diff --git a/.changes/2.1643.0.json b/.changes/2.1643.0.json new file mode 100644 index 0000000000..a486ce9fe6 --- /dev/null +++ b/.changes/2.1643.0.json @@ -0,0 +1,42 @@ +[ + { + "type": "feature", + "category": "Batch", + "description": "Add v2 smoke tests and smithy smokeTests trait for SDK testing." + }, + { + "type": "feature", + "category": "CodeBuild", + "description": "AWS CodeBuild now supports global and organization GitHub webhooks" + }, + { + "type": "feature", + "category": "CognitoIdentityServiceProvider", + "description": "Add v2 smoke tests and smithy smokeTests trait for SDK testing." + }, + { + "type": "feature", + "category": "DirectoryService", + "description": "Add v2 smoke tests and smithy smokeTests trait for SDK testing." + }, + { + "type": "feature", + "category": "EFS", + "description": "Add v2 smoke tests and smithy smokeTests trait for SDK testing." + }, + { + "type": "feature", + "category": "Glue", + "description": "This release introduces a new feature, Usage profiles. Usage profiles allow the AWS Glue admin to create different profiles for various classes of users within the account, enforcing limits and defaults for jobs and sessions." + }, + { + "type": "feature", + "category": "MediaConvert", + "description": "This release includes support for creating I-frame only video segments for DASH trick play." + }, + { + "type": "feature", + "category": "WAF", + "description": "Add v2 smoke tests and smithy smokeTests trait for SDK testing." + } +] \ No newline at end of file diff --git a/CHANGELOG.md b/CHANGELOG.md index 75adc6ac2d..3c5d6d0d58 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,7 +1,17 @@ # Changelog for AWS SDK for JavaScript - + +## 2.1643.0 +* feature: Batch: Add v2 smoke tests and smithy smokeTests trait for SDK testing. +* feature: CodeBuild: AWS CodeBuild now supports global and organization GitHub webhooks +* feature: CognitoIdentityServiceProvider: Add v2 smoke tests and smithy smokeTests trait for SDK testing. +* feature: DirectoryService: Add v2 smoke tests and smithy smokeTests trait for SDK testing. +* feature: EFS: Add v2 smoke tests and smithy smokeTests trait for SDK testing. +* feature: Glue: This release introduces a new feature, Usage profiles. Usage profiles allow the AWS Glue admin to create different profiles for various classes of users within the account, enforcing limits and defaults for jobs and sessions. +* feature: MediaConvert: This release includes support for creating I-frame only video segments for DASH trick play. +* feature: WAF: Add v2 smoke tests and smithy smokeTests trait for SDK testing. + ## 2.1642.0 * feature: DataZone: This release introduces a new default service blueprint for custom environment creation. * feature: Macie2: This release adds support for managing the status of automated sensitive data discovery for individual accounts in an organization, and determining whether individual S3 buckets are included in the scope of the analyses. diff --git a/README.md b/README.md index 1ea7085aca..2404bf307e 100644 --- a/README.md +++ b/README.md @@ -64,7 +64,7 @@ require('aws-sdk/lib/maintenance_mode_message').suppress = true; To use the SDK in the browser, simply add the following script tag to your HTML pages: - + You can also build a custom browser SDK with your specified set of AWS services. This can allow you to reduce the SDK's size, specify different API versions of diff --git a/apis/acm-pca-2017-08-22.min.json b/apis/acm-pca-2017-08-22.min.json index 4e08036e49..a94fdedcbd 100644 --- a/apis/acm-pca-2017-08-22.min.json +++ b/apis/acm-pca-2017-08-22.min.json @@ -13,7 +13,10 @@ "serviceId": "ACM PCA", "signatureVersion": "v4", "targetPrefix": "ACMPrivateCA", - "uid": "acm-pca-2017-08-22" + "uid": "acm-pca-2017-08-22", + "auth": [ + "aws.auth#sigv4" + ] }, "operations": { "CreateCertificateAuthority": { diff --git a/apis/acm-pca-2017-08-22.normal.json b/apis/acm-pca-2017-08-22.normal.json index 8bfe466a3e..b5dc327d79 100644 --- a/apis/acm-pca-2017-08-22.normal.json +++ b/apis/acm-pca-2017-08-22.normal.json @@ -13,7 +13,10 @@ "serviceId": "ACM PCA", "signatureVersion": "v4", "targetPrefix": "ACMPrivateCA", - "uid": "acm-pca-2017-08-22" + "uid": "acm-pca-2017-08-22", + "auth": [ + "aws.auth#sigv4" + ] }, "operations": { "CreateCertificateAuthority": { @@ -42,7 +45,7 @@ "shape": "LimitExceededException" } ], - "documentation": "
Creates a root or subordinate private certificate authority (CA). You must specify the CA configuration, an optional configuration for Online Certificate Status Protocol (OCSP) and/or a certificate revocation list (CRL), the CA type, and an optional idempotency token to avoid accidental creation of multiple CAs. The CA configuration specifies the name of the algorithm and key size to be used to create the CA private key, the type of signing algorithm that the CA uses, and X.500 subject information. The OCSP configuration can optionally specify a custom URL for the OCSP responder. The CRL configuration specifies the CRL expiration period in days (the validity period of the CRL), the Amazon S3 bucket that will contain the CRL, and a CNAME alias for the S3 bucket that is included in certificates issued by the CA. If successful, this action returns the Amazon Resource Name (ARN) of the CA.
Both Amazon Web Services Private CA and the IAM principal must have permission to write to the S3 bucket that you specify. If the IAM principal making the call does not have permission to write to the bucket, then an exception is thrown. For more information, see Access policies for CRLs in Amazon S3.
Amazon Web Services Private CA assets that are stored in Amazon S3 can be protected with encryption. For more information, see Encrypting Your CRLs.
", + "documentation": "Creates a root or subordinate private certificate authority (CA). You must specify the CA configuration, an optional configuration for Online Certificate Status Protocol (OCSP) and/or a certificate revocation list (CRL), the CA type, and an optional idempotency token to avoid accidental creation of multiple CAs. The CA configuration specifies the name of the algorithm and key size to be used to create the CA private key, the type of signing algorithm that the CA uses, and X.500 subject information. The OCSP configuration can optionally specify a custom URL for the OCSP responder. The CRL configuration specifies the CRL expiration period in days (the validity period of the CRL), the Amazon S3 bucket that will contain the CRL, and a CNAME alias for the S3 bucket that is included in certificates issued by the CA. If successful, this action returns the Amazon Resource Name (ARN) of the CA.
Both Amazon Web Services Private CA and the IAM principal must have permission to write to the S3 bucket that you specify. If the IAM principal making the call does not have permission to write to the bucket, then an exception is thrown. For more information, see Access policies for CRLs in Amazon S3.
Amazon Web Services Private CA assets that are stored in Amazon S3 can be protected with encryption. For more information, see Encrypting Your CRLs.
", "idempotent": true }, "CreateCertificateAuthorityAuditReport": { @@ -392,7 +395,7 @@ "shape": "CertificateMismatchException" } ], - "documentation": "Imports a signed private CA certificate into Amazon Web Services Private CA. This action is used when you are using a chain of trust whose root is located outside Amazon Web Services Private CA. Before you can call this action, the following preparations must in place:
In Amazon Web Services Private CA, call the CreateCertificateAuthority action to create the private CA that you plan to back with the imported certificate.
Call the GetCertificateAuthorityCsr action to generate a certificate signing request (CSR).
Sign the CSR using a root or intermediate CA hosted by either an on-premises PKI hierarchy or by a commercial CA.
Create a certificate chain and copy the signed certificate and the certificate chain to your working directory.
Amazon Web Services Private CA supports three scenarios for installing a CA certificate:
Installing a certificate for a root CA hosted by Amazon Web Services Private CA.
Installing a subordinate CA certificate whose parent authority is hosted by Amazon Web Services Private CA.
Installing a subordinate CA certificate whose parent authority is externally hosted.
The following additional requirements apply when you import a CA certificate.
Only a self-signed certificate can be imported as a root CA.
A self-signed certificate cannot be imported as a subordinate CA.
Your certificate chain must not include the private CA certificate that you are importing.
Your root CA must be the last certificate in your chain. The subordinate certificate, if any, that your root CA signed must be next to last. The subordinate certificate signed by the preceding subordinate CA must come next, and so on until your chain is built.
The chain must be PEM-encoded.
The maximum allowed size of a certificate is 32 KB.
The maximum allowed size of a certificate chain is 2 MB.
Enforcement of Critical Constraints
Amazon Web Services Private CA allows the following extensions to be marked critical in the imported CA certificate or chain.
Basic constraints (must be marked critical)
Subject alternative names
Key usage
Extended key usage
Authority key identifier
Subject key identifier
Issuer alternative name
Subject directory attributes
Subject information access
Certificate policies
Policy mappings
Inhibit anyPolicy
Amazon Web Services Private CA rejects the following extensions when they are marked critical in an imported CA certificate or chain.
Name constraints
Policy constraints
CRL distribution points
Authority information access
Freshest CRL
Any other extension
Imports a signed private CA certificate into Amazon Web Services Private CA. This action is used when you are using a chain of trust whose root is located outside Amazon Web Services Private CA. Before you can call this action, the following preparations must in place:
In Amazon Web Services Private CA, call the CreateCertificateAuthority action to create the private CA that you plan to back with the imported certificate.
Call the GetCertificateAuthorityCsr action to generate a certificate signing request (CSR).
Sign the CSR using a root or intermediate CA hosted by either an on-premises PKI hierarchy or by a commercial CA.
Create a certificate chain and copy the signed certificate and the certificate chain to your working directory.
Amazon Web Services Private CA supports three scenarios for installing a CA certificate:
Installing a certificate for a root CA hosted by Amazon Web Services Private CA.
Installing a subordinate CA certificate whose parent authority is hosted by Amazon Web Services Private CA.
Installing a subordinate CA certificate whose parent authority is externally hosted.
The following additional requirements apply when you import a CA certificate.
Only a self-signed certificate can be imported as a root CA.
A self-signed certificate cannot be imported as a subordinate CA.
Your certificate chain must not include the private CA certificate that you are importing.
Your root CA must be the last certificate in your chain. The subordinate certificate, if any, that your root CA signed must be next to last. The subordinate certificate signed by the preceding subordinate CA must come next, and so on until your chain is built.
The chain must be PEM-encoded.
The maximum allowed size of a certificate is 32 KB.
The maximum allowed size of a certificate chain is 2 MB.
Enforcement of Critical Constraints
Amazon Web Services Private CA allows the following extensions to be marked critical in the imported CA certificate or chain.
Authority key identifier
Basic constraints (must be marked critical)
Certificate policies
Extended key usage
Inhibit anyPolicy
Issuer alternative name
Key usage
Name constraints
Policy mappings
Subject alternative name
Subject directory attributes
Subject key identifier
Subject information access
Amazon Web Services Private CA rejects the following extensions when they are marked critical in an imported CA certificate or chain.
Authority information access
CRL distribution points
Freshest CRL
Policy constraints
Amazon Web Services Private Certificate Authority will also reject any other extension marked as critical not contained on the preceding list of allowed extensions.
" }, "IssueCertificate": { "name": "IssueCertificate", @@ -1183,7 +1186,7 @@ "documentation": "Configures the behavior of the CRL Distribution Point extension for certificates issued by your certificate authority. If this field is not provided, then the CRl Distribution Point Extension will be present and contain the default CRL URL.
" } }, - "documentation": "Contains configuration information for a certificate revocation list (CRL). Your private certificate authority (CA) creates base CRLs. Delta CRLs are not supported. You can enable CRLs for your new or an existing private CA by setting the Enabled parameter to true
. Your private CA writes CRLs to an S3 bucket that you specify in the S3BucketName parameter. You can hide the name of your bucket by specifying a value for the CustomCname parameter. Your private CA by default copies the CNAME or the S3 bucket name to the CRL Distribution Points extension of each certificate it issues. If you want to configure this default behavior to be something different, you can set the CrlDistributionPointExtensionConfiguration parameter. Your S3 bucket policy must give write permission to Amazon Web Services Private CA.
Amazon Web Services Private CA assets that are stored in Amazon S3 can be protected with encryption. For more information, see Encrypting Your CRLs.
Your private CA uses the value in the ExpirationInDays parameter to calculate the nextUpdate field in the CRL. The CRL is refreshed prior to a certificate's expiration date or when a certificate is revoked. When a certificate is revoked, it appears in the CRL until the certificate expires, and then in one additional CRL after expiration, and it always appears in the audit report.
A CRL is typically updated approximately 30 minutes after a certificate is revoked. If for any reason a CRL update fails, Amazon Web Services Private CA makes further attempts every 15 minutes.
CRLs contain the following fields:
Version: The current version number defined in RFC 5280 is V2. The integer value is 0x1.
Signature Algorithm: The name of the algorithm used to sign the CRL.
Issuer: The X.500 distinguished name of your private CA that issued the CRL.
Last Update: The issue date and time of this CRL.
Next Update: The day and time by which the next CRL will be issued.
Revoked Certificates: List of revoked certificates. Each list item contains the following information.
Serial Number: The serial number, in hexadecimal format, of the revoked certificate.
Revocation Date: Date and time the certificate was revoked.
CRL Entry Extensions: Optional extensions for the CRL entry.
X509v3 CRL Reason Code: Reason the certificate was revoked.
CRL Extensions: Optional extensions for the CRL.
X509v3 Authority Key Identifier: Identifies the public key associated with the private key used to sign the certificate.
X509v3 CRL Number:: Decimal sequence number for the CRL.
Signature Algorithm: Algorithm used by your private CA to sign the CRL.
Signature Value: Signature computed over the CRL.
Certificate revocation lists created by Amazon Web Services Private CA are DER-encoded. You can use the following OpenSSL command to list a CRL.
openssl crl -inform DER -text -in crl_path -noout
For more information, see Planning a certificate revocation list (CRL) in the Amazon Web Services Private Certificate Authority User Guide
" + "documentation": "Contains configuration information for a certificate revocation list (CRL). Your private certificate authority (CA) creates base CRLs. Delta CRLs are not supported. You can enable CRLs for your new or an existing private CA by setting the Enabled parameter to true
. Your private CA writes CRLs to an S3 bucket that you specify in the S3BucketName parameter. You can hide the name of your bucket by specifying a value for the CustomCname parameter. Your private CA by default copies the CNAME or the S3 bucket name to the CRL Distribution Points extension of each certificate it issues. If you want to configure this default behavior to be something different, you can set the CrlDistributionPointExtensionConfiguration parameter. Your S3 bucket policy must give write permission to Amazon Web Services Private CA.
Amazon Web Services Private CA assets that are stored in Amazon S3 can be protected with encryption. For more information, see Encrypting Your CRLs.
Your private CA uses the value in the ExpirationInDays parameter to calculate the nextUpdate field in the CRL. The CRL is refreshed prior to a certificate's expiration date or when a certificate is revoked. When a certificate is revoked, it appears in the CRL until the certificate expires, and then in one additional CRL after expiration, and it always appears in the audit report.
A CRL is typically updated approximately 30 minutes after a certificate is revoked. If for any reason a CRL update fails, Amazon Web Services Private CA makes further attempts every 15 minutes.
CRLs contain the following fields:
Version: The current version number defined in RFC 5280 is V2. The integer value is 0x1.
