aws-sdk-appstream 1.127.0 → 1.128.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 340e7eb8a9ec85a84e2b3645217952c21ee86ed8658767797745397e722fa055
-  data.tar.gz: 8f026bf146cf604aba72300db6f607138acffb25d43741d77202ce4565198b01
+  metadata.gz: 6d4bbf292c4deab9a36b986fd9569efd602a06fcfb2cab26dcd35f3b565c907e
+  data.tar.gz: 3775f410aa879a60103c8b765c5b069b9c990a9be524a411c38e5316b6c97d26
 SHA512:
-  metadata.gz: 8e1cfca5ae8e7200807338eb103aa049657020b3f01289bb506e0f1d03255bd2d6e441378aef11502093fc6cd9d8723e554ffa4327cb77e56d31c51c448d1ec3
-  data.tar.gz: 3b9749c583ad1d43e0df2a40b708bc284fa1ae611c173e292880cca5aad2bb9eaeba5ed615fe1f805161a32b3208725cb07ccbf598dcdc2d67e123527399a7be
+  metadata.gz: 12ddd0b7a26b0f07b8facd4032252c2142c6a8c2d40204da574a6318e0b02a077e573e36e121f3b966943e47b3207d391101e28859708bb5277d8c9bbbbe9ddf
+  data.tar.gz: 3edc83fca9818e9f806673ef28657836a3eafeec14985f76565bc020dc8450b2c07c1c7cdc79e90791f65e9cce3fb2a9db8e640044e383f3fdc080336394ae82

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.128.0 (2026-02-20)
+------------------
+
+* Feature - Adding new attribute to disable IMDS v1 APIs for fleet, Image Builder and AppBlockBuilder instances.
+
 1.127.0 (2026-01-16)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.127.0
+1.128.0

