diff --git a/clients/client-directory-service/README.md b/clients/client-directory-service/README.md
index 48fdbfcc822d9..06bfba58f0635 100644
--- a/clients/client-directory-service/README.md
+++ b/clients/client-directory-service/README.md
@@ -416,6 +416,14 @@ DescribeDirectories
[Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/directory-service/command/DescribeDirectoriesCommand/) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-directory-service/Interface/DescribeDirectoriesCommandInput/) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-directory-service/Interface/DescribeDirectoriesCommandOutput/)
+
+ A client exception has occurred. The specified directory is unavailable or could not be found. The specified directory is unavailable. The specified entity already exists. Client authentication is not available in this region at this time. You do not have sufficient access to perform this action. A client exception has occurred. The specified directory does not exist in the system. The specified directory is unavailable or could not be found. The specified directory is unavailable. The specified entity could not be found. A client exception has occurred. The specified directory is unavailable or could not be found. The specified directory is unavailable. The specified entity already exists. A client exception has occurred. The specified directory is unavailable or could not be found. The specified directory is unavailable. The specified entity already exists. A client exception has occurred. The specified directory is unavailable or could not be found. The specified directory is unavailable. The specified entity could not be found. The specified directory does not exist in the system. The specified directory is unavailable or could not be found. The specified directory is unavailable. One or more parameters are not valid. Client authentication is not available in this region at this time. You do not have sufficient access to perform this action. A client exception has occurred. A client exception has occurred. The specified directory is unavailable or could not be found. The specified directory is unavailable. The specified entity could not be found. Obtains status of directory data access enablement through the Directory Service Data API for the specified directory. You do not have sufficient access to perform this action. A client exception has occurred. The specified directory does not exist in the system. An exception has occurred in Directory Service. The operation is not supported. Base exception class for all service exceptions from DirectoryService service. Client authentication is not available in this region at this time. You do not have sufficient access to perform this action. A client exception has occurred. Client authentication is not available in this region at this time. You do not have sufficient access to perform this action. A client exception has occurred. Client authentication is not available in this region at this time. You do not have sufficient access to perform this action. A client exception has occurred. Deactivates access to directory data via the Directory Service Data API for the specified directory. You do not have sufficient access to perform this action. A client exception has occurred. The specified directory does not exist in the system.
+ * The directory is already updated to desired update type settings.
+ * The specified directory is unavailable. An exception has occurred in Directory Service. The operation is not supported. Base exception class for all service exceptions from DirectoryService service. The specified directory does not exist in the system. The specified directory is unavailable or could not be found. The specified directory is unavailable. The LDAP activities could not be performed because they are limited by the LDAPS
diff --git a/clients/client-directory-service/src/commands/EnableClientAuthenticationCommand.ts b/clients/client-directory-service/src/commands/EnableClientAuthenticationCommand.ts
index 0d768544e8f59..1bf024e49fd75 100644
--- a/clients/client-directory-service/src/commands/EnableClientAuthenticationCommand.ts
+++ b/clients/client-directory-service/src/commands/EnableClientAuthenticationCommand.ts
@@ -52,7 +52,7 @@ export interface EnableClientAuthenticationCommandOutput extends EnableClientAut
* @see {@link DirectoryServiceClientResolvedConfig | config} for DirectoryServiceClient's `config` shape.
*
* @throws {@link AccessDeniedException} (client fault)
- * Client authentication is not available in this region at this time. You do not have sufficient access to perform this action. A client exception has occurred. Enables access to directory data via the Directory Service Data API for the specified directory. You do not have sufficient access to perform this action. A client exception has occurred. The specified directory does not exist in the system.
+ * The directory is already updated to desired update type settings.
+ * The specified directory is unavailable. An exception has occurred in Directory Service. The operation is not supported. Base exception class for all service exceptions from DirectoryService service. The specified directory does not exist in the system. The specified directory is unavailable or could not be found. The specified directory is unavailable. The LDAP activities could not be performed because they are limited by the LDAPS
diff --git a/clients/client-directory-service/src/commands/RegisterCertificateCommand.ts b/clients/client-directory-service/src/commands/RegisterCertificateCommand.ts
index 88ad730ca6a3f..59f6d8ee67c96 100644
--- a/clients/client-directory-service/src/commands/RegisterCertificateCommand.ts
+++ b/clients/client-directory-service/src/commands/RegisterCertificateCommand.ts
@@ -70,7 +70,7 @@ export interface RegisterCertificateCommandOutput extends RegisterCertificateRes
* The specified directory does not exist in the system. The specified directory is unavailable or could not be found. The specified directory is unavailable. The certificate PEM that was provided has incorrect encoding. A client exception has occurred. The specified directory is unavailable or could not be found. The specified directory is unavailable. The specified entity could not be found. Client authentication is not available in this region at this time. You do not have sufficient access to perform this action. A client exception has occurred. The specified directory does not exist in the system. The specified directory is unavailable or could not be found. The specified directory is unavailable. An exception has occurred in Directory Service. Resets the password for any user in your Managed Microsoft AD or Simple AD
- * directory.
