From 895cfb31afb235ab5461432d181680152cafe67d Mon Sep 17 00:00:00 2001 From: aws-sdk-go-automation <43143561+aws-sdk-go-automation@users.noreply.github.com> Date: Thu, 20 Jan 2022 11:13:46 -0800 Subject: [PATCH] Release v1.42.38 (2022-01-20) (#4250) Release v1.42.38 (2022-01-20) === ### Service Client Updates * `service/connect`: Updates service API and documentation * `service/ec2`: Updates service API * C6i, M6i and R6i instances are powered by a third-generation Intel Xeon Scalable processor (Ice Lake) delivering all-core turbo frequency of 3.5 GHz * `service/fis`: Updates service API and documentation * `service/guardduty`: Updates service API and documentation * Amazon GuardDuty findings now include remoteAccountDetails under AwsApiCallAction section if instance credential is exfiltrated. * `service/mediatailor`: Updates service API and documentation --- CHANGELOG.md | 12 ++ aws/version.go | 2 +- models/apis/connect/2017-08-08/api-2.json | 6 +- models/apis/connect/2017-08-08/docs-2.json | 14 +- models/apis/ec2/2016-11-15/api-2.json | 12 ++ models/apis/fis/2020-12-01/api-2.json | 6 +- models/apis/fis/2020-12-01/docs-2.json | 46 +++-- models/apis/guardduty/2017-11-28/api-2.json | 17 ++ models/apis/guardduty/2017-11-28/docs-2.json | 82 ++++---- models/apis/mediatailor/2018-04-23/api-2.json | 35 ++++ .../apis/mediatailor/2018-04-23/docs-2.json | 17 ++ service/connect/api.go | 39 +++- service/connect/doc.go | 5 +- service/ec2/api.go | 48 +++++ service/fis/api.go | 71 ++++--- service/fis/doc.go | 6 +- service/guardduty/api.go | 177 ++++++++++++------ service/guardduty/doc.go | 35 ++-- service/mediatailor/api.go | 97 ++++++++++ 19 files changed, 557 insertions(+), 170 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index bc5d4abec81..bd58d1167c2 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,3 +1,15 @@ +Release v1.42.38 (2022-01-20) +=== + +### Service Client Updates +* `service/connect`: Updates service API and documentation +* `service/ec2`: Updates service API + * C6i, M6i and R6i instances are powered by a third-generation Intel Xeon Scalable processor (Ice Lake) delivering all-core turbo frequency of 3.5 GHz +* `service/fis`: Updates service API and documentation +* `service/guardduty`: Updates service API and documentation + * Amazon GuardDuty findings now include remoteAccountDetails under AwsApiCallAction section if instance credential is exfiltrated. +* `service/mediatailor`: Updates service API and documentation + Release v1.42.37 (2022-01-19) === diff --git a/aws/version.go b/aws/version.go index 839550b7d0a..b578df04658 100644 --- a/aws/version.go +++ b/aws/version.go @@ -5,4 +5,4 @@ package aws const SDKName = "aws-sdk-go" // SDKVersion is the version of this SDK -const SDKVersion = "1.42.37" +const SDKVersion = "1.42.38" diff --git a/models/apis/connect/2017-08-08/api-2.json b/models/apis/connect/2017-08-08/api-2.json index 7e3c2cf1cb1..9cae73d5dba 100644 --- a/models/apis/connect/2017-08-08/api-2.json +++ b/models/apis/connect/2017-08-08/api-2.json @@ -2930,7 +2930,8 @@ "shape":"InstanceId", "location":"uri", "locationName":"InstanceId" - } + }, + "Tags":{"shape":"TagMap"} } }, "CreateUserHierarchyGroupResponse":{ @@ -3974,7 +3975,8 @@ "Arn":{"shape":"ARN"}, "Name":{"shape":"HierarchyGroupName"}, "LevelId":{"shape":"HierarchyLevelId"}, - "HierarchyPath":{"shape":"HierarchyPath"} + "HierarchyPath":{"shape":"HierarchyPath"}, + "Tags":{"shape":"TagMap"} } }, "HierarchyGroupId":{"type":"string"}, diff --git a/models/apis/connect/2017-08-08/docs-2.json b/models/apis/connect/2017-08-08/docs-2.json index 22de36cdbc3..c054aa38b66 100644 --- a/models/apis/connect/2017-08-08/docs-2.json +++ b/models/apis/connect/2017-08-08/docs-2.json @@ -1,6 +1,6 @@ { "version": "2.0", - "service": "
Amazon Connect is a cloud-based contact center solution that you use to set up and manage a customer contact center and provide reliable customer engagement at any scale.
Amazon Connect provides metrics and real-time reporting that enable you to optimize contact routing. You can also resolve customer issues more efficiently by getting customers in touch with the appropriate agents.
There are limits to the number of Amazon Connect resources that you can create. There are also limits to the number of requests that you can make per second. For more information, see Amazon Connect Service Quotas in the Amazon Connect Administrator Guide.
You can connect programmatically to an AWS service by using an endpoint. For a list of Amazon Connect endpoints, see Amazon Connect Endpoints.
Working with contact flows? Check out the Amazon Connect Flow language.
Amazon Connect is a cloud-based contact center solution that you use to set up and manage a customer contact center and provide reliable customer engagement at any scale.
Amazon Connect provides metrics and real-time reporting that enable you to optimize contact routing. You can also resolve customer issues more efficiently by getting customers in touch with the appropriate agents.
There are limits to the number of Amazon Connect resources that you can create. There are also limits to the number of requests that you can make per second. For more information, see Amazon Connect Service Quotas in the Amazon Connect Administrator Guide.
You can connect programmatically to an Amazon Web Services service by using an endpoint. For a list of Amazon Connect endpoints, see Amazon Connect Endpoints.
Working with contact flows? Check out the Amazon Connect Flow language.
This API is in preview release for Amazon Connect and is subject to change.
Associates an approved origin to an Amazon Connect instance.
", "AssociateBot": "This API is in preview release for Amazon Connect and is subject to change.
Allows the specified Amazon Connect instance to access the specified Amazon Lex or Amazon Lex V2 bot.
", @@ -15,7 +15,7 @@ "CreateContactFlowModule": "Creates a contact flow module for the specified Amazon Connect instance.
", "CreateHoursOfOperation": "This API is in preview release for Amazon Connect and is subject to change.
Creates hours of operation.
", "CreateInstance": "This API is in preview release for Amazon Connect and is subject to change.
Initiates an Amazon Connect instance with all the supported channels enabled. It does not attach any storage, such as Amazon Simple Storage Service (Amazon S3) or Amazon Kinesis. It also does not allow for any configurations on features, such as Contact Lens for Amazon Connect.
Amazon Connect enforces a limit on the total number of instances that you can create or delete in 30 days. If you exceed this limit, you will get an error message indicating there has been an excessive number of attempts at creating or deleting instances. You must wait 30 days before you can restart creating and deleting instances in your account.
", - "CreateIntegrationAssociation": "Creates an AWS resource association with an Amazon Connect instance.
", + "CreateIntegrationAssociation": "Creates an Amazon Web Services resource association with an Amazon Connect instance.
", "CreateQueue": "This API is in preview release for Amazon Connect and is subject to change.
Creates a new queue for the specified Amazon Connect instance.
", "CreateQuickConnect": "Creates a quick connect for the specified Amazon Connect instance.
", "CreateRoutingProfile": "Creates a new routing profile.
", @@ -27,7 +27,7 @@ "DeleteContactFlowModule": "Deletes the specified contact flow module.
", "DeleteHoursOfOperation": "This API is in preview release for Amazon Connect and is subject to change.
Deletes an hours of operation.
", "DeleteInstance": "This API is in preview release for Amazon Connect and is subject to change.
Deletes the Amazon Connect instance.
Amazon Connect enforces a limit on the total number of instances that you can create or delete in 30 days. If you exceed this limit, you will get an error message indicating there has been an excessive number of attempts at creating or deleting instances. You must wait 30 days before you can restart creating and deleting instances in your account.
", - "DeleteIntegrationAssociation": "Deletes an AWS resource association from an Amazon Connect instance. The association must not have any use cases associated with it.
", + "DeleteIntegrationAssociation": "Deletes an Amazon Web Services resource association from an Amazon Connect instance. The association must not have any use cases associated with it.
", "DeleteQuickConnect": "Deletes a quick connect.
", "DeleteSecurityProfile": "This API is in preview release for Amazon Connect and is subject to change.
Deletes a security profile.
", "DeleteUseCase": "Deletes a use case from an integration association.
", @@ -70,7 +70,7 @@ "ListInstanceAttributes": "This API is in preview release for Amazon Connect and is subject to change.
Returns a paginated list of all attribute types for the given instance.
", "ListInstanceStorageConfigs": "This API is in preview release for Amazon Connect and is subject to change.
Returns a paginated list of storage configs for the identified instance and resource type.
", "ListInstances": "This API is in preview release for Amazon Connect and is subject to change.
Return a list of instances which are in active state, creation-in-progress state, and failed state. Instances that aren't successfully created (they are in a failed state) are returned only for 24 hours after the CreateInstance API was invoked.
", - "ListIntegrationAssociations": "Provides summary information about the AWS resource associations for the specified Amazon Connect instance.
", + "ListIntegrationAssociations": "Provides summary information about the Amazon Web Services resource associations for the specified Amazon Connect instance.
", "ListLambdaFunctions": "This API is in preview release for Amazon Connect and is subject to change.
Returns a paginated list of all Lambda functions that display in the dropdown options in the relevant contact flow blocks.
", "ListLexBots": "This API is in preview release for Amazon Connect and is subject to change.
Returns a paginated list of all the Amazon Lex bots currently associated with the instance.
", "ListPhoneNumbers": "Provides information about the phone numbers for the specified Amazon Connect instance.
For more information about phone numbers, see Set Up Phone Numbers for Your Contact Center in the Amazon Connect Administrator Guide.
", @@ -1586,7 +1586,7 @@ "refs": { "Attribute$AttributeType": "The type of attribute.
", "DescribeInstanceAttributeRequest$AttributeType": "The type of attribute.
", - "UpdateInstanceAttributeRequest$AttributeType": "The type of attribute.
Only allowlisted customers can consume USE_CUSTOM_TTS_VOICES. To access this feature, contact AWS Support for allowlisting.
The type of attribute.
Only allowlisted customers can consume USE_CUSTOM_TTS_VOICES. To access this feature, contact Amazon Web Services Support for allowlisting.
The queues to use to filter the metrics. You can specify up to 100 queues per request.
" + "Filters$Queues": "The queues to use to filter the metrics. You should specify at least one queue, and can specify up to 100 queues per request. The GetCurrentMetricsData
API in particular requires a queue when you include a Filter
in your request.
One or more tags.
", "CreateSecurityProfileRequest$Tags": "The tags used to organize, track, or control access for this resource.
", "CreateUseCaseRequest$Tags": "The tags used to organize, track, or control access for this resource.
", + "CreateUserHierarchyGroupRequest$Tags": "The tags used to organize, track, or control access for this resource.
", "CreateUserRequest$Tags": "One or more tags.
", + "HierarchyGroup$Tags": "The tags used to organize, track, or control access for this resource.
", "HoursOfOperation$Tags": "The tags used to organize, track, or control access for this resource.
", "ListTagsForResourceResponse$tags": "Information about the tags.
", "Queue$Tags": "The tags used to organize, track, or control access for this resource.
", diff --git a/models/apis/ec2/2016-11-15/api-2.json b/models/apis/ec2/2016-11-15/api-2.json index 50a2b3dc0f9..64c181dfedd 100755 --- a/models/apis/ec2/2016-11-15/api-2.json +++ b/models/apis/ec2/2016-11-15/api-2.json @@ -23611,6 +23611,7 @@ "c6i.16xlarge", "c6i.24xlarge", "c6i.32xlarge", + "c6i.metal", "cc1.4xlarge", "cc2.8xlarge", "cg1.4xlarge", @@ -23820,6 +23821,7 @@ "m6i.16xlarge", "m6i.24xlarge", "m6i.32xlarge", + "m6i.metal", "mac1.metal", "p2.xlarge", "p2.8xlarge", @@ -23919,6 +23921,16 @@ "r6gd.12xlarge", "r6gd.16xlarge", "r6gd.metal", + "r6i.large", + "r6i.xlarge", + "r6i.2xlarge", + "r6i.4xlarge", + "r6i.8xlarge", + "r6i.12xlarge", + "r6i.16xlarge", + "r6i.24xlarge", + "r6i.32xlarge", + "r6i.metal", "t1.micro", "t2.nano", "t2.micro", diff --git a/models/apis/fis/2020-12-01/api-2.json b/models/apis/fis/2020-12-01/api-2.json index a7a6fc3e0b8..809b28d8e37 100644 --- a/models/apis/fis/2020-12-01/api-2.json +++ b/models/apis/fis/2020-12-01/api-2.json @@ -412,7 +412,9 @@ "parameters":{"shape":"ExperimentActionParameterMap"}, "targets":{"shape":"ExperimentActionTargetMap"}, "startAfter":{"shape":"ExperimentActionStartAfterList"}, - "state":{"shape":"ExperimentActionState"} + "state":{"shape":"ExperimentActionState"}, + "startTime":{"shape":"ExperimentActionStartTime"}, + "endTime":{"shape":"ExperimentActionEndTime"} } }, "ExperimentActionDescription":{ @@ -420,6 +422,7 @@ "max":512, "pattern":"[\\s\\S]+" }, + "ExperimentActionEndTime":{"type":"timestamp"}, "ExperimentActionMap":{ "type":"map", "key":{"shape":"ExperimentActionName"}, @@ -454,6 +457,7 @@ "type":"list", "member":{"shape":"ExperimentActionStartAfter"} }, + "ExperimentActionStartTime":{"type":"timestamp"}, "ExperimentActionState":{ "type":"structure", "members":{ diff --git a/models/apis/fis/2020-12-01/docs-2.json b/models/apis/fis/2020-12-01/docs-2.json index 36da9af4952..51657138c6d 100644 --- a/models/apis/fis/2020-12-01/docs-2.json +++ b/models/apis/fis/2020-12-01/docs-2.json @@ -1,13 +1,13 @@ { "version": "2.0", - "service": "AWS Fault Injection Simulator is a managed service that enables you to perform fault injection experiments on your AWS workloads. For more information, see the AWS Fault Injection Simulator User Guide.