data/lib/aws-sdk-appstream/client.rb

@@ -1005,6 +1005,10 @@ module Aws::AppStream
     #   Administrators can connect to the app block builder only through the
     #   specified endpoints.
     #
+    # @option params [Boolean] :disable_imdsv1
+    #   Set to true to disable Instance Metadata Service Version 1 (IMDSv1)
+    #   and enforce IMDSv2. Set to false to enable both IMDSv1 and IMDSv2.
+    #
     # @return [Types::CreateAppBlockBuilderResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::CreateAppBlockBuilderResult#app_block_builder #app_block_builder} => Types::AppBlockBuilder
@@ -1032,6 +1036,7 @@ module Aws::AppStream
     #         vpce_id: "String",
     #       },
     #     ],
+    #     disable_imdsv1: false,
     #   })
     #
     # @example Response structure
@@ -1059,6 +1064,7 @@ module Aws::AppStream
     #   resp.app_block_builder.access_endpoints #=> Array
     #   resp.app_block_builder.access_endpoints[0].endpoint_type #=> String, one of "STREAMING"
     #   resp.app_block_builder.access_endpoints[0].vpce_id #=> String
+    #   resp.app_block_builder.disable_imdsv1 #=> Boolean
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/appstream-2016-12-01/CreateAppBlockBuilder AWS API Documentation
     #
@@ -1685,6 +1691,16 @@ module Aws::AppStream
     #   customize storage capacity from 200 GB up to 500 GB based on your
     #   application requirements.
     #
+    # @option params [Boolean] :disable_imdsv1
+    #   Set to true to disable Instance Metadata Service Version 1 (IMDSv1)
+    #   and enforce IMDSv2. Set to false to enable both IMDSv1 and IMDSv2.
+    #
+    #   <note markdown="1"> Before disabling IMDSv1, ensure your WorkSpaces Applications images
+    #   are running the agent version or managed image update released on or
+    #   after January 16, 2024 to support IMDSv2 enforcement.
+    #
+    #    </note>
+    #
     # @return [Types::CreateFleetResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::CreateFleetResult#fleet #fleet} => Types::Fleet
@@ -1731,6 +1747,7 @@ module Aws::AppStream
     #     root_volume_config: {
     #       volume_size_in_gb: 1,
     #     },
+    #     disable_imdsv1: false,
     #   })
     #
     # @example Response structure
@@ -1776,6 +1793,7 @@ module Aws::AppStream
     #   resp.fleet.session_script_s3_location.s3_key #=> String
     #   resp.fleet.max_sessions_per_instance #=> Integer
     #   resp.fleet.root_volume_config.volume_size_in_gb #=> Integer
+    #   resp.fleet.disable_imdsv1 #=> Boolean
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/appstream-2016-12-01/CreateFleet AWS API Documentation
     #
@@ -2074,6 +2092,16 @@ module Aws::AppStream
     #
     #   * Microsoft\_Project\_2024\_Standard\_64Bit
     #
+    # @option params [Boolean] :disable_imdsv1
+    #   Set to true to disable Instance Metadata Service Version 1 (IMDSv1)
+    #   and enforce IMDSv2. Set to false to enable both IMDSv1 and IMDSv2.
+    #
+    #   <note markdown="1"> Before disabling IMDSv1, ensure your WorkSpaces Applications images
+    #   are running the agent version or managed image update released on or
+    #   after January 16, 2024 to support IMDSv2 enforcement.
+    #
+    #    </note>
+    #
     # @return [Types::CreateImageBuilderResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::CreateImageBuilderResult#image_builder #image_builder} => Types::ImageBuilder
@@ -2112,6 +2140,7 @@ module Aws::AppStream
     #     },
     #     softwares_to_install: ["String"],
     #     softwares_to_uninstall: ["String"],
+    #     disable_imdsv1: false,
     #   })
     #
     # @example Response structure
@@ -2149,6 +2178,7 @@ module Aws::AppStream
     #   resp.image_builder.access_endpoints[0].vpce_id #=> String
     #   resp.image_builder.root_volume_config.volume_size_in_gb #=> Integer
     #   resp.image_builder.latest_appstream_agent_version #=> String, one of "TRUE", "FALSE"
+    #   resp.image_builder.disable_imdsv1 #=> Boolean
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/appstream-2016-12-01/CreateImageBuilder AWS API Documentation
     #
@@ -3115,6 +3145,7 @@ module Aws::AppStream
     #   resp.image_builder.access_endpoints[0].vpce_id #=> String
     #   resp.image_builder.root_volume_config.volume_size_in_gb #=> Integer
     #   resp.image_builder.latest_appstream_agent_version #=> String, one of "TRUE", "FALSE"
+    #   resp.image_builder.disable_imdsv1 #=> Boolean
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/appstream-2016-12-01/DeleteImageBuilder AWS API Documentation
     #
@@ -3346,6 +3377,7 @@ module Aws::AppStream
     #   resp.app_block_builders[0].access_endpoints #=> Array
     #   resp.app_block_builders[0].access_endpoints[0].endpoint_type #=> String, one of "STREAMING"
     #   resp.app_block_builders[0].access_endpoints[0].vpce_id #=> String
+    #   resp.app_block_builders[0].disable_imdsv1 #=> Boolean
     #   resp.next_token #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/appstream-2016-12-01/DescribeAppBlockBuilders AWS API Documentation
@@ -3744,6 +3776,7 @@ module Aws::AppStream
     #   resp.fleets[0].session_script_s3_location.s3_key #=> String
     #   resp.fleets[0].max_sessions_per_instance #=> Integer
     #   resp.fleets[0].root_volume_config.volume_size_in_gb #=> Integer
+    #   resp.fleets[0].disable_imdsv1 #=> Boolean
     #   resp.next_token #=> String
