diff --git a/.changes/1.35.77.json b/.changes/1.35.77.json new file mode 100644 index 0000000000..364f8c259c --- /dev/null +++ b/.changes/1.35.77.json @@ -0,0 +1,37 @@ +[ + { + "category": "``appsync``", + "description": "Provides description of new Amazon Bedrock runtime datasource.", + "type": "api-change" + }, + { + "category": "``cognito-idp``", + "description": "Change `CustomDomainConfig` from a required to an optional parameter for the `UpdateUserPoolDomain` operation.", + "type": "api-change" + }, + { + "category": "``ec2``", + "description": "This release includes a new API for modifying instance network-performance-options after launch.", + "type": "api-change" + }, + { + "category": "``ecs``", + "description": "This is a documentation only update to address various tickets for Amazon ECS.", + "type": "api-change" + }, + { + "category": "``keyspaces``", + "description": "Amazon Keyspaces: adding the list of IAM actions required by the UpdateKeyspace API.", + "type": "api-change" + }, + { + "category": "``medialive``", + "description": "H265 outputs now support disabling the deblocking filter.", + "type": "api-change" + }, + { + "category": "``workspaces``", + "description": "Added text to clarify case-sensitivity", + "type": "api-change" + } +] \ No newline at end of file diff --git a/.github/workflows/run-tests.yml b/.github/workflows/run-tests.yml index c4ca8612d7..8a90a18ecf 100644 --- a/.github/workflows/run-tests.yml +++ b/.github/workflows/run-tests.yml @@ -32,7 +32,7 @@ jobs: run: | python scripts/ci/run-tests --with-cov --with-xdist - name: Run codecov - uses: codecov/codecov-action@5c47607acb93fed5485fdbf7232e8a31425f672a + uses: codecov/codecov-action@7f8b4b4bde536c465e797be725718b88c5d95e0e with: directory: tests diff --git a/.github/workflows/stale_issue.yml b/.github/workflows/stale_issue.yml index 07acdbe065..7789fe4889 100644 --- a/.github/workflows/stale_issue.yml +++ b/.github/workflows/stale_issue.yml @@ -17,7 +17,7 @@ jobs: runs-on: ubuntu-latest name: Stale issue job steps: - - uses: aws-actions/stale-issue-cleanup@2017b87caa8e25014362d434a980d60fa758f3af + - uses: aws-actions/stale-issue-cleanup@413d85a1603df4f0a8158f5f3c8204ab1691313e with: issue-types: issues stale-issue-message: Greetings! It looks like this issue hasn’t been diff --git a/CHANGELOG.rst b/CHANGELOG.rst index e1388a75af..041af12105 100644 --- a/CHANGELOG.rst +++ b/CHANGELOG.rst @@ -2,6 +2,18 @@ CHANGELOG ========= +1.35.77 +======= + +* api-change:``appsync``: Provides description of new Amazon Bedrock runtime datasource. +* api-change:``cognito-idp``: Change `CustomDomainConfig` from a required to an optional parameter for the `UpdateUserPoolDomain` operation. +* api-change:``ec2``: This release includes a new API for modifying instance network-performance-options after launch. +* api-change:``ecs``: This is a documentation only update to address various tickets for Amazon ECS. +* api-change:``keyspaces``: Amazon Keyspaces: adding the list of IAM actions required by the UpdateKeyspace API. +* api-change:``medialive``: H265 outputs now support disabling the deblocking filter. +* api-change:``workspaces``: Added text to clarify case-sensitivity + + 1.35.76 ======= diff --git a/botocore/__init__.py b/botocore/__init__.py index 7b1f0454c9..fbead541ac 100644 --- a/botocore/__init__.py +++ b/botocore/__init__.py @@ -16,7 +16,7 @@ import os import re -__version__ = '1.35.76' +__version__ = '1.35.77' class NullHandler(logging.Handler): diff --git a/botocore/data/appsync/2017-07-25/service-2.json b/botocore/data/appsync/2017-07-25/service-2.json index 7ecb40d417..92f851bf5d 100644 --- a/botocore/data/appsync/2017-07-25/service-2.json +++ b/botocore/data/appsync/2017-07-25/service-2.json @@ -2462,7 +2462,7 @@ }, "type":{ "shape":"DataSourceType", - "documentation":"
The type of the data source.
AWS_LAMBDA: The data source is an Lambda function.
AMAZON_DYNAMODB: The data source is an Amazon DynamoDB table.
AMAZON_ELASTICSEARCH: The data source is an Amazon OpenSearch Service domain.
AMAZON_OPENSEARCH_SERVICE: The data source is an Amazon OpenSearch Service domain.
AMAZON_EVENTBRIDGE: The data source is an Amazon EventBridge configuration.
NONE: There is no data source. Use this type when you want to invoke a GraphQL operation without connecting to a data source, such as when you're performing data transformation with resolvers or invoking a subscription from a mutation.
HTTP: The data source is an HTTP endpoint.
RELATIONAL_DATABASE: The data source is a relational database.
The type of the data source.
AWS_LAMBDA: The data source is an Lambda function.
AMAZON_DYNAMODB: The data source is an Amazon DynamoDB table.
AMAZON_ELASTICSEARCH: The data source is an Amazon OpenSearch Service domain.
AMAZON_OPENSEARCH_SERVICE: The data source is an Amazon OpenSearch Service domain.
AMAZON_EVENTBRIDGE: The data source is an Amazon EventBridge configuration.
AMAZON_BEDROCK_RUNTIME: The data source is the Amazon Bedrock runtime.
NONE: There is no data source. Use this type when you want to invoke a GraphQL operation without connecting to a data source, such as when you're performing data transformation with resolvers or invoking a subscription from a mutation.
HTTP: The data source is an HTTP endpoint.
RELATIONAL_DATABASE: The data source is a relational database.
Describes a tree-based hierarchy that represents the physical host placement of your EC2 instances within an Availability Zone or Local Zone. You can use this information to determine the relative proximity of your EC2 instances within the Amazon Web Services network to support your tightly coupled workloads.
Limitations
Supported zones
Availability Zone
Local Zone
Supported instance types
hpc6a.48xlarge
| hpc6id.32xlarge
| hpc7a.12xlarge
| hpc7a.24xlarge
| hpc7a.48xlarge
| hpc7a.96xlarge
| hpc7g.4xlarge
| hpc7g.8xlarge
| hpc7g.16xlarge
p3dn.24xlarge
| p4d.24xlarge
| p4de.24xlarge
| p5.48xlarge
| p5e.48xlarge
trn1.2xlarge
| trn1.32xlarge
| trn1n.32xlarge
For more information, see Amazon EC2 instance topology in the Amazon EC2 User Guide.
" + "documentation":"Describes a tree-based hierarchy that represents the physical host placement of your EC2 instances within an Availability Zone or Local Zone. You can use this information to determine the relative proximity of your EC2 instances within the Amazon Web Services network to support your tightly coupled workloads.
Limitations
Supported zones
Availability Zone
Local Zone
Supported instance types
hpc6a.48xlarge
| hpc6id.32xlarge
| hpc7a.12xlarge
| hpc7a.24xlarge
| hpc7a.48xlarge
| hpc7a.96xlarge
| hpc7g.4xlarge
| hpc7g.8xlarge
| hpc7g.16xlarge
p3dn.24xlarge
| p4d.24xlarge
| p4de.24xlarge
| p5.48xlarge
| p5e.48xlarge
| p5en.48xlarge
trn1.2xlarge
| trn1.32xlarge
| trn1n.32xlarge
For more information, see Amazon EC2 instance topology in the Amazon EC2 User Guide.
" }, "DescribeInstanceTypeOfferings":{ "name":"DescribeInstanceTypeOfferings", @@ -5335,6 +5335,16 @@ "output":{"shape":"ModifyInstanceMetadataOptionsResult"}, "documentation":"Modify the instance metadata parameters on a running or stopped instance. When you modify the parameters on a stopped instance, they are applied when the instance is started. When you modify the parameters on a running instance, the API responds with a state of “pending”. After the parameter modifications are successfully applied to the instance, the state of the modifications changes from “pending” to “applied” in subsequent describe-instances API calls. For more information, see Instance metadata and user data in the Amazon EC2 User Guide.
" }, + "ModifyInstanceNetworkPerformanceOptions":{ + "name":"ModifyInstanceNetworkPerformanceOptions", + "http":{ + "method":"POST", + "requestUri":"/" + }, + "input":{"shape":"ModifyInstanceNetworkPerformanceRequest"}, + "output":{"shape":"ModifyInstanceNetworkPerformanceResult"}, + "documentation":"Change the configuration of the network performance options for an existing instance.
" + }, "ModifyInstancePlacement":{ "name":"ModifyInstancePlacement", "http":{ @@ -9862,6 +9872,21 @@ "locationName":"item" } }, + "BandwidthWeightingType":{ + "type":"string", + "enum":[ + "default", + "vpc-1", + "ebs-1" + ] + }, + "BandwidthWeightingTypeList":{ + "type":"list", + "member":{ + "shape":"BandwidthWeightingType", + "locationName":"item" + } + }, "BareMetal":{ "type":"string", "enum":[ @@ -22773,7 +22798,7 @@ }, "Filters":{ "shape":"FilterList", - "documentation":"One or more filters. Filter names and values are case-sensitive.
auto-recovery-supported
- Indicates whether Amazon CloudWatch action based recovery is supported (true
| false
).
bare-metal
- Indicates whether it is a bare metal instance type (true
| false
).
burstable-performance-supported
- Indicates whether the instance type is a burstable performance T instance type (true
| false
).
current-generation
- Indicates whether this instance type is the latest generation instance type of an instance family (true
| false
).
ebs-info.ebs-optimized-info.baseline-bandwidth-in-mbps
- The baseline bandwidth performance for an EBS-optimized instance type, in Mbps.
ebs-info.ebs-optimized-info.baseline-iops
- The baseline input/output storage operations per second for an EBS-optimized instance type.
ebs-info.ebs-optimized-info.baseline-throughput-in-mbps
- The baseline throughput performance for an EBS-optimized instance type, in MB/s.
ebs-info.ebs-optimized-info.maximum-bandwidth-in-mbps
- The maximum bandwidth performance for an EBS-optimized instance type, in Mbps.
ebs-info.ebs-optimized-info.maximum-iops
- The maximum input/output storage operations per second for an EBS-optimized instance type.
ebs-info.ebs-optimized-info.maximum-throughput-in-mbps
- The maximum throughput performance for an EBS-optimized instance type, in MB/s.
ebs-info.ebs-optimized-support
- Indicates whether the instance type is EBS-optimized (supported
| unsupported
| default
).
ebs-info.encryption-support
- Indicates whether EBS encryption is supported (supported
| unsupported
).
ebs-info.nvme-support
- Indicates whether non-volatile memory express (NVMe) is supported for EBS volumes (required
| supported
| unsupported
).
free-tier-eligible
- Indicates whether the instance type is eligible to use in the free tier (true
| false
).
hibernation-supported
- Indicates whether On-Demand hibernation is supported (true
| false
).
hypervisor
- The hypervisor (nitro
| xen
).
instance-storage-info.disk.count
- The number of local disks.
instance-storage-info.disk.size-in-gb
- The storage size of each instance storage disk, in GB.
instance-storage-info.disk.type
- The storage technology for the local instance storage disks (hdd
| ssd
).
instance-storage-info.encryption-support
- Indicates whether data is encrypted at rest (required
| supported
| unsupported
).
instance-storage-info.nvme-support
- Indicates whether non-volatile memory express (NVMe) is supported for instance store (required
| supported
| unsupported
).
instance-storage-info.total-size-in-gb
- The total amount of storage available from all local instance storage, in GB.
instance-storage-supported
- Indicates whether the instance type has local instance storage (true
| false
).
instance-type
- The instance type (for example c5.2xlarge
or c5*).
memory-info.size-in-mib
- The memory size.
network-info.efa-info.maximum-efa-interfaces
- The maximum number of Elastic Fabric Adapters (EFAs) per instance.
