/securitylake/2018-05-10/endpoint-tests-1.json +++ b/models/apis/securitylake/2018-05-10/endpoint-tests-1.json @@ -8,9 +8,9 @@ } }, "params": { - "UseDualStack": true, + "UseFIPS": true, "Region": "us-gov-east-1", - "UseFIPS": true + "UseDualStack": true } }, { @@ -21,9 +21,9 @@ } }, "params": { - "UseDualStack": false, + "UseFIPS": true, "Region": "us-gov-east-1", - "UseFIPS": true + "UseDualStack": false } }, { @@ -34,9 +34,9 @@ } }, "params": { - "UseDualStack": true, + "UseFIPS": false, "Region": "us-gov-east-1", - "UseFIPS": false + "UseDualStack": true } }, { @@ -47,9 +47,9 @@ } }, "params": { - "UseDualStack": false, + "UseFIPS": false, "Region": "us-gov-east-1", - "UseFIPS": false + "UseDualStack": false } }, { @@ -60,9 +60,9 @@ } }, "params": { - "UseDualStack": true, + "UseFIPS": true, "Region": "cn-north-1", - "UseFIPS": true + "UseDualStack": true } }, { @@ -73,9 +73,9 @@ } }, "params": { - "UseDualStack": false, + "UseFIPS": true, "Region": "cn-north-1", - "UseFIPS": true + "UseDualStack": false } }, { @@ -86,9 +86,9 @@ } }, "params": { - "UseDualStack": true, + "UseFIPS": false, "Region": "cn-north-1", - "UseFIPS": false + "UseDualStack": true } }, { @@ -99,9 +99,9 @@ } }, "params": { - "UseDualStack": false, + "UseFIPS": false, "Region": "cn-north-1", - "UseFIPS": false + "UseDualStack": false } }, { @@ -110,9 +110,9 @@ "error": "FIPS and DualStack are enabled, but this partition does not support one or both" }, "params": { - "UseDualStack": true, + "UseFIPS": true, "Region": "us-iso-east-1", - "UseFIPS": true + "UseDualStack": true } }, { @@ -123,9 +123,9 @@ } }, "params": { - "UseDualStack": false, + "UseFIPS": true, "Region": "us-iso-east-1", - "UseFIPS": true + "UseDualStack": false } }, { @@ -134,9 +134,9 @@ "error": "DualStack is enabled but this partition does not support DualStack" }, "params": { - "UseDualStack": true, + "UseFIPS": false, "Region": "us-iso-east-1", - "UseFIPS": false + "UseDualStack": true } }, { @@ -147,9 +147,9 @@ } }, "params": { - "UseDualStack": false, + "UseFIPS": false, "Region": "us-iso-east-1", - "UseFIPS": false + "UseDualStack": false } }, { @@ -160,9 +160,9 @@ } }, "params": { - "UseDualStack": true, + "UseFIPS": true, "Region": "us-east-1", - "UseFIPS": true + "UseDualStack": true } }, { @@ -173,9 +173,9 @@ } }, "params": { - "UseDualStack": false, + "UseFIPS": true, "Region": "us-east-1", - "UseFIPS": true + "UseDualStack": false } }, { @@ -186,9 +186,9 @@ } }, "params": { - "UseDualStack": true, + "UseFIPS": false, "Region": "us-east-1", - "UseFIPS": false + "UseDualStack": true } }, { @@ -199,9 +199,9 @@ } }, "params": { - "UseDualStack": false, + "UseFIPS": false, "Region": "us-east-1", - "UseFIPS": false + "UseDualStack": false } }, { @@ -210,9 +210,9 @@ "error": "FIPS and DualStack are enabled, but this partition does not support one or both" }, "params": { - "UseDualStack": true, + "UseFIPS": true, "Region": "us-isob-east-1", - "UseFIPS": true + "UseDualStack": true } }, { @@ -223,9 +223,9 @@ } }, "params": { - "UseDualStack": false, + "UseFIPS": true, "Region": "us-isob-east-1", - "UseFIPS": true + "UseDualStack": false } }, { @@ -234,9 +234,9 @@ "error": "DualStack is enabled but this partition does not support DualStack" }, "params": { - "UseDualStack": true, + "UseFIPS": false, "Region": "us-isob-east-1", - "UseFIPS": false + "UseDualStack": true } }, { @@ -247,9 +247,9 @@ } }, "params": { - "UseDualStack": false, + "UseFIPS": false, "Region": "us-isob-east-1", - "UseFIPS": false + "UseDualStack": false } }, { @@ -260,9 +260,9 @@ } }, "params": { - "UseDualStack": false, - "Region": "us-east-1", "UseFIPS": false, + "Region": "us-east-1", + "UseDualStack": false, "Endpoint": "https://example.com" } }, @@ -272,9 +272,9 @@ "error": "Invalid Configuration: FIPS and custom endpoint are not supported" }, "params": { - "UseDualStack": false, - "Region": "us-east-1", "UseFIPS": true, + "Region": "us-east-1", + "UseDualStack": false, "Endpoint": "https://example.com" } }, @@ -284,9 +284,9 @@ "error": "Invalid Configuration: Dualstack and custom endpoint are not supported" }, "params": { - "UseDualStack": true, - "Region": "us-east-1", "UseFIPS": false, + "Region": "us-east-1", + "UseDualStack": true, "Endpoint": "https://example.com" } } diff --git a/models/endpoints/endpoints.json b/models/endpoints/endpoints.json index 39905427e7b..d7ba532db9f 100644 --- a/models/endpoints/endpoints.json +++ b/models/endpoints/endpoints.json @@ -6344,6 +6344,7 @@ "ap-southeast-1" : { }, "ap-southeast-2" : { }, "ap-southeast-3" : { }, + "ap-southeast-4" : { }, "ca-central-1" : { }, "eu-central-1" : { }, "eu-central-2" : { }, @@ -14856,9 +14857,11 @@ "ap-northeast-2" : { }, "ap-northeast-3" : { }, "ap-south-1" : { }, + "ap-south-2" : { }, "ap-southeast-1" : { }, "ap-southeast-2" : { }, "ap-southeast-3" : { }, + "ap-southeast-4" : { }, "ca-central-1" : { "variants" : [ { "hostname" : "storagegateway-fips.ca-central-1.amazonaws.com", diff --git a/service/migrationhubstrategyrecommendations/api.go b/service/migrationhubstrategyrecommendations/api.go index b3e2a74ece5..90ec9a2301a 100644 --- a/service/migrationhubstrategyrecommendations/api.go +++ b/service/migrationhubstrategyrecommendations/api.go @@ -242,9 +242,8 @@ func (c *MigrationHubStrategyRecommendations) GetAssessmentRequest(input *GetAss // The specified ID in the request is not found. // // - AccessDeniedException -// The AWS user account does not have permission to perform the action. Check -// the AWS Identity and Access Management (IAM) policy associated with this -// account. +// The user does not have permission to perform the action. Check the AWS Identity +// and Access Management (IAM) policy associated with this user. // // - ThrottlingException // The request was denied due to request throttling. @@ -332,9 +331,8 @@ func (c *MigrationHubStrategyRecommendations) GetImportFileTaskRequest(input *Ge // The specified ID in the request is not found. // // - AccessDeniedException -// The AWS user account does not have permission to perform the action. Check -// the AWS Identity and Access Management (IAM) policy associated with this -// account. +// The user does not have permission to perform the action. Check the AWS Identity +// and Access Management (IAM) policy associated with this user. // // - ThrottlingException // The request was denied due to request throttling. @@ -425,9 +423,8 @@ func (c *MigrationHubStrategyRecommendations) GetLatestAssessmentIdRequest(input // Dependency encountered an error. // // - AccessDeniedException -// The AWS user account does not have permission to perform the action. Check -// the AWS Identity and Access Management (IAM) policy associated with this -// account. +// The user does not have permission to perform the action. Check the AWS Identity +// and Access Management (IAM) policy associated with this user. // // - ValidationException // The request body isn't valid. @@ -515,9 +512,8 @@ func (c *MigrationHubStrategyRecommendations) GetPortfolioPreferencesRequest(inp // The specified ID in the request is not found. // // - AccessDeniedException -// The AWS user account