aws-sdk-appmesh 1.18.0 → 1.19.1

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 1bb5fa558795912985c6a37fef3bb376b6fdc301
-  data.tar.gz: e5ace7697e8c4dc4c3dc41e94a1eb1884a9d3272
+  metadata.gz: 91e8cc5300f6d8387308b04870e5187acbeaebfa
+  data.tar.gz: 292b44b84ab6d0c9a5830588f33fb50bdef917a8
 SHA512:
-  metadata.gz: 82f67811bc3484a3bfd597504ccfa2e8a441457c8dc8cf04f031b2caed9d7415a7c044935b6328cc59441e197c6fcbc17582188000d361506b74499dd18961e1
-  data.tar.gz: f9b7aa719b1a98b35ee367a2790c412d2a518c10987952c5ff582d7756e0b144179c31926e1e3fe3694f22b759a3027363375884bad2dc82de76172d9e34a738
+  metadata.gz: 8b95c6a7c98f230fae48c2a7a1208de2628e98ac318456a490c0de3cc31d2ee5e25d3f36322c78b13c88ec8b046680e03d861dd81a71293affd7aae3e154c21b
+  data.tar.gz: f64d16da91da184b2d272554e88094b5d192c6ce3e2727c647197219d0ec5ade881e8b79f1c7235c90cc86832b9ba4006d3f7245b7669184e17115ff285b7441

data/lib/aws-sdk-appmesh.rb

@@ -42,6 +42,6 @@ require_relative 'aws-sdk-appmesh/customizations'
 # @service
 module Aws::AppMesh
 
-  GEM_VERSION = '1.18.0'
+  GEM_VERSION = '1.19.1'
 