", + "service": "Fault Injection Simulator is a managed service that enables you to perform fault injection experiments on your Amazon Web Services workloads. For more information, see the Fault Injection Simulator User Guide.
", "operations": { - "CreateExperimentTemplate": "Creates an experiment template.
To create a template, specify the following information:
Targets: A target can be a specific resource in your AWS environment, or one or more resources that match criteria that you specify, for example, resources that have specific tags.
Actions: The actions to carry out on the target. You can specify multiple actions, the duration of each action, and when to start each action during an experiment.
Stop conditions: If a stop condition is triggered while an experiment is running, the experiment is automatically stopped. You can define a stop condition as a CloudWatch alarm.
For more information, see the AWS Fault Injection Simulator User Guide.
", + "CreateExperimentTemplate": "Creates an experiment template.
An experiment template includes the following components:
Targets: A target can be a specific resource in your Amazon Web Services environment, or one or more resources that match criteria that you specify, for example, resources that have specific tags.
Actions: The actions to carry out on the target. You can specify multiple actions, the duration of each action, and when to start each action during an experiment.
Stop conditions: If a stop condition is triggered while an experiment is running, the experiment is automatically stopped. You can define a stop condition as a CloudWatch alarm.
For more information, see Experiment templates in the Fault Injection Simulator User Guide.
", "DeleteExperimentTemplate": "Deletes the specified experiment template.
", - "GetAction": "Gets information about the specified AWS FIS action.
", + "GetAction": "Gets information about the specified FIS action.
", "GetExperiment": "Gets information about the specified experiment.
", "GetExperimentTemplate": "Gets information about the specified experiment template.
", - "ListActions": "Lists the available AWS FIS actions.
", + "ListActions": "Lists the available FIS actions.
", "ListExperimentTemplates": "Lists your experiment templates.
", "ListExperiments": "Lists your experiments.
", "ListTagsForResource": "Lists the tags for the specified resource.
", @@ -19,7 +19,7 @@ }, "shapes": { "Action": { - "base": "Describes an action. For more information, see AWS FIS actions in the AWS Fault Injection Simulator User Guide.
", + "base": "Describes an action. For more information, see FIS actions in the Fault Injection Simulator User Guide.
", "refs": { "GetActionResponse$action": "Information about the action.
" } @@ -36,7 +36,7 @@ "refs": { "Action$id": "The ID of the action.
", "ActionSummary$id": "The ID of the action.
", - "CreateExperimentTemplateActionInput$actionId": "The ID of the action.
", + "CreateExperimentTemplateActionInput$actionId": "The ID of the action. The format of the action ID is: aws:service-name:action-type.
", "ExperimentAction$actionId": "The ID of the action.
", "ExperimentTemplateAction$actionId": "The ID of the action.
", "GetActionRequest$id": "The ID of the action.
", @@ -117,7 +117,7 @@ } }, "CreateExperimentTemplateActionInput": { - "base": "Specifies an action for an experiment template.
", + "base": "Specifies an action for an experiment template.
For more information, see Actions in the Fault Injection Simulator User Guide.
", "refs": { "CreateExperimentTemplateActionInputMap$value": null } @@ -151,7 +151,7 @@ } }, "CreateExperimentTemplateTargetInput": { - "base": "Specifies a target for an experiment. You must specify at least one Amazon Resource Name (ARN) or at least one resource tag. You cannot specify both ARNs and tags.
", + "base": "Specifies a target for an experiment. You must specify at least one Amazon Resource Name (ARN) or at least one resource tag. You cannot specify both ARNs and tags.
For more information, see Targets in the Fault Injection Simulator User Guide.
", "refs": { "CreateExperimentTemplateTargetInputMap$value": null } @@ -165,7 +165,7 @@ "CreationTime": { "base": null, "refs": { - "Experiment$creationTime": "The time the experiment was created.
", + "Experiment$creationTime": "The time that the experiment was created.
", "ExperimentSummary$creationTime": "The time that the experiment was created.
", "ExperimentTemplate$creationTime": "The time the experiment template was created.
", "ExperimentTemplateSummary$creationTime": "The time that the experiment template was created.
" @@ -210,6 +210,12 @@ "ExperimentAction$description": "The description for the action.
" } }, + "ExperimentActionEndTime": { + "base": null, + "refs": { + "ExperimentAction$endTime": "The time that the action ended.
" + } + }, "ExperimentActionMap": { "base": null, "refs": { @@ -252,6 +258,12 @@ "ExperimentAction$startAfter": "The name of the action that must be completed before this action starts.
" } }, + "ExperimentActionStartTime": { + "base": null, + "refs": { + "ExperimentAction$startTime": "The time that the action started.
" + } + }, "ExperimentActionState": { "base": "Describes the state of an action.
", "refs": { @@ -300,7 +312,7 @@ "ExperimentStartTime": { "base": null, "refs": { - "Experiment$startTime": "The time that the experiment was started.
" + "Experiment$startTime": "The time that the experiment started.
" } }, "ExperimentState": { @@ -489,7 +501,7 @@ "ExperimentTemplateDescription": { "base": null, "refs": { - "CreateExperimentTemplateRequest$description": "A description for the experiment template. Can contain up to 64 letters (A-Z and a-z).
", + "CreateExperimentTemplateRequest$description": "A description for the experiment template.
", "ExperimentTemplate$description": "The description for the experiment template.
", "ExperimentTemplateSummary$description": "The description of the experiment template.
", "UpdateExperimentTemplateRequest$description": "A description for the template.
" @@ -578,7 +590,7 @@ } }, "ExperimentTemplateTargetInputFilter": { - "base": "Describes a filter used for the target resource input in an experiment template.
", + "base": "Specifies a filter used for the target resource input in an experiment template.
For more information, see Resource filters in the Fault Injection Simulator User Guide.
", "refs": { "ExperimentTemplateTargetFilterInputList$member": null } @@ -738,19 +750,19 @@ "ResourceType": { "base": null, "refs": { - "CreateExperimentTemplateTargetInput$resourceType": "The AWS resource type. The resource type must be supported for the specified action.
", + "CreateExperimentTemplateTargetInput$resourceType": "The Amazon Web Services resource type. The resource type must be supported for the specified action.
", "ExperimentTarget$resourceType": "The resource type.
", "ExperimentTemplateTarget$resourceType": "The resource type.
", - "UpdateExperimentTemplateTargetInput$resourceType": "The AWS resource type. The resource type must be supported for the specified action.
" + "UpdateExperimentTemplateTargetInput$resourceType": "The Amazon Web Services resource type. The resource type must be supported for the specified action.
" } }, "RoleArn": { "base": null, "refs": { - "CreateExperimentTemplateRequest$roleArn": "The Amazon Resource Name (ARN) of an IAM role that grants the AWS FIS service permission to perform service actions on your behalf.
", - "Experiment$roleArn": "The Amazon Resource Name (ARN) of an IAM role that grants the AWS FIS service permission to perform service actions on your behalf.
", + "CreateExperimentTemplateRequest$roleArn": "The Amazon Resource Name (ARN) of an IAM role that grants the FIS service permission to perform service actions on your behalf.
", + "Experiment$roleArn": "The Amazon Resource Name (ARN) of an IAM role that grants the FIS service permission to perform service actions on your behalf.
", "ExperimentTemplate$roleArn": "The Amazon Resource Name (ARN) of an IAM role.
", - "UpdateExperimentTemplateRequest$roleArn": "The Amazon Resource Name (ARN) of an IAM role that grants the AWS FIS service permission to perform service actions on your behalf.
" + "UpdateExperimentTemplateRequest$roleArn": "The Amazon Resource Name (ARN) of an IAM role that grants the FIS service permission to perform service actions on your behalf.
" } }, "ServiceQuotaExceededException": { diff --git a/models/apis/guardduty/2017-11-28/api-2.json b/models/apis/guardduty/2017-11-28/api-2.json index c077ad5cd3a..27abd78c49f 100644 --- a/models/apis/guardduty/2017-11-28/api-2.json +++ b/models/apis/guardduty/2017-11-28/api-2.json @@ -1033,6 +1033,10 @@ "ServiceName":{ "shape":"String", "locationName":"serviceName" + }, + "RemoteAccountDetails":{ + "shape":"RemoteAccountDetails", + "locationName":"remoteAccountDetails" } } }, @@ -3546,6 +3550,19 @@ "max":300, "min":1 }, + "RemoteAccountDetails":{ + "type":"structure", + "members":{ + "AccountId":{ + "shape":"String", + "locationName":"accountId" + }, + "Affiliated":{ + "shape":"Boolean", + "locationName":"affiliated" + } + } + }, "RemoteIpDetails":{ "type":"structure", "members":{ diff --git a/models/apis/guardduty/2017-11-28/docs-2.json b/models/apis/guardduty/2017-11-28/docs-2.json index 411fbddf449..360446b2ad1 100644 --- a/models/apis/guardduty/2017-11-28/docs-2.json +++ b/models/apis/guardduty/2017-11-28/docs-2.json @@ -1,30 +1,30 @@ { "version": "2.0", - "service": "Amazon GuardDuty is a continuous security monitoring service that analyzes and processes the following data sources: VPC Flow Logs, AWS CloudTrail event logs, and DNS logs. It uses threat intelligence feeds (such as lists of malicious IPs and domains) and machine learning to identify unexpected, potentially unauthorized, and malicious activity within your AWS environment. This can include issues like escalations of privileges, uses of exposed credentials, or communication with malicious IPs, URLs, or domains. For example, GuardDuty can detect compromised EC2 instances that serve malware or mine bitcoin.
GuardDuty also monitors AWS account access behavior for signs of compromise. Some examples of this are unauthorized infrastructure deployments such as EC2 instances deployed in a Region that has never been used, or unusual API calls like a password policy change to reduce password strength.
GuardDuty informs you of the status of your AWS environment by producing security findings that you can view in the GuardDuty console or through Amazon CloudWatch events. For more information, see the Amazon GuardDuty User Guide .
", + "service": "Amazon GuardDuty is a continuous security monitoring service that analyzes and processes the following data sources: VPC Flow Logs, Amazon Web Services CloudTrail event logs, and DNS logs. It uses threat intelligence feeds (such as lists of malicious IPs and domains) and machine learning to identify unexpected, potentially unauthorized, and malicious activity within your Amazon Web Services environment. This can include issues like escalations of privileges, uses of exposed credentials, or communication with malicious IPs, URLs, or domains. For example, GuardDuty can detect compromised EC2 instances that serve malware or mine bitcoin.
GuardDuty also monitors Amazon Web Services account access behavior for signs of compromise. Some examples of this are unauthorized infrastructure deployments such as EC2 instances deployed in a Region that has never been used, or unusual API calls like a password policy change to reduce password strength.
GuardDuty informs you of the status of your Amazon Web Services environment by producing security findings that you can view in the GuardDuty console or through Amazon CloudWatch events. For more information, see the Amazon GuardDuty User Guide .
", "operations": { "AcceptInvitation": "Accepts the invitation to be monitored by a GuardDuty administrator account.
", "ArchiveFindings": "Archives GuardDuty findings that are specified by the list of finding IDs.
Only the administrator account can archive findings. Member accounts don't have permission to archive findings from their accounts.
Creates a single Amazon GuardDuty detector. A detector is a resource that represents the GuardDuty service. To start using GuardDuty, you must create a detector in each Region where you enable the service. You can have only one detector per account per Region. All data sources are enabled in a new detector by default.
", "CreateFilter": "Creates a filter using the specified finding criteria.
", - "CreateIPSet": "Creates a new IPSet, which is called a trusted IP list in the console user interface. An IPSet is a list of IP addresses that are trusted for secure communication with AWS infrastructure and applications. GuardDuty doesn't generate findings for IP addresses that are included in IPSets. Only users from the administrator account can use this operation.
", - "CreateMembers": "Creates member accounts of the current AWS account by specifying a list of AWS account IDs. This step is a prerequisite for managing the associated member accounts either by invitation or through an organization.
When using Create Members
as an organizations delegated administrator this action will enable GuardDuty in the added member accounts, with the exception of the organization delegated administrator account, which must enable GuardDuty prior to being added as a member.
If you are adding accounts by invitation use this action after GuardDuty has been enabled in potential member accounts and before using Invite Members
.
Creates a new IPSet, which is called a trusted IP list in the console user interface. An IPSet is a list of IP addresses that are trusted for secure communication with Amazon Web Services infrastructure and applications. GuardDuty doesn't generate findings for IP addresses that are included in IPSets. Only users from the administrator account can use this operation.
