Updates SDK to v2.924.0

aws · Jun 8, 2021 · 411294e · 411294e
1 parent 5d089b0
commit 411294e
Show file tree

Hide file tree

Showing 19 changed files with 315 additions and 138 deletions.
diff --git a/.changes/2.924.0.json b/.changes/2.924.0.json
@@ -0,0 +1,17 @@
+[
+    {
+        "type": "feature",
+        "category": "FSx",
+        "description": "This release adds support for auditing end-user access to files, folders, and file shares using Windows event logs, enabling customers to meet their security and compliance needs."
+    },
+    {
+        "type": "feature",
+        "category": "Macie2",
+        "description": "This release of the Amazon Macie API introduces stricter validation of S3 object criteria for classification jobs."
+    },
+    {
+        "type": "feature",
+        "category": "ServiceCatalog",
+        "description": "increase max pagesize for List/Search apis"
+    }
+]
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,7 +1,12 @@
 # Changelog for AWS SDK for JavaScript
-<!--LATEST=2.923.0-->
+<!--LATEST=2.924.0-->
 <!--ENTRYINSERT-->
 
+## 2.924.0
+* feature: FSx: This release adds support for auditing end-user access to files, folders, and file shares using Windows event logs, enabling customers to meet their security and compliance needs.
+* feature: Macie2: This release of the Amazon Macie API introduces stricter validation of S3 object criteria for classification jobs.
+* feature: ServiceCatalog: increase max pagesize for List/Search apis
+
 ## 2.923.0
 * feature: EKS: Added updateConfig option that allows customers to control upgrade velocity in Managed Node Group.
 * feature: Glue: Add SampleSize variable to S3Target to enable s3-sampling feature through API.

diff --git a/README.md b/README.md
@@ -29,7 +29,7 @@ For release notes, see the [CHANGELOG](https://github.com/aws/aws-sdk-js/blob/ma
 To use the SDK in the browser, simply add the following script tag to your
 HTML pages:
 
-    <script src="https://sdk.amazonaws.com/js/aws-sdk-2.923.0.min.js"></script>
+    <script src="https://sdk.amazonaws.com/js/aws-sdk-2.924.0.min.js"></script>
 
 You can also build a custom browser SDK with your specified set of AWS services.
 This can allow you to reduce the SDK's size, specify different API versions of