 end

data/lib/aws-sdk-appmesh/client.rb

@@ -334,6 +334,12 @@ module Aws::AppMesh
     # If your route matches a request, you can distribute traffic to one or
     # more target virtual nodes with relative weighting.
     #
+    # For more information about routes, see [Routes][1].
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com//app-mesh/latest/userguide/routes.html
+    #
     # @option params [String] :client_token
     #   Unique, case-sensitive identifier that you provide to ensure the
     #   idempotency of the request. Up to 36 letters, numbers, hyphens, and
@@ -632,6 +638,12 @@ module Aws::AppMesh
     #
     #  </note>
     #
+    # For more information about virtual nodes, see [Virtual Nodes][1].
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com//app-mesh/latest/userguide/virtual_nodes.html
+    #
     # @option params [String] :client_token
     #   Unique, case-sensitive identifier that you provide to ensure the
     #   idempotency of the request. Up to 36 letters, numbers, hyphens, and
@@ -666,9 +678,43 @@ module Aws::AppMesh
     #     client_token: "String",
     #     mesh_name: "ResourceName", # required
     #     spec: { # required
+    #       backend_defaults: {
+    #         client_policy: {
+    #           tls: {
+    #             enforce: false,
+    #             ports: [1],
+    #             validation: { # required
+    #               trust: { # required
+    #                 acm: {
+    #                   certificate_authority_arns: ["Arn"], # required
+    #                 },
+    #                 file: {
+    #                   certificate_chain: "FilePath", # required
+    #                 },
+    #               },
+    #             },
+    #           },
+    #         },
+    #       },
     #       backends: [
     #         {
     #           virtual_service: {
+    #             client_policy: {
+    #               tls: {
+    #                 enforce: false,
+    #                 ports: [1],
+    #                 validation: { # required
+    #                   trust: { # required
+    #                     acm: {
+    #                       certificate_authority_arns: ["Arn"], # required
+    #                     },
+    #                     file: {
+    #                       certificate_chain: "FilePath", # required
+    #                     },
+    #                   },
+    #                 },
+    #               },
+    #             },
     #             virtual_service_name: "ServiceName", # required
     #           },
     #         },
@@ -688,6 +734,18 @@ module Aws::AppMesh
     #             port: 1, # required
     #             protocol: "grpc", # required, accepts grpc, http, http2, tcp
     #           },
+    #           tls: {
+    #             certificate: { # required
+    #               acm: {
+    #                 certificate_arn: "Arn", # required
+    #               },
+    #               file: {
+    #                 certificate_chain: "FilePath", # required
+    #                 private_key: "FilePath", # required
+    #               },
+    #             },
+    #             mode: "DISABLED", # required, accepts DISABLED, PERMISSIVE, STRICT
+    #           },
     #         },
     #       ],
     #       logging: {
@@ -730,7 +788,19 @@ module Aws::AppMesh
     #   resp.virtual_node.metadata.last_updated_at #=> Time
     #   resp.virtual_node.metadata.uid #=> String
     #   resp.virtual_node.metadata.version #=> Integer
+    #   resp.virtual_node.spec.backend_defaults.client_policy.tls.enforce #=> Boolean
+    #   resp.virtual_node.spec.backend_defaults.client_policy.tls.ports #=> Array
+    #   resp.virtual_node.spec.backend_defaults.client_policy.tls.ports[0] #=> Integer
+    #   resp.virtual_node.spec.backend_defaults.client_policy.tls.validation.trust.acm.certificate_authority_arns #=> Array
+    #   resp.virtual_node.spec.backend_defaults.client_policy.tls.validation.trust.acm.certificate_authority_arns[0] #=> String
+    #   resp.virtual_node.spec.backend_defaults.client_policy.tls.validation.trust.file.certificate_chain #=> String
     #   resp.virtual_node.spec.backends #=> Array
+    #   resp.virtual_node.spec.backends[0].virtual_service.client_policy.tls.enforce #=> Boolean
+    #   resp.virtual_node.spec.backends[0].virtual_service.client_policy.tls.ports #=> Array
+    #   resp.virtual_node.spec.backends[0].virtual_service.client_policy.tls.ports[0] #=> Integer
+    #   resp.virtual_node.spec.backends[0].virtual_service.client_policy.tls.validation.trust.acm.certificate_authority_arns #=> Array
+    #   resp.virtual_node.spec.backends[0].virtual_service.client_policy.tls.validation.trust.acm.certificate_authority_arns[0] #=> String
+    #   resp.virtual_node.spec.backends[0].virtual_service.client_policy.tls.validation.trust.file.certificate_chain #=> String
     #   resp.virtual_node.spec.backends[0].virtual_service.virtual_service_name #=> String
     #   resp.virtual_node.spec.listeners #=> Array
     #   resp.virtual_node.spec.listeners[0].health_check.healthy_threshold #=> Integer
@@ -742,6 +812,10 @@ module Aws::AppMesh
     #   resp.virtual_node.spec.listeners[0].health_check.unhealthy_threshold #=> Integer
     #   resp.virtual_node.spec.listeners[0].port_mapping.port #=> Integer
     #   resp.virtual_node.spec.listeners[0].port_mapping.protocol #=> String, one of "grpc", "http", "http2", "tcp"
+    #   resp.virtual_node.spec.listeners[0].tls.certificate.acm.certificate_arn #=> String
+    #   resp.virtual_node.spec.listeners[0].tls.certificate.file.certificate_chain #=> String
+    #   resp.virtual_node.spec.listeners[0].tls.certificate.file.private_key #=> String
+    #   resp.virtual_node.spec.listeners[0].tls.mode #=> String, one of "DISABLED", "PERMISSIVE", "STRICT"
     #   resp.virtual_node.spec.logging.access_log.file.path #=> String
     #   resp.virtual_node.spec.service_discovery.aws_cloud_map.attributes #=> Array