Signature Algorithm: The name of the algorithm used to sign the CRL.
Issuer: The X.500 distinguished name of your private CA that issued the CRL.
Last Update: The issue date and time of this CRL.
Next Update: The day and time by which the next CRL will be issued.
Revoked Certificates: List of revoked certificates. Each list item contains the following information.
Serial Number: The serial number, in hexadecimal format, of the revoked certificate.
Revocation Date: Date and time the certificate was revoked.
CRL Entry Extensions: Optional extensions for the CRL entry.
X509v3 CRL Reason Code: Reason the certificate was revoked.
CRL Extensions: Optional extensions for the CRL.
X509v3 Authority Key Identifier: Identifies the public key associated with the private key used to sign the certificate.
X509v3 CRL Number:: Decimal sequence number for the CRL.
Signature Algorithm: Algorithm used by your private CA to sign the CRL.
Signature Value: Signature computed over the CRL.
Certificate revocation lists created by Amazon Web Services Private CA are DER-encoded. You can use the following OpenSSL command to list a CRL.
openssl crl -inform DER -text -in crl_path -noout
For more information, see Planning a certificate revocation list (CRL) in the Amazon Web Services Private Certificate Authority User Guide
" }, "CrlDistributionPointExtensionConfiguration": { "type": "structure", diff --git a/apis/batch-2016-08-10.min.json b/apis/batch-2016-08-10.min.json index 01d4d56d7d..95237b45fd 100644 --- a/apis/batch-2016-08-10.min.json +++ b/apis/batch-2016-08-10.min.json @@ -12,7 +12,10 @@ "serviceFullName": "AWS Batch", "serviceId": "Batch", "signatureVersion": "v4", - "uid": "batch-2016-08-10" + "uid": "batch-2016-08-10", + "auth": [ + "aws.auth#sigv4" + ] }, "operations": { "CancelJob": { diff --git a/apis/batch-2016-08-10.normal.json b/apis/batch-2016-08-10.normal.json index 62ddb750d3..0c9d6c630e 100644 --- a/apis/batch-2016-08-10.normal.json +++ b/apis/batch-2016-08-10.normal.json @@ -12,7 +12,10 @@ "serviceFullName": "AWS Batch", "serviceId": "Batch", "signatureVersion": "v4", - "uid": "batch-2016-08-10" + "uid": "batch-2016-08-10", + "auth": [ + "aws.auth#sigv4" + ] }, "operations": { "CancelJob": { diff --git a/apis/codebuild-2016-10-06.min.json b/apis/codebuild-2016-10-06.min.json index 8fe06ed653..d9378f5d45 100644 --- a/apis/codebuild-2016-10-06.min.json +++ b/apis/codebuild-2016-10-06.min.json @@ -12,7 +12,10 @@ "serviceId": "CodeBuild", "signatureVersion": "v4", "targetPrefix": "CodeBuild_20161006", - "uid": "codebuild-2016-10-06" + "uid": "codebuild-2016-10-06", + "auth": [ + "aws.auth#sigv4" + ] }, "operations": { "BatchDeleteBuilds": { @@ -155,7 +158,7 @@ ], "members": { "reportGroupArns": { - "shape": "S3l" + "shape": "S3n" } } }, @@ -165,11 +168,11 @@ "reportGroups": { "type": "list", "member": { - "shape": "S3o" + "shape": "S3q" } }, "reportGroupsNotFound": { - "shape": "S3l" + "shape": "S3n" } } } @@ -182,7 +185,7 @@ ], "members": { "reportArns": { - "shape": "S3x" + "shape": "S3z" } } }, @@ -207,7 +210,7 @@ "type": "timestamp" }, "exportConfig": { - "shape": "S3r" + "shape": "S3t" }, "truncated": { "type": "boolean" @@ -262,7 +265,7 @@ } }, "reportsNotFound": { - "shape": "S3x" + "shape": "S3z" } } } @@ -284,7 +287,7 @@ "environmentType": {}, "computeType": {}, "scalingConfiguration": { - "shape": "S48" + "shape": "S4a" }, "overflowBehavior": {}, "vpcConfig": { @@ -392,7 +395,7 @@ "name": {}, "type": {}, "exportConfig": { - "shape": "S3r" + "shape": "S3t" }, "tags": { "shape": "S2v" @@ -403,7 +406,7 @@ "type": "structure", "members": { "reportGroup": { - "shape": "S3o" + "shape": "S3q" } } } @@ -423,6 +426,9 @@ "buildType": {}, "manualCreation": { "type": "boolean" + }, + "scopeConfiguration": { + "shape": "S3i" } } }, @@ -781,7 +787,7 @@ "type": "structure", "members": { "filter": { - "shape": "S5o" + "shape": "S5q" }, "maxResults": { "type": "integer" @@ -806,7 +812,7 @@ "members": { "projectName": {}, "filter": { - "shape": "S5o" + "shape": "S5q" }, "maxResults": { "type": "integer" @@ -970,7 +976,7 @@ "members": { "nextToken": {}, "reportGroups": { - "shape": "S3l" + "shape": "S3n" } } } @@ -985,7 +991,7 @@ "type": "integer" }, "filter": { - "shape": "S6j" + "shape": "S6l" } } }, @@ -994,7 +1000,7 @@ "members": { "nextToken": {}, "reports": { - "shape": "S3x" + "shape": "S3z" } } } @@ -1013,7 +1019,7 @@ "type": "integer" }, "filter": { - "shape": "S6j" + "shape": "S6l" } } }, @@ -1022,7 +1028,7 @@ "members": { "nextToken": {}, "reports": { - "shape": "S3x" + "shape": "S3z" } } } @@ -1067,7 +1073,7 @@ "members": { "nextToken": {}, "reportGroups": { - "shape": "S3l" + "shape": "S3n" } } } @@ -1374,7 +1380,7 @@ "environmentType": {}, "computeType": {}, "scalingConfiguration": { - "shape": "S48" + "shape": "S4a" }, "overflowBehavior": {}, "vpcConfig": { @@ -1497,7 +1503,7 @@ "members": { "arn": {}, "exportConfig": { - "shape": "S3r" + "shape": "S3t" }, "tags": { "shape": "S2v" @@ -1508,7 +1514,7 @@ "type": "structure", "members": { "reportGroup": { - "shape": "S3o" + "shape": "S3q" } } } @@ -2305,6 +2311,9 @@ }, "lastModifiedSecret": { "type": "timestamp" + }, + "scopeConfiguration": { + "shape": "S3i" } } }, @@ -2328,18 +2337,30 @@ } } }, - "S3l": { + "S3i": { + "type": "structure", + "required": [ + "name", + "scope" + ], + "members": { + "name": {}, + "domain": {}, + "scope": {} + } + }, + "S3n": { "type": "list", "member": {} }, - "S3o": { + "S3q": { "type": "structure", "members": { "arn": {}, "name": {}, "type": {}, "exportConfig": { - "shape": "S3r" + "shape": "S3t" }, "created": { "type": "timestamp" @@ -2353,7 +2374,7 @@ "status": {} } }, - "S3r": { + "S3t": { "type": "structure", "members": { "exportConfigType": {}, @@ -2372,11 +2393,11 @@ } } }, - "S3x": { + "S3z": { "type": "list", "member": {} }, - "S48": { + "S4a": { "type": "structure", "members": { "scalingType": {}, @@ -2388,13 +2409,13 @@ } } }, - "S5o": { + "S5q": { "type": "structure", "members": { "status": {} } }, - "S6j": { + "S6l": { "type": "structure", "members": { "status": {} diff --git a/apis/codebuild-2016-10-06.normal.json b/apis/codebuild-2016-10-06.normal.json index 20ba3af96a..634a32e0d9 100644 --- a/apis/codebuild-2016-10-06.normal.json +++ b/apis/codebuild-2016-10-06.normal.json @@ -12,7 +12,10 @@ "serviceId": "CodeBuild", "signatureVersion": "v4", "targetPrefix": "CodeBuild_20161006", - "uid": "codebuild-2016-10-06" + "uid": "codebuild-2016-10-06", + "auth": [ + "aws.auth#sigv4" + ] }, "operations": { "BatchDeleteBuilds": { @@ -2216,6 +2219,10 @@ "manualCreation": { "shape": "WrapperBoolean", "documentation": "If manualCreation is true, CodeBuild doesn't create a webhook in GitHub and instead returns payloadUrl
and secret
values for the webhook. The payloadUrl
and secret
values in the output can be used to manually create a webhook within GitHub.
manualCreation
is only available for GitHub webhooks.
The scope configuration for global or organization webhooks.
Global or organization webhooks are only available for GitHub and Github Enterprise webhooks.
The scaling configuration output of a compute fleet.
" }, + "ScopeConfiguration": { + "type": "structure", + "required": [ + "name", + "scope" + ], + "members": { + "name": { + "shape": "String", + "documentation": "The name of either the enterprise or organization that will send webhook events to CodeBuild, depending on if the webhook is a global or organization webhook respectively.
" + }, + "domain": { + "shape": "String", + "documentation": "The domain of the GitHub Enterprise organization. Note that this parameter is only required if your project's source type is GITHUB_ENTERPRISE
" + }, + "scope": { + "shape": "WebhookScopeType", + "documentation": "The type of scope for a GitHub webhook.
" + } + }, + "documentation": "Contains configuration information about the scope for a webhook.
" + }, "SecurityGroupIds": { "type": "list", "member": { @@ -5320,6 +5349,10 @@ "lastModifiedSecret": { "shape": "Timestamp", "documentation": "A timestamp that indicates the last time a repository's secret token was modified.
" + }, + "scopeConfiguration": { + "shape": "ScopeConfiguration", + "documentation": "The scope configuration for global or organization webhooks.
Global or organization webhooks are only available for GitHub and Github Enterprise webhooks.
Information about a webhook that connects repository events to a build project in CodeBuild.
" @@ -5340,7 +5373,7 @@ "members": { "type": { "shape": "WebhookFilterType", - "documentation": " The type of webhook filter. There are nine webhook filter types: EVENT
, ACTOR_ACCOUNT_ID
, HEAD_REF
, BASE_REF
, FILE_PATH
, COMMIT_MESSAGE
, TAG_NAME
, RELEASE_NAME
, and WORKFLOW_NAME
.
EVENT
A webhook event triggers a build when the provided pattern
matches one of nine event types: PUSH
, PULL_REQUEST_CREATED
, PULL_REQUEST_UPDATED
, PULL_REQUEST_CLOSED
, PULL_REQUEST_REOPENED
, PULL_REQUEST_MERGED
, RELEASED
, PRERELEASED
, and WORKFLOW_JOB_QUEUED
. The EVENT
patterns are specified as a comma-separated string. For example, PUSH, PULL_REQUEST_CREATED, PULL_REQUEST_UPDATED
filters all push, pull request created, and pull request updated events.
Types PULL_REQUEST_REOPENED
and WORKFLOW_JOB_QUEUED
work with GitHub and GitHub Enterprise only. Types RELEASED
and PRERELEASED
work with GitHub only.
ACTOR_ACCOUNT_ID
A webhook event triggers a build when a GitHub, GitHub Enterprise, or Bitbucket account ID matches the regular expression pattern
.
HEAD_REF
A webhook event triggers a build when the head reference matches the regular expression pattern
. For example, refs/heads/branch-name
and refs/tags/tag-name
.
Works with GitHub and GitHub Enterprise push, GitHub and GitHub Enterprise pull request, Bitbucket push, and Bitbucket pull request events.
BASE_REF
A webhook event triggers a build when the base reference matches the regular expression pattern
. For example, refs/heads/branch-name
.
Works with pull request events only.
FILE_PATH
A webhook triggers a build when the path of a changed file matches the regular expression pattern
.
Works with GitHub and Bitbucket events push and pull requests events. Also works with GitHub Enterprise push events, but does not work with GitHub Enterprise pull request events.
COMMIT_MESSAGE
A webhook triggers a build when the head commit message matches the regular expression pattern
.
Works with GitHub and Bitbucket events push and pull requests events. Also works with GitHub Enterprise push events, but does not work with GitHub Enterprise pull request events.
TAG_NAME
A webhook triggers a build when the tag name of the release matches the regular expression pattern
.
Works with RELEASED
and PRERELEASED
events only.
RELEASE_NAME
A webhook triggers a build when the release name matches the regular expression pattern
.
Works with RELEASED
and PRERELEASED
events only.
WORKFLOW_NAME
A webhook triggers a build when the workflow name matches the regular expression pattern
.
Works with WORKFLOW_JOB_QUEUED
events only.
The type of webhook filter. There are nine webhook filter types: EVENT
, ACTOR_ACCOUNT_ID
, HEAD_REF
, BASE_REF
, FILE_PATH
, COMMIT_MESSAGE
, TAG_NAME
, RELEASE_NAME
, and WORKFLOW_NAME
.
EVENT
A webhook event triggers a build when the provided pattern
matches one of nine event types: PUSH
, PULL_REQUEST_CREATED
, PULL_REQUEST_UPDATED
, PULL_REQUEST_CLOSED
, PULL_REQUEST_REOPENED
, PULL_REQUEST_MERGED
, RELEASED
, PRERELEASED
, and WORKFLOW_JOB_QUEUED
. The EVENT
patterns are specified as a comma-separated string. For example, PUSH, PULL_REQUEST_CREATED, PULL_REQUEST_UPDATED
filters all push, pull request created, and pull request updated events.
Types PULL_REQUEST_REOPENED
and WORKFLOW_JOB_QUEUED
work with GitHub and GitHub Enterprise only. Types RELEASED
and PRERELEASED
work with GitHub only.
ACTOR_ACCOUNT_ID
A webhook event triggers a build when a GitHub, GitHub Enterprise, or Bitbucket account ID matches the regular expression pattern
.
HEAD_REF
A webhook event triggers a build when the head reference matches the regular expression pattern
. For example, refs/heads/branch-name
and refs/tags/tag-name
.
Works with GitHub and GitHub Enterprise push, GitHub and GitHub Enterprise pull request, Bitbucket push, and Bitbucket pull request events.
BASE_REF
A webhook event triggers a build when the base reference matches the regular expression pattern
. For example, refs/heads/branch-name
.
Works with pull request events only.
FILE_PATH
A webhook triggers a build when the path of a changed file matches the regular expression pattern
.
Works with GitHub and Bitbucket events push and pull requests events. Also works with GitHub Enterprise push events, but does not work with GitHub Enterprise pull request events.
COMMIT_MESSAGE
A webhook triggers a build when the head commit message matches the regular expression pattern
.
Works with GitHub and Bitbucket events push and pull requests events. Also works with GitHub Enterprise push events, but does not work with GitHub Enterprise pull request events.
TAG_NAME
A webhook triggers a build when the tag name of the release matches the regular expression pattern
.
Works with RELEASED
and PRERELEASED
events only.
RELEASE_NAME
A webhook triggers a build when the release name matches the regular expression pattern
.
Works with RELEASED
and PRERELEASED
events only.
REPOSITORY_NAME
A webhook triggers a build when the repository name matches the regular expression pattern.
Works with GitHub global or organization webhooks only.
WORKFLOW_NAME
A webhook triggers a build when the workflow name matches the regular expression pattern
.
Works with WORKFLOW_JOB_QUEUED
events only.