diff --git a/apis/cognito-idp-2016-04-18.normal.json b/apis/cognito-idp-2016-04-18.normal.json
diff --git a/apis/fsx-2018-03-01.min.json b/apis/fsx-2018-03-01.min.json
@@ -126,11 +126,11 @@
         "members": {
           "Type": {},
           "Paths": {
-            "shape": "S2d"
+            "shape": "S2g"
           },
           "FileSystemId": {},
           "Report": {
-            "shape": "S2f"
+            "shape": "S2i"
           },
           "ClientRequestToken": {
             "idempotencyToken": true
@@ -144,7 +144,7 @@
         "type": "structure",
         "members": {
           "DataRepositoryTask": {
-            "shape": "S2j"
+            "shape": "S2m"
           }
         }
       },
@@ -171,17 +171,17 @@
             "shape": "S15"
           },
           "SecurityGroupIds": {
-            "shape": "S2t"
+            "shape": "S2w"
           },
           "Tags": {
             "shape": "Sj"
           },
           "KmsKeyId": {},
           "WindowsConfiguration": {
-            "shape": "S2v"
+            "shape": "S2y"
           },
           "LustreConfiguration": {
-            "shape": "S2y"
+            "shape": "S32"
           }
         }
       },
@@ -210,16 +210,16 @@
             "shape": "S15"
           },
           "SecurityGroupIds": {
-            "shape": "S2t"
+            "shape": "S2w"
           },
           "Tags": {
             "shape": "Sj"
           },
           "WindowsConfiguration": {
-            "shape": "S2v"
+            "shape": "S2y"
           },
           "LustreConfiguration": {
-            "shape": "S2y"
+            "shape": "S32"
           },
           "StorageType": {},
           "KmsKeyId": {}
@@ -391,7 +391,7 @@
           "DataRepositoryTasks": {
             "type": "list",
             "member": {
-              "shape": "S2j"
+              "shape": "S2m"
             }
           },
           "NextToken": {}
@@ -573,12 +573,15 @@
                 "members": {
                   "UserName": {},
                   "Password": {
-                    "shape": "S2x"
+                    "shape": "S30"
                   },
                   "DnsIps": {
                     "shape": "S1h"
                   }
                 }
+              },
+              "AuditLogConfiguration": {
+                "shape": "S31"
               }
             }
           },
@@ -752,6 +755,18 @@
             },
             "Aliases": {
               "shape": "S7"
+            },
+            "AuditLogConfiguration": {
+              "type": "structure",
+              "required": [
+                "FileAccessAuditLogLevel",
+                "FileShareAccessAuditLogLevel"
+              ],
+              "members": {
+                "FileAccessAuditLogLevel": {},
+                "FileShareAccessAuditLogLevel": {},
+                "AuditLogDestination": {}
+              }
             }
           }
         },
@@ -828,11 +843,11 @@
       "type": "list",
       "member": {}
     },
-    "S2d": {
+    "S2g": {
       "type": "list",
       "member": {}
     },
-    "S2f": {
+    "S2i": {
       "type": "structure",
       "required": [
         "Enabled"
@@ -846,7 +861,7 @@
         "Scope": {}
       }
     },
-    "S2j": {
+    "S2m": {
       "type": "structure",
       "required": [
         "TaskId",
@@ -874,7 +889,7 @@
         },
         "FileSystemId": {},
         "Paths": {
-          "shape": "S2d"
+          "shape": "S2g"
         },
         "FailureDetails": {
           "type": "structure",
@@ -900,15 +915,15 @@
           }
         },
         "Report": {
-          "shape": "S2f"
+          "shape": "S2i"
         }
       }
     },
-    "S2t": {
+    "S2w": {
       "type": "list",
       "member": {}
     },
-    "S2v": {
+    "S2y": {
       "type": "structure",
       "required": [
         "ThroughputCapacity"
@@ -929,7 +944,7 @@
             "FileSystemAdministratorsGroup": {},
             "UserName": {},
             "Password": {
-              "shape": "S2x"
+              "shape": "S30"
             },
             "DnsIps": {
               "shape": "S1h"
@@ -951,14 +966,29 @@
         },
         "Aliases": {
           "shape": "S4"
+        },
+        "AuditLogConfiguration": {
+          "shape": "S31"
         }
       }
     },
-    "S2x": {
+    "S30": {
       "type": "string",
       "sensitive": true
     },
-    "S2y": {
+    "S31": {
+      "type": "structure",
+      "required": [
+        "FileAccessAuditLogLevel",
+        "FileShareAccessAuditLogLevel"
+      ],
+      "members": {
+        "FileAccessAuditLogLevel": {},
+        "FileShareAccessAuditLogLevel": {},
+        "AuditLogDestination": {}
+      }
+    },
+    "S32": {
       "type": "structure",
       "members": {
         "WeeklyMaintenanceStartTime": {},

