diff --git a/.changes/1.35.12.json b/.changes/1.35.12.json new file mode 100644 index 0000000000..5cba34828b --- /dev/null +++ b/.changes/1.35.12.json @@ -0,0 +1,32 @@ +[ + { + "category": "``appsync``", + "description": "Adds new logging levels (INFO and DEBUG) for additional log output control", + "type": "api-change" + }, + { + "category": "``bedrock-agent``", + "description": "Add support for user metadata inside PromptVariant.", + "type": "api-change" + }, + { + "category": "``finspace``", + "description": "Updates Finspace documentation for smaller instances.", + "type": "api-change" + }, + { + "category": "``fis``", + "description": "This release adds safety levers, a new mechanism to stop all running experiments and prevent new experiments from starting.", + "type": "api-change" + }, + { + "category": "``logs``", + "description": "Update to support new APIs for delivery of logs from AWS services.", + "type": "api-change" + }, + { + "category": "``s3control``", + "description": "Amazon Simple Storage Service /S3 Access Grants / Features : This release launches new Access Grants API - ListCallerAccessGrants.", + "type": "api-change" + } +] \ No newline at end of file diff --git a/CHANGELOG.rst b/CHANGELOG.rst index e7997b217b..580a4a0734 100644 --- a/CHANGELOG.rst +++ b/CHANGELOG.rst @@ -2,6 +2,17 @@ CHANGELOG ========= +1.35.12 +======= + +* api-change:``appsync``: Adds new logging levels (INFO and DEBUG) for additional log output control +* api-change:``bedrock-agent``: Add support for user metadata inside PromptVariant. +* api-change:``finspace``: Updates Finspace documentation for smaller instances. +* api-change:``fis``: This release adds safety levers, a new mechanism to stop all running experiments and prevent new experiments from starting. +* api-change:``logs``: Update to support new APIs for delivery of logs from AWS services. +* api-change:``s3control``: Amazon Simple Storage Service /S3 Access Grants / Features : This release launches new Access Grants API - ListCallerAccessGrants. + + 1.35.11 ======= diff --git a/botocore/__init__.py b/botocore/__init__.py index c41e1f284c..1ae56e6567 100644 --- a/botocore/__init__.py +++ b/botocore/__init__.py @@ -16,7 +16,7 @@ import os import re -__version__ = '1.35.11' +__version__ = '1.35.12' class NullHandler(logging.Handler): diff --git a/botocore/data/appsync/2017-07-25/service-2.json b/botocore/data/appsync/2017-07-25/service-2.json index 184a7c7ab9..3cda40eb24 100644 --- a/botocore/data/appsync/2017-07-25/service-2.json +++ b/botocore/data/appsync/2017-07-25/service-2.json @@ -2797,7 +2797,9 @@ "enum":[ "NONE", "ERROR", - "ALL" + "ALL", + "INFO", + "DEBUG" ] }, "FlushApiCacheRequest":{ @@ -3905,7 +3907,7 @@ "members":{ "fieldLogLevel":{ "shape":"FieldLogLevel", - "documentation":"

The field logging level. Values can be NONE, ERROR, or ALL.

" + "documentation":"

The field logging level. Values can be NONE, ERROR, INFO, DEBUG, or ALL.

" }, "cloudWatchLogsRoleArn":{ "shape":"String", diff --git a/botocore/data/bedrock-agent/2023-06-05/service-2.json b/botocore/data/bedrock-agent/2023-06-05/service-2.json index 49b332451e..e1bc04b699 100644 --- a/botocore/data/bedrock-agent/2023-06-05/service-2.json +++ b/botocore/data/bedrock-agent/2023-06-05/service-2.json @@ -50,7 +50,7 @@ {"shape":"ConflictException"}, {"shape":"ServiceQuotaExceededException"} ], - "documentation":"

Creates an agent that orchestrates interactions between foundation models, data sources, software applications, user conversations, and APIs to carry out tasks to help customers.

", + "documentation":"

Creates an agent that orchestrates interactions between foundation models, data sources, software applications, user conversations, and APIs to carry out tasks to help customers.

", "idempotent":true }, "CreateAgentActionGroup":{ @@ -6042,7 +6042,7 @@ "documentation":"

The parsing strategy for the data source.

" } }, - "documentation":"

Settings for parsing document contents. By default, the service converts the contents of each document into text before splitting it into chunks. To improve processing of PDF files with tables and images, you can configure the data source to convert the pages of text into images and use a model to describe the contents of each page.

To use a model to parse PDF documents, set the parsing strategy to BEDROCK_FOUNDATION_MODEL and specify the model to use by ARN. You can also override the default parsing prompt with instructions for how to interpret images and tables in your documents. The following models are supported.

You can get the ARN of a model with the action. Standard model usage charges apply for the foundation model parsing strategy.

" + "documentation":"

Settings for parsing document contents. By default, the service converts the contents of each document into text before splitting it into chunks. To improve processing of PDF files with tables and images, you can configure the data source to convert the pages of text into images and use a model to describe the contents of each page.

To use a model to parse PDF documents, set the parsing strategy to BEDROCK_FOUNDATION_MODEL and specify the model to use by ARN. You can also override the default parsing prompt with instructions for how to interpret images and tables in your documents. The following models are supported.

You can get the ARN of a model with the ListFoundationModels action. Standard model usage charges apply for the foundation model parsing strategy.

" }, "ParsingPrompt":{ "type":"structure", @@ -6380,6 +6380,46 @@ "min":0, "sensitive":true }, + "PromptMetadataEntry":{ + "type":"structure", + "required":[ + "key", + "value" + ], + "members":{ + "key":{ + "shape":"PromptMetadataKey", + "documentation":"

The key of a metadata tag for a prompt variant.

" + }, + "value":{ + "shape":"PromptMetadataValue", + "documentation":"

The value of a metadata tag for a prompt variant.

" + } + }, + "documentation":"

Contains a key-value pair that defines a metadata tag and value to attach to a prompt variant. For more information, see Create a prompt using Prompt management.

", + "sensitive":true + }, + "PromptMetadataKey":{ + "type":"string", + "max":128, + "min":1, + "pattern":"^[a-zA-Z0-9\\s._:/=+@-]*$", + "sensitive":true + }, + "PromptMetadataList":{ + "type":"list", + "member":{"shape":"PromptMetadataEntry"}, + "max":50, + "min":0, + "sensitive":true + }, + "PromptMetadataValue":{ + "type":"string", + "max":1024, + "min":0, + "pattern":"^[a-zA-Z0-9\\s._:/=+@-]*$", + "sensitive":true + }, "PromptModelIdentifier":{ "type":"string", "max":2048, @@ -6522,6 +6562,10 @@ "shape":"PromptInferenceConfiguration", "documentation":"

Contains inference configurations for the prompt variant.

" }, + "metadata":{ + "shape":"PromptMetadataList", + "documentation":"

An array of objects, each containing a key-value pair that defines a metadata tag and value to attach to a prompt variant. For more information, see Create a prompt using Prompt management.

" + }, "modelId":{ "shape":"PromptModelIdentifier", "documentation":"

The unique identifier of the model with which to run inference on the prompt.