+DescribeDirectoryDataAccess
+
+
+[Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/directory-service/command/DescribeDirectoryDataAccessCommand/) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-directory-service/Interface/DescribeDirectoryDataAccessCommandInput/) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-directory-service/Interface/DescribeDirectoryDataAccessCommandOutput/)
+
@@ -496,6 +504,14 @@ DisableClientAuthentication
[Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/directory-service/command/DisableClientAuthenticationCommand/) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-directory-service/Interface/DisableClientAuthenticationCommandInput/) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-directory-service/Interface/DisableClientAuthenticationCommandOutput/)
+
+DisableDirectoryDataAccess
+
+
+[Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/directory-service/command/DisableDirectoryDataAccessCommand/) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-directory-service/Interface/DisableDirectoryDataAccessCommandInput/) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-directory-service/Interface/DisableDirectoryDataAccessCommandOutput/)
+
@@ -528,6 +544,14 @@ EnableClientAuthentication
[Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/directory-service/command/EnableClientAuthenticationCommand/) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-directory-service/Interface/EnableClientAuthenticationCommandInput/) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-directory-service/Interface/EnableClientAuthenticationCommandOutput/)
+
+EnableDirectoryDataAccess
+
+
+[Command API Reference](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/directory-service/command/EnableDirectoryDataAccessCommand/) / [Input](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-directory-service/Interface/EnableDirectoryDataAccessCommandInput/) / [Output](https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/Package/-aws-sdk-client-directory-service/Interface/EnableDirectoryDataAccessCommandOutput/)
+
diff --git a/clients/client-directory-service/src/DirectoryService.ts b/clients/client-directory-service/src/DirectoryService.ts
index 9d30c757d265c..31c3255bfb4d8 100644
--- a/clients/client-directory-service/src/DirectoryService.ts
+++ b/clients/client-directory-service/src/DirectoryService.ts
@@ -107,6 +107,11 @@ import {
DescribeDirectoriesCommandInput,
DescribeDirectoriesCommandOutput,
} from "./commands/DescribeDirectoriesCommand";
+import {
+ DescribeDirectoryDataAccessCommand,
+ DescribeDirectoryDataAccessCommandInput,
+ DescribeDirectoryDataAccessCommandOutput,
+} from "./commands/DescribeDirectoryDataAccessCommand";
import {
DescribeDomainControllersCommand,
DescribeDomainControllersCommandInput,
@@ -157,6 +162,11 @@ import {
DisableClientAuthenticationCommandInput,
DisableClientAuthenticationCommandOutput,
} from "./commands/DisableClientAuthenticationCommand";
+import {
+ DisableDirectoryDataAccessCommand,
+ DisableDirectoryDataAccessCommandInput,
+ DisableDirectoryDataAccessCommandOutput,
+} from "./commands/DisableDirectoryDataAccessCommand";
import {
DisableLDAPSCommand,
DisableLDAPSCommandInput,
@@ -173,6 +183,11 @@ import {
EnableClientAuthenticationCommandInput,
EnableClientAuthenticationCommandOutput,
} from "./commands/EnableClientAuthenticationCommand";
+import {
+ EnableDirectoryDataAccessCommand,
+ EnableDirectoryDataAccessCommandInput,
+ EnableDirectoryDataAccessCommandOutput,
+} from "./commands/EnableDirectoryDataAccessCommand";
import { EnableLDAPSCommand, EnableLDAPSCommandInput, EnableLDAPSCommandOutput } from "./commands/EnableLDAPSCommand";
import {
EnableRadiusCommand,
@@ -325,6 +340,7 @@ const commands = {
DescribeClientAuthenticationSettingsCommand,
DescribeConditionalForwardersCommand,
DescribeDirectoriesCommand,
+ DescribeDirectoryDataAccessCommand,
DescribeDomainControllersCommand,
DescribeEventTopicsCommand,
DescribeLDAPSSettingsCommand,
@@ -335,10 +351,12 @@ const commands = {
DescribeTrustsCommand,
DescribeUpdateDirectoryCommand,
DisableClientAuthenticationCommand,
+ DisableDirectoryDataAccessCommand,
DisableLDAPSCommand,
DisableRadiusCommand,
DisableSsoCommand,
EnableClientAuthenticationCommand,
+ EnableDirectoryDataAccessCommand,
EnableLDAPSCommand,
EnableRadiusCommand,
EnableSsoCommand,
@@ -751,6 +769,23 @@ export interface DirectoryService {
cb: (err: any, data?: DescribeDirectoriesCommandOutput) => void
): void;
+ /**
+ * @see {@link DescribeDirectoryDataAccessCommand}
+ */
+ describeDirectoryDataAccess(
+ args: DescribeDirectoryDataAccessCommandInput,
+ options?: __HttpHandlerOptions
+ ): Promise
You can reset the password for any user in your directory with the following * exceptions:
*A client exception has occurred.
* * @throws {@link DirectoryUnavailableException} (client fault) - *The specified directory is unavailable or could not be found.
+ *The specified directory is unavailable.
* * @throws {@link EntityDoesNotExistException} (client fault) *The specified entity could not be found.
diff --git a/clients/client-directory-service/src/commands/ShareDirectoryCommand.ts b/clients/client-directory-service/src/commands/ShareDirectoryCommand.ts index 0d25e41a99810..924b25ce4309a 100644 --- a/clients/client-directory-service/src/commands/ShareDirectoryCommand.ts +++ b/clients/client-directory-service/src/commands/ShareDirectoryCommand.ts @@ -75,7 +75,7 @@ export interface ShareDirectoryCommandOutput extends ShareDirectoryResult, __Met * @see {@link DirectoryServiceClientResolvedConfig | config} for DirectoryServiceClient's `config` shape. * * @throws {@link AccessDeniedException} (client fault) - *Client authentication is not available in this region at this time.
+ *You do not have sufficient access to perform this action.
* * @throws {@link ClientException} (client fault) *A client exception has occurred.
diff --git a/clients/client-directory-service/src/commands/StartSchemaExtensionCommand.ts b/clients/client-directory-service/src/commands/StartSchemaExtensionCommand.ts index 3ba3beb5f8cbb..c2a3713ee9e9c 100644 --- a/clients/client-directory-service/src/commands/StartSchemaExtensionCommand.ts +++ b/clients/client-directory-service/src/commands/StartSchemaExtensionCommand.ts @@ -59,7 +59,7 @@ export interface StartSchemaExtensionCommandOutput extends StartSchemaExtensionR *A client exception has occurred.
* * @throws {@link DirectoryUnavailableException} (client fault) - *The specified directory is unavailable or could not be found.
+ *The specified directory is unavailable.
* * @throws {@link EntityDoesNotExistException} (client fault) *The specified entity could not be found.
diff --git a/clients/client-directory-service/src/commands/UpdateConditionalForwarderCommand.ts b/clients/client-directory-service/src/commands/UpdateConditionalForwarderCommand.ts index 689c9e8959ec5..616914848d66a 100644 --- a/clients/client-directory-service/src/commands/UpdateConditionalForwarderCommand.ts +++ b/clients/client-directory-service/src/commands/UpdateConditionalForwarderCommand.ts @@ -59,7 +59,7 @@ export interface UpdateConditionalForwarderCommandOutput extends UpdateCondition *A client exception has occurred.