Begins setup of time-based one-time password (TOTP) multi-factor authentication (MFA) for a user, with a unique private key that Amazon Cognito generates and returns in the API response. You can authorize an AssociateSoftwareToken
request with either the user's access token, or a session string from a challenge response that you received from Amazon Cognito.
Amazon Cognito disassociates an existing software token when you verify the new token in a VerifySoftwareToken API request. If you don't verify the software token and your user pool doesn't require MFA, the user can then authenticate with user name and password credentials alone. If your user pool requires TOTP MFA, Amazon Cognito generates an MFA_SETUP
or SOFTWARE_TOKEN_SETUP
challenge each time your user signs. Complete setup with AssociateSoftwareToken
and VerifySoftwareToken
.
After you set up software token MFA for your user, Amazon Cognito generates a SOFTWARE_TOKEN_MFA
challenge when they authenticate. Respond to this challenge with your user's TOTP.
Amazon Cognito doesn't evaluate Identity and Access Management (IAM) policies in requests for this API operation. For this operation, you can't use IAM credentials to authorize requests, and you can't grant IAM permissions in policies. For more information about authorization models in Amazon Cognito, see Using the Amazon Cognito user pools API and user pool endpoints.
Changes the password for a specified user in a user pool.
Authorize this action with a signed-in user's access token. It must include the scope aws.cognito.signin.user.admin
.
Amazon Cognito doesn't evaluate Identity and Access Management (IAM) policies in requests for this API operation. For this operation, you can't use IAM credentials to authorize requests, and you can't grant IAM permissions in policies. For more information about authorization models in Amazon Cognito, see Using the Amazon Cognito user pools API and user pool endpoints.
Confirms tracking of the device. This API call is the call that begins device tracking. For more information about device authentication, see Working with user devices in your user pool.
Authorize this action with a signed-in user's access token. It must include the scope aws.cognito.signin.user.admin
.
Amazon Cognito doesn't evaluate Identity and Access Management (IAM) policies in requests for this API operation. For this operation, you can't use IAM credentials to authorize requests, and you can't grant IAM permissions in policies. For more information about authorization models in Amazon Cognito, see Using the Amazon Cognito user pools API and user pool endpoints.
Allows a user to enter a confirmation code to reset a forgotten password.
Amazon Cognito doesn't evaluate Identity and Access Management (IAM) policies in requests for this API operation. For this operation, you can't use IAM credentials to authorize requests, and you can't grant IAM permissions in policies. For more information about authorization models in Amazon Cognito, see Using the Amazon Cognito user pools API and user pool endpoints.
This public API operation provides a code that Amazon Cognito sent to your user when they signed up in your user pool via the SignUp API operation. After your user enters their code, they confirm ownership of the email address or phone number that they provided, and their user account becomes active. Depending on your user pool configuration, your users will receive their confirmation code in an email or SMS message.
Local users who signed up in your user pool are the only type of user who can confirm sign-up with a code. Users who federate through an external identity provider (IdP) have already been confirmed by their IdP. Administrator-created users, users created with the AdminCreateUser API operation, confirm their accounts when they respond to their invitation email message and choose a password. They do not receive a confirmation code. Instead, they receive a temporary password.
Amazon Cognito doesn't evaluate Identity and Access Management (IAM) policies in requests for this API operation. For this operation, you can't use IAM credentials to authorize requests, and you can't grant IAM permissions in policies. For more information about authorization models in Amazon Cognito, see Using the Amazon Cognito user pools API and user pool endpoints.
Allows a user to delete their own user profile.
Authorize this action with a signed-in user's access token. It must include the scope aws.cognito.signin.user.admin
.
Amazon Cognito doesn't evaluate Identity and Access Management (IAM) policies in requests for this API operation. For this operation, you can't use IAM credentials to authorize requests, and you can't grant IAM permissions in policies. For more information about authorization models in Amazon Cognito, see Using the Amazon Cognito user pools API and user pool endpoints.
Deletes the attributes for a user.
Authorize this action with a signed-in user's access token. It must include the scope aws.cognito.signin.user.admin
.
Amazon Cognito doesn't evaluate Identity and Access Management (IAM) policies in requests for this API operation. For this operation, you can't use IAM credentials to authorize requests, and you can't grant IAM permissions in policies. For more information about authorization models in Amazon Cognito, see Using the Amazon Cognito user pools API and user pool endpoints.
Forgets the specified device. For more information about device authentication, see Working with user devices in your user pool.
Authorize this action with a signed-in user's access token. It must include the scope aws.cognito.signin.user.admin
.
Amazon Cognito doesn't evaluate Identity and Access Management (IAM) policies in requests for this API operation. For this operation, you can't use IAM credentials to authorize requests, and you can't grant IAM permissions in policies. For more information about authorization models in Amazon Cognito, see Using the Amazon Cognito user pools API and user pool endpoints.
Calling this API causes a message to be sent to the end user with a confirmation code that is required to change the user's password. For the Username
parameter, you can use the username or user alias. The method used to send the confirmation code is sent according to the specified AccountRecoverySetting. For more information, see Recovering User Accounts in the Amazon Cognito Developer Guide. To use the confirmation code for resetting the password, call ConfirmForgotPassword.
If neither a verified phone number nor a verified email exists, this API returns InvalidParameterException
. If your app client has a client secret and you don't provide a SECRET_HASH
parameter, this API returns NotAuthorizedException
.
To use this API operation, your user pool must have self-service account recovery configured. Use AdminSetUserPassword if you manage passwords as an administrator.
Amazon Cognito doesn't evaluate Identity and Access Management (IAM) policies in requests for this API operation. For this operation, you can't use IAM credentials to authorize requests, and you can't grant IAM permissions in policies. For more information about authorization models in Amazon Cognito, see Using the Amazon Cognito user pools API and user pool endpoints.
This action might generate an SMS text message. Starting June 1, 2021, US telecom carriers require you to register an origination phone number before you can send SMS messages to US phone numbers. If you use SMS text messages in Amazon Cognito, you must register a phone number with Amazon Pinpoint. Amazon Cognito uses the registered number automatically. Otherwise, Amazon Cognito users who must receive SMS messages might not be able to sign up, activate their accounts, or sign in.
If you have never used SMS text messages with Amazon Cognito or any other Amazon Web Service, Amazon Simple Notification Service might place your account in the SMS sandbox. In sandbox mode , you can send messages only to verified phone numbers. After you test your app while in the sandbox environment, you can move out of the sandbox and into production. For more information, see SMS message settings for Amazon Cognito user pools in the Amazon Cognito Developer Guide.
Gets the device. For more information about device authentication, see Working with user devices in your user pool.
Authorize this action with a signed-in user's access token. It must include the scope aws.cognito.signin.user.admin
.
Amazon Cognito doesn't evaluate Identity and Access Management (IAM) policies in requests for this API operation. For this operation, you can't use IAM credentials to authorize requests, and you can't grant IAM permissions in policies. For more information about authorization models in Amazon Cognito, see Using the Amazon Cognito user pools API and user pool endpoints.
Gets the user attributes and metadata for a user.
Authorize this action with a signed-in user's access token. It must include the scope aws.cognito.signin.user.admin
.
Amazon Cognito doesn't evaluate Identity and Access Management (IAM) policies in requests for this API operation. For this operation, you can't use IAM credentials to authorize requests, and you can't grant IAM permissions in policies. For more information about authorization models in Amazon Cognito, see Using the Amazon Cognito user pools API and user pool endpoints.
Generates a user attribute verification code for the specified attribute name. Sends a message to a user with a code that they must return in a VerifyUserAttribute request.
Authorize this action with a signed-in user's access token. It must include the scope aws.cognito.signin.user.admin
.
Amazon Cognito doesn't evaluate Identity and Access Management (IAM) policies in requests for this API operation. For this operation, you can't use IAM credentials to authorize requests, and you can't grant IAM permissions in policies. For more information about authorization models in Amazon Cognito, see Using the Amazon Cognito user pools API and user pool endpoints.
This action might generate an SMS text message. Starting June 1, 2021, US telecom carriers require you to register an origination phone number before you can send SMS messages to US phone numbers. If you use SMS text messages in Amazon Cognito, you must register a phone number with Amazon Pinpoint. Amazon Cognito uses the registered number automatically. Otherwise, Amazon Cognito users who must receive SMS messages might not be able to sign up, activate their accounts, or sign in.
If you have never used SMS text messages with Amazon Cognito or any other Amazon Web Service, Amazon Simple Notification Service might place your account in the SMS sandbox. In sandbox mode , you can send messages only to verified phone numbers. After you test your app while in the sandbox environment, you can move out of the sandbox and into production. For more information, see SMS message settings for Amazon Cognito user pools in the Amazon Cognito Developer Guide.
Invalidates the identity, access, and refresh tokens that Amazon Cognito issued to a user. Call this operation when your user signs out of your app. This results in the following behavior.
Amazon Cognito no longer accepts token-authorized user operations that you authorize with a signed-out user's access tokens. For more information, see Using the Amazon Cognito user pools API and user pool endpoints.
Amazon Cognito returns an Access Token has been revoked
error when your app attempts to authorize a user pools API request with a revoked access token that contains the scope aws.cognito.signin.user.admin
.
Amazon Cognito no longer accepts a signed-out user's ID token in a GetId request to an identity pool with ServerSideTokenCheck
enabled for its user pool IdP configuration in CognitoIdentityProvider.
Amazon Cognito no longer accepts a signed-out user's refresh tokens in refresh requests.
Other requests might be valid until your user's token expires.
Authorize this action with a signed-in user's access token. It must include the scope aws.cognito.signin.user.admin
.
Amazon Cognito doesn't evaluate Identity and Access Management (IAM) policies in requests for this API operation. For this operation, you can't use IAM credentials to authorize requests, and you can't grant IAM permissions in policies. For more information about authorization models in Amazon Cognito, see Using the Amazon Cognito user pools API and user pool endpoints.
Initiates sign-in for a user in the Amazon Cognito user directory. You can't sign in a user with a federated IdP with InitiateAuth
. For more information, see Adding user pool sign-in through a third party.
Amazon Cognito doesn't evaluate Identity and Access Management (IAM) policies in requests for this API operation. For this operation, you can't use IAM credentials to authorize requests, and you can't grant IAM permissions in policies. For more information about authorization models in Amazon Cognito, see Using the Amazon Cognito user pools API and user pool endpoints.
This action might generate an SMS text message. Starting June 1, 2021, US telecom carriers require you to register an origination phone number before you can send SMS messages to US phone numbers. If you use SMS text messages in Amazon Cognito, you must register a phone number with Amazon Pinpoint. Amazon Cognito uses the registered number automatically. Otherwise, Amazon Cognito users who must receive SMS messages might not be able to sign up, activate their accounts, or sign in.
If you have never used SMS text messages with Amazon Cognito or any other Amazon Web Service, Amazon Simple Notification Service might place your account in the SMS sandbox. In sandbox mode , you can send messages only to verified phone numbers. After you test your app while in the sandbox environment, you can move out of the sandbox and into production. For more information, see SMS message settings for Amazon Cognito user pools in the Amazon Cognito Developer Guide.
Lists the sign-in devices that Amazon Cognito has registered to the current user. For more information about device authentication, see Working with user devices in your user pool.
Authorize this action with a signed-in user's access token. It must include the scope aws.cognito.signin.user.admin
.
Amazon Cognito doesn't evaluate Identity and Access Management (IAM) policies in requests for this API operation. For this operation, you can't use IAM credentials to authorize requests, and you can't grant IAM permissions in policies. For more information about authorization models in Amazon Cognito, see Using the Amazon Cognito user pools API and user pool endpoints.
Resends the confirmation (for confirmation of registration) to a specific user in the user pool.
Amazon Cognito doesn't evaluate Identity and Access Management (IAM) policies in requests for this API operation. For this operation, you can't use IAM credentials to authorize requests, and you can't grant IAM permissions in policies. For more information about authorization models in Amazon Cognito, see Using the Amazon Cognito user pools API and user pool endpoints.
This action might generate an SMS text message. Starting June 1, 2021, US telecom carriers require you to register an origination phone number before you can send SMS messages to US phone numbers. If you use SMS text messages in Amazon Cognito, you must register a phone number with Amazon Pinpoint. Amazon Cognito uses the registered number automatically. Otherwise, Amazon Cognito users who must receive SMS messages might not be able to sign up, activate their accounts, or sign in.
If you have never used SMS text messages with Amazon Cognito or any other Amazon Web Service, Amazon Simple Notification Service might place your account in the SMS sandbox. In sandbox mode , you can send messages only to verified phone numbers. After you test your app while in the sandbox environment, you can move out of the sandbox and into production. For more information, see SMS message settings for Amazon Cognito user pools in the Amazon Cognito Developer Guide.
Some API operations in a user pool generate a challenge, like a prompt for an MFA code, for device authentication that bypasses MFA, or for a custom authentication challenge. A RespondToAuthChallenge
API request provides the answer to that challenge, like a code or a secure remote password (SRP). The parameters of a response to an authentication challenge vary with the type of challenge.
For more information about custom authentication challenges, see Custom authentication challenge Lambda triggers.
Amazon Cognito doesn't evaluate Identity and Access Management (IAM) policies in requests for this API operation. For this operation, you can't use IAM credentials to authorize requests, and you can't grant IAM permissions in policies. For more information about authorization models in Amazon Cognito, see Using the Amazon Cognito user pools API and user pool endpoints.
This action might generate an SMS text message. Starting June 1, 2021, US telecom carriers require you to register an origination phone number before you can send SMS messages to US phone numbers. If you use SMS text messages in Amazon Cognito, you must register a phone number with Amazon Pinpoint. Amazon Cognito uses the registered number automatically. Otherwise, Amazon Cognito users who must receive SMS messages might not be able to sign up, activate their accounts, or sign in.
If you have never used SMS text messages with Amazon Cognito or any other Amazon Web Service, Amazon Simple Notification Service might place your account in the SMS sandbox. In sandbox mode , you can send messages only to verified phone numbers. After you test your app while in the sandbox environment, you can move out of the sandbox and into production. For more information, see SMS message settings for Amazon Cognito user pools in the Amazon Cognito Developer Guide.
Revokes all of the access tokens generated by, and at the same time as, the specified refresh token. After a token is revoked, you can't use the revoked token to access Amazon Cognito user APIs, or to authorize access to your resource server.
Amazon Cognito doesn't evaluate Identity and Access Management (IAM) policies in requests for this API operation. For this operation, you can't use IAM credentials to authorize requests, and you can't grant IAM permissions in policies. For more information about authorization models in Amazon Cognito, see Using the Amazon Cognito user pools API and user pool endpoints.
Set the user's multi-factor authentication (MFA) method preference, including which MFA factors are activated and if any are preferred. Only one factor can be set as preferred. The preferred MFA factor will be used to authenticate a user if multiple factors are activated. If multiple options are activated and no preference is set, a challenge to choose an MFA option will be returned during sign-in. If an MFA type is activated for a user, the user will be prompted for MFA during all sign-in attempts unless device tracking is turned on and the device has been trusted. If you want MFA to be applied selectively based on the assessed risk level of sign-in attempts, deactivate MFA for users and turn on Adaptive Authentication for the user pool.
Authorize this action with a signed-in user's access token. It must include the scope aws.cognito.signin.user.admin
.