does not have permission to perform the action. Check -// the AWS Identity and Access Management (IAM) policy associated with this -// account. +// The user does not have permission to perform the action. Check the AWS Identity +// and Access Management (IAM) policy associated with this user. // // - ThrottlingException // The request was denied due to request throttling. @@ -603,9 +599,8 @@ func (c *MigrationHubStrategyRecommendations) GetPortfolioSummaryRequest(input * // Returned Error Types: // // - AccessDeniedException -// The AWS user account does not have permission to perform the action. Check -// the AWS Identity and Access Management (IAM) policy associated with this -// account. +// The user does not have permission to perform the action. Check the AWS Identity +// and Access Management (IAM) policy associated with this user. // // - ThrottlingException // The request was denied due to request throttling. @@ -693,9 +688,8 @@ func (c *MigrationHubStrategyRecommendations) GetRecommendationReportDetailsRequ // The specified ID in the request is not found. // // - AccessDeniedException -// The AWS user account does not have permission to perform the action. Check -// the AWS Identity and Access Management (IAM) policy associated with this -// account. +// The user does not have permission to perform the action. Check the AWS Identity +// and Access Management (IAM) policy associated with this user. // // - ThrottlingException // The request was denied due to request throttling. @@ -792,9 +786,8 @@ func (c *MigrationHubStrategyRecommendations) GetServerDetailsRequest(input *Get // The specified ID in the request is not found. // // - AccessDeniedException -// The AWS user account does not have permission to perform the action. Check -// the AWS Identity and Access Management (IAM) policy associated with this -// account. +// The user does not have permission to perform the action. Check the AWS Identity +// and Access Management (IAM) policy associated with this user. // // - ThrottlingException // The request was denied due to request throttling. @@ -936,9 +929,8 @@ func (c *MigrationHubStrategyRecommendations) GetServerStrategiesRequest(input * // The specified ID in the request is not found. // // - AccessDeniedException -// The AWS user account does not have permission to perform the action. Check -// the AWS Identity and Access Management (IAM) policy associated with this -// account. +// The user does not have permission to perform the action. Check the AWS Identity +// and Access Management (IAM) policy associated with this user. // // - ThrottlingException // The request was denied due to request throttling. @@ -1032,9 +1024,8 @@ func (c *MigrationHubStrategyRecommendations) ListApplicationComponentsRequest(i // Returned Error Types: // // - AccessDeniedException -// The AWS user account does not have permission to perform the action. Check -// the AWS Identity and Access Management (IAM) policy associated with this -// account. +// The user does not have permission to perform the action. Check the AWS Identity +// and Access Management (IAM) policy associated with this user. // // - ServiceLinkedRoleLockClientException // Exception to indicate that the service-linked role (SLR) is locked. @@ -1179,9 +1170,8 @@ func (c *MigrationHubStrategyRecommendations) ListCollectorsRequest(input *ListC // Returned Error Types: // // - AccessDeniedException -// The AWS user account does not have permission to perform the action. Check -// the AWS Identity and Access Management (IAM) policy associated with this -// account. +// The user does not have permission to perform the action. Check the AWS Identity +// and Access Management (IAM) policy associated with this user. // // - ThrottlingException // The request was denied due to request throttling. @@ -1326,9 +1316,8 @@ func (c *MigrationHubStrategyRecommendations) ListImportFileTaskRequest(input *L // Returned Error Types: // // - AccessDeniedException -// The AWS user account does not have permission to perform the action. Check -// the AWS Identity and Access Management (IAM) policy associated with this -// account. +// The user does not have permission to perform the action. Check the AWS Identity +// and Access Management (IAM) policy associated with this user. // // - ThrottlingException // The request was denied due to request throttling. @@ -1473,9 +1462,8 @@ func (c *MigrationHubStrategyRecommendations) ListServersRequest(input *ListServ // Returned Error Types: // // - AccessDeniedException -// The AWS user account does not have permission to perform the action. Check -// the AWS Identity and Access Management (IAM) policy associated with this -// account. +// The user does not have permission to perform the action. Check the AWS Identity +// and Access Management (IAM) policy associated with this user. // // - ThrottlingException // The request was denied due to request throttling. @@ -1615,9 +1603,8 @@ func (c *MigrationHubStrategyRecommendations) PutPortfolioPreferencesRequest(inp // Returned Error Types: // // - AccessDeniedException -// The AWS user account does not have permission to perform the action. Check -// the AWS Identity and Access Management (IAM) policy associated with this -// account. +// The user does not have permission to perform the action. Check the AWS Identity +// and Access Management (IAM) policy associated with this user. // // - ThrottlingException // The request was denied due to request throttling. @@ -1709,9 +1696,8 @@ func (c *MigrationHubStrategyRecommendations) StartAssessmentRequest(input *Star // Returned Error Types: // // - AccessDeniedException -// The AWS user account does not have permission to perform the action. Check -// the AWS Identity and Access Management (IAM) policy associated with this -// account. +// The user does not have permission to perform the action. Check the AWS Identity +// and Access Management (IAM) policy associated with this user. // // - ThrottlingException // The request was denied due to request throttling. @@ -1800,9 +1786,8 @@ func (c *MigrationHubStrategyRecommendations) StartImportFileTaskRequest(input * // Returned Error Types: // // - AccessDeniedException -// The AWS user account does not have permission to perform the action. Check -// the AWS Identity and Access Management (IAM) policy associated with this -// account. +// The user does not have permission to perform the action. Check the AWS Identity +// and Access Management (IAM) policy associated with this user. // // - ThrottlingException // The request was denied due to request throttling. @@ -1894,9 +1879,8 @@ func (c *MigrationHubStrategyRecommendations) StartRecommendationReportGeneratio // Returned Error Types: // // - AccessDeniedException -// The AWS user account does not have permission to perform the action. Check -// the AWS Identity and Access Management (IAM) policy associated with this -// account. +// The user does not have permission to perform the action. Check the AWS Identity +// and Access Management (IAM) policy associated with this user. // // - ThrottlingException // The request was denied