     #   resp.virtual_node.spec.service_discovery.aws_cloud_map.attributes[0].key #=> String
@@ -771,6 +845,12 @@ module Aws::AppMesh
     # routes for your virtual router that direct incoming requests to
     # different virtual nodes.
     #
+    # For more information about virtual routers, see [Virtual Routers][1].
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com//app-mesh/latest/userguide/virtual_routers.html
+    #
     # @option params [String] :client_token
     #   Unique, case-sensitive identifier that you provide to ensure the
     #   idempotency of the request. Up to 36 letters, numbers, hyphens, and
@@ -855,6 +935,13 @@ module Aws::AppMesh
     # node or virtual router that is specified as the provider for the
     # virtual service.
     #
+    # For more information about virtual services, see [Virtual
+    # Services][1].
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com//app-mesh/latest/userguide/virtual_services.html
+    #
     # @option params [String] :client_token
     #   Unique, case-sensitive identifier that you provide to ensure the
     #   idempotency of the request. Up to 36 letters, numbers, hyphens, and
@@ -1113,7 +1200,19 @@ module Aws::AppMesh
     #   resp.virtual_node.metadata.last_updated_at #=> Time
     #   resp.virtual_node.metadata.uid #=> String
     #   resp.virtual_node.metadata.version #=> Integer
+    #   resp.virtual_node.spec.backend_defaults.client_policy.tls.enforce #=> Boolean
+    #   resp.virtual_node.spec.backend_defaults.client_policy.tls.ports #=> Array
+    #   resp.virtual_node.spec.backend_defaults.client_policy.tls.ports[0] #=> Integer
+    #   resp.virtual_node.spec.backend_defaults.client_policy.tls.validation.trust.acm.certificate_authority_arns #=> Array
+    #   resp.virtual_node.spec.backend_defaults.client_policy.tls.validation.trust.acm.certificate_authority_arns[0] #=> String
+    #   resp.virtual_node.spec.backend_defaults.client_policy.tls.validation.trust.file.certificate_chain #=> String
     #   resp.virtual_node.spec.backends #=> Array
+    #   resp.virtual_node.spec.backends[0].virtual_service.client_policy.tls.enforce #=> Boolean
+    #   resp.virtual_node.spec.backends[0].virtual_service.client_policy.tls.ports #=> Array
+    #   resp.virtual_node.spec.backends[0].virtual_service.client_policy.tls.ports[0] #=> Integer
+    #   resp.virtual_node.spec.backends[0].virtual_service.client_policy.tls.validation.trust.acm.certificate_authority_arns #=> Array
+    #   resp.virtual_node.spec.backends[0].virtual_service.client_policy.tls.validation.trust.acm.certificate_authority_arns[0] #=> String
+    #   resp.virtual_node.spec.backends[0].virtual_service.client_policy.tls.validation.trust.file.certificate_chain #=> String
     #   resp.virtual_node.spec.backends[0].virtual_service.virtual_service_name #=> String
     #   resp.virtual_node.spec.listeners #=> Array
     #   resp.virtual_node.spec.listeners[0].health_check.healthy_threshold #=> Integer
@@ -1125,6 +1224,10 @@ module Aws::AppMesh
     #   resp.virtual_node.spec.listeners[0].health_check.unhealthy_threshold #=> Integer
     #   resp.virtual_node.spec.listeners[0].port_mapping.port #=> Integer
     #   resp.virtual_node.spec.listeners[0].port_mapping.protocol #=> String, one of "grpc", "http", "http2", "tcp"
+    #   resp.virtual_node.spec.listeners[0].tls.certificate.acm.certificate_arn #=> String
+    #   resp.virtual_node.spec.listeners[0].tls.certificate.file.certificate_chain #=> String
+    #   resp.virtual_node.spec.listeners[0].tls.certificate.file.private_key #=> String
+    #   resp.virtual_node.spec.listeners[0].tls.mode #=> String, one of "DISABLED", "PERMISSIVE", "STRICT"
     #   resp.virtual_node.spec.logging.access_log.file.path #=> String
     #   resp.virtual_node.spec.service_discovery.aws_cloud_map.attributes #=> Array
     #   resp.virtual_node.spec.service_discovery.aws_cloud_map.attributes[0].key #=> String
@@ -1407,7 +1510,19 @@ module Aws::AppMesh
     #   resp.virtual_node.metadata.last_updated_at #=> Time
     #   resp.virtual_node.metadata.uid #=> String
     #   resp.virtual_node.metadata.version #=> Integer
+    #   resp.virtual_node.spec.backend_defaults.client_policy.tls.enforce #=> Boolean
+    #   resp.virtual_node.spec.backend_defaults.client_policy.tls.ports #=> Array
+    #   resp.virtual_node.spec.backend_defaults.client_policy.tls.ports[0] #=> Integer
+    #   resp.virtual_node.spec.backend_defaults.client_policy.tls.validation.trust.acm.certificate_authority_arns #=> Array
+    #   resp.virtual_node.spec.backend_defaults.client_policy.tls.validation.trust.acm.certificate_authority_arns[0] #=> String
+    #   resp.virtual_node.spec.backend_defaults.client_policy.tls.validation.trust.file.certificate_chain #=> String
     #   resp.virtual_node.spec.backends #=> Array
+    #   resp.virtual_node.spec.backends[0].virtual_service.client_policy.tls.enforce #=> Boolean
+    #   resp.virtual_node.spec.backends[0].virtual_service.client_policy.tls.ports #=> Array
+    #   resp.virtual_node.spec.backends[0].virtual_service.client_policy.tls.ports[0] #=> Integer
+    #   resp.virtual_node.spec.backends[0].virtual_service.client_policy.tls.validation.trust.acm.certificate_authority_arns #=> Array
+    #   resp.virtual_node.spec.backends[0].virtual_service.client_policy.tls.validation.trust.acm.certificate_authority_arns[0] #=> String
+    #   resp.virtual_node.spec.backends[0].virtual_service.client_policy.tls.validation.trust.file.certificate_chain #=> String
     #   resp.virtual_node.spec.backends[0].virtual_service.virtual_service_name #=> String
     #   resp.virtual_node.spec.listeners #=> Array
     #   resp.virtual_node.spec.listeners[0].health_check.healthy_threshold #=> Integer
@@ -1419,6 +1534,10 @@ module Aws::AppMesh
     #   resp.virtual_node.spec.listeners[0].health_check.unhealthy_threshold #=> Integer
     #   resp.virtual_node.spec.listeners[0].port_mapping.port #=> Integer
     #   resp.virtual_node.spec.listeners[0].port_mapping.protocol #=> String, one of "grpc", "http", "http2", "tcp"