Amazon Cognito doesn't evaluate Identity and Access Management (IAM) policies in requests for this API operation. For this operation, you can't use IAM credentials to authorize requests, and you can't grant IAM permissions in policies. For more information about authorization models in Amazon Cognito, see Using the Amazon Cognito user pools API and user pool endpoints.
This action is no longer supported. You can use it to configure only SMS MFA. You can't use it to configure time-based one-time password (TOTP) software token MFA. To configure either type of MFA, use SetUserMFAPreference instead.
Authorize this action with a signed-in user's access token. It must include the scope aws.cognito.signin.user.admin
.
Amazon Cognito doesn't evaluate Identity and Access Management (IAM) policies in requests for this API operation. For this operation, you can't use IAM credentials to authorize requests, and you can't grant IAM permissions in policies. For more information about authorization models in Amazon Cognito, see Using the Amazon Cognito user pools API and user pool endpoints.
Registers the user in the specified user pool and creates a user name, password, and user attributes.
Amazon Cognito doesn't evaluate Identity and Access Management (IAM) policies in requests for this API operation. For this operation, you can't use IAM credentials to authorize requests, and you can't grant IAM permissions in policies. For more information about authorization models in Amazon Cognito, see Using the Amazon Cognito user pools API and user pool endpoints.
This action might generate an SMS text message. Starting June 1, 2021, US telecom carriers require you to register an origination phone number before you can send SMS messages to US phone numbers. If you use SMS text messages in Amazon Cognito, you must register a phone number with Amazon Pinpoint. Amazon Cognito uses the registered number automatically. Otherwise, Amazon Cognito users who must receive SMS messages might not be able to sign up, activate their accounts, or sign in.
If you have never used SMS text messages with Amazon Cognito or any other Amazon Web Service, Amazon Simple Notification Service might place your account in the SMS sandbox. In sandbox mode , you can send messages only to verified phone numbers. After you test your app while in the sandbox environment, you can move out of the sandbox and into production. For more information, see SMS message settings for Amazon Cognito user pools in the Amazon Cognito Developer Guide.
Provides the feedback for an authentication event, whether it was from a valid user or not. This feedback is used for improving the risk evaluation decision for the user pool as part of Amazon Cognito advanced security.
Amazon Cognito doesn't evaluate Identity and Access Management (IAM) policies in requests for this API operation. For this operation, you can't use IAM credentials to authorize requests, and you can't grant IAM permissions in policies. For more information about authorization models in Amazon Cognito, see Using the Amazon Cognito user pools API and user pool endpoints.
Updates the device status. For more information about device authentication, see Working with user devices in your user pool.
Authorize this action with a signed-in user's access token. It must include the scope aws.cognito.signin.user.admin
.
Amazon Cognito doesn't evaluate Identity and Access Management (IAM) policies in requests for this API operation. For this operation, you can't use IAM credentials to authorize requests, and you can't grant IAM permissions in policies. For more information about authorization models in Amazon Cognito, see Using the Amazon Cognito user pools API and user pool endpoints.
With this operation, your users can update one or more of their attributes with their own credentials. You authorize this API request with the user's access token. To delete an attribute from your user, submit the attribute in your API request with a blank value. Custom attribute values in this request must include the custom:
prefix.
Authorize this action with a signed-in user's access token. It must include the scope aws.cognito.signin.user.admin
.
Amazon Cognito doesn't evaluate Identity and Access Management (IAM) policies in requests for this API operation. For this operation, you can't use IAM credentials to authorize requests, and you can't grant IAM permissions in policies. For more information about authorization models in Amazon Cognito, see Using the Amazon Cognito user pools API and user pool endpoints.
This action might generate an SMS text message. Starting June 1, 2021, US telecom carriers require you to register an origination phone number before you can send SMS messages to US phone numbers. If you use SMS text messages in Amazon Cognito, you must register a phone number with Amazon Pinpoint. Amazon Cognito uses the registered number automatically. Otherwise, Amazon Cognito users who must receive SMS messages might not be able to sign up, activate their accounts, or sign in.
If you have never used SMS text messages with Amazon Cognito or any other Amazon Web Service, Amazon Simple Notification Service might place your account in the SMS sandbox. In sandbox mode , you can send messages only to verified phone numbers. After you test your app while in the sandbox environment, you can move out of the sandbox and into production. For more information, see SMS message settings for Amazon Cognito user pools in the Amazon Cognito Developer Guide.
Use this API to register a user's entered time-based one-time password (TOTP) code and mark the user's software token MFA status as \"verified\" if successful. The request takes an access token or a session string, but not both.
Amazon Cognito doesn't evaluate Identity and Access Management (IAM) policies in requests for this API operation. For this operation, you can't use IAM credentials to authorize requests, and you can't grant IAM permissions in policies. For more information about authorization models in Amazon Cognito, see Using the Amazon Cognito user pools API and user pool endpoints.
Verifies the specified user attributes in the user pool.
If your user pool requires verification before Amazon Cognito updates the attribute value, VerifyUserAttribute updates the affected attribute to its pending value. For more information, see UserAttributeUpdateSettingsType.
Authorize this action with a signed-in user's access token. It must include the scope aws.cognito.signin.user.admin
.
Amazon Cognito doesn't evaluate Identity and Access Management (IAM) policies in requests for this API operation. For this operation, you can't use IAM credentials to authorize requests, and you can't grant IAM permissions in policies. For more information about authorization models in Amazon Cognito, see Using the Amazon Cognito user pools API and user pool endpoints.
Creates a new trigger.
" }, + "CreateUsageProfile": { + "name": "CreateUsageProfile", + "http": { + "method": "POST", + "requestUri": "/" + }, + "input": { + "shape": "CreateUsageProfileRequest" + }, + "output": { + "shape": "CreateUsageProfileResponse" + }, + "errors": [ + { + "shape": "InvalidInputException" + }, + { + "shape": "InternalServiceException" + }, + { + "shape": "AlreadyExistsException" + }, + { + "shape": "OperationTimeoutException" + }, + { + "shape": "ResourceNumberLimitExceededException" + }, + { + "shape": "OperationNotSupportedException" + } + ], + "documentation": "Creates an Glue usage profile.
" + }, "CreateUserDefinedFunction": { "name": "CreateUserDefinedFunction", "http": { @@ -2076,6 +2110,34 @@ ], "documentation": "Deletes a specified trigger. If the trigger is not found, no exception is thrown.
" }, + "DeleteUsageProfile": { + "name": "DeleteUsageProfile", + "http": { + "method": "POST", + "requestUri": "/" + }, + "input": { + "shape": "DeleteUsageProfileRequest" + }, + "output": { + "shape": "DeleteUsageProfileResponse" + }, + "errors": [ + { + "shape": "InvalidInputException" + }, + { + "shape": "InternalServiceException" + }, + { + "shape": "OperationTimeoutException" + }, + { + "shape": "OperationNotSupportedException" + } + ], + "documentation": "Deletes the Glue specified usage profile.
" + }, "DeleteUserDefinedFunction": { "name": "DeleteUserDefinedFunction", "http": { @@ -2894,7 +2956,7 @@ "shape": "OperationTimeoutException" } ], - "documentation": "Retrieves the metadata for a given job run.
" + "documentation": "Retrieves the metadata for a given job run. Job run history is accessible for 90 days for your workflow and job run.
" }, "GetJobRuns": { "name": "GetJobRuns", @@ -3916,6 +3978,37 @@ ], "documentation": "Allows a third-party analytical engine to retrieve unfiltered table metadata from the Data Catalog.
For IAM authorization, the public IAM action associated with this API is glue:GetTable
.
Retrieves information about the specified Glue usage profile.
" + }, "GetUserDefinedFunction": { "name": "GetUserDefinedFunction", "http": { @@ -4032,7 +4125,7 @@ "shape": "OperationTimeoutException" } ], - "documentation": "Retrieves the metadata for a given workflow run.
" + "documentation": "Retrieves the metadata for a given workflow run. Job run history is accessible for 90 days for your workflow and job run.
" }, "GetWorkflowRunProperties": { "name": "GetWorkflowRunProperties", @@ -4611,6 +4704,34 @@ ], "documentation": "Retrieves the names of all trigger resources in this Amazon Web Services account, or the resources with the specified tag. This operation allows you to see which resources are available in your account, and their names.
This operation takes the optional Tags
field, which you can use as a filter on the response so that tagged resources can be retrieved as a group. If you choose to use tags filtering, only resources with the tag are retrieved.
List all the Glue usage profiles.
" + }, "ListWorkflows": { "name": "ListWorkflows", "http": { @@ -6265,6 +6386,40 @@ ], "documentation": "Updates a trigger definition.
" }, + "UpdateUsageProfile": { + "name": "UpdateUsageProfile", + "http": { + "method": "POST", + "requestUri": "/" + }, + "input": { + "shape": "UpdateUsageProfileRequest" + }, + "output": { + "shape": "UpdateUsageProfileResponse" + }, + "errors": [ + { + "shape": "InvalidInputException" + }, + { + "shape": "InternalServiceException" + }, + { + "shape": "EntityNotFoundException" + }, + { + "shape": "OperationTimeoutException" + }, + { + "shape": "OperationNotSupportedException" + }, + { + "shape": "ConcurrentModificationException" + } + ], + "documentation": "Update an Glue usage profile.
" + }, "UpdateUserDefinedFunction": { "name": "UpdateUserDefinedFunction", "http": { @@ -6483,6 +6638,12 @@ "max": 30, "min": 1 }, + "AllowedValuesStringList": { + "type": "list", + "member": { + "shape": "ConfigValueString" + } + }, "AmazonRedshiftAdvancedOption": { "type": "structure", "members": { @@ -9136,6 +9297,43 @@ "shape": "Condition" } }, + "ConfigValueString": { + "type": "string", + "max": 128, + "min": 1, + "pattern": "[a-zA-Z0-9_.-]+" + }, + "ConfigurationMap": { + "type": "map", + "key": { + "shape": "NameString" + }, + "value": { + "shape": "ConfigurationObject" + } + }, + "ConfigurationObject": { + "type": "structure", + "members": { + "DefaultValue": { + "shape": "ConfigValueString", + "documentation": "A default value for the parameter.
" + }, + "AllowedValues": { + "shape": "AllowedValuesStringList", + "documentation": "A list of allowed values for the parameter.
" + }, + "MinValue": { + "shape": "ConfigValueString", + "documentation": "A minimum allowed value for the parameter.
" + }, + "MaxValue": { + "shape": "ConfigValueString", + "documentation": "A maximum allowed value for the parameter.
" + } + }, + "documentation": "Specifies the values that an admin sets for each job or session parameter configured in a Glue usage profile.
" + }, "ConfusionMatrix": { "type": "structure", "members": { @@ -10972,6 +11170,40 @@ } } }, + "CreateUsageProfileRequest": { + "type": "structure", + "required": [ + "Name", + "Configuration" + ], + "members": { + "Name": { + "shape": "NameString", + "documentation": "The name of the usage profile.
" + }, + "Description": { + "shape": "DescriptionString", + "documentation": "A description of the usage profile.
" + }, + "Configuration": { + "shape": "ProfileConfiguration", + "documentation": "A ProfileConfiguration
object specifying the job and session values for the profile.
A list of tags applied to the usage profile.
" + } + } + }, + "CreateUsageProfileResponse": { + "type": "structure", + "members": { + "Name": { + "shape": "NameString", + "documentation": "The name of the usage profile that was created.
" + } + } + }, "CreateUserDefinedFunctionRequest": { "type": "structure", "required": [ @@ -12647,6 +12879,22 @@ } } }, + "DeleteUsageProfileRequest": { + "type": "structure", + "required": [ + "Name" + ], + "members": { + "Name": { + "shape": "NameString", + "documentation": "The name of the usage profile to delete.
" + } + } + }, + "DeleteUsageProfileResponse": { + "type": "structure", + "members": {} + }, "DeleteUserDefinedFunctionRequest": { "type": "structure", "required": [ @@ -16200,6 +16448,43 @@ } } }, + "GetUsageProfileRequest": { + "type": "structure", + "required": [ + "Name" + ], + "members": { + "Name": { + "shape": "NameString", + "documentation": "The name of the usage profile to retrieve.
" + } + } + }, + "GetUsageProfileResponse": { + "type": "structure", + "members": { + "Name": { + "shape": "NameString", + "documentation": "The name of the usage profile.
" + }, + "Description": { + "shape": "DescriptionString", + "documentation": "A description of the usage profile.
" + }, + "Configuration": { + "shape": "ProfileConfiguration", + "documentation": "A ProfileConfiguration
object specifying the job and session values for the profile.
The date and time when the usage profile was created.
" + }, + "LastModifiedOn": { + "shape": "TimestampValue", + "documentation": "The date and time when the usage profile was last modified.
" + } + } + }, "GetUserDefinedFunctionRequest": { "type": "structure", "required": [ @@ -17127,6 +17412,10 @@ "MaintenanceWindow": { "shape": "MaintenanceWindow", "documentation": "This field specifies a day of the week and hour for a maintenance window for streaming jobs. Glue periodically performs maintenance activities. During these maintenance windows, Glue will need to restart your streaming jobs.
Glue will restart the job within 3 hours of the specified maintenance window. For instance, if you set up the maintenance window for Monday at 10:00AM GMT, your jobs will be restarted between 10:00AM GMT to 1:00PM GMT.
" + }, + "ProfileName": { + "shape": "NameString", + "documentation": "The name of an Glue usage profile associated with the job.
" } }, "documentation": "Specifies a job definition.
" @@ -17349,6 +17638,10 @@ "MaintenanceWindow": { "shape": "MaintenanceWindow", "documentation": "This field specifies a day of the week and hour for a maintenance window for streaming jobs. Glue periodically performs maintenance activities. During these maintenance windows, Glue will need to restart your streaming jobs.
Glue will restart the job within 3 hours of the specified maintenance window. For instance, if you set up the maintenance window for Monday at 10:00AM GMT, your jobs will be restarted between 10:00AM GMT to 1:00PM GMT.
" + }, + "ProfileName": { + "shape": "NameString", + "documentation": "The name of an Glue usage profile associated with the job run.
" } }, "documentation": "Contains information about a job run.
" @@ -18546,6 +18839,32 @@ } } }, + "ListUsageProfilesRequest": { + "type": "structure", + "members": { + "NextToken": { + "shape": "OrchestrationToken", + "documentation": "A continuation token, included if this is a continuation call.
" + }, + "MaxResults": { + "shape": "OrchestrationPageSize200", + "documentation": "The maximum number of usage profiles to return in a single response.
" + } + } + }, + "ListUsageProfilesResponse": { + "type": "structure", + "members": { + "Profiles": { + "shape": "UsageProfileDefinitionList", + "documentation": "A list of usage profile (UsageProfileDefinition
) objects.
A continuation token, present if the current list segment is not the last.
" + } + } + }, "ListWorkflowsRequest": { "type": "structure", "members": { @@ -20077,6 +20396,20 @@ "max": 1, "min": 0 }, + "ProfileConfiguration": { + "type": "structure", + "members": { + "SessionConfiguration": { + "shape": "ConfigurationMap", + "documentation": "A key-value map of configuration parameters for Glue sessions.
" + }, + "JobConfiguration": { + "shape": "ConfigurationMap", + "documentation": "A key-value map of configuration parameters for Glue jobs.
" + } + }, + "documentation": "Specifies the job and session values that an admin configures in an Glue usage profile.