     #
     #
@@ -3824,6 +3857,7 @@ module Aws::AppStream
     #   resp.image_builders[0].access_endpoints[0].vpce_id #=> String
     #   resp.image_builders[0].root_volume_config.volume_size_in_gb #=> Integer
     #   resp.image_builders[0].latest_appstream_agent_version #=> String, one of "TRUE", "FALSE"
+    #   resp.image_builders[0].disable_imdsv1 #=> Boolean
     #   resp.next_token #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/appstream-2016-12-01/DescribeImageBuilders AWS API Documentation
@@ -4951,6 +4985,7 @@ module Aws::AppStream
     #   resp.app_block_builder.access_endpoints #=> Array
     #   resp.app_block_builder.access_endpoints[0].endpoint_type #=> String, one of "STREAMING"
     #   resp.app_block_builder.access_endpoints[0].vpce_id #=> String
+    #   resp.app_block_builder.disable_imdsv1 #=> Boolean
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/appstream-2016-12-01/StartAppBlockBuilder AWS API Documentation
     #
@@ -5039,6 +5074,7 @@ module Aws::AppStream
     #   resp.image_builder.access_endpoints[0].vpce_id #=> String
     #   resp.image_builder.root_volume_config.volume_size_in_gb #=> Integer
     #   resp.image_builder.latest_appstream_agent_version #=> String, one of "TRUE", "FALSE"
+    #   resp.image_builder.disable_imdsv1 #=> Boolean
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/appstream-2016-12-01/StartImageBuilder AWS API Documentation
     #
@@ -5120,6 +5156,7 @@ module Aws::AppStream
     #   resp.app_block_builder.access_endpoints #=> Array
     #   resp.app_block_builder.access_endpoints[0].endpoint_type #=> String, one of "STREAMING"
     #   resp.app_block_builder.access_endpoints[0].vpce_id #=> String
+    #   resp.app_block_builder.disable_imdsv1 #=> Boolean
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/appstream-2016-12-01/StopAppBlockBuilder AWS API Documentation
     #
@@ -5202,6 +5239,7 @@ module Aws::AppStream
     #   resp.image_builder.access_endpoints[0].vpce_id #=> String
     #   resp.image_builder.root_volume_config.volume_size_in_gb #=> Integer
     #   resp.image_builder.latest_appstream_agent_version #=> String, one of "TRUE", "FALSE"
+    #   resp.image_builder.disable_imdsv1 #=> Boolean
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/appstream-2016-12-01/StopImageBuilder AWS API Documentation
     #
@@ -5371,6 +5409,10 @@ module Aws::AppStream
     # @option params [Array<String>] :attributes_to_delete
     #   The attributes to delete from the app block builder.
     #
+    # @option params [Boolean] :disable_imdsv1
+    #   Set to true to disable Instance Metadata Service Version 1 (IMDSv1)
+    #   and enforce IMDSv2. Set to false to enable both IMDSv1 and IMDSv2.
+    #
     # @return [Types::UpdateAppBlockBuilderResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::UpdateAppBlockBuilderResult#app_block_builder #app_block_builder} => Types::AppBlockBuilder
@@ -5396,6 +5438,7 @@ module Aws::AppStream
     #       },
     #     ],
     #     attributes_to_delete: ["IAM_ROLE_ARN"], # accepts IAM_ROLE_ARN, ACCESS_ENDPOINTS, VPC_CONFIGURATION_SECURITY_GROUP_IDS
+    #     disable_imdsv1: false,
     #   })
     #
     # @example Response structure
@@ -5423,6 +5466,7 @@ module Aws::AppStream
     #   resp.app_block_builder.access_endpoints #=> Array
     #   resp.app_block_builder.access_endpoints[0].endpoint_type #=> String, one of "STREAMING"
     #   resp.app_block_builder.access_endpoints[0].vpce_id #=> String
+    #   resp.app_block_builder.disable_imdsv1 #=> Boolean
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/appstream-2016-12-01/UpdateAppBlockBuilder AWS API Documentation
     #
@@ -5909,6 +5953,16 @@ module Aws::AppStream
     #   The updated configuration for the root volume of fleet instances. Note
     #   that volume size cannot be decreased below the image volume size.
     #
+    # @option params [Boolean] :disable_imdsv1
+    #   Set to true to disable Instance Metadata Service Version 1 (IMDSv1)
+    #   and enforce IMDSv2. Set to false to enable both IMDSv1 and IMDSv2.
+    #
+    #   <note markdown="1"> Before disabling IMDSv1, ensure your WorkSpaces Applications images
+    #   are running the agent version or managed image update released on or
+    #   after January 16, 2024 to support IMDSv2 enforcement.
+    #
+    #    </note>
+    #
     # @return [Types::UpdateFleetResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::UpdateFleetResult#fleet #fleet} => Types::Fleet
@@ -5953,6 +6007,7 @@ module Aws::AppStream
     #     root_volume_config: {
     #       volume_size_in_gb: 1,
     #     },
+    #     disable_imdsv1: false,
     #   })
     #
     # @example Response structure
@@ -5998,6 +6053,7 @@ module Aws::AppStream
     #   resp.fleet.session_script_s3_location.s3_key #=> String
     #   resp.fleet.max_sessions_per_instance #=> Integer
     #   resp.fleet.root_volume_config.volume_size_in_gb #=> Integer
+    #   resp.fleet.disable_imdsv1 #=> Boolean
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/appstream-2016-12-01/UpdateFleet AWS API Documentation
     #
@@ -6287,7 +6343,7 @@ module Aws::AppStream
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-appstream'
-      context[:gem_version] = '1.127.0'
+      context[:gem_version] = '1.128.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-appstream/client_api.rb

