Contains a sequence of one or more X.509 extensions, each of which consists of an object identifier (OID), a base64-encoded value, and the critical flag. For more information, see the Global OID reference database.
The OID value of a CustomExtension must not match the OID of a predefined extension.
Contains a sequence of one or more X.509 extensions, each of which consists of an object identifier (OID), a base64-encoded value, and the critical flag. For more information, see the Global OID reference database.
" } }, "CustomObjectIdentifier": { @@ -540,7 +540,7 @@ "base": null, "refs": { "CertificateAuthority$KeyStorageSecurityStandard": "Defines a cryptographic key management compliance standard used for handling CA keys.
Default: FIPS_140_2_LEVEL_3_OR_HIGHER
Note: Amazon Web Services Region ap-northeast-3 supports only FIPS_140_2_LEVEL_2_OR_HIGHER. You must explicitly specify this parameter and value when creating a CA in that Region. Specifying a different value (or no value) results in an InvalidArgsException with the message \"A certificate authority cannot be created in this region with the specified security standard.\"
Specifies a cryptographic key management compliance standard used for handling CA keys.
Default: FIPS_140_2_LEVEL_3_OR_HIGHER
Note: FIPS_140_2_LEVEL_3_OR_HIGHER is not supported in Region ap-northeast-3. When creating a CA in the ap-northeast-3, you must provide FIPS_140_2_LEVEL_2_OR_HIGHER as the argument for KeyStorageSecurityStandard. Failure to do this results in an InvalidArgsException with the message, \"A certificate authority cannot be created in this region with the specified security standard.\"
Specifies a cryptographic key management compliance standard used for handling CA keys.
Default: FIPS_140_2_LEVEL_3_OR_HIGHER
Note: FIPS_140_2_LEVEL_3_OR_HIGHER is not supported in the following Regions:
ap-northeast-3
ap-southeast-3
When creating a CA in these Regions, you must provide FIPS_140_2_LEVEL_2_OR_HIGHER as the argument for KeyStorageSecurityStandard. Failure to do this results in an InvalidArgsException with the message, \"A certificate authority cannot be created in this region with the specified security standard.\"
Adds a thing to a thing group.
Requires permission to access the AddThingToThingGroup action.
", "AssociateTargetsWithJob": "Associates a group with a continuous job. The following criteria must be met:
The job must have been created with the targetSelection field set to \"CONTINUOUS\".
The job status must currently be \"IN_PROGRESS\".
The total number of targets associated with a job must not exceed 100.
Requires permission to access the AssociateTargetsWithJob action.
", "AttachPolicy": "Attaches the specified policy to the specified principal (certificate or other credential).
Requires permission to access the AttachPolicy action.
", - "AttachPrincipalPolicy": "Attaches the specified policy to the specified principal (certificate or other credential).
Note: This action is deprecated. Please use AttachPolicy instead.
Requires permission to access the AttachPrincipalPolicy action.
", + "AttachPrincipalPolicy": "Attaches the specified policy to the specified principal (certificate or other credential).
Note: This action is deprecated and works as expected for backward compatibility, but we won't add enhancements. Use AttachPolicy instead.
Requires permission to access the AttachPrincipalPolicy action.
", "AttachSecurityProfile": "Associates a Device Defender security profile with a thing group or this account. Each thing group or account can have up to five security profiles associated with it.
Requires permission to access the AttachSecurityProfile action.
", "AttachThingPrincipal": "Attaches the specified principal to the specified thing. A principal can be X.509 certificates, IAM users, groups, and roles, Amazon Cognito identities or federated identities.
Requires permission to access the AttachThingPrincipal action.
", "CancelAuditMitigationActionsTask": "Cancels a mitigation action task that is in progress. If the task is not in progress, an InvalidRequestException occurs.
Requires permission to access the CancelAuditMitigationActionsTask action.
", @@ -3941,6 +3941,12 @@ "DescribeIndexResponse$indexStatus": "The index status.
" } }, + "IndexingFilter": { + "base": "Provides additional filters for specific data sources. Named shadow is the only data source that currently supports and requires a filter. To add named shadows to your fleet indexing configuration, set namedShadowIndexingMode to be ON and specify your shadow names in filter.
Provides additional filters for specific data sources. Named shadow is the only data source that currently supports and requires a filter. To add named shadows to your fleet indexing configuration, set namedShadowIndexingMode to be ON and specify your shadow names in filter.
Named shadow indexing mode. Valid values are:
ON – Your thing index contains named shadow. To enable thing named shadow indexing, namedShadowIndexingMode must not be set to OFF.
OFF - Named shadow indexing is disabled.
For more information about Shadows, see IoT Device Shadow service.
" } }, + "NamedShadowNamesFilter": { + "base": null, + "refs": { + "IndexingFilter$namedShadowNames": "The shadow names that you select to index. The default maximum number of shadow names for indexing is 10. To increase the limit, see Amazon Web Services IoT Device Management Quotas in the Amazon Web Services General Reference.
" + } + }, "NamespaceId": { "base": null, "refs": { @@ -6889,6 +6901,12 @@ "refs": { } }, + "ShadowName": { + "base": null, + "refs": { + "NamedShadowNamesFilter$member": null + } + }, "SigV4Authorization": { "base": "For more information, see Signature Version 4 signing process.