* * @throws {@link DirectoryUnavailableException} (client fault) - *The specified directory is unavailable or could not be found.
+ *The specified directory is unavailable.
* * @throws {@link EntityDoesNotExistException} (client fault) *The specified entity could not be found.
diff --git a/clients/client-directory-service/src/commands/UpdateDirectorySetupCommand.ts b/clients/client-directory-service/src/commands/UpdateDirectorySetupCommand.ts index ec210141a0f1b..eaa7d16a3becb 100644 --- a/clients/client-directory-service/src/commands/UpdateDirectorySetupCommand.ts +++ b/clients/client-directory-service/src/commands/UpdateDirectorySetupCommand.ts @@ -58,7 +58,7 @@ export interface UpdateDirectorySetupCommandOutput extends UpdateDirectorySetupR * @see {@link DirectoryServiceClientResolvedConfig | config} for DirectoryServiceClient's `config` shape. * * @throws {@link AccessDeniedException} (client fault) - *Client authentication is not available in this region at this time.
+ *You do not have sufficient access to perform this action.
* * @throws {@link ClientException} (client fault) *A client exception has occurred.
@@ -72,7 +72,7 @@ export interface UpdateDirectorySetupCommandOutput extends UpdateDirectorySetupR * * * @throws {@link DirectoryUnavailableException} (client fault) - *The specified directory is unavailable or could not be found.
+ *The specified directory is unavailable.
* * @throws {@link InvalidParameterException} (client fault) *One or more parameters are not valid.
diff --git a/clients/client-directory-service/src/commands/UpdateNumberOfDomainControllersCommand.ts b/clients/client-directory-service/src/commands/UpdateNumberOfDomainControllersCommand.ts index cf8369ae4e067..692a47279b329 100644 --- a/clients/client-directory-service/src/commands/UpdateNumberOfDomainControllersCommand.ts +++ b/clients/client-directory-service/src/commands/UpdateNumberOfDomainControllersCommand.ts @@ -64,7 +64,7 @@ export interface UpdateNumberOfDomainControllersCommandOutput *A client exception has occurred.
* * @throws {@link DirectoryUnavailableException} (client fault) - *The specified directory is unavailable or could not be found.
+ *The specified directory is unavailable.
* * @throws {@link DomainControllerLimitExceededException} (client fault) *The maximum allowed number of domain controllers per directory was exceeded. The diff --git a/clients/client-directory-service/src/commands/UpdateSettingsCommand.ts b/clients/client-directory-service/src/commands/UpdateSettingsCommand.ts index 4346b7a75a636..e51729f13a349 100644 --- a/clients/client-directory-service/src/commands/UpdateSettingsCommand.ts +++ b/clients/client-directory-service/src/commands/UpdateSettingsCommand.ts @@ -65,7 +65,7 @@ export interface UpdateSettingsCommandOutput extends UpdateSettingsResult, __Met *
The specified directory does not exist in the system.
* * @throws {@link DirectoryUnavailableException} (client fault) - *The specified directory is unavailable or could not be found.
+ *The specified directory is unavailable.
* * @throws {@link IncompatibleSettingsException} (client fault) *The specified directory setting is not compatible with other settings.
diff --git a/clients/client-directory-service/src/commands/index.ts b/clients/client-directory-service/src/commands/index.ts index 9b298438e2418..6c890fb7b0658 100644 --- a/clients/client-directory-service/src/commands/index.ts +++ b/clients/client-directory-service/src/commands/index.ts @@ -24,6 +24,7 @@ export * from "./DescribeCertificateCommand"; export * from "./DescribeClientAuthenticationSettingsCommand"; export * from "./DescribeConditionalForwardersCommand"; export * from "./DescribeDirectoriesCommand"; +export * from "./DescribeDirectoryDataAccessCommand"; export * from "./DescribeDomainControllersCommand"; export * from "./DescribeEventTopicsCommand"; export * from "./DescribeLDAPSSettingsCommand"; @@ -34,10 +35,12 @@ export * from "./DescribeSnapshotsCommand"; export * from "./DescribeTrustsCommand"; export * from "./DescribeUpdateDirectoryCommand"; export * from "./DisableClientAuthenticationCommand"; +export * from "./DisableDirectoryDataAccessCommand"; export * from "./DisableLDAPSCommand"; export * from "./DisableRadiusCommand"; export * from "./DisableSsoCommand"; export * from "./EnableClientAuthenticationCommand"; +export * from "./EnableDirectoryDataAccessCommand"; export * from "./EnableLDAPSCommand"; export * from "./EnableRadiusCommand"; export * from "./EnableSsoCommand"; diff --git a/clients/client-directory-service/src/models/models_0.ts b/clients/client-directory-service/src/models/models_0.ts index fb55fe496692a..45d3293a415db 100644 --- a/clients/client-directory-service/src/models/models_0.ts +++ b/clients/client-directory-service/src/models/models_0.ts @@ -295,7 +295,7 @@ export class ServiceException extends __BaseException { } /** - *Client authentication is not available in this region at this time.
+ *You do not have sufficient access to perform this action.