@@ -449,6 +449,7 @@ module Aws::AppStream
     AppBlockBuilder.add_member(:app_block_builder_errors, Shapes::ShapeRef.new(shape: ResourceErrors, location_name: "AppBlockBuilderErrors"))
     AppBlockBuilder.add_member(:state_change_reason, Shapes::ShapeRef.new(shape: AppBlockBuilderStateChangeReason, location_name: "StateChangeReason"))
     AppBlockBuilder.add_member(:access_endpoints, Shapes::ShapeRef.new(shape: AccessEndpointList, location_name: "AccessEndpoints"))
+    AppBlockBuilder.add_member(:disable_imdsv1, Shapes::ShapeRef.new(shape: BooleanObject, location_name: "DisableIMDSV1"))
     AppBlockBuilder.struct_class = Types::AppBlockBuilder
 
     AppBlockBuilderAppBlockAssociation.add_member(:app_block_arn, Shapes::ShapeRef.new(shape: Arn, required: true, location_name: "AppBlockArn"))
@@ -603,6 +604,7 @@ module Aws::AppStream
     CreateAppBlockBuilderRequest.add_member(:enable_default_internet_access, Shapes::ShapeRef.new(shape: BooleanObject, location_name: "EnableDefaultInternetAccess"))
     CreateAppBlockBuilderRequest.add_member(:iam_role_arn, Shapes::ShapeRef.new(shape: Arn, location_name: "IamRoleArn"))
     CreateAppBlockBuilderRequest.add_member(:access_endpoints, Shapes::ShapeRef.new(shape: AccessEndpointList, location_name: "AccessEndpoints"))
+    CreateAppBlockBuilderRequest.add_member(:disable_imdsv1, Shapes::ShapeRef.new(shape: BooleanObject, location_name: "DisableIMDSV1"))
     CreateAppBlockBuilderRequest.struct_class = Types::CreateAppBlockBuilderRequest
 
     CreateAppBlockBuilderResult.add_member(:app_block_builder, Shapes::ShapeRef.new(shape: AppBlockBuilder, location_name: "AppBlockBuilder"))
@@ -697,6 +699,7 @@ module Aws::AppStream
     CreateFleetRequest.add_member(:session_script_s3_location, Shapes::ShapeRef.new(shape: S3Location, location_name: "SessionScriptS3Location"))
     CreateFleetRequest.add_member(:max_sessions_per_instance, Shapes::ShapeRef.new(shape: Integer, location_name: "MaxSessionsPerInstance"))
     CreateFleetRequest.add_member(:root_volume_config, Shapes::ShapeRef.new(shape: VolumeConfig, location_name: "RootVolumeConfig"))
+    CreateFleetRequest.add_member(:disable_imdsv1, Shapes::ShapeRef.new(shape: BooleanObject, location_name: "DisableIMDSV1"))
     CreateFleetRequest.struct_class = Types::CreateFleetRequest
 
     CreateFleetResult.add_member(:fleet, Shapes::ShapeRef.new(shape: Fleet, location_name: "Fleet"))
@@ -718,6 +721,7 @@ module Aws::AppStream
     CreateImageBuilderRequest.add_member(:root_volume_config, Shapes::ShapeRef.new(shape: VolumeConfig, location_name: "RootVolumeConfig"))
     CreateImageBuilderRequest.add_member(:softwares_to_install, Shapes::ShapeRef.new(shape: StringList, location_name: "SoftwaresToInstall"))
     CreateImageBuilderRequest.add_member(:softwares_to_uninstall, Shapes::ShapeRef.new(shape: StringList, location_name: "SoftwaresToUninstall"))
+    CreateImageBuilderRequest.add_member(:disable_imdsv1, Shapes::ShapeRef.new(shape: BooleanObject, location_name: "DisableIMDSV1"))
     CreateImageBuilderRequest.struct_class = Types::CreateImageBuilderRequest
 