" diff --git a/botocore/data/endpoints.json b/botocore/data/endpoints.json index eb50706f93..73b271303c 100644 --- a/botocore/data/endpoints.json +++ b/botocore/data/endpoints.json @@ -21,7 +21,7 @@ "dnsSuffix" : "amazonaws.com", "partition" : "aws", "partitionName" : "AWS Standard", - "regionRegex" : "^(us|eu|ap|sa|ca|me|af|il)\\-\\w+\\-\\d+$", + "regionRegex" : "^(us|eu|ap|sa|ca|me|af|il|mx)\\-\\w+\\-\\d+$", "regions" : { "af-south-1" : { "description" : "Africa (Cape Town)" diff --git a/botocore/data/finspace/2021-03-12/service-2.json b/botocore/data/finspace/2021-03-12/service-2.json index 71509febcd..e1f9fe673c 100644 --- a/botocore/data/finspace/2021-03-12/service-2.json +++ b/botocore/data/finspace/2021-03-12/service-2.json @@ -5,12 +5,14 @@ "endpointPrefix":"finspace", "jsonVersion":"1.1", "protocol":"rest-json", + "protocols":["rest-json"], "serviceAbbreviation":"finspace", "serviceFullName":"FinSpace User Environment Management service", "serviceId":"finspace", "signatureVersion":"v4", "signingName":"finspace", - "uid":"finspace-2021-03-12" + "uid":"finspace-2021-03-12", + "auth":["aws.auth#sigv4"] }, "operations":{ "CreateEnvironment":{ @@ -1711,7 +1713,7 @@ }, "hostType":{ "shape":"KxHostType", - "documentation":"

The memory and CPU capabilities of the scaling group host on which FinSpace Managed kdb clusters will be placed.

You can add one of the following values:

" + "documentation":"

The memory and CPU capabilities of the scaling group host on which FinSpace Managed kdb clusters will be placed.

You can add one of the following values:

" }, "availabilityZoneId":{ "shape":"AvailabilityZoneId", @@ -2966,7 +2968,7 @@ }, "hostType":{ "shape":"KxHostType", - "documentation":"

The memory and CPU capabilities of the scaling group host on which FinSpace Managed kdb clusters will be placed.

It can have one of the following values:

" + "documentation":"

The memory and CPU capabilities of the scaling group host on which FinSpace Managed kdb clusters will be placed.

It can have one of the following values:

" }, "clusters":{ "shape":"KxClusterNameList", @@ -3887,7 +3889,7 @@ }, "hostType":{ "shape":"KxHostType", - "documentation":"

The memory and CPU capabilities of the scaling group host on which FinSpace Managed kdb clusters will be placed.

You can add one of the following values:

" + "documentation":"

The memory and CPU capabilities of the scaling group host on which FinSpace Managed kdb clusters will be placed.

You can add one of the following values:

" }, "clusters":{ "shape":"KxClusterNameList", diff --git a/botocore/data/fis/2020-12-01/service-2.json b/botocore/data/fis/2020-12-01/service-2.json index a0992745a9..f86d0f467d 100644 --- a/botocore/data/fis/2020-12-01/service-2.json +++ b/botocore/data/fis/2020-12-01/service-2.json @@ -139,6 +139,20 @@ ], "documentation":"

Gets information about the specified experiment template.

" }, + "GetSafetyLever":{ + "name":"GetSafetyLever", + "http":{ + "method":"GET", + "requestUri":"/safetyLevers/{id}", + "responseCode":200 + }, + "input":{"shape":"GetSafetyLeverRequest"}, + "output":{"shape":"GetSafetyLeverResponse"}, + "errors":[ + {"shape":"ResourceNotFoundException"} + ], + "documentation":"

Gets information about the specified safety lever.

" + }, "GetTargetAccountConfiguration":{ "name":"GetTargetAccountConfiguration", "http":{ @@ -351,6 +365,22 @@ ], "documentation":"

Updates the specified experiment template.

" }, + "UpdateSafetyLeverState":{ + "name":"UpdateSafetyLeverState", + "http":{ + "method":"PATCH", + "requestUri":"/safetyLevers/{id}/state", + "responseCode":200 + }, + "input":{"shape":"UpdateSafetyLeverStateRequest"}, + "output":{"shape":"UpdateSafetyLeverStateResponse"}, + "errors":[ + {"shape":"ValidationException"}, + {"shape":"ConflictException"}, + {"shape":"ResourceNotFoundException"} + ], + "documentation":"

Updates the specified safety lever state.

" + }, "UpdateTargetAccountConfiguration":{ "name":"UpdateTargetAccountConfiguration", "http":{ @@ -1120,7 +1150,8 @@ "completed", "stopping", "stopped", - "failed" + "failed", + "cancelled" ] }, "ExperimentStatusReason":{ @@ -1801,6 +1832,27 @@ } } }, + "GetSafetyLeverRequest":{ + "type":"structure", + "required":["id"], + "members":{ + "id":{ + "shape":"SafetyLeverId", + "documentation":"

The ID of the safety lever.

", + "location":"uri", + "locationName":"id" + } + } + }, + "GetSafetyLeverResponse":{ + "type":"structure", + "members":{ + "safetyLever":{ + "shape":"SafetyLever", + "documentation":"

Information about the safety lever.

" + } + } + }, "GetTargetAccountConfigurationRequest":{ "type":"structure", "required":[ @@ -2214,6 +2266,59 @@ "min":1, "pattern":"[\\s\\S]+" }, + "SafetyLever":{ + "type":"structure", + "members":{ + "id":{ + "shape":"SafetyLeverId", + "documentation":"

The ID of the safety lever.

" + }, + "arn":{ + "shape":"ResourceArn", + "documentation":"

The Amazon Resource Name (ARN) of the safety lever.

" + }, + "state":{ + "shape":"SafetyLeverState", + "documentation":"

The state of the safety lever.

" + } + }, + "documentation":"

Describes a safety lever.

" + }, + "SafetyLeverId":{ + "type":"string", + "max":64, + "pattern":"[\\S]+" + }, + "SafetyLeverState":{ + "type":"structure", + "members":{ + "status":{ + "shape":"SafetyLeverStatus", + "documentation":"

The state of the safety lever.

" + }, + "reason":{ + "shape":"SafetyLeverStatusReason", + "documentation":"

The reason for the state of the safety lever.

" + } + }, + "documentation":"

Describes the state of the safety lever.

" + }, + "SafetyLeverStatus":{ + "type":"string", + "enum":[ + "disengaged", + "engaged", + "engaging" + ] + }, + "SafetyLeverStatusInput":{ + "type":"string", + "enum":[ + "disengaged", + "engaged" + ] + }, + "SafetyLeverStatusReason":{"type":"string"}, "ServiceQuotaExceededException":{ "type":"structure", "members":{ @@ -2685,6 +2790,52 @@ "key":{"shape":"ExperimentTemplateTargetName"}, "value":{"shape":"UpdateExperimentTemplateTargetInput"} }, + "UpdateSafetyLeverStateInput":{ + "type":"structure", + "required":[ + "status", + "reason" + ], + "members":{ + "status":{ + "shape":"SafetyLeverStatusInput", + "documentation":"

The updated state of the safety lever.