* @public */ export class AccessDeniedException extends __BaseException { @@ -372,57 +372,57 @@ export interface AddIpRoutesRequest { *Inbound:
*Type: Custom UDP Rule, Protocol: UDP, Range: 88, Source: 0.0.0.0/0
+ *Type: Custom UDP Rule, Protocol: UDP, Range: 88, Source: Managed Microsoft AD VPC IPv4 CIDR
*Type: Custom UDP Rule, Protocol: UDP, Range: 123, Source: 0.0.0.0/0
+ *Type: Custom UDP Rule, Protocol: UDP, Range: 123, Source: Managed Microsoft AD VPC IPv4 CIDR
*Type: Custom UDP Rule, Protocol: UDP, Range: 138, Source: 0.0.0.0/0
+ *Type: Custom UDP Rule, Protocol: UDP, Range: 138, Source: Managed Microsoft AD VPC IPv4 CIDR
*Type: Custom UDP Rule, Protocol: UDP, Range: 389, Source: 0.0.0.0/0
+ *Type: Custom UDP Rule, Protocol: UDP, Range: 389, Source: Managed Microsoft AD VPC IPv4 CIDR
*Type: Custom UDP Rule, Protocol: UDP, Range: 464, Source: 0.0.0.0/0
+ *Type: Custom UDP Rule, Protocol: UDP, Range: 464, Source: Managed Microsoft AD VPC IPv4 CIDR
*Type: Custom UDP Rule, Protocol: UDP, Range: 445, Source: 0.0.0.0/0
+ *Type: Custom UDP Rule, Protocol: UDP, Range: 445, Source: Managed Microsoft AD VPC IPv4 CIDR
*Type: Custom TCP Rule, Protocol: TCP, Range: 88, Source: 0.0.0.0/0
+ *Type: Custom TCP Rule, Protocol: TCP, Range: 88, Source: Managed Microsoft AD VPC IPv4 CIDR
*Type: Custom TCP Rule, Protocol: TCP, Range: 135, Source: 0.0.0.0/0
+ *Type: Custom TCP Rule, Protocol: TCP, Range: 135, Source: Managed Microsoft AD VPC IPv4 CIDR
*Type: Custom TCP Rule, Protocol: TCP, Range: 445, Source: 0.0.0.0/0
+ *Type: Custom TCP Rule, Protocol: TCP, Range: 445, Source: Managed Microsoft AD VPC IPv4 CIDR
*Type: Custom TCP Rule, Protocol: TCP, Range: 464, Source: 0.0.0.0/0
+ *Type: Custom TCP Rule, Protocol: TCP, Range: 464, Source: Managed Microsoft AD VPC IPv4 CIDR
*Type: Custom TCP Rule, Protocol: TCP, Range: 636, Source: 0.0.0.0/0
+ *Type: Custom TCP Rule, Protocol: TCP, Range: 636, Source: Managed Microsoft AD VPC IPv4 CIDR
*Type: Custom TCP Rule, Protocol: TCP, Range: 1024-65535, Source: - * 0.0.0.0/0
+ * Managed Microsoft AD VPC IPv4 CIDR *Type: Custom TCP Rule, Protocol: TCP, Range: 3268-33269, Source: - * 0.0.0.0/0
+ * Managed Microsoft AD VPC IPv4 CIDR *Type: DNS (UDP), Protocol: UDP, Range: 53, Source: 0.0.0.0/0
+ *Type: DNS (UDP), Protocol: UDP, Range: 53, Source: Managed Microsoft AD VPC IPv4 CIDR
*Type: DNS (TCP), Protocol: TCP, Range: 53, Source: 0.0.0.0/0
+ *Type: DNS (TCP), Protocol: TCP, Range: 53, Source: Managed Microsoft AD VPC IPv4 CIDR
*Type: LDAP, Protocol: TCP, Range: 389, Source: 0.0.0.0/0
+ *Type: LDAP, Protocol: TCP, Range: 389, Source: Managed Microsoft AD VPC IPv4 CIDR
*Type: All ICMP, Protocol: All, Range: N/A, Source: 0.0.0.0/0
+ *Type: All ICMP, Protocol: All, Range: N/A, Source: Managed Microsoft AD VPC IPv4 CIDR
*The specified directory is unavailable or could not be found.
+ *The specified directory is unavailable.
* @public */ export class DirectoryUnavailableException extends __BaseException { @@ -735,7 +735,7 @@ export interface Tag { /** *Required name of the tag. The string value can be Unicode characters and cannot be * prefixed with "aws:". The string can contain only the set of Unicode letters, digits, - * white-space, '_', '.', '/', '=', '+', '-' (Java regex: + * white-space, '_', '.', '/', '=', '+', '-', ':', '@'(Java regex: * "^([\\p\{L\}\\p\{Z\}\\p\{N\}_.:/=+\\-]*)$").
* @public */ @@ -743,7 +743,7 @@ export interface Tag { /** *The optional value of the tag. The string value can be Unicode characters. The string - * can contain only the set of Unicode letters, digits, white-space, '_', '.', '/', '=', '+', '-' + * can contain only the set of Unicode letters, digits, white-space, '_', '.', '/', '=', '+', '-', ':', '@' * (Java regex: "^([\\p\{L\}\\p\{Z\}\\p\{N\}_.:/=+\\-]*)$").
* @public */ @@ -1901,7 +1901,7 @@ export interface CreateTrustRequest { RemoteDomainName: string | undefined; /** - *The trust password. The must be the same password that was used when creating the trust + *
The trust password. The trust password must be the same password that was used when creating the trust * relationship on the external domain.
* @public */ @@ -1944,6 +1944,23 @@ export interface CreateTrustResult { TrustId?: string; } +/** + * @public + * @enum + */ +export const DataAccessStatus = { + DISABLED: "Disabled", + DISABLING: "Disabling", + ENABLED: "Enabled", + ENABLING: "Enabling", + FAILED: "Failed", +} as const; + +/** + * @public + */ +export type DataAccessStatus = (typeof DataAccessStatus)[keyof typeof DataAccessStatus]; + /** *Deletes a conditional forwarder.
* @public @@ -2349,8 +2366,7 @@ export interface RadiusSettings { RadiusTimeout?: number; /** - *The maximum number of times that communication with the RADIUS server is - * attempted.
+ *The maximum number of times that communication with the RADIUS server is retried after the initial attempt.
* @public */ RadiusRetries?: number; @@ -2506,6 +2522,7 @@ export const DirectoryStage = { REQUESTED: "Requested", RESTOREFAILED: "RestoreFailed", RESTORING: "Restoring", + UPDATING: "Updating", } as const; /** @@ -2636,7 +2653,7 @@ export interface DirectoryDescription { StageLastUpdatedDateTime?: Date; /** - *The directory size.
+ *The directory type.
* @public */ Type?: DirectoryType; @@ -2765,6 +2782,28 @@ export class InvalidNextTokenException extends __BaseException { } } +/** + * @public + */ +export interface DescribeDirectoryDataAccessRequest { + /** + *The directory identifier.