due to request throttling. @@ -1989,9 +1973,8 @@ func (c *MigrationHubStrategyRecommendations) StopAssessmentRequest(input *StopA // Returned Error Types: // // - AccessDeniedException -// The AWS user account does not have permission to perform the action. Check -// the AWS Identity and Access Management (IAM) policy associated with this -// account. +// The user does not have permission to perform the action. Check the AWS Identity +// and Access Management (IAM) policy associated with this user. // // - ThrottlingException // The request was denied due to request throttling. @@ -2202,9 +2185,8 @@ func (c *MigrationHubStrategyRecommendations) UpdateServerConfigWithContext(ctx return out, req.Send() } -// The AWS user account does not have permission to perform the action. Check -// the AWS Identity and Access Management (IAM) policy associated with this -// account. +// The user does not have permission to perform the action. Check the AWS Identity +// and Access Management (IAM) policy associated with this user. type AccessDeniedException struct { _ struct{} `type:"structure"` RespMetadata protocol.ResponseMetadata `json:"-" xml:"-"` @@ -2268,6 +2250,156 @@ func (s *AccessDeniedException) RequestID() string { return s.RespMetadata.RequestID } +// A combination of existing analysis statuses. +type AnalysisStatusUnion struct { + _ struct{} `type:"structure"` + + // The status of the analysis. + RuntimeAnalysisStatus *string `locationName:"runtimeAnalysisStatus" type:"string" enum:"RuntimeAnalysisStatus"` + + // The status of the source code or database analysis. + SrcCodeOrDbAnalysisStatus *string `locationName:"srcCodeOrDbAnalysisStatus" type:"string" enum:"SrcCodeOrDbAnalysisStatus"` +} + +// String returns the string representation. +// +// API parameter values that are decorated as "sensitive" in the API will not +// be included in the string output. The member name will be present, but the +// value will be replaced with "sensitive". +func (s AnalysisStatusUnion) String() string { + return awsutil.Prettify(s) +} + +// GoString returns the string representation. +// +// API parameter values that are decorated as "sensitive" in the API will not +// be included in the string output. The member name will be present, but the +// value will be replaced with "sensitive". +func (s AnalysisStatusUnion) GoString() string { + return s.String() +} + +// SetRuntimeAnalysisStatus sets the RuntimeAnalysisStatus field's value. +func (s *AnalysisStatusUnion) SetRuntimeAnalysisStatus(v string) *AnalysisStatusUnion { + s.RuntimeAnalysisStatus = &v + return s +} + +// SetSrcCodeOrDbAnalysisStatus sets the SrcCodeOrDbAnalysisStatus field's value. +func (s *AnalysisStatusUnion) SetSrcCodeOrDbAnalysisStatus(v string) *AnalysisStatusUnion { + s.SrcCodeOrDbAnalysisStatus = &v + return s +} + +// The combination of the existing analyzers. +type AnalyzerNameUnion struct { + _ struct{} `type:"structure"` + + // The binary analyzer names. + BinaryAnalyzerName *string `locationName:"binaryAnalyzerName" type:"string" enum:"BinaryAnalyzerName"` + + // The assessment analyzer names. + RunTimeAnalyzerName *string `locationName:"runTimeAnalyzerName" type:"string" enum:"RunTimeAnalyzerName"` + + // The source code analyzer names. + SourceCodeAnalyzerName *string `locationName:"sourceCodeAnalyzerName" type:"string" enum:"SourceCodeAnalyzerName"` +} + +// String returns the string representation. +// +// API parameter values that are decorated as "sensitive" in the API will not +// be included in the string output. The member name will be present, but the +// value will be replaced with "sensitive". +func (s AnalyzerNameUnion) String() string { + return awsutil.Prettify(s) +} + +// GoString returns the string representation. +// +// API parameter values that are decorated as "sensitive" in the API will not +// be included in the string output. The member name will be present, but the +// value will be replaced with "sensitive". +func (s AnalyzerNameUnion) GoString() string { + return s.String() +} + +// SetBinaryAnalyzerName sets the BinaryAnalyzerName field's value. +func (s *AnalyzerNameUnion) SetBinaryAnalyzerName(v string) *AnalyzerNameUnion { + s.BinaryAnalyzerName = &v + return s +} + +// SetRunTimeAnalyzerName sets the RunTimeAnalyzerName field's value. +func (s *AnalyzerNameUnion) SetRunTimeAnalyzerName(v string) *AnalyzerNameUnion { + s.RunTimeAnalyzerName = &v + return s +} + +// SetSourceCodeAnalyzerName sets the SourceCodeAnalyzerName field's value. +func (s *AnalyzerNameUnion) SetSourceCodeAnalyzerName(v string) *AnalyzerNameUnion { + s.SourceCodeAnalyzerName = &v + return s +} + +// The anti-pattern report result. +type AntipatternReportResult struct { + _ struct{} `type:"structure"` + + // The analyzer name. + AnalyzerName *AnalyzerNameUnion `locationName:"analyzerName" type:"structure"` + + // Contains the S3 bucket name and the Amazon S3 key name. + AntiPatternReportS3Object *S3Object `locationName:"antiPatternReportS3Object" type:"structure"` + + // The status of the anti-pattern report generation. + AntipatternReportStatus *string `locationName:"antipatternReportStatus" type:"string" enum:"AntipatternReportStatus"` + + // The status message for the anti-pattern. + AntipatternReportStatusMessage *string `locationName:"antipatternReportStatusMessage" type:"string"` +} + +// String returns the string representation. +// +// API parameter values that are decorated as "sensitive" in the API will not +// be included in the string output. The member name will be present, but the +// value will be replaced with "sensitive". +func (s AntipatternReportResult) String() string { + return awsutil.Prettify(s) +} + +// GoString returns the string representation. +// +// API parameter values that are decorated as "sensitive" in the API will not +// be included in the string output. The member name will be present, but the +// value will be replaced with "sensitive". +func (s AntipatternReportResult) GoString() string { + return s.String() +} + +// SetAnalyzerName sets the AnalyzerName field's value. +func (s *AntipatternReportResult) SetAnalyzerName(v *AnalyzerNameUnion) *AntipatternReportResult { + s.AnalyzerName = v + return s +} + +// SetAntiPatternReportS3Object sets the AntiPatternReportS3Object field's value. +func (s *AntipatternReportResult) SetAntiPatternReportS3Object(v *S3Object) *AntipatternReportResult { + s.AntiPatternReportS3Object = v + return s +} + +// SetAntipatternReportStatus sets the AntipatternReportStatus field's value. +func (s *AntipatternReportResult) SetAntipatternReportStatus(v string) *AntipatternReportResult { + s.AntipatternReportStatus = &v + return s +} + +// SetAntipatternReportStatusMessage sets the AntipatternReportStatusMessage field's value. +func (s *AntipatternReportResult) SetAntipatternReportStatusMessage(v string) *AntipatternReportResult { + s.AntipatternReportStatusMessage = &v + return s +} + // Contains the summary of anti-patterns and their severity. type AntipatternSeveritySummary struct { _ struct{} `type:"structure"` @@ -2401,6 +2533,9 @@ type ApplicationComponentDetail struct { // The