" + }, "PropertyPredicate": { "type": "structure", "members": { @@ -22134,6 +22467,10 @@ "IdleTimeout": { "shape": "IdleTimeout", "documentation": "The number of minutes when idle before the session times out.
" + }, + "ProfileName": { + "shape": "NameString", + "documentation": "The name of an Glue usage profile associated with the session.
" } }, "documentation": "The period in which a remote Spark runtime environment is running.
" @@ -25246,6 +25583,36 @@ } } }, + "UpdateUsageProfileRequest": { + "type": "structure", + "required": [ + "Name", + "Configuration" + ], + "members": { + "Name": { + "shape": "NameString", + "documentation": "The name of the usage profile.
" + }, + "Description": { + "shape": "DescriptionString", + "documentation": "A description of the usage profile.
" + }, + "Configuration": { + "shape": "ProfileConfiguration", + "documentation": "A ProfileConfiguration
object specifying the job and session values for the profile.
The name of the usage profile that was updated.
" + } + } + }, "UpdateUserDefinedFunctionRequest": { "type": "structure", "required": [ @@ -25354,6 +25721,34 @@ "UriString": { "type": "string" }, + "UsageProfileDefinition": { + "type": "structure", + "members": { + "Name": { + "shape": "NameString", + "documentation": "The name of the usage profile.
" + }, + "Description": { + "shape": "DescriptionString", + "documentation": "A description of the usage profile.
" + }, + "CreatedOn": { + "shape": "TimestampValue", + "documentation": "The date and time when the usage profile was created.
" + }, + "LastModifiedOn": { + "shape": "TimestampValue", + "documentation": "The date and time when the usage profile was last modified.
" + } + }, + "documentation": "Describes an Glue usage profile.
" + }, + "UsageProfileDefinitionList": { + "type": "list", + "member": { + "shape": "UsageProfileDefinition" + } + }, "UserDefinedFunction": { "type": "structure", "members": { diff --git a/apis/glue-2017-03-31.paginators.json b/apis/glue-2017-03-31.paginators.json index 7b7558dae2..05c39b5256 100644 --- a/apis/glue-2017-03-31.paginators.json +++ b/apis/glue-2017-03-31.paginators.json @@ -200,6 +200,12 @@ "limit_key": "MaxResults", "output_token": "NextToken" }, + "ListUsageProfiles": { + "input_token": "NextToken", + "limit_key": "MaxResults", + "output_token": "NextToken", + "result_key": "Profiles" + }, "ListWorkflows": { "input_token": "NextToken", "limit_key": "MaxResults", diff --git a/apis/kms-2014-11-01.examples.json b/apis/kms-2014-11-01.examples.json index 6925c61b14..e62ffa2dfb 100644 --- a/apis/kms-2014-11-01.examples.json +++ b/apis/kms-2014-11-01.examples.json @@ -637,11 +637,12 @@ "input": { "KeyAgreementAlgorithm": "ECDH", "KeyId": "1234abcd-12ab-34cd-56ef-1234567890ab", - "PublicKey": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvH3Yj0wbkLEpUl95Cv1cJVjsVNSjwGq3tCLnzXfhVwVvmzGN8pYj3U8nKwgouaHbBWNJYjP5VutbbkKS4Kv4GojwZBJyHN17kmxo8yTjRmjR15SKIQ8cqRA2uaERMLnpztIXdZp232PQPbWGxDyXYJ0aJ5EFSag+iSK341kr2kFTpINN7T1ZaX9vfXBdGR+VtkRKMWoHQeWzHrPZ+3irvpXNCKxGUxmPNsJSjPUhuSXT5+0VrY/LEYLQ5lUTrhU6z5/OK0kzaCc66DXc5ipSloS4Xyg+QcYSMxe9xuqO5HtzFImUSKBm1W6eDT6lHnSbpi7vXzNbIX7pWxKw9nmQvQIDAQAB" + "PublicKey": "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvH3Yj0wbkLEpUl95Cv1cJVjsVNSjwGq3tCLnzXfhVwVvmzGN8pYj3U8nKwgouaHbBWNJYjP5VutbbkKS4Kv4GojwZBJyHN17kmxo8yTjRmjR15SKIQ8cqRA2uaERMLnpztIXdZp232PQPbWGxDyXYJ0aJ5EFSag" }, "output": { "KeyAgreementAlgorithm": "ECDH", "KeyId": "1234abcd-12ab-34cd-56ef-1234567890ab", + "KeyOrigin": "AWS_KMS", "SharedSecret": "MEYCIQCKZLWyTk5runarx6XiAkU9gv3lbwPO/pHa+DXFehzdDwIhANwpsIV2g/9SPWLLsF6p/hiSskuIXMTRwqrMdVKWTMHG" }, "comments": { @@ -653,11 +654,12 @@ "output": { "KeyAgreementAlgorithm": "The key agreement algorithm used to derive the shared secret.", "KeyId": "The asymmetric KMS key pair used to derive the shared secret.", + "KeyOrigin": "The source of the key material for the specified KMS key.", "SharedSecret": "The raw secret derived from the specified key agreement algorithm, private key in the asymmetric KMS key, and your peer's public key." } }, "description": "The following example derives a shared secret using a key agreement algorithm.", - "id": "to-derive-a-shared-secret-1716220614829", + "id": "to-derive-a-shared-secret-1718381818754", "title": "To derive a shared secret" } ], diff --git a/apis/mediaconvert-2017-08-29.min.json b/apis/mediaconvert-2017-08-29.min.json index acc46cdfaf..587cdc85c8 100644 --- a/apis/mediaconvert-2017-08-29.min.json +++ b/apis/mediaconvert-2017-08-29.min.json @@ -9,7 +9,10 @@ "jsonVersion": "1.1", "uid": "mediaconvert-2017-08-29", "signatureVersion": "v4", - "serviceAbbreviation": "MediaConvert" + "serviceAbbreviation": "MediaConvert", + "auth": [ + "aws.auth#sigv4" + ] }, "operations": { "AssociateCertificate": { @@ -103,11 +106,11 @@ "locationName": "statusUpdateInterval" }, "Tags": { - "shape": "Slb", + "shape": "Slc", "locationName": "tags" }, "UserMetadata": { - "shape": "Slb", + "shape": "Slc", "locationName": "userMetadata" } }, @@ -120,7 +123,7 @@ "type": "structure", "members": { "Job": { - "shape": "Sld", + "shape": "Sle", "locationName": "job" } } @@ -159,14 +162,14 @@ "locationName": "queue" }, "Settings": { - "shape": "Slv", + "shape": "Slw", "locationName": "settings" }, "StatusUpdateInterval": { "locationName": "statusUpdateInterval" }, "Tags": { - "shape": "Slb", + "shape": "Slc", "locationName": "tags" } }, @@ -179,7 +182,7 @@ "type": "structure", "members": { "JobTemplate": { - "shape": "Slz", + "shape": "Sm0", "locationName": "jobTemplate" } } @@ -203,11 +206,11 @@ "locationName": "name" }, "Settings": { - "shape": "Sm2", + "shape": "Sm3", "locationName": "settings" }, "Tags": { - "shape": "Slb", + "shape": "Slc", "locationName": "tags" } }, @@ -220,7 +223,7 @@ "type": "structure", "members": { "Preset": { - "shape": "Sm6", + "shape": "Sm7", "locationName": "preset" } } @@ -244,14 +247,14 @@ "locationName": "pricingPlan" }, "ReservationPlanSettings": { - "shape": "Sm9", + "shape": "Sma", "locationName": "reservationPlanSettings" }, "Status": { "locationName": "status" }, "Tags": { - "shape": "Slb", + "shape": "Slc", "locationName": "tags" } }, @@ -263,7 +266,7 @@ "type": "structure", "members": { "Queue": { - "shape": "Sme", + "shape": "Smf", "locationName": "queue" } } @@ -448,7 +451,7 @@ "type": "structure", "members": { "Job": { - "shape": "Sld", + "shape": "Sle", "locationName": "job" } } @@ -476,7 +479,7 @@ "type": "structure", "members": { "JobTemplate": { - "shape": "Slz", + "shape": "Sm0", "locationName": "jobTemplate" } } @@ -496,7 +499,7 @@ "type": "structure", "members": { "Policy": { - "shape": "Sn2", + "shape": "Sn3", "locationName": "policy" } } @@ -524,7 +527,7 @@ "type": "structure", "members": { "Preset": { - "shape": "Sm6", + "shape": "Sm7", "locationName": "preset" } } @@ -552,7 +555,7 @@ "type": "structure", "members": { "Queue": { - "shape": "Sme", + "shape": "Smf", "locationName": "queue" } } @@ -597,7 +600,7 @@ "locationName": "jobTemplates", "type": "list", "member": { - "shape": "Slz" + "shape": "Sm0" } }, "NextToken": { @@ -642,7 +645,7 @@ "type": "structure", "members": { "Jobs": { - "shape": "Sng", + "shape": "Snh", "locationName": "jobs" }, "NextToken": { @@ -693,7 +696,7 @@ "locationName": "presets", "type": "list", "member": { - "shape": "Sm6" + "shape": "Sm7" } } } @@ -737,7 +740,7 @@ "locationName": "queues", "type": "list", "member": { - "shape": "Sme" + "shape": "Smf" } } } @@ -772,7 +775,7 @@ "locationName": "arn" }, "Tags": { - "shape": "Slb", + "shape": "Slc", "locationName": "tags" } } @@ -790,7 +793,7 @@ "type": "structure", "members": { "Policy": { - "shape": "Sn2", + "shape": "Sn3", "locationName": "policy" } }, @@ -802,7 +805,7 @@ "type": "structure", "members": { "Policy": { - "shape": "Sn2", + "shape": "Sn3", "locationName": "policy" } } @@ -848,7 +851,7 @@ "type": "structure", "members": { "Jobs": { - "shape": "Sng", + "shape": "Snh", "locationName": "jobs" }, "NextToken": { @@ -869,7 +872,7 @@ "locationName": "arn" }, "Tags": { - "shape": "Slb", + "shape": "Slc", "locationName": "tags" } }, @@ -897,7 +900,7 @@ "location": "uri" }, "TagKeys": { - "shape": "Sli", + "shape": "Slj", "locationName": "tagKeys" } }, @@ -945,7 +948,7 @@ "locationName": "queue" }, "Settings": { - "shape": "Slv", + "shape": "Slw", "locationName": "settings" }, "StatusUpdateInterval": { @@ -960,7 +963,7 @@ "type": "structure", "members": { "JobTemplate": { - "shape": "Slz", + "shape": "Sm0", "locationName": "jobTemplate" } } @@ -986,7 +989,7 @@ "location": "uri" }, "Settings": { - "shape": "Sm2", + "shape": "Sm3", "locationName": "settings" } }, @@ -998,7 +1001,7 @@ "type": "structure", "members": { "Preset": { - "shape": "Sm6", + "shape": "Sm7", "locationName": "preset" } } @@ -1021,7 +1024,7 @@ "location": "uri" }, "ReservationPlanSettings": { - "shape": "Sm9", + "shape": "Sma", "locationName": "reservationPlanSettings" }, "Status": { @@ -1036,7 +1039,7 @@ "type": "structure", "members": { "Queue": { - "shape": "Sme", + "shape": "Smf", "locationName": "queue" } } @@ -1204,49 +1207,65 @@ "locationName": "videoGenerator", "type": "structure", "members": { + "Channels": { + "locationName": "channels", + "type": "integer" + }, "Duration": { "locationName": "duration", "type": "integer" + }, + "FramerateDenominator": { + "locationName": "framerateDenominator", + "type": "integer" + }, + "FramerateNumerator": { + "locationName": "framerateNumerator", + "type": "integer" + }, + "SampleRate": { + "locationName": "sampleRate", + "type": "integer" } } }, "VideoOverlays": { - "shape": "S3d", + "shape": "S3f", "locationName": "videoOverlays" }, "VideoSelector": { - "shape": "S3i", + "shape": "S3l", "locationName": "videoSelector" } } } }, "KantarWatermark": { - "shape": "S3s", + "shape": "S3v", "locationName": "kantarWatermark" }, "MotionImageInserter": { - "shape": "S40", + "shape": "S43", "locationName": "motionImageInserter" }, "NielsenConfiguration": { - "shape": "S48", + "shape": "S4b", "locationName": "nielsenConfiguration" }, "NielsenNonLinearWatermark": { - "shape": "S4a", + "shape": "S4d", "locationName": "nielsenNonLinearWatermark" }, "OutputGroups": { - "shape": "S4h", + "shape": "S4k", "locationName": "outputGroups" }, "TimecodeConfig": { - "shape": "Sl3", + "shape": "Sl4", "locationName": "timecodeConfig" }, "TimedMetadataInsertion": { - "shape": "Sl6", + "shape": "Sl7", "locationName": "timedMetadataInsertion" } } @@ -1703,7 +1722,7 @@ } } }, - "S3d": { + "S3f": { "type": "list", "member": { "type": "structure", @@ -1747,7 +1766,7 @@ } } }, - "S3i": { + "S3l": { "type": "structure", "members": { "AlphaBehavior": { @@ -1763,7 +1782,7 @@ "locationName": "embeddedTimecodeOverride" }, "Hdr10Metadata": { - "shape": "S3m", + "shape": "S3p", "locationName": "hdr10Metadata" }, "MaxLuminance": { @@ -1789,7 +1808,7 @@ } } }, - "S3m": { + "S3p": { "type": "structure", "members": { "BluePrimaryX": { @@ -1842,7 +1861,7 @@ } } }, - "S3s": { + "S3v": { "type": "structure", "members": { "ChannelName": { @@ -1888,7 +1907,7 @@ } } }, - "S40": { + "S43": { "type": "structure", "members": { "Framerate": { @@ -1933,7 +1952,7 @@ } } }, - "S48": { + "S4b": { "type": "structure", "members": { "BreakoutCode": { @@ -1945,7 +1964,7 @@ } } }, - "S4a": { + "S4d": { "type": "structure", "members": { "ActiveWatermarkProcess": { @@ -1984,7 +2003,7 @@ } } }, - "S4h": { + "S4k": { "type": "list", "member": { "type": "structure", @@ -2129,6 +2148,9 @@ "CodecSpecification": { "locationName": "codecSpecification" }, + "DashIFrameTrickPlayNameModifier": { + "locationName": "dashIFrameTrickPlayNameModifier" + }, "DashManifestStyle": { "locationName": "dashManifestStyle" }, @@ -2136,7 +2158,7 @@ "locationName": "destination" }, "DestinationSettings": { - "shape": "S55", + "shape": "S59", "locationName": "destinationSettings" }, "Encryption": { @@ -2160,11 +2182,11 @@ "locationName": "certificateArn" }, "DashSignaledSystemIds": { - "shape": "S5k", + "shape": "S5o", "locationName": "dashSignaledSystemIds" }, "HlsSignaledSystemIds": { - "shape": "S5k", + "shape": "S5o", "locationName": "hlsSignaledSystemIds" }, "ResourceId": { @@ -2176,7 +2198,7 @@ } }, "StaticKeyProvider": { - "shape": "S5o", + "shape": "S5s", "locationName": "staticKeyProvider" }, "Type": { @@ -2299,6 +2321,9 @@ "BaseUrl": { "locationName": "baseUrl" }, + "DashIFrameTrickPlayNameModifier": { + "locationName": "dashIFrameTrickPlayNameModifier" + }, "DashManifestStyle": { "locationName": "dashManifestStyle" }, @@ -2306,7 +2331,7 @@ "locationName": "destination" }, "DestinationSettings": { - "shape": "S55", + "shape": "S59", "locationName": "destinationSettings" }, "Encryption": { @@ -2317,7 +2342,7 @@ "locationName": "playbackDeviceCompatibility" }, "SpekeKeyProvider": { - "shape": "S6k", + "shape": "S6o", "locationName": "spekeKeyProvider" } } @@ -2404,7 +2429,7 @@ "locationName": "destination" }, "DestinationSettings": { - "shape": "S55", + "shape": "S59", "locationName": "destinationSettings" } } @@ -2478,7 +2503,7 @@ "locationName": "destination" }, "DestinationSettings": { - "shape": "S55", + "shape": "S59", "locationName": "destinationSettings" }, "DirectoryStructure": { @@ -2501,11 +2526,11 @@ "locationName": "offlineEncrypted" }, "SpekeKeyProvider": { - "shape": "S6k", + "shape": "S6o", "locationName": "spekeKeyProvider" }, "StaticKeyProvider": { - "shape": "S5o", + "shape": "S5s", "locationName": "staticKeyProvider" }, "Type": { @@ -2632,7 +2657,7 @@ "locationName": "destination" }, "DestinationSettings": { - "shape": "S55", + "shape": "S59", "locationName": "destinationSettings" }, "Encryption": { @@ -2640,7 +2665,7 @@ "type": "structure", "members": { "SpekeKeyProvider": { - "shape": "S6k", + "shape": "S6o", "locationName": "spekeKeyProvider" } } @@ -2669,7 +2694,7 @@ "type": "structure", "members": { "AudioDescriptions": { - "shape": "S86", + "shape": "S8a", "locationName": "audioDescriptions" }, "CaptionDescriptions": { @@ -2685,7 +2710,7 @@ "locationName": "customLanguageCode" }, "DestinationSettings": { - "shape": "Sau", + "shape": "Sax", "locationName": "destinationSettings" }, "LanguageCode": { @@ -2698,7 +2723,7 @@ } }, "ContainerSettings": { - "shape": "Sc5", + "shape": "Sc8", "locationName": "containerSettings" }, "Extension": { @@ -2744,7 +2769,7 @@ "locationName": "preset" }, "VideoDescription": { - "shape": "Sel", + "shape": "Sen", "locationName": "videoDescription" } } @@ -2753,7 +2778,7 @@ } } }, - "S55": { + "S59": { "type": "structure", "members": { "S3Settings": { @@ -2791,11 +2816,11 @@ } } }, - "S5k": { + "S5o": { "type": "list", "member": {} }, - "S5o": { + "S5s": { "type": "structure", "members": { "KeyFormat": { @@ -2812,7 +2837,7 @@ } } }, - "S6k": { + "S6o": { "type": "structure", "members": { "CertificateArn": { @@ -2831,7 +2856,7 @@ } } }, - "S86": { + "S8a": { "type": "list", "member": { "type": "structure", @@ -3268,7 +3293,7 @@ } } }, - "Sau": { + "Sax": { "type": "structure", "members": { "BurninDestinationSettings": { @@ -3559,7 +3584,7 @@ } } }, - "Sc5": { + "Sc8": { "type": "structure", "members": { "CmfcSettings": { @@ -3637,7 +3662,7 @@ "type": "integer" }, "AudioPids": { - "shape": "Sco", + "shape": "Scr", "locationName": "audioPids" }, "Bitrate": { @@ -3687,7 +3712,7 @@ } }, "DvbSubPids": { - "shape": "Sco", + "shape": "Scr", "locationName": "dvbSubPids" }, "DvbTdtSettings": { @@ -3831,7 +3856,7 @@ "type": "integer" }, "AudioPids": { - "shape": "Sco", + "shape": "Scr", "locationName": "audioPids" }, "DataPTSControl": { @@ -4014,13 +4039,13 @@ } } }, - "Sco": { + "Scr": { "type": "list", "member": { "type": "integer" } }, - "Sel": { + "Sen": { "type": "structure", "members": { "AfdSignaling": { @@ -4175,7 +4200,7 @@ "locationName": "adaptiveQuantization" }, "BandwidthReductionFilter": { - "shape": "Sfk", + "shape": "Sfl", "locationName": "bandwidthReductionFilter" }, "Bitrate": { @@ -4345,7 +4370,7 @@ "locationName": "alternateTransferFunctionSei" }, "BandwidthReductionFilter": { - "shape": "Sfk", + "shape": "Sfl", "locationName": "bandwidthReductionFilter" }, "Bitrate": { @@ -5061,7 +5086,7 @@ "type": "integer" }, "Hdr10Metadata": { - "shape": "S3m", + "shape": "S3p", "locationName": "hdr10Metadata" }, "HdrToSdrToneMapper": { @@ -5260,7 +5285,7 @@ } } }, - "Sfk": { + "Sfl": { "type": "structure", "members": { "Sharpening": { @@ -5271,7 +5296,7 @@ } } }, - "Sl3": { + "Sl4": { "type": "structure", "members": { "Anchor": { @@ -5288,7 +5313,7 @@ } } }, - "Sl6": { + "Sl7": { "type": "structure", "members": { "Id3Insertions": { @@ -5308,12 +5333,12 @@ } } }, - "Slb": { + "Slc": { "type": "map", "key": {}, "value": {} }, - "Sld": { + "Sle": { "type": "structure", "members": { "AccelerationSettings": { @@ -5333,7 +5358,7 @@ "locationName": "clientRequestToken" }, "CreatedAt": { - "shape": "Slf", + "shape": "Slg", "locationName": "createdAt" }, "CurrentPhase": { @@ -5365,11 +5390,11 @@ "type": "structure", "members": { "Info": { - "shape": "Sli", + "shape": "Slj", "locationName": "info" }, "Warning": { - "shape": "Sli", + "shape": "Slj", "locationName": "warning" } } @@ -5430,7 +5455,7 @@ "locationName": "sourceQueue" }, "Timestamp": { - "shape": "Slf", + "shape": "Slg", "locationName": "timestamp" } } @@ -5461,21 +5486,21 @@ "type": "structure", "members": { "FinishTime": { - "shape": "Slf", + "shape": "Slg", "locationName": "finishTime" }, "StartTime": { - "shape": "Slf", + "shape": "Slg", "locationName": "startTime" }, "SubmitTime": { - "shape": "Slf", + "shape": "Slg", "locationName": "submitTime" } } }, "UserMetadata": { - "shape": "Slb", + "shape": "Slc", "locationName": "userMetadata" }, "Warnings": { @@ -5505,15 +5530,15 @@ "Role" ] }, - "Slf": { + "Slg": { "type": "timestamp", "timestampFormat": "unixTimestamp" }, - "Sli": { + "Slj": { "type": "list", "member": {} }, - "Slv": { + "Slw": { "type": "structure", "members": { "AdAvailOffset": { @@ -5614,47 +5639,47 @@ "locationName": "timecodeStart" }, "VideoOverlays": { - "shape": "S3d", + "shape": "S3f", "locationName": "videoOverlays" }, "VideoSelector": { - "shape": "S3i", + "shape": "S3l", "locationName": "videoSelector" } } } }, "KantarWatermark": { - "shape": "S3s", + "shape": "S3v", "locationName": "kantarWatermark" }, "MotionImageInserter": { - "shape": "S40", + "shape": "S43", "locationName": "motionImageInserter" }, "NielsenConfiguration": { - "shape": "S48", + "shape": "S4b", "locationName": "nielsenConfiguration" }, "NielsenNonLinearWatermark": { - "shape": "S4a", + "shape": "S4d", "locationName": "nielsenNonLinearWatermark" }, "OutputGroups": { - "shape": "S4h", + "shape": "S4k", "locationName": "outputGroups" }, "TimecodeConfig": { - "shape": "Sl3", + "shape": "Sl4", "locationName": "timecodeConfig" }, "TimedMetadataInsertion": { - "shape": "Sl6", + "shape": "Sl7", "locationName": "timedMetadataInsertion" } } }, - "Slz": { + "Sm0": { "type": "structure", "members": { "AccelerationSettings": { @@ -5668,7 +5693,7 @@ "locationName": "category" }, "CreatedAt": { - "shape": "Slf", + "shape": "Slg", "locationName": "createdAt" }, "Description": { @@ -5679,7 +5704,7 @@ "locationName": "hopDestinations" }, "LastUpdated": { - "shape": "Slf", + "shape": "Slg", "locationName": "lastUpdated" }, "Name": { @@ -5693,7 +5718,7 @@ "locationName": "queue" }, "Settings": { - "shape": "Slv", + "shape": "Slw", "locationName": "settings" }, "StatusUpdateInterval": { @@ -5708,11 +5733,11 @@ "Name" ] }, - "Sm2": { + "Sm3": { "type": "structure", "members": { "AudioDescriptions": { - "shape": "S86", + "shape": "S8a", "locationName": "audioDescriptions" }, "CaptionDescriptions": { @@ -5725,7 +5750,7 @@ "locationName": "customLanguageCode" }, "DestinationSettings": { - "shape": "Sau", + "shape": "Sax", "locationName": "destinationSettings" }, "LanguageCode": { @@ -5738,16 +5763,16 @@ } }, "ContainerSettings": { - "shape": "Sc5", + "shape": "Sc8", "locationName": "containerSettings" }, "VideoDescription": { - "shape": "Sel", + "shape": "Sen", "locationName": "videoDescription" } } }, - "Sm6": { + "Sm7": { "type": "structure", "members": { "Arn": { @@ -5757,21 +5782,21 @@ "locationName": "category" }, "CreatedAt": { - "shape": "Slf", + "shape": "Slg", "locationName": "createdAt" }, "Description": { "locationName": "description" }, "LastUpdated": { - "shape": "Slf", + "shape": "Slg", "locationName": "lastUpdated" }, "Name": { "locationName": "name" }, "Settings": { - "shape": "Sm2", + "shape": "Sm3", "locationName": "settings" }, "Type": { @@ -5783,7 +5808,7 @@ "Name" ] }, - "Sm9": { + "Sma": { "type": "structure", "members": { "Commitment": { @@ -5803,21 +5828,21 @@ "RenewalType" ] }, - "Sme": { + "Smf": { "type": "structure", "members": { "Arn": { "locationName": "arn" }, "CreatedAt": { - "shape": "Slf", + "shape": "Slg", "locationName": "createdAt" }, "Description": { "locationName": "description" }, "LastUpdated": { - "shape": "Slf", + "shape": "Slg", "locationName": "lastUpdated" }, "Name": { @@ -5838,11 +5863,11 @@ "locationName": "commitment" }, "ExpiresAt": { - "shape": "Slf", + "shape": "Slg", "locationName": "expiresAt" }, "PurchasedAt": { - "shape": "Slf", + "shape": "Slg", "locationName": "purchasedAt" }, "RenewalType": { @@ -5872,7 +5897,7 @@ "Name" ] }, - "Sn2": { + "Sn3": { "type": "structure", "members": { "HttpInputs": { @@ -5886,10 +5911,10 @@ } } }, - "Sng": { + "Snh": { "type": "list", "member": { - "shape": "Sld" + "shape": "Sle" } } } diff --git a/apis/mediaconvert-2017-08-29.normal.json b/apis/mediaconvert-2017-08-29.normal.json index 5bde89e804..e0c18936e9 100644 --- a/apis/mediaconvert-2017-08-29.normal.json +++ b/apis/mediaconvert-2017-08-29.normal.json @@ -9,7 +9,10 @@ "jsonVersion": "1.1", "uid": "mediaconvert-2017-08-29", "signatureVersion": "v4", - "serviceAbbreviation": "MediaConvert" + "serviceAbbreviation": "MediaConvert", + "auth": [ + "aws.auth#sigv4" + ] }, "operations": { "AssociateCertificate": { @@ -3066,6 +3069,11 @@ "locationName": "codecSpecification", "documentation": "Specification to use (RFC-6381 or the default RFC-4281) during m3u8 playlist generation." }, + "DashIFrameTrickPlayNameModifier": { + "shape": "__stringMin1Max256", + "locationName": "dashIFrameTrickPlayNameModifier", + "documentation": "Specify whether MediaConvert generates I-frame only video segments for DASH trick play, also known as trick mode. When specified, the I-frame only video segments are included within an additional AdaptationSet in your DASH output manifest. To generate I-frame only video segments: Enter a name as a text string, up to 256 character long. This name is appended to the end of this output group's base filename, that you specify as part of your destination URI, and used for the I-frame only video segment files. You may also include format identifiers. For more information, see: https://docs.aws.amazon.com/mediaconvert/latest/ug/using-variables-in-your-job-settings.html#using-settings-variables-with-streaming-outputs To not generate I-frame only video segments: Leave blank." + }, "DashManifestStyle": { "shape": "DashManifestStyle", "locationName": "dashManifestStyle", @@ -4040,6 +4048,11 @@ "locationName": "baseUrl", "documentation": "A partial URI prefix that will be put in the manifest (.mpd) file at the top level BaseURL element. Can be used if streams are delivered from a different URL than the manifest file." }, + "DashIFrameTrickPlayNameModifier": { + "shape": "__stringMin1Max256", + "locationName": "dashIFrameTrickPlayNameModifier", + "documentation": "Specify whether MediaConvert generates I-frame only video segments for DASH trick play, also known as trick mode. When specified, the I-frame only video segments are included within an additional AdaptationSet in your DASH output manifest. To generate I-frame only video segments: Enter a name as a text string, up to 256 character long. This name is appended to the end of this output group's base filename, that you specify as part of your destination URI, and used for the I-frame only video segment files. You may also include format identifiers. For more information, see: https://docs.aws.amazon.com/mediaconvert/latest/ug/using-variables-in-your-job-settings.html#using-settings-variables-with-streaming-outputs To not generate I-frame only video segments: Leave blank." + }, "DashManifestStyle": { "shape": "DashManifestStyle", "locationName": "dashManifestStyle", @@ -7548,12 +7561,12 @@ "type": "structure", "members": { "EndTimecode": { - "shape": "__stringPattern010920405090509092", + "shape": "__stringPattern010920405090509092090909", "locationName": "endTimecode", "documentation": "Set End timecode to the end of the portion of the input you are clipping. The frame corresponding to the End timecode value is included in the clip. Start timecode or End timecode may be left blank, but not both. Use the format HH:MM:SS:FF or HH:MM:SS;FF, where HH is the hour, MM is the minute, SS is the second, and FF is the frame number. When choosing this value, take into account your setting for timecode source under input settings. For example, if you have embedded timecodes that start at 01:00:00:00 and you want your clip to end six minutes into the video, use 01:06:00:00." }, "StartTimecode": { - "shape": "__stringPattern010920405090509092", + "shape": "__stringPattern010920405090509092090909", "locationName": "startTimecode", "documentation": "Set Start timecode to the beginning of the portion of the input you are clipping. The frame corresponding to the Start timecode value is included in the clip. Start timecode or End timecode may be left blank, but not both. Use the format HH:MM:SS:FF or HH:MM:SS;FF, where HH is the hour, MM is the minute, SS is the second, and FF is the frame number. When choosing this value, take into account your setting for Input timecode source. For example, if you have embedded timecodes that start at 01:00:00:00 and you want your clip to begin five minutes into the video, use 01:05:00:00." } @@ -7778,10 +7791,30 @@ "InputVideoGenerator": { "type": "structure", "members": { + "Channels": { + "shape": "__integerMin1Max32", + "locationName": "channels", + "documentation": "Specify the number of audio channels to include in your video generator input. MediaConvert creates these audio channels as silent audio within a single audio track. Enter an integer from 1 to 32." + }, "Duration": { "shape": "__integerMin50Max86400000", "locationName": "duration", - "documentation": "Specify an integer value for Black video duration from 50 to 86400000 to generate a black video input for that many milliseconds. Required when you include Video generator." + "documentation": "Specify the duration, in milliseconds, for your video generator input.\nEnter an integer from 50 to 86400000." + }, + "FramerateDenominator": { + "shape": "__integerMin1Max1001", + "locationName": "framerateDenominator", + "documentation": "Specify the denominator of the fraction that represents the frame rate for your video generator input. When you do, you must also specify a value for Frame rate numerator. MediaConvert uses a default frame rate of 29.97 when you leave Frame rate numerator and Frame rate denominator blank." + }, + "FramerateNumerator": { + "shape": "__integerMin1Max60000", + "locationName": "framerateNumerator", + "documentation": "Specify the numerator of the fraction that represents the frame rate for your video generator input. When you do, you must also specify a value for Frame rate denominator. MediaConvert uses a default frame rate of 29.97 when you leave Frame rate numerator and Frame rate denominator blank." + }, + "SampleRate": { + "shape": "__integerMin32000Max48000", + "locationName": "sampleRate", + "documentation": "Specify the audio sample rate, in Hz, for the silent audio in your video generator input.\nEnter an integer from 32000 to 48000." } }, "documentation": "When you include Video generator, MediaConvert creates a video input with black frames. Use this setting if you do not have a video input or if you want to add black video frames before, or after, other inputs. You can specify Video generator, or you can specify an Input file, but you cannot specify both. For more information, see https://docs.aws.amazon.com/mediaconvert/latest/ug/video-generator.html" @@ -10500,7 +10533,7 @@ "documentation": "Use Extension to specify the file extension for outputs in File output groups. If you do not specify a value, the service will use default extensions by container type as follows * MPEG-2 transport stream, m2ts * Quicktime, mov * MXF container, mxf * MPEG-4 container, mp4 * WebM container, webm * No Container, the service will use codec extensions (e.g. AAC, H265, H265, AC3)" }, "NameModifier": { - "shape": "__stringMin1", + "shape": "__stringMin1Max256", "locationName": "nameModifier", "documentation": "Use Name modifier to have the service add a string to the end of each output filename. You specify the base filename as part of your destination URI. When you create multiple outputs in the same output group, Name modifier is required. Name modifier also accepts format identifiers. For DASH ISO outputs, if you use the format identifiers $Number$ or $Time$ in one output, you must use them in the same way in all outputs of the output group." }, @@ -14263,6 +14296,10 @@ "type": "string", "pattern": "^([01][0-9]|2[0-4]):[0-5][0-9]:[0-5][0-9][:;][0-9]{2}$" }, + "__stringPattern010920405090509092090909": { + "type": "string", + "pattern": "^([01][0-9]|2[0-4]):[0-5][0-9]:[0-5][0-9][:;][0-9]{2}(@[0-9]+(\\.[0-9]+)?(:[0-9]+)?)?$" + }, "__stringPattern01D20305D205D": { "type": "string", "pattern": "^((([0-1]\\d)|(2[0-3]))(:[0-5]\\d){2}([:;][0-5]\\d))$" diff --git a/apis/secretsmanager-2017-10-17.normal.json b/apis/secretsmanager-2017-10-17.normal.json index fb47ece522..2a1b9558bf 100644 --- a/apis/secretsmanager-2017-10-17.normal.json +++ b/apis/secretsmanager-2017-10-17.normal.json @@ -125,7 +125,7 @@ "shape": "DecryptionFailure" } ], - "documentation": "Creates a new secret. A secret can be a password, a set of credentials such as a user name and password, an OAuth token, or other secret information that you store in an encrypted form in Secrets Manager. The secret also includes the connection information to access a database or other service, which Secrets Manager doesn't encrypt. A secret in Secrets Manager consists of both the protected secret data and the important information needed to manage the secret.