+ * @public + */ + DirectoryId: string | undefined; +} + +/** + * @public + */ +export interface DescribeDirectoryDataAccessResult { + /** + *The current status of data access through the Directory Service Data API.
+ * @public + */ + DataAccessStatus?: DataAccessStatus; +} + /** * @public */ @@ -2810,6 +2849,7 @@ export const DomainControllerStatus = { FAILED: "Failed", IMPAIRED: "Impaired", RESTORING: "Restoring", + UPDATING: "Updating", } as const; /** @@ -3348,7 +3388,9 @@ export interface DescribeSettingsResult { SettingEntries?: SettingEntry[]; /** - *If not null, token that indicates that more results are available. Pass this value for the NextToken
parameter in a subsequent call to DescribeSettings
to retrieve the next set of items.
If not null, token that indicates that more results are available.
+ * Pass this value for the NextToken
parameter in a subsequent
+ * call to DescribeSettings
to retrieve the next set of items.
The type of client authentication to disable. Currently, only the parameter, SmartCard
is supported.
The type of client authentication to disable. Currently the only parameter "SmartCard"
is supported.
The directory identifier.
+ * @public + */ + DirectoryId: string | undefined; +} + +/** + * @public + */ +export interface DisableDirectoryDataAccessResult {} + /** * @public */ @@ -4232,6 +4290,22 @@ export class NoAvailableCertificateException extends __BaseException { } } +/** + * @public + */ +export interface EnableDirectoryDataAccessRequest { + /** + *The directory identifier.
+ * @public + */ + DirectoryId: string | undefined; +} + +/** + * @public + */ +export interface EnableDirectoryDataAccessResult {} + /** * @public */ diff --git a/clients/client-directory-service/src/protocols/Aws_json1_1.ts b/clients/client-directory-service/src/protocols/Aws_json1_1.ts index d20ce27284ae9..416a153f21cf1 100644 --- a/clients/client-directory-service/src/protocols/Aws_json1_1.ts +++ b/clients/client-directory-service/src/protocols/Aws_json1_1.ts @@ -82,6 +82,10 @@ import { DescribeDirectoriesCommandInput, DescribeDirectoriesCommandOutput, } from "../commands/DescribeDirectoriesCommand"; +import { + DescribeDirectoryDataAccessCommandInput, + DescribeDirectoryDataAccessCommandOutput, +} from "../commands/DescribeDirectoryDataAccessCommand"; import { DescribeDomainControllersCommandInput, DescribeDomainControllersCommandOutput, @@ -110,6 +114,10 @@ import { DisableClientAuthenticationCommandInput, DisableClientAuthenticationCommandOutput, } from "../commands/DisableClientAuthenticationCommand"; +import { + DisableDirectoryDataAccessCommandInput, + DisableDirectoryDataAccessCommandOutput, +} from "../commands/DisableDirectoryDataAccessCommand"; import { DisableLDAPSCommandInput, DisableLDAPSCommandOutput } from "../commands/DisableLDAPSCommand"; import { DisableRadiusCommandInput, DisableRadiusCommandOutput } from "../commands/DisableRadiusCommand"; import { DisableSsoCommandInput, DisableSsoCommandOutput } from "../commands/DisableSsoCommand"; @@ -117,6 +125,10 @@ import { EnableClientAuthenticationCommandInput, EnableClientAuthenticationCommandOutput, } from "../commands/EnableClientAuthenticationCommand"; +import { + EnableDirectoryDataAccessCommandInput, + EnableDirectoryDataAccessCommandOutput, +} from "../commands/EnableDirectoryDataAccessCommand"; import { EnableLDAPSCommandInput, EnableLDAPSCommandOutput } from "../commands/EnableLDAPSCommand"; import { EnableRadiusCommandInput, EnableRadiusCommandOutput } from "../commands/EnableRadiusCommand"; import { EnableSsoCommandInput, EnableSsoCommandOutput } from "../commands/EnableSsoCommand"; @@ -221,6 +233,7 @@ import { DescribeConditionalForwardersRequest, DescribeDirectoriesRequest, DescribeDirectoriesResult, + DescribeDirectoryDataAccessRequest, DescribeDomainControllersRequest, DescribeDomainControllersResult, DescribeEventTopicsRequest, @@ -250,12 +263,14 @@ import { DirectoryUnavailableException, DirectoryVpcSettings, DisableClientAuthenticationRequest, + DisableDirectoryDataAccessRequest, DisableLDAPSRequest, DisableRadiusRequest, DisableSsoRequest, DomainController, DomainControllerLimitExceededException, EnableClientAuthenticationRequest, + EnableDirectoryDataAccessRequest, EnableLDAPSRequest, EnableRadiusRequest, EnableSsoRequest, @@ -655,6 +670,19 @@ export const se_DescribeDirectoriesCommand = async ( return buildHttpRpcRequest(context, headers, "/", undefined, body); }; +/** + * serializeAws_json1_1DescribeDirectoryDataAccessCommand + */ +export const se_DescribeDirectoryDataAccessCommand = async ( + input: DescribeDirectoryDataAccessCommandInput, + context: __SerdeContext +): Promise<__HttpRequest> => { + const headers: __HeaderBag = sharedHeaders("DescribeDirectoryDataAccess"); + let body: any; + body = JSON.stringify(_json(input)); + return buildHttpRpcRequest(context, headers, "/", undefined, body); +}; + /** * serializeAws_json1_1DescribeDomainControllersCommand */ @@ -785,6 +813,19 @@ export const se_DisableClientAuthenticationCommand = async ( return buildHttpRpcRequest(context, headers, "/", undefined, body); }; +/** + * serializeAws_json1_1DisableDirectoryDataAccessCommand + */ +export const se_DisableDirectoryDataAccessCommand = async ( + input: DisableDirectoryDataAccessCommandInput, + context: __SerdeContext +): Promise<__HttpRequest> => { + const headers: __HeaderBag = sharedHeaders("DisableDirectoryDataAccess"); + let body: any; + body = JSON.stringify(_json(input)); + return buildHttpRpcRequest(context, headers, "/", undefined, body); +}; + /** * serializeAws_json1_1DisableLDAPSCommand */ @@ -837,6 +878,19 @@ export const se_EnableClientAuthenticationCommand = async ( return buildHttpRpcRequest(context, headers, "/", undefined, body); }; +/** + * serializeAws_json1_1EnableDirectoryDataAccessCommand + */ +export const se_EnableDirectoryDataAccessCommand = async ( + input: EnableDirectoryDataAccessCommandInput, + context: __SerdeContext +): Promise<__HttpRequest> => { + const headers: __HeaderBag = sharedHeaders("EnableDirectoryDataAccess"); + let body: any; + body = JSON.stringify(_json(input)); + return buildHttpRpcRequest(context, headers, "/", undefined, body); +}; + /** * serializeAws_json1_1EnableLDAPSCommand */ @@ -1701,6 +1755,26 @@ export const de_DescribeDirectoriesCommand = async ( return response; }; +/** + * deserializeAws_json1_1DescribeDirectoryDataAccessCommand + */ +export const de_DescribeDirectoryDataAccessCommand = async ( + output: __HttpResponse, + context: __SerdeContext +): PromiseClient authentication is not available in this region at this time.