+    #   resp.virtual_node.spec.listeners[0].tls.certificate.acm.certificate_arn #=> String
+    #   resp.virtual_node.spec.listeners[0].tls.certificate.file.certificate_chain #=> String
+    #   resp.virtual_node.spec.listeners[0].tls.certificate.file.private_key #=> String
+    #   resp.virtual_node.spec.listeners[0].tls.mode #=> String, one of "DISABLED", "PERMISSIVE", "STRICT"
     #   resp.virtual_node.spec.logging.access_log.file.path #=> String
     #   resp.virtual_node.spec.service_discovery.aws_cloud_map.attributes #=> Array
     #   resp.virtual_node.spec.service_discovery.aws_cloud_map.attributes[0].key #=> String
@@ -2239,9 +2358,43 @@ module Aws::AppMesh
     #     client_token: "String",
     #     mesh_name: "ResourceName", # required
     #     spec: { # required
+    #       backend_defaults: {
+    #         client_policy: {
+    #           tls: {
+    #             enforce: false,
+    #             ports: [1],
+    #             validation: { # required
+    #               trust: { # required
+    #                 acm: {
+    #                   certificate_authority_arns: ["Arn"], # required
+    #                 },
+    #                 file: {
+    #                   certificate_chain: "FilePath", # required
+    #                 },
+    #               },
+    #             },
+    #           },
+    #         },
+    #       },
     #       backends: [
     #         {
     #           virtual_service: {
+    #             client_policy: {
+    #               tls: {
+    #                 enforce: false,
+    #                 ports: [1],
+    #                 validation: { # required
+    #                   trust: { # required
+    #                     acm: {
+    #                       certificate_authority_arns: ["Arn"], # required
+    #                     },
+    #                     file: {
+    #                       certificate_chain: "FilePath", # required
+    #                     },
+    #                   },
+    #                 },
+    #               },
+    #             },
     #             virtual_service_name: "ServiceName", # required
     #           },
     #         },
@@ -2261,6 +2414,18 @@ module Aws::AppMesh
     #             port: 1, # required
     #             protocol: "grpc", # required, accepts grpc, http, http2, tcp
     #           },
+    #           tls: {
+    #             certificate: { # required
+    #               acm: {
+    #                 certificate_arn: "Arn", # required
+    #               },
+    #               file: {
+    #                 certificate_chain: "FilePath", # required
+    #                 private_key: "FilePath", # required
+    #               },
+    #             },
+    #             mode: "DISABLED", # required, accepts DISABLED, PERMISSIVE, STRICT
+    #           },
     #         },
     #       ],
     #       logging: {
@@ -2297,7 +2462,19 @@ module Aws::AppMesh
     #   resp.virtual_node.metadata.last_updated_at #=> Time
     #   resp.virtual_node.metadata.uid #=> String
     #   resp.virtual_node.metadata.version #=> Integer
+    #   resp.virtual_node.spec.backend_defaults.client_policy.tls.enforce #=> Boolean
+    #   resp.virtual_node.spec.backend_defaults.client_policy.tls.ports #=> Array
+    #   resp.virtual_node.spec.backend_defaults.client_policy.tls.ports[0] #=> Integer
+    #   resp.virtual_node.spec.backend_defaults.client_policy.tls.validation.trust.acm.certificate_authority_arns #=> Array
+    #   resp.virtual_node.spec.backend_defaults.client_policy.tls.validation.trust.acm.certificate_authority_arns[0] #=> String
+    #   resp.virtual_node.spec.backend_defaults.client_policy.tls.validation.trust.file.certificate_chain #=> String
     #   resp.virtual_node.spec.backends #=> Array
+    #   resp.virtual_node.spec.backends[0].virtual_service.client_policy.tls.enforce #=> Boolean
+    #   resp.virtual_node.spec.backends[0].virtual_service.client_policy.tls.ports #=> Array
+    #   resp.virtual_node.spec.backends[0].virtual_service.client_policy.tls.ports[0] #=> Integer
+    #   resp.virtual_node.spec.backends[0].virtual_service.client_policy.tls.validation.trust.acm.certificate_authority_arns #=> Array
+    #   resp.virtual_node.spec.backends[0].virtual_service.client_policy.tls.validation.trust.acm.certificate_authority_arns[0] #=> String
+    #   resp.virtual_node.spec.backends[0].virtual_service.client_policy.tls.validation.trust.file.certificate_chain #=> String
     #   resp.virtual_node.spec.backends[0].virtual_service.virtual_service_name #=> String
     #   resp.virtual_node.spec.listeners #=> Array
     #   resp.virtual_node.spec.listeners[0].health_check.healthy_threshold #=> Integer
@@ -2309,6 +2486,10 @@ module Aws::AppMesh
     #   resp.virtual_node.spec.listeners[0].health_check.unhealthy_threshold #=> Integer
     #   resp.virtual_node.spec.listeners[0].port_mapping.port #=> Integer
     #   resp.virtual_node.spec.listeners[0].port_mapping.protocol #=> String, one of "grpc", "http", "http2", "tcp"
+    #   resp.virtual_node.spec.listeners[0].tls.certificate.acm.certificate_arn #=> String
+    #   resp.virtual_node.spec.listeners[0].tls.certificate.file.certificate_chain #=> String
+    #   resp.virtual_node.spec.listeners[0].tls.certificate.file.private_key #=> String
+    #   resp.virtual_node.spec.listeners[0].tls.mode #=> String, one of "DISABLED", "PERMISSIVE", "STRICT"
     #   resp.virtual_node.spec.logging.access_log.file.path #=> String
     #   resp.virtual_node.spec.service_discovery.aws_cloud_map.attributes #=> Array
     #   resp.virtual_node.spec.service_discovery.aws_cloud_map.attributes[0].key #=> String
@@ -2470,7 +2651,7 @@ module Aws::AppMesh
         params: params,
         config: config)
       context[:gem_name] = 'aws-sdk-appmesh'
-      context[:gem_version] = '1.18.0'
+      context[:gem_version] = '1.19.1'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-appmesh/client_api.rb