     CreateImageBuilderResult.add_member(:image_builder, Shapes::ShapeRef.new(shape: ImageBuilder, location_name: "ImageBuilder"))
@@ -1212,6 +1216,7 @@ module Aws::AppStream
     Fleet.add_member(:session_script_s3_location, Shapes::ShapeRef.new(shape: S3Location, location_name: "SessionScriptS3Location"))
     Fleet.add_member(:max_sessions_per_instance, Shapes::ShapeRef.new(shape: Integer, location_name: "MaxSessionsPerInstance"))
     Fleet.add_member(:root_volume_config, Shapes::ShapeRef.new(shape: VolumeConfig, location_name: "RootVolumeConfig"))
+    Fleet.add_member(:disable_imdsv1, Shapes::ShapeRef.new(shape: BooleanObject, location_name: "DisableIMDSV1"))
     Fleet.struct_class = Types::Fleet
 
     FleetAttributes.member = Shapes::ShapeRef.new(shape: FleetAttribute)
@@ -1275,6 +1280,7 @@ module Aws::AppStream
     ImageBuilder.add_member(:access_endpoints, Shapes::ShapeRef.new(shape: AccessEndpointList, location_name: "AccessEndpoints"))
     ImageBuilder.add_member(:root_volume_config, Shapes::ShapeRef.new(shape: VolumeConfig, location_name: "RootVolumeConfig"))
     ImageBuilder.add_member(:latest_appstream_agent_version, Shapes::ShapeRef.new(shape: LatestAppstreamAgentVersion, location_name: "LatestAppstreamAgentVersion"))
+    ImageBuilder.add_member(:disable_imdsv1, Shapes::ShapeRef.new(shape: BooleanObject, location_name: "DisableIMDSV1"))
     ImageBuilder.struct_class = Types::ImageBuilder
 
     ImageBuilderList.member = Shapes::ShapeRef.new(shape: ImageBuilder)
@@ -1566,6 +1572,7 @@ module Aws::AppStream
     UpdateAppBlockBuilderRequest.add_member(:iam_role_arn, Shapes::ShapeRef.new(shape: Arn, location_name: "IamRoleArn"))
     UpdateAppBlockBuilderRequest.add_member(:access_endpoints, Shapes::ShapeRef.new(shape: AccessEndpointList, location_name: "AccessEndpoints"))
     UpdateAppBlockBuilderRequest.add_member(:attributes_to_delete, Shapes::ShapeRef.new(shape: AppBlockBuilderAttributes, location_name: "AttributesToDelete"))
+    UpdateAppBlockBuilderRequest.add_member(:disable_imdsv1, Shapes::ShapeRef.new(shape: BooleanObject, location_name: "DisableIMDSV1"))
     UpdateAppBlockBuilderRequest.struct_class = Types::UpdateAppBlockBuilderRequest
 
     UpdateAppBlockBuilderResult.add_member(:app_block_builder, Shapes::ShapeRef.new(shape: AppBlockBuilder, location_name: "AppBlockBuilder"))
@@ -1627,6 +1634,7 @@ module Aws::AppStream
     UpdateFleetRequest.add_member(:session_script_s3_location, Shapes::ShapeRef.new(shape: S3Location, location_name: "SessionScriptS3Location"))
     UpdateFleetRequest.add_member(:max_sessions_per_instance, Shapes::ShapeRef.new(shape: Integer, location_name: "MaxSessionsPerInstance"))
     UpdateFleetRequest.add_member(:root_volume_config, Shapes::ShapeRef.new(shape: VolumeConfig, location_name: "RootVolumeConfig"))
+    UpdateFleetRequest.add_member(:disable_imdsv1, Shapes::ShapeRef.new(shape: BooleanObject, location_name: "DisableIMDSV1"))
     UpdateFleetRequest.struct_class = Types::UpdateFleetRequest
 