application component subtype. ResourceSubType *string `locationName:"resourceSubType" type:"string" enum:"ResourceSubType"` + // A list of the analysis results. + ResultList []*Result `locationName:"resultList" type:"list"` + // The status of the application unit. RuntimeStatus *string `locationName:"runtimeStatus" type:"string" enum:"RuntimeAnalysisStatus"` @@ -2541,6 +2676,12 @@ func (s *ApplicationComponentDetail) SetResourceSubType(v string) *ApplicationCo return s } +// SetResultList sets the ResultList field's value. +func (s *ApplicationComponentDetail) SetResultList(v []*Result) *ApplicationComponentDetail { + s.ResultList = v + return s +} + // SetRuntimeStatus sets the RuntimeStatus field's value. func (s *ApplicationComponentDetail) SetRuntimeStatus(v string) *ApplicationComponentDetail { s.RuntimeStatus = &v @@ -6087,6 +6228,65 @@ func (s *ResourceNotFoundException) RequestID() string { return s.RespMetadata.RequestID } +// The error in server analysis. +type Result struct { + _ struct{} `type:"structure"` + + // The error in server analysis. + AnalysisStatus *AnalysisStatusUnion `locationName:"analysisStatus" type:"structure"` + + // The error in server analysis. + AnalysisType *string `locationName:"analysisType" type:"string" enum:"AnalysisType"` + + // The error in server analysis. + AntipatternReportResultList []*AntipatternReportResult `locationName:"antipatternReportResultList" type:"list"` + + // The error in server analysis. + StatusMessage *string `locationName:"statusMessage" type:"string"` +} + +// String returns the string representation. +// +// API parameter values that are decorated as "sensitive" in the API will not +// be included in the string output. The member name will be present, but the +// value will be replaced with "sensitive". +func (s Result) String() string { + return awsutil.Prettify(s) +} + +// GoString returns the string representation. +// +// API parameter values that are decorated as "sensitive" in the API will not +// be included in the string output. The member name will be present, but the +// value will be replaced with "sensitive". +func (s Result) GoString() string { + return s.String() +} + +// SetAnalysisStatus sets the AnalysisStatus field's value. +func (s *Result) SetAnalysisStatus(v *AnalysisStatusUnion) *Result { + s.AnalysisStatus = v + return s +} + +// SetAnalysisType sets the AnalysisType field's value. +func (s *Result) SetAnalysisType(v string) *Result { + s.AnalysisType = &v + return s +} + +// SetAntipatternReportResultList sets the AntipatternReportResultList field's value. +func (s *Result) SetAntipatternReportResultList(v []*AntipatternReportResult) *Result { + s.AntipatternReportResultList = v + return s +} + +// SetStatusMessage sets the StatusMessage field's value. +func (s *Result) SetStatusMessage(v string) *Result { + s.StatusMessage = &v + return s +} + // Contains the S3 bucket name and the Amazon S3 key name. type S3Object struct { _ struct{} `type:"structure"` @@ -7802,6 +8002,30 @@ func (s *VersionControlInfo) SetVersionControlType(v string) *VersionControlInfo return s } +const ( + // AnalysisTypeSourceCodeAnalysis is a AnalysisType enum value + AnalysisTypeSourceCodeAnalysis = "SOURCE_CODE_ANALYSIS" + + // AnalysisTypeDatabaseAnalysis is a AnalysisType enum value + AnalysisTypeDatabaseAnalysis = "DATABASE_ANALYSIS" + + // AnalysisTypeRuntimeAnalysis is a AnalysisType enum value + AnalysisTypeRuntimeAnalysis = "RUNTIME_ANALYSIS" + + // AnalysisTypeBinaryAnalysis is a AnalysisType enum value + AnalysisTypeBinaryAnalysis = "BINARY_ANALYSIS" +) + +// AnalysisType_Values returns all elements of the AnalysisType enum +func AnalysisType_Values() []string { + return []string{ + AnalysisTypeSourceCodeAnalysis, + AnalysisTypeDatabaseAnalysis, + AnalysisTypeRuntimeAnalysis, + AnalysisTypeBinaryAnalysis, + } +} + const ( // AntipatternReportStatusFailed is a AntipatternReportStatus enum value AntipatternReportStatusFailed = "FAILED" @@ -8070,6 +8294,22 @@ func AwsManagedTargetDestination_Values() []string { } } +const ( + // BinaryAnalyzerNameDllAnalyzer is a BinaryAnalyzerName enum value + BinaryAnalyzerNameDllAnalyzer = "DLL_ANALYZER" + + // BinaryAnalyzerNameBytecodeAnalyzer is a BinaryAnalyzerName enum value + BinaryAnalyzerNameBytecodeAnalyzer = "BYTECODE_ANALYZER" +) + +// BinaryAnalyzerName_Values returns all elements of the BinaryAnalyzerName enum +func BinaryAnalyzerName_Values() []string { + return []string{ + BinaryAnalyzerNameDllAnalyzer, + BinaryAnalyzerNameBytecodeAnalyzer, + } +} + const ( // CollectorHealthCollectorHealthy is a CollectorHealth enum value CollectorHealthCollectorHealthy = "COLLECTOR_HEALTHY" @@ -8398,6 +8638,34 @@ func ResourceSubType_Values() []string { } } +const ( + // RunTimeAnalyzerNameA2cAnalyzer is a RunTimeAnalyzerName enum value + RunTimeAnalyzerNameA2cAnalyzer = "A2C_ANALYZER" + + // RunTimeAnalyzerNameRehostAnalyzer is a RunTimeAnalyzerName enum value + RunTimeAnalyzerNameRehostAnalyzer = "REHOST_ANALYZER" + + // RunTimeAnalyzerNameEmpPaAnalyzer is a RunTimeAnalyzerName enum value + RunTimeAnalyzerNameEmpPaAnalyzer = "EMP_PA_ANALYZER" + + // RunTimeAnalyzerNameDatabaseAnalyzer is a RunTimeAnalyzerName enum value + RunTimeAnalyzerNameDatabaseAnalyzer = "DATABASE_ANALYZER" + + // RunTimeAnalyzerNameSctAnalyzer is a RunTimeAnalyzerName enum value + RunTimeAnalyzerNameSctAnalyzer = "SCT_ANALYZER" +) + +// RunTimeAnalyzerName_Values returns all elements of the RunTimeAnalyzerName enum +func RunTimeAnalyzerName_Values() []string { + return []string{ + RunTimeAnalyzerNameA2cAnalyzer, + RunTimeAnalyzerNameRehostAnalyzer, + RunTimeAnalyzerNameEmpPaAnalyzer, + RunTimeAnalyzerNameDatabaseAnalyzer, + RunTimeAnalyzerNameSctAnalyzer, + } +} + const ( // RunTimeAssessmentStatusDataCollectionTaskToBeScheduled is a RunTimeAssessmentStatus enum value RunTimeAssessmentStatusDataCollectionTaskToBeScheduled = "dataCollectionTaskToBeScheduled" @@ -8610,6 +8878,30 @@ func SortOrder_Values() []string { } } +const ( + // SourceCodeAnalyzerNameCsharpAnalyzer is a SourceCodeAnalyzerName enum value + SourceCodeAnalyzerNameCsharpAnalyzer = "CSHARP_ANALYZER" + + // SourceCodeAnalyzerNameJavaAnalyzer is a SourceCodeAnalyzerName enum value + SourceCodeAnalyzerNameJavaAnalyzer = "JAVA_ANALYZER" + + // SourceCodeAnalyzerNameBytecodeAnalyzer is a SourceCodeAnalyzerName enum value + SourceCodeAnalyzerNameBytecodeAnalyzer = "BYTECODE_ANALYZER" + + // SourceCodeAnalyzerNamePortingAssistant is a SourceCodeAnalyzerName enum value + SourceCodeAnalyzerNamePortingAssistant = "PORTING_ASSISTANT" +) + +// SourceCodeAnalyzerName_Values returns all elements of the SourceCodeAnalyzerName enum +func SourceCodeAnalyzerName_Values() []string { + return []string{ + SourceCodeAnalyzerNameCsharpAnalyzer, + SourceCodeAnalyzerNameJavaAnalyzer, + SourceCodeAnalyzerNameBytecodeAnalyzer, + SourceCodeAnalyzerNamePortingAssistant, + } +} + const ( // SrcCodeOrDbAnalysisStatusAnalysisToBeScheduled is a SrcCodeOrDbAnalysisStatus enum value SrcCodeOrDbAnalysisStatusAnalysisToBeScheduled = "ANALYSIS_TO_BE_SCHEDULED" diff --git a/service/migrationhubstrategyrecommendations/doc.go b/service/migrationhubstrategyrecommendations/doc.go index 566362f39e9..959c54caa4b 100644 --- a/service/migrationhubstrategyrecommendations/doc.go +++ b/service/migrationhubstrategyrecommendations/doc.go @@ -3,13 +3,12 @@ // Package migrationhubstrategyrecommendations provides the client and types for making API // requests to Migration Hub Strategy Recommendations. // -//