network-info.efa-supported
- Indicates whether the instance type supports Elastic Fabric Adapter (EFA) (true
| false
).
network-info.ena-support
- Indicates whether Elastic Network Adapter (ENA) is supported or required (required
| supported
| unsupported
).
network-info.encryption-in-transit-supported
- Indicates whether the instance type automatically encrypts in-transit traffic between instances (true
| false
).
network-info.ipv4-addresses-per-interface
- The maximum number of private IPv4 addresses per network interface.
network-info.ipv6-addresses-per-interface
- The maximum number of private IPv6 addresses per network interface.
network-info.ipv6-supported
- Indicates whether the instance type supports IPv6 (true
| false
).
network-info.maximum-network-cards
- The maximum number of network cards per instance.
network-info.maximum-network-interfaces
- The maximum number of network interfaces per instance.
network-info.network-performance
- The network performance (for example, \"25 Gigabit\").
nitro-enclaves-support
- Indicates whether Nitro Enclaves is supported (supported
| unsupported
).
nitro-tpm-support
- Indicates whether NitroTPM is supported (supported
| unsupported
).
nitro-tpm-info.supported-versions
- The supported NitroTPM version (2.0
).
processor-info.supported-architecture
- The CPU architecture (arm64
| i386
| x86_64
).
processor-info.sustained-clock-speed-in-ghz
- The CPU clock speed, in GHz.
processor-info.supported-features
- The supported CPU features (amd-sev-snp
).
supported-boot-mode
- The boot mode (legacy-bios
| uefi
).
supported-root-device-type
- The root device type (ebs
| instance-store
).
supported-usage-class
- The usage class (on-demand
| spot
| capacity-block
).
supported-virtualization-type
- The virtualization type (hvm
| paravirtual
).
vcpu-info.default-cores
- The default number of cores for the instance type.
vcpu-info.default-threads-per-core
- The default number of threads per core for the instance type.
vcpu-info.default-vcpus
- The default number of vCPUs for the instance type.
vcpu-info.valid-cores
- The number of cores that can be configured for the instance type.
vcpu-info.valid-threads-per-core
- The number of threads per core that can be configured for the instance type. For example, \"1\" or \"1,2\".
One or more filters. Filter names and values are case-sensitive.
auto-recovery-supported
- Indicates whether Amazon CloudWatch action based recovery is supported (true
| false
).
bare-metal
- Indicates whether it is a bare metal instance type (true
| false
).
burstable-performance-supported
- Indicates whether the instance type is a burstable performance T instance type (true
| false
).
current-generation
- Indicates whether this instance type is the latest generation instance type of an instance family (true
| false
).
ebs-info.ebs-optimized-info.baseline-bandwidth-in-mbps
- The baseline bandwidth performance for an EBS-optimized instance type, in Mbps.
ebs-info.ebs-optimized-info.baseline-iops
- The baseline input/output storage operations per second for an EBS-optimized instance type.
ebs-info.ebs-optimized-info.baseline-throughput-in-mbps
- The baseline throughput performance for an EBS-optimized instance type, in MB/s.
ebs-info.ebs-optimized-info.maximum-bandwidth-in-mbps
- The maximum bandwidth performance for an EBS-optimized instance type, in Mbps.
ebs-info.ebs-optimized-info.maximum-iops
- The maximum input/output storage operations per second for an EBS-optimized instance type.
ebs-info.ebs-optimized-info.maximum-throughput-in-mbps
- The maximum throughput performance for an EBS-optimized instance type, in MB/s.
ebs-info.ebs-optimized-support
- Indicates whether the instance type is EBS-optimized (supported
| unsupported
| default
).
ebs-info.encryption-support
- Indicates whether EBS encryption is supported (supported
| unsupported
).
ebs-info.nvme-support
- Indicates whether non-volatile memory express (NVMe) is supported for EBS volumes (required
| supported
| unsupported
).
free-tier-eligible
- Indicates whether the instance type is eligible to use in the free tier (true
| false
).
hibernation-supported
- Indicates whether On-Demand hibernation is supported (true
| false
).
hypervisor
- The hypervisor (nitro
| xen
).
instance-storage-info.disk.count
- The number of local disks.
instance-storage-info.disk.size-in-gb
- The storage size of each instance storage disk, in GB.
instance-storage-info.disk.type
- The storage technology for the local instance storage disks (hdd
| ssd
).
instance-storage-info.encryption-support
- Indicates whether data is encrypted at rest (required
| supported
| unsupported
).
instance-storage-info.nvme-support
- Indicates whether non-volatile memory express (NVMe) is supported for instance store (required
| supported
| unsupported
).
instance-storage-info.total-size-in-gb
- The total amount of storage available from all local instance storage, in GB.
instance-storage-supported
- Indicates whether the instance type has local instance storage (true
| false
).
instance-type
- The instance type (for example c5.2xlarge
or c5*).
memory-info.size-in-mib
- The memory size.
network-info.bandwidth-weightings
- For instances that support bandwidth weighting to boost performance (default
, vpc-1
, ebs-1
).
network-info.efa-info.maximum-efa-interfaces
- The maximum number of Elastic Fabric Adapters (EFAs) per instance.
network-info.efa-supported
- Indicates whether the instance type supports Elastic Fabric Adapter (EFA) (true
| false
).
network-info.ena-support
- Indicates whether Elastic Network Adapter (ENA) is supported or required (required
| supported
| unsupported
).
network-info.encryption-in-transit-supported
- Indicates whether the instance type automatically encrypts in-transit traffic between instances (true
| false
).
network-info.ipv4-addresses-per-interface
- The maximum number of private IPv4 addresses per network interface.
network-info.ipv6-addresses-per-interface
- The maximum number of private IPv6 addresses per network interface.
network-info.ipv6-supported
- Indicates whether the instance type supports IPv6 (true
| false
).
network-info.maximum-network-cards
- The maximum number of network cards per instance.
network-info.maximum-network-interfaces
- The maximum number of network interfaces per instance.
network-info.network-performance
- The network performance (for example, \"25 Gigabit\").
nitro-enclaves-support
- Indicates whether Nitro Enclaves is supported (supported
| unsupported
).
nitro-tpm-support
- Indicates whether NitroTPM is supported (supported
| unsupported
).
nitro-tpm-info.supported-versions
- The supported NitroTPM version (2.0
).
processor-info.supported-architecture
- The CPU architecture (arm64
| i386
| x86_64
).
processor-info.sustained-clock-speed-in-ghz
- The CPU clock speed, in GHz.
processor-info.supported-features
- The supported CPU features (amd-sev-snp
).
supported-boot-mode
- The boot mode (legacy-bios
| uefi
).
supported-root-device-type
- The root device type (ebs
| instance-store
).
supported-usage-class
- The usage class (on-demand
| spot
| capacity-block
).
supported-virtualization-type
- The virtualization type (hvm
| paravirtual
).
vcpu-info.default-cores
- The default number of cores for the instance type.
vcpu-info.default-threads-per-core
- The default number of threads per core for the instance type.
vcpu-info.default-vcpus
- The default number of vCPUs for the instance type.
vcpu-info.valid-cores
- The number of cores that can be configured for the instance type.
vcpu-info.valid-threads-per-core
- The number of threads per core that can be configured for the instance type. For example, \"1\" or \"1,2\".
The filters.
affinity
- The affinity setting for an instance running on a Dedicated Host (default
| host
).
architecture
- The instance architecture (i386
| x86_64
| arm64
).
availability-zone
- The Availability Zone of the instance.
block-device-mapping.attach-time
- The attach time for an EBS volume mapped to the instance, for example, 2022-09-15T17:15:20.000Z
.
block-device-mapping.delete-on-termination
- A Boolean that indicates whether the EBS volume is deleted on instance termination.
block-device-mapping.device-name
- The device name specified in the block device mapping (for example, /dev/sdh
or xvdh
).
block-device-mapping.status
- The status for the EBS volume (attaching
| attached
| detaching
| detached
).
block-device-mapping.volume-id
- The volume ID of the EBS volume.
boot-mode
- The boot mode that was specified by the AMI (legacy-bios
| uefi
| uefi-preferred
).
capacity-reservation-id
- The ID of the Capacity Reservation into which the instance was launched.
capacity-reservation-specification.capacity-reservation-preference
- The instance's Capacity Reservation preference (open
| none
).
capacity-reservation-specification.capacity-reservation-target.capacity-reservation-id
- The ID of the targeted Capacity Reservation.
capacity-reservation-specification.capacity-reservation-target.capacity-reservation-resource-group-arn
- The ARN of the targeted Capacity Reservation group.
client-token
- The idempotency token you provided when you launched the instance.
current-instance-boot-mode
- The boot mode that is used to launch the instance at launch or start (legacy-bios
| uefi
).
dns-name
- The public DNS name of the instance.
ebs-optimized
- A Boolean that indicates whether the instance is optimized for Amazon EBS I/O.
ena-support
- A Boolean that indicates whether the instance is enabled for enhanced networking with ENA.
enclave-options.enabled
- A Boolean that indicates whether the instance is enabled for Amazon Web Services Nitro Enclaves.
hibernation-options.configured
- A Boolean that indicates whether the instance is enabled for hibernation. A value of true
means that the instance is enabled for hibernation.
host-id
- The ID of the Dedicated Host on which the instance is running, if applicable.
hypervisor
- The hypervisor type of the instance (ovm
| xen
). The value xen
is used for both Xen and Nitro hypervisors.
iam-instance-profile.arn
- The instance profile associated with the instance. Specified as an ARN.
iam-instance-profile.id
- The instance profile associated with the instance. Specified as an ID.
image-id
- The ID of the image used to launch the instance.
instance-id
- The ID of the instance.
instance-lifecycle
- Indicates whether this is a Spot Instance, a Scheduled Instance, or a Capacity Block (spot
| scheduled
| capacity-block
).
instance-state-code
- The state of the instance, as a 16-bit unsigned integer. The high byte is used for internal purposes and should be ignored. The low byte is set based on the state represented. The valid values are: 0 (pending), 16 (running), 32 (shutting-down), 48 (terminated), 64 (stopping), and 80 (stopped).
instance-state-name
- The state of the instance (pending
| running
| shutting-down
| terminated
| stopping
| stopped
).
instance-type
- The type of instance (for example, t2.micro
).
instance.group-id
- The ID of the security group for the instance.
instance.group-name
- The name of the security group for the instance.
ip-address
- The public IPv4 address of the instance.
ipv6-address
- The IPv6 address of the instance.
kernel-id
- The kernel ID.
key-name
- The name of the key pair used when the instance was launched.
launch-index
- When launching multiple instances, this is the index for the instance in the launch group (for example, 0, 1, 2, and so on).
launch-time
- The time when the instance was launched, in the ISO 8601 format in the UTC time zone (YYYY-MM-DDThh:mm:ss.sssZ), for example, 2021-09-29T11:04:43.305Z
. You can use a wildcard (*
), for example, 2021-09-29T*
, which matches an entire day.
maintenance-options.auto-recovery
- The current automatic recovery behavior of the instance (disabled
| default
).
metadata-options.http-endpoint
- The status of access to the HTTP metadata endpoint on your instance (enabled
| disabled
)
metadata-options.http-protocol-ipv4
- Indicates whether the IPv4 endpoint is enabled (disabled
| enabled
).
metadata-options.http-protocol-ipv6
- Indicates whether the IPv6 endpoint is enabled (disabled
| enabled
).
metadata-options.http-put-response-hop-limit
- The HTTP metadata request put response hop limit (integer, possible values 1
to 64
)
metadata-options.http-tokens
- The metadata request authorization state (optional
| required
)
metadata-options.instance-metadata-tags
- The status of access to instance tags from the instance metadata (enabled
| disabled
)
metadata-options.state
- The state of the metadata option changes (pending
| applied
).
monitoring-state
- Indicates whether detailed monitoring is enabled (disabled
| enabled
).
network-interface.addresses.association.allocation-id
- The allocation ID.
network-interface.addresses.association.association-id
- The association ID.