For secrets that use managed rotation, you need to create the secret through the managing service. For more information, see Secrets Manager secrets managed by other Amazon Web Services services.
For information about creating a secret in the console, see Create a secret.
To create a secret, you can provide the secret value to be encrypted in either the SecretString
parameter or the SecretBinary
parameter, but not both. If you include SecretString
or SecretBinary
then Secrets Manager creates an initial secret version and automatically attaches the staging label AWSCURRENT
to it.
For database credentials you want to rotate, for Secrets Manager to be able to rotate the secret, you must make sure the JSON you store in the SecretString
matches the JSON structure of a database secret.
If you don't specify an KMS encryption key, Secrets Manager uses the Amazon Web Services managed key aws/secretsmanager
. If this key doesn't already exist in your account, then Secrets Manager creates it for you automatically. All users and roles in the Amazon Web Services account automatically have access to use aws/secretsmanager
. Creating aws/secretsmanager
can result in a one-time significant delay in returning the result.
If the secret is in a different Amazon Web Services account from the credentials calling the API, then you can't use aws/secretsmanager
to encrypt the secret, and you must create and use a customer managed KMS key.
Secrets Manager generates a CloudTrail log entry when you call this action. Do not include sensitive information in request parameters except SecretBinary
or SecretString
because it might be logged. For more information, see Logging Secrets Manager events with CloudTrail.
Required permissions: secretsmanager:CreateSecret
. If you include tags in the secret, you also need secretsmanager:TagResource
. For more information, see IAM policy actions for Secrets Manager and Authentication and access control in Secrets Manager.
To encrypt the secret with a KMS key other than aws/secretsmanager
, you need kms:GenerateDataKey
and kms:Decrypt
permission to the key.
Creates a new secret. A secret can be a password, a set of credentials such as a user name and password, an OAuth token, or other secret information that you store in an encrypted form in Secrets Manager. The secret also includes the connection information to access a database or other service, which Secrets Manager doesn't encrypt. A secret in Secrets Manager consists of both the protected secret data and the important information needed to manage the secret.
For secrets that use managed rotation, you need to create the secret through the managing service. For more information, see Secrets Manager secrets managed by other Amazon Web Services services.
For information about creating a secret in the console, see Create a secret.
To create a secret, you can provide the secret value to be encrypted in either the SecretString
parameter or the SecretBinary
parameter, but not both. If you include SecretString
or SecretBinary
then Secrets Manager creates an initial secret version and automatically attaches the staging label AWSCURRENT
to it.
For database credentials you want to rotate, for Secrets Manager to be able to rotate the secret, you must make sure the JSON you store in the SecretString
matches the JSON structure of a database secret.
If you don't specify an KMS encryption key, Secrets Manager uses the Amazon Web Services managed key aws/secretsmanager
. If this key doesn't already exist in your account, then Secrets Manager creates it for you automatically. All users and roles in the Amazon Web Services account automatically have access to use aws/secretsmanager
. Creating aws/secretsmanager
can result in a one-time significant delay in returning the result.
If the secret is in a different Amazon Web Services account from the credentials calling the API, then you can't use aws/secretsmanager
to encrypt the secret, and you must create and use a customer managed KMS key.
Secrets Manager generates a CloudTrail log entry when you call this action. Do not include sensitive information in request parameters except SecretBinary
or SecretString
because it might be logged. For more information, see Logging Secrets Manager events with CloudTrail.
Required permissions: secretsmanager:CreateSecret
. If you include tags in the secret, you also need secretsmanager:TagResource
. To add replica Regions, you must also have secretsmanager:ReplicateSecretToRegions
. For more information, see IAM policy actions for Secrets Manager and Authentication and access control in Secrets Manager.
To encrypt the secret with a KMS key other than aws/secretsmanager
, you need kms:GenerateDataKey
and kms:Decrypt
permission to the key.
Specifies whether to rotate the secret immediately or wait until the next scheduled rotation window. The rotation schedule is defined in RotateSecretRequest$RotationRules.
For secrets that use a Lambda rotation function to rotate, if you don't immediately rotate the secret, Secrets Manager tests the rotation configuration by running the testSecret
step of the Lambda rotation function. The test creates an AWSPENDING
version of the secret and then removes it.
By default, Secrets Manager rotates the secret immediately.
", + "documentation": "Specifies whether to rotate the secret immediately or wait until the next scheduled rotation window. The rotation schedule is defined in RotateSecretRequest$RotationRules.
For secrets that use a Lambda rotation function to rotate, if you don't immediately rotate the secret, Secrets Manager tests the rotation configuration by running the testSecret
step of the Lambda rotation function. The test creates an AWSPENDING
version of the secret and then removes it.
By default, Secrets Manager rotates the secret immediately.
", "box": true } } diff --git a/apis/waf-2015-08-24.min.json b/apis/waf-2015-08-24.min.json index ca099110a6..f4fe8f3bb2 100644 --- a/apis/waf-2015-08-24.min.json +++ b/apis/waf-2015-08-24.min.json @@ -5,12 +5,18 @@ "endpointPrefix": "waf", "jsonVersion": "1.1", "protocol": "json", + "protocols": [ + "json" + ], "serviceAbbreviation": "WAF", "serviceFullName": "AWS WAF", "serviceId": "WAF", "signatureVersion": "v4", "targetPrefix": "AWSWAF_20150824", - "uid": "waf-2015-08-24" + "uid": "waf-2015-08-24", + "auth": [ + "aws.auth#sigv4" + ] }, "operations": { "CreateByteMatchSet": { diff --git a/apis/waf-2015-08-24.normal.json b/apis/waf-2015-08-24.normal.json index 937a9e0f29..bdb4528359 100644 --- a/apis/waf-2015-08-24.normal.json +++ b/apis/waf-2015-08-24.normal.json @@ -5,12 +5,18 @@ "endpointPrefix": "waf", "jsonVersion": "1.1", "protocol": "json", + "protocols": [ + "json" + ], "serviceAbbreviation": "WAF", "serviceFullName": "AWS WAF", "serviceId": "WAF", "signatureVersion": "v4", "targetPrefix": "AWSWAF_20150824", - "uid": "waf-2015-08-24" + "uid": "waf-2015-08-24", + "auth": [ + "aws.auth#sigv4" + ] }, "operations": { "CreateByteMatchSet": { diff --git a/clients/acmpca.d.ts b/clients/acmpca.d.ts index 24ed4e707f..4039a011f0 100644 --- a/clients/acmpca.d.ts +++ b/clients/acmpca.d.ts @@ -109,11 +109,11 @@ declare class ACMPCA extends Service { */ getPolicy(callback?: (err: AWSError, data: ACMPCA.Types.GetPolicyResponse) => void): Request>1,l=23===i?Math.pow(2,-24)-Math.pow(2,-77):0,d=a?0:s-1,y=a?1:-1,b=t<0||0===t&&1/t<0?1:0;for(t=Math.abs(t),isNaN(t)||t===1/0?(n=isNaN(t)?1:0,o=m):(o=Math.floor(Math.log(t)/Math.LN2),t*(u=Math.pow(2,-o))<1&&(o--,u*=2),t+=o+c>=1?l/u:l*Math.pow(2,1-c),t*u>=2&&(o++,u/=2),o+c>=m?(n=0,o=m):o+c>=1?(n=(t*u-1)*Math.pow(2,i),o+=c):(n=t*Math.pow(2,c-1)*Math.pow(2,i),o=0));i>=8;e[r+d]=255&n,d+=y,n/=256,i-=8);for(o=o<0;e[r+d]=255&o,d+=y,o/=256,p-=8);e[r+d-y]|=128*b}},{}],443:[function(e,t,r){var a={}.toString;t.exports=Array.isArray||function(e){return"[object Array]"==a.call(e)}},{}],444:[function(e,t,r){!function(e){"use strict";function t(e){return null!==e&&"[object Array]"===Object.prototype.toString.call(e)}function r(e){return null!==e&&"[object Object]"===Object.prototype.toString.call(e)}function a(e,i){if(e===i)return!0;if(Object.prototype.toString.call(e)!==Object.prototype.toString.call(i))return!1;if(!0===t(e)){if(e.length!==i.length)return!1;for(var s=0;s G((f-r)/g)&&i("overflow"),r+=(p-t)*g,t=p,u=0;u =0?(c=b.substr(0,S),l=b.substr(S+1)):(c=b,l=""),d=decodeURIComponent(c),y=decodeURIComponent(l),a(o,d)?i(o[d])?o[d].push(y):o[d]=[o[d],y]:o[d]=y}return o};var i=Array.isArray||function(e){return"[object Array]"===Object.prototype.toString.call(e)}},{}],448:[function(e,t,r){"use strict";function a(e,t){if(e.map)return e.map(t);for(var r=[],a=0;a >1,l=23===i?Math.pow(2,-24)-Math.pow(2,-77):0,d=a?0:s-1,y=a?1:-1,b=t<0||0===t&&1/t<0?1:0;for(t=Math.abs(t),isNaN(t)||t===1/0?(n=isNaN(t)?1:0,o=m):(o=Math.floor(Math.log(t)/Math.LN2),t*(u=Math.pow(2,-o))<1&&(o--,u*=2),t+=o+c>=1?l/u:l*Math.pow(2,1-c),t*u>=2&&(o++,u/=2),o+c>=m?(n=0,o=m):o+c>=1?(n=(t*u-1)*Math.pow(2,i),o+=c):(n=t*Math.pow(2,c-1)*Math.pow(2,i),o=0));i>=8;e[r+d]=255&n,d+=y,n/=256,i-=8);for(o=o<0;e[r+d]=255&o,d+=y,o/=256,p-=8);e[r+d-y]|=128*b}},{}],443:[function(e,t,r){var a={}.toString;t.exports=Array.isArray||function(e){return"[object Array]"==a.call(e)}},{}],444:[function(e,t,r){!function(e){"use strict";function t(e){return null!==e&&"[object Array]"===Object.prototype.toString.call(e)}function r(e){return null!==e&&"[object Object]"===Object.prototype.toString.call(e)}function a(e,i){if(e===i)return!0;if(Object.prototype.toString.call(e)!==Object.prototype.toString.call(i))return!1;if(!0===t(e)){if(e.length!==i.length)return!1;for(var s=0;s G((f-r)/g)&&i("overflow"),r+=(p-t)*g,t=p,u=0;u =0?(c=b.substr(0,S),l=b.substr(S+1)):(c=b,l=""),d=decodeURIComponent(c),y=decodeURIComponent(l),a(o,d)?i(o[d])?o[d].push(y):o[d]=[o[d],y]:o[d]=y}return o};var i=Array.isArray||function(e){return"[object Array]"===Object.prototype.toString.call(e)}},{}],448:[function(e,t,r){"use strict";function a(e,t){if(e.map)return e.map(t);for(var r=[],a=0;a=55296&&t<=56319&&i65535&&(e-=65536,t+=w(e>>>10&1023|55296),e=56320|1023&e),t+=w(e)}).join("")}function p(e){return e-48<10?e-22:e-65<26?e-65:e-97<26?e-97:T}function m(e,t){return e+22+75*(e<26)-((0!=t)<<5)}function c(e,t,r){var a=0;for(e=r?G(e/R):e>>1,e+=G(e/t);e>L*k>>1;a+=T)e=G(e/L);return G(a+(L+1)*e/(e+A))}function l(e){var t,r,a,s,o,n,m,l,d,y,b=[],S=e.length,g=0,h=v,I=D;for(r=e.lastIndexOf(x),r<0&&(r=0),a=0;a=S&&i("invalid-input"),l=p(e.charCodeAt(s++)),(l>=T||l>G((f-g)/n))&&i("overflow"),g+=l*n,d=m<=I?C:m>=I+k?k:m-I,!(l=t&&bf&&i("overflow"),b==t){for(l=r,d=T;y=d<=o?C:d>=o+k?k:d-o,!(l=0&&delete e.httpRequest.headers["Content-Length"]}function i(e){var t=new d,r=e.service.api.operations[e.operation].input;if(r.payload){var a={},i=r.members[r.payload];a=e.params[r.payload],"structure"===i.type?