aws-sdk-cloudformation 1.133.0 → 1.135.0

data/lib/aws-sdk-cloudformation/client.rb

@@ -95,7 +95,7 @@ module Aws::CloudFormation
     #     class name or an instance of a plugin class.
     #
     #   @option options [required, Aws::CredentialProvider] :credentials
-    #     Your AWS credentials. This can be an instance of any one of the
+    #     Your AWS credentials used for authentication. This can be an instance of any one of the
     #     following classes:
     #
     #     * `Aws::Credentials` - Used for configuring static, non-refreshing
@@ -128,18 +128,23 @@ module Aws::CloudFormation
     #     locations will be searched for credentials:
     #
     #     * `Aws.config[:credentials]`
+    #
     #     * The `:access_key_id`, `:secret_access_key`, `:session_token`, and
     #       `:account_id` options.
-    #     * ENV['AWS_ACCESS_KEY_ID'], ENV['AWS_SECRET_ACCESS_KEY'],
-    #       ENV['AWS_SESSION_TOKEN'], and ENV['AWS_ACCOUNT_ID']
+    #
+    #     * `ENV['AWS_ACCESS_KEY_ID']`, `ENV['AWS_SECRET_ACCESS_KEY']`,
+    #       `ENV['AWS_SESSION_TOKEN']`, and `ENV['AWS_ACCOUNT_ID']`.
+    #
     #     * `~/.aws/credentials`
+    #
     #     * `~/.aws/config`
+    #
     #     * EC2/ECS IMDS instance profile - When used by default, the timeouts
     #       are very aggressive. Construct and pass an instance of
     #       `Aws::InstanceProfileCredentials` or `Aws::ECSCredentials` to
     #       enable retries and extended timeouts. Instance profile credential
-    #       fetching can be disabled by setting ENV['AWS_EC2_METADATA_DISABLED']
-    #       to true.
+    #       fetching can be disabled by setting `ENV['AWS_EC2_METADATA_DISABLED']`
+    #       to `true`.
     #
     #   @option options [required, String] :region
     #     The AWS region to connect to.  The configured `:region` is
@@ -167,6 +172,11 @@ module Aws::CloudFormation
     #     When false, the request will raise a `RetryCapacityNotAvailableError` and will
     #     not retry instead of sleeping.
     #
+    #   @option options [Array<String>] :auth_scheme_preference
+    #     A list of preferred authentication schemes to use when making a request. Supported values are:
+    #     `sigv4`, `sigv4a`, `httpBearerAuth`, and `noAuth`. When set using `ENV['AWS_AUTH_SCHEME_PREFERENCE']` or in
+    #     shared config as `auth_scheme_preference`, the value should be a comma-separated list.
+    #
     #   @option options [Boolean] :client_side_monitoring (false)
     #     When `true`, client-side metrics will be collected for all API requests from
     #     this client.
@@ -253,8 +263,8 @@ module Aws::CloudFormation
     #     4 times. Used in `standard` and `adaptive` retry modes.
     #
     #   @option options [String] :profile ("default")
-    #     Used when loading credentials from the shared credentials file
-    #     at HOME/.aws/credentials.  When not specified, 'default' is used.
+    #     Used when loading credentials from the shared credentials file at `HOME/.aws/credentials`.
+    #     When not specified, 'default' is used.
     #
     #   @option options [String] :request_checksum_calculation ("when_supported")
     #     Determines when a checksum will be calculated for request payloads. Values are:
@@ -367,7 +377,7 @@ module Aws::CloudFormation
     #     `Aws::Telemetry::OTelProvider` for telemetry provider.
     #
     #   @option options [Aws::TokenProvider] :token_provider
-    #     A Bearer Token Provider. This can be an instance of any one of the
+    #     Your Bearer token used for authentication. This can be an instance of any one of the
     #     following classes:
     #
     #     * `Aws::StaticTokenProvider` - Used for configuring static, non-refreshing
@@ -880,7 +890,7 @@ module Aws::CloudFormation
     #   bucket or a Systems Manager document. CloudFormation generates the
     #   change set by comparing this template with the stack that you
     #   specified. The location for an Amazon S3 bucket must start with
-    #   `https://`.
+    #   `https://`. URLs from S3 static websites are not supported.