network-interface.addresses.association.carrier-ip
- The carrier IP address.
network-interface.addresses.association.customer-owned-ip
- The customer-owned IP address.
network-interface.addresses.association.ip-owner-id
- The owner ID of the private IPv4 address associated with the network interface.
network-interface.addresses.association.public-dns-name
- The public DNS name.
network-interface.addresses.association.public-ip
- The ID of the association of an Elastic IP address (IPv4) with a network interface.
network-interface.addresses.primary
- Specifies whether the IPv4 address of the network interface is the primary private IPv4 address.
network-interface.addresses.private-dns-name
- The private DNS name.
network-interface.addresses.private-ip-address
- The private IPv4 address associated with the network interface.
network-interface.association.allocation-id
- The allocation ID returned when you allocated the Elastic IP address (IPv4) for your network interface.
network-interface.association.association-id
- The association ID returned when the network interface was associated with an IPv4 address.
network-interface.association.carrier-ip
- The customer-owned IP address.
network-interface.association.customer-owned-ip
- The customer-owned IP address.
network-interface.association.ip-owner-id
- The owner of the Elastic IP address (IPv4) associated with the network interface.
network-interface.association.public-dns-name
- The public DNS name.
network-interface.association.public-ip
- The address of the Elastic IP address (IPv4) bound to the network interface.
network-interface.attachment.attach-time
- The time that the network interface was attached to an instance.
network-interface.attachment.attachment-id
- The ID of the interface attachment.
network-interface.attachment.delete-on-termination
- Specifies whether the attachment is deleted when an instance is terminated.
network-interface.attachment.device-index
- The device index to which the network interface is attached.
network-interface.attachment.instance-id
- The ID of the instance to which the network interface is attached.
network-interface.attachment.instance-owner-id
- The owner ID of the instance to which the network interface is attached.
network-interface.attachment.network-card-index
- The index of the network card.
network-interface.attachment.status
- The status of the attachment (attaching
| attached
| detaching
| detached
).
network-interface.availability-zone
- The Availability Zone for the network interface.
network-interface.deny-all-igw-traffic
- A Boolean that indicates whether a network interface with an IPv6 address is unreachable from the public internet.
network-interface.description
- The description of the network interface.
network-interface.group-id
- The ID of a security group associated with the network interface.
network-interface.group-name
- The name of a security group associated with the network interface.
network-interface.ipv4-prefixes.ipv4-prefix
- The IPv4 prefixes that are assigned to the network interface.
network-interface.ipv6-address
- The IPv6 address associated with the network interface.
network-interface.ipv6-addresses.ipv6-address
- The IPv6 address associated with the network interface.
network-interface.ipv6-addresses.is-primary-ipv6
- A Boolean that indicates whether this is the primary IPv6 address.
network-interface.ipv6-native
- A Boolean that indicates whether this is an IPv6 only network interface.
network-interface.ipv6-prefixes.ipv6-prefix
- The IPv6 prefix assigned to the network interface.
network-interface.mac-address
- The MAC address of the network interface.
network-interface.network-interface-id
- The ID of the network interface.
network-interface.operator.managed
- A Boolean that indicates whether the instance has a managed network interface.
network-interface.operator.principal
- The principal that manages the network interface. Only valid for instances with managed network interfaces, where managed
is true
.
network-interface.outpost-arn
- The ARN of the Outpost.
network-interface.owner-id
- The ID of the owner of the network interface.
network-interface.private-dns-name
- The private DNS name of the network interface.
network-interface.private-ip-address
- The private IPv4 address.
network-interface.public-dns-name
- The public DNS name.
network-interface.requester-id
- The requester ID for the network interface.
network-interface.requester-managed
- Indicates whether the network interface is being managed by Amazon Web Services.
network-interface.status
- The status of the network interface (available
) | in-use
).
network-interface.source-dest-check
- Whether the network interface performs source/destination checking. A value of true
means that checking is enabled, and false
means that checking is disabled. The value must be false
for the network interface to perform network address translation (NAT) in your VPC.
network-interface.subnet-id
- The ID of the subnet for the network interface.
network-interface.tag-key
- The key of a tag assigned to the network interface.
network-interface.tag-value
- The value of a tag assigned to the network interface.
network-interface.vpc-id
- The ID of the VPC for the network interface.
operator.managed
- A Boolean that indicates whether this is a managed instance.
operator.principal
- The principal that manages the instance. Only valid for managed instances, where managed
is true
.
outpost-arn
- The Amazon Resource Name (ARN) of the Outpost.
owner-id
- The Amazon Web Services account ID of the instance owner.
placement-group-name
- The name of the placement group for the instance.
placement-partition-number
- The partition in which the instance is located.
platform
- The platform. To list only Windows instances, use windows
.
platform-details
- The platform (Linux/UNIX
| Red Hat BYOL Linux
| Red Hat Enterprise Linux
| Red Hat Enterprise Linux with HA
| Red Hat Enterprise Linux with SQL Server Standard and HA
| Red Hat Enterprise Linux with SQL Server Enterprise and HA
| Red Hat Enterprise Linux with SQL Server Standard
| Red Hat Enterprise Linux with SQL Server Web
| Red Hat Enterprise Linux with SQL Server Enterprise
| SQL Server Enterprise
| SQL Server Standard
| SQL Server Web
| SUSE Linux
| Ubuntu Pro
| Windows
| Windows BYOL
| Windows with SQL Server Enterprise
| Windows with SQL Server Standard
| Windows with SQL Server Web
).
private-dns-name
- The private IPv4 DNS name of the instance.
private-dns-name-options.enable-resource-name-dns-a-record
- A Boolean that indicates whether to respond to DNS queries for instance hostnames with DNS A records.
private-dns-name-options.enable-resource-name-dns-aaaa-record
- A Boolean that indicates whether to respond to DNS queries for instance hostnames with DNS AAAA records.
private-dns-name-options.hostname-type
- The type of hostname (ip-name
| resource-name
).
private-ip-address
- The private IPv4 address of the instance. This can only be used to filter by the primary IP address of the network interface attached to the instance. To filter by additional IP addresses assigned to the network interface, use the filter network-interface.addresses.private-ip-address
.
product-code
- The product code associated with the AMI used to launch the instance.
product-code.type
- The type of product code (devpay
| marketplace
).
ramdisk-id
- The RAM disk ID.
reason
- The reason for the current state of the instance (for example, shows \"User Initiated [date]\" when you stop or terminate the instance). Similar to the state-reason-code filter.
requester-id
- The ID of the entity that launched the instance on your behalf (for example, Amazon Web Services Management Console, Auto Scaling, and so on).
reservation-id
- The ID of the instance's reservation. A reservation ID is created any time you launch an instance. A reservation ID has a one-to-one relationship with an instance launch request, but can be associated with more than one instance if you launch multiple instances using the same launch request. For example, if you launch one instance, you get one reservation ID. If you launch ten instances using the same launch request, you also get one reservation ID.
root-device-name
- The device name of the root device volume (for example, /dev/sda1
).
root-device-type
- The type of the root device volume (ebs
| instance-store
).
source-dest-check
- Indicates whether the instance performs source/destination checking. A value of true
means that checking is enabled, and false
means that checking is disabled. The value must be false
for the instance to perform network address translation (NAT) in your VPC.
spot-instance-request-id
- The ID of the Spot Instance request.
state-reason-code
- The reason code for the state change.
state-reason-message
- A message that describes the state change.
subnet-id
- The ID of the subnet for the instance.
tag:<key>
- The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value. For example, to find all resources that have a tag with the key Owner
and the value TeamA
, specify tag:Owner
for the filter name and TeamA
for the filter value.
tag-key
- The key of a tag assigned to the resource. Use this filter to find all resources that have a tag with a specific key, regardless of the tag value.
tenancy
- The tenancy of an instance (dedicated
| default
| host
).
tpm-support
- Indicates if the instance is configured for NitroTPM support (v2.0
).
usage-operation
- The usage operation value for the instance (RunInstances
| RunInstances:00g0
| RunInstances:0010
| RunInstances:1010
| RunInstances:1014
| RunInstances:1110
| RunInstances:0014
| RunInstances:0210
| RunInstances:0110
| RunInstances:0100
| RunInstances:0004
| RunInstances:0200
| RunInstances:000g
| RunInstances:0g00
| RunInstances:0002
| RunInstances:0800
| RunInstances:0102
| RunInstances:0006
| RunInstances:0202
).
usage-operation-update-time
- The time that the usage operation was last updated, for example, 2022-09-15T17:15:20.000Z
.
virtualization-type
- The virtualization type of the instance (paravirtual
| hvm
).
vpc-id
- The ID of the VPC that the instance is running in.
The filters.
affinity
- The affinity setting for an instance running on a Dedicated Host (default
| host
).
architecture
- The instance architecture (i386
| x86_64
| arm64
).
availability-zone
- The Availability Zone of the instance.
block-device-mapping.attach-time
- The attach time for an EBS volume mapped to the instance, for example, 2022-09-15T17:15:20.000Z
.
block-device-mapping.delete-on-termination
- A Boolean that indicates whether the EBS volume is deleted on instance termination.
block-device-mapping.device-name
- The device name specified in the block device mapping (for example, /dev/sdh
or xvdh
).
block-device-mapping.status
- The status for the EBS volume (attaching
| attached
| detaching
| detached
).
block-device-mapping.volume-id
- The volume ID of the EBS volume.
boot-mode
- The boot mode that was specified by the AMI (legacy-bios
| uefi
| uefi-preferred
).
capacity-reservation-id
- The ID of the Capacity Reservation into which the instance was launched.
capacity-reservation-specification.capacity-reservation-preference
- The instance's Capacity Reservation preference (open
| none
).
capacity-reservation-specification.capacity-reservation-target.capacity-reservation-id
- The ID of the targeted Capacity Reservation.
capacity-reservation-specification.capacity-reservation-target.capacity-reservation-resource-group-arn
- The ARN of the targeted Capacity Reservation group.
client-token
- The idempotency token you provided when you launched the instance.
current-instance-boot-mode
- The boot mode that is used to launch the instance at launch or start (legacy-bios
| uefi
).
dns-name
- The public DNS name of the instance.
ebs-optimized
- A Boolean that indicates whether the instance is optimized for Amazon EBS I/O.
ena-support
- A Boolean that indicates whether the instance is enabled for enhanced networking with ENA.
enclave-options.enabled
- A Boolean that indicates whether the instance is enabled for Amazon Web Services Nitro Enclaves.
hibernation-options.configured
- A Boolean that indicates whether the instance is enabled for hibernation. A value of true
means that the instance is enabled for hibernation.
host-id
- The ID of the Dedicated Host on which the instance is running, if applicable.
hypervisor
- The hypervisor type of the instance (ovm
| xen
). The value xen
is used for both Xen and Nitro hypervisors.
iam-instance-profile.arn
- The instance profile associated with the instance. Specified as an ARN.
iam-instance-profile.id
- The instance profile associated with the instance. Specified as an ID.
image-id
- The ID of the image used to launch the instance.
instance-id
- The ID of the instance.
instance-lifecycle
- Indicates whether this is a Spot Instance, a Scheduled Instance, or a Capacity Block (spot
| scheduled
| capacity-block
).
instance-state-code
- The state of the instance, as a 16-bit unsigned integer. The high byte is used for internal purposes and should be ignored. The low byte is set based on the state represented. The valid values are: 0 (pending), 16 (running), 32 (shutting-down), 48 (terminated), 64 (stopping), and 80 (stopped).
instance-state-name
- The state of the instance (pending
| running
| shutting-down
| terminated
| stopping
| stopped
).
instance-type
- The type of instance (for example, t2.micro
).
instance.group-id
- The ID of the security group for the instance.
instance.group-name
- The name of the security group for the instance.
ip-address
- The public IPv4 address of the instance.
ipv6-address
- The IPv6 address of the instance.
kernel-id
- The kernel ID.
key-name
- The name of the key pair used when the instance was launched.
launch-index
- When launching multiple instances, this is the index for the instance in the launch group (for example, 0, 1, 2, and so on).