diff --git a/apis/fsx-2018-03-01.normal.json b/apis/fsx-2018-03-01.normal.json
@@ -616,7 +616,7 @@
           "shape": "ServiceLimitExceeded"
         }
       ],
-      "documentation": "<p>Use this operation to update the configuration of an existing Amazon FSx file system. You can update multiple properties in a single request.</p> <p>For Amazon FSx for Windows File Server file systems, you can update the following properties:</p> <ul> <li> <p>AutomaticBackupRetentionDays</p> </li> <li> <p>DailyAutomaticBackupStartTime</p> </li> <li> <p>SelfManagedActiveDirectoryConfiguration</p> </li> <li> <p>StorageCapacity</p> </li> <li> <p>ThroughputCapacity</p> </li> <li> <p>WeeklyMaintenanceStartTime</p> </li> </ul> <p>For Amazon FSx for Lustre file systems, you can update the following properties:</p> <ul> <li> <p>AutoImportPolicy</p> </li> <li> <p>AutomaticBackupRetentionDays</p> </li> <li> <p>DailyAutomaticBackupStartTime</p> </li> <li> <p>DataCompressionType</p> </li> <li> <p>StorageCapacity</p> </li> <li> <p>WeeklyMaintenanceStartTime</p> </li> </ul>"
+      "documentation": "<p>Use this operation to update the configuration of an existing Amazon FSx file system. You can update multiple properties in a single request.</p> <p>For Amazon FSx for Windows File Server file systems, you can update the following properties:</p> <ul> <li> <p>AuditLogConfiguration</p> </li> <li> <p>AutomaticBackupRetentionDays</p> </li> <li> <p>DailyAutomaticBackupStartTime</p> </li> <li> <p>SelfManagedActiveDirectoryConfiguration</p> </li> <li> <p>StorageCapacity</p> </li> <li> <p>ThroughputCapacity</p> </li> <li> <p>WeeklyMaintenanceStartTime</p> </li> </ul> <p>For Amazon FSx for Lustre file systems, you can update the following properties:</p> <ul> <li> <p>AutoImportPolicy</p> </li> <li> <p>AutomaticBackupRetentionDays</p> </li> <li> <p>DailyAutomaticBackupStartTime</p> </li> <li> <p>DataCompressionType</p> </li> <li> <p>StorageCapacity</p> </li> <li> <p>WeeklyMaintenanceStartTime</p> </li> </ul>"
     }
   },
   "shapes": {
@@ -1302,6 +1302,10 @@
         "Aliases": {
           "shape": "AlternateDNSNames",
           "documentation": "<p>An array of one or more DNS alias names that you want to associate with the Amazon FSx file system. Aliases allow you to use existing DNS names to access the data in your Amazon FSx file system. You can associate up to 50 aliases with a file system at any time. You can associate additional DNS aliases after you create the file system using the AssociateFileSystemAliases operation. You can remove DNS aliases from the file system after it is created using the DisassociateFileSystemAliases operation. You only need to specify the alias name in the request payload.</p> <p>For more information, see <a href=\"https://docs.aws.amazon.com/fsx/latest/WindowsGuide/managing-dns-aliases.html\">Working with DNS Aliases</a> and <a href=\"https://docs.aws.amazon.com/fsx/latest/WindowsGuide/walkthrough05-file-system-custom-CNAME.html\">Walkthrough 5: Using DNS aliases to access your file system</a>, including additional steps you must take to be able to access your file system using a DNS alias.</p> <p>An alias name has to meet the following requirements:</p> <ul> <li> <p>Formatted as a fully-qualified domain name (FQDN), <code>hostname.domain</code>, for example, <code>accounting.example.com</code>.</p> </li> <li> <p>Can contain alphanumeric characters, the underscore (_), and the hyphen (-).</p> </li> <li> <p>Cannot start or end with a hyphen.</p> </li> <li> <p>Can start with a numeric.</p> </li> </ul> <p>For DNS alias names, Amazon FSx stores alphabetic characters as lowercase letters (a-z), regardless of how you specify them: as uppercase letters, lowercase letters, or the corresponding letters in escape codes.</p>"
+        },
+        "AuditLogConfiguration": {
+          "shape": "WindowsAuditLogCreateConfiguration",
+          "documentation": "<p>The configuration that Amazon FSx for Windows File Server uses to audit and log user accesses of files, folders, and file shares on the Amazon FSx for Windows File Server file system.</p>"
         }
       },
