Update to latest models

.changes/next-release/api-change-bedrockagentruntime-32801.json

@@ -0,0 +1,5 @@
+{
+  "type": "api-change",
+  "category": "``bedrock-agent-runtime``",
+  "description": "This release adds support to provide guardrail configuration and modify inference parameters that are then used in RetrieveAndGenerate API in Agents for Amazon Bedrock."
+}

.changes/next-release/api-change-pinpoint-56119.json

@@ -0,0 +1,5 @@
+{
+  "type": "api-change",
+  "category": "``pinpoint``",
+  "description": "This release adds support for specifying email message headers for Email Templates, Campaigns, Journeys and Send Messages."
+}

.changes/next-release/api-change-route53resolver-73637.json

@@ -0,0 +1,5 @@
+{
+  "type": "api-change",
+  "category": "``route53resolver``",
+  "description": "Update the DNS Firewall settings to correct a spelling issue."
+}

.changes/next-release/api-change-ssmsap-47341.json

@@ -0,0 +1,5 @@
+{
+  "type": "api-change",
+  "category": "``ssm-sap``",
+  "description": "Added support for application-aware start/stop of SAP applications running on EC2 instances, with SSM for SAP"
+}

.changes/next-release/api-change-verifiedpermissions-93183.json

@@ -0,0 +1,5 @@
+{
+  "type": "api-change",
+  "category": "``verifiedpermissions``",
+  "description": "Adds policy effect and actions fields to Policy API's."
+}

botocore/data/pinpoint/2016-12-01/service-2.json

@@ -6767,6 +6767,10 @@
           "shape": "__string",
           "documentation": "<p>The verified email address to send the email from. The default address is the FromAddress specified for the email channel for the application.</p>"
         },
+        "Headers": {
+           "shape": "ListOfMessageHeader",
+           "documentation": "<p>The list of <a href=\"https://docs.aws.amazon.com/pinpoint/latest/apireference/apps-application-id-campaigns-campaign-id.html#apps-application-id-campaigns-campaign-id-model-messageheader\">MessageHeaders</a> for the email. You can have up to 15 MessageHeaders for each email.</p>"
+        },
         "HtmlBody": {
           "shape": "__string",
           "documentation": "<p>The body of the email, in HTML format, for recipients whose email clients render HTML content.</p>"
@@ -8693,6 +8697,10 @@
           "shape": "__string",
           "documentation": "<p>The subject line, or title, to use in email messages that are based on the message template.</p>"
         },
+        "Headers": {
+           "shape": "ListOfMessageHeader",
+           "documentation": "<p>The list of <a href=\"https://docs.aws.amazon.com/pinpoint/latest/apireference/templates-template-name-email.html#templates-template-name-email-model-messageheader\">MessageHeaders</a> for the email. You can have up to 15 Headers.</p>"
+        },
         "tags": {
           "shape": "MapOf__string",
           "locationName": "tags",
@@ -8740,6 +8748,10 @@
           "shape": "__string",
           "documentation": "<p>The subject line, or title, that's used in email messages that are based on the message template.</p>"
         },
+        "Headers": {
+           "shape": "ListOfMessageHeader",
+           "documentation": "<p>The list of <a href=\"https://docs.aws.amazon.com/pinpoint/latest/apireference/templates-template-name-email.html#templates-template-name-email-model-messageheader\">MessageHeaders</a> for the email. You can have up to 15 Headers.</p>"
+        },
         "tags": {
           "shape": "MapOf__string",
           "locationName": "tags",
@@ -14375,10 +14387,34 @@
         "TextPart": {
           "shape": "SimpleEmailPart",
           "documentation": "<p>The body of the email message, in plain text format. We recommend using plain text format for email clients that don't render HTML content and clients that are connected to high-latency networks, such as mobile devices.</p>"
+        },
+        "Headers": {
+           "shape": "ListOfMessageHeader",
+           "documentation": "<p>The list of MessageHeaders for the email. You can have up to 15 Headers.</p>"
         }
       },
       "documentation": "<p>Specifies the contents of an email message, composed of a subject, a text part, and an HTML part.</p>"
     },
+    "ListOfMessageHeader": {
+       "type": "list",
+       "member": {
+         "shape": "MessageHeader"
+       }
+    },
+    "MessageHeader": {
+       "type": "structure",
+       "members": {
+         "Name": {
+           "shape": "__string",
+           "documentation": "<p>The name of the message header. The header name can contain up to 126 characters.</p>"
+         },
+         "Value": {
+           "shape": "__string",
+           "documentation": "<p>The value of the message header. The header value can contain up to 870 characters, including the length of any rendered attributes. For example if you add the {CreationDate} attribute, it renders as YYYY-MM-DDTHH:MM:SS.SSSZ and is 24 characters in length.</p>"
+         }
+       },
+       "documentation": "<p>Contains the name and value pair of an email header to add to your email. You can have up to 15 MessageHeaders. A header can contain information such as the sender, receiver, route, or timestamp.</p>"
+    },
     "SimpleEmailPart": {
       "type": "structure",
       "members": {