@@ -20,9 +20,13 @@ module Aws::AppMesh
     AwsCloudMapName = Shapes::StringShape.new(name: 'AwsCloudMapName')
     AwsCloudMapServiceDiscovery = Shapes::StructureShape.new(name: 'AwsCloudMapServiceDiscovery')
     Backend = Shapes::StructureShape.new(name: 'Backend')
+    BackendDefaults = Shapes::StructureShape.new(name: 'BackendDefaults')
     Backends = Shapes::ListShape.new(name: 'Backends')
     BadRequestException = Shapes::StructureShape.new(name: 'BadRequestException')
     Boolean = Shapes::BooleanShape.new(name: 'Boolean')
+    CertificateAuthorityArns = Shapes::ListShape.new(name: 'CertificateAuthorityArns')
+    ClientPolicy = Shapes::StructureShape.new(name: 'ClientPolicy')
+    ClientPolicyTls = Shapes::StructureShape.new(name: 'ClientPolicyTls')
     ConflictException = Shapes::StructureShape.new(name: 'ConflictException')
     CreateMeshInput = Shapes::StructureShape.new(name: 'CreateMeshInput')
     CreateMeshOutput = Shapes::StructureShape.new(name: 'CreateMeshOutput')
@@ -110,6 +114,11 @@ module Aws::AppMesh
     ListVirtualServicesLimit = Shapes::IntegerShape.new(name: 'ListVirtualServicesLimit')
     ListVirtualServicesOutput = Shapes::StructureShape.new(name: 'ListVirtualServicesOutput')
     Listener = Shapes::StructureShape.new(name: 'Listener')
+    ListenerTls = Shapes::StructureShape.new(name: 'ListenerTls')
+    ListenerTlsAcmCertificate = Shapes::StructureShape.new(name: 'ListenerTlsAcmCertificate')
+    ListenerTlsCertificate = Shapes::StructureShape.new(name: 'ListenerTlsCertificate')
+    ListenerTlsFileCertificate = Shapes::StructureShape.new(name: 'ListenerTlsFileCertificate')
+    ListenerTlsMode = Shapes::StringShape.new(name: 'ListenerTlsMode')
     Listeners = Shapes::ListShape.new(name: 'Listeners')
     Logging = Shapes::StructureShape.new(name: 'Logging')
     Long = Shapes::IntegerShape.new(name: 'Long')
@@ -127,6 +136,7 @@ module Aws::AppMesh
     PortMapping = Shapes::StructureShape.new(name: 'PortMapping')
     PortNumber = Shapes::IntegerShape.new(name: 'PortNumber')
     PortProtocol = Shapes::StringShape.new(name: 'PortProtocol')
+    PortSet = Shapes::ListShape.new(name: 'PortSet')
     ResourceInUseException = Shapes::StructureShape.new(name: 'ResourceInUseException')
     ResourceMetadata = Shapes::StructureShape.new(name: 'ResourceMetadata')
     ResourceName = Shapes::StringShape.new(name: 'ResourceName')
@@ -154,6 +164,10 @@ module Aws::AppMesh
     TcpRoute = Shapes::StructureShape.new(name: 'TcpRoute')
     TcpRouteAction = Shapes::StructureShape.new(name: 'TcpRouteAction')
     Timestamp = Shapes::TimestampShape.new(name: 'Timestamp')
+    TlsValidationContext = Shapes::StructureShape.new(name: 'TlsValidationContext')
+    TlsValidationContextAcmTrust = Shapes::StructureShape.new(name: 'TlsValidationContextAcmTrust')
+    TlsValidationContextFileTrust = Shapes::StructureShape.new(name: 'TlsValidationContextFileTrust')
+    TlsValidationContextTrust = Shapes::StructureShape.new(name: 'TlsValidationContextTrust')
     TooManyRequestsException = Shapes::StructureShape.new(name: 'TooManyRequestsException')
     TooManyTagsException = Shapes::StructureShape.new(name: 'TooManyTagsException')
     UntagResourceInput = Shapes::StructureShape.new(name: 'UntagResourceInput')
@@ -212,18 +226,31 @@ module Aws::AppMesh
     Backend.add_member(:virtual_service, Shapes::ShapeRef.new(shape: VirtualServiceBackend, location_name: "virtualService"))
     Backend.struct_class = Types::Backend
 