This API reference provides descriptions, syntax, and other details -// about each of the actions and data types for Migration Hub Strategy Recommendations -// (Strategy Recommendations). The topic for each action shows the API request -// parameters and the response. Alternatively, you can use one of the AWS -// SDKs to access an API that is tailored to the programming language or -// platform that you're using. For more information, see AWS -// SDKs.

+// This API reference provides descriptions, syntax, and other details about +// each of the actions and data types for Migration Hub Strategy Recommendations +// (Strategy Recommendations). The topic for each action shows the API request +// parameters and the response. Alternatively, you can use one of the AWS SDKs +// to access an API that is tailored to the programming language or platform +// that you're using. For more information, see AWS SDKs (http://aws.amazon.com/tools/#SDKs). // // See https://docs.aws.amazon.com/goto/WebAPI/migrationhubstrategy-2020-02-19 for more information on this service. // diff --git a/service/migrationhubstrategyrecommendations/errors.go b/service/migrationhubstrategyrecommendations/errors.go index 762a05c8d31..9c749043118 100644 --- a/service/migrationhubstrategyrecommendations/errors.go +++ b/service/migrationhubstrategyrecommendations/errors.go @@ -11,9 +11,8 @@ const ( // ErrCodeAccessDeniedException for service response error code // "AccessDeniedException". // - // The AWS user account does not have permission to perform the action. Check - // the AWS Identity and Access Management (IAM) policy associated with this - // account. + // The user does not have permission to perform the action. Check the AWS Identity + // and Access Management (IAM) policy associated with this user. ErrCodeAccessDeniedException = "AccessDeniedException" // ErrCodeConflictException for service response error code diff --git a/service/s3control/api.go b/service/s3control/api.go index 9f34802f9eb..195f14306f9 100644 --- a/service/s3control/api.go +++ b/service/s3control/api.go @@ -1293,7 +1293,7 @@ func (c *S3Control) DeleteBucketReplicationRequest(input *DeleteBucketReplicatio // section. // // For information about S3 replication on Outposts configuration, see Replicating -// objects for Amazon Web Services Outposts (https://docs.aws.amazon.com/AmazonS3/latest/userguide/S3OutpostsReplication.html) +// objects for S3 on Outposts (https://docs.aws.amazon.com/AmazonS3/latest/userguide/S3OutpostsReplication.html) // in the Amazon S3 User Guide. // // The following operations are related to DeleteBucketReplication: @@ -3041,7 +3041,7 @@ func (c *S3Control) GetBucketReplicationRequest(input *GetBucketReplicationInput // Returns the replication configuration of an S3 on Outposts bucket. For more // information about S3 on Outposts, see Using Amazon S3 on Outposts (https://docs.aws.amazon.com/AmazonS3/latest/userguide/S3onOutposts.html) // in the Amazon S3 User Guide. For information about S3 replication on Outposts -// configuration, see Replicating objects for Amazon Web Services Outposts (https://docs.aws.amazon.com/AmazonS3/latest/userguide/S3OutpostsReplication.html) +// configuration, see Replicating objects for S3 on Outposts (https://docs.aws.amazon.com/AmazonS3/latest/userguide/S3OutpostsReplication.html) // in the Amazon S3 User Guide. // // It can take a while to propagate PUT or DELETE requests for a replication @@ -5477,7 +5477,7 @@ func (c *S3Control) PutBucketReplicationRequest(input *PutBucketReplicationInput // // Creates a replication configuration or replaces an existing one. For information // about S3 replication on Outposts configuration, see Replicating objects for -// Amazon Web Services Outposts (https://docs.aws.amazon.com/AmazonS3/latest/userguide/AmazonS3/latest/userguide/S3OutpostsReplication.html) +// S3 on Outposts (https://docs.aws.amazon.com/AmazonS3/latest/userguide/S3OutpostsReplication.html) // in the Amazon S3 User Guide. // // It can take a while to propagate PUT or DELETE requests for a replication @@ -5534,16 +5534,16 @@ func (c *S3Control) PutBucketReplicationRequest(input *PutBucketReplicationInput // see Setting up IAM with S3 on Outposts (https://docs.aws.amazon.com/AmazonS3/latest/userguide/S3OutpostsIAM.html) // and Managing access to S3 on Outposts buckets (https://docs.aws.amazon.com/AmazonS3/latest/userguide/S3OutpostsBucketPolicy.html). // -// To perform this operation, the user or role must also have the iam:PassRole -// (https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use_passrole.html) -// permission. +// To perform this operation, the user or role must also have the iam:CreateRole +// and iam:PassRole permissions. For more information, see Granting a user permissions +// to pass a role to an Amazon Web Services service (https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use_passrole.html). // // All Amazon S3 on Outposts REST API requests for this action require an additional // parameter of x-amz-outpost-id to be passed with the request. In addition, // you must use an S3 on Outposts endpoint hostname prefix instead of s3-control. // For an example of the request syntax for Amazon S3 on Outposts that uses // the S3 on Outposts endpoint hostname prefix and the x-amz-outpost-id derived -// by using the access point ARN, see the Examples (https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_GetBucketLifecycleConfiguration.html#API_control_GetBucketLifecycleConfiguration_Examples) +// by using the access point ARN, see the Examples (https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_PutBucketReplication.html#API_control_PutBucketReplication_Examples) // section. // // The following operations are related to PutBucketReplication: @@ -5799,11 +5799,12 @@ func (c *S3Control) PutBucketVersioningRequest(input *PutBucketVersioningInput) // configuration for your S3 on Outposts bucket (https://docs.aws.amazon.com/AmazonS3/latest/userguide/S3OutpostsLifecycleManaging.html) // in the Amazon S3 User Guide. // -// If you have an object expiration lifecycle policy in your non-versioned bucket -// and you want to maintain the same permanent delete behavior when you enable -// versioning, you must add a noncurrent expiration policy. The noncurrent expiration -// lifecycle policy will manage the deletions of the noncurrent object versions -// in the version-enabled bucket. For more information, see Versioning (https://docs.aws.amazon.com/AmazonS3/latest/userguide/Versioning.html) +// If you have an object expiration lifecycle configuration in your non-versioned +// bucket and you want to maintain the same permanent delete behavior when you +// enable versioning, you must add a