", + "CreateMembers": "Creates member accounts of the current Amazon Web Services account by specifying a list of Amazon Web Services account IDs. This step is a prerequisite for managing the associated member accounts either by invitation or through an organization.
When using Create Members
as an organizations delegated administrator this action will enable GuardDuty in the added member accounts, with the exception of the organization delegated administrator account, which must enable GuardDuty prior to being added as a member.
If you are adding accounts by invitation use this action after GuardDuty has been enabled in potential member accounts and before using Invite Members
.
Creates a publishing destination to export findings to. The resource to export findings to must exist before you use this operation.
", "CreateSampleFindings": "Generates example findings of types specified by the list of finding types. If 'NULL' is specified for findingTypes
, the API generates example findings of all supported finding types.
Creates a new ThreatIntelSet. ThreatIntelSets consist of known malicious IP addresses. GuardDuty generates findings based on ThreatIntelSets. Only users of the administrator account can use this operation.
", - "DeclineInvitations": "Declines invitations sent to the current member account by AWS accounts specified by their account IDs.
", + "DeclineInvitations": "Declines invitations sent to the current member account by Amazon Web Services accounts specified by their account IDs.
", "DeleteDetector": "Deletes an Amazon GuardDuty detector that is specified by the detector ID.
", "DeleteFilter": "Deletes the filter specified by the filter name.
", "DeleteIPSet": "Deletes the IPSet specified by the ipSetId
. IPSets are called trusted IP lists in the console user interface.
Deletes invitations sent to the current member account by AWS accounts specified by their account IDs.
", + "DeleteInvitations": "Deletes invitations sent to the current member account by Amazon Web Services accounts specified by their account IDs.
", "DeleteMembers": "Deletes GuardDuty member accounts (to the current GuardDuty administrator account) specified by the account IDs.
", "DeletePublishingDestination": "Deletes the publishing definition with the specified destinationId
.
Deletes the ThreatIntelSet specified by the ThreatIntelSet ID.
", "DescribeOrganizationConfiguration": "Returns information about the account selected as the delegated administrator for GuardDuty.
", "DescribePublishingDestination": "Returns information about the publishing destination specified by the provided destinationId
.
Disables an AWS account within the Organization as the GuardDuty delegated administrator.
", + "DisableOrganizationAdminAccount": "Disables an Amazon Web Services account within the Organization as the GuardDuty delegated administrator.
", "DisassociateFromMasterAccount": "Disassociates the current GuardDuty member account from its administrator account.
", "DisassociateMembers": "Disassociates GuardDuty member accounts (to the current GuardDuty administrator account) specified by the account IDs.
", - "EnableOrganizationAdminAccount": "Enables an AWS account within the organization as the GuardDuty delegated administrator.
", + "EnableOrganizationAdminAccount": "Enables an Amazon Web Services account within the organization as the GuardDuty delegated administrator.
", "GetDetector": "Retrieves an Amazon GuardDuty detector specified by the detectorId.
", "GetFilter": "Returns the details of the filter specified by the filter name.
", "GetFindings": "Describes Amazon GuardDuty findings specified by finding IDs.
", @@ -36,15 +36,15 @@ "GetMembers": "Retrieves GuardDuty member accounts (of the current GuardDuty administrator account) specified by the account IDs.
", "GetThreatIntelSet": "Retrieves the ThreatIntelSet that is specified by the ThreatIntelSet ID.
", "GetUsageStatistics": "Lists Amazon GuardDuty usage statistics over the last 30 days for the specified detector ID. For newly enabled detectors or data sources the cost returned will include only the usage so far under 30 days, this may differ from the cost metrics in the console, which projects usage over 30 days to provide a monthly cost estimate. For more information see Understanding How Usage Costs are Calculated.
", - "InviteMembers": "Invites other AWS accounts (created as members of the current AWS account by CreateMembers) to enable GuardDuty, and allow the current AWS account to view and manage these accounts' findings on their behalf as the GuardDuty administrator account.
", + "InviteMembers": "Invites other Amazon Web Services accounts (created as members of the current Amazon Web Services account by CreateMembers) to enable GuardDuty, and allow the current Amazon Web Services account to view and manage these accounts' findings on their behalf as the GuardDuty administrator account.
", "ListDetectors": "Lists detectorIds of all the existing Amazon GuardDuty detector resources.
", "ListFilters": "Returns a paginated list of the current filters.
", "ListFindings": "Lists Amazon GuardDuty findings for the specified detector ID.
", "ListIPSets": "Lists the IPSets of the GuardDuty service specified by the detector ID. If you use this operation from a member account, the IPSets returned are the IPSets from the associated administrator account.
", - "ListInvitations": "Lists all GuardDuty membership invitations that were sent to the current AWS account.
", + "ListInvitations": "Lists all GuardDuty membership invitations that were sent to the current Amazon Web Services account.
", "ListMembers": "Lists details about all member accounts for the current GuardDuty administrator account.
", "ListOrganizationAdminAccounts": "Lists the accounts configured as GuardDuty delegated administrators.
", - "ListPublishingDestinations": "Returns a list of publishing destinations associated with the specified dectectorId
.
Returns a list of publishing destinations associated with the specified detectorId
.
Lists tags for a resource. Tagging is currently supported for detectors, finding filters, IP sets, and threat intel sets, with a limit of 50 tags per resource. When invoked, this operation returns all assigned tags for a given resource.
", "ListThreatIntelSets": "Lists the ThreatIntelSets of the GuardDuty service specified by the detector ID. If you use this operation from a member account, the ThreatIntelSets associated with the administrator account are returned.
", "StartMonitoringMembers": "Turns on GuardDuty monitoring of the specified member accounts. Use this operation to restart monitoring of accounts that you stopped monitoring with the StopMonitoringMembers
operation.
The ID of the account used as the administrator account.
", "Member$AccountId": "The ID of the member account.
", "MemberDataSourceConfiguration$AccountId": "The account ID for the member account.
", - "UnprocessedAccount$AccountId": "The AWS account ID.
", + "UnprocessedAccount$AccountId": "The Amazon Web Services account ID.
", "UsageAccountResult$AccountId": "The Account ID that generated usage.
" } }, "AccountIds": { "base": null, "refs": { - "DeclineInvitationsRequest$AccountIds": "A list of account IDs of the AWS accounts that sent invitations to the current member account that you want to decline invitations from.
", - "DeleteInvitationsRequest$AccountIds": "A list of account IDs of the AWS accounts that sent invitations to the current member account that you want to delete invitations from.
", + "DeclineInvitationsRequest$AccountIds": "A list of account IDs of the Amazon Web Services accounts that sent invitations to the current member account that you want to decline invitations from.
", + "DeleteInvitationsRequest$AccountIds": "A list of account IDs of the Amazon Web Services accounts that sent invitations to the current member account that you want to delete invitations from.
", "DeleteMembersRequest$AccountIds": "A list of account IDs of the GuardDuty member accounts that you want to delete.
", "DisassociateMembersRequest$AccountIds": "A list of account IDs of the GuardDuty member accounts that you want to disassociate from the administrator account.
", "GetMemberDetectorsRequest$AccountIds": "The account ID of the member account.
", @@ -204,6 +204,7 @@ "OrganizationS3LogsConfiguration$AutoEnable": "A value that contains information on whether S3 data event logs will be enabled automatically as a data source for the organization.
", "OrganizationS3LogsConfigurationResult$AutoEnable": "A value that describes whether S3 data event logs are automatically enabled for new members of the organization.
", "PortProbeAction$Blocked": "Indicates whether EC2 blocked the port probe to the instance, such as with an ACL.
", + "RemoteAccountDetails$Affiliated": "Details on whether the Amazon Web Services account of the remote API caller is related to your GuardDuty environment. If this value is True
the API caller is affiliated to your account in some way. If it is False
the API caller is from outside your environment.
The status of S3 data event logs as a data source.
", "Service$Archived": "Indicates whether this finding is archived.
", "UpdateDetectorRequest$Enable": "Specifies whether the detector is enabled or not enabled.
", @@ -623,7 +624,7 @@ "DomainDetails": { "base": "Contains information about the domain.
", "refs": { - "AwsApiCallAction$DomainDetails": "The domain information for the AWS API call.
" + "AwsApiCallAction$DomainDetails": "The domain information for the Amazon Web Services API call.
" } }, "Double": { @@ -725,10 +726,10 @@ "FindingCriteria": { "base": "Contains information about the criteria used for querying findings.
", "refs": { - "CreateFilterRequest$FindingCriteria": "Represents the criteria to be used in the filter for querying findings.
You can only use the following attributes to query findings:
accountId
region
confidence
id
resource.accessKeyDetails.accessKeyId
resource.accessKeyDetails.principalId
resource.accessKeyDetails.userName
resource.accessKeyDetails.userType
resource.instanceDetails.iamInstanceProfile.id
resource.instanceDetails.imageId
resource.instanceDetails.instanceId
resource.instanceDetails.outpostArn
resource.instanceDetails.networkInterfaces.ipv6Addresses
resource.instanceDetails.networkInterfaces.privateIpAddresses.privateIpAddress
resource.instanceDetails.networkInterfaces.publicDnsName
resource.instanceDetails.networkInterfaces.publicIp
resource.instanceDetails.networkInterfaces.securityGroups.groupId
resource.instanceDetails.networkInterfaces.securityGroups.groupName
resource.instanceDetails.networkInterfaces.subnetId
resource.instanceDetails.networkInterfaces.vpcId
resource.instanceDetails.tags.key
resource.instanceDetails.tags.value
resource.resourceType
service.action.actionType
service.action.awsApiCallAction.api
service.action.awsApiCallAction.callerType
service.action.awsApiCallAction.errorCode
service.action.awsApiCallAction.remoteIpDetails.city.cityName
service.action.awsApiCallAction.remoteIpDetails.country.countryName
service.action.awsApiCallAction.remoteIpDetails.ipAddressV4
service.action.awsApiCallAction.remoteIpDetails.organization.asn
service.action.awsApiCallAction.remoteIpDetails.organization.asnOrg
service.action.awsApiCallAction.serviceName
service.action.dnsRequestAction.domain
service.action.networkConnectionAction.blocked
service.action.networkConnectionAction.connectionDirection
service.action.networkConnectionAction.localPortDetails.port
service.action.networkConnectionAction.protocol
service.action.networkConnectionAction.localIpDetails.ipAddressV4
service.action.networkConnectionAction.remoteIpDetails.city.cityName
service.action.networkConnectionAction.remoteIpDetails.country.countryName
service.action.networkConnectionAction.remoteIpDetails.ipAddressV4
service.action.networkConnectionAction.remoteIpDetails.organization.asn
service.action.networkConnectionAction.remoteIpDetails.organization.asnOrg
service.action.networkConnectionAction.remotePortDetails.port
service.additionalInfo.threatListName
service.archived
When this attribute is set to TRUE, only archived findings are listed. When it's set to FALSE, only unarchived findings are listed. When this attribute is not set, all existing findings are listed.
service.resourceRole
severity
type
updatedAt
Type: ISO 8601 string format: YYYY-MM-DDTHH:MM:SS.SSSZ or YYYY-MM-DDTHH:MM:SSZ depending on whether the value contains milliseconds.
Represents the criteria to be used in the filter for querying findings.
You can only use the following attributes to query findings:
accountId
region
confidence
id
resource.accessKeyDetails.accessKeyId
resource.accessKeyDetails.principalId
resource.accessKeyDetails.userName
resource.accessKeyDetails.userType
resource.instanceDetails.iamInstanceProfile.id
resource.instanceDetails.imageId
resource.instanceDetails.instanceId
resource.instanceDetails.outpostArn
resource.instanceDetails.networkInterfaces.ipv6Addresses
resource.instanceDetails.networkInterfaces.privateIpAddresses.privateIpAddress
resource.instanceDetails.networkInterfaces.publicDnsName
resource.instanceDetails.networkInterfaces.publicIp
resource.instanceDetails.networkInterfaces.securityGroups.groupId
resource.instanceDetails.networkInterfaces.securityGroups.groupName
resource.instanceDetails.networkInterfaces.subnetId
resource.instanceDetails.networkInterfaces.vpcId
resource.instanceDetails.tags.key
resource.instanceDetails.tags.value
resource.resourceType
service.action.actionType
service.action.awsApiCallAction.api
service.action.awsApiCallAction.callerType
service.action.awsApiCallAction.errorCode
service.action.awsApiCallAction.remoteIpDetails.city.cityName
service.action.awsApiCallAction.remoteIpDetails.country.countryName
service.action.awsApiCallAction.remoteIpDetails.ipAddressV4
service.action.awsApiCallAction.remoteIpDetails.organization.asn
service.action.awsApiCallAction.remoteIpDetails.organization.asnOrg
service.action.awsApiCallAction.serviceName
service.action.dnsRequestAction.domain
service.action.networkConnectionAction.blocked
service.action.networkConnectionAction.connectionDirection
service.action.networkConnectionAction.localPortDetails.port
service.action.networkConnectionAction.protocol
service.action.networkConnectionAction.localIpDetails.ipAddressV4
service.action.networkConnectionAction.remoteIpDetails.city.cityName
service.action.networkConnectionAction.remoteIpDetails.country.countryName
service.action.networkConnectionAction.remoteIpDetails.ipAddressV4
service.action.networkConnectionAction.remoteIpDetails.organization.asn
service.action.networkConnectionAction.remoteIpDetails.organization.asnOrg
service.action.networkConnectionAction.remotePortDetails.port
service.additionalInfo.threatListName
resource.s3BucketDetails.publicAccess.effectivePermissions
resource.s3BucketDetails.name
resource.s3BucketDetails.tags.key
resource.s3BucketDetails.tags.value
resource.s3BucketDetails.type
service.archived
When this attribute is set to TRUE, only archived findings are listed. When it's set to FALSE, only unarchived findings are listed. When this attribute is not set, all existing findings are listed.
service.resourceRole
severity
type
updatedAt
Type: ISO 8601 string format: YYYY-MM-DDTHH:MM:SS.SSSZ or YYYY-MM-DDTHH:MM:SSZ depending on whether the value contains milliseconds.