+    BackendDefaults.add_member(:client_policy, Shapes::ShapeRef.new(shape: ClientPolicy, location_name: "clientPolicy"))
+    BackendDefaults.struct_class = Types::BackendDefaults
+
     Backends.member = Shapes::ShapeRef.new(shape: Backend)
 
     BadRequestException.add_member(:message, Shapes::ShapeRef.new(shape: String, location_name: "message"))
     BadRequestException.struct_class = Types::BadRequestException
 
+    CertificateAuthorityArns.member = Shapes::ShapeRef.new(shape: Arn)
+
+    ClientPolicy.add_member(:tls, Shapes::ShapeRef.new(shape: ClientPolicyTls, location_name: "tls"))
+    ClientPolicy.struct_class = Types::ClientPolicy
+
+    ClientPolicyTls.add_member(:enforce, Shapes::ShapeRef.new(shape: Boolean, location_name: "enforce", metadata: {"box"=>true}))
+    ClientPolicyTls.add_member(:ports, Shapes::ShapeRef.new(shape: PortSet, location_name: "ports"))
+    ClientPolicyTls.add_member(:validation, Shapes::ShapeRef.new(shape: TlsValidationContext, required: true, location_name: "validation"))
+    ClientPolicyTls.struct_class = Types::ClientPolicyTls
+
     ConflictException.add_member(:message, Shapes::ShapeRef.new(shape: String, location_name: "message"))
     ConflictException.struct_class = Types::ConflictException
 
     CreateMeshInput.add_member(:client_token, Shapes::ShapeRef.new(shape: String, location_name: "clientToken", metadata: {"idempotencyToken"=>true}))
     CreateMeshInput.add_member(:mesh_name, Shapes::ShapeRef.new(shape: ResourceName, required: true, location_name: "meshName"))
     CreateMeshInput.add_member(:spec, Shapes::ShapeRef.new(shape: MeshSpec, location_name: "spec"))
-    CreateMeshInput.add_member(:tags, Shapes::ShapeRef.new(shape: TagList, location_name: "tags"))
+    CreateMeshInput.add_member(:tags, Shapes::ShapeRef.new(shape: TagList, location_name: "tags", metadata: {"tags"=>["not-preview"]}))
     CreateMeshInput.struct_class = Types::CreateMeshInput
 
     CreateMeshOutput.add_member(:mesh, Shapes::ShapeRef.new(shape: MeshData, required: true, location_name: "mesh"))
@@ -235,7 +262,7 @@ module Aws::AppMesh
     CreateRouteInput.add_member(:mesh_name, Shapes::ShapeRef.new(shape: ResourceName, required: true, location: "uri", location_name: "meshName"))
     CreateRouteInput.add_member(:route_name, Shapes::ShapeRef.new(shape: ResourceName, required: true, location_name: "routeName"))
     CreateRouteInput.add_member(:spec, Shapes::ShapeRef.new(shape: RouteSpec, required: true, location_name: "spec"))
-    CreateRouteInput.add_member(:tags, Shapes::ShapeRef.new(shape: TagList, location_name: "tags"))
+    CreateRouteInput.add_member(:tags, Shapes::ShapeRef.new(shape: TagList, location_name: "tags", metadata: {"tags"=>["not-preview"]}))
     CreateRouteInput.add_member(:virtual_router_name, Shapes::ShapeRef.new(shape: ResourceName, required: true, location: "uri", location_name: "virtualRouterName"))
     CreateRouteInput.struct_class = Types::CreateRouteInput
 