noncurrent expiration policy. The noncurrent +// expiration lifecycle configuration will manage the deletes of the noncurrent +// object versions in the version-enabled bucket. For more information, see +// Versioning (https://docs.aws.amazon.com/AmazonS3/latest/userguide/Versioning.html) // in the Amazon S3 User Guide. // // All Amazon S3 on Outposts REST API requests for this action require an additional @@ -7565,6 +7566,9 @@ func (s *CreateAccessPointForObjectLambdaInput) hostLabels() map[string]string { type CreateAccessPointForObjectLambdaOutput struct { _ struct{} `type:"structure"` + // The alias of the Object Lambda Access Point. + Alias *ObjectLambdaAccessPointAlias `type:"structure"` + // Specifies the ARN for the Object Lambda Access Point. ObjectLambdaAccessPointArn *string `min:"1" type:"string"` } @@ -7587,6 +7591,12 @@ func (s CreateAccessPointForObjectLambdaOutput) GoString() string { return s.String() } +// SetAlias sets the Alias field's value. +func (s *CreateAccessPointForObjectLambdaOutput) SetAlias(v *ObjectLambdaAccessPointAlias) *CreateAccessPointForObjectLambdaOutput { + s.Alias = v + return s +} + // SetObjectLambdaAccessPointArn sets the ObjectLambdaAccessPointArn field's value. func (s *CreateAccessPointForObjectLambdaOutput) SetObjectLambdaAccessPointArn(v string) *CreateAccessPointForObjectLambdaOutput { s.ObjectLambdaAccessPointArn = &v @@ -11124,6 +11134,9 @@ func (s *GetAccessPointForObjectLambdaInput) hostLabels() map[string]string { type GetAccessPointForObjectLambdaOutput struct { _ struct{} `type:"structure"` + // The alias of the Object Lambda Access Point. + Alias *ObjectLambdaAccessPointAlias `type:"structure"` + // The date and time when the specified Object Lambda Access Point was created. CreationDate *time.Time `type:"timestamp"` @@ -11153,6 +11166,12 @@ func (s GetAccessPointForObjectLambdaOutput) GoString() string { return s.String() } +// SetAlias sets the Alias field's value. +func (s *GetAccessPointForObjectLambdaOutput) SetAlias(v *ObjectLambdaAccessPointAlias) *GetAccessPointForObjectLambdaOutput { + s.Alias = v + return s +} + // SetCreationDate sets the CreationDate field's value. func (s *GetAccessPointForObjectLambdaOutput) SetCreationDate(v time.Time) *GetAccessPointForObjectLambdaOutput { s.CreationDate = &v @@ -14902,7 +14921,7 @@ type LifecycleRule struct { // Specifies the days since the initiation of an incomplete multipart upload // that Amazon S3 waits before permanently removing all parts of the upload. // For more information, see Aborting Incomplete Multipart Uploads Using a Bucket - // Lifecycle Policy (https://docs.aws.amazon.com/AmazonS3/latest/dev/mpuoverview.html#mpu-abort-incomplete-mpu-lifecycle-config) + // Lifecycle Configuration (https://docs.aws.amazon.com/AmazonS3/latest/dev/mpuoverview.html#mpu-abort-incomplete-mpu-lifecycle-config) // in the Amazon S3 User Guide. AbortIncompleteMultipartUpload *AbortIncompleteMultipartUpload `type:"structure"` @@ -16551,6 +16570,9 @@ func (s *NoncurrentVersionTransition) SetStorageClass(v string) *NoncurrentVersi type ObjectLambdaAccessPoint struct { _ struct{} `type:"structure"` + // The alias of the Object Lambda Access Point. + Alias *ObjectLambdaAccessPointAlias `type:"structure"` + // The name of the Object Lambda Access Point. // // Name is a required field @@ -16578,6 +16600,12 @@ func (s ObjectLambdaAccessPoint) GoString() string { return s.String() } +// SetAlias sets the Alias field's value. +func (s *ObjectLambdaAccessPoint) SetAlias(v *ObjectLambdaAccessPointAlias) *ObjectLambdaAccessPoint { + s.Alias = v + return s +} + // SetName sets the Name field's value. func (s *ObjectLambdaAccessPoint) SetName(v string) *ObjectLambdaAccessPoint { s.Name = &v @@ -16590,6 +16618,52 @@ func (s *ObjectLambdaAccessPoint) SetObjectLambdaAccessPointArn(v string) *Objec return s } +// The alias of an Object Lambda Access Point. For more information, see How +// to use a bucket-style alias for your S3 bucket Object Lambda Access Point +// (https://docs.aws.amazon.com/AmazonS3/latest/userguide/olap-use.html#ol-access-points-alias). +type ObjectLambdaAccessPointAlias struct { + _ struct{} `type:"structure"` + + // The status of the Object Lambda Access Point alias. If the status is PROVISIONING, + // the Object Lambda Access Point is provisioning the alias and the alias is + // not ready for use yet. If the status is READY, the Object Lambda Access Point + // alias is successfully provisioned and ready for use. + Status *string `min:"2" type:"string" enum:"ObjectLambdaAccessPointAliasStatus"` + + // The alias value of the Object Lambda Access Point. + Value *string `min:"3" type:"string"` +} + +// String returns the string representation. +// +// API parameter values that are decorated as "sensitive" in the API will not +// be included in the string output. The member name will be present, but the +// value will be replaced with "sensitive". +func (s ObjectLambdaAccessPointAlias) String() string { + return awsutil.Prettify(s) +} + +// GoString returns the string representation. +// +// API parameter values that are decorated as "sensitive" in the API will not +// be included in the string output. The member name will be present, but the +// value will be replaced with "sensitive". +func (s ObjectLambdaAccessPointAlias) GoString() string { + return s.String() +} + +// SetStatus sets the Status field's value. +func (s *ObjectLambdaAccessPointAlias) SetStatus(v string) *ObjectLambdaAccessPointAlias { + s.Status = &v + return s +} + +// SetValue sets the Value field's value. +func (s *ObjectLambdaAccessPointAlias) SetValue(v string) *ObjectLambdaAccessPointAlias { + s.Value = &v + return s +} + // A configuration used when creating an Object Lambda Access Point. type ObjectLambdaConfiguration struct { _ struct{} `type:"structure"` @@ -19301,7 +19375,7 @@ type ReplicationRule struct { // the rule with the highest priority. The higher the number, the higher the // priority. // - // For more information, see Creating replication rules between Outposts (https://docs.aws.amazon.com/AmazonS3/latest/userguide/replication-between-outposts.html) + // For more information, see Creating replication rules on Outposts (https://docs.aws.amazon.com/AmazonS3/latest/userguide/replication-between-outposts.html) // in the Amazon S3 User Guide. Priority *int64 `type:"integer"` @@ -22959,6 +23033,22 @@ func NetworkOrigin_Values() []string { } } +const ( + // ObjectLambdaAccessPointAliasStatusProvisioning is a ObjectLambdaAccessPointAliasStatus enum value + ObjectLambdaAccessPointAliasStatusProvisioning = "PROVISIONING" + + // ObjectLambdaAccessPointAliasStatusReady is a ObjectLambdaAccessPointAliasStatus enum value + ObjectLambdaAccessPointAliasStatusReady = "READY" +) + +// ObjectLambdaAccessPointAliasStatus_Values returns all elements of the ObjectLambdaAccessPointAliasStatus enum +func ObjectLambdaAccessPointAliasStatus_Values() []string { + return []string{ + ObjectLambdaAccessPointAliasStatusProvisioning, + ObjectLambdaAccessPointAliasStatusReady, + } +} + const ( // ObjectLambdaAllowedFeatureGetObjectRange is a ObjectLambdaAllowedFeature