launch-time
- The time when the instance was launched, in the ISO 8601 format in the UTC time zone (YYYY-MM-DDThh:mm:ss.sssZ), for example, 2021-09-29T11:04:43.305Z
. You can use a wildcard (*
), for example, 2021-09-29T*
, which matches an entire day.
maintenance-options.auto-recovery
- The current automatic recovery behavior of the instance (disabled
| default
).
metadata-options.http-endpoint
- The status of access to the HTTP metadata endpoint on your instance (enabled
| disabled
)
metadata-options.http-protocol-ipv4
- Indicates whether the IPv4 endpoint is enabled (disabled
| enabled
).
metadata-options.http-protocol-ipv6
- Indicates whether the IPv6 endpoint is enabled (disabled
| enabled
).
metadata-options.http-put-response-hop-limit
- The HTTP metadata request put response hop limit (integer, possible values 1
to 64
)
metadata-options.http-tokens
- The metadata request authorization state (optional
| required
)
metadata-options.instance-metadata-tags
- The status of access to instance tags from the instance metadata (enabled
| disabled
)
metadata-options.state
- The state of the metadata option changes (pending
| applied
).
monitoring-state
- Indicates whether detailed monitoring is enabled (disabled
| enabled
).
network-interface.addresses.association.allocation-id
- The allocation ID.
network-interface.addresses.association.association-id
- The association ID.
network-interface.addresses.association.carrier-ip
- The carrier IP address.
network-interface.addresses.association.customer-owned-ip
- The customer-owned IP address.
network-interface.addresses.association.ip-owner-id
- The owner ID of the private IPv4 address associated with the network interface.
network-interface.addresses.association.public-dns-name
- The public DNS name.
network-interface.addresses.association.public-ip
- The ID of the association of an Elastic IP address (IPv4) with a network interface.
network-interface.addresses.primary
- Specifies whether the IPv4 address of the network interface is the primary private IPv4 address.
network-interface.addresses.private-dns-name
- The private DNS name.
network-interface.addresses.private-ip-address
- The private IPv4 address associated with the network interface.
network-interface.association.allocation-id
- The allocation ID returned when you allocated the Elastic IP address (IPv4) for your network interface.
network-interface.association.association-id
- The association ID returned when the network interface was associated with an IPv4 address.
network-interface.association.carrier-ip
- The customer-owned IP address.
network-interface.association.customer-owned-ip
- The customer-owned IP address.
network-interface.association.ip-owner-id
- The owner of the Elastic IP address (IPv4) associated with the network interface.
network-interface.association.public-dns-name
- The public DNS name.
network-interface.association.public-ip
- The address of the Elastic IP address (IPv4) bound to the network interface.
network-interface.attachment.attach-time
- The time that the network interface was attached to an instance.
network-interface.attachment.attachment-id
- The ID of the interface attachment.
network-interface.attachment.delete-on-termination
- Specifies whether the attachment is deleted when an instance is terminated.
network-interface.attachment.device-index
- The device index to which the network interface is attached.
network-interface.attachment.instance-id
- The ID of the instance to which the network interface is attached.
network-interface.attachment.instance-owner-id
- The owner ID of the instance to which the network interface is attached.
network-interface.attachment.network-card-index
- The index of the network card.
network-interface.attachment.status
- The status of the attachment (attaching
| attached
| detaching
| detached
).
network-interface.availability-zone
- The Availability Zone for the network interface.
network-interface.deny-all-igw-traffic
- A Boolean that indicates whether a network interface with an IPv6 address is unreachable from the public internet.
network-interface.description
- The description of the network interface.
network-interface.group-id
- The ID of a security group associated with the network interface.
network-interface.group-name
- The name of a security group associated with the network interface.
network-interface.ipv4-prefixes.ipv4-prefix
- The IPv4 prefixes that are assigned to the network interface.
network-interface.ipv6-address
- The IPv6 address associated with the network interface.
network-interface.ipv6-addresses.ipv6-address
- The IPv6 address associated with the network interface.
network-interface.ipv6-addresses.is-primary-ipv6
- A Boolean that indicates whether this is the primary IPv6 address.
network-interface.ipv6-native
- A Boolean that indicates whether this is an IPv6 only network interface.
network-interface.ipv6-prefixes.ipv6-prefix
- The IPv6 prefix assigned to the network interface.
network-interface.mac-address
- The MAC address of the network interface.
network-interface.network-interface-id
- The ID of the network interface.
network-interface.operator.managed
- A Boolean that indicates whether the instance has a managed network interface.
network-interface.operator.principal
- The principal that manages the network interface. Only valid for instances with managed network interfaces, where managed
is true
.
network-interface.outpost-arn
- The ARN of the Outpost.
network-interface.owner-id
- The ID of the owner of the network interface.
network-interface.private-dns-name
- The private DNS name of the network interface.
network-interface.private-ip-address
- The private IPv4 address.
network-interface.public-dns-name
- The public DNS name.
network-interface.requester-id
- The requester ID for the network interface.
network-interface.requester-managed
- Indicates whether the network interface is being managed by Amazon Web Services.
network-interface.status
- The status of the network interface (available
) | in-use
).
network-interface.source-dest-check
- Whether the network interface performs source/destination checking. A value of true
means that checking is enabled, and false
means that checking is disabled. The value must be false
for the network interface to perform network address translation (NAT) in your VPC.
network-interface.subnet-id
- The ID of the subnet for the network interface.
network-interface.tag-key
- The key of a tag assigned to the network interface.
network-interface.tag-value
- The value of a tag assigned to the network interface.
network-interface.vpc-id
- The ID of the VPC for the network interface.
network-performance-options.bandwidth-weighting
- Where the performance boost is applied, if applicable. Valid values: default
, vpc-1
, ebs-1
.
operator.managed
- A Boolean that indicates whether this is a managed instance.
operator.principal
- The principal that manages the instance. Only valid for managed instances, where managed
is true
.
outpost-arn
- The Amazon Resource Name (ARN) of the Outpost.
owner-id
- The Amazon Web Services account ID of the instance owner.
placement-group-name
- The name of the placement group for the instance.
placement-partition-number
- The partition in which the instance is located.
platform
- The platform. To list only Windows instances, use windows
.
platform-details
- The platform (Linux/UNIX
| Red Hat BYOL Linux
| Red Hat Enterprise Linux
| Red Hat Enterprise Linux with HA
| Red Hat Enterprise Linux with SQL Server Standard and HA
| Red Hat Enterprise Linux with SQL Server Enterprise and HA
| Red Hat Enterprise Linux with SQL Server Standard
| Red Hat Enterprise Linux with SQL Server Web
| Red Hat Enterprise Linux with SQL Server Enterprise
| SQL Server Enterprise
| SQL Server Standard
| SQL Server Web
| SUSE Linux
| Ubuntu Pro
| Windows
| Windows BYOL
| Windows with SQL Server Enterprise
| Windows with SQL Server Standard
| Windows with SQL Server Web
).
private-dns-name
- The private IPv4 DNS name of the instance.
private-dns-name-options.enable-resource-name-dns-a-record
- A Boolean that indicates whether to respond to DNS queries for instance hostnames with DNS A records.
private-dns-name-options.enable-resource-name-dns-aaaa-record
- A Boolean that indicates whether to respond to DNS queries for instance hostnames with DNS AAAA records.
private-dns-name-options.hostname-type
- The type of hostname (ip-name
| resource-name
).
private-ip-address
- The private IPv4 address of the instance. This can only be used to filter by the primary IP address of the network interface attached to the instance. To filter by additional IP addresses assigned to the network interface, use the filter network-interface.addresses.private-ip-address
.
product-code
- The product code associated with the AMI used to launch the instance.
product-code.type
- The type of product code (devpay
| marketplace
).
ramdisk-id
- The RAM disk ID.
reason
- The reason for the current state of the instance (for example, shows \"User Initiated [date]\" when you stop or terminate the instance). Similar to the state-reason-code filter.
requester-id
- The ID of the entity that launched the instance on your behalf (for example, Amazon Web Services Management Console, Auto Scaling, and so on).
reservation-id
- The ID of the instance's reservation. A reservation ID is created any time you launch an instance. A reservation ID has a one-to-one relationship with an instance launch request, but can be associated with more than one instance if you launch multiple instances using the same launch request. For example, if you launch one instance, you get one reservation ID. If you launch ten instances using the same launch request, you also get one reservation ID.
root-device-name
- The device name of the root device volume (for example, /dev/sda1
).
root-device-type
- The type of the root device volume (ebs
| instance-store
).
source-dest-check
- Indicates whether the instance performs source/destination checking. A value of true
means that checking is enabled, and false
means that checking is disabled. The value must be false
for the instance to perform network address translation (NAT) in your VPC.
spot-instance-request-id
- The ID of the Spot Instance request.
state-reason-code
- The reason code for the state change.
state-reason-message
- A message that describes the state change.
subnet-id
- The ID of the subnet for the instance.
tag:<key>
- The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value. For example, to find all resources that have a tag with the key Owner
and the value TeamA
, specify tag:Owner
for the filter name and TeamA
for the filter value.
tag-key
- The key of a tag assigned to the resource. Use this filter to find all resources that have a tag with a specific key, regardless of the tag value.
tenancy
- The tenancy of an instance (dedicated
| default
| host
).
tpm-support
- Indicates if the instance is configured for NitroTPM support (v2.0
).
usage-operation
- The usage operation value for the instance (RunInstances
| RunInstances:00g0
| RunInstances:0010
| RunInstances:1010
| RunInstances:1014
| RunInstances:1110
| RunInstances:0014
| RunInstances:0210
| RunInstances:0110
| RunInstances:0100
| RunInstances:0004
| RunInstances:0200
| RunInstances:000g
| RunInstances:0g00
| RunInstances:0002
| RunInstances:0800
| RunInstances:0102
| RunInstances:0006
| RunInstances:0202
).
usage-operation-update-time
- The time that the usage operation was last updated, for example, 2022-09-15T17:15:20.000Z
.
virtualization-type
- The virtualization type of the instance (paravirtual
| hvm
).
vpc-id
- The ID of the VPC that the instance is running in.
One or more filters.
association.allocation-id
- The allocation ID returned when you allocated the Elastic IP address (IPv4) for your network interface.
association.association-id
- The association ID returned when the network interface was associated with an IPv4 address.
addresses.association.owner-id
- The owner ID of the addresses associated with the network interface.
addresses.association.public-ip
- The association ID returned when the network interface was associated with the Elastic IP address (IPv4).
addresses.primary
- Whether the private IPv4 address is the primary IP address associated with the network interface.
addresses.private-ip-address
- The private IPv4 addresses associated with the network interface.
association.ip-owner-id
- The owner of the Elastic IP address (IPv4) associated with the network interface.
association.public-ip
- The address of the Elastic IP address (IPv4) bound to the network interface.
association.public-dns-name
- The public DNS name for the network interface (IPv4).
attachment.attach-time
- The time that the network interface was attached to an instance.
attachment.attachment-id
- The ID of the interface attachment.
attachment.delete-on-termination
- Indicates whether the attachment is deleted when an instance is terminated.
attachment.device-index
- The device index to which the network interface is attached.
attachment.instance-id
- The ID of the instance to which the network interface is attached.
attachment.instance-owner-id
- The owner ID of the instance to which the network interface is attached.
attachment.status
- The status of the attachment (attaching
| attached
| detaching
| detached
).
availability-zone
- The Availability Zone of the network interface.
description
- The description of the network interface.
group-id
- The ID of a security group associated with the network interface.
ipv6-addresses.ipv6-address
- An IPv6 address associated with the network interface.
interface-type
- The type of network interface (api_gateway_managed
| aws_codestar_connections_managed
| branch
| ec2_instance_connect_endpoint
| efa
| efa-only
| efs
| gateway_load_balancer
| gateway_load_balancer_endpoint
| global_accelerator_managed
| interface
| iot_rules_managed
| lambda
| load_balancer
| nat_gateway
| network_load_balancer
| quicksight
| transit_gateway
| trunk
| vpc_endpoint
).
mac-address
- The MAC address of the network interface.
network-interface-id
- The ID of the network interface.
operator.managed
- A Boolean that indicates whether this is a managed network interface.
operator.principal
- The principal that manages the network interface. Only valid for managed network interfaces, where managed
is true
.
owner-id
- The Amazon Web Services account ID of the network interface owner.
private-dns-name
- The private DNS name of the network interface (IPv4).
private-ip-address
- The private IPv4 address or addresses of the network interface.
requester-id
- The alias or Amazon Web Services account ID of the principal or service that created the network interface.
requester-managed
- Indicates whether the network interface is being managed by an Amazon Web Services service (for example, Amazon Web Services Management Console, Auto Scaling, and so on).
source-dest-check
- Indicates whether the network interface performs source/destination checking. A value of true
means checking is enabled, and false
means checking is disabled. The value must be false
for the network interface to perform network address translation (NAT) in your VPC.
status
- The status of the network interface. If the network interface is not attached to an instance, the status is available
; if a network interface is attached to an instance the status is in-use
.
subnet-id
- The ID of the subnet for the network interface.
tag
:<key> - The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value. For example, to find all resources that have a tag with the key Owner
and the value TeamA
, specify tag:Owner
for the filter name and TeamA
for the filter value.
tag-key
- The key of a tag assigned to the resource. Use this filter to find all resources assigned a tag with a specific key, regardless of the tag value.
vpc-id
- The ID of the VPC for the network interface.