(e.httpRequest.body=t.build(a||{},i),s(e)):void 0!==a&&(e.httpRequest.body=a,("binary"===i.type||i.isStreaming)&&s(e,!0))}else e.httpRequest.body=t.build(e.params,r),s(e)}function s(e,t){if(!e.httpRequest.headers["Content-Type"]){var r=t?"binary/octet-stream":"application/json";e.httpRequest.headers["Content-Type"]=r}}function o(e){c.buildRequest(e),b.indexOf(e.httpRequest.method)<0&&i(e)}function n(e){l.extractError(e)}function u(e){c.extractData(e);var t,r=e.request,a=r.service.api.operations[r.operation],i=r.service.api.operations[r.operation].output||{};a.hasEventOutput;if(i.payload){var s=i.members[i.payload],o=e.httpResponse.body;if(s.isEventStream)t=new y,e.data[i.payload]=m.createEventStream(2===p.HttpClient.streamsApiVersion?e.httpResponse.stream:o,t,s);else if("structure"===s.type||"list"===s.type){var t=new y;e.data[i.payload]=t.parse(o,s)}else"binary"===s.type||s.isStreaming?e.data[i.payload]=o:e.data[i.payload]=s.toType(o)}else{var n=e.data;l.extractData(e),e.data=m.merge(n,e.data)}}var p=e("../core"),m=e("../util"),c=e("./rest"),l=e("./json"),d=e("../json/builder"),y=e("../json/parser"),b=["GET","HEAD","DELETE"];t.exports={buildRequest:o,extractError:n,extractData:u,unsetContentLength:a}},{"../core":350,"../json/builder":374,"../json/parser":375,"../util":428,"./json":386,"./rest":388}],390:[function(e,t,r){function a(e){var t=e.service.api.operations[e.operation].input,r=new n.XML.Builder,a=e.params,i=t.payload;if(i){var s=t.members[i];if(void 0===(a=a[i]))return;if("structure"===s.type){var o=s.name;e.httpRequest.body=r.toXML(a,s,o,!0)}else e.httpRequest.body=a}else e.httpRequest.body=r.toXML(a,t,t.name||t.shape||u.string.upperFirst(e.operation)+"Request")}function i(e){p.buildRequest(e),["GET","HEAD"].indexOf(e.httpRequest.method)<0&&a(e)}function s(e){p.extractError(e);var t;try{t=(new n.XML.Parser).parse(e.httpResponse.body.toString())}catch(r){t={Code:e.httpResponse.statusCode,Message:e.httpResponse.statusMessage}}t.Errors&&(t=t.Errors),t.Error&&(t=t.Error),t.Code?e.error=u.error(new Error,{code:t.Code,message:t.Message}):e.error=u.error(new Error,{code:e.httpResponse.statusCode,message:null})}function o(e){p.extractData(e);var t,r=e.request,a=e.httpResponse.body,i=r.service.api.operations[r.operation],s=i.output,o=(i.hasEventOutput,s.payload);if(o){var m=s.members[o];m.isEventStream?(t=new n.XML.Parser,e.data[o]=u.createEventStream(2===n.HttpClient.streamsApiVersion?e.httpResponse.stream:e.httpResponse.body,t,m)):"structure"===m.type?(t=new n.XML.Parser,e.data[o]=t.parse(a.toString(),m)):"binary"===m.type||m.isStreaming?e.data[o]=a:e.data[o]=m.toType(a)}else if(a.length>0){t=new n.XML.Parser;var c=t.parse(a.toString(),s);u.update(e.data,c)}}var n=e("../core"),u=e("../util"),p=e("./rest");t.exports={buildRequest:i,extractError:s,extractData:o}},{"../core":350,"../util":428,"./rest":388}],391:[function(e,t,r){function a(){}function i(e){return e.isQueryName||"ec2"!==e.api.protocol?e.name:e.name[0].toUpperCase()+e.name.substr(1)}function s(e,t,r,a){p.each(r.members,function(r,s){var o=t[r];if(null!==o&&void 0!==o){var n=i(s);n=e?e+"."+n:n,u(n,o,s,a)}})}function o(e,t,r,a){var i=1;p.each(t,function(t,s){var o=r.flattened?".":".entry.",n=o+i+++".",p=n+(r.key.name||"key"),m=n+(r.value.name||"value");u(e+p,t,r.key,a),u(e+m,s,r.value,a)})}function n(e,t,r,a){var s=r.member||{};if(0===t.length)return void("ec2"!==r.api.protocol&&a.call(this,e,null));p.arrayEach(t,function(t,o){var n="."+(o+1);if("ec2"===r.api.protocol)n+="";else if(r.flattened){if(s.name){var p=e.split(".");p.pop(),p.push(i(s)),e=p.join(".")}}else n="."+(s.name?s.name:"member")+n;u(e+n,t,s,a)})}function u(e,t,r,a){null!==t&&void 0!==t&&("structure"===r.type?s(e,t,r,a):"list"===r.type?n(e,t,r,a):"map"===r.type?o(e,t,r,a):a(e,r.toWireFormat(t).toString()))}var p=e("../util");a.prototype.serialize=function(e,t,r){s("",e,t,r)},t.exports=a},{"../util":428}],392:[function(e,t,r){var a=e("../core"),i=null,s={signatureVersion:"v4",signingName:"rds-db",operations:{}},o={region:"string",hostname:"string",port:"number",username:"string"};a.RDS.Signer=a.util.inherit({constructor:function(e){this.options=e||{}},convertUrlToAuthToken:function(e){if(0===e.indexOf("https://"))return e.substring("https://".length)},getAuthToken:function(e,t){"function"==typeof e&&void 0===t&&(t=e,e={});var r=this,o="function"==typeof t;e=a.util.merge(this.options,e);var n=this.validateAuthTokenOptions(e);if(!0!==n){if(o)return t(n,null);throw n}var u={region:e.region,endpoint:new a.Endpoint(e.hostname+":"+e.port),paramValidation:!1,signatureVersion:"v4"};e.credentials&&(u.credentials=e.credentials),i=new a.Service(u),i.api=s;var p=i.makeRequest();if(this.modifyRequestForAuthToken(p,e),!o){var m=p.presign(900);return this.convertUrlToAuthToken(m)}p.presign(900,function(e,a){a&&(a=r.convertUrlToAuthToken(a)),t(e,a)})},modifyRequestForAuthToken:function(e,t){e.on("build",e.buildAsGet),e.httpRequest.body=a.util.queryParamsToString({Action:"connect",DBUser:t.username})},validateAuthTokenOptions:function(e){var t="";e=e||{};for(var r in o)Object.prototype.hasOwnProperty.call(o,r)&&typeof e[r]!==o[r]&&(t+="option '"+r+"' should have been type '"+o[r]+"', was '"+typeof e[r]+"'.\n");return!t.length||a.util.error(new Error,{code:"InvalidParameter",message:t})}})},{"../core":350}],393:[function(e,t,r){t.exports={now:function(){return"undefined"!=typeof performance&&"function"==typeof performance.now?performance.now():Date.now()}}},{}],394:[function(e,t,r){function a(e){return"string"==typeof e&&(e.startsWith("fips-")||e.endsWith("-fips"))}function i(e){return"string"==typeof e&&["aws-global","aws-us-gov-global"].includes(e)}function s(e){return["fips-aws-global","aws-fips","aws-global"].includes(e)?"us-east-1":["fips-aws-us-gov-global","aws-us-gov-global"].includes(e)?"us-gov-west-1":e.replace(/fips-(dkr-|prod-)?|-fips/,"")}t.exports={isFipsRegion:a,isGlobalRegion:i,getRealRegion:s}},{}],395:[function(e,t,r){function a(e){if(!e)return null;var t=e.split("-");return t.length<3?null:t.slice(0,t.length-2).join("-")+"-*"}function i(e){var t=e.config.region,r=a(t),i=e.api.endpointPrefix;return[[t,i],[r,i],[t,"*"],[r,"*"],["*",i],[t,"internal-*"],["*","*"]].map(function(e){return e[0]&&e[1]?e.join("/"):null})}function s(e,t){u.each(t,function(t,r){"globalEndpoint"!==t&&(void 0!==e.config[t]&&null!==e.config[t]||(e.config[t]=r))})}function o(e){for(var t=i(e),r=e.config.useFipsEndpoint,a=e.config.useDualstackEndpoint,o=0;o=a())throw new RangeError("Attempt to allocate Buffer larger than maximum size: 0x"+a().toString(16)+" bytes");return 0|e}function b(e){return+e!=e&&(e=0),s.alloc(+e)}function S(e,t){if(s.isBuffer(e))return e.length;if("undefined"!=typeof ArrayBuffer&&"function"==typeof ArrayBuffer.isView&&(ArrayBuffer.isView(e)||e instanceof ArrayBuffer))return e.byteLength;"string"!=typeof e&&(e=""+e);var r=e.length;if(0===r)return 0;for(var a=!1;;)switch(t){case"ascii":case"latin1":case"binary":return r;case"utf8":case"utf-8":case void 0:return K(e).length;case"ucs2":case"ucs-2":case"utf16le":case"utf-16le":return 2*r;case"hex":return r>>>1;case"base64":return H(e).length;default:if(a)return K(e).length;t=(""+t).toLowerCase(),a=!0}}function g(e,t,r){var a=!1;if((void 0===t||t<0)&&(t=0),t>this.length)return"";if((void 0===r||r>this.length)&&(r=this.length),r<=0)return"";if(r>>>=0,t>>>=0,r<=t)return"";for(e||(e="utf8");;)switch(e){case"hex":return E(this,t,r);case"utf8":case"utf-8":return v(this,t,r);case"ascii":return P(this,t,r);case"latin1":case"binary":return q(this,t,r);case"base64":return D(this,t,r);case"ucs2":case"ucs-2":case"utf16le":case"utf-16le":return M(this,t,r);default:if(a)throw new TypeError("Unknown encoding: "+e);e=(e+"").toLowerCase(),a=!0}}function h(e,t,r){var a=e[t];e[t]=e[r],e[r]=a}function I(e,t,r,a,i){if(0===e.length)return-1;if("string"==typeof r?(a=r,r=0):r>2147483647?r=2147483647:r<-2147483648&&(r=-2147483648),r=+r,isNaN(r)&&(r=i?0:e.length-1),r<0&&(r=e.length+r),r>=e.length){if(i)return-1;r=e.length-1}else if(r<0){if(!i)return-1;r=0}if("string"==typeof t&&(t=s.from(t,a)),s.isBuffer(t))return 0===t.length?-1:N(e,t,r,a,i);if("number"==typeof t)return t&=255,s.TYPED_ARRAY_SUPPORT&&"function"==typeof Uint8Array.prototype.indexOf?i?Uint8Array.prototype.indexOf.call(e,t,r):Uint8Array.prototype.lastIndexOf.call(e,t,r):N(e,[t],r,a,i);throw new TypeError("val must be string, number or Buffer")}function N(e,t,r,a,i){function s(e,t){return 1===o?e[t]:e.readUInt16BE(t*o)}var o=1,n=e.length,u=t.length;if(void 0!==a&&("ucs2"===(a=String(a).toLowerCase())||"ucs-2"===a||"utf16le"===a||"utf-16le"===a)){if(e.length<2||t.length<2)return-1;o=2,n/=2,u/=2,r/=2}var p;if(i){var m=-1;for(p=r;p>>8*(a?i:1-i)}function B(e,t,r,a){t<0&&(t=4294967295+t+1);for(var i=0,s=Math.min(e.length-r,4);i>>8*(a?i:3-i)&255}function U(e,t,r,a,i,s){if(r+a>e.length)throw new RangeError("Index out of range");if(r<0)throw new RangeError("Index out of range")}function _(e,t,r,a,i){return i||U(e,t,r,4,3.4028234663852886e38,-3.4028234663852886e38),X.write(e,t,r,a,23,4),r+4}function F(e,t,r,a,i){return i||U(e,t,r,8,1.7976931348623157e308,-1.7976931348623157e308),X.write(e,t,r,a,52,8),r+8}function O(e){if(e=V(e).replace(ee,""),e.length<2)return"";for(;e.length%4!=0;)e+="=";return e}function V(e){return e.trim?e.trim():e.replace(/^\s+|\s+$/g,"")}function z(e){return e<16?"0"+e.toString(16):e.toString(16)}function K(e,t){t=t||1/0;for(var r,a=e.length,i=null,s=[],o=0;o55295&&r<57344){if(!i){if(r>56319){(t-=3)>-1&&s.push(239,191,189);continue}if(o+1===a){(t-=3)>-1&&s.push(239,191,189);continue}i=r;continue}if(r<56320){(t-=3)>-1&&s.push(239,191,189),i=r;continue}r=65536+(i-55296<<10|r-56320)}else i&&(t-=3)>-1&&s.push(239,191,189);if(i=null,r<128){if((t-=1)<0)break;s.push(r)}else if(r<2048){if((t-=2)<0)break;s.push(r>>6|192,63&r|128)}else if(r<65536){if((t-=3)<0)break;s.push(r>>12|224,r>>6&63|128,63&r|128)}else{if(!(r<1114112))throw new Error("Invalid code point");if((t-=4)<0)break;s.push(r>>18|240,r>>12&63|128,r>>6&63|128,63&r|128)}}return s}function j(e){for(var t=[],r=0;r=55296&&t<=56319&&i65535&&(e-=65536,t+=w(e>>>10&1023|55296),e=56320|1023&e),t+=w(e)}).join("")}function p(e){return e-48<10?e-22:e-65<26?e-65:e-97<26?e-97:T}function m(e,t){return e+22+75*(e<26)-((0!=t)<<5)}function c(e,t,r){var a=0;for(e=r?G(e/R):e>>1,e+=G(e/t);e>L*k>>1;a+=T)e=G(e/L);return G(a+(L+1)*e/(e+A))}function l(e){var t,r,a,s,o,n,m,l,d,y,b=[],S=e.length,g=0,h=v,I=D;for(r=e.lastIndexOf(x),r<0&&(r=0),a=0;a=S&&i("invalid-input"),l=p(e.charCodeAt(s++)),(l>=T||l>G((f-g)/n))&&i("overflow"),g+=l*n,d=m<=I?C:m>=I+k?k:m-I,!(l=t&&bf&&i("overflow"),b==t){for(l=r,d=T;y=d<=o?C:d>=o+k?k:d-o,!(l