", + "smithy.api#documentation": "You do not have sufficient access to perform this action.
", "smithy.api#error": "client" } }, @@ -167,7 +167,7 @@ "target": "com.amazonaws.directoryservice#UpdateSecurityGroupForDirectoryControllers", "traits": { "smithy.api#default": false, - "smithy.api#documentation": "If set to true, updates the inbound and outbound rules of the security group that has\n the description: \"Amazon Web Services created security group for directory ID\n directory controllers.\" Following are the new rules:
\nInbound:
\nType: Custom UDP Rule, Protocol: UDP, Range: 88, Source: 0.0.0.0/0
\nType: Custom UDP Rule, Protocol: UDP, Range: 123, Source: 0.0.0.0/0
\nType: Custom UDP Rule, Protocol: UDP, Range: 138, Source: 0.0.0.0/0
\nType: Custom UDP Rule, Protocol: UDP, Range: 389, Source: 0.0.0.0/0
\nType: Custom UDP Rule, Protocol: UDP, Range: 464, Source: 0.0.0.0/0
\nType: Custom UDP Rule, Protocol: UDP, Range: 445, Source: 0.0.0.0/0
\nType: Custom TCP Rule, Protocol: TCP, Range: 88, Source: 0.0.0.0/0
\nType: Custom TCP Rule, Protocol: TCP, Range: 135, Source: 0.0.0.0/0
\nType: Custom TCP Rule, Protocol: TCP, Range: 445, Source: 0.0.0.0/0
\nType: Custom TCP Rule, Protocol: TCP, Range: 464, Source: 0.0.0.0/0
\nType: Custom TCP Rule, Protocol: TCP, Range: 636, Source: 0.0.0.0/0
\nType: Custom TCP Rule, Protocol: TCP, Range: 1024-65535, Source:\n 0.0.0.0/0
\nType: Custom TCP Rule, Protocol: TCP, Range: 3268-33269, Source:\n 0.0.0.0/0
\nType: DNS (UDP), Protocol: UDP, Range: 53, Source: 0.0.0.0/0
\nType: DNS (TCP), Protocol: TCP, Range: 53, Source: 0.0.0.0/0
\nType: LDAP, Protocol: TCP, Range: 389, Source: 0.0.0.0/0
\nType: All ICMP, Protocol: All, Range: N/A, Source: 0.0.0.0/0
\nOutbound:
\nType: All traffic, Protocol: All, Range: All, Destination: 0.0.0.0/0
\nThese security rules impact an internal network interface that is not exposed\n publicly.
" + "smithy.api#documentation": "If set to true, updates the inbound and outbound rules of the security group that has\n the description: \"Amazon Web Services created security group for directory ID\n directory controllers.\" Following are the new rules:
\nInbound:
\nType: Custom UDP Rule, Protocol: UDP, Range: 88, Source: Managed Microsoft AD VPC IPv4 CIDR
\nType: Custom UDP Rule, Protocol: UDP, Range: 123, Source: Managed Microsoft AD VPC IPv4 CIDR
\nType: Custom UDP Rule, Protocol: UDP, Range: 138, Source: Managed Microsoft AD VPC IPv4 CIDR
\nType: Custom UDP Rule, Protocol: UDP, Range: 389, Source: Managed Microsoft AD VPC IPv4 CIDR
\nType: Custom UDP Rule, Protocol: UDP, Range: 464, Source: Managed Microsoft AD VPC IPv4 CIDR
\nType: Custom UDP Rule, Protocol: UDP, Range: 445, Source: Managed Microsoft AD VPC IPv4 CIDR
\nType: Custom TCP Rule, Protocol: TCP, Range: 88, Source: Managed Microsoft AD VPC IPv4 CIDR
\nType: Custom TCP Rule, Protocol: TCP, Range: 135, Source: Managed Microsoft AD VPC IPv4 CIDR
\nType: Custom TCP Rule, Protocol: TCP, Range: 445, Source: Managed Microsoft AD VPC IPv4 CIDR
\nType: Custom TCP Rule, Protocol: TCP, Range: 464, Source: Managed Microsoft AD VPC IPv4 CIDR
\nType: Custom TCP Rule, Protocol: TCP, Range: 636, Source: Managed Microsoft AD VPC IPv4 CIDR
\nType: Custom TCP Rule, Protocol: TCP, Range: 1024-65535, Source:\n Managed Microsoft AD VPC IPv4 CIDR
\nType: Custom TCP Rule, Protocol: TCP, Range: 3268-33269, Source:\n Managed Microsoft AD VPC IPv4 CIDR
\nType: DNS (UDP), Protocol: UDP, Range: 53, Source: Managed Microsoft AD VPC IPv4 CIDR
\nType: DNS (TCP), Protocol: TCP, Range: 53, Source: Managed Microsoft AD VPC IPv4 CIDR
\nType: LDAP, Protocol: TCP, Range: 389, Source: Managed Microsoft AD VPC IPv4 CIDR
\nType: All ICMP, Protocol: All, Range: N/A, Source: Managed Microsoft AD VPC IPv4 CIDR
\nOutbound:
\nType: All traffic, Protocol: All, Range: All, Destination: 0.0.0.0/0
\nThese security rules impact an internal network interface that is not exposed\n publicly.