enum value ObjectLambdaAllowedFeatureGetObjectRange = "GetObject-Range" diff --git a/service/securitylake/api.go b/service/securitylake/api.go index cb3d0fe68d2..4d774771cf2 100644 --- a/service/securitylake/api.go +++ b/service/securitylake/api.go @@ -821,7 +821,8 @@ func (c *SecurityLake) CreateSubscriptionNotificationConfigurationRequest(input // CreateSubscriptionNotificationConfiguration API operation for Amazon Security Lake. // // Notifies the subscriber when new data is written to the data lake for the -// sources that the subscriber consumes in Security Lake. +// sources that the subscriber consumes in Security Lake. You can create only +// one subscriber notification per subscriber. // // Returns awserr.Error for service API and SDK errors. Use runtime type assertions // with awserr.Error's Code and Message methods to get detailed information about @@ -1265,18 +1266,12 @@ func (c *SecurityLake) DeleteDatalakeAutoEnableRequest(input *DeleteDatalakeAuto // DeleteDatalakeAutoEnable API operation for Amazon Security Lake. // -// Automatically deletes Amazon Security Lake to stop collecting security data. -// When you delete Amazon Security Lake from your account, Security Lake is -// disabled in all Regions. Also, this API automatically takes steps to remove -// the account from Security Lake . -// -// This operation disables security data collection from sources, deletes data -// stored, and stops making data accessible to subscribers. Security Lake also -// deletes all the existing settings and resources that it stores or maintains -// for your Amazon Web Services account in the current Region, including security -// log and event data. The DeleteDatalake operation does not delete the Amazon -// S3 bucket, which is owned by your Amazon Web Services account. For more information, -// see the Amazon Security Lake User Guide (https://docs.aws.amazon.com/security-lake/latest/userguide/disable-security-lake.html). +// DeleteDatalakeAutoEnable removes automatic enablement of configuration settings +// for new member accounts (but keeps settings for the delegated administrator) +// from Amazon Security Lake. You must run this API using credentials of the +// delegated administrator. When you run this API, new member accounts that +// are added after the organization enables Security Lake won't contribute to +// the data lake. // // Returns awserr.Error for service API and SDK errors. Use runtime type assertions // with awserr.Error's Code and Message methods to get detailed information about @@ -3299,8 +3294,8 @@ func (c *SecurityLake) UpdateSubscriptionNotificationConfigurationRequest(input // UpdateSubscriptionNotificationConfiguration API operation for Amazon Security Lake. // -// Creates a new subscription notification or adds the existing subscription -// notification setting for the specified subscription ID. +// Updates an existing notification method for the subscription (SQS or HTTPs +// endpoint) or switches the notification subscription endpoint for a subscriber. // // Returns awserr.Error for service API and SDK errors. Use runtime type assertions // with awserr.Error's Code and Message methods to get detailed information about @@ -3371,6 +3366,10 @@ type AccessDeniedException struct { _ struct{} `type:"structure"` RespMetadata protocol.ResponseMetadata `json:"-" xml:"-"` + // A coded string to provide more information about the access denied exception. + // You can use the error code to check the exception type. + ErrorCode *string `locationName:"errorCode" type:"string"` + Message_ *string `locationName:"message" type:"string"` } @@ -3417,7 +3416,7 @@ func (s *AccessDeniedException) OrigErr() error { } func (s *AccessDeniedException) Error() string { - return fmt.Sprintf("%s: %s", s.Code(), s.Message()) + return fmt.Sprintf("%s: %s\n%s", s.Code(), s.Message(), s.String()) } // Status code returns the HTTP status code for the request's response error. @@ -4713,9 +4712,17 @@ func (s *CreateSubscriberInput) SetSubscriberName(v string) *CreateSubscriberInp type CreateSubscriberOutput struct { _ struct{} `type:"structure"` + // The Amazon Resource Name (ARN) which uniquely defines the AWS RAM resource + // share. Before accepting the RAM resource share invitation, you can view details + // related to the RAM resource share. + ResourceShareArn *string `locationName:"resourceShareArn" type:"string"` + + // The name of the resource share. + ResourceShareName *string `locationName:"resourceShareName" type:"string"` + // The Amazon Resource Name (ARN) created by you to provide to the subscriber. - // For more information about ARNs and how to use them in policies, see IAM - // identifiers in the Identity and Access Management (IAM) User Guide (https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_identifiers.html). . + // For more information about ARNs and how to use them in policies, see Amazon + // Security Lake User Guide (https://docs.aws.amazon.com/security-lake/latest/userguide/subscriber-management.html). RoleArn *string `locationName:"roleArn" type:"string"` // The ARN for the Amazon S3 bucket. @@ -4748,6 +4755,18 @@ func (s CreateSubscriberOutput) GoString() string { return s.String() } +// SetResourceShareArn sets the ResourceShareArn field's value. +func (s *CreateSubscriberOutput) SetResourceShareArn(v string) *CreateSubscriberOutput { + s.ResourceShareArn = &v + return s +} + +// SetResourceShareName sets the ResourceShareName field's value. +func (s *CreateSubscriberOutput) SetResourceShareName(v string) *CreateSubscriberOutput { + s.ResourceShareName = &v + return s +} + // SetRoleArn sets the RoleArn field's value. func (s *CreateSubscriberOutput) SetRoleArn(v string) *CreateSubscriberOutput { s.RoleArn = &v @@ -4788,14 +4807,17 @@ type CreateSubscriptionNotificationConfigurationInput struct { HttpsMethod *string `locationName:"httpsMethod" type:"string" enum:"HttpsMethod"` // The Amazon Resource Name (ARN) of the EventBridge API destinations IAM role - // that you created. + // that you created. For more information about ARNs and how to use them in + // policies, see Managing data access (https://docs.aws.amazon.com//security-lake/latest/userguide/subscriber-data-access.html) + // and Amazon Web Services Managed Policies (https://docs.aws.amazon.com/security-lake/latest/userguide/security-iam-awsmanpol.html) + // in the Amazon Security Lake User Guide. RoleArn *string `locationName:"roleArn" type:"string"` // The subscription endpoint in Security Lake. If you prefer notification with // an HTTPs endpoint, populate this field. SubscriptionEndpoint *string `locationName:"subscriptionEndpoint" type:"string"` - // The subscription ID for the notification subscription/ + // The subscription ID for the notification subscription. // // SubscriptionId is a required field SubscriptionId *string `location:"uri" locationName:"subscriptionId" type:"string" required:"true"` @@ -5107,8 +5129,8 @@ func (s *DeleteCustomLogSourceOutput) SetCustomDataLocation(v string) *DeleteCus type DeleteDatalakeAutoEnableInput struct { _ struct{} `type:"structure"` - // Delete Amazon Security Lake