     UpdateFleetResult.add_member(:fleet, Shapes::ShapeRef.new(shape: Fleet, location_name: "Fleet"))

data/lib/aws-sdk-appstream/types.rb

@@ -228,6 +228,11 @@ module Aws::AppStream
     #   specified endpoints.
     #   @return [Array<Types::AccessEndpoint>]
     #
+    # @!attribute [rw] disable_imdsv1
+    #   Indicates whether Instance Metadata Service Version 1 (IMDSv1) is
+    #   disabled for the app block builder.
+    #   @return [Boolean]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/appstream-2016-12-01/AppBlockBuilder AWS API Documentation
     #
     class AppBlockBuilder < Struct.new(
@@ -244,7 +249,8 @@ module Aws::AppStream
       :created_time,
       :app_block_builder_errors,
       :state_change_reason,
-      :access_endpoints)
+      :access_endpoints,
+      :disable_imdsv1)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -1007,6 +1013,11 @@ module Aws::AppStream
     #   specified endpoints.
     #   @return [Array<Types::AccessEndpoint>]
     #
+    # @!attribute [rw] disable_imdsv1
+    #   Set to true to disable Instance Metadata Service Version 1 (IMDSv1)
+    #   and enforce IMDSv2. Set to false to enable both IMDSv1 and IMDSv2.
+    #   @return [Boolean]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/appstream-2016-12-01/CreateAppBlockBuilderRequest AWS API Documentation
     #
     class CreateAppBlockBuilderRequest < Struct.new(
@@ -1019,7 +1030,8 @@ module Aws::AppStream
       :vpc_config,
       :enable_default_internet_access,
       :iam_role_arn,
-      :access_endpoints)
+      :access_endpoints,
+      :disable_imdsv1)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -1664,6 +1676,17 @@ module Aws::AppStream
     #   application requirements.
     #   @return [Types::VolumeConfig]
     #
+    # @!attribute [rw] disable_imdsv1
+    #   Set to true to disable Instance Metadata Service Version 1 (IMDSv1)
+    #   and enforce IMDSv2. Set to false to enable both IMDSv1 and IMDSv2.
+    #
+    #   <note markdown="1"> Before disabling IMDSv1, ensure your WorkSpaces Applications images
+    #   are running the agent version or managed image update released on or
+    #   after January 16, 2024 to support IMDSv2 enforcement.
+    #
+    #    </note>
+    #   @return [Boolean]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/appstream-2016-12-01/CreateFleetRequest AWS API Documentation
     #
     class CreateFleetRequest < Struct.new(
@@ -1689,7 +1712,8 @@ module Aws::AppStream
       :usb_device_filter_strings,
       :session_script_s3_location,
       :max_sessions_per_instance,
-      :root_volume_config)
+      :root_volume_config,
+      :disable_imdsv1)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -2004,6 +2028,17 @@ module Aws::AppStream
     #   * Microsoft\_Project\_2024\_Standard\_64Bit
     #   @return [Array<String>]
     #
+    # @!attribute [rw] disable_imdsv1
+    #   Set to true to disable Instance Metadata Service Version 1 (IMDSv1)
+    #   and enforce IMDSv2. Set to false to enable both IMDSv1 and IMDSv2.
+    #
+    #   <note markdown="1"> Before disabling IMDSv1, ensure your WorkSpaces Applications images
+    #   are running the agent version or managed image update released on or
+    #   after January 16, 2024 to support IMDSv2 enforcement.
+    #
+    #    </note>
+    #   @return [Boolean]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/appstream-2016-12-01/CreateImageBuilderRequest AWS API Documentation
     #
     class CreateImageBuilderRequest < Struct.new(
@@ -2022,7 +2057,8 @@ module Aws::AppStream
       :access_endpoints,
       :root_volume_config,
       :softwares_to_install,
-      :softwares_to_uninstall)
+      :softwares_to_uninstall,
+      :disable_imdsv1)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -4465,6 +4501,11 @@ module Aws::AppStream
     #   including the storage size in GB.
     #   @return [Types::VolumeConfig]
     #
+    # @!attribute [rw] disable_imdsv1
+    #   Indicates whether Instance Metadata Service Version 1 (IMDSv1) is
+    #   disabled for the fleet.
+    #   @return [Boolean]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/appstream-2016-12-01/Fleet AWS API Documentation
     #
     class Fleet < Struct.new(
@@ -4493,7 +4534,8 @@ module Aws::AppStream
       :usb_device_filter_strings,
       :session_script_s3_location,
       :max_sessions_per_instance,
-      :root_volume_config)
+      :root_volume_config,
+      :disable_imdsv1)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -4893,6 +4935,11 @@ module Aws::AppStream
     #   Applications agent version or not.
     #   @return [String]
     #
+    # @!attribute [rw] disable_imdsv1
+    #   Indicates whether Instance Metadata Service Version 1 (IMDSv1) is
+    #   disabled for the image builder.
+    #   @return [Boolean]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/appstream-2016-12-01/ImageBuilder AWS API Documentation
     #
     class ImageBuilder < Struct.new(
@@ -4915,7 +4962,8 @@ module Aws::AppStream
       :appstream_agent_version,
       :access_endpoints,
       :root_volume_config,
-      :latest_appstream_agent_version)
+      :latest_appstream_agent_version,
+      :disable_imdsv1)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -6180,6 +6228,11 @@ module Aws::AppStream
     #   The attributes to delete from the app block builder.
     #   @return [Array<String>]
     #
+    # @!attribute [rw] disable_imdsv1
+    #   Set to true to disable Instance Metadata Service Version 1 (IMDSv1)
+    #   and enforce IMDSv2. Set to false to enable both IMDSv1 and IMDSv2.
+    #   @return [Boolean]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/appstream-2016-12-01/UpdateAppBlockBuilderRequest AWS API Documentation
     #
     class UpdateAppBlockBuilderRequest < Struct.new(
@@ -6192,7 +6245,8 @@ module Aws::AppStream
       :enable_default_internet_access,
       :iam_role_arn,
       :access_endpoints,
-      :attributes_to_delete)
+      :attributes_to_delete,
+      :disable_imdsv1)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -6642,6 +6696,17 @@ module Aws::AppStream
     #   size.
     #   @return [Types::VolumeConfig]
     #
+    # @!attribute [rw] disable_imdsv1
+    #   Set to true to disable Instance Metadata Service Version 1 (IMDSv1)
+    #   and enforce IMDSv2. Set to false to enable both IMDSv1 and IMDSv2.
+    #
+    #   <note markdown="1"> Before disabling IMDSv1, ensure your WorkSpaces Applications images
+    #   are running the agent version or managed image update released on or
+    #   after January 16, 2024 to support IMDSv2 enforcement.
+    #
+    #    </note>
+    #   @return [Boolean]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/appstream-2016-12-01/UpdateFleetRequest AWS API Documentation
     #
     class UpdateFleetRequest < Struct.new(
@@ -6667,7 +6732,8 @@ module Aws::AppStream
       :usb_device_filter_strings,
       :session_script_s3_location,
       :max_sessions_per_instance,
-      :root_volume_config)
+      :root_volume_config,
+      :disable_imdsv1)
       SENSITIVE = []
       include Aws::Structure
     end