botocore/data/route53resolver/2018-04-01/service-2.json

@@ -1539,7 +1539,7 @@
         },
         "FirewallDomainRedirectionAction":{
           "shape":"FirewallDomainRedirectionAction",
-          "documentation":"<p> How you want the the rule to evaluate DNS redirection in the DNS redirection chain, such as CNAME, DNAME, ot ALIAS. </p> <p> <code>Inspect_Redirection_Domain </code>(Default) inspects all domains in the redirection chain. The individual domains in the redirection chain must be added to the allow domain list.</p> <p> <code>Trust_Redirection_Domain </code> inspects only the first domain in the redirection chain. You don't need to add the subsequent domains in the redirection list to the domain alloww list.</p>",
+          "documentation":"<p> How you want the the rule to evaluate DNS redirection in the DNS redirection chain, such as CNAME or DNAME. </p> <p> <code>Inspect_Redirection_Domain </code>(Default) inspects all domains in the redirection chain. The individual domains in the redirection chain must be added to the domain list.</p> <p> <code>Trust_Redirection_Domain </code> inspects only the first domain in the redirection chain. You don't need to add the subsequent domains in the domain in the redirection list to the domain list.</p>",
           "box":true
         },
         "Qtype":{
@@ -2252,7 +2252,7 @@
         },
         "FirewallDomainRedirectionAction":{
           "shape":"FirewallDomainRedirectionAction",
-          "documentation":"<p> How you want the the rule to evaluate DNS redirection in the DNS redirection chain, such as CNAME, DNAME, ot ALIAS. </p> <p> <code>Inspect_Redirection_Domain </code>(Default) inspects all domains in the redirection chain. The individual domains in the redirection chain must be added to the allow domain list.</p> <p> <code>Trust_Redirection_Domain </code> inspects only the first domain in the redirection chain. You don't need to add the subsequent domains in the domain in the redirection list to the domain alloww list.</p>"
+          "documentation":"<p> How you want the the rule to evaluate DNS redirection in the DNS redirection chain, such as CNAME or DNAME. </p> <p> <code>Inspect_Redirection_Domain </code>(Default) inspects all domains in the redirection chain. The individual domains in the redirection chain must be added to the domain list.</p> <p> <code>Trust_Redirection_Domain </code> inspects only the first domain in the redirection chain. You don't need to add the subsequent domains in the domain in the redirection list to the domain list.</p>"
         },
         "Qtype":{
           "shape":"Qtype",
@@ -4590,7 +4590,7 @@
         },
         "FirewallDomainRedirectionAction":{
           "shape":"FirewallDomainRedirectionAction",
-          "documentation":"<p> How you want the the rule to evaluate DNS redirection in the DNS redirection chain, such as CNAME, DNAME, ot ALIAS. </p> <p> <code>Inspect_Redirection_Domain </code>(Default) inspects all domains in the redirection chain. The individual domains in the redirection chain must be added to the allow domain list.</p> <p> <code>Trust_Redirection_Domain </code> inspects only the first domain in the redirection chain. You don't need to add the subsequent domains in the domain in the redirection list to the domain alloww list.</p>",
+          "documentation":"<p> How you want the the rule to evaluate DNS redirection in the DNS redirection chain, such as CNAME or DNAME. </p> <p> <code>Inspect_Redirection_Domain </code>(Default) inspects all domains in the redirection chain. The individual domains in the redirection chain must be added to the domain list.</p> <p> <code>Trust_Redirection_Domain </code> inspects only the first domain in the redirection chain. You don't need to add the subsequent domains in the domain in the redirection list to the domain list.</p>",
           "box":true
         },
         "Qtype":{