One or more filters.
association.allocation-id
- The allocation ID returned when you allocated the Elastic IP address (IPv4) for your network interface.
association.association-id
- The association ID returned when the network interface was associated with an IPv4 address.
addresses.association.owner-id
- The owner ID of the addresses associated with the network interface.
addresses.association.public-ip
- The association ID returned when the network interface was associated with the Elastic IP address (IPv4).
addresses.primary
- Whether the private IPv4 address is the primary IP address associated with the network interface.
addresses.private-ip-address
- The private IPv4 addresses associated with the network interface.
association.ip-owner-id
- The owner of the Elastic IP address (IPv4) associated with the network interface.
association.public-ip
- The address of the Elastic IP address (IPv4) bound to the network interface.
association.public-dns-name
- The public DNS name for the network interface (IPv4).
attachment.attach-time
- The time that the network interface was attached to an instance.
attachment.attachment-id
- The ID of the interface attachment.
attachment.delete-on-termination
- Indicates whether the attachment is deleted when an instance is terminated.
attachment.device-index
- The device index to which the network interface is attached.
attachment.instance-id
- The ID of the instance to which the network interface is attached.
attachment.instance-owner-id
- The owner ID of the instance to which the network interface is attached.
attachment.status
- The status of the attachment (attaching
| attached
| detaching
| detached
).
availability-zone
- The Availability Zone of the network interface.
description
- The description of the network interface.
group-id
- The ID of a security group associated with the network interface.
ipv6-addresses.ipv6-address
- An IPv6 address associated with the network interface.
interface-type
- The type of network interface (api_gateway_managed
| aws_codestar_connections_managed
| branch
| ec2_instance_connect_endpoint
| efa
| efa-only
| efs
| gateway_load_balancer
| gateway_load_balancer_endpoint
| global_accelerator_managed
| interface
| iot_rules_managed
| lambda
| load_balancer
| nat_gateway
| network_load_balancer
| quicksight
| transit_gateway
| trunk
| vpc_endpoint
).
mac-address
- The MAC address of the network interface.
network-interface-id
- The ID of the network interface.
owner-id
- The Amazon Web Services account ID of the network interface owner.
private-dns-name
- The private DNS name of the network interface (IPv4).
private-ip-address
- The private IPv4 address or addresses of the network interface.
requester-id
- The alias or Amazon Web Services account ID of the principal or service that created the network interface.
requester-managed
- Indicates whether the network interface is being managed by an Amazon Web Services service (for example, Amazon Web Services Management Console, Auto Scaling, and so on).
source-dest-check
- Indicates whether the network interface performs source/destination checking. A value of true
means checking is enabled, and false
means checking is disabled. The value must be false
for the network interface to perform network address translation (NAT) in your VPC.
status
- The status of the network interface. If the network interface is not attached to an instance, the status is available
; if a network interface is attached to an instance the status is in-use
.
subnet-id
- The ID of the subnet for the network interface.
tag
:<key> - The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value. For example, to find all resources that have a tag with the key Owner
and the value TeamA
, specify tag:Owner
for the filter name and TeamA
for the filter value.
tag-key
- The key of a tag assigned to the resource. Use this filter to find all resources assigned a tag with a specific key, regardless of the tag value.
vpc-id
- The ID of the VPC for the network interface.
The boot mode that is used to boot the instance at launch or start. For more information, see Boot modes in the Amazon EC2 User Guide.
", "locationName":"currentInstanceBootMode" }, + "NetworkPerformanceOptions":{ + "shape":"InstanceNetworkPerformanceOptions", + "documentation":"Contains settings for the network performance options for your instance.
", + "locationName":"networkPerformanceOptions" + }, "Operator":{ "shape":"OperatorResponse", "documentation":"The service provider that manages the instance.
", @@ -36993,6 +37023,14 @@ "default" ] }, + "InstanceBandwidthWeighting":{ + "type":"string", + "enum":[ + "default", + "vpc-1", + "ebs-1" + ] + }, "InstanceBlockDeviceMapping":{ "type":"structure", "members":{ @@ -38109,6 +38147,27 @@ "locationName":"item" } }, + "InstanceNetworkPerformanceOptions":{ + "type":"structure", + "members":{ + "BandwidthWeighting":{ + "shape":"InstanceBandwidthWeighting", + "documentation":"When you configure network bandwidth weighting, you can boost your baseline bandwidth for either networking or EBS by up to 25%. The total available baseline bandwidth for your instance remains the same. The default option uses the standard bandwidth configuration for your instance type.
", + "locationName":"bandwidthWeighting" + } + }, + "documentation":"With network performance options, you can adjust your bandwidth preferences to meet the needs of the workload that runs on your instance.
" + }, + "InstanceNetworkPerformanceOptionsRequest":{ + "type":"structure", + "members":{ + "BandwidthWeighting":{ + "shape":"InstanceBandwidthWeighting", + "documentation":"Specify the bandwidth weighting option to boost the associated type of baseline bandwidth, as follows:
This option uses the standard bandwidth configuration for your instance type.
This option boosts your networking baseline bandwidth and reduces your EBS baseline bandwidth.
This option boosts your EBS baseline bandwidth and reduces your networking baseline bandwidth.
Configure network performance options for your instance that are geared towards performance improvements based on the workload that it runs.
" + }, "InstancePrivateIpAddress":{ "type":"structure", "members":{ @@ -42992,6 +43051,27 @@ "locationName":"item" } }, + "LaunchTemplateNetworkPerformanceOptions":{ + "type":"structure", + "members":{ + "BandwidthWeighting":{ + "shape":"InstanceBandwidthWeighting", + "documentation":"When you configure network bandwidth weighting, you can boost baseline bandwidth for either networking or EBS by up to 25%. The total available baseline bandwidth for your instance remains the same. The default option uses the standard bandwidth configuration for your instance type.
", + "locationName":"bandwidthWeighting" + } + }, + "documentation":"With network performance options, you can adjust your bandwidth preferences to meet the needs of the workload that runs on your instance at launch.
" + }, + "LaunchTemplateNetworkPerformanceOptionsRequest":{ + "type":"structure", + "members":{ + "BandwidthWeighting":{ + "shape":"InstanceBandwidthWeighting", + "documentation":"Specify the bandwidth weighting option to boost the associated type of baseline bandwidth, as follows:
This option uses the standard bandwidth configuration for your instance type.
This option boosts your networking baseline bandwidth and reduces your EBS baseline bandwidth.
This option boosts your EBS baseline bandwidth and reduces your networking baseline bandwidth.
When you configure network performance options in your launch template, your instance is geared for performance improvements based on the workload that it runs as soon as it's available.
" + }, "LaunchTemplateOverrides":{ "type":"structure", "members":{ @@ -45479,6 +45559,42 @@ } } }, + "ModifyInstanceNetworkPerformanceRequest":{ + "type":"structure", + "required":[ + "InstanceId", + "BandwidthWeighting" + ], + "members":{ + "InstanceId":{ + "shape":"InstanceId", + "documentation":"The ID of the instance to update.
" + }, + "BandwidthWeighting":{ + "shape":"InstanceBandwidthWeighting", + "documentation":"Specify the bandwidth weighting option to boost the associated type of baseline bandwidth, as follows:
This option uses the standard bandwidth configuration for your instance type.
This option boosts your networking baseline bandwidth and reduces your EBS baseline bandwidth.
This option boosts your EBS baseline bandwidth and reduces your networking baseline bandwidth.
Checks whether you have the required permissions for the operation, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation
. Otherwise, it is UnauthorizedOperation
.
The instance ID that was updated.
", + "locationName":"instanceId" + }, + "BandwidthWeighting":{ + "shape":"InstanceBandwidthWeighting", + "documentation":"Contains the updated configuration for bandwidth weighting on the specified instance.
", + "locationName":"bandwidthWeighting" + } + } + }, "ModifyInstancePlacementRequest":{ "type":"structure", "required":["InstanceId"], @@ -48412,6 +48528,11 @@ "shape":"EnaSrdSupported", "documentation":"Indicates whether the instance type supports ENA Express. ENA Express uses Amazon Web Services Scalable Reliable Datagram (SRD) technology to increase the maximum bandwidth used per stream and minimize tail latency of network traffic between EC2 instances.
", "locationName":"enaSrdSupported" + }, + "BandwidthWeightings":{ + "shape":"BandwidthWeightingTypeList", + "documentation":"A list of valid settings for configurable bandwidth weighting for the instance type, if supported.
", + "locationName":"bandwidthWeightings" } }, "documentation":"Describes the networking features of the instance type.
" @@ -53004,6 +53125,10 @@ "Operator":{ "shape":"OperatorRequest", "documentation":"The entity that manages the launch template.
" + }, + "NetworkPerformanceOptions":{ + "shape":"LaunchTemplateNetworkPerformanceOptionsRequest", + "documentation":"Contains launch template settings to boost network performance for the type of workload that runs on your instance.
" } }, "documentation":"The information to include in the launch template.
You must specify at least one parameter for the launch template data.
The entity that manages the launch template.
", "locationName":"operator" + }, + "NetworkPerformanceOptions":{ + "shape":"LaunchTemplateNetworkPerformanceOptions", + "documentation":"Contains the launch template settings for network performance options for your instance.
", + "locationName":"networkPerformanceOptions" } }, "documentation":"The information for a launch template.
" @@ -55270,6 +55400,10 @@ "shape":"Boolean", "documentation":"If you’re launching an instance into a dual-stack or IPv6-only subnet, you can enable assigning a primary IPv6 address. A primary IPv6 address is an IPv6 GUA address associated with an ENI that you have enabled to use a primary IPv6 address. Use this option if an instance relies on its IPv6 address not changing. When you launch the instance, Amazon Web Services will automatically assign an IPv6 address associated with the ENI attached to your instance to be the primary IPv6 address. Once you enable an IPv6 GUA address to be a primary IPv6, you cannot disable it. When you enable an IPv6 GUA address to be a primary IPv6, the first IPv6 GUA will be made the primary IPv6 address until the instance is terminated or the network interface is detached. If you have multiple IPv6 addresses associated with an ENI attached to your instance and you enable a primary IPv6 address, the first IPv6 GUA address associated with the ENI becomes the primary IPv6 address.
" }, + "NetworkPerformanceOptions":{ + "shape":"InstanceNetworkPerformanceOptionsRequest", + "documentation":"Contains settings for the network performance options for the instance.
" + }, "Operator":{ "shape":"OperatorRequest", "documentation":"Reserved for internal use.