     #
     #   Conditional: You must specify only `TemplateBody` or `TemplateURL`.
     #
@@ -971,14 +981,14 @@ module Aws::CloudFormation
     #
     #
     #
-    #   [1]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-accesskey.html
-    #   [2]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-group.html
-    #   [3]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-instanceprofile.html
-    #   [4]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-managedpolicy.html
-    #   [5]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-policy.html
-    #   [6]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-role.html
-    #   [7]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-user.html
-    #   [8]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-usertogroupaddition.html
+    #   [1]: https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-accesskey.html
+    #   [2]: https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-group.html
+    #   [3]: https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-instanceprofile.html
+    #   [4]: https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-managedpolicy.html
+    #   [5]: https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-policy.html
+    #   [6]: https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-role.html
+    #   [7]: https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-user.html
+    #   [8]: https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-usertogroupaddition.html
     #   [9]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/control-access-with-iam.html#using-iam-capabilities
     #   [10]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/transform-aws-include.html
     #   [11]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/transform-aws-serverless.html
@@ -1104,22 +1114,23 @@ module Aws::CloudFormation
     #   [1]: https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_ExecuteChangeSet.html
     #
     # @option params [Boolean] :import_existing_resources
-    #   Indicates if the change set imports resources that already exist.
+    #   Indicates if the change set auto-imports resources that already exist.
+    #   For more information, see [Import Amazon Web Services resources into a
+    #   CloudFormation stack automatically][1] in the *CloudFormation User
+    #   Guide*.
     #
     #   <note markdown="1"> This parameter can only import resources that have custom names in
-    #   templates. For more information, see [name type][1] in the
+    #   templates. For more information, see [name type][2] in the
     #   *CloudFormation User Guide*. To import resources that do not accept
-    #   custom names, such as EC2 instances, use the resource import feature
-    #   instead. For more information, see [Import Amazon Web Services
-    #   resources into a CloudFormation stack with a resource import][2] in
-    #   the *CloudFormation User Guide*.
+    #   custom names, such as EC2 instances, use the `ResourcesToImport`
+    #   parameter instead.
     #
     #    </note>
     #
     #
     #
-    #   [1]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-name.html
-    #   [2]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/resource-import.html
+    #   [1]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/import-resources-automatically.html
+    #   [2]: https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-properties-name.html
     #
     # @return [Types::CreateChangeSetOutput] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
@@ -1303,17 +1314,18 @@ module Aws::CloudFormation
     #    </note>
     #
     # @option params [String] :template_body
-    #   Structure containing the template body with a minimum length of 1 byte
-    #   and a maximum length of 51,200 bytes.
+    #   Structure that contains the template body with a minimum length of 1
+    #   byte and a maximum length of 51,200 bytes.
     #
-    #   Conditional: You must specify either the `TemplateBody` or the
-    #   `TemplateURL` parameter, but not both.
+    #   Conditional: You must specify either `TemplateBody` or `TemplateURL`,
+    #   but not both.
     #
     # @option params [String] :template_url
-    #   The URL of a file containing the template body. The URL must point to
-    #   a template (max size: 1 MB) that's located in an Amazon S3 bucket or
-    #   a Systems Manager document. The location for an Amazon S3 bucket must
-    #   start with `https://`.
+    #   The URL of a file that contains the template body. The URL must point
+    #   to a template (max size: 1 MB) that's located in an Amazon S3 bucket
+    #   or a Systems Manager document. The location for an Amazon S3 bucket
+    #   must start with `https://`. URLs from S3 static websites are not
+    #   supported.
     #
     #   Conditional: You must specify either the `TemplateBody` or the
     #   `TemplateURL` parameter, but not both.
@@ -1429,14 +1441,14 @@ module Aws::CloudFormation
     #
     #
     #
-    #   [1]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-accesskey.html
-    #   [2]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-group.html
-    #   [3]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-instanceprofile.html
-    #   [4]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-managedpolicy.html
-    #   [5]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-policy.html
-    #   [6]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-role.html
-    #   [7]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-user.html
-    #   [8]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-usertogroupaddition.html
+    #   [1]: https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-accesskey.html
+    #   [2]: https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-group.html
+    #   [3]: https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-instanceprofile.html
+    #   [4]: https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-managedpolicy.html
+    #   [5]: https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-policy.html
+    #   [6]: https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-role.html
+    #   [7]: https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-user.html
+    #   [8]: https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-usertogroupaddition.html