@@ -247,7 +274,7 @@ module Aws::AppMesh
     CreateVirtualNodeInput.add_member(:client_token, Shapes::ShapeRef.new(shape: String, location_name: "clientToken", metadata: {"idempotencyToken"=>true}))
     CreateVirtualNodeInput.add_member(:mesh_name, Shapes::ShapeRef.new(shape: ResourceName, required: true, location: "uri", location_name: "meshName"))
     CreateVirtualNodeInput.add_member(:spec, Shapes::ShapeRef.new(shape: VirtualNodeSpec, required: true, location_name: "spec"))
-    CreateVirtualNodeInput.add_member(:tags, Shapes::ShapeRef.new(shape: TagList, location_name: "tags"))
+    CreateVirtualNodeInput.add_member(:tags, Shapes::ShapeRef.new(shape: TagList, location_name: "tags", metadata: {"tags"=>["not-preview"]}))
     CreateVirtualNodeInput.add_member(:virtual_node_name, Shapes::ShapeRef.new(shape: ResourceName, required: true, location_name: "virtualNodeName"))
     CreateVirtualNodeInput.struct_class = Types::CreateVirtualNodeInput
 
@@ -259,7 +286,7 @@ module Aws::AppMesh
     CreateVirtualRouterInput.add_member(:client_token, Shapes::ShapeRef.new(shape: String, location_name: "clientToken", metadata: {"idempotencyToken"=>true}))
     CreateVirtualRouterInput.add_member(:mesh_name, Shapes::ShapeRef.new(shape: ResourceName, required: true, location: "uri", location_name: "meshName"))
     CreateVirtualRouterInput.add_member(:spec, Shapes::ShapeRef.new(shape: VirtualRouterSpec, required: true, location_name: "spec"))
-    CreateVirtualRouterInput.add_member(:tags, Shapes::ShapeRef.new(shape: TagList, location_name: "tags"))
+    CreateVirtualRouterInput.add_member(:tags, Shapes::ShapeRef.new(shape: TagList, location_name: "tags", metadata: {"tags"=>["not-preview"]}))
     CreateVirtualRouterInput.add_member(:virtual_router_name, Shapes::ShapeRef.new(shape: ResourceName, required: true, location_name: "virtualRouterName"))
     CreateVirtualRouterInput.struct_class = Types::CreateVirtualRouterInput
 
@@ -271,7 +298,7 @@ module Aws::AppMesh
     CreateVirtualServiceInput.add_member(:client_token, Shapes::ShapeRef.new(shape: String, location_name: "clientToken", metadata: {"idempotencyToken"=>true}))
     CreateVirtualServiceInput.add_member(:mesh_name, Shapes::ShapeRef.new(shape: ResourceName, required: true, location: "uri", location_name: "meshName"))
     CreateVirtualServiceInput.add_member(:spec, Shapes::ShapeRef.new(shape: VirtualServiceSpec, required: true, location_name: "spec"))
-    CreateVirtualServiceInput.add_member(:tags, Shapes::ShapeRef.new(shape: TagList, location_name: "tags"))
+    CreateVirtualServiceInput.add_member(:tags, Shapes::ShapeRef.new(shape: TagList, location_name: "tags", metadata: {"tags"=>["not-preview"]}))
     CreateVirtualServiceInput.add_member(:virtual_service_name, Shapes::ShapeRef.new(shape: ServiceName, required: true, location_name: "virtualServiceName"))
     CreateVirtualServiceInput.struct_class = Types::CreateVirtualServiceInput
 
@@ -529,8 +556,24 @@ module Aws::AppMesh
 
     Listener.add_member(:health_check, Shapes::ShapeRef.new(shape: HealthCheckPolicy, location_name: "healthCheck"))
     Listener.add_member(:port_mapping, Shapes::ShapeRef.new(shape: PortMapping, required: true, location_name: "portMapping"))
+    Listener.add_member(:tls, Shapes::ShapeRef.new(shape: ListenerTls, location_name: "tls"))
     Listener.struct_class = Types::Listener
 
+    ListenerTls.add_member(:certificate, Shapes::ShapeRef.new(shape: ListenerTlsCertificate, required: true, location_name: "certificate"))
+    ListenerTls.add_member(:mode, Shapes::ShapeRef.new(shape: ListenerTlsMode, required: true, location_name: "mode"))
+    ListenerTls.struct_class = Types::ListenerTls
+
+    ListenerTlsAcmCertificate.add_member(:certificate_arn, Shapes::ShapeRef.new(shape: Arn, required: true, location_name: "certificateArn"))
+    ListenerTlsAcmCertificate.struct_class = Types::ListenerTlsAcmCertificate
+
+    ListenerTlsCertificate.add_member(:acm, Shapes::ShapeRef.new(shape: ListenerTlsAcmCertificate, location_name: "acm"))
+    ListenerTlsCertificate.add_member(:file, Shapes::ShapeRef.new(shape: ListenerTlsFileCertificate, location_name: "file"))
+    ListenerTlsCertificate.struct_class = Types::ListenerTlsCertificate
+
+    ListenerTlsFileCertificate.add_member(:certificate_chain, Shapes::ShapeRef.new(shape: FilePath, required: true, location_name: "certificateChain"))
+    ListenerTlsFileCertificate.add_member(:private_key, Shapes::ShapeRef.new(shape: FilePath, required: true, location_name: "privateKey"))
+    ListenerTlsFileCertificate.struct_class = Types::ListenerTlsFileCertificate
+
     Listeners.member = Shapes::ShapeRef.new(shape: Listener)
 