" + }, + "reason":{ + "shape":"SafetyLeverStatusReason", + "documentation":"

The reason for updating the state of the safety lever.

" + } + }, + "documentation":"

Specifies a state for a safety lever.

" + }, + "UpdateSafetyLeverStateRequest":{ + "type":"structure", + "required":[ + "id", + "state" + ], + "members":{ + "id":{ + "shape":"SafetyLeverId", + "documentation":"

The ID of the safety lever.

", + "location":"uri", + "locationName":"id" + }, + "state":{ + "shape":"UpdateSafetyLeverStateInput", + "documentation":"

The state of the safety lever.

" + } + } + }, + "UpdateSafetyLeverStateResponse":{ + "type":"structure", + "members":{ + "safetyLever":{ + "shape":"SafetyLever", + "documentation":"

Information about the safety lever.

" + } + } + }, "UpdateTargetAccountConfigurationRequest":{ "type":"structure", "required":[ diff --git a/botocore/data/logs/2014-03-28/paginators-1.json b/botocore/data/logs/2014-03-28/paginators-1.json index cdbd4cf4c7..e62c55bcc5 100644 --- a/botocore/data/logs/2014-03-28/paginators-1.json +++ b/botocore/data/logs/2014-03-28/paginators-1.json @@ -86,6 +86,12 @@ "limit_key": "limit", "output_token": "nextToken", "result_key": "anomalyDetectors" + }, + "DescribeConfigurationTemplates": { + "input_token": "nextToken", + "limit_key": "limit", + "output_token": "nextToken", + "result_key": "configurationTemplates" } } } diff --git a/botocore/data/logs/2014-03-28/service-2.json b/botocore/data/logs/2014-03-28/service-2.json index dfbbad7726..f92baf9c9a 100644 --- a/botocore/data/logs/2014-03-28/service-2.json +++ b/botocore/data/logs/2014-03-28/service-2.json @@ -375,6 +375,22 @@ ], "documentation":"

Returns a list of all CloudWatch Logs account policies in the account.

" }, + "DescribeConfigurationTemplates":{ + "name":"DescribeConfigurationTemplates", + "http":{ + "method":"POST", + "requestUri":"/" + }, + "input":{"shape":"DescribeConfigurationTemplatesRequest"}, + "output":{"shape":"DescribeConfigurationTemplatesResponse"}, + "errors":[ + {"shape":"ServiceUnavailableException"}, + {"shape":"ValidationException"}, + {"shape":"ResourceNotFoundException"}, + {"shape":"ThrottlingException"} + ], + "documentation":"

Use this operation to return the valid and default values that are used when creating delivery sources, delivery destinations, and deliveries. For more information about deliveries, see CreateDelivery.

" + }, "DescribeDeliveries":{ "name":"DescribeDeliveries", "http":{ @@ -1153,6 +1169,24 @@ ], "documentation":"

Use this operation to suppress anomaly detection for a specified anomaly or pattern. If you suppress an anomaly, CloudWatch Logs won’t report new occurrences of that anomaly and won't update that anomaly with new data. If you suppress a pattern, CloudWatch Logs won’t report any anomalies related to that pattern.

You must specify either anomalyId or patternId, but you can't specify both parameters in the same operation.

If you have previously used this operation to suppress detection of a pattern or anomaly, you can use it again to cause CloudWatch Logs to end the suppression. To do this, use this operation and specify the anomaly or pattern to stop suppressing, and omit the suppressionType and suppressionPeriod parameters.

" }, + "UpdateDeliveryConfiguration":{ + "name":"UpdateDeliveryConfiguration", + "http":{ + "method":"POST", + "requestUri":"/" + }, + "input":{"shape":"UpdateDeliveryConfigurationRequest"}, + "output":{"shape":"UpdateDeliveryConfigurationResponse"}, + "errors":[ + {"shape":"ServiceUnavailableException"}, + {"shape":"ConflictException"}, + {"shape":"ResourceNotFoundException"}, + {"shape":"ValidationException"}, + {"shape":"AccessDeniedException"}, + {"shape":"ThrottlingException"} + ], + "documentation":"

Use this operation to update the configuration of a delivery to change either the S3 path pattern or the format of the delivered logs. You can't use this operation to change the source or destination of the delivery.

" + }, "UpdateLogAnomalyDetector":{ "name":"UpdateLogAnomalyDetector", "http":{ @@ -1232,6 +1266,15 @@ "documentation":"

A structure that contains information about one CloudWatch Logs account policy.

" }, "AccountPolicyDocument":{"type":"string"}, + "AllowedActionForAllowVendedLogsDeliveryForResource":{"type":"string"}, + "AllowedFieldDelimiters":{ + "type":"list", + "member":{"shape":"FieldDelimiter"} + }, + "AllowedFields":{ + "type":"list", + "member":{"shape":"RecordField"} + }, "AmazonResourceName":{ "type":"string", "max":1011, @@ -1448,6 +1491,74 @@ "min":36, "pattern":"\\S{36,128}" }, + "ConfigurationTemplate":{ + "type":"structure", + "members":{ + "service":{ + "shape":"Service", + "documentation":"

A string specifying which service this configuration template applies to. For more information about supported services see Enable logging from Amazon Web Services services..

" + }, + "logType":{ + "shape":"LogType", + "documentation":"

A string specifying which log type this configuration template applies to.

" + }, + "resourceType":{ + "shape":"ResourceType", + "documentation":"

A string specifying which resource type this configuration template applies to.

" + }, + "deliveryDestinationType":{ + "shape":"DeliveryDestinationType", + "documentation":"

A string specifying which destination type this configuration template applies to.

" + }, + "defaultDeliveryConfigValues":{ + "shape":"ConfigurationTemplateDeliveryConfigValues", + "documentation":"

A mapping that displays the default value of each property within a delivery’s configuration, if it is not specified in the request.

" + }, + "allowedFields":{ + "shape":"AllowedFields", + "documentation":"

The allowed fields that a caller can use in the recordFields parameter of a CreateDelivery or UpdateDeliveryConfiguration operation.

" + }, + "allowedOutputFormats":{ + "shape":"OutputFormats", + "documentation":"

The list of delivery destination output formats that are supported by this log source.

" + }, + "allowedActionForAllowVendedLogsDeliveryForResource":{ + "shape":"AllowedActionForAllowVendedLogsDeliveryForResource", + "documentation":"

The action permissions that a caller needs to have to be able to successfully create a delivery source on the desired resource type when calling PutDeliverySource.

" + }, + "allowedFieldDelimiters":{ + "shape":"AllowedFieldDelimiters", + "documentation":"

The valid values that a caller can use as field delimiters when calling CreateDelivery or UpdateDeliveryConfiguration on a delivery that delivers in Plain, W3C, or Raw format.

" + }, + "allowedSuffixPathFields":{ + "shape":"RecordFields", + "documentation":"

The list of variable fields that can be used in the suffix path of a delivery that delivers to an S3 bucket.