Represents the criteria to be used in the filter for querying findings.
", "GetFindingsStatisticsRequest$FindingCriteria": "Represents the criteria that is used for querying findings.
", - "ListFindingsRequest$FindingCriteria": "Represents the criteria used for querying findings. Valid values include:
JSON field name
accountId
region
confidence
id
resource.accessKeyDetails.accessKeyId
resource.accessKeyDetails.principalId
resource.accessKeyDetails.userName
resource.accessKeyDetails.userType
resource.instanceDetails.iamInstanceProfile.id
resource.instanceDetails.imageId
resource.instanceDetails.instanceId
resource.instanceDetails.networkInterfaces.ipv6Addresses
resource.instanceDetails.networkInterfaces.privateIpAddresses.privateIpAddress
resource.instanceDetails.networkInterfaces.publicDnsName
resource.instanceDetails.networkInterfaces.publicIp
resource.instanceDetails.networkInterfaces.securityGroups.groupId
resource.instanceDetails.networkInterfaces.securityGroups.groupName
resource.instanceDetails.networkInterfaces.subnetId
resource.instanceDetails.networkInterfaces.vpcId
resource.instanceDetails.tags.key
resource.instanceDetails.tags.value
resource.resourceType
service.action.actionType
service.action.awsApiCallAction.api
service.action.awsApiCallAction.callerType
service.action.awsApiCallAction.remoteIpDetails.city.cityName
service.action.awsApiCallAction.remoteIpDetails.country.countryName
service.action.awsApiCallAction.remoteIpDetails.ipAddressV4
service.action.awsApiCallAction.remoteIpDetails.organization.asn
service.action.awsApiCallAction.remoteIpDetails.organization.asnOrg
service.action.awsApiCallAction.serviceName
service.action.dnsRequestAction.domain
service.action.networkConnectionAction.blocked
service.action.networkConnectionAction.connectionDirection
service.action.networkConnectionAction.localPortDetails.port
service.action.networkConnectionAction.protocol
service.action.networkConnectionAction.remoteIpDetails.city.cityName
service.action.networkConnectionAction.remoteIpDetails.country.countryName
service.action.networkConnectionAction.remoteIpDetails.ipAddressV4
service.action.networkConnectionAction.remoteIpDetails.organization.asn
service.action.networkConnectionAction.remoteIpDetails.organization.asnOrg
service.action.networkConnectionAction.remotePortDetails.port
service.additionalInfo.threatListName
service.archived
When this attribute is set to 'true', only archived findings are listed. When it's set to 'false', only unarchived findings are listed. When this attribute is not set, all existing findings are listed.
service.resourceRole
severity
type
updatedAt
Type: Timestamp in Unix Epoch millisecond format: 1486685375000
Represents the criteria used for querying findings. Valid values include:
JSON field name
accountId
region
confidence
id
resource.accessKeyDetails.accessKeyId
resource.accessKeyDetails.principalId
resource.accessKeyDetails.userName
resource.accessKeyDetails.userType
resource.instanceDetails.iamInstanceProfile.id
resource.instanceDetails.imageId
resource.instanceDetails.instanceId
resource.instanceDetails.networkInterfaces.ipv6Addresses
resource.instanceDetails.networkInterfaces.privateIpAddresses.privateIpAddress
resource.instanceDetails.networkInterfaces.publicDnsName
resource.instanceDetails.networkInterfaces.publicIp
resource.instanceDetails.networkInterfaces.securityGroups.groupId
resource.instanceDetails.networkInterfaces.securityGroups.groupName
resource.instanceDetails.networkInterfaces.subnetId
resource.instanceDetails.networkInterfaces.vpcId
resource.instanceDetails.tags.key
resource.instanceDetails.tags.value
resource.resourceType
service.action.actionType
service.action.awsApiCallAction.api
service.action.awsApiCallAction.callerType
service.action.awsApiCallAction.remoteIpDetails.city.cityName
service.action.awsApiCallAction.remoteIpDetails.country.countryName
service.action.awsApiCallAction.remoteIpDetails.ipAddressV4
service.action.awsApiCallAction.remoteIpDetails.organization.asn
service.action.awsApiCallAction.remoteIpDetails.organization.asnOrg
service.action.awsApiCallAction.serviceName
service.action.dnsRequestAction.domain
service.action.networkConnectionAction.blocked
service.action.networkConnectionAction.connectionDirection
service.action.networkConnectionAction.localPortDetails.port
service.action.networkConnectionAction.protocol
service.action.networkConnectionAction.remoteIpDetails.country.countryName
service.action.networkConnectionAction.remoteIpDetails.ipAddressV4
service.action.networkConnectionAction.remoteIpDetails.organization.asn
service.action.networkConnectionAction.remoteIpDetails.organization.asnOrg
service.action.networkConnectionAction.remotePortDetails.port
service.additionalInfo.threatListName
service.archived
When this attribute is set to 'true', only archived findings are listed. When it's set to 'false', only unarchived findings are listed. When this attribute is not set, all existing findings are listed.
service.resourceRole
severity
type
updatedAt
Type: Timestamp in Unix Epoch millisecond format: 1486685375000
Represents the criteria to be used in the filter for querying findings.
" } }, @@ -1118,11 +1119,11 @@ "Location": { "base": null, "refs": { - "CreateIPSetRequest$Location": "The URI of the file that contains the IPSet. For example: https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key.
", - "CreateThreatIntelSetRequest$Location": "The URI of the file that contains the ThreatIntelSet. For example: https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key.
", - "GetIPSetResponse$Location": "The URI of the file that contains the IPSet. For example: https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key.
", - "GetThreatIntelSetResponse$Location": "The URI of the file that contains the ThreatIntelSet. For example: https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key.
", - "UpdateIPSetRequest$Location": "The updated URI of the file that contains the IPSet. For example: https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key.
", + "CreateIPSetRequest$Location": "The URI of the file that contains the IPSet.
", + "CreateThreatIntelSetRequest$Location": "The URI of the file that contains the ThreatIntelSet.
", + "GetIPSetResponse$Location": "The URI of the file that contains the IPSet.
", + "GetThreatIntelSetResponse$Location": "The URI of the file that contains the ThreatIntelSet.
", + "UpdateIPSetRequest$Location": "The updated URI of the file that contains the IPSet.
", "UpdateThreatIntelSetRequest$Location": "The updated URI of the file that contains the ThreateIntelSet.
" } }, @@ -1326,10 +1327,16 @@ "Destination$Status": "The status of the publishing destination.
" } }, + "RemoteAccountDetails": { + "base": "Contains details about the remote Amazon Web Services account that made the API call.
", + "refs": { + "AwsApiCallAction$RemoteAccountDetails": "The details of the Amazon Web Services account that made the API call. This field appears if the call was made from outside your account.
" + } + }, "RemoteIpDetails": { "base": "Contains information about the remote IP address of the connection.
", "refs": { - "AwsApiCallAction$RemoteIpDetails": "The remote IP information of the connection that initiated the AWS API call.
", + "AwsApiCallAction$RemoteIpDetails": "The remote IP information of the connection that initiated the Amazon Web Services API call.
", "NetworkConnectionAction$RemoteIpDetails": "The remote IP information of the connection.
", "PortProbeDetail$RemoteIpDetails": "The remote IP information of the connection.
" } @@ -1341,7 +1348,7 @@ } }, "Resource": { - "base": "Contains information about the AWS resource associated with the activity that prompted GuardDuty to generate a finding.
", + "base": "Contains information about the Amazon Web Services resource associated with the activity that prompted GuardDuty to generate a finding.
", "refs": { "Finding$Resource": null } @@ -1431,11 +1438,11 @@ "AccessKeyDetails$UserName": "The name of the user.
", "AccessKeyDetails$UserType": "The type of the user.
", "Action$ActionType": "The GuardDuty finding activity type.
", - "AdminAccount$AdminAccountId": "The AWS account ID for the account.
", - "AwsApiCallAction$Api": "The AWS API name.
", - "AwsApiCallAction$CallerType": "The AWS API caller type.
", - "AwsApiCallAction$ErrorCode": "The error code of the failed AWS API action.
", - "AwsApiCallAction$ServiceName": "The AWS service name whose API was invoked.
", + "AdminAccount$AdminAccountId": "The Amazon Web Services account ID for the account.
", + "AwsApiCallAction$Api": "The Amazon Web Services API name.
", + "AwsApiCallAction$CallerType": "The Amazon Web Services API caller type.
", + "AwsApiCallAction$ErrorCode": "The error code of the failed Amazon Web Services API action.
", + "AwsApiCallAction$ServiceName": "The Amazon Web Services service name whose API was invoked.
", "BadRequestException$Message": "The error message.
", "BadRequestException$Type": "The error type.
", "City$CityName": "The city name of the remote IP address.
", @@ -1455,12 +1462,12 @@ "DescribePublishingDestinationRequest$DestinationId": "The ID of the publishing destination to retrieve.
", "DescribePublishingDestinationResponse$DestinationId": "The ID of the publishing destination.
", "Destination$DestinationId": "The unique ID of the publishing destination.
", - "DestinationProperties$DestinationArn": "The ARN of the resource to publish to.
", + "DestinationProperties$DestinationArn": "The ARN of the resource to publish to.
To specify an S3 bucket folder use the following format: arn:aws:s3:::DOC-EXAMPLE-BUCKET/myFolder/
The ARN of the KMS key to use for encryption.
", - "DisableOrganizationAdminAccountRequest$AdminAccountId": "The AWS Account ID for the organizations account to be disabled as a GuardDuty delegated administrator.
", + "DisableOrganizationAdminAccountRequest$AdminAccountId": "The Amazon Web Services Account ID for the organizations account to be disabled as a GuardDuty delegated administrator.
", "DnsRequestAction$Domain": "The domain information for the API request.
", - "DomainDetails$Domain": "The domain information for the AWS API call.
", - "EnableOrganizationAdminAccountRequest$AdminAccountId": "The AWS Account ID for the organization account to be enabled as a GuardDuty delegated administrator.
", + "DomainDetails$Domain": "The domain information for the Amazon Web Services API call.
", + "EnableOrganizationAdminAccountRequest$AdminAccountId": "The Amazon Web Services Account ID for the organization account to be enabled as a GuardDuty delegated administrator.
", "Eq$member": null, "Equals$member": null, "Finding$AccountId": "The ID of the account in which the finding was generated.
", @@ -1490,7 +1497,7 @@ "InstanceDetails$InstanceId": "The ID of the EC2 instance.
", "InstanceDetails$InstanceState": "The state of the EC2 instance.
", "InstanceDetails$InstanceType": "The type of the EC2 instance.
", - "InstanceDetails$OutpostArn": "The Amazon Resource Name (ARN) of the AWS Outpost. Only applicable to AWS Outposts instances.
", + "InstanceDetails$OutpostArn": "The Amazon Resource Name (ARN) of the Amazon Web Services Outpost. Only applicable to Amazon Web Services Outposts instances.
", "InstanceDetails$LaunchTime": "The launch time of the EC2 instance.
", "InstanceDetails$Platform": "The platform of the EC2 instance.
", "InternalServerErrorException$Message": "The error message.
", @@ -1550,9 +1557,10 @@ "ProductCode$Code": "The product code information.
", "ProductCode$ProductType": "The product code type.
", "PublicAccess$EffectivePermission": "Describes the effective permission on this bucket after factoring all attached policies.
", + "RemoteAccountDetails$AccountId": "The Amazon Web Services account ID of the remote API caller.
", "RemoteIpDetails$IpAddressV4": "The IPv4 remote address of the connection.
", "RemotePortDetails$PortName": "The port name of the remote connection.
", - "Resource$ResourceType": "The type of AWS resource.
", + "Resource$ResourceType": "The type of Amazon Web Services resource.
", "ResourceList$member": null, "S3BucketDetail$Arn": "The Amazon Resource Name (ARN) of the S3 bucket.
", "S3BucketDetail$Name": "The name of the S3 bucket.
", @@ -1562,7 +1570,7 @@ "Service$EventFirstSeen": "The first-seen timestamp of the activity that prompted GuardDuty to generate this finding.
", "Service$EventLastSeen": "The last-seen timestamp of the activity that prompted GuardDuty to generate this finding.
", "Service$ResourceRole": "The resource role information for this finding.
", - "Service$ServiceName": "The name of the AWS service (GuardDuty) that generated a finding.
", + "Service$ServiceName": "The name of the Amazon Web Services service (GuardDuty) that generated a finding.
", "Service$UserFeedback": "Feedback that was submitted about the finding.
", "SortCriteria$AttributeName": "Represents the finding attribute (for example, accountId) to sort findings by.
", "Tag$Key": "The EC2 instance tag key.