     #   [9]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/control-access-with-iam.html#using-iam-capabilities
     #   [10]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/transform-aws-include.html
     #   [11]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/transform-aws-serverless.html
@@ -1491,9 +1503,9 @@ module Aws::CloudFormation
     #   Default: `ROLLBACK`
     #
     # @option params [String] :stack_policy_body
-    #   Structure containing the stack policy body. For more information, see
-    #   [Prevent updates to stack resources][1] in the *CloudFormation User
-    #   Guide*. You can specify either the `StackPolicyBody` or the
+    #   Structure that contains the stack policy body. For more information,
+    #   see [Prevent updates to stack resources][1] in the *CloudFormation
+    #   User Guide*. You can specify either the `StackPolicyBody` or the
     #   `StackPolicyURL` parameter, but not both.
     #
     #
@@ -1501,11 +1513,13 @@ module Aws::CloudFormation
     #   [1]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/protect-stack-resources.html
     #
     # @option params [String] :stack_policy_url
-    #   Location of a file containing the stack policy. The URL must point to
-    #   a policy (maximum size: 16 KB) located in an S3 bucket in the same
+    #   Location of a file that contains the stack policy. The URL must point
+    #   to a policy (maximum size: 16 KB) located in an S3 bucket in the same
     #   Region as the stack. The location for an Amazon S3 bucket must start
-    #   with `https://`. You can specify either the `StackPolicyBody` or the
-    #   `StackPolicyURL` parameter, but not both.
+    #   with `https://`. URLs from S3 static websites are not supported.
+    #
+    #   You can specify either the `StackPolicyBody` or the `StackPolicyURL`
+    #   parameter, but not both.
     #
     # @option params [Array<Types::Tag>] :tags
     #   Key-value pairs to associate with this stack. CloudFormation also
@@ -1622,6 +1636,20 @@ module Aws::CloudFormation
     # value for either `Accounts` or `DeploymentTargets`, and you must
     # specify at least one value for `Regions`.
     #
+    # <note markdown="1"> The maximum number of organizational unit (OUs) supported by a
+    # `CreateStackInstances` operation is 50.
+    #
+    #  If you need more than 50, consider the following options:
+    #
+    #  * *Batch processing:* If you don't want to expose your OU hierarchy,
+    #   split up the operations into multiple calls with less than 50 OUs
+    #   each.
+    #
+    # * *Parent OU strategy:* If you don't mind exposing the OU hierarchy,
+    #   target a parent OU that contains all desired child OUs.
+    #
+    #  </note>
+    #
     # @option params [required, String] :stack_set_name
     #   The name or unique ID of the stack set that you want to create stack
     #   instances from.
@@ -1851,17 +1879,18 @@ module Aws::CloudFormation
     #   The structure that contains the template body, with a minimum length
     #   of 1 byte and a maximum length of 51,200 bytes.
     #
-    #   Conditional: You must specify either the TemplateBody or the
-    #   TemplateURL parameter, but not both.
+    #   Conditional: You must specify either the `TemplateBody` or the
+    #   `TemplateURL` parameter, but not both.
     #
     # @option params [String] :template_url
     #   The URL of a file that contains the template body. The URL must point
     #   to a template (maximum size: 1 MB) that's located in an Amazon S3
     #   bucket or a Systems Manager document. The location for an Amazon S3
-    #   bucket must start with `https://`.
+    #   bucket must start with `https://`. S3 static website URLs are not
+    #   supported.
     #
-    #   Conditional: You must specify either the TemplateBody or the
-    #   TemplateURL parameter, but not both.
+    #   Conditional: You must specify either the `TemplateBody` or the
+    #   `TemplateURL` parameter, but not both.
     #
     # @option params [String] :stack_id
     #   The stack ID you are importing into a new stack set. Specify the
@@ -1932,13 +1961,13 @@ module Aws::CloudFormation
     #
     #
     #
-    #   [1]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-accesskey.html
-    #   [2]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-group.html
-    #   [3]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-instanceprofile.html
-    #   [4]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-policy.html
-    #   [5]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-role.html
-    #   [6]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-user.html
-    #   [7]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-usertogroupaddition.html
+    #   [1]: https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-accesskey.html
+    #   [2]: https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-group.html
+    #   [3]: https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-instanceprofile.html
+    #   [4]: https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-policy.html
+    #   [5]: https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-role.html
+    #   [6]: https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-user.html
+    #   [7]: https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-usertogroupaddition.html
     #   [8]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/control-access-with-iam.html#using-iam-capabilities
     #   [9]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/template-macros.html
     #   [10]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/transform-aws-include.html
@@ -2330,6 +2359,20 @@ module Aws::CloudFormation
     # Deletes stack instances for the specified accounts, in the specified
     # Amazon Web Services Regions.
     #
+    # <note markdown="1"> The maximum number of organizational unit (OUs) supported by a
+    # `DeleteStackInstances` operation is 50.