" + } + }, + "documentation":"

A structure containing information about the deafult settings and available settings that you can use to configure a delivery or a delivery destination.

" + }, + "ConfigurationTemplateDeliveryConfigValues":{ + "type":"structure", + "members":{ + "recordFields":{ + "shape":"RecordFields", + "documentation":"

The default record fields that will be delivered when a list of record fields is not provided in a CreateDelivery operation.

" + }, + "fieldDelimiter":{ + "shape":"FieldDelimiter", + "documentation":"

The default field delimiter that is used in a CreateDelivery operation when the field delimiter is not specified in that operation. The field delimiter is used only when the final output delivery is in Plain, W3C, or Raw format.

" + }, + "s3DeliveryConfiguration":{ + "shape":"S3DeliveryConfiguration", + "documentation":"

The delivery parameters that are used when you create a delivery to a delivery destination that is an S3 Bucket.

" + } + }, + "documentation":"

This structure contains the default values that are used for each configuration parameter when you use CreateDelivery to create a deliver under the current service type, resource type, and log type.

" + }, + "ConfigurationTemplates":{ + "type":"list", + "member":{"shape":"ConfigurationTemplate"} + }, "ConflictException":{ "type":"structure", "members":{ @@ -1471,6 +1582,18 @@ "shape":"Arn", "documentation":"

The ARN of the delivery destination to use for this delivery.

" }, + "recordFields":{ + "shape":"RecordFields", + "documentation":"

The list of record fields to be delivered to the destination, in order. If the delivery’s log source has mandatory fields, they must be included in this list.

" + }, + "fieldDelimiter":{ + "shape":"FieldDelimiter", + "documentation":"

The field delimiter to use between record fields when the final output format of a delivery is in Plain, W3C, or Raw format.

" + }, + "s3DeliveryConfiguration":{ + "shape":"S3DeliveryConfiguration", + "documentation":"

This structure contains parameters that are valid only when the delivery’s delivery destination is an S3 bucket.

" + }, "tags":{ "shape":"Tags", "documentation":"

An optional list of key-value pairs to associate with the resource.

For more information about tagging, see Tagging Amazon Web Services resources

" @@ -1852,6 +1975,18 @@ "shape":"DeliveryDestinationType", "documentation":"

Displays whether the delivery destination associated with this delivery is CloudWatch Logs, Amazon S3, or Firehose.

" }, + "recordFields":{ + "shape":"RecordFields", + "documentation":"

The record fields used in this delivery.

" + }, + "fieldDelimiter":{ + "shape":"FieldDelimiter", + "documentation":"

The field delimiter that is used between record fields when the final output format of a delivery is in Plain, W3C, or Raw format.

" + }, + "s3DeliveryConfiguration":{ + "shape":"S3DeliveryConfiguration", + "documentation":"

This structure contains delivery configurations that apply only when the delivery destination resource is an S3 bucket.

" + }, "tags":{ "shape":"Tags", "documentation":"

The tags that have been assigned to this delivery.

" @@ -1919,6 +2054,12 @@ "FH" ] }, + "DeliveryDestinationTypes":{ + "type":"list", + "member":{"shape":"DeliveryDestinationType"}, + "max":3, + "min":1 + }, "DeliveryDestinations":{ "type":"list", "member":{"shape":"DeliveryDestination"} @@ -1969,6 +2110,11 @@ "type":"list", "member":{"shape":"DeliverySource"} }, + "DeliverySuffixPath":{ + "type":"string", + "max":256, + "min":1 + }, "Descending":{"type":"boolean"}, "DescribeAccountPoliciesRequest":{ "type":"structure", @@ -1997,6 +2143,42 @@ } } }, + "DescribeConfigurationTemplatesRequest":{ + "type":"structure", + "members":{ + "service":{ + "shape":"Service", + "documentation":"

Use this parameter to filter the response to include only the configuration templates that apply to the Amazon Web Services service that you specify here.

" + }, + "logTypes":{ + "shape":"LogTypes", + "documentation":"

Use this parameter to filter the response to include only the configuration templates that apply to the log types that you specify here.

" + }, + "resourceTypes":{ + "shape":"ResourceTypes", + "documentation":"

Use this parameter to filter the response to include only the configuration templates that apply to the resource types that you specify here.

" + }, + "deliveryDestinationTypes":{ + "shape":"DeliveryDestinationTypes", + "documentation":"

Use this parameter to filter the response to include only the configuration templates that apply to the delivery destination types that you specify here.

" + }, + "nextToken":{"shape":"NextToken"}, + "limit":{ + "shape":"DescribeLimit", + "documentation":"

Use this parameter to limit the number of configuration templates that are returned in the response.

" + } + } + }, + "DescribeConfigurationTemplatesResponse":{ + "type":"structure", + "members":{ + "configurationTemplates":{ + "shape":"ConfigurationTemplates", + "documentation":"

An array of objects, where each object describes one configuration template that matches the filters that you specified in the request.

" + }, + "nextToken":{"shape":"NextToken"} + } + }, "DescribeDeliveriesRequest":{ "type":"structure", "members":{ @@ -2450,14 +2632,14 @@ "members":{ "keyAttributes":{ "shape":"EntityKeyAttributes", - "documentation":"

Reserved for future use.

" + "documentation":"

Reserved for internal use.

" }, "attributes":{ "shape":"EntityAttributes", - "documentation":"

Reserved for future use.

" + "documentation":"

Reserved for internal use.

" } }, - "documentation":"

Reserved for future use.

" + "documentation":"

Reserved for internal use.

" }, "EntityAttributes":{ "type":"map", @@ -2644,6 +2826,16 @@ "value":{"shape":"Value"} }, "Field":{"type":"string"}, + "FieldDelimiter":{ + "type":"string", + "max":5, + "min":0 + }, + "FieldHeader":{ + "type":"string", + "max":64, + "min":1 + }, "FilterCount":{"type":"integer"}, "FilterLogEventsRequest":{ "type":"structure", @@ -3510,6 +3702,12 @@ "min":1, "pattern":"[\\w]*" }, + "LogTypes":{ + "type":"list", + "member":{"shape":"LogType"}, + "max":10, + "min":1 + }, "MalformedQueryException":{ "type":"structure", "members":{ @@ -3654,6 +3852,10 @@ "parquet" ] }, + "OutputFormats":{ + "type":"list", + "member":{"shape":"OutputFormat"} + }, "OutputLogEvent":{ "type":"structure", "members":{ @@ -3997,7 +4199,7 @@ }, "entity":{ "shape":"Entity", - "documentation":"

Reserved for future use.

" + "documentation":"

Reserved for internal use.

" } } }, @@ -4014,7 +4216,7 @@ }, "rejectedEntityInfo":{ "shape":"RejectedEntityInfo", - "documentation":"

Reserved for future use.

" + "documentation":"

Reserved for internal use.

" } } }, @@ -4303,16 +4505,36 @@ "max":10000, "min":0 }, + "RecordField":{ + "type":"structure", + "members":{ + "name":{ + "shape":"FieldHeader", + "documentation":"

The name to use when specifying this record field in a CreateDelivery or UpdateDeliveryConfiguration operation.