" diff --git a/botocore/data/ecs/2014-11-13/service-2.json b/botocore/data/ecs/2014-11-13/service-2.json index 4a7000b9d2..8f5a1fdf9a 100644 --- a/botocore/data/ecs/2014-11-13/service-2.json +++ b/botocore/data/ecs/2014-11-13/service-2.json @@ -1295,7 +1295,7 @@ "documentation":"The base value designates how many tasks, at a minimum, to run on the specified capacity provider. Only one capacity provider in a capacity provider strategy can have a base defined. If no value is specified, the default value of 0
is used.
The details of a capacity provider strategy. A capacity provider strategy can be set when using the RunTaskor CreateCluster APIs or as the default capacity provider strategy for a cluster with the CreateCluster
API.
Only capacity providers that are already associated with a cluster and have an ACTIVE
or UPDATING
status can be used in a capacity provider strategy. The PutClusterCapacityProviders API is used to associate a capacity provider with a cluster.
If specifying a capacity provider that uses an Auto Scaling group, the capacity provider must already be created. New Auto Scaling group capacity providers can be created with the CreateClusterCapacityProvider API operation.
To use a Fargate capacity provider, specify either the FARGATE
or FARGATE_SPOT
capacity providers. The Fargate capacity providers are available to all accounts and only need to be associated with a cluster to be used in a capacity provider strategy.
With FARGATE_SPOT
, you can run interruption tolerant tasks at a rate that's discounted compared to the FARGATE
price. FARGATE_SPOT
runs tasks on spare compute capacity. When Amazon Web Services needs the capacity back, your tasks are interrupted with a two-minute warning. FARGATE_SPOT
supports Linux tasks with the X86_64 architecture on platform version 1.3.0 or later. FARGATE_SPOT
supports Linux tasks with the ARM64 architecture on platform version 1.4.0 or later.
A capacity provider strategy may contain a maximum of 6 capacity providers.
" + "documentation":"The details of a capacity provider strategy. A capacity provider strategy can be set when using the RunTaskor CreateCluster APIs or as the default capacity provider strategy for a cluster with the CreateCluster
API.
Only capacity providers that are already associated with a cluster and have an ACTIVE
or UPDATING
status can be used in a capacity provider strategy. The PutClusterCapacityProviders API is used to associate a capacity provider with a cluster.
If specifying a capacity provider that uses an Auto Scaling group, the capacity provider must already be created. New Auto Scaling group capacity providers can be created with the CreateClusterCapacityProvider API operation.
To use a Fargate capacity provider, specify either the FARGATE
or FARGATE_SPOT
capacity providers. The Fargate capacity providers are available to all accounts and only need to be associated with a cluster to be used in a capacity provider strategy.
With FARGATE_SPOT
, you can run interruption tolerant tasks at a rate that's discounted compared to the FARGATE
price. FARGATE_SPOT
runs tasks on spare compute capacity. When Amazon Web Services needs the capacity back, your tasks are interrupted with a two-minute warning. FARGATE_SPOT
supports Linux tasks with the X86_64 architecture on platform version 1.3.0 or later. FARGATE_SPOT
supports Linux tasks with the ARM64 architecture on platform version 1.4.0 or later.
A capacity provider strategy can contain a maximum of 20 capacity providers.
" }, "CapacityProviderStrategyItemBase":{ "type":"integer", @@ -2175,7 +2175,7 @@ }, "capacityProviderStrategy":{ "shape":"CapacityProviderStrategy", - "documentation":"The capacity provider strategy to use for the service.
If a capacityProviderStrategy
is specified, the launchType
parameter must be omitted. If no capacityProviderStrategy
or launchType
is specified, the defaultCapacityProviderStrategy
for the cluster is used.
A capacity provider strategy may contain a maximum of 6 capacity providers.
" + "documentation":"The capacity provider strategy to use for the service.
If a capacityProviderStrategy
is specified, the launchType
parameter must be omitted. If no capacityProviderStrategy
or launchType
is specified, the defaultCapacityProviderStrategy
for the cluster is used.
A capacity provider strategy can contain a maximum of 20 capacity providers.
" }, "platformVersion":{ "shape":"String", @@ -2646,11 +2646,11 @@ }, "maximumPercent":{ "shape":"BoxedInteger", - "documentation":"If a service is using the rolling update (ECS
) deployment type, the maximumPercent
parameter represents an upper limit on the number of your service's tasks that are allowed in the RUNNING
or PENDING
state during a deployment, as a percentage of the desiredCount
(rounded down to the nearest integer). This parameter enables you to define the deployment batch size. For example, if your service is using the REPLICA
service scheduler and has a desiredCount
of four tasks and a maximumPercent
value of 200%, the scheduler may start four new tasks before stopping the four older tasks (provided that the cluster resources required to do this are available). The default maximumPercent
value for a service using the REPLICA
service scheduler is 200%.
If a service is using either the blue/green (CODE_DEPLOY
) or EXTERNAL
deployment types, and tasks in the service use the EC2 launch type, the maximum percent value is set to the default value. The maximum percent value is used to define the upper limit on the number of the tasks in the service that remain in the RUNNING
state while the container instances are in the DRAINING
state.
You can't specify a custom maximumPercent
value for a service that uses either the blue/green (CODE_DEPLOY
) or EXTERNAL
deployment types and has tasks that use the EC2 launch type.
If the tasks in the service use the Fargate launch type, the maximum percent value is not used, although it is returned when describing your service.
" + "documentation":"If a service is using the rolling update (ECS
) deployment type, the maximumPercent
parameter represents an upper limit on the number of your service's tasks that are allowed in the RUNNING
or PENDING
state during a deployment, as a percentage of the desiredCount
(rounded down to the nearest integer). This parameter enables you to define the deployment batch size. For example, if your service is using the REPLICA
service scheduler and has a desiredCount
of four tasks and a maximumPercent
value of 200%, the scheduler may start four new tasks before stopping the four older tasks (provided that the cluster resources required to do this are available). The default maximumPercent
value for a service using the REPLICA
service scheduler is 200%.
The Amazon ECS scheduler uses this parameter to replace unhealthy tasks by starting replacement tasks first and then stopping the unhealthy tasks, as long as cluster resources for starting replacement tasks are available. For more information about how the scheduler replaces unhealthy tasks, see Amazon ECS services.
If a service is using either the blue/green (CODE_DEPLOY
) or EXTERNAL
deployment types, and tasks in the service use the EC2 launch type, the maximum percent value is set to the default value. The maximum percent value is used to define the upper limit on the number of the tasks in the service that remain in the RUNNING
state while the container instances are in the DRAINING
state.
You can't specify a custom maximumPercent
value for a service that uses either the blue/green (CODE_DEPLOY
) or EXTERNAL
deployment types and has tasks that use the EC2 launch type.
If the tasks in the service use the Fargate launch type, the maximum percent value is not used, although it is returned when describing your service.
" }, "minimumHealthyPercent":{ "shape":"BoxedInteger", - "documentation":"If a service is using the rolling update (ECS
) deployment type, the minimumHealthyPercent
represents a lower limit on the number of your service's tasks that must remain in the RUNNING
state during a deployment, as a percentage of the desiredCount
(rounded up to the nearest integer). This parameter enables you to deploy without using additional cluster capacity. For example, if your service has a desiredCount
of four tasks and a minimumHealthyPercent
of 50%, the service scheduler may stop two existing tasks to free up cluster capacity before starting two new tasks.
For services that do not use a load balancer, the following should be noted:
A service is considered healthy if all essential containers within the tasks in the service pass their health checks.
If a task has no essential containers with a health check defined, the service scheduler will wait for 40 seconds after a task reaches a RUNNING
state before the task is counted towards the minimum healthy percent total.
If a task has one or more essential containers with a health check defined, the service scheduler will wait for the task to reach a healthy status before counting it towards the minimum healthy percent total. A task is considered healthy when all essential containers within the task have passed their health checks. The amount of time the service scheduler can wait for is determined by the container health check settings.
For services that do use a load balancer, the following should be noted:
If a task has no essential containers with a health check defined, the service scheduler will wait for the load balancer target group health check to return a healthy status before counting the task towards the minimum healthy percent total.
If a task has an essential container with a health check defined, the service scheduler will wait for both the task to reach a healthy status and the load balancer target group health check to return a healthy status before counting the task towards the minimum healthy percent total.
The default value for a replica service for minimumHealthyPercent
is 100%. The default minimumHealthyPercent
value for a service using the DAEMON
service schedule is 0% for the CLI, the Amazon Web Services SDKs, and the APIs and 50% for the Amazon Web Services Management Console.
The minimum number of healthy tasks during a deployment is the desiredCount
multiplied by the minimumHealthyPercent
/100, rounded up to the nearest integer value.
If a service is using either the blue/green (CODE_DEPLOY
) or EXTERNAL
deployment types and is running tasks that use the EC2 launch type, the minimum healthy percent value is set to the default value. The minimum healthy percent value is used to define the lower limit on the number of the tasks in the service that remain in the RUNNING
state while the container instances are in the DRAINING
state.
You can't specify a custom minimumHealthyPercent
value for a service that uses either the blue/green (CODE_DEPLOY
) or EXTERNAL
deployment types and has tasks that use the EC2 launch type.
If a service is using either the blue/green (CODE_DEPLOY
) or EXTERNAL
deployment types and is running tasks that use the Fargate launch type, the minimum healthy percent value is not used, although it is returned when describing your service.
If a service is using the rolling update (ECS
) deployment type, the minimumHealthyPercent
represents a lower limit on the number of your service's tasks that must remain in the RUNNING
state during a deployment, as a percentage of the desiredCount
(rounded up to the nearest integer). This parameter enables you to deploy without using additional cluster capacity. For example, if your service has a desiredCount
of four tasks and a minimumHealthyPercent
of 50%, the service scheduler may stop two existing tasks to free up cluster capacity before starting two new tasks.
If any tasks are unhealthy and if maximumPercent
doesn't allow the Amazon ECS scheduler to start replacement tasks, the scheduler stops the unhealthy tasks one-by-one — using the minimumHealthyPercent
as a constraint — to clear up capacity to launch replacement tasks. For more information about how the scheduler replaces unhealthy tasks, see Amazon ECS services .
For services that do not use a load balancer, the following should be noted:
A service is considered healthy if all essential containers within the tasks in the service pass their health checks.
If a task has no essential containers with a health check defined, the service scheduler will wait for 40 seconds after a task reaches a RUNNING
state before the task is counted towards the minimum healthy percent total.
If a task has one or more essential containers with a health check defined, the service scheduler will wait for the task to reach a healthy status before counting it towards the minimum healthy percent total. A task is considered healthy when all essential containers within the task have passed their health checks. The amount of time the service scheduler can wait for is determined by the container health check settings.
For services that do use a load balancer, the following should be noted:
If a task has no essential containers with a health check defined, the service scheduler will wait for the load balancer target group health check to return a healthy status before counting the task towards the minimum healthy percent total.
If a task has an essential container with a health check defined, the service scheduler will wait for both the task to reach a healthy status and the load balancer target group health check to return a healthy status before counting the task towards the minimum healthy percent total.
The default value for a replica service for minimumHealthyPercent
is 100%. The default minimumHealthyPercent
value for a service using the DAEMON
service schedule is 0% for the CLI, the Amazon Web Services SDKs, and the APIs and 50% for the Amazon Web Services Management Console.
The minimum number of healthy tasks during a deployment is the desiredCount
multiplied by the minimumHealthyPercent
/100, rounded up to the nearest integer value.
If a service is using either the blue/green (CODE_DEPLOY
) or EXTERNAL
deployment types and is running tasks that use the EC2 launch type, the minimum healthy percent value is set to the default value. The minimum healthy percent value is used to define the lower limit on the number of the tasks in the service that remain in the RUNNING
state while the container instances are in the DRAINING
state.
You can't specify a custom minimumHealthyPercent
value for a service that uses either the blue/green (CODE_DEPLOY
) or EXTERNAL
deployment types and has tasks that use the EC2 launch type.