data/lib/aws-sdk-appstream.rb

@@ -55,7 +55,7 @@ module Aws::AppStream
   autoload :EndpointProvider, 'aws-sdk-appstream/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-appstream/endpoints'
 
-  GEM_VERSION = '1.127.0'
+  GEM_VERSION = '1.128.0'
 
 end
 

data/sig/client.rbs

@@ -238,7 +238,8 @@ module Aws
                                           endpoint_type: ("STREAMING"),
                                           vpce_id: ::String?
                                         },
-                                      ]
+                                      ],
+                                      ?disable_imdsv1: bool
                                     ) -> _CreateAppBlockBuilderResponseSuccess
                                   | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _CreateAppBlockBuilderResponseSuccess
 
@@ -371,7 +372,8 @@ module Aws
                           ?max_sessions_per_instance: ::Integer,
                           ?root_volume_config: {
                             volume_size_in_gb: ::Integer?
-                          }
+                          },
+                          ?disable_imdsv1: bool
                         ) -> _CreateFleetResponseSuccess
                       | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _CreateFleetResponseSuccess
 
@@ -409,7 +411,8 @@ module Aws
                                     volume_size_in_gb: ::Integer?
                                   },
                                   ?softwares_to_install: Array[::String],
-                                  ?softwares_to_uninstall: Array[::String]
+                                  ?softwares_to_uninstall: Array[::String],
+                                  ?disable_imdsv1: bool
                                 ) -> _CreateImageBuilderResponseSuccess
                               | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _CreateImageBuilderResponseSuccess
 