" } } }, @@ -1630,7 +1630,7 @@ "TrustPassword": { "target": "com.amazonaws.directoryservice#TrustPassword", "traits": { - "smithy.api#documentation": "The trust password. The must be the same password that was used when creating the trust\n relationship on the external domain.
", + "smithy.api#documentation": "The trust password. The trust password must be the same password that was used when creating the trust\n relationship on the external domain.
", "smithy.api#required": {} } }, @@ -1699,6 +1699,41 @@ "smithy.api#pattern": "^(?!.*\\\\|.*\"|.*\\/|.*\\[|.*\\]|.*:|.*;|.*\\||.*=|.*,|.*\\+|.*\\*|.*\\?|.*<|.*>|.*@).*$" } }, + "com.amazonaws.directoryservice#DataAccessStatus": { + "type": "enum", + "members": { + "DISABLED": { + "target": "smithy.api#Unit", + "traits": { + "smithy.api#enumValue": "Disabled" + } + }, + "DISABLING": { + "target": "smithy.api#Unit", + "traits": { + "smithy.api#enumValue": "Disabling" + } + }, + "ENABLED": { + "target": "smithy.api#Unit", + "traits": { + "smithy.api#enumValue": "Enabled" + } + }, + "ENABLING": { + "target": "smithy.api#Unit", + "traits": { + "smithy.api#enumValue": "Enabling" + } + }, + "FAILED": { + "target": "smithy.api#Unit", + "traits": { + "smithy.api#enumValue": "Failed" + } + } + } + }, "com.amazonaws.directoryservice#DeleteAssociatedConditionalForwarder": { "type": "boolean", "traits": { @@ -2442,6 +2477,64 @@ "smithy.api#output": {} } }, + "com.amazonaws.directoryservice#DescribeDirectoryDataAccess": { + "type": "operation", + "input": { + "target": "com.amazonaws.directoryservice#DescribeDirectoryDataAccessRequest" + }, + "output": { + "target": "com.amazonaws.directoryservice#DescribeDirectoryDataAccessResult" + }, + "errors": [ + { + "target": "com.amazonaws.directoryservice#AccessDeniedException" + }, + { + "target": "com.amazonaws.directoryservice#ClientException" + }, + { + "target": "com.amazonaws.directoryservice#DirectoryDoesNotExistException" + }, + { + "target": "com.amazonaws.directoryservice#ServiceException" + }, + { + "target": "com.amazonaws.directoryservice#UnsupportedOperationException" + } + ], + "traits": { + "smithy.api#documentation": "Obtains status of directory data access enablement through the Directory Service Data API for the specified directory.
" + } + }, + "com.amazonaws.directoryservice#DescribeDirectoryDataAccessRequest": { + "type": "structure", + "members": { + "DirectoryId": { + "target": "com.amazonaws.directoryservice#DirectoryId", + "traits": { + "smithy.api#documentation": "The directory identifier.
", + "smithy.api#required": {} + } + } + }, + "traits": { + "smithy.api#input": {} + } + }, + "com.amazonaws.directoryservice#DescribeDirectoryDataAccessResult": { + "type": "structure", + "members": { + "DataAccessStatus": { + "target": "com.amazonaws.directoryservice#DataAccessStatus", + "traits": { + "smithy.api#documentation": "The current status of data access through the Directory Service Data API.
" + } + } + }, + "traits": { + "smithy.api#output": {} + } + }, "com.amazonaws.directoryservice#DescribeDomainControllers": { "type": "operation", "input": { @@ -2849,7 +2942,7 @@ "NextToken": { "target": "com.amazonaws.directoryservice#NextToken", "traits": { - "smithy.api#documentation": "If not null, token that indicates that more results are available. Pass this value for the NextToken
parameter in a subsequent call to DescribeSettings
to retrieve the next set of items.
If not null, token that indicates that more results are available. \n Pass this value for the NextToken
parameter in a subsequent \n call to DescribeSettings
to retrieve the next set of items.
The directory size.
" + "smithy.api#documentation": "The directory type.
" } }, "VpcSettings": { @@ -3846,6 +3939,9 @@ { "target": "com.amazonaws.directoryservice#DescribeDirectories" }, + { + "target": "com.amazonaws.directoryservice#DescribeDirectoryDataAccess" + }, { "target": "com.amazonaws.directoryservice#DescribeDomainControllers" }, @@ -3876,6 +3972,9 @@ { "target": "com.amazonaws.directoryservice#DisableClientAuthentication" }, + { + "target": "com.amazonaws.directoryservice#DisableDirectoryDataAccess" + }, { "target": "com.amazonaws.directoryservice#DisableLDAPS" }, @@ -3888,6 +3987,9 @@ { "target": "com.amazonaws.directoryservice#EnableClientAuthentication" }, + { + "target": "com.amazonaws.directoryservice#EnableDirectoryDataAccess" + }, { "target": "com.amazonaws.directoryservice#EnableLDAPS" }, @@ -5063,6 +5165,12 @@ "traits": { "smithy.api#enumValue": "Failed" } + }, + "UPDATING": { + "target": "smithy.api#Unit", + "traits": { + "smithy.api#enumValue": "Updating" + } } } }, @@ -5106,7 +5214,7 @@ } }, "traits": { - "smithy.api#documentation": "The specified directory is unavailable or could not be found.
", + "smithy.api#documentation": "The specified directory is unavailable.
", "smithy.api#error": "client" } }, @@ -5209,7 +5317,7 @@ "Type": { "target": "com.amazonaws.directoryservice#ClientAuthenticationType", "traits": { - "smithy.api#documentation": "The type of client authentication to disable. Currently, only the parameter, SmartCard
is supported.
The type of client authentication to disable. Currently the only parameter \"SmartCard\"
is supported.
Deactivates access to directory data via the Directory Service Data API for the specified directory.