If a service is using either the blue/green (CODE_DEPLOY
) or EXTERNAL
deployment types and is running tasks that use the Fargate launch type, the minimum healthy percent value is not used, although it is returned when describing your service.
The Amazon ECS account setting name to modify.
The following are the valid values for the account setting name.
serviceLongArnFormat
- When modified, the Amazon Resource Name (ARN) and resource ID format of the resource type for a specified user, role, or the root user for an account is affected. The opt-in and opt-out account setting must be set for each Amazon ECS resource separately. The ARN and resource ID format of a resource is defined by the opt-in status of the user or role that created the resource. You must turn on this setting to use Amazon ECS features such as resource tagging.
taskLongArnFormat
- When modified, the Amazon Resource Name (ARN) and resource ID format of the resource type for a specified user, role, or the root user for an account is affected. The opt-in and opt-out account setting must be set for each Amazon ECS resource separately. The ARN and resource ID format of a resource is defined by the opt-in status of the user or role that created the resource. You must turn on this setting to use Amazon ECS features such as resource tagging.
containerInstanceLongArnFormat
- When modified, the Amazon Resource Name (ARN) and resource ID format of the resource type for a specified user, role, or the root user for an account is affected. The opt-in and opt-out account setting must be set for each Amazon ECS resource separately. The ARN and resource ID format of a resource is defined by the opt-in status of the user or role that created the resource. You must turn on this setting to use Amazon ECS features such as resource tagging.
awsvpcTrunking
- When modified, the elastic network interface (ENI) limit for any new container instances that support the feature is changed. If awsvpcTrunking
is turned on, any new container instances that support the feature are launched have the increased ENI limits available to them. For more information, see Elastic Network Interface Trunking in the Amazon Elastic Container Service Developer Guide.
containerInsights
- Container Insights with enhanced observability provides all the Container Insights metrics, plus additional task and container metrics. This version supports enhanced observability for Amazon ECS clusters using the Amazon EC2 and Fargate launch types. After you configure Container Insights with enhanced observability on Amazon ECS, Container Insights auto-collects detailed infrastructure telemetry from the cluster level down to the container level in your environment and displays these critical performance data in curated dashboards removing the heavy lifting in observability set-up.
To use Container Insights with enhanced observability, set the containerInsights
account setting to enhanced
.
To use Container Insights, set the containerInsights
account setting to enabled
.
For more information, see Monitor Amazon ECS containers using Container Insights with enhanced observability in the Amazon Elastic Container Service Developer Guide.
dualStackIPv6
- When turned on, when using a VPC in dual stack mode, your tasks using the awsvpc
network mode can have an IPv6 address assigned. For more information on using IPv6 with tasks launched on Amazon EC2 instances, see Using a VPC in dual-stack mode. For more information on using IPv6 with tasks launched on Fargate, see Using a VPC in dual-stack mode.
fargateTaskRetirementWaitPeriod
- When Amazon Web Services determines that a security or infrastructure update is needed for an Amazon ECS task hosted on Fargate, the tasks need to be stopped and new tasks launched to replace them. Use fargateTaskRetirementWaitPeriod
to configure the wait time to retire a Fargate task. For information about the Fargate tasks maintenance, see Amazon Web Services Fargate task maintenance in the Amazon ECS Developer Guide.
tagResourceAuthorization
- Amazon ECS is introducing tagging authorization for resource creation. Users must have permissions for actions that create the resource, such as ecsCreateCluster
. If tags are specified when you create a resource, Amazon Web Services performs additional authorization to verify if users or roles have permissions to create tags. Therefore, you must grant explicit permissions to use the ecs:TagResource
action. For more information, see Grant permission to tag resources on creation in the Amazon ECS Developer Guide.
guardDutyActivate
- The guardDutyActivate
parameter is read-only in Amazon ECS and indicates whether Amazon ECS Runtime Monitoring is enabled or disabled by your security administrator in your Amazon ECS account. Amazon GuardDuty controls this account setting on your behalf. For more information, see Protecting Amazon ECS workloads with Amazon ECS Runtime Monitoring.
The Amazon ECS account setting name to modify.
The following are the valid values for the account setting name.
serviceLongArnFormat
- When modified, the Amazon Resource Name (ARN) and resource ID format of the resource type for a specified user, role, or the root user for an account is affected. The opt-in and opt-out account setting must be set for each Amazon ECS resource separately. The ARN and resource ID format of a resource is defined by the opt-in status of the user or role that created the resource. You must turn on this setting to use Amazon ECS features such as resource tagging.
taskLongArnFormat
- When modified, the Amazon Resource Name (ARN) and resource ID format of the resource type for a specified user, role, or the root user for an account is affected. The opt-in and opt-out account setting must be set for each Amazon ECS resource separately. The ARN and resource ID format of a resource is defined by the opt-in status of the user or role that created the resource. You must turn on this setting to use Amazon ECS features such as resource tagging.
fargateFIPSMode
- When turned on, you can run Fargate workloads in a manner that is compliant with Federal Information Processing Standard (FIPS-140). For more information, see Fargate Federal Information Processing Standard (FIPS-140).
containerInstanceLongArnFormat
- When modified, the Amazon Resource Name (ARN) and resource ID format of the resource type for a specified user, role, or the root user for an account is affected. The opt-in and opt-out account setting must be set for each Amazon ECS resource separately. The ARN and resource ID format of a resource is defined by the opt-in status of the user or role that created the resource. You must turn on this setting to use Amazon ECS features such as resource tagging.
awsvpcTrunking
- When modified, the elastic network interface (ENI) limit for any new container instances that support the feature is changed. If awsvpcTrunking
is turned on, any new container instances that support the feature are launched have the increased ENI limits available to them. For more information, see Elastic Network Interface Trunking in the Amazon Elastic Container Service Developer Guide.
containerInsights
- Container Insights with enhanced observability provides all the Container Insights metrics, plus additional task and container metrics. This version supports enhanced observability for Amazon ECS clusters using the Amazon EC2 and Fargate launch types. After you configure Container Insights with enhanced observability on Amazon ECS, Container Insights auto-collects detailed infrastructure telemetry from the cluster level down to the container level in your environment and displays these critical performance data in curated dashboards removing the heavy lifting in observability set-up.
To use Container Insights with enhanced observability, set the containerInsights
account setting to enhanced
.
To use Container Insights, set the containerInsights
account setting to enabled
.
For more information, see Monitor Amazon ECS containers using Container Insights with enhanced observability in the Amazon Elastic Container Service Developer Guide.
dualStackIPv6
- When turned on, when using a VPC in dual stack mode, your tasks using the awsvpc
network mode can have an IPv6 address assigned. For more information on using IPv6 with tasks launched on Amazon EC2 instances, see Using a VPC in dual-stack mode. For more information on using IPv6 with tasks launched on Fargate, see Using a VPC in dual-stack mode.
fargateTaskRetirementWaitPeriod
- When Amazon Web Services determines that a security or infrastructure update is needed for an Amazon ECS task hosted on Fargate, the tasks need to be stopped and new tasks launched to replace them. Use fargateTaskRetirementWaitPeriod
to configure the wait time to retire a Fargate task. For information about the Fargate tasks maintenance, see Amazon Web Services Fargate task maintenance in the Amazon ECS Developer Guide.
tagResourceAuthorization
- Amazon ECS is introducing tagging authorization for resource creation. Users must have permissions for actions that create the resource, such as ecsCreateCluster
. If tags are specified when you create a resource, Amazon Web Services performs additional authorization to verify if users or roles have permissions to create tags. Therefore, you must grant explicit permissions to use the ecs:TagResource
action. For more information, see Grant permission to tag resources on creation in the Amazon ECS Developer Guide.
guardDutyActivate
- The guardDutyActivate
parameter is read-only in Amazon ECS and indicates whether Amazon ECS Runtime Monitoring is enabled or disabled by your security administrator in your Amazon ECS account. Amazon GuardDuty controls this account setting on your behalf. For more information, see Protecting Amazon ECS workloads with Amazon ECS Runtime Monitoring.
The capacity provider strategy to use for the task.
If a capacityProviderStrategy
is specified, the launchType
parameter must be omitted. If no capacityProviderStrategy
or launchType
is specified, the defaultCapacityProviderStrategy
for the cluster is used.
When you use cluster auto scaling, you must specify capacityProviderStrategy
and not launchType
.
A capacity provider strategy may contain a maximum of 6 capacity providers.
" + "documentation":"The capacity provider strategy to use for the task.
If a capacityProviderStrategy
is specified, the launchType
parameter must be omitted. If no capacityProviderStrategy
or launchType
is specified, the defaultCapacityProviderStrategy
for the cluster is used.
When you use cluster auto scaling, you must specify capacityProviderStrategy
and not launchType
.
A capacity provider strategy can contain a maximum of 20 capacity providers.