with the specified configuration settings to - // stop ingesting security data for new accounts in Security Lake. + // Remove automatic enablement of configuration settings for new member accounts + // in Security Lake. // // RemoveFromConfigurationForNewAccounts is a required field RemoveFromConfigurationForNewAccounts []*AutoEnableNewRegionConfiguration `locationName:"removeFromConfigurationForNewAccounts" type:"list" required:"true"` @@ -6334,6 +6356,9 @@ type LakeConfigurationResponse struct { // A tag is a label that you assign to an Amazon Web Services resource. Each // tag consists of a key and an optional value, both of which you define. TagsMap map[string]*string `locationName:"tagsMap" type:"map"` + + // The status of the last UpdateDatalake or DeleteDatalake API request. + UpdateStatus *UpdateStatus `locationName:"updateStatus" type:"structure"` } // String returns the string representation. @@ -6396,6 +6421,56 @@ func (s *LakeConfigurationResponse) SetTagsMap(v map[string]*string) *LakeConfig return s } +// SetUpdateStatus sets the UpdateStatus field's value. +func (s *LakeConfigurationResponse) SetUpdateStatus(v *UpdateStatus) *LakeConfigurationResponse { + s.UpdateStatus = v + return s +} + +// The details of the last UpdateDatalake or DeleteDatalake API request which +// failed. +type LastUpdateFailure struct { + _ struct{} `type:"structure"` + + // The reason code for the failure of the last UpdateDatalake or DeleteDatalake + // API request. + Code *string `locationName:"code" type:"string"` + + // The reason for the failure of the last UpdateDatalakeor DeleteDatalake API + // request. + Reason *string `locationName:"reason" type:"string"` +} + +// String returns the string representation. +// +// API parameter values that are decorated as "sensitive" in the API will not +// be included in the string output. The member name will be present, but the +// value will be replaced with "sensitive". +func (s LastUpdateFailure) String() string { + return awsutil.Prettify(s) +} + +// GoString returns the string representation. +// +// API parameter values that are decorated as "sensitive" in the API will not +// be included in the string output. The member name will be present, but the +// value will be replaced with "sensitive". +func (s LastUpdateFailure) GoString() string { + return s.String() +} + +// SetCode sets the Code field's value. +func (s *LastUpdateFailure) SetCode(v string) *LastUpdateFailure { + s.Code = &v + return s +} + +// SetReason sets the Reason field's value. +func (s *LastUpdateFailure) SetReason(v string) *LastUpdateFailure { + s.Reason = &v + return s +} + type ListDatalakeExceptionsInput struct { _ struct{} `type:"structure"` @@ -7156,6 +7231,17 @@ type SubscriberResource struct { // only under specific circumstances. ExternalId *string `locationName:"externalId" type:"string"` + // The Amazon Resource Name (ARN) which uniquely defines the AWS RAM resource + // share. Before accepting the RAM resource share invitation, you can view details + // related to the RAM resource share. + // + // This field is available only for Lake Formation subscribers created after + // March 8, 2023. + ResourceShareArn *string `locationName:"resourceShareArn" type:"string"` + + // The name of the resource share. + ResourceShareName *string `locationName:"resourceShareName" type:"string"` + // The Amazon Resource Name (ARN) specifying the role of the subscriber. RoleArn *string `locationName:"roleArn" type:"string"` @@ -7239,6 +7325,18 @@ func (s *SubscriberResource) SetExternalId(v string) *SubscriberResource { return s } +// SetResourceShareArn sets the ResourceShareArn field's value. +func (s *SubscriberResource) SetResourceShareArn(v string) *SubscriberResource { + s.ResourceShareArn = &v + return s +} + +// SetResourceShareName sets the ResourceShareName field's value. +func (s *SubscriberResource) SetResourceShareName(v string) *SubscriberResource { + s.ResourceShareName = &v + return s +} + // SetRoleArn sets the RoleArn field's value. func (s *SubscriberResource) SetRoleArn(v string) *SubscriberResource { s.RoleArn = &v @@ -7610,6 +7708,60 @@ func (s UpdateDatalakeOutput) GoString() string { return s.String() } +// The status of the last UpdateDatalake or DeleteDatalake API request. This +// is set to Completed after the configuration is updated, or removed if deletion +// of the data lake is successful. +type UpdateStatus struct { + _ struct{} `type:"structure"` + + // The details of the last UpdateDatalakeor DeleteDatalake API request which + // failed. + LastUpdateFailure *LastUpdateFailure `locationName:"lastUpdateFailure" type:"structure"` + + // The unique ID for the UpdateDatalake or DeleteDatalake API request. + LastUpdateRequestId *string `locationName:"lastUpdateRequestId" type:"string"` + + // The status of the last UpdateDatalake or DeleteDatalake API request that + // was requested. + LastUpdateStatus *string `locationName:"lastUpdateStatus" type:"string" enum:"SettingsStatus"` +} + +// String returns the string representation. +// +// API parameter values that are decorated as "sensitive" in the API will not +// be included in the string output. The member name will be present, but the +// value will be replaced with "sensitive". +func (s UpdateStatus) String() string { + return awsutil.Prettify(s) +} + +// GoString returns the string representation. +// +// API parameter values that are decorated as "sensitive" in the API will not +// be included in the string output. The member name will be present, but the +// value will be replaced with "sensitive". +func (s UpdateStatus) GoString() string { + return s.String() +} + +// SetLastUpdateFailure sets the LastUpdateFailure field's value. +func (s *UpdateStatus) SetLastUpdateFailure(v *LastUpdateFailure) *UpdateStatus { + s.LastUpdateFailure = v + return s +} + +// SetLastUpdateRequestId sets the LastUpdateRequestId field's value. +func (s *UpdateStatus) SetLastUpdateRequestId(v string) *UpdateStatus { + s.LastUpdateRequestId = &v + return s +} + +// SetLastUpdateStatus sets the LastUpdateStatus field's value. +func (s *UpdateStatus) SetLastUpdateStatus(v string) *UpdateStatus { + s.LastUpdateStatus = &v + return s +} + type UpdateSubscriberInput struct { _ struct{} `type:"structure"` @@ -7749,7 +7901,11 @@ type UpdateSubscriptionNotificationConfigurationInput struct { // The HTTPS method used for the subscription notification. HttpsMethod *string `locationName:"httpsMethod" type:"string" enum:"HttpsMethod"` - // The Amazon Resource Name (ARN) specifying the role of the subscriber. + // The Amazon Resource Name (ARN) specifying the role of the subscriber. For + // more information about ARNs and how to use them in policies, see, see the + // Managing data access (https://docs.aws.amazon.com//security-lake/latest/userguide/subscriber-data-access.html) + // and Amazon Web Services Managed Policies (https://docs.aws.amazon.com/security-lake/latest/userguide/security-iam-awsmanpol.html)in + // the Amazon Security Lake User Guide. RoleArn *string `locationName:"roleArn" type:"string"` // The subscription endpoint in Security Lake.