+    #
+    #  If you need more than 50, consider the following options:
+    #
+    #  * *Batch processing:* If you don't want to expose your OU hierarchy,
+    #   split up the operations into multiple calls with less than 50 OUs
+    #   each.
+    #
+    # * *Parent OU strategy:* If you don't mind exposing the OU hierarchy,
+    #   target a parent OU that contains all desired child OUs.
+    #
+    #  </note>
+    #
     # @option params [required, String] :stack_set_name
     #   The name or unique ID of the stack set that you want to delete stack
     #   instances for.
@@ -3450,7 +3493,7 @@ module Aws::CloudFormation
     #   resp.stack_resource_detail.resource_status_reason #=> String
     #   resp.stack_resource_detail.description #=> String
     #   resp.stack_resource_detail.metadata #=> String
-    #   resp.stack_resource_detail.drift_information.stack_resource_drift_status #=> String, one of "IN_SYNC", "MODIFIED", "DELETED", "NOT_CHECKED"
+    #   resp.stack_resource_detail.drift_information.stack_resource_drift_status #=> String, one of "IN_SYNC", "MODIFIED", "DELETED", "NOT_CHECKED", "UNKNOWN"
     #   resp.stack_resource_detail.drift_information.last_check_timestamp #=> Time
     #   resp.stack_resource_detail.module_info.type_hierarchy #=> String
     #   resp.stack_resource_detail.module_info.logical_id_hierarchy #=> String
@@ -3502,6 +3545,9 @@ module Aws::CloudFormation
     #
     #   * `NOT_CHECKED`: CloudFormation doesn't currently return this value.
     #
+    #   * `UNKNOWN`: CloudFormation could not run drift detection for the
+    #     resource.
+    #
     # @option params [String] :next_token
     #   A string that identifies the next page of stack resource drift
     #   results.
@@ -3523,7 +3569,7 @@ module Aws::CloudFormation
     #
     #   resp = client.describe_stack_resource_drifts({
     #     stack_name: "StackNameOrId", # required
-    #     stack_resource_drift_status_filters: ["IN_SYNC"], # accepts IN_SYNC, MODIFIED, DELETED, NOT_CHECKED
+    #     stack_resource_drift_status_filters: ["IN_SYNC"], # accepts IN_SYNC, MODIFIED, DELETED, NOT_CHECKED, UNKNOWN
     #     next_token: "NextToken",
     #     max_results: 1,
     #   })
@@ -3545,10 +3591,11 @@ module Aws::CloudFormation
     #   resp.stack_resource_drifts[0].property_differences[0].expected_value #=> String
     #   resp.stack_resource_drifts[0].property_differences[0].actual_value #=> String
     #   resp.stack_resource_drifts[0].property_differences[0].difference_type #=> String, one of "ADD", "REMOVE", "NOT_EQUAL"
-    #   resp.stack_resource_drifts[0].stack_resource_drift_status #=> String, one of "IN_SYNC", "MODIFIED", "DELETED", "NOT_CHECKED"
+    #   resp.stack_resource_drifts[0].stack_resource_drift_status #=> String, one of "IN_SYNC", "MODIFIED", "DELETED", "NOT_CHECKED", "UNKNOWN"
     #   resp.stack_resource_drifts[0].timestamp #=> Time
     #   resp.stack_resource_drifts[0].module_info.type_hierarchy #=> String
     #   resp.stack_resource_drifts[0].module_info.logical_id_hierarchy #=> String
+    #   resp.stack_resource_drifts[0].drift_status_reason #=> String
     #   resp.next_token #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/cloudformation-2010-05-15/DescribeStackResourceDrifts AWS API Documentation
@@ -3640,7 +3687,7 @@ module Aws::CloudFormation
     #   resp.stack_resources[0].resource_status #=> String, one of "CREATE_IN_PROGRESS", "CREATE_FAILED", "CREATE_COMPLETE", "DELETE_IN_PROGRESS", "DELETE_FAILED", "DELETE_COMPLETE", "DELETE_SKIPPED", "UPDATE_IN_PROGRESS", "UPDATE_FAILED", "UPDATE_COMPLETE", "IMPORT_FAILED", "IMPORT_COMPLETE", "IMPORT_IN_PROGRESS", "IMPORT_ROLLBACK_IN_PROGRESS", "IMPORT_ROLLBACK_FAILED", "IMPORT_ROLLBACK_COMPLETE", "EXPORT_FAILED", "EXPORT_COMPLETE", "EXPORT_IN_PROGRESS", "EXPORT_ROLLBACK_IN_PROGRESS", "EXPORT_ROLLBACK_FAILED", "EXPORT_ROLLBACK_COMPLETE", "UPDATE_ROLLBACK_IN_PROGRESS", "UPDATE_ROLLBACK_COMPLETE", "UPDATE_ROLLBACK_FAILED", "ROLLBACK_IN_PROGRESS", "ROLLBACK_COMPLETE", "ROLLBACK_FAILED"