" + } + }, + "com.amazonaws.directoryservice#DisableDirectoryDataAccessRequest": { + "type": "structure", + "members": { + "DirectoryId": { + "target": "com.amazonaws.directoryservice#DirectoryId", + "traits": { + "smithy.api#documentation": "The directory identifier.
", + "smithy.api#required": {} + } + } + }, + "traits": { + "smithy.api#input": {} + } + }, + "com.amazonaws.directoryservice#DisableDirectoryDataAccessResult": { + "type": "structure", + "members": {}, + "traits": { + "smithy.api#output": {} + } + }, "com.amazonaws.directoryservice#DisableLDAPS": { "type": "operation", "input": { @@ -5546,6 +5711,12 @@ "traits": { "smithy.api#enumValue": "Failed" } + }, + "UPDATING": { + "target": "smithy.api#Unit", + "traits": { + "smithy.api#enumValue": "Updating" + } } } }, @@ -5622,6 +5793,63 @@ "smithy.api#output": {} } }, + "com.amazonaws.directoryservice#EnableDirectoryDataAccess": { + "type": "operation", + "input": { + "target": "com.amazonaws.directoryservice#EnableDirectoryDataAccessRequest" + }, + "output": { + "target": "com.amazonaws.directoryservice#EnableDirectoryDataAccessResult" + }, + "errors": [ + { + "target": "com.amazonaws.directoryservice#AccessDeniedException" + }, + { + "target": "com.amazonaws.directoryservice#ClientException" + }, + { + "target": "com.amazonaws.directoryservice#DirectoryDoesNotExistException" + }, + { + "target": "com.amazonaws.directoryservice#DirectoryInDesiredStateException" + }, + { + "target": "com.amazonaws.directoryservice#DirectoryUnavailableException" + }, + { + "target": "com.amazonaws.directoryservice#ServiceException" + }, + { + "target": "com.amazonaws.directoryservice#UnsupportedOperationException" + } + ], + "traits": { + "smithy.api#documentation": "Enables access to directory data via the Directory Service Data API for the specified directory.
" + } + }, + "com.amazonaws.directoryservice#EnableDirectoryDataAccessRequest": { + "type": "structure", + "members": { + "DirectoryId": { + "target": "com.amazonaws.directoryservice#DirectoryId", + "traits": { + "smithy.api#documentation": "The directory identifier.
", + "smithy.api#required": {} + } + } + }, + "traits": { + "smithy.api#input": {} + } + }, + "com.amazonaws.directoryservice#EnableDirectoryDataAccessResult": { + "type": "structure", + "members": {}, + "traits": { + "smithy.api#output": {} + } + }, "com.amazonaws.directoryservice#EnableLDAPS": { "type": "operation", "input": { @@ -7069,7 +7297,7 @@ "target": "com.amazonaws.directoryservice#RadiusRetries", "traits": { "smithy.api#default": 0, - "smithy.api#documentation": "The maximum number of times that communication with the RADIUS server is\n attempted.
" + "smithy.api#documentation": "The maximum number of times that communication with the RADIUS server is retried after the initial attempt.
" } }, "SharedSecret": { @@ -7141,7 +7369,7 @@ "traits": { "smithy.api#range": { "min": 1, - "max": 20 + "max": 50 } } }, @@ -7708,7 +7936,7 @@ } ], "traits": { - "smithy.api#documentation": "Resets the password for any user in your Managed Microsoft AD or Simple AD\n directory.
\nYou can reset the password for any user in your directory with the following\n exceptions:
\nFor Simple AD, you cannot reset the password for any user that is a member of either\n the Domain Admins or Enterprise\n Admins group except for the administrator user.
\nFor Managed Microsoft AD, you can only reset the password for a user that is in an\n OU based off of the NetBIOS name that you typed when you created your directory. For\n example, you cannot reset the password for a user in the Amazon Web Services\n Reserved OU. For more information about the OU structure for an Managed Microsoft AD directory, see What Gets Created in the Directory Service Administration\n Guide.
\nResets the password for any user in your Managed Microsoft AD or Simple AD\n directory. Disabled users will become enabled and can be authenticated following the API call.
\nYou can reset the password for any user in your directory with the following\n exceptions:
\nFor Simple AD, you cannot reset the password for any user that is a member of either\n the Domain Admins or Enterprise\n Admins group except for the administrator user.
\nFor Managed Microsoft AD, you can only reset the password for a user that is in an\n OU based off of the NetBIOS name that you typed when you created your directory. For\n example, you cannot reset the password for a user in the Amazon Web Services\n Reserved OU. For more information about the OU structure for an Managed Microsoft AD directory, see What Gets Created in the Directory Service Administration\n Guide.
\nRequired name of the tag. The string value can be Unicode characters and cannot be\n prefixed with \"aws:\". The string can contain only the set of Unicode letters, digits,\n white-space, '_', '.', '/', '=', '+', '-' (Java regex:\n \"^([\\\\p{L}\\\\p{Z}\\\\p{N}_.:/=+\\\\-]*)$\").
", + "smithy.api#documentation": "Required name of the tag. The string value can be Unicode characters and cannot be\n prefixed with \"aws:\". The string can contain only the set of Unicode letters, digits,\n white-space, '_', '.', '/', '=', '+', '-', ':', '@'(Java regex:\n \"^([\\\\p{L}\\\\p{Z}\\\\p{N}_.:/=+\\\\-]*)$\").
", "smithy.api#required": {} } }, "Value": { "target": "com.amazonaws.directoryservice#TagValue", "traits": { - "smithy.api#documentation": "The optional value of the tag. The string value can be Unicode characters. The string\n can contain only the set of Unicode letters, digits, white-space, '_', '.', '/', '=', '+', '-'\n (Java regex: \"^([\\\\p{L}\\\\p{Z}\\\\p{N}_.:/=+\\\\-]*)$\").
", + "smithy.api#documentation": "The optional value of the tag. The string value can be Unicode characters. The string\n can contain only the set of Unicode letters, digits, white-space, '_', '.', '/', '=', '+', '-', ':', '@'\n (Java regex: \"^([\\\\p{L}\\\\p{Z}\\\\p{N}_.:/=+\\\\-]*)$\").
", "smithy.api#required": {} } }