", @@ -1578,7 +1586,7 @@ "UpdateIPSetRequest$IpSetId": "The unique ID that specifies the IPSet that you want to update.
", "UpdatePublishingDestinationRequest$DestinationId": "The ID of the publishing destination to update.
", "UpdateThreatIntelSetRequest$ThreatIntelSetId": "The unique ID that specifies the ThreatIntelSet that you want to update.
", - "UsageResourceResult$Resource": "The AWS resource that generated usage.
" + "UsageResourceResult$Resource": "The Amazon Web Services resource that generated usage.
" } }, "Tag": { @@ -1842,7 +1850,7 @@ } }, "UsageResourceResult": { - "base": "Contains information on the sum of usage based on an AWS resource.
", + "base": "Contains information on the sum of usage based on an Amazon Web Services resource.
", "refs": { "UsageResourceResultList$member": null } diff --git a/models/apis/mediatailor/2018-04-23/api-2.json b/models/apis/mediatailor/2018-04-23/api-2.json index a925c11597e..5924df2a066 100644 --- a/models/apis/mediatailor/2018-04-23/api-2.json +++ b/models/apis/mediatailor/2018-04-23/api-2.json @@ -984,6 +984,9 @@ "HttpConfiguration": { "shape": "HttpConfiguration" }, + "SegmentDeliveryConfigurations": { + "shape": "__listOfSegmentDeliveryConfiguration" + }, "SourceLocationName": { "location": "uri", "locationName": "sourceLocationName", @@ -1020,6 +1023,9 @@ "LastModifiedTime": { "shape": "__timestampUnix" }, + "SegmentDeliveryConfigurations": { + "shape": "__listOfSegmentDeliveryConfiguration" + }, "SourceLocationName": { "shape": "__string" }, @@ -1398,6 +1404,9 @@ "LastModifiedTime": { "shape": "__timestampUnix" }, + "SegmentDeliveryConfigurations": { + "shape": "__listOfSegmentDeliveryConfiguration" + }, "SourceLocationName": { "shape": "__string" }, @@ -2365,6 +2374,17 @@ }, "type": "structure" }, + "SegmentDeliveryConfiguration": { + "members": { + "BaseUrl": { + "shape": "__string" + }, + "Name": { + "shape": "__string" + } + }, + "type": "structure" + }, "SlateSource": { "members": { "SourceLocationName": { @@ -2396,6 +2416,9 @@ "LastModifiedTime": { "shape": "__timestampUnix" }, + "SegmentDeliveryConfigurations": { + "shape": "__listOfSegmentDeliveryConfiguration" + }, "SourceLocationName": { "shape": "__string" }, @@ -2591,6 +2614,9 @@ "HttpConfiguration": { "shape": "HttpConfiguration" }, + "SegmentDeliveryConfigurations": { + "shape": "__listOfSegmentDeliveryConfiguration" + }, "SourceLocationName": { "location": "uri", "locationName": "sourceLocationName", @@ -2623,6 +2649,9 @@ "LastModifiedTime": { "shape": "__timestampUnix" }, + "SegmentDeliveryConfigurations": { + "shape": "__listOfSegmentDeliveryConfiguration" + }, "SourceLocationName": { "shape": "__string" }, @@ -2779,6 +2808,12 @@ }, "type": "list" }, + "__listOfSegmentDeliveryConfiguration": { + "member": { + "shape": "SegmentDeliveryConfiguration" + }, + "type": "list" + }, "__listOfSourceLocation": { "member": { "shape": "SourceLocation" diff --git a/models/apis/mediatailor/2018-04-23/docs-2.json b/models/apis/mediatailor/2018-04-23/docs-2.json index ea17c62a5e7..b03fed91323 100644 --- a/models/apis/mediatailor/2018-04-23/docs-2.json +++ b/models/apis/mediatailor/2018-04-23/docs-2.json @@ -469,6 +469,12 @@ "AccessConfiguration$SecretsManagerAccessTokenConfiguration": "AWS Secrets Manager access token configuration parameters.
" } }, + "SegmentDeliveryConfiguration": { + "base": null, + "refs": { + "__listOfSegmentDeliveryConfiguration$member": null + } + }, "SlateSource": { "base": "Slate VOD source configuration.
", "refs": { @@ -612,6 +618,15 @@ "GetChannelScheduleResponse$Items": "An array of schedule entries for the channel.
" } }, + "__listOfSegmentDeliveryConfiguration": { + "base": null, + "refs": { + "CreateSourceLocationRequest$SegmentDeliveryConfigurations": "An array of segment delivery configurations for this source location.
", + "DescribeSourceLocationResponse$SegmentDeliveryConfigurations": "An array of segment delivery configurations for this source location.
", + "SourceLocation$SegmentDeliveryConfigurations": "An array of segment delivery configurations for this source location.
", + "UpdateSourceLocationRequest$SegmentDeliveryConfigurations": "An array of segment delivery configurations for this source location.
" + } + }, "__listOfSourceLocation": { "base": null, "refs": { @@ -755,6 +770,8 @@ "SecretsManagerAccessTokenConfiguration$HeaderName": "The name of the HTTP header used to supply the access token in requests to the source location.
", "SecretsManagerAccessTokenConfiguration$SecretArn": "The Amazon Resource Name (ARN) of the AWS Secrets Manager secret that contains the access token.
", "SecretsManagerAccessTokenConfiguration$SecretStringKey": "The AWS Secrets Manager SecretString key associated with the access token. MediaTailor uses the key to look up SecretString key and value pair containing the access token.
", + "SegmentDeliveryConfiguration$BaseUrl": "The base URL of the host or path of the segment delivery server that you're using to serve segments. This is typically a content delivery network (CDN). The URL can be absolute or relative. To use an absolute URL include the protocol, such as https://example.com/some/path. To use a relative URL specify the relative path, such as /some/path.
", + "SegmentDeliveryConfiguration$Name": "A unique identifier used to distinguish between multiple segment delivery configurations in a source location.
", "SlateSource$SourceLocationName": "The name of the source location where the slate VOD source is stored.
", "SlateSource$VodSourceName": "The slate VOD source name. The VOD source must already exist in a source location before it can be used for slate.
", "SourceLocation$Arn": "The ARN of the SourceLocation.
", diff --git a/service/connect/api.go b/service/connect/api.go index 44b1da9aa51..1fac926c4fa 100644 --- a/service/connect/api.go +++ b/service/connect/api.go @@ -1360,7 +1360,8 @@ func (c *Connect) CreateIntegrationAssociationRequest(input *CreateIntegrationAs // CreateIntegrationAssociation API operation for Amazon Connect Service. // -// Creates an AWS resource association with an Amazon Connect instance. +// Creates an Amazon Web Services resource association with an Amazon Connect +// instance. // // Returns awserr.Error for service API and SDK errors. Use runtime type assertions // with awserr.Error's Code and Message methods to get detailed information about @@ -2511,8 +2512,8 @@ func (c *Connect) DeleteIntegrationAssociationRequest(input *DeleteIntegrationAs // DeleteIntegrationAssociation API operation for Amazon Connect Service. // -// Deletes an AWS resource association from an Amazon Connect instance. The -// association must not have any use cases associated with it. +// Deletes an Amazon Web Services resource association from an Amazon Connect +// instance. The association must not have any use cases associated with it. // // Returns awserr.Error for service API and SDK errors. Use runtime type assertions // with awserr.Error's Code and Message methods to get detailed information about @@ -7229,8 +7230,8 @@ func (c *Connect) ListIntegrationAssociationsRequest(input *ListIntegrationAssoc // ListIntegrationAssociations API operation for Amazon Connect Service. // -// Provides summary information about the AWS resource associations for the -// specified Amazon Connect instance. +// Provides summary information about the Amazon Web Services resource associations +// for the specified Amazon Connect instance. // // Returns awserr.Error for service API and SDK errors. Use runtime type assertions // with awserr.Error's Code and Message methods to get detailed information about @@ -17502,6 +17503,9 @@ type CreateUserHierarchyGroupInput struct { // The identifier for the parent hierarchy group. The user hierarchy is created // at level one if the parent group ID is null. ParentGroupId *string `type:"string"` + + // The tags used to organize, track, or control access for this resource. + Tags map[string]*string `min:"1" type:"map"` } // String returns the string representation. @@ -17534,6 +17538,9 @@ func (s *CreateUserHierarchyGroupInput) Validate() error { if s.Name == nil { invalidParams.Add(request.NewErrParamRequired("Name")) } + if s.Tags != nil && len(s.Tags) < 1 { + invalidParams.Add(request.NewErrParamMinLen("Tags", 1)) + } if invalidParams.Len() > 0 { return invalidParams @@ -17559,6 +17566,12 @@ func (s *CreateUserHierarchyGroupInput) SetParentGroupId(v string) *CreateUserHi return s } +// SetTags sets the Tags field's value. +func (s *CreateUserHierarchyGroupInput) SetTags(v map[string]*string) *CreateUserHierarchyGroupInput { + s.Tags = v + return s +} + type CreateUserHierarchyGroupOutput struct { _ struct{} `type:"structure"` @@ -21382,8 +21395,9 @@ type Filters struct { // The channel to use to filter the metrics. Channels []*string `type:"list"` - // The queues to use to filter the metrics. You can specify up to 100 queues - // per request. + // The queues to use to filter the metrics. You should specify at least one + // queue, and can specify up to 100 queues per request. The GetCurrentMetricsData + // API in particular requires a queue when you include a Filter in your request. Queues []*string `min:"1" type:"list"` } @@ -22264,6 +22278,9 @@ type HierarchyGroup struct { // The name of the hierarchy group. Name *string `type:"string"` + + // The tags used to organize, track, or control access for this resource. + Tags map[string]*string `min:"1" type:"map"` } // String returns the string representation. @@ -22314,6 +22331,12 @@ func (s *HierarchyGroup) SetName(v string) *HierarchyGroup { return s } +// SetTags sets the Tags field's value. +func (s *HierarchyGroup) SetTags(v map[string]*string) *HierarchyGroup { + s.Tags = v + return s +} + // Contains summary information about a hierarchy group. type HierarchyGroupSummary struct { _ struct{} `type:"structure"` @@ -32331,7 +32354,7 @@ type UpdateInstanceAttributeInput struct { // The type of attribute. // // Only allowlisted customers can consume USE_CUSTOM_TTS_VOICES. To access this - // feature, contact AWS Support for allowlisting. + // feature, contact Amazon Web Services Support for allowlisting. // // AttributeType is a required field AttributeType *string `location:"uri" locationName:"AttributeType" type:"string" required:"true" enum:"InstanceAttributeType"` diff --git a/service/connect/doc.go b/service/connect/doc.go index d50379048e7..63b2d9ed6f1 100644 --- a/service/connect/doc.go +++ b/service/connect/doc.go @@ -16,8 +16,9 @@ // For more information, see Amazon Connect Service Quotas (https://docs.aws.amazon.com/connect/latest/adminguide/amazon-connect-service-limits.html) // in the Amazon Connect Administrator Guide. // -// You can connect programmatically to an AWS service by using an endpoint. -// For a list of Amazon Connect endpoints, see Amazon Connect Endpoints (https://docs.aws.amazon.com/general/latest/gr/connect_region.html). +// You can connect programmatically to an Amazon Web Services service by using +// an endpoint. For a list of Amazon Connect endpoints, see Amazon Connect Endpoints +// (https://docs.aws.amazon.com/general/latest/gr/connect_region.html). // // Working with contact flows? Check out the Amazon Connect Flow language (https://docs.aws.amazon.com/connect/latest/adminguide/flow-language.html). // diff --git a/service/ec2/api.go b/service/ec2/api.go index c7601994fe8..0e644512e5e 100644 --- a/service/ec2/api.go +++ b/service/ec2/api.go @@ -162105,6 +162105,9 @@ const ( // InstanceTypeC6i32xlarge is a InstanceType enum value InstanceTypeC6i32xlarge = "c6i.32xlarge" + // InstanceTypeC6iMetal is a InstanceType enum value + InstanceTypeC6iMetal = "c6i.metal" + // InstanceTypeCc14xlarge is a InstanceType enum value InstanceTypeCc14xlarge = "cc1.4xlarge" @@ -162732,6 +162735,9 @@ const ( // InstanceTypeM6i32xlarge is a InstanceType enum value InstanceTypeM6i32xlarge = "m6i.32xlarge" + // InstanceTypeM6iMetal is a InstanceType enum value + InstanceTypeM6iMetal = "m6i.metal" + // InstanceTypeMac1Metal is a InstanceType enum value InstanceTypeMac1Metal = "mac1.metal" @@ -163029,6 +163035,36 @@ const ( // InstanceTypeR6gdMetal is a InstanceType enum value InstanceTypeR6gdMetal = "r6gd.metal" + // InstanceTypeR6iLarge is a InstanceType enum value + InstanceTypeR6iLarge = "r6i.large" + + // InstanceTypeR6iXlarge is a InstanceType enum value + InstanceTypeR6iXlarge = "r6i.xlarge" + + // InstanceTypeR6i2xlarge is a InstanceType enum value + InstanceTypeR6i2xlarge = "r6i.2xlarge" + + // InstanceTypeR6i4xlarge is a InstanceType enum value + InstanceTypeR6i4xlarge = "r6i.4xlarge" + + // InstanceTypeR6i8xlarge is a InstanceType enum value + InstanceTypeR6i8xlarge = "r6i.8xlarge" + + // InstanceTypeR6i12xlarge is a InstanceType enum value + InstanceTypeR6i12xlarge = "r6i.12xlarge" + + // InstanceTypeR6i16xlarge is a InstanceType enum value + InstanceTypeR6i16xlarge = "r6i.16xlarge" + + // InstanceTypeR6i24xlarge is a InstanceType enum value + InstanceTypeR6i24xlarge = "r6i.24xlarge" + + // InstanceTypeR6i32xlarge is a InstanceType enum value + InstanceTypeR6i32xlarge = "r6i.32xlarge" + + // InstanceTypeR6iMetal is a InstanceType enum value + InstanceTypeR6iMetal = "r6i.metal" + // InstanceTypeT1Micro is a InstanceType enum value InstanceTypeT1Micro = "t1.micro" @@ -163322,6 +163358,7 @@ func InstanceType_Values() []string { InstanceTypeC6i16xlarge, InstanceTypeC6i24xlarge, InstanceTypeC6i32xlarge, + InstanceTypeC6iMetal, InstanceTypeCc14xlarge, InstanceTypeCc28xlarge, InstanceTypeCg14xlarge, @@ -163531,6 +163568,7 @@ func InstanceType_Values() []string { InstanceTypeM6i16xlarge, InstanceTypeM6i24xlarge, InstanceTypeM6i32xlarge, + InstanceTypeM6iMetal, InstanceTypeMac1Metal, InstanceTypeP2Xlarge, InstanceTypeP28xlarge, @@ -163630,6 +163668,16 @@ func InstanceType_Values() []string { InstanceTypeR6gd12xlarge, InstanceTypeR6gd16xlarge, InstanceTypeR6gdMetal, + InstanceTypeR6iLarge, + InstanceTypeR6iXlarge, + InstanceTypeR6i2xlarge, + InstanceTypeR6i4xlarge, + InstanceTypeR6i8xlarge, + InstanceTypeR6i12xlarge, + InstanceTypeR6i16xlarge, + InstanceTypeR6i24xlarge, + InstanceTypeR6i32xlarge, + InstanceTypeR6iMetal, InstanceTypeT1Micro, InstanceTypeT2Nano, InstanceTypeT2Micro, diff --git a/service/fis/api.go b/service/fis/api.go index d9382caad20..0a5db5e564d 100644 --- a/service/fis/api.go +++ b/service/fis/api.go @@ -59,11 +59,11 @@ func (c *FIS) CreateExperimentTemplateRequest(input *CreateExperimentTemplateInp // // Creates an experiment template. // -// To create a template, specify the following information: +// An experiment template includes the following components: // -// * Targets: A target can be a specific resource in your AWS environment, -// or one or more resources that match criteria that you specify, for example, -// resources that have specific tags. +// * Targets: A target can be a specific resource in your Amazon Web Services +// environment, or one or more resources that match criteria that you specify, +// for example, resources that have specific tags. // // * Actions: The actions to carry out on the target. You can specify multiple // actions, the duration of each action, and when to start each action during @@ -73,7 +73,8 @@ func (c *FIS) CreateExperimentTemplateRequest(input *CreateExperimentTemplateInp // is running, the experiment is automatically stopped. You can define a // stop condition as a CloudWatch alarm. // -// For more information, see the AWS Fault Injection Simulator User Guide (https://docs.aws.amazon.com/fis/latest/userguide/). +// For more information, see Experiment templates (https://docs.aws.amazon.com/fis/latest/userguide/experiment-templates.html) +// in the Fault Injection Simulator User Guide. // // Returns awserr.Error for service API and SDK errors. Use runtime type assertions // with awserr.Error's Code and Message methods to get detailed information about @@ -245,7 +246,7 @@ func (c *FIS) GetActionRequest(input *GetActionInput) (req *request.Request, out // GetAction API operation for AWS Fault Injection Simulator. // -// Gets information about the specified AWS FIS action. +// Gets information about the specified FIS action. // // Returns awserr.Error for service API and SDK errors. Use runtime type assertions // with awserr.Error's Code and Message methods to get detailed information about @@ -500,7 +501,7 @@ func (c *FIS) ListActionsRequest(input *ListActionsInput) (req *request.Request, // ListActions API operation for AWS Fault Injection Simulator. // -// Lists the available AWS FIS actions. +// Lists the available FIS actions. // // Returns awserr.Error for service API and SDK errors. Use runtime type assertions // with awserr.Error's Code and Message methods to get detailed information about @@ -1346,8 +1347,8 @@ func (c *FIS) UpdateExperimentTemplateWithContext(ctx aws.Context, input *Update return out, req.Send() } -// Describes an action. For more information, see AWS FIS actions (https://docs.aws.amazon.com/fis/latest/userguide/fis-actions-reference.html) -// in the AWS Fault Injection Simulator User Guide. +// Describes an action. For more information, see FIS actions (https://docs.aws.amazon.com/fis/latest/userguide/fis-actions-reference.html) +// in the Fault Injection Simulator User Guide. type Action struct { _ struct{} `type:"structure"` @@ -1612,10 +1613,13 @@ func (s *ConflictException) RequestID() string { } // Specifies an action for an experiment template. +// +// For more information, see Actions (https://docs.aws.amazon.com/fis/latest/userguide/actions.html) +// in the Fault Injection Simulator User Guide. type CreateExperimentTemplateActionInput struct { _ struct{} `type:"structure"` - // The ID of the action. + // The ID of the action. The format of the action ID is: aws:service-name:action-type. // // ActionId is a required field ActionId *string `locationName:"actionId" type:"string" required:"true"` @@ -1707,13 +1711,12 @@ type CreateExperimentTemplateInput struct { // of the request. ClientToken *string `locationName:"clientToken" min:"1" type:"string" idempotencyToken:"true"` - // A description for the experiment template. Can contain up to 64 letters (A-Z - // and a-z). + // A description for the experiment template. // // Description is a required field Description *string `locationName:"description" type:"string" required:"true"` - // The Amazon Resource Name (ARN) of an IAM role that grants the AWS FIS service + // The Amazon Resource Name (ARN) of an IAM role that grants the FIS service // permission to perform service actions on your behalf. // // RoleArn is a required field @@ -1945,6 +1948,9 @@ func (s *CreateExperimentTemplateStopConditionInput) SetValue(v string) *CreateE // Specifies a target for an experiment. You must specify at least one Amazon // Resource Name (ARN) or at least one resource tag. You cannot specify both // ARNs and tags. +// +// For more information, see Targets (https://docs.aws.amazon.com/fis/latest/userguide/targets.html) +// in the Fault Injection Simulator User Guide. type CreateExperimentTemplateTargetInput struct { _ struct{} `type:"structure"` @@ -1957,8 +1963,8 @@ type CreateExperimentTemplateTargetInput struct { // The tags for the target resources. ResourceTags map[string]*string `locationName:"resourceTags" type:"map"` - // The AWS resource type. The resource type must be supported for the specified - // action. + // The Amazon Web Services resource type. The resource type must be supported + // for the specified action. // // ResourceType is a required field ResourceType *string `locationName:"resourceType" type:"string" required:"true"` @@ -2142,7 +2148,7 @@ type Experiment struct { // The actions for the experiment. Actions map[string]*ExperimentAction `locationName:"actions" type:"map"` - // The time the experiment was created. + // The time that the experiment was created. CreationTime *time.Time `locationName:"creationTime" type:"timestamp"` // The time that the experiment ended. @@ -2154,11 +2160,11 @@ type Experiment struct { // The ID of the experiment. Id *string `locationName:"id" type:"string"` - // The Amazon Resource Name (ARN) of an IAM role that grants the AWS FIS service + // The Amazon Resource Name (ARN) of an IAM role that grants the FIS service // permission to perform service actions on your behalf. RoleArn *string `locationName:"roleArn" min:"20" type:"string"` - // The time that the experiment was started. + // The time that the experiment started. StartTime *time.Time `locationName:"startTime" type:"timestamp"` // The state of the experiment. @@ -2268,12 +2274,18 @@ type ExperimentAction struct { // The description for the action. Description *string `locationName:"description" type:"string"` + // The time that the action ended. + EndTime *time.Time `locationName:"endTime" type:"timestamp"` + // The parameters for the action. Parameters map[string]*string `locationName:"parameters" type:"map"` // The name of the action that must be completed before this action starts. StartAfter []*string `locationName:"startAfter" type:"list"` + // The time that the action started. + StartTime *time.Time `locationName:"startTime" type:"timestamp"` + // The state of the action. State *ExperimentActionState `locationName:"state" type:"structure"` @@ -2311,6 +2323,12 @@ func (s *ExperimentAction) SetDescription(v string) *ExperimentAction { return s } +// SetEndTime sets the EndTime field's value. +func (s *ExperimentAction) SetEndTime(v time.Time) *ExperimentAction { + s.EndTime = &v + return s +} + // SetParameters sets the Parameters field's value. func (s *ExperimentAction) SetParameters(v map[string]*string) *ExperimentAction { s.Parameters = v @@ -2323,6 +2341,12 @@ func (s *ExperimentAction) SetStartAfter(v []*string) *ExperimentAction { return s } +// SetStartTime sets the StartTime field's value. +func (s *ExperimentAction) SetStartTime(v time.Time) *ExperimentAction { + s.StartTime = &v + return s +} + // SetState sets the State field's value. func (s *ExperimentAction) SetState(v *ExperimentActionState) *ExperimentAction { s.State = v @@ -3025,7 +3049,10 @@ func (s *ExperimentTemplateTargetFilter) SetValues(v []*string) *ExperimentTempl return s } -// Describes a filter used for the target resource input in an experiment template. +// Specifies a filter used for the target resource input in an experiment template. +// +// For more information, see Resource filters (https://docs.aws.amazon.com/fis/latest/userguide/targets.html#target-filters) +// in the Fault Injection Simulator User Guide. type ExperimentTemplateTargetInputFilter struct { _ struct{} `type:"structure"` @@ -4255,7 +4282,7 @@ type UpdateExperimentTemplateInput struct { // Id is a required field Id *string `location:"uri" locationName:"id" type:"string" required:"true"` - // The Amazon Resource Name (ARN) of an IAM role that grants the AWS FIS service + // The Amazon Resource Name (ARN) of an IAM role that grants the FIS service // permission to perform service actions on your behalf. RoleArn *string `locationName:"roleArn" min:"20" type:"string"` @@ -4466,8 +4493,8 @@ type UpdateExperimentTemplateTargetInput struct { // The tags for the target resources. ResourceTags map[string]*string `locationName:"resourceTags" type:"map"` - // The AWS resource type. The resource type must be supported for the specified - // action. + // The Amazon Web Services resource type. The resource type must be supported + // for the specified action. // // ResourceType is a required field ResourceType *string `locationName:"resourceType" type:"string" required:"true"` diff --git a/service/fis/doc.go b/service/fis/doc.go index 39f0eb21395..f1d069e049c 100644 --- a/service/fis/doc.go +++ b/service/fis/doc.go @@ -3,9 +3,9 @@ // Package fis provides the client and types for making API // requests to AWS Fault Injection Simulator. // -// AWS Fault Injection Simulator is a managed service that enables you to perform -// fault injection experiments on your AWS workloads. For more information, -// see the AWS Fault Injection Simulator User Guide (https://docs.aws.amazon.com/fis/latest/userguide/). +// Fault Injection Simulator is a managed service that enables you to perform +// fault injection experiments on your Amazon Web Services workloads. For more +// information, see the Fault Injection Simulator User Guide (https://docs.aws.amazon.com/fis/latest/userguide/). // // See https://docs.aws.amazon.com/goto/WebAPI/fis-2020-12-01 for more information on this service. // diff --git a/service/guardduty/api.go b/service/guardduty/api.go index e268e0675d2..811d68c8365 100644 --- a/service/guardduty/api.go +++ b/service/guardduty/api.go @@ -396,9 +396,9 @@ func (c *GuardDuty) CreateIPSetRequest(input *CreateIPSetInput) (req *request.Re // // Creates a new IPSet, which is called a trusted IP list in the console user // interface. An IPSet is a list of IP addresses that are trusted for secure -// communication with AWS infrastructure and applications. GuardDuty doesn't -// generate findings for IP addresses that are included in IPSets. Only users -// from the administrator account can use this operation. +// communication with Amazon Web Services infrastructure and applications. GuardDuty +// doesn't generate findings for IP addresses that are included in IPSets. Only +// users from the administrator account can use this operation. // // Returns awserr.Error for service API and SDK errors. Use runtime type assertions // with awserr.Error's Code and Message methods to get detailed information about @@ -480,9 +480,10 @@ func (c *GuardDuty) CreateMembersRequest(input *CreateMembersInput) (req *reques // CreateMembers API operation for Amazon GuardDuty. // -// Creates member accounts of the current AWS account by specifying a list of -// AWS account IDs. This step is a prerequisite for managing the associated -// member accounts either by invitation or through an organization. +// Creates member accounts of the current Amazon Web Services account by specifying +// a list of Amazon Web Services account IDs. This step is a prerequisite for +// managing the associated member accounts either by invitation or through an +// organization. // // When using Create Members as an organizations delegated administrator this // action will enable GuardDuty in the added member accounts, with the exception @@ -825,8 +826,8 @@ func (c *GuardDuty) DeclineInvitationsRequest(input *DeclineInvitationsInput) (r // DeclineInvitations API operation for Amazon GuardDuty. // -// Declines invitations sent to the current member account by AWS accounts specified -// by their account IDs. +// Declines invitations sent to the current member account by Amazon Web Services +// accounts specified by their account IDs. // // Returns awserr.Error for service API and SDK errors. Use runtime type assertions // with awserr.Error's Code and Message methods to get detailed information about @@ -1158,8 +1159,8 @@ func (c *GuardDuty) DeleteInvitationsRequest(input *DeleteInvitationsInput) (req // DeleteInvitations API operation for Amazon GuardDuty. // -// Deletes invitations sent to the current member account by AWS accounts specified -// by their account IDs. +// Deletes invitations sent to the current member account by Amazon Web Services +// accounts specified by their account IDs. // // Returns awserr.Error for service API and SDK errors. Use runtime type assertions // with awserr.Error's Code and Message methods to get detailed information about @@ -1657,8 +1658,8 @@ func (c *GuardDuty) DisableOrganizationAdminAccountRequest(input *DisableOrganiz // DisableOrganizationAdminAccount API operation for Amazon GuardDuty. // -// Disables an AWS account within the Organization as the GuardDuty delegated -// administrator. +// Disables an Amazon Web Services account within the Organization as the GuardDuty +// delegated administrator. // // Returns awserr.Error for service API and SDK errors. Use runtime type assertions // with awserr.Error's Code and Message methods to get detailed information about @@ -1908,8 +1909,8 @@ func (c *GuardDuty) EnableOrganizationAdminAccountRequest(input *EnableOrganizat // EnableOrganizationAdminAccount API operation for Amazon GuardDuty. // -// Enables an AWS account within the organization as the GuardDuty delegated -// administrator. +// Enables an Amazon Web Services account within the organization as the GuardDuty +// delegated administrator. // // Returns awserr.Error for service API and SDK errors. Use runtime type assertions // with awserr.Error's Code and Message methods to get detailed information about @@ -2959,10 +2960,10 @@ func (c *GuardDuty) InviteMembersRequest(input *InviteMembersInput) (req *reques // InviteMembers API operation for Amazon GuardDuty. // -// Invites other AWS accounts (created as members of the current AWS account -// by CreateMembers) to enable GuardDuty, and allow the current AWS account -// to view and manage these accounts' findings on their behalf as the GuardDuty -// administrator account. +// Invites other Amazon Web Services accounts (created as members of the current +// Amazon Web Services account by CreateMembers) to enable GuardDuty, and allow +// the current Amazon Web Services account to view and manage these accounts' +// findings on their behalf as the GuardDuty administrator account. // // Returns awserr.Error for service API and SDK errors. Use runtime type assertions // with awserr.Error's Code and Message methods to get detailed information about @@ -3613,7 +3614,7 @@ func (c *GuardDuty) ListInvitationsRequest(input *ListInvitationsInput) (req *re // ListInvitations API operation for Amazon GuardDuty. // // Lists all GuardDuty membership invitations that were sent to the current -// AWS account. +// Amazon Web Services account. // // Returns awserr.Error for service API and SDK errors. Use runtime type assertions // with awserr.Error's Code and Message methods to get detailed information about @@ -4034,7 +4035,7 @@ func (c *GuardDuty) ListPublishingDestinationsRequest(input *ListPublishingDesti // ListPublishingDestinations API operation for Amazon GuardDuty. // -// Returns a list of publishing destinations associated with the specified dectectorId. +// Returns a list of publishing destinations associated with the specified detectorId. // // Returns awserr.Error for service API and SDK errors. Use runtime type assertions // with awserr.Error's Code and Message methods to get detailed information about @@ -5804,7 +5805,7 @@ func (s *Action) SetPortProbeAction(v *PortProbeAction) *Action { type AdminAccount struct { _ struct{} `type:"structure"` - // The AWS account ID for the account. + // The Amazon Web Services account ID for the account. AdminAccountId *string `locationName:"adminAccountId" type:"string"` // Indicates whether the account is enabled as the delegated administrator. @@ -5931,22 +5932,27 @@ func (s ArchiveFindingsOutput) GoString() string { type AwsApiCallAction struct { _ struct{} `type:"structure"` - // The AWS API name. + // The Amazon Web Services API name. Api *string `locationName:"api" type:"string"` - // The AWS API caller type. + // The Amazon Web Services API caller type. CallerType *string `locationName:"callerType" type:"string"` - // The domain information for the AWS API call. + // The domain information for the Amazon Web Services API call. DomainDetails *DomainDetails `locationName:"domainDetails" type:"structure"` - // The error code of the failed AWS API action. + // The error code of the failed Amazon Web Services API action. ErrorCode *string `locationName:"errorCode" type:"string"` - // The remote IP information of the connection that initiated the AWS API call. + // The details of the Amazon Web Services account that made the API call. This + // field appears if the call was made from outside your account. + RemoteAccountDetails *RemoteAccountDetails `locationName:"remoteAccountDetails" type:"structure"` + + // The remote IP information of the connection that initiated the Amazon Web + // Services API call. RemoteIpDetails *RemoteIpDetails `locationName:"remoteIpDetails" type:"structure"` - // The AWS service name whose API was invoked. + // The Amazon Web Services service name whose API was invoked. ServiceName *string `locationName:"serviceName" type:"string"` } @@ -5992,6 +5998,12 @@ func (s *AwsApiCallAction) SetErrorCode(v string) *AwsApiCallAction { return s } +// SetRemoteAccountDetails sets the RemoteAccountDetails field's value. +func (s *AwsApiCallAction) SetRemoteAccountDetails(v *RemoteAccountDetails) *AwsApiCallAction { + s.RemoteAccountDetails = v + return s +} + // SetRemoteIpDetails sets the RemoteIpDetails field's value. func (s *AwsApiCallAction) SetRemoteIpDetails(v *RemoteIpDetails) *AwsApiCallAction { s.RemoteIpDetails = v @@ -6726,6 +6738,16 @@ type CreateFilterInput struct { // // * service.additionalInfo.threatListName // + // * resource.s3BucketDetails.publicAccess.effectivePermissions + // + // * resource.s3BucketDetails.name + // + // * resource.s3BucketDetails.tags.key + // + // * resource.s3BucketDetails.tags.value + // + // * resource.s3BucketDetails.type + // // * service.archived When this attribute is set to TRUE, only archived findings // are listed. When it's set to FALSE, only unarchived findings are listed. // When this attribute is not set, all existing findings are listed. @@ -6913,7 +6935,7 @@ type CreateIPSetInput struct { // Format is a required field Format *string `locationName:"format" min:"1" type:"string" required:"true" enum:"IpSetFormat"` - // The URI of the file that contains the IPSet. For example: https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key. + // The URI of the file that contains the IPSet. // // Location is a required field Location *string `locationName:"location" min:"1" type:"string" required:"true"` @@ -7402,7 +7424,7 @@ type CreateThreatIntelSetInput struct { // Format is a required field Format *string `locationName:"format" min:"1" type:"string" required:"true" enum:"ThreatIntelSetFormat"` - // The URI of the file that contains the ThreatIntelSet. For example: https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key. + // The URI of the file that contains the ThreatIntelSet. // // Location is a required field Location *string `locationName:"location" min:"1" type:"string" required:"true"` @@ -7704,8 +7726,8 @@ func (s *DataSourceConfigurationsResult) SetS3Logs(v *S3LogsConfigurationResult) type DeclineInvitationsInput struct { _ struct{} `type:"structure"` - // A list of account IDs of the AWS accounts that sent invitations to the current - // member account that you want to decline invitations from. + // A list of account IDs of the Amazon Web Services accounts that sent invitations + // to the current member account that you want to decline invitations from. // // AccountIds is a required field AccountIds []*string `locationName:"accountIds" min:"1" type:"list" required:"true"` @@ -8079,8 +8101,8 @@ func (s DeleteIPSetOutput) GoString() string { type DeleteInvitationsInput struct { _ struct{} `type:"structure"` - // A list of account IDs of the AWS accounts that sent invitations to the current - // member account that you want to delete invitations from. + // A list of account IDs of the Amazon Web Services accounts that sent invitations + // to the current member account that you want to delete invitations from. // // AccountIds is a required field AccountIds []*string `locationName:"accountIds" min:"1" type:"list" required:"true"` @@ -8753,6 +8775,8 @@ type DestinationProperties struct { _ struct{} `type:"structure"` // The ARN of the resource to publish to. + // + // To specify an S3 bucket folder use the following format: arn:aws:s3:::DOC-EXAMPLE-BUCKET/myFolder/ DestinationArn *string `locationName:"destinationArn" type:"string"` // The ARN of the KMS key to use for encryption. @@ -8792,8 +8816,8 @@ func (s *DestinationProperties) SetKmsKeyArn(v string) *DestinationProperties { type DisableOrganizationAdminAccountInput struct { _ struct{} `type:"structure"` - // The AWS Account ID for the organizations account to be disabled as a GuardDuty - // delegated administrator. + // The Amazon Web Services Account ID for the organizations account to be disabled + // as a GuardDuty delegated administrator. // // AdminAccountId is a required field AdminAccountId *string `locationName:"adminAccountId" type:"string" required:"true"` @@ -9067,7 +9091,7 @@ func (s *DnsRequestAction) SetDomain(v string) *DnsRequestAction { type DomainDetails struct { _ struct{} `type:"structure"` - // The domain information for the AWS API call. + // The domain information for the Amazon Web Services API call. Domain *string `locationName:"domain" type:"string"` } @@ -9098,8 +9122,8 @@ func (s *DomainDetails) SetDomain(v string) *DomainDetails { type EnableOrganizationAdminAccountInput struct { _ struct{} `type:"structure"` - // The AWS Account ID for the organization account to be enabled as a GuardDuty - // delegated administrator. + // The Amazon Web Services Account ID for the organization account to be enabled + // as a GuardDuty delegated administrator. // // AdminAccountId is a required field AdminAccountId *string `locationName:"adminAccountId" type:"string" required:"true"` @@ -9235,8 +9259,8 @@ type Finding struct { // Region is a required field Region *string `locationName:"region" type:"string" required:"true"` - // Contains information about the AWS resource associated with the activity - // that prompted GuardDuty to generate a finding. + // Contains information about the Amazon Web Services resource associated with + // the activity that prompted GuardDuty to generate a finding. // // Resource is a required field Resource *Resource `locationName:"resource" type:"structure" required:"true"` @@ -10090,7 +10114,7 @@ type GetIPSetOutput struct { // Format is a required field Format *string `locationName:"format" min:"1" type:"string" required:"true" enum:"IpSetFormat"` - // The URI of the file that contains the IPSet. For example: https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key. + // The URI of the file that contains the IPSet. // // Location is a required field Location *string `locationName:"location" min:"1" type:"string" required:"true"` @@ -10589,7 +10613,7 @@ type GetThreatIntelSetOutput struct { // Format is a required field Format *string `locationName:"format" min:"1" type:"string" required:"true" enum:"ThreatIntelSetFormat"` - // The URI of the file that contains the ThreatIntelSet. For example: https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key. + // The URI of the file that contains the ThreatIntelSet. // // Location is a required field Location *string `locationName:"location" min:"1" type:"string" required:"true"` @@ -10888,8 +10912,8 @@ type InstanceDetails struct { // The elastic network interface information of the EC2 instance. NetworkInterfaces []*NetworkInterface `locationName:"networkInterfaces" type:"list"` - // The Amazon Resource Name (ARN) of the AWS Outpost. Only applicable to AWS - // Outposts instances. + // The Amazon Resource Name (ARN) of the Amazon Web Services Outpost. Only applicable + // to Amazon Web Services Outposts instances. OutpostArn *string `locationName:"outpostArn" type:"string"` // The platform of the EC2 instance. @@ -11550,8 +11574,6 @@ type ListFindingsInput struct { // // * service.action.networkConnectionAction.protocol // - // * service.action.networkConnectionAction.remoteIpDetails.city.cityName - // // * service.action.networkConnectionAction.remoteIpDetails.country.countryName // // * service.action.networkConnectionAction.remoteIpDetails.ipAddressV4 @@ -13446,6 +13468,51 @@ func (s *PublicAccess) SetPermissionConfiguration(v *PermissionConfiguration) *P return s } +// Contains details about the remote Amazon Web Services account that made the +// API call. +type RemoteAccountDetails struct { + _ struct{} `type:"structure"` + + // The Amazon Web Services account ID of the remote API caller. + AccountId *string `locationName:"accountId" type:"string"` + + // Details on whether the Amazon Web Services account of the remote API caller + // is related to your GuardDuty environment. If this value is True the API caller + // is affiliated to your account in some way. If it is False the API caller + // is from outside your environment. + Affiliated *bool `locationName:"affiliated" type:"boolean"` +} + +// String returns the string representation. +// +// API parameter values that are decorated as "sensitive" in the API will not +// be included in the string output. The member name will be present, but the +// value will be replaced with "sensitive". +func (s RemoteAccountDetails) String() string { + return awsutil.Prettify(s) +} + +// GoString returns the string representation. +// +// API parameter values that are decorated as "sensitive" in the API will not +// be included in the string output. The member name will be present, but the +// value will be replaced with "sensitive". +func (s RemoteAccountDetails) GoString() string { + return s.String() +} + +// SetAccountId sets the AccountId field's value. +func (s *RemoteAccountDetails) SetAccountId(v string) *RemoteAccountDetails { + s.AccountId = &v + return s +} + +// SetAffiliated sets the Affiliated