botocore/data/ssm-sap/2018-05-10/paginators-1.json

@@ -23,6 +23,12 @@
       "output_token": "NextToken",
       "limit_key": "MaxResults",
       "result_key": "Operations"
+    },
+    "ListOperationEvents": {
+      "input_token": "NextToken",
+      "output_token": "NextToken",
+      "limit_key": "MaxResults",
+      "result_key": "OperationEvents"
     }
   }
 }

botocore/data/ssm-sap/2018-05-10/service-2.json

@@ -171,6 +171,21 @@
       ],
       "documentation":"<p>Lists the SAP HANA databases of an application registered with AWS Systems Manager for SAP.</p>"
     },
+    "ListOperationEvents":{
+      "name":"ListOperationEvents",
+      "http":{
+        "method":"POST",
+        "requestUri":"/list-operation-events",
+        "responseCode":200
+      },
+      "input":{"shape":"ListOperationEventsInput"},
+      "output":{"shape":"ListOperationEventsOutput"},
+      "errors":[
+        {"shape":"ValidationException"},
+        {"shape":"InternalServerException"}
+      ],
+      "documentation":"<p>Returns a list of operations events.</p> <p>Available parameters include <code>OperationID</code>, as well as optional parameters <code>MaxResults</code>, <code>NextToken</code>, and <code>Filters</code>.</p>"
+    },
     "ListOperations":{
       "name":"ListOperations",
       "http":{
@@ -235,6 +250,23 @@
       ],
       "documentation":"<p>Register an SAP application with AWS Systems Manager for SAP. You must meet the following requirements before registering. </p> <p>The SAP application you want to register with AWS Systems Manager for SAP is running on Amazon EC2.</p> <p>AWS Systems Manager Agent must be setup on an Amazon EC2 instance along with the required IAM permissions.</p> <p>Amazon EC2 instance(s) must have access to the secrets created in AWS Secrets Manager to manage SAP applications and components.</p>"
     },
+    "StartApplication":{
+      "name":"StartApplication",
+      "http":{
+        "method":"POST",
+        "requestUri":"/start-application",
+        "responseCode":200
+      },
+      "input":{"shape":"StartApplicationInput"},
+      "output":{"shape":"StartApplicationOutput"},
+      "errors":[
+        {"shape":"ResourceNotFoundException"},
+        {"shape":"ValidationException"},
+        {"shape":"ConflictException"},
+        {"shape":"InternalServerException"}
+      ],
+      "documentation":"<p>Request is an operation which starts an application.</p> <p>Parameter <code>ApplicationId</code> is required.</p>"
+    },
     "StartApplicationRefresh":{
       "name":"StartApplicationRefresh",
       "http":{
@@ -253,6 +285,23 @@
       ],
       "documentation":"<p>Refreshes a registered application.</p>"
     },
+    "StopApplication":{
+      "name":"StopApplication",
+      "http":{
+        "method":"POST",
+        "requestUri":"/stop-application",
+        "responseCode":200
+      },
+      "input":{"shape":"StopApplicationInput"},
+      "output":{"shape":"StopApplicationOutput"},
+      "errors":[
+        {"shape":"ResourceNotFoundException"},
+        {"shape":"ValidationException"},
+        {"shape":"ConflictException"},
+        {"shape":"InternalServerException"}
+      ],
+      "documentation":"<p>Request is an operation to stop an application.</p> <p>Parameter <code>ApplicationId</code> is required. Parameters <code>StopConnectedEntity</code> and <code>IncludeEc2InstanceShutdown</code> are optional.</p>"
+    },
     "TagResource":{
       "name":"TagResource",
       "http":{
@@ -681,6 +730,10 @@
       },
       "exception":true
     },
+    "ConnectedEntityType":{
+      "type":"string",
+      "enum":["DBMS"]
+    },
     "CredentialType":{
       "type":"string",