       "documentation": "<p>The configuration object for the Microsoft Windows file system used in <code>CreateFileSystem</code> and <code>CreateFileSystemFromBackup</code> operations.</p>"
@@ -2096,6 +2100,12 @@
     "Flag": {
       "type": "boolean"
     },
+    "GeneralARN": {
+      "type": "string",
+      "max": 1024,
+      "min": 8,
+      "pattern": "^arn:[^:]{1,63}:[^:]{0,63}:[^:]{0,63}:(?:|\\d{12}):[^/].{0,1023}$"
+    },
     "IpAddress": {
       "type": "string",
       "max": 15,
@@ -2631,6 +2641,10 @@
         "SelfManagedActiveDirectoryConfiguration": {
           "shape": "SelfManagedActiveDirectoryConfigurationUpdates",
           "documentation": "<p>The configuration Amazon FSx uses to join the Windows File Server instance to the self-managed Microsoft AD directory. You cannot make a self-managed Microsoft AD update request if there is an existing self-managed Microsoft AD update request in progress.</p>"
+        },
+        "AuditLogConfiguration": {
+          "shape": "WindowsAuditLogCreateConfiguration",
+          "documentation": "<p>The configuration that Amazon FSx for Windows File Server uses to audit and log user accesses of files, folders, and file shares on the Amazon FSx for Windows File Server file system..</p>"
         }
       },
       "documentation": "<p>Updates the configuration for an existing Amazon FSx for Windows File Server file system. Amazon FSx only overwrites existing properties with non-null values provided in the request.</p>"
@@ -2649,6 +2663,59 @@
       "min": 7,
       "pattern": "^[1-7]:([01]\\d|2[0-3]):?([0-5]\\d)$"
     },
+    "WindowsAccessAuditLogLevel": {
+      "type": "string",
+      "enum": [
+        "DISABLED",
+        "SUCCESS_ONLY",
+        "FAILURE_ONLY",
+        "SUCCESS_AND_FAILURE"
+      ]
+    },
+    "WindowsAuditLogConfiguration": {
+      "type": "structure",
+      "required": [
+        "FileAccessAuditLogLevel",
+        "FileShareAccessAuditLogLevel"
+      ],
+      "members": {
+        "FileAccessAuditLogLevel": {
+          "shape": "WindowsAccessAuditLogLevel",
+          "documentation": "<p>Sets which attempt type is logged by Amazon FSx for file and folder accesses.</p> <ul> <li> <p> <code>SUCCESS_ONLY</code> - only successful attempts to access files or folders are logged.</p> </li> <li> <p> <code>FAILURE_ONLY</code> - only failed attempts to access files or folders are logged.</p> </li> <li> <p> <code>SUCCESS_AND_FAILURE</code> - both successful attempts and failed attempts to access files or folders are logged.</p> </li> <li> <p> <code>DISABLED</code> - access auditing of files and folders is turned off.</p> </li> </ul>"
+        },
+        "FileShareAccessAuditLogLevel": {
+          "shape": "WindowsAccessAuditLogLevel",
+          "documentation": "<p>Sets which attempt type is logged by Amazon FSx for file share accesses.</p> <ul> <li> <p> <code>SUCCESS_ONLY</code> - only successful attempts to access file shares are logged.</p> </li> <li> <p> <code>FAILURE_ONLY</code> - only failed attempts to access file shares are logged.</p> </li> <li> <p> <code>SUCCESS_AND_FAILURE</code> - both successful attempts and failed attempts to access file shares are logged.</p> </li> <li> <p> <code>DISABLED</code> - access auditing of file shares is turned off.</p> </li> </ul>"
+        },
+        "AuditLogDestination": {
+          "shape": "GeneralARN",
+          "documentation": "<p>The Amazon Resource Name (ARN) for the destination of the audit logs. The destination can be any Amazon CloudWatch Logs log group ARN or Amazon Kinesis Data Firehose delivery stream ARN.</p> <p>The name of the Amazon CloudWatch Logs log group must begin with the <code>/aws/fsx</code> prefix. The name of the Amazon Kinesis Data Firehouse delivery stream must begin with the <code>aws-fsx</code> prefix.</p> <p>The destination ARN (either CloudWatch Logs log group or Kinesis Data Firehose delivery stream) must be in the same AWS partition, AWS region, and AWS account as your Amazon FSx file system.</p>"
+        }
+      },
+      "documentation": "<p>The configuration that Amazon FSx for Windows File Server uses to audit and log user accesses of files, folders, and file shares on the Amazon FSx for Windows File Server file system. For more information, see <a href=\"https://docs.aws.amazon.com/fsx/latest/WindowsGuide/file-access-auditing.html\"> File access auditing</a>.</p>"