     #   resp.stack_resources[0].resource_status_reason #=> String
     #   resp.stack_resources[0].description #=> String
-    #   resp.stack_resources[0].drift_information.stack_resource_drift_status #=> String, one of "IN_SYNC", "MODIFIED", "DELETED", "NOT_CHECKED"
+    #   resp.stack_resources[0].drift_information.stack_resource_drift_status #=> String, one of "IN_SYNC", "MODIFIED", "DELETED", "NOT_CHECKED", "UNKNOWN"
     #   resp.stack_resources[0].drift_information.last_check_timestamp #=> Time
     #   resp.stack_resources[0].module_info.type_hierarchy #=> String
     #   resp.stack_resources[0].module_info.logical_id_hierarchy #=> String
@@ -3656,6 +3703,11 @@ module Aws::CloudFormation
 
     # Returns the description of the specified StackSet.
     #
+    # <note markdown="1"> This API provides *strongly consistent* reads meaning it will always
+    # return the most up-to-date data.
+    #
+    #  </note>
+    #
     # @option params [required, String] :stack_set_name
     #   The name or unique ID of the stack set whose description you want.
     #
@@ -3740,6 +3792,11 @@ module Aws::CloudFormation
 
     # Returns the description of the specified StackSet operation.
     #
+    # <note markdown="1"> This API provides *strongly consistent* reads meaning it will always
+    # return the most up-to-date data.
+    #
+    #  </note>
+    #
     # @option params [required, String] :stack_set_name
     #   The name or the unique stack ID of the stack set for the stack
     #   operation.
@@ -4248,10 +4305,11 @@ module Aws::CloudFormation
     #   resp.stack_resource_drift.property_differences[0].expected_value #=> String
     #   resp.stack_resource_drift.property_differences[0].actual_value #=> String
     #   resp.stack_resource_drift.property_differences[0].difference_type #=> String, one of "ADD", "REMOVE", "NOT_EQUAL"
-    #   resp.stack_resource_drift.stack_resource_drift_status #=> String, one of "IN_SYNC", "MODIFIED", "DELETED", "NOT_CHECKED"
+    #   resp.stack_resource_drift.stack_resource_drift_status #=> String, one of "IN_SYNC", "MODIFIED", "DELETED", "NOT_CHECKED", "UNKNOWN"
     #   resp.stack_resource_drift.timestamp #=> Time
     #   resp.stack_resource_drift.module_info.type_hierarchy #=> String
     #   resp.stack_resource_drift.module_info.logical_id_hierarchy #=> String
+    #   resp.stack_resource_drift.drift_status_reason #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/cloudformation-2010-05-15/DetectStackResourceDrift AWS API Documentation
     #
@@ -4383,17 +4441,17 @@ module Aws::CloudFormation
     # string that describes the resources required to run the template.
     #
     # @option params [String] :template_body
-    #   Structure containing the template body with a minimum length of 1 byte
-    #   and a maximum length of 51,200 bytes.
+    #   Structure that contains the template body with a minimum length of 1
+    #   byte and a maximum length of 51,200 bytes.
     #
     #   Conditional: You must pass `TemplateBody` or `TemplateURL`. If both
     #   are passed, only `TemplateBody` is used.
     #
     # @option params [String] :template_url
-    #   The URL of a file containing the template body. The URL must point to
-    #   a template that's located in an Amazon S3 bucket or a Systems Manager
-    #   document. The location for an Amazon S3 bucket must start with
-    #   `https://`.
+    #   The URL of a file that contains the template body. The URL must point
+    #   to a template that's located in an Amazon S3 bucket or a Systems
+    #   Manager document. The location for an Amazon S3 bucket must start with
+    #   `https://`. URLs from S3 static websites are not supported.