       "enum":["ADMIN"]
@@ -1148,7 +1201,7 @@
         },
         "MaxResults":{
           "shape":"MaxResults",
-          "documentation":"<p>The maximum number of results to return with a single call. To retrieve the remaining results, make another call with the returned nextToken value. </p>"
+          "documentation":"<p>The maximum number of results to return with a single call. To retrieve the remaining results, make another call with the returned nextToken value.</p>"
         },
         "Filters":{
           "shape":"FilterList",
@@ -1233,6 +1286,41 @@
         }
       }
     },
+    "ListOperationEventsInput":{
+      "type":"structure",
+      "required":["OperationId"],
+      "members":{
+        "OperationId":{
+          "shape":"OperationId",
+          "documentation":"<p>The ID of the operation.</p>"
+        },
+        "MaxResults":{
+          "shape":"MaxResults",
+          "documentation":"<p>The maximum number of results to return with a single call. To retrieve the remaining results, make another call with the returned nextToken value.</p> <p>If you do not specify a value for <code>MaxResults</code>, the request returns 50 items per page by default.</p>"
+        },
+        "NextToken":{
+          "shape":"NextToken",
+          "documentation":"<p>The token to use to retrieve the next page of results. This value is null when there are no more results to return.</p>"
+        },
+        "Filters":{
+          "shape":"FilterList",
+          "documentation":"<p>Optionally specify filters to narrow the returned operation event items.</p> <p>Valid filter names include <code>status</code>, <code>resourceID</code>, and <code>resourceType</code>. The valid operator for all three filters is <code>Equals</code>.</p>"
+        }
+      }
+    },
+    "ListOperationEventsOutput":{
+      "type":"structure",
+      "members":{
+        "OperationEvents":{
+          "shape":"OperationEventList",
+          "documentation":"<p>A returned list of operation events that meet the filter criteria.</p>"
+        },
+        "NextToken":{
+          "shape":"NextToken",
+          "documentation":"<p>The token to use to retrieve the next page of results. This value is null when there are no more results to return.</p>"
+        }
+      }
+    },
     "ListOperationsInput":{
       "type":"structure",
       "required":["ApplicationId"],
@@ -1349,6 +1437,48 @@
       },
       "documentation":"<p>The operations performed by AWS Systems Manager for SAP.</p>"
     },
+    "OperationEvent":{
+      "type":"structure",
+      "members":{
+        "Description":{
+          "shape":"String",
+          "documentation":"<p>A description of the operation event. For example, \"Stop the EC2 instance i-abcdefgh987654321\".</p>"
+        },
+        "Resource":{
+          "shape":"Resource",
+          "documentation":"<p>The resource involved in the operations event.</p> <p>Contains <code>ResourceArn</code> ARN and <code>ResourceType</code>.</p>"
+        },
+        "Status":{
+          "shape":"OperationEventStatus",
+          "documentation":"<p>The status of the operation event. The possible statuses are: <code>IN_PROGRESS</code>, <code>COMPLETED</code>, and <code>FAILED</code>.</p>"
+        },
+        "StatusMessage":{
+          "shape":"String",
+          "documentation":"<p>The status message relating to a specific operation event.</p>"
+        },
+        "Timestamp":{
+          "shape":"Timestamp",
+          "documentation":"<p>The timestamp of the specified operation event.</p>"
+        }
+      },