+    },
+    "WindowsAuditLogCreateConfiguration": {
+      "type": "structure",
+      "required": [
+        "FileAccessAuditLogLevel",
+        "FileShareAccessAuditLogLevel"
+      ],
+      "members": {
+        "FileAccessAuditLogLevel": {
+          "shape": "WindowsAccessAuditLogLevel",
+          "documentation": "<p>Sets which attempt type is logged by Amazon FSx for file and folder accesses.</p> <ul> <li> <p> <code>SUCCESS_ONLY</code> - only successful attempts to access files or folders are logged.</p> </li> <li> <p> <code>FAILURE_ONLY</code> - only failed attempts to access files or folders are logged.</p> </li> <li> <p> <code>SUCCESS_AND_FAILURE</code> - both successful attempts and failed attempts to access files or folders are logged.</p> </li> <li> <p> <code>DISABLED</code> - access auditing of files and folders is turned off.</p> </li> </ul>"
+        },
+        "FileShareAccessAuditLogLevel": {
+          "shape": "WindowsAccessAuditLogLevel",
+          "documentation": "<p>Sets which attempt type is logged by Amazon FSx for file share accesses.</p> <ul> <li> <p> <code>SUCCESS_ONLY</code> - only successful attempts to access file shares are logged.</p> </li> <li> <p> <code>FAILURE_ONLY</code> - only failed attempts to access file shares are logged.</p> </li> <li> <p> <code>SUCCESS_AND_FAILURE</code> - both successful attempts and failed attempts to access file shares are logged.</p> </li> <li> <p> <code>DISABLED</code> - access auditing of file shares is turned off.</p> </li> </ul>"
+        },
+        "AuditLogDestination": {
+          "shape": "GeneralARN",
+          "documentation": "<p>The Amazon Resource Name (ARN) that specifies the destination of the audit logs.</p> <p>The destination can be any Amazon CloudWatch Logs log group ARN or Amazon Kinesis Data Firehose delivery stream ARN, with the following requirements:</p> <ul> <li> <p>The destination ARN that you provide (either CloudWatch Logs log group or Kinesis Data Firehose delivery stream) must be in the same AWS partition, AWS region, and AWS account as your Amazon FSx file system.</p> </li> <li> <p>The name of the Amazon CloudWatch Logs log group must begin with the <code>/aws/fsx</code> prefix. The name of the Amazon Kinesis Data Firehouse delivery stream must begin with the <code>aws-fsx</code> prefix.</p> </li> <li> <p>If you do not provide a destination in <code>AuditLogDestination</code>, Amazon FSx will create and use a log stream in the CloudWatch Logs <code>/aws/fsx/windows</code> log group.</p> </li> <li> <p>If <code>AuditLogDestination</code> is provided and the resource does not exist, the request will fail with a <code>BadRequest</code> error.</p> </li> <li> <p>If <code>FileAccessAuditLogLevel</code> and <code>FileShareAccessAuditLogLevel</code> are both set to <code>DISABLED</code>, you cannot specify a destination in <code>AuditLogDestination</code>.</p> </li> </ul>"
+        }
+      },
+      "documentation": "<p>The Windows file access auditing configuration used when creating or updating an Amazon FSx for Windows File Server file system.</p>"
+    },
     "WindowsDeploymentType": {
       "type": "string",
       "enum": [
@@ -2709,6 +2776,10 @@
         },
         "Aliases": {
           "shape": "Aliases"
+        },
+        "AuditLogConfiguration": {
+          "shape": "WindowsAuditLogConfiguration",
+          "documentation": "<p>The configuration that Amazon FSx for Windows File Server uses to audit and log user accesses of files, folders, and file shares on the Amazon FSx for Windows File Server file system.</p>"
         }
       },
       "documentation": "<p>The configuration for this Microsoft Windows file system.</p>"

diff --git a/apis/macie2-2020-01-01.min.json b/apis/macie2-2020-01-01.min.json
@@ -2837,6 +2837,10 @@
           "position": {
             "locationName": "position",
             "type": "integer"
+          },
+          "clientToken": {
+            "locationName": "clientToken",
+            "idempotencyToken": true
           }
         },
         "required": [