field's value. +func (s *RemoteAccountDetails) SetAffiliated(v bool) *RemoteAccountDetails { + s.Affiliated = &v + return s +} + // Contains information about the remote IP address of the connection. type RemoteIpDetails struct { _ struct{} `type:"structure"` @@ -13555,8 +13622,8 @@ func (s *RemotePortDetails) SetPortName(v string) *RemotePortDetails { return s } -// Contains information about the AWS resource associated with the activity -// that prompted GuardDuty to generate a finding. +// Contains information about the Amazon Web Services resource associated with +// the activity that prompted GuardDuty to generate a finding. type Resource struct { _ struct{} `type:"structure"` @@ -13568,7 +13635,7 @@ type Resource struct { // prompted GuardDuty to generate a finding. InstanceDetails *InstanceDetails `locationName:"instanceDetails" type:"structure"` - // The type of AWS resource. + // The type of Amazon Web Services resource. ResourceType *string `locationName:"resourceType" type:"string"` // Contains information on the S3 bucket. @@ -13865,7 +13932,8 @@ type Service struct { // The resource role information for this finding. ResourceRole *string `locationName:"resourceRole" type:"string"` - // The name of the AWS service (GuardDuty) that generated a finding. + // The name of the Amazon Web Services service (GuardDuty) that generated a + // finding. ServiceName *string `locationName:"serviceName" type:"string"` // Feedback that was submitted about the finding. @@ -14498,7 +14566,7 @@ func (s UnarchiveFindingsOutput) GoString() string { type UnprocessedAccount struct { _ struct{} `type:"structure"` - // The AWS account ID. + // The Amazon Web Services account ID. // // AccountId is a required field AccountId *string `locationName:"accountId" min:"12" type:"string" required:"true"` @@ -15000,7 +15068,7 @@ type UpdateIPSetInput struct { // IpSetId is a required field IpSetId *string `location:"uri" locationName:"ipSetId" type:"string" required:"true"` - // The updated URI of the file that contains the IPSet. For example: https://s3.us-west-2.amazonaws.com/my-bucket/my-object-key. + // The updated URI of the file that contains the IPSet. Location *string `locationName:"location" min:"1" type:"string"` // The unique ID that specifies the IPSet that you want to update. @@ -15690,11 +15758,12 @@ func (s *UsageDataSourceResult) SetTotal(v *Total) *UsageDataSourceResult { return s } -// Contains information on the sum of usage based on an AWS resource. +// Contains information on the sum of usage based on an Amazon Web Services +// resource. type UsageResourceResult struct { _ struct{} `type:"structure"` - // The AWS resource that generated usage. + // The Amazon Web Services resource that generated usage. Resource *string `locationName:"resource" type:"string"` // Represents the sum total of usage for the specified resource type. diff --git a/service/guardduty/doc.go b/service/guardduty/doc.go index c14c9641279..0305c50b1b0 100644 --- a/service/guardduty/doc.go +++ b/service/guardduty/doc.go @@ -4,23 +4,24 @@ // requests to Amazon GuardDuty. // // Amazon GuardDuty is a continuous security monitoring service that analyzes -// and processes the following data sources: VPC Flow Logs, AWS CloudTrail event -// logs, and DNS logs. It uses threat intelligence feeds (such as lists of malicious -// IPs and domains) and machine learning to identify unexpected, potentially -// unauthorized, and malicious activity within your AWS environment. This can -// include issues like escalations of privileges, uses of exposed credentials, -// or communication with malicious IPs, URLs, or domains. For example, GuardDuty -// can detect compromised EC2 instances that serve malware or mine bitcoin. -// -// GuardDuty also monitors AWS account access behavior for signs of compromise. -// Some examples of this are unauthorized infrastructure deployments such as -// EC2 instances deployed in a Region that has never been used, or unusual API -// calls like a password policy change to reduce password strength. -// -// GuardDuty informs you of the status of your AWS environment by producing -// security findings that you can view in the GuardDuty console or through Amazon -// CloudWatch events. For more information, see the Amazon GuardDuty User Guide -// (https://docs.aws.amazon.com/guardduty/latest/ug/what-is-guardduty.html) . +// and processes the following data sources: VPC Flow Logs, Amazon Web Services +// CloudTrail event logs, and DNS logs. It uses threat intelligence feeds (such +// as lists of malicious IPs and domains) and machine learning to identify unexpected, +// potentially unauthorized, and malicious activity within your Amazon Web Services +// environment. This can include issues like escalations of privileges, uses +// of exposed credentials, or communication with malicious IPs, URLs, or domains. +// For example, GuardDuty can detect compromised EC2 instances that serve malware +// or mine bitcoin. +// +// GuardDuty also monitors Amazon Web Services account access behavior for signs +// of compromise. Some examples of this are unauthorized infrastructure deployments +// such as EC2 instances deployed in a Region that has never been used, or unusual +// API calls like a password policy change to reduce password strength. +// +// GuardDuty informs you of the status of your Amazon Web Services environment +// by producing security findings that you can view in the GuardDuty console +// or through Amazon CloudWatch events. For more information, see the Amazon +// GuardDuty User Guide (https://docs.aws.amazon.com/guardduty/latest/ug/what-is-guardduty.html) . // // See https://docs.aws.amazon.com/goto/WebAPI/guardduty-2017-11-28 for more information on this service. // diff --git a/service/mediatailor/api.go b/service/mediatailor/api.go index 0a8ac4cff25..1fe302693a3 100644 --- a/service/mediatailor/api.go +++ b/service/mediatailor/api.go @@ -4586,6 +4586,9 @@ type CreateSourceLocationInput struct { // HttpConfiguration is a required field HttpConfiguration *HttpConfiguration `type:"structure" required:"true"` + // An array of segment delivery configurations for this source location. + SegmentDeliveryConfigurations []*SegmentDeliveryConfiguration `type:"list"` + // SourceLocationName is a required field SourceLocationName *string `location:"uri" locationName:"sourceLocationName" type:"string" required:"true"` @@ -4653,6 +4656,12 @@ func (s *CreateSourceLocationInput) SetHttpConfiguration(v *HttpConfiguration) * return s } +// SetSegmentDeliveryConfigurations sets the SegmentDeliveryConfigurations field's value. +func (s *CreateSourceLocationInput) SetSegmentDeliveryConfigurations(v []*SegmentDeliveryConfiguration) *CreateSourceLocationInput { + s.SegmentDeliveryConfigurations = v + return s +} + // SetSourceLocationName sets the SourceLocationName field's value. func (s *CreateSourceLocationInput) SetSourceLocationName(v string) *CreateSourceLocationInput { s.SourceLocationName = &v @@ -4688,6 +4697,8 @@ type CreateSourceLocationOutput struct { LastModifiedTime *time.Time `type:"timestamp" timestampFormat:"unixTimestamp"` + SegmentDeliveryConfigurations []*SegmentDeliveryConfiguration `type:"list"` + SourceLocationName *string `type:"string"` Tags map[string]*string `locationName:"tags" type:"map"` @@ -4747,6 +4758,12 @@ func (s *CreateSourceLocationOutput) SetLastModifiedTime(v time.Time) *CreateSou return s } +// SetSegmentDeliveryConfigurations sets the SegmentDeliveryConfigurations field's value. +func (s *CreateSourceLocationOutput) SetSegmentDeliveryConfigurations(v []*SegmentDeliveryConfiguration) *CreateSourceLocationOutput { + s.SegmentDeliveryConfigurations = v + return s +} + // SetSourceLocationName sets the SourceLocationName field's value. func (s *CreateSourceLocationOutput) SetSourceLocationName(v string) *CreateSourceLocationOutput { s.SourceLocationName = &v @@ -6065,6 +6082,9 @@ type DescribeSourceLocationOutput struct { // The timestamp that indicates when the source location was last modified. LastModifiedTime *time.Time `type:"timestamp" timestampFormat:"unixTimestamp"` + // An array of segment delivery configurations for this source location. + SegmentDeliveryConfigurations []*SegmentDeliveryConfiguration `type:"list"` + // The name of the source location. SourceLocationName *string `type:"string"` @@ -6126,6 +6146,12 @@ func (s *DescribeSourceLocationOutput) SetLastModifiedTime(v time.Time) *Describ return s } +// SetSegmentDeliveryConfigurations sets the SegmentDeliveryConfigurations field's value. +func (s *DescribeSourceLocationOutput) SetSegmentDeliveryConfigurations(v []*SegmentDeliveryConfiguration) *DescribeSourceLocationOutput { + s.SegmentDeliveryConfigurations = v + return s +} + // SetSourceLocationName sets the SourceLocationName field's value. func (s *DescribeSourceLocationOutput) SetSourceLocationName(v string) *DescribeSourceLocationOutput { s.SourceLocationName = &v @@ -9283,6 +9309,51 @@ func (s *SecretsManagerAccessTokenConfiguration) SetSecretStringKey(v string) *S return s } +type SegmentDeliveryConfiguration struct { + _ struct{} `type:"structure"` + + // The base URL of the host or path of the segment delivery server that you're + // using to serve segments. This is typically a content delivery network (CDN). + // The URL can be absolute or relative. To use an absolute URL include the protocol, + // such as https://example.com/some/path. To use a relative URL specify the + // relative path, such as /some/path. + BaseUrl *string `type:"string"` + + // A unique identifier used to distinguish between multiple segment delivery + // configurations in a source location. + Name *string `type:"string"` +} + +// String returns the string representation. +// +// API parameter values that are decorated as "sensitive" in the API will not +// be included in the string output. The member name will be present, but the +// value will be replaced with "sensitive". +func (s SegmentDeliveryConfiguration) String() string { + return awsutil.Prettify(s) +} + +// GoString returns the string representation. +// +// API parameter values that are decorated as "sensitive" in the API will not +// be included in the string output. The member name will be present, but the +// value will be replaced with "sensitive". +func (s SegmentDeliveryConfiguration) GoString() string { + return s.String() +} + +// SetBaseUrl sets the BaseUrl field's value. +func (s *SegmentDeliveryConfiguration) SetBaseUrl(v string) *SegmentDeliveryConfiguration { + s.BaseUrl = &v + return s +} + +// SetName sets the Name field's value. +func (s *SegmentDeliveryConfiguration) SetName(v string) *SegmentDeliveryConfiguration { + s.Name = &v + return s +} + // Slate VOD source configuration. type SlateSource struct { _ struct{} `type:"structure"` @@ -9351,6 +9422,9 @@ type SourceLocation struct { // The timestamp that indicates when the source location was last modified. LastModifiedTime *time.Time `type:"timestamp" timestampFormat:"unixTimestamp"` + // An array of segment delivery configurations for this source location. + SegmentDeliveryConfigurations []*SegmentDeliveryConfiguration `type:"list"` + // The name of the source location. // // SourceLocationName is a required field @@ -9414,6 +9488,12 @@ func (s *SourceLocation) SetLastModifiedTime(v time.Time) *SourceLocation { return s } +// SetSegmentDeliveryConfigurations sets the SegmentDeliveryConfigurations field's value. +func (s *SourceLocation) SetSegmentDeliveryConfigurations(v []*SegmentDeliveryConfiguration) *SourceLocation { + s.SegmentDeliveryConfigurations = v + return s +} + // SetSourceLocationName sets the SourceLocationName field's value. func (s *SourceLocation) SetSourceLocationName(v string) *SourceLocation { s.SourceLocationName = &v @@ -10082,6 +10162,9 @@ type UpdateSourceLocationInput struct { // HttpConfiguration is a required field HttpConfiguration *HttpConfiguration `type:"structure" required:"true"` + // An array of segment delivery configurations for this source location. + SegmentDeliveryConfigurations []*SegmentDeliveryConfiguration `type:"list"` + // SourceLocationName is a required field SourceLocationName *string `location:"uri" locationName:"sourceLocationName" type:"string" required:"true"` } @@ -10146,6 +10229,12 @@ func (s *UpdateSourceLocationInput) SetHttpConfiguration(v *HttpConfiguration) * return s } +// SetSegmentDeliveryConfigurations sets the SegmentDeliveryConfigurations field's value. +func (s *UpdateSourceLocationInput) SetSegmentDeliveryConfigurations(v []*SegmentDeliveryConfiguration) *UpdateSourceLocationInput { + s.SegmentDeliveryConfigurations = v + return s +} + // SetSourceLocationName sets the SourceLocationName field's value. func (s *UpdateSourceLocationInput) SetSourceLocationName(v string) *UpdateSourceLocationInput { s.SourceLocationName = &v @@ -10175,6 +10264,8 @@ type UpdateSourceLocationOutput struct { LastModifiedTime *time.Time `type:"timestamp" timestampFormat:"unixTimestamp"` + SegmentDeliveryConfigurations []*SegmentDeliveryConfiguration `type:"list"` + SourceLocationName *string `type:"string"` Tags map[string]*string `locationName:"tags" type:"map"` @@ -10234,6 +10325,12 @@ func (s *UpdateSourceLocationOutput) SetLastModifiedTime(v time.Time) *UpdateSou return s } +// SetSegmentDeliveryConfigurations sets the SegmentDeliveryConfigurations field's value. +func (s *UpdateSourceLocationOutput) SetSegmentDeliveryConfigurations(v []*SegmentDeliveryConfiguration) *UpdateSourceLocationOutput { + s.SegmentDeliveryConfigurations = v + return s +} + // SetSourceLocationName sets the SourceLocationName field's value. func (s *UpdateSourceLocationOutput) SetSourceLocationName(v string) *UpdateSourceLocationOutput { s.SourceLocationName = &v