+      "documentation":"<p>An operation event returns details for an operation, including key milestones which can be used to monitor and track operations in progress.</p> <p>Operation events contain:</p> <ul> <li> <p>Description string</p> </li> <li> <p>Resource, including its ARN and type</p> </li> <li> <p>Status</p> </li> <li> <p>StatusMessage string</p> </li> <li> <p>TimeStamp</p> </li> </ul> <p>Operation event examples include StartApplication or StopApplication.</p>"
+    },
+    "OperationEventList":{
+      "type":"list",
+      "member":{"shape":"OperationEvent"}
+    },
+    "OperationEventResourceType":{
+      "type":"string",
+      "pattern":"[\\w]+::[\\w]+::[\\w]+"
+    },
+    "OperationEventStatus":{
+      "type":"string",
+      "enum":[
+        "IN_PROGRESS",
+        "COMPLETED",
+        "FAILED"
+      ]
+    },
     "OperationId":{
       "type":"string",
       "pattern":"[{]?[0-9a-fA-F]{8}-([0-9a-fA-F]{4}-){3}[0-9a-fA-F]{12}[}]?"
@@ -1511,6 +1641,20 @@
       },
       "documentation":"<p>Details of the SAP HANA system replication for the instance.</p>"
     },
+    "Resource":{
+      "type":"structure",
+      "members":{
+        "ResourceArn":{
+          "shape":"Arn",
+          "documentation":"<p>The Amazon Resource Name (ARN) of the source resource.</p> <p>Example of <code>ResourceArn</code>: \"<code>arn:aws:ec2:us-east-1:111111111111:instance/i-abcdefgh987654321</code>\"</p>"
+        },
+        "ResourceType":{
+          "shape":"OperationEventResourceType",
+          "documentation":"<p>The resource type.</p> <p>Example of <code>ResourceType</code>: \"<code>AWS::SystemsManagerSAP::Component</code>\" or \"<code>AWS::EC2::Instance</code>\".</p>"
+        }
+      },
+      "documentation":"<p>The resource contains a <code>ResourceArn</code> and the <code>ResourceType</code>.</p>"
+    },
     "ResourceId":{
       "type":"string",
       "max":64,
@@ -1551,6 +1695,25 @@
       "type":"string",
       "pattern":"arn:(.+:){2,4}.+$|^arn:(.+:){1,3}.+\\/.+"
     },
+    "StartApplicationInput":{
+      "type":"structure",
+      "required":["ApplicationId"],
+      "members":{
+        "ApplicationId":{
+          "shape":"ApplicationId",
+          "documentation":"<p>The ID of the application.</p>"
+        }
+      }
+    },
+    "StartApplicationOutput":{
+      "type":"structure",
+      "members":{
+        "OperationId":{
+          "shape":"OperationId",
+          "documentation":"<p>The ID of the operation.</p>"
+        }
+      }
+    },
     "StartApplicationRefreshInput":{
       "type":"structure",
       "required":["ApplicationId"],
@@ -1570,6 +1733,33 @@
         }
       }
     },
+    "StopApplicationInput":{
+      "type":"structure",
+      "required":["ApplicationId"],
+      "members":{
+        "ApplicationId":{
+          "shape":"ApplicationId",
+          "documentation":"<p>The ID of the application.</p>"
+        },
+        "StopConnectedEntity":{
+          "shape":"ConnectedEntityType",
+          "documentation":"<p>Specify the <code>ConnectedEntityType</code>. Accepted type is <code>DBMS</code>.</p> <p>If this parameter is included, the connected DBMS (Database Management System) will be stopped.</p>"
+        },
+        "IncludeEc2InstanceShutdown":{
+          "shape":"Boolean",
+          "documentation":"<p>Boolean. If included and if set to <code>True</code>, the StopApplication operation will shut down the associated Amazon EC2 instance in addition to the application.</p>"
+        }
+      }
+    },
+    "StopApplicationOutput":{
+      "type":"structure",
+      "members":{
+        "OperationId":{
+          "shape":"OperationId",
+          "documentation":"<p>The ID of the operation.</p>"
+        }
+      }
+    },
     "String":{"type":"string"},
     "TagKey":{
       "type":"string",