" + }, + "mandatory":{ + "shape":"Boolean", + "documentation":"

If this is true, the record field must be present in the recordFields parameter provided to a CreateDelivery or UpdateDeliveryConfiguration operation.

" + } + }, + "documentation":"

A structure that represents a valid record field header and whether it is mandatory.

" + }, + "RecordFields":{ + "type":"list", + "member":{"shape":"FieldHeader"}, + "max":128, + "min":0 + }, "RejectedEntityInfo":{ "type":"structure", "required":["errorType"], "members":{ "errorType":{ "shape":"EntityRejectionErrorType", - "documentation":"

Reserved for future use.

" + "documentation":"

Reserved for internal use.

" } }, - "documentation":"

Reserved for future use.

" + "documentation":"

Reserved for internal use.

" }, "RejectedLogEventsInfo":{ "type":"structure", @@ -4383,6 +4605,18 @@ }, "documentation":"

A policy enabling one or more entities to put logs to a log group in this account.

" }, + "ResourceType":{ + "type":"string", + "max":255, + "min":1, + "pattern":"[\\w-_]*" + }, + "ResourceTypes":{ + "type":"list", + "member":{"shape":"ResourceType"}, + "max":10, + "min":1 + }, "ResultField":{ "type":"structure", "members":{ @@ -4405,6 +4639,21 @@ "type":"string", "min":1 }, + "S3DeliveryConfiguration":{ + "type":"structure", + "members":{ + "suffixPath":{ + "shape":"DeliverySuffixPath", + "documentation":"

This string allows re-configuring the S3 object prefix to contain either static or variable sections. The valid variables to use in the suffix path will vary by each log source. See ConfigurationTemplate$allowedSuffixPathFields for more info on what values are supported in the suffix path for each log source.

" + }, + "enableHiveCompatiblePath":{ + "shape":"Boolean", + "documentation":"

This parameter causes the S3 objects that contain delivered logs to use a prefix structure that allows for integration with Apache Hive.

", + "box":true + } + }, + "documentation":"

This structure contains delivery configurations that apply only when the delivery destination resource is an S3 bucket.

" + }, "Scope":{ "type":"string", "enum":["ALL"] @@ -4436,7 +4685,7 @@ "type":"string", "max":255, "min":1, - "pattern":"[\\w]*" + "pattern":"[\\w_-]*" }, "ServiceQuotaExceededException":{ "type":"structure", @@ -4916,6 +5165,33 @@ } } }, + "UpdateDeliveryConfigurationRequest":{ + "type":"structure", + "required":["id"], + "members":{ + "id":{ + "shape":"DeliveryId", + "documentation":"

The ID of the delivery to be updated by this request.

" + }, + "recordFields":{ + "shape":"RecordFields", + "documentation":"

The list of record fields to be delivered to the destination, in order. If the delivery’s log source has mandatory fields, they must be included in this list.

" + }, + "fieldDelimiter":{ + "shape":"FieldDelimiter", + "documentation":"

The field delimiter to use between record fields when the final output format of a delivery is in Plain, W3C, or Raw format.

" + }, + "s3DeliveryConfiguration":{ + "shape":"S3DeliveryConfiguration", + "documentation":"

This structure contains parameters that are valid only when the delivery’s delivery destination is an S3 bucket.

" + } + } + }, + "UpdateDeliveryConfigurationResponse":{ + "type":"structure", + "members":{ + } + }, "UpdateLogAnomalyDetectorRequest":{ "type":"structure", "required":[ diff --git a/botocore/data/partitions.json b/botocore/data/partitions.json index 712d31e3fe..a2f0680888 100644 --- a/botocore/data/partitions.json +++ b/botocore/data/partitions.json @@ -9,7 +9,7 @@ "supportsDualStack" : true, "supportsFIPS" : true }, - "regionRegex" : "^(us|eu|ap|sa|ca|me|af|il)\\-\\w+\\-\\d+$", + "regionRegex" : "^(us|eu|ap|sa|ca|me|af|il|mx)\\-\\w+\\-\\d+$", "regions" : { "af-south-1" : { "description" : "Africa (Cape Town)" diff --git a/botocore/data/s3control/2018-08-20/paginators-1.json b/botocore/data/s3control/2018-08-20/paginators-1.json index 873eb23bcf..b21387425e 100644 --- a/botocore/data/s3control/2018-08-20/paginators-1.json +++ b/botocore/data/s3control/2018-08-20/paginators-1.json @@ -5,6 +5,12 @@ "output_token": "NextToken", "limit_key": "MaxResults", "result_key": "ObjectLambdaAccessPointList" + }, + "ListCallerAccessGrants": { + "input_token": "NextToken", + "output_token": "NextToken", + "limit_key": "MaxResults", + "result_key": "CallerAccessGrantsList" } } } diff --git a/botocore/data/s3control/2018-08-20/service-2.json b/botocore/data/s3control/2018-08-20/service-2.json index 080d0aae70..9a18ab4c16 100644 --- a/botocore/data/s3control/2018-08-20/service-2.json +++ b/botocore/data/s3control/2018-08-20/service-2.json @@ -4,11 +4,13 @@ "apiVersion":"2018-08-20", "endpointPrefix":"s3-control", "protocol":"rest-xml", + "protocols":["rest-xml"], "serviceFullName":"AWS S3 Control", "serviceId":"S3 Control", "signatureVersion":"s3v4", "signingName":"s3", - "uid":"s3control-2018-08-20" + "uid":"s3control-2018-08-20", + "auth":["aws.auth#sigv4"] }, "operations":{ "AssociateAccessGrantsIdentityCenter":{ @@ -600,7 +602,7 @@ }, "input":{"shape":"GetAccessGrantsInstanceRequest"}, "output":{"shape":"GetAccessGrantsInstanceResult"}, - "documentation":"

Retrieves the S3 Access Grants instance for a Region in your account.

Permissions

You must have the s3:GetAccessGrantsInstance permission to use this operation.

", + "documentation":"

Retrieves the S3 Access Grants instance for a Region in your account.

Permissions

You must have the s3:GetAccessGrantsInstance permission to use this operation.

GetAccessGrantsInstance is not supported for cross-account access. You can only call the API from the account that owns the S3 Access Grants instance.

", "endpoint":{ "hostPrefix":"{AccountId}." }, @@ -1124,6 +1126,23 @@ "RequiresAccountId":{"value":true} } }, + "ListCallerAccessGrants":{ + "name":"ListCallerAccessGrants", + "http":{ + "method":"GET", + "requestUri":"/v20180820/accessgrantsinstance/caller/grants" + }, + "input":{"shape":"ListCallerAccessGrantsRequest"}, + "output":{"shape":"ListCallerAccessGrantsResult"}, + "documentation":"

Returns a list of the access grants that were given to the caller using S3 Access Grants and that allow the caller to access the S3 data of the Amazon Web Services account specified in the request.

Permissions

You must have the s3:ListCallerAccessGrants permission to use this operation.