" }, "cluster":{ "shape":"String", diff --git a/botocore/data/endpoints.json b/botocore/data/endpoints.json index 1cbdc68d02..7f973b234b 100644 --- a/botocore/data/endpoints.json +++ b/botocore/data/endpoints.json @@ -4505,27 +4505,132 @@ }, "cognito-identity" : { "endpoints" : { - "af-south-1" : { }, - "ap-east-1" : { }, - "ap-northeast-1" : { }, - "ap-northeast-2" : { }, - "ap-northeast-3" : { }, - "ap-south-1" : { }, - "ap-south-2" : { }, - "ap-southeast-1" : { }, - "ap-southeast-2" : { }, - "ap-southeast-3" : { }, - "ap-southeast-4" : { }, - "ca-central-1" : { }, - "ca-west-1" : { }, - "eu-central-1" : { }, - "eu-central-2" : { }, - "eu-north-1" : { }, - "eu-south-1" : { }, - "eu-south-2" : { }, - "eu-west-1" : { }, - "eu-west-2" : { }, - "eu-west-3" : { }, + "af-south-1" : { + "variants" : [ { + "hostname" : "cognito-identity.af-south-1.amazonaws.com", + "tags" : [ "dualstack" ] + } ] + }, + "ap-east-1" : { + "variants" : [ { + "hostname" : "cognito-identity.ap-east-1.amazonaws.com", + "tags" : [ "dualstack" ] + } ] + }, + "ap-northeast-1" : { + "variants" : [ { + "hostname" : "cognito-identity.ap-northeast-1.amazonaws.com", + "tags" : [ "dualstack" ] + } ] + }, + "ap-northeast-2" : { + "variants" : [ { + "hostname" : "cognito-identity.ap-northeast-2.amazonaws.com", + "tags" : [ "dualstack" ] + } ] + }, + "ap-northeast-3" : { + "variants" : [ { + "hostname" : "cognito-identity.ap-northeast-3.amazonaws.com", + "tags" : [ "dualstack" ] + } ] + }, + "ap-south-1" : { + "variants" : [ { + "hostname" : "cognito-identity.ap-south-1.amazonaws.com", + "tags" : [ "dualstack" ] + } ] + }, + "ap-south-2" : { + "variants" : [ { + "hostname" : "cognito-identity.ap-south-2.amazonaws.com", + "tags" : [ "dualstack" ] + } ] + }, + "ap-southeast-1" : { + "variants" : [ { + "hostname" : "cognito-identity.ap-southeast-1.amazonaws.com", + "tags" : [ "dualstack" ] + } ] + }, + "ap-southeast-2" : { + "variants" : [ { + "hostname" : "cognito-identity.ap-southeast-2.amazonaws.com", + "tags" : [ "dualstack" ] + } ] + }, + "ap-southeast-3" : { + "variants" : [ { + "hostname" : "cognito-identity.ap-southeast-3.amazonaws.com", + "tags" : [ "dualstack" ] + } ] + }, + "ap-southeast-4" : { + "variants" : [ { + "hostname" : "cognito-identity.ap-southeast-4.amazonaws.com", + "tags" : [ "dualstack" ] + } ] + }, + "ca-central-1" : { + "variants" : [ { + "hostname" : "cognito-identity.ca-central-1.amazonaws.com", + "tags" : [ "dualstack" ] + } ] + }, + "ca-west-1" : { + "variants" : [ { + "hostname" : "cognito-identity.ca-west-1.amazonaws.com", + "tags" : [ "dualstack" ] + } ] + }, + "eu-central-1" : { + "variants" : [ { + "hostname" : "cognito-identity.eu-central-1.amazonaws.com", + "tags" : [ "dualstack" ] + } ] + }, + "eu-central-2" : { + "variants" : [ { + "hostname" : "cognito-identity.eu-central-2.amazonaws.com", + "tags" : [ "dualstack" ] + } ] + }, + "eu-north-1" : { + "variants" : [ { + "hostname" : "cognito-identity.eu-north-1.amazonaws.com", + "tags" : [ "dualstack" ] + } ] + }, + "eu-south-1" : { + "variants" : [ { + "hostname" : "cognito-identity.eu-south-1.amazonaws.com", + "tags" : [ "dualstack" ] + } ] + }, + "eu-south-2" : { + "variants" : [ { + "hostname" : "cognito-identity.eu-south-2.amazonaws.com", + "tags" : [ "dualstack" ] + } ] + }, + "eu-west-1" : { + "variants" : [ { + "hostname" : "cognito-identity.eu-west-1.amazonaws.com", + "tags" : [ "dualstack" ] + } ] + }, + "eu-west-2" : { + "variants" : [ { + "hostname" : "cognito-identity.eu-west-2.amazonaws.com", + "tags" : [ "dualstack" ] + } ] + }, + "eu-west-3" : { + "variants" : [ { + "hostname" : "cognito-identity.eu-west-3.amazonaws.com", + "tags" : [ "dualstack" ] + } ] + }, "fips-us-east-1" : { "credentialScope" : { "region" : "us-east-1" @@ -4554,32 +4659,76 @@ "deprecated" : true, "hostname" : "cognito-identity-fips.us-west-2.amazonaws.com" }, - "il-central-1" : { }, - "me-central-1" : { }, - "me-south-1" : { }, - "sa-east-1" : { }, + "il-central-1" : { + "variants" : [ { + "hostname" : "cognito-identity.il-central-1.amazonaws.com", + "tags" : [ "dualstack" ] + } ] + }, + "me-central-1" : { + "variants" : [ { + "hostname" : "cognito-identity.me-central-1.amazonaws.com", + "tags" : [ "dualstack" ] + } ] + }, + "me-south-1" : { + "variants" : [ { + "hostname" : "cognito-identity.me-south-1.amazonaws.com", + "tags" : [ "dualstack" ] + } ] + }, + "sa-east-1" : { + "variants" : [ { + "hostname" : "cognito-identity.sa-east-1.amazonaws.com", + "tags" : [ "dualstack" ] + } ] + }, "us-east-1" : { "variants" : [ { + "hostname" : "cognito-identity-fips.us-east-1.amazonaws.com", + "tags" : [ "dualstack", "fips" ] + }, { "hostname" : "cognito-identity-fips.us-east-1.amazonaws.com", "tags" : [ "fips" ] + }, { + "hostname" : "cognito-identity.us-east-1.amazonaws.com", + "tags" : [ "dualstack" ] } ] }, "us-east-2" : { "variants" : [ { + "hostname" : "cognito-identity-fips.us-east-2.amazonaws.com", + "tags" : [ "dualstack", "fips" ] + }, { "hostname" : "cognito-identity-fips.us-east-2.amazonaws.com", "tags" : [ "fips" ] + }, { + "hostname" : "cognito-identity.us-east-2.amazonaws.com", + "tags" : [ "dualstack" ] } ] }, "us-west-1" : { "variants" : [ { + "hostname" : "cognito-identity-fips.us-west-1.amazonaws.com", + "tags" : [ "dualstack", "fips" ] + }, { "hostname" : "cognito-identity-fips.us-west-1.amazonaws.com", "tags" : [ "fips" ] + }, { + "hostname" : "cognito-identity.us-west-1.amazonaws.com", + "tags" : [ "dualstack" ] } ] }, "us-west-2" : { "variants" : [ { + "hostname" : "cognito-identity-fips.us-west-2.amazonaws.com", + "tags" : [ "dualstack", "fips" ] + }, { "hostname" : "cognito-identity-fips.us-west-2.amazonaws.com", "tags" : [ "fips" ] + }, { + "hostname" : "cognito-identity.us-west-2.amazonaws.com", + "tags" : [ "dualstack" ] } ] } } @@ -23840,7 +23989,12 @@ }, "cognito-identity" : { "endpoints" : { - "cn-north-1" : { } + "cn-north-1" : { + "variants" : [ { + "hostname" : "cognito-identity.cn-north-1.amazonaws.com.cn", + "tags" : [ "dualstack" ] + } ] + } } }, "compute-optimizer" : { @@ -26118,8 +26272,14 @@ }, "us-gov-west-1" : { "variants" : [ { + "hostname" : "cognito-identity-fips.us-gov-west-1.amazonaws.com", + "tags" : [ "dualstack", "fips" ] + }, { "hostname" : "cognito-identity-fips.us-gov-west-1.amazonaws.com", "tags" : [ "fips" ] + }, { + "hostname" : "cognito-identity.us-gov-west-1.amazonaws.com", + "tags" : [ "dualstack" ] } ] } } @@ -30481,6 +30641,23 @@ "us-iso-west-1" : { } } }, + "bedrock" : { + "endpoints" : { + "bedrock-runtime-us-iso-east-1" : { + "credentialScope" : { + "region" : "us-iso-east-1" + }, + "hostname" : "bedrock-runtime.us-iso-east-1.c2s.ic.gov" + }, + "bedrock-us-iso-east-1" : { + "credentialScope" : { + "region" : "us-iso-east-1" + }, + "hostname" : "bedrock.us-iso-east-1.c2s.ic.gov" + }, + "us-iso-east-1" : { } + } + }, "cloudcontrolapi" : { "endpoints" : { "us-iso-east-1" : { }, @@ -31455,13 +31632,21 @@ }, "budgets" : { "endpoints" : { + "aws-iso-b-global" : { + "credentialScope" : { + "region" : "us-isob-east-1" + }, + "hostname" : "budgets.global.sc2s.sgov.gov" + }, "us-isob-east-1" : { "credentialScope" : { "region" : "us-isob-east-1" }, - "hostname" : "budgets.us-isob-east-1.sc2s.sgov.gov" + "hostname" : "budgets.global.sc2s.sgov.gov" } - } + }, + "isRegionalized" : false, + "partitionEndpoint" : "aws-iso-b-global" }, "cloudcontrolapi" : { "endpoints" : { diff --git a/botocore/data/keyspaces/2022-02-10/service-2.json b/botocore/data/keyspaces/2022-02-10/service-2.json index 8c2f872b88..b6ec9a09c5 100644 --- a/botocore/data/keyspaces/2022-02-10/service-2.json +++ b/botocore/data/keyspaces/2022-02-10/service-2.json @@ -328,7 +328,7 @@ {"shape":"AccessDeniedException"}, {"shape":"ResourceNotFoundException"} ], - "documentation":"Adds a new Amazon Web Services Region to the keyspace. You can add a new Region to a keyspace that is either a single or a multi-Region keyspace. The new replica Region is applied to all tables in the keyspace. For more information, see Add an Amazon Web Services Region to a keyspace in Amazon Keyspaces in the Amazon Keyspaces Developer Guide.
To change a single-Region to a multi-Region keyspace, you have to enable client-side timestamps for all tables in the keyspace. For more information, see Client-side timestamps in Amazon Keyspaces in the Amazon Keyspaces Developer Guide.
" + "documentation":" Adds a new Amazon Web Services Region to the keyspace. You can add a new Region to a keyspace that is either a single or a multi-Region keyspace. Amazon Keyspaces is going to replicate all tables in the keyspace to the new Region. To successfully replicate all tables to the new Region, they must use client-side timestamps for conflict resolution. To enable client-side timestamps, specify clientSideTimestamps.status = enabled
when invoking the API. For more information about client-side timestamps, see Client-side timestamps in Amazon Keyspaces in the Amazon Keyspaces Developer Guide.
To add a Region to a keyspace using the UpdateKeyspace
API, the IAM principal needs permissions for the following IAM actions:
cassandra:Alter
cassandra:AlterMultiRegionResource
cassandra:Create
cassandra:CreateMultiRegionResource
cassandra:Select
cassandra:SelectMultiRegionResource
cassandra:Modify
cassandra:ModifyMultiRegionResource
If the keyspace contains a table that is configured in provisioned mode with auto scaling enabled, the following additional IAM actions need to be allowed.
application-autoscaling:RegisterScalableTarget
application-autoscaling:DeregisterScalableTarget
application-autoscaling:DescribeScalableTargets
application-autoscaling:PutScalingPolicy
application-autoscaling:DescribeScalingPolicies
To use the UpdateKeyspace
API, the IAM principal also needs permissions to create a service-linked role with the following elements:
iam:CreateServiceLinkedRole
- The action the principal can perform.
arn:aws:iam::*:role/aws-service-role/replication.cassandra.amazonaws.com/AWSServiceRoleForKeyspacesReplication
- The resource that the action can be performed on.
iam:AWSServiceName: replication.cassandra.amazonaws.com
- The only Amazon Web Services service that this role can be attached to is Amazon Keyspaces.
For more information, see Configure the IAM permissions required to add an Amazon Web Services Region to a keyspace in the Amazon Keyspaces Developer Guide.
" }, "UpdateTable":{ "name":"UpdateTable", diff --git a/botocore/data/medialive/2017-10-14/service-2.json b/botocore/data/medialive/2017-10-14/service-2.json index d0bdf73695..b31a894c23 100644 --- a/botocore/data/medialive/2017-10-14/service-2.json +++ b/botocore/data/medialive/2017-10-14/service-2.json @@ -11209,6 +11209,11 @@ "shape": "__integerMin1Max51", "locationName": "minQp", "documentation": "Sets the minimum QP. If you aren't familiar with quantization adjustment, leave the field empty. MediaLive will\napply an appropriate value." + }, + "Deblocking": { + "shape": "H265Deblocking", + "locationName": "deblocking", + "documentation": "Enable or disable the deblocking filter for this codec. The filter reduces blocking artifacts at block boundaries,\nwhich improves overall video quality. If the filter is disabled, visible block edges might appear in the output,\nespecially at lower bitrates." } }, "documentation": "H265 Settings", @@ -18891,7 +18896,10 @@ "Tags": { "shape": "Tags", "locationName": "tags", - "documentation": "A collection of key-value pairs." + "documentation": "A collection of key-value pairs.", + "deprecated": true, + "deprecatedMessage": "This API is deprecated. You must use UpdateTagsForResource instead.", + "deprecatedSince": "2024-11-20" }, "WhitelistRules": { "shape": "__listOfInputWhitelistRuleCidr", @@ -28078,6 +28086,14 @@ } }, "documentation": "Multiplex M2ts Settings" + }, + "H265Deblocking": { + "type": "string", + "documentation": "H265 Deblocking", + "enum": [ + "DISABLED", + "ENABLED" + ] } }, "documentation": "API for AWS Elemental MediaLive" diff --git a/botocore/data/workspaces/2015-04-08/service-2.json b/botocore/data/workspaces/2015-04-08/service-2.json index c6925f80f7..02d2584531 100644 --- a/botocore/data/workspaces/2015-04-08/service-2.json +++ b/botocore/data/workspaces/2015-04-08/service-2.json @@ -6749,7 +6749,7 @@ }, "UserName":{ "shape":"UserName", - "documentation":"The user name of the user for the WorkSpace. This user name must exist in the Directory Service directory for the WorkSpace.
The reserved keyword, [UNDEFINED]
, is used when creating user-decoupled WorkSpaces.
The user name of the user for the WorkSpace. This user name must exist in the Directory Service directory for the WorkSpace.
The username is not case-sensitive, but we recommend matching the case in the Directory Service directory to avoid potential incompatibilities.
The reserved keyword, [UNDEFINED]
, is used when creating user-decoupled WorkSpaces.