     #
     #   Conditional: You must pass `TemplateURL` or `TemplateBody`. If both
     #   are passed, only `TemplateBody` is used.
@@ -4720,17 +4778,17 @@ module Aws::CloudFormation
     # template doesn't exist, a `ValidationError` is returned.
     #
     # @option params [String] :template_body
-    #   Structure containing the template body with a minimum length of 1 byte
-    #   and a maximum length of 51,200 bytes.
+    #   Structure that contains the template body with a minimum length of 1
+    #   byte and a maximum length of 51,200 bytes.
     #
     #   Conditional: You must specify only one of the following parameters:
     #   `StackName`, `StackSetName`, `TemplateBody`, or `TemplateURL`.
     #
     # @option params [String] :template_url
-    #   The URL of a file containing the template body. The URL must point to
-    #   a template (max size: 1 MB) that's located in an Amazon S3 bucket or
-    #   a Systems Manager document. The location for an Amazon S3 bucket must
-    #   start with `https://`.
+    #   The URL of a file that contains the template body. The URL must point
+    #   to a template (max size: 1 MB) that's located in an Amazon S3 bucket
+    #   or a Systems Manager document. The location for an Amazon S3 bucket
+    #   must start with `https://`.
     #
     #   Conditional: You must specify only one of the following parameters:
     #   `StackName`, `StackSetName`, `TemplateBody`, or `TemplateURL`.
@@ -5641,7 +5699,7 @@ module Aws::CloudFormation
     #     stack_set_name: "StackSetNameOrId", # required
     #     next_token: "NextToken",
     #     max_results: 1,
-    #     stack_instance_resource_drift_statuses: ["IN_SYNC"], # accepts IN_SYNC, MODIFIED, DELETED, NOT_CHECKED
+    #     stack_instance_resource_drift_statuses: ["IN_SYNC"], # accepts IN_SYNC, MODIFIED, DELETED, NOT_CHECKED, UNKNOWN
     #     stack_instance_account: "Account", # required
     #     stack_instance_region: "Region", # required
     #     operation_id: "ClientRequestToken", # required
@@ -5663,7 +5721,7 @@ module Aws::CloudFormation
     #   resp.summaries[0].property_differences[0].expected_value #=> String
     #   resp.summaries[0].property_differences[0].actual_value #=> String
     #   resp.summaries[0].property_differences[0].difference_type #=> String, one of "ADD", "REMOVE", "NOT_EQUAL"
-    #   resp.summaries[0].stack_resource_drift_status #=> String, one of "IN_SYNC", "MODIFIED", "DELETED", "NOT_CHECKED"
+    #   resp.summaries[0].stack_resource_drift_status #=> String, one of "IN_SYNC", "MODIFIED", "DELETED", "NOT_CHECKED", "UNKNOWN"
     #   resp.summaries[0].timestamp #=> Time
     #   resp.next_token #=> String
     #
@@ -5941,7 +5999,7 @@ module Aws::CloudFormation
     #   resp.stack_resource_summaries[0].last_updated_timestamp #=> Time
     #   resp.stack_resource_summaries[0].resource_status #=> String, one of "CREATE_IN_PROGRESS", "CREATE_FAILED", "CREATE_COMPLETE", "DELETE_IN_PROGRESS", "DELETE_FAILED", "DELETE_COMPLETE", "DELETE_SKIPPED", "UPDATE_IN_PROGRESS", "UPDATE_FAILED", "UPDATE_COMPLETE", "IMPORT_FAILED", "IMPORT_COMPLETE", "IMPORT_IN_PROGRESS", "IMPORT_ROLLBACK_IN_PROGRESS", "IMPORT_ROLLBACK_FAILED", "IMPORT_ROLLBACK_COMPLETE", "EXPORT_FAILED", "EXPORT_COMPLETE", "EXPORT_IN_PROGRESS", "EXPORT_ROLLBACK_IN_PROGRESS", "EXPORT_ROLLBACK_FAILED", "EXPORT_ROLLBACK_COMPLETE", "UPDATE_ROLLBACK_IN_PROGRESS", "UPDATE_ROLLBACK_COMPLETE", "UPDATE_ROLLBACK_FAILED", "ROLLBACK_IN_PROGRESS", "ROLLBACK_COMPLETE", "ROLLBACK_FAILED"
     #   resp.stack_resource_summaries[0].resource_status_reason #=> String
-    #   resp.stack_resource_summaries[0].drift_information.stack_resource_drift_status #=> String, one of "IN_SYNC", "MODIFIED", "DELETED", "NOT_CHECKED"
+    #   resp.stack_resource_summaries[0].drift_information.stack_resource_drift_status #=> String, one of "IN_SYNC", "MODIFIED", "DELETED", "NOT_CHECKED", "UNKNOWN"
     #   resp.stack_resource_summaries[0].drift_information.last_check_timestamp #=> Time
     #   resp.stack_resource_summaries[0].module_info.type_hierarchy #=> String
     #   resp.stack_resource_summaries[0].module_info.logical_id_hierarchy #=> String
@@ -6028,6 +6086,11 @@ module Aws::CloudFormation
     # Returns summary information about the results of a stack set
     # operation.
     #
+    # <note markdown="1"> This API provides *eventually consistent* reads meaning it may take
+    # some time but will eventually return the most up-to-date data.