@@ -1225,7 +1228,8 @@ module Aws
                                           vpce_id: ::String?
                                         },
                                       ],
-                                      ?attributes_to_delete: Array[("IAM_ROLE_ARN" | "ACCESS_ENDPOINTS" | "VPC_CONFIGURATION_SECURITY_GROUP_IDS")]
+                                      ?attributes_to_delete: Array[("IAM_ROLE_ARN" | "ACCESS_ENDPOINTS" | "VPC_CONFIGURATION_SECURITY_GROUP_IDS")],
+                                      ?disable_imdsv1: bool
                                     ) -> _UpdateAppBlockBuilderResponseSuccess
                                   | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _UpdateAppBlockBuilderResponseSuccess
 
@@ -1330,7 +1334,8 @@ module Aws
                           ?max_sessions_per_instance: ::Integer,
                           ?root_volume_config: {
                             volume_size_in_gb: ::Integer?
-                          }
+                          },
+                          ?disable_imdsv1: bool
                         ) -> _UpdateFleetResponseSuccess
                       | (?Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _UpdateFleetResponseSuccess
 

data/sig/types.rbs

@@ -55,6 +55,7 @@ module Aws::AppStream
       attr_accessor app_block_builder_errors: ::Array[Types::ResourceError]
       attr_accessor state_change_reason: Types::AppBlockBuilderStateChangeReason
       attr_accessor access_endpoints: ::Array[Types::AccessEndpoint]
+      attr_accessor disable_imdsv1: bool
       SENSITIVE: []
     end
 
@@ -242,6 +243,7 @@ module Aws::AppStream
       attr_accessor enable_default_internet_access: bool
       attr_accessor iam_role_arn: ::String
       attr_accessor access_endpoints: ::Array[Types::AccessEndpoint]
+      attr_accessor disable_imdsv1: bool
       SENSITIVE: []
     end
 
@@ -364,6 +366,7 @@ module Aws::AppStream
       attr_accessor session_script_s3_location: Types::S3Location
       attr_accessor max_sessions_per_instance: ::Integer
       attr_accessor root_volume_config: Types::VolumeConfig
+      attr_accessor disable_imdsv1: bool
       SENSITIVE: []
     end
 
@@ -389,6 +392,7 @@ module Aws::AppStream
       attr_accessor root_volume_config: Types::VolumeConfig
       attr_accessor softwares_to_install: ::Array[::String]
       attr_accessor softwares_to_uninstall: ::Array[::String]
+      attr_accessor disable_imdsv1: bool
       SENSITIVE: []
     end
 
@@ -1057,6 +1061,7 @@ module Aws::AppStream
       attr_accessor session_script_s3_location: Types::S3Location
       attr_accessor max_sessions_per_instance: ::Integer
       attr_accessor root_volume_config: Types::VolumeConfig
+      attr_accessor disable_imdsv1: bool
       SENSITIVE: []
     end
 
@@ -1124,6 +1129,7 @@ module Aws::AppStream
       attr_accessor access_endpoints: ::Array[Types::AccessEndpoint]
       attr_accessor root_volume_config: Types::VolumeConfig
       attr_accessor latest_appstream_agent_version: ("TRUE" | "FALSE")
+      attr_accessor disable_imdsv1: bool
       SENSITIVE: []
     end
 
@@ -1484,6 +1490,7 @@ module Aws::AppStream
       attr_accessor iam_role_arn: ::String
       attr_accessor access_endpoints: ::Array[Types::AccessEndpoint]
       attr_accessor attributes_to_delete: ::Array[("IAM_ROLE_ARN" | "ACCESS_ENDPOINTS" | "VPC_CONFIGURATION_SECURITY_GROUP_IDS")]
+      attr_accessor disable_imdsv1: bool
       SENSITIVE: []
     end
 
@@ -1561,6 +1568,7 @@ module Aws::AppStream
       attr_accessor session_script_s3_location: Types::S3Location
       attr_accessor max_sessions_per_instance: ::Integer
       attr_accessor root_volume_config: Types::VolumeConfig
+      attr_accessor disable_imdsv1: bool
       SENSITIVE: []
     end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-appstream
 version: !ruby/object:Gem::Version
-  version: 1.127.0
+  version: 1.128.0
 platform: ruby
 authors:
 - Amazon Web Services