", + "endpoint":{ + "hostPrefix":"{AccountId}." + }, + "httpChecksumRequired":true, + "staticContextParams":{ + "RequiresAccountId":{"value":true} + } + }, "ListJobs":{ "name":"ListJobs", "http":{ @@ -1746,7 +1765,7 @@ }, "VpcConfiguration":{ "shape":"VpcConfiguration", - "documentation":"

The virtual private cloud (VPC) configuration for this access point, if one exists.

This element is empty if this access point is an Amazon S3 on Outposts access point that is used by other Amazon Web Services.

" + "documentation":"

The virtual private cloud (VPC) configuration for this access point, if one exists.

This element is empty if this access point is an Amazon S3 on Outposts access point that is used by other Amazon Web Servicesservices.

" }, "Bucket":{ "shape":"BucketName", @@ -1859,7 +1878,7 @@ "members":{ "AccountId":{ "shape":"AccountId", - "documentation":"

The ID of the Amazon Web Services account that is making this request.

", + "documentation":"

The Amazon Web Services account ID of the S3 Access Grants instance.

", "contextParam":{"name":"AccountId"}, "hostLabel":true, "location":"header", @@ -2087,6 +2106,13 @@ "locationName":"Arn" } }, + "CallerAccessGrantsList":{ + "type":"list", + "member":{ + "shape":"ListCallerAccessGrantsEntry", + "locationName":"AccessGrant" + } + }, "CloudWatchMetrics":{ "type":"structure", "required":["IsEnabled"], @@ -2118,7 +2144,7 @@ "members":{ "AccountId":{ "shape":"AccountId", - "documentation":"

The ID of the Amazon Web Services account that is making this request.

", + "documentation":"

The Amazon Web Services account ID of the S3 Access Grants instance.

", "contextParam":{"name":"AccountId"}, "hostLabel":true, "location":"header", @@ -2201,7 +2227,7 @@ "members":{ "AccountId":{ "shape":"AccountId", - "documentation":"

The ID of the Amazon Web Services account that is making this request.

", + "documentation":"

The Amazon Web Services account ID of the S3 Access Grants instance.

", "contextParam":{"name":"AccountId"}, "hostLabel":true, "location":"header", @@ -2230,11 +2256,21 @@ }, "AccessGrantsInstanceArn":{ "shape":"AccessGrantsInstanceArn", - "documentation":"

The Amazon Resource Name (ARN) of the S3 Access Grants instance.

" + "documentation":"

The Amazon Resource Name (ARN) of the Amazon Web Services IAM Identity Center instance that you are associating with your S3 Access Grants instance. An IAM Identity Center instance is your corporate identity directory that you added to the IAM Identity Center. You can use the ListInstances API operation to retrieve a list of your Identity Center instances and their ARNs.

" }, "IdentityCenterArn":{ "shape":"IdentityCenterArn", - "documentation":"

If you associated your S3 Access Grants instance with an Amazon Web Services IAM Identity Center instance, this field returns the Amazon Resource Name (ARN) of the IAM Identity Center instance application; a subresource of the original Identity Center instance passed in the request. S3 Access Grants creates this Identity Center application for this specific S3 Access Grants instance.

" + "documentation":"

If you associated your S3 Access Grants instance with an Amazon Web Services IAM Identity Center instance, this field returns the Amazon Resource Name (ARN) of the IAM Identity Center instance application; a subresource of the original Identity Center instance. S3 Access Grants creates this Identity Center application for the specific S3 Access Grants instance.

", + "deprecated":true, + "deprecatedMessage":"IdentityCenterArn has been deprecated. Use IdentityCenterInstanceArn or IdentityCenterApplicationArn." + }, + "IdentityCenterInstanceArn":{ + "shape":"IdentityCenterArn", + "documentation":"

The Amazon Resource Name (ARN) of the Amazon Web Services IAM Identity Center instance that you are associating with your S3 Access Grants instance. An IAM Identity Center instance is your corporate identity directory that you added to the IAM Identity Center. You can use the ListInstances API operation to retrieve a list of your Identity Center instances and their ARNs.

" + }, + "IdentityCenterApplicationArn":{ + "shape":"IdentityCenterApplicationArn", + "documentation":"

If you associated your S3 Access Grants instance with an Amazon Web Services IAM Identity Center instance, this field returns the Amazon Resource Name (ARN) of the IAM Identity Center instance application; a subresource of the original Identity Center instance. S3 Access Grants creates this Identity Center application for the specific S3 Access Grants instance.

" } } }, @@ -2248,7 +2284,7 @@ "members":{ "AccountId":{ "shape":"AccountId", - "documentation":"

The ID of the Amazon Web Services account that is making this request.

", + "documentation":"

The Amazon Web Services account ID of the S3 Access Grants instance.

", "contextParam":{"name":"AccountId"}, "hostLabel":true, "location":"header", @@ -2672,7 +2708,7 @@ "members":{ "AccountId":{ "shape":"AccountId", - "documentation":"

The ID of the Amazon Web Services account that is making this request.

", + "documentation":"

The Amazon Web Services account ID of the S3 Access Grants instance.

", "contextParam":{"name":"AccountId"}, "hostLabel":true, "location":"header", @@ -2692,7 +2728,7 @@ "members":{ "AccountId":{ "shape":"AccountId", - "documentation":"

The ID of the Amazon Web Services account that is making this request.

", + "documentation":"

The Amazon Web Services account ID of the S3 Access Grants instance.

", "contextParam":{"name":"AccountId"}, "hostLabel":true, "location":"header", @@ -2706,7 +2742,7 @@ "members":{ "AccountId":{ "shape":"AccountId", - "documentation":"

The ID of the Amazon Web Services account that is making this request.

", + "documentation":"

The Amazon Web Services account ID of the S3 Access Grants instance.

", "contextParam":{"name":"AccountId"}, "hostLabel":true, "location":"header", @@ -2723,7 +2759,7 @@ "members":{ "AccountId":{ "shape":"AccountId", - "documentation":"

The ID of the Amazon Web Services account that is making this request.

", + "documentation":"

The Amazon Web Services account ID of the S3 Access Grants instance.

", "contextParam":{"name":"AccountId"}, "hostLabel":true, "location":"header", @@ -3247,7 +3283,7 @@ "members":{ "AccountId":{ "shape":"AccountId", - "documentation":"

The ID of the Amazon Web Services account that is making this request.

", + "documentation":"

The Amazon Web Services account ID of the S3 Access Grants instance.

", "contextParam":{"name":"AccountId"}, "hostLabel":true, "location":"header", @@ -3270,7 +3306,7 @@ "box":true } }, - "documentation":"

Specifies encryption-related information for an Amazon S3 bucket that is a destination for replicated objects.

This is not supported by Amazon S3 on Outposts buckets.

" + "documentation":"

Specifies encryption-related information for an Amazon S3 bucket that is a destination for replicated objects. If you're specifying a customer managed KMS key, we recommend using a fully qualified KMS key ARN. If you use a KMS key alias instead, then KMS resolves the key within the requester’s account. This behavior can result in data that's encrypted with a KMS key that belongs to the requester, and not the bucket owner.

This is not supported by Amazon S3 on Outposts buckets.