+    #
+    #  </note>
+    #
     # @option params [required, String] :stack_set_name
     #   The name or unique ID of the stack set that you want to get operation
     #   results for.
@@ -6120,6 +6183,11 @@ module Aws::CloudFormation
 
     # Returns summary information about operations performed on a stack set.
     #
+    # <note markdown="1"> This API provides *eventually consistent* reads meaning it may take
+    # some time but will eventually return the most up-to-date data.
+    #
+    #  </note>
+    #
     # @option params [required, String] :stack_set_name
     #   The name or unique ID of the stack set that you want to get operation
     #   summaries for.
@@ -6209,6 +6277,11 @@ module Aws::CloudFormation
     # Returns summary information about stack sets that are associated with
     # the user.
     #
+    # <note markdown="1"> This API provides *strongly consistent* reads meaning it will always
+    # return the most up-to-date data.
+    #
+    #  </note>
+    #
     # * \[Self-managed permissions\] If you set the `CallAs` parameter to
     #   `SELF` while signed in to your Amazon Web Services account,
     #   `ListStackSets` returns all self-managed stack sets in your Amazon
@@ -6947,8 +7020,9 @@ module Aws::CloudFormation
     #    </note>
     #
     # @option params [required, String] :schema_handler_package
-    #   A URL to the S3 bucket containing the extension project package that
-    #   contains the necessary files for the extension you want to register.
+    #   A URL to the S3 bucket that contains the extension project package
+    #   that contains the necessary files for the extension you want to
+    #   register.
     #
     #   For information about generating a schema handler package for the
     #   extension you want to register, see [submit][1] in the *CloudFormation
@@ -7104,9 +7178,9 @@ module Aws::CloudFormation
     #   The name or unique stack ID that you want to associate a policy with.
     #
     # @option params [String] :stack_policy_body
-    #   Structure containing the stack policy body. For more information, see
-    #   [Prevent updates to stack resources][1] in the *CloudFormation User
-    #   Guide*. You can specify either the `StackPolicyBody` or the
+    #   Structure that contains the stack policy body. For more information,
+    #   see [Prevent updates to stack resources][1] in the *CloudFormation
+    #   User Guide*. You can specify either the `StackPolicyBody` or the
     #   `StackPolicyURL` parameter, but not both.
     #
     #
@@ -7114,11 +7188,14 @@ module Aws::CloudFormation
     #   [1]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/protect-stack-resources.html
     #
     # @option params [String] :stack_policy_url
-    #   Location of a file containing the stack policy. The URL must point to
-    #   a policy (maximum size: 16 KB) located in an Amazon S3 bucket in the
-    #   same Amazon Web Services Region as the stack. The location for an
-    #   Amazon S3 bucket must start with `https://`. You can specify either
-    #   the `StackPolicyBody` or the `StackPolicyURL` parameter, but not both.
+    #   Location of a file that contains the stack policy. The URL must point
+    #   to a policy (maximum size: 16 KB) located in an Amazon S3 bucket in
+    #   the same Amazon Web Services Region as the stack. The location for an
+    #   Amazon S3 bucket must start with `https://`. URLs from S3 static
+    #   websites are not supported.
+    #
+    #   You can specify either the `StackPolicyBody` or the `StackPolicyURL`
+    #   parameter, but not both.
     #
     # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
     #
@@ -7691,17 +7768,17 @@ module Aws::CloudFormation
     #   The name or unique stack ID of the stack to update.
     #
     # @option params [String] :template_body
-    #   Structure containing the template body with a minimum length of 1 byte
-    #   and a maximum length of 51,200 bytes.
+    #   Structure that contains the template body with a minimum length of 1
+    #   byte and a maximum length of 51,200 bytes.