     Logging.add_member(:access_log, Shapes::ShapeRef.new(shape: AccessLog, location_name: "accessLog"))
@@ -565,6 +608,8 @@ module Aws::AppMesh
     PortMapping.add_member(:protocol, Shapes::ShapeRef.new(shape: PortProtocol, required: true, location_name: "protocol"))
     PortMapping.struct_class = Types::PortMapping
 
+    PortSet.member = Shapes::ShapeRef.new(shape: PortNumber)
+
     ResourceInUseException.add_member(:message, Shapes::ShapeRef.new(shape: String, location_name: "message"))
     ResourceInUseException.struct_class = Types::ResourceInUseException
 
@@ -630,6 +675,19 @@ module Aws::AppMesh
     TcpRouteAction.add_member(:weighted_targets, Shapes::ShapeRef.new(shape: WeightedTargets, required: true, location_name: "weightedTargets"))
     TcpRouteAction.struct_class = Types::TcpRouteAction
 
+    TlsValidationContext.add_member(:trust, Shapes::ShapeRef.new(shape: TlsValidationContextTrust, required: true, location_name: "trust"))
+    TlsValidationContext.struct_class = Types::TlsValidationContext
+
+    TlsValidationContextAcmTrust.add_member(:certificate_authority_arns, Shapes::ShapeRef.new(shape: CertificateAuthorityArns, required: true, location_name: "certificateAuthorityArns"))
+    TlsValidationContextAcmTrust.struct_class = Types::TlsValidationContextAcmTrust
+
+    TlsValidationContextFileTrust.add_member(:certificate_chain, Shapes::ShapeRef.new(shape: FilePath, required: true, location_name: "certificateChain"))
+    TlsValidationContextFileTrust.struct_class = Types::TlsValidationContextFileTrust
+
+    TlsValidationContextTrust.add_member(:acm, Shapes::ShapeRef.new(shape: TlsValidationContextAcmTrust, location_name: "acm"))
+    TlsValidationContextTrust.add_member(:file, Shapes::ShapeRef.new(shape: TlsValidationContextFileTrust, location_name: "file"))
+    TlsValidationContextTrust.struct_class = Types::TlsValidationContextTrust
+
     TooManyRequestsException.add_member(:message, Shapes::ShapeRef.new(shape: String, location_name: "message"))
     TooManyRequestsException.struct_class = Types::TooManyRequestsException
 
@@ -714,6 +772,7 @@ module Aws::AppMesh
     VirtualNodeServiceProvider.add_member(:virtual_node_name, Shapes::ShapeRef.new(shape: ResourceName, required: true, location_name: "virtualNodeName"))
     VirtualNodeServiceProvider.struct_class = Types::VirtualNodeServiceProvider
 
+    VirtualNodeSpec.add_member(:backend_defaults, Shapes::ShapeRef.new(shape: BackendDefaults, location_name: "backendDefaults"))
     VirtualNodeSpec.add_member(:backends, Shapes::ShapeRef.new(shape: Backends, location_name: "backends"))
     VirtualNodeSpec.add_member(:listeners, Shapes::ShapeRef.new(shape: Listeners, location_name: "listeners"))
     VirtualNodeSpec.add_member(:logging, Shapes::ShapeRef.new(shape: Logging, location_name: "logging"))
@@ -751,6 +810,7 @@ module Aws::AppMesh
     VirtualRouterStatus.add_member(:status, Shapes::ShapeRef.new(shape: VirtualRouterStatusCode, required: true, location_name: "status"))
     VirtualRouterStatus.struct_class = Types::VirtualRouterStatus
 
+    VirtualServiceBackend.add_member(:client_policy, Shapes::ShapeRef.new(shape: ClientPolicy, location_name: "clientPolicy"))
     VirtualServiceBackend.add_member(:virtual_service_name, Shapes::ShapeRef.new(shape: ServiceName, required: true, location_name: "virtualServiceName"))
     VirtualServiceBackend.struct_class = Types::VirtualServiceBackend