" }, "Endpoints":{ "type":"map", @@ -3375,7 +3411,7 @@ "members":{ "AccountId":{ "shape":"AccountId", - "documentation":"

The ID of the Amazon Web Services account that is making this request.

", + "documentation":"

The Amazon Web Services account ID of the S3 Access Grants instance.

", "contextParam":{"name":"AccountId"}, "hostLabel":true, "location":"header", @@ -3472,7 +3508,7 @@ "members":{ "AccountId":{ "shape":"AccountId", - "documentation":"

The ID of the Amazon Web Services account that is making this request.

", + "documentation":"

The Amazon Web Services account ID of the S3 Access Grants instance.

", "contextParam":{"name":"AccountId"}, "hostLabel":true, "location":"header", @@ -3486,7 +3522,7 @@ "members":{ "AccountId":{ "shape":"AccountId", - "documentation":"

The ID of the Amazon Web Services account that is making this request.

", + "documentation":"

The Amazon Web Services account ID of the S3 Access Grants instance.

", "contextParam":{"name":"AccountId"}, "hostLabel":true, "location":"header", @@ -3524,7 +3560,17 @@ }, "IdentityCenterArn":{ "shape":"IdentityCenterArn", - "documentation":"

If you associated your S3 Access Grants instance with an Amazon Web Services IAM Identity Center instance, this field returns the Amazon Resource Name (ARN) of the Amazon Web Services IAM Identity Center instance application; a subresource of the original Identity Center instance. S3 Access Grants creates this Identity Center application for the specific S3 Access Grants instance.

" + "documentation":"

If you associated your S3 Access Grants instance with an Amazon Web Services IAM Identity Center instance, this field returns the Amazon Resource Name (ARN) of the IAM Identity Center instance application; a subresource of the original Identity Center instance. S3 Access Grants creates this Identity Center application for the specific S3 Access Grants instance.

", + "deprecated":true, + "deprecatedMessage":"IdentityCenterArn has been deprecated. Use IdentityCenterInstanceArn or IdentityCenterApplicationArn." + }, + "IdentityCenterInstanceArn":{ + "shape":"IdentityCenterArn", + "documentation":"

The Amazon Resource Name (ARN) of the Amazon Web Services IAM Identity Center instance that you are associating with your S3 Access Grants instance. An IAM Identity Center instance is your corporate identity directory that you added to the IAM Identity Center. You can use the ListInstances API operation to retrieve a list of your Identity Center instances and their ARNs.

" + }, + "IdentityCenterApplicationArn":{ + "shape":"IdentityCenterApplicationArn", + "documentation":"

If you associated your S3 Access Grants instance with an Amazon Web Services IAM Identity Center instance, this field returns the Amazon Resource Name (ARN) of the IAM Identity Center instance application; a subresource of the original Identity Center instance. S3 Access Grants creates this Identity Center application for the specific S3 Access Grants instance.

" }, "CreatedAt":{ "shape":"CreationTimestamp", @@ -3541,7 +3587,7 @@ "members":{ "AccountId":{ "shape":"AccountId", - "documentation":"

The ID of the Amazon Web Services account that is making this request.

", + "documentation":"

The Amazon Web Services account ID of the S3 Access Grants instance.

", "contextParam":{"name":"AccountId"}, "hostLabel":true, "location":"header", @@ -3824,7 +3870,7 @@ }, "VpcConfiguration":{ "shape":"VpcConfiguration", - "documentation":"

Contains the virtual private cloud (VPC) configuration for the specified access point.

This element is empty if this access point is an Amazon S3 on Outposts access point that is used by other Amazon Web Services.

" + "documentation":"

Contains the virtual private cloud (VPC) configuration for the specified access point.

This element is empty if this access point is an Amazon S3 on Outposts access point that is used by other Amazon Web Servicesservices.

" }, "PublicAccessBlockConfiguration":{"shape":"PublicAccessBlockConfiguration"}, "CreationDate":{ @@ -4071,7 +4117,7 @@ "members":{ "AccountId":{ "shape":"AccountId", - "documentation":"

The ID of the Amazon Web Services account that is making this request.

", + "documentation":"

The Amazon Web Services account ID of the S3 Access Grants instance.

", "contextParam":{"name":"AccountId"}, "hostLabel":true, "location":"header", @@ -4452,7 +4498,7 @@ "type":"string", "max":1224, "min":10, - "pattern":"arn:[^:]+:sso:.*$" + "pattern":"arn:[^:]+:sso::\\d{12}:application/.*$" }, "IdentityCenterArn":{ "type":"string", @@ -4997,15 +5043,15 @@ "members":{ "MatchAnyPrefix":{ "shape":"NonEmptyMaxLength1024StringList", - "documentation":"

If provided, the generated manifest includes objects where the specified string appears at the start of the object key string.

" + "documentation":"

If provided, the generated manifest includes objects where the specified string appears at the start of the object key string. Each KeyNameConstraint filter accepts an array of strings with a length of 1 string.

" }, "MatchAnySuffix":{ "shape":"NonEmptyMaxLength1024StringList", - "documentation":"

If provided, the generated manifest includes objects where the specified string appears at the end of the object key string.

" + "documentation":"

If provided, the generated manifest includes objects where the specified string appears at the end of the object key string. Each KeyNameConstraint filter accepts an array of strings with a length of 1 string.

" }, "MatchAnySubstring":{ "shape":"NonEmptyMaxLength1024StringList", - "documentation":"

If provided, the generated manifest includes objects where the specified string appears anywhere within the object key string.

" + "documentation":"

If provided, the generated manifest includes objects where the specified string appears anywhere within the object key string. Each KeyNameConstraint filter accepts an array of strings with a length of 1 string.

" } }, "documentation":"

If provided, the generated manifest includes only source bucket objects whose object keys match the string constraints specified for MatchAnyPrefix, MatchAnySuffix, and MatchAnySubstring.

" @@ -5215,6 +5261,16 @@ }, "IdentityCenterArn":{ "shape":"IdentityCenterArn", + "documentation":"

If you associated your S3 Access Grants instance with an Amazon Web Services IAM Identity Center instance, this field returns the Amazon Resource Name (ARN) of the IAM Identity Center instance application; a subresource of the original Identity Center instance. S3 Access Grants creates this Identity Center application for the specific S3 Access Grants instance.

", + "deprecated":true, + "deprecatedMessage":"IdentityCenterArn has been deprecated. Use IdentityCenterInstanceArn or IdentityCenterApplicationArn." + }, + "IdentityCenterInstanceArn":{ + "shape":"IdentityCenterArn", + "documentation":"

The Amazon Resource Name (ARN) of the Amazon Web Services IAM Identity Center instance that you are associating with your S3 Access Grants instance. An IAM Identity Center instance is your corporate identity directory that you added to the IAM Identity Center. You can use the ListInstances API operation to retrieve a list of your Identity Center instances and their ARNs.