", "refs": { diff --git a/models/endpoints/endpoints.json b/models/endpoints/endpoints.json index 03e4c28a0c8..841d1b3ae1d 100644 --- a/models/endpoints/endpoints.json +++ b/models/endpoints/endpoints.json @@ -14134,6 +14134,10 @@ }, "workspaces-web" : { "endpoints" : { + "ap-northeast-1" : { }, + "ap-south-1" : { }, + "ap-southeast-1" : { }, + "ap-southeast-2" : { }, "eu-west-1" : { }, "us-east-1" : { }, "us-west-2" : { } diff --git a/service/acmpca/api.go b/service/acmpca/api.go index 3cbe0655f49..6b729374a83 100644 --- a/service/acmpca/api.go +++ b/service/acmpca/api.go @@ -3690,8 +3690,13 @@ type CreateCertificateAuthorityInput struct { // // Default: FIPS_140_2_LEVEL_3_OR_HIGHER // - // Note: FIPS_140_2_LEVEL_3_OR_HIGHER is not supported in Region ap-northeast-3. - // When creating a CA in the ap-northeast-3, you must provide FIPS_140_2_LEVEL_2_OR_HIGHER + // Note: FIPS_140_2_LEVEL_3_OR_HIGHER is not supported in the following Regions: + // + // * ap-northeast-3 + // + // * ap-southeast-3 + // + // When creating a CA in these Regions, you must provide FIPS_140_2_LEVEL_2_OR_HIGHER // as the argument for KeyStorageSecurityStandard. Failure to do this results // in an InvalidArgsException with the message, "A certificate authority cannot // be created in this region with the specified security standard." @@ -4936,9 +4941,6 @@ type Extensions struct { // Contains a sequence of one or more X.509 extensions, each of which consists // of an object identifier (OID), a base64-encoded value, and the critical flag. // For more information, see the Global OID reference database. (https://oidref.com/2.5.29) - // - // The OID value of a CustomExtension (https://docs.aws.amazon.com/acm-pca/latest/APIReference/API_CustomExtension.html) - // must not match the OID of a predefined extension. CustomExtensions []*CustomExtension `min:"1" type:"list"` // Specifies additional purposes for which the certified public key may be used diff --git a/service/iot/api.go b/service/iot/api.go index 5676aa71a2d..13a964b5b6e 100644 --- a/service/iot/api.go +++ b/service/iot/api.go @@ -543,7 +543,8 @@ func (c *IoT) AttachPrincipalPolicyRequest(input *AttachPrincipalPolicyInput) (r // Attaches the specified policy to the specified principal (certificate or // other credential). // -// Note: This action is deprecated. Please use AttachPolicy instead. +// Note: This action is deprecated and works as expected for backward compatibility, +// but we won't add enhancements. Use AttachPolicy instead. // // Requires permission to access the AttachPrincipalPolicy (https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiot.html#awsiot-actions-as-permissions) // action. @@ -46124,6 +46125,44 @@ func (s *IndexNotReadyException) RequestID() string { return s.RespMetadata.RequestID } +// Provides additional filters for specific data sources. Named shadow is the +// only data source that currently supports and requires a filter. To add named +// shadows to your fleet indexing configuration, set namedShadowIndexingMode +// to be ON and specify your shadow names in filter. +type IndexingFilter struct { + _ struct{} `type:"structure"` + + // The shadow names that you select to index. The default maximum number of + // shadow names for indexing is 10. To increase the limit, see Amazon Web Services + // IoT Device Management Quotas (https://docs.aws.amazon.com/general/latest/gr/iot_device_management.html#fleet-indexing-limits) + // in the Amazon Web Services General Reference. + NamedShadowNames []*string `locationName:"namedShadowNames" type:"list"` +} + +// String returns the string representation. +// +// API parameter values that are decorated as "sensitive" in the API will not +// be included in the string output. The member name will be present, but the +// value will be replaced with "sensitive". +func (s IndexingFilter) String() string { + return awsutil.Prettify(s) +} + +// GoString returns the string representation. +// +// API parameter values that are decorated as "sensitive" in the API will not +// be included in the string output. The member name will be present, but the +// value will be replaced with "sensitive". +func (s IndexingFilter) GoString() string { + return s.String() +} + +// SetNamedShadowNames sets the NamedShadowNames field's value. +func (s *IndexingFilter) SetNamedShadowNames(v []*string) *IndexingFilter { + s.NamedShadowNames = v + return s +} + // An unexpected error has occurred. type InternalException struct { _ struct{} `type:"structure"` @@ -62516,6 +62555,12 @@ type ThingIndexingConfiguration struct { // Detect. (https://docs.aws.amazon.com/iot/latest/developerguide/device-defender-detect.html) DeviceDefenderIndexingMode *string `locationName:"deviceDefenderIndexingMode" type:"string" enum:"DeviceDefenderIndexingMode"` + // Provides additional filters for specific data sources. Named shadow is the + // only data source that currently supports and requires a filter. To add named + // shadows to your fleet indexing configuration, set namedShadowIndexingMode + // to be ON and specify your shadow names in filter. + Filter *IndexingFilter `locationName:"filter" type:"structure"` + // Contains fields that are indexed and whose types are already known by the // Fleet Indexing service. ManagedFields []*Field `locationName:"managedFields" type:"list"` @@ -62594,6 +62639,12 @@ func (s *ThingIndexingConfiguration) SetDeviceDefenderIndexingMode(v string) *Th return s } +// SetFilter sets the Filter field's value. +func (s *ThingIndexingConfiguration) SetFilter(v *IndexingFilter) *ThingIndexingConfiguration { + s.Filter = v + return s +} + // SetManagedFields sets the ManagedFields field's value. func (s *ThingIndexingConfiguration) SetManagedFields(v []*Field) *ThingIndexingConfiguration { s.ManagedFields = v