" + }, + "IdentityCenterApplicationArn":{ + "shape":"IdentityCenterApplicationArn", "documentation":"

If you associated your S3 Access Grants instance with an Amazon Web Services IAM Identity Center instance, this field returns the Amazon Resource Name (ARN) of the IAM Identity Center instance application; a subresource of the original Identity Center instance. S3 Access Grants creates this Identity Center application for the specific S3 Access Grants instance.

" } }, @@ -5226,7 +5282,7 @@ "members":{ "AccountId":{ "shape":"AccountId", - "documentation":"

The ID of the Amazon Web Services account that is making this request.

", + "documentation":"

The Amazon Web Services account ID of the S3 Access Grants instance.

", "contextParam":{"name":"AccountId"}, "hostLabel":true, "location":"header", @@ -5291,7 +5347,7 @@ "members":{ "AccountId":{ "shape":"AccountId", - "documentation":"

The ID of the Amazon Web Services account that is making this request.

", + "documentation":"

The Amazon Web Services account ID of the S3 Access Grants instance.

", "contextParam":{"name":"AccountId"}, "hostLabel":true, "location":"header", @@ -5336,7 +5392,7 @@ "members":{ "AccountId":{ "shape":"AccountId", - "documentation":"

The ID of the Amazon Web Services account that is making this request.

", + "documentation":"

The Amazon Web Services account ID of the S3 Access Grants instance.

", "contextParam":{"name":"AccountId"}, "hostLabel":true, "location":"header", @@ -5484,6 +5540,75 @@ } } }, + "ListCallerAccessGrantsEntry":{ + "type":"structure", + "members":{ + "Permission":{ + "shape":"Permission", + "documentation":"

The type of permission granted, which can be one of the following values:

" + }, + "GrantScope":{ + "shape":"S3Prefix", + "documentation":"

The S3 path of the data to which you have been granted access.

" + }, + "ApplicationArn":{ + "shape":"IdentityCenterApplicationArn", + "documentation":"

The Amazon Resource Name (ARN) of an Amazon Web Services IAM Identity Center application associated with your Identity Center instance. If the grant includes an application ARN, the grantee can only access the S3 data through this application.

" + } + }, + "documentation":"

Part of ListCallerAccessGrantsResult. Each entry includes the permission level (READ, WRITE, or READWRITE) and the grant scope of the access grant. If the grant also includes an application ARN, the grantee can only access the S3 data through this application.

" + }, + "ListCallerAccessGrantsRequest":{ + "type":"structure", + "required":["AccountId"], + "members":{ + "AccountId":{ + "shape":"AccountId", + "documentation":"

The Amazon Web Services account ID of the S3 Access Grants instance.

", + "contextParam":{"name":"AccountId"}, + "hostLabel":true, + "location":"header", + "locationName":"x-amz-account-id" + }, + "GrantScope":{ + "shape":"S3Prefix", + "documentation":"

The S3 path of the data that you would like to access. Must start with s3://. You can optionally pass only the beginning characters of a path, and S3 Access Grants will search for all applicable grants for the path fragment.

", + "location":"querystring", + "locationName":"grantscope" + }, + "NextToken":{ + "shape":"ContinuationToken", + "documentation":"

A pagination token to request the next page of results. Pass this value into a subsequent List Caller Access Grants request in order to retrieve the next page of results.

", + "location":"querystring", + "locationName":"nextToken" + }, + "MaxResults":{ + "shape":"MaxResults", + "documentation":"

The maximum number of access grants that you would like returned in the List Caller Access Grants response. If the results include the pagination token NextToken, make another call using the NextToken to determine if there are more results.

", + "location":"querystring", + "locationName":"maxResults" + }, + "AllowedByApplication":{ + "shape":"Boolean", + "documentation":"

If this optional parameter is passed in the request, a filter is applied to the results. The results will include only the access grants for the caller's Identity Center application or for any other applications (ALL).

", + "location":"querystring", + "locationName":"allowedByApplication" + } + } + }, + "ListCallerAccessGrantsResult":{ + "type":"structure", + "members":{ + "NextToken":{ + "shape":"ContinuationToken", + "documentation":"

A pagination token that you can use to request the next page of results. Pass this value into a subsequent List Caller Access Grants request in order to retrieve the next page of results.

" + }, + "CallerAccessGrantsList":{ + "shape":"CallerAccessGrantsList", + "documentation":"

A list of the caller's access grants that were created using S3 Access Grants and that grant the caller access to the S3 data of the Amazon Web Services account ID that was specified in the request.

" + } + } + }, "ListJobsRequest":{ "type":"structure", "required":["AccountId"], @@ -6373,7 +6498,7 @@ }, "RestrictPublicBuckets":{ "shape":"Setting", - "documentation":"

Specifies whether Amazon S3 should restrict public bucket policies for buckets in this account. Setting this element to TRUE restricts access to buckets with public policies to only Amazon Web Service principals and authorized users within this account.

Enabling this setting doesn't affect previously stored bucket policies, except that public and cross-account access within any public bucket policy, including non-public delegation to specific accounts, is blocked.

This property is not supported for Amazon S3 on Outposts.

", + "documentation":"

Specifies whether Amazon S3 should restrict public bucket policies for buckets in this account. Setting this element to TRUE restricts access to buckets with public policies to only Amazon Web Servicesservice principals and authorized users within this account.

Enabling this setting doesn't affect previously stored bucket policies, except that public and cross-account access within any public bucket policy, including non-public delegation to specific accounts, is blocked.

This property is not supported for Amazon S3 on Outposts.

", "locationName":"RestrictPublicBuckets" } }, @@ -6389,7 +6514,7 @@ "members":{ "AccountId":{ "shape":"AccountId", - "documentation":"

The ID of the Amazon Web Services account that is making this request.

", + "documentation":"

The Amazon Web Services account ID of the S3 Access Grants instance.

", "contextParam":{"name":"AccountId"}, "hostLabel":true, "location":"header", @@ -7455,7 +7580,7 @@ }, "SourceBucket":{ "shape":"S3BucketArnString", - "documentation":"

The source bucket used by the ManifestGenerator.

Directory buckets - Directory buckets aren't supported as the source buckets used by S3JobManifestGenerator to generate the job manifest.

" + "documentation":"

The ARN of the source bucket used by the ManifestGenerator.

Directory buckets - Directory buckets aren't supported as the source buckets used by S3JobManifestGenerator to generate the job manifest.

" }, "ManifestOutputLocation":{ "shape":"S3ManifestOutputLocation", @@ -8404,7 +8529,7 @@ "members":{ "AccountId":{ "shape":"AccountId", - "documentation":"

The ID of the Amazon Web Services account that is making this request.

", + "documentation":"

The Amazon Web Services account ID of the S3 Access Grants instance.

", "contextParam":{"name":"AccountId"}, "hostLabel":true, "location":"header", diff --git a/docs/source/conf.py b/docs/source/conf.py index 5d4181cbc1..2ca2051e78 100644 --- a/docs/source/conf.py +++ b/docs/source/conf.py @@ -59,7 +59,7 @@ # The short X.Y version. version = '1.35.' # The full version, including alpha/beta/rc tags. -release = '1.35.11' +release = '1.35.12' # The language for content autogenerated by Sphinx. Refer to documentation # for a list of supported languages.