     #
     #   Conditional: You must specify only one of the following parameters:
     #   `TemplateBody`, `TemplateURL`, or set the `UsePreviousTemplate` to
     #   `true`.
     #
     # @option params [String] :template_url
-    #   The URL of a file containing the template body. The URL must point to
-    #   a template that's located in an Amazon S3 bucket or a Systems Manager
-    #   document. The location for an Amazon S3 bucket must start with
+    #   The URL of a file that contains the template body. The URL must point
+    #   to a template that's located in an Amazon S3 bucket or a Systems
+    #   Manager document. The location for an Amazon S3 bucket must start with
     #   `https://`.
     #
     #   Conditional: You must specify only one of the following parameters:
@@ -7717,8 +7794,8 @@ module Aws::CloudFormation
     #   `true`.
     #
     # @option params [String] :stack_policy_during_update_body
-    #   Structure containing the temporary overriding stack policy body. You
-    #   can specify either the `StackPolicyDuringUpdateBody` or the
+    #   Structure that contains the temporary overriding stack policy body.
+    #   You can specify either the `StackPolicyDuringUpdateBody` or the
     #   `StackPolicyDuringUpdateURL` parameter, but not both.
     #
     #   If you want to update protected resources, specify a temporary
@@ -7727,12 +7804,14 @@ module Aws::CloudFormation
     #   will be used.
     #
     # @option params [String] :stack_policy_during_update_url
-    #   Location of a file containing the temporary overriding stack policy.
-    #   The URL must point to a policy (max size: 16KB) located in an S3
-    #   bucket in the same Region as the stack. The location for an Amazon S3
-    #   bucket must start with `https://`. You can specify either the
-    #   `StackPolicyDuringUpdateBody` or the `StackPolicyDuringUpdateURL`
-    #   parameter, but not both.
+    #   Location of a file that contains the temporary overriding stack
+    #   policy. The URL must point to a policy (max size: 16KB) located in an
+    #   S3 bucket in the same Region as the stack. The location for an Amazon
+    #   S3 bucket must start with `https://`. URLs from S3 static websites are
+    #   not supported.
+    #
+    #   You can specify either the `StackPolicyDuringUpdateBody` or the
+    #   `StackPolicyDuringUpdateURL` parameter, but not both.
     #
     #   If you want to update protected resources, specify a temporary
     #   overriding stack policy during this update. If you don't specify a
@@ -7828,14 +7907,14 @@ module Aws::CloudFormation
     #
     #
     #
-    #   [1]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-accesskey.html
-    #   [2]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-group.html
-    #   [3]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-instanceprofile.html
-    #   [4]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-managedpolicy.html
-    #   [5]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-policy.html
-    #   [6]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-role.html
-    #   [7]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-user.html
-    #   [8]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-usertogroupaddition.html
+    #   [1]: https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-accesskey.html
+    #   [2]: https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-group.html
+    #   [3]: https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-instanceprofile.html
+    #   [4]: https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-managedpolicy.html
+    #   [5]: https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-policy.html
+    #   [6]: https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-role.html
+    #   [7]: https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-user.html
+    #   [8]: https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-usertogroupaddition.html
     #   [9]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/control-access-with-iam.html#using-iam-capabilities
     #   [10]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/transform-aws-include.html
     #   [11]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/transform-aws-serverless.html
@@ -7882,8 +7961,9 @@ module Aws::CloudFormation
     #   period afterwards.
     #
     # @option params [String] :stack_policy_body
-    #   Structure containing a new stack policy body. You can specify either
-    #   the `StackPolicyBody` or the `StackPolicyURL` parameter, but not both.
+    #   Structure that contains a new stack policy body. You can specify
+    #   either the `StackPolicyBody` or the `StackPolicyURL` parameter, but
+    #   not both.
     #
     #   You might update the stack policy, for example, in order to protect a
     #   new resource that you created during a stack update. If you don't
@@ -7891,11 +7971,13 @@ module Aws::CloudFormation
     #   stack is unchanged.
     #
     # @option params [String] :stack_policy_url
-    #   Location of a file containing the updated stack policy. The URL must
-    #   point to a policy (max size: 16KB) located in an S3 bucket in the same
-    #   Region as the stack. The location for an Amazon S3 bucket must start
-    #   with `https://`. You can specify either the `StackPolicyBody` or the
-    #   `StackPolicyURL` parameter, but not both.
+    #   Location of a file that contains the updated stack policy. The URL
+    #   must point to a policy (max size: 16KB) located in an S3 bucket in the
+    #   same Region as the stack. The location for an Amazon S3 bucket must
+    #   start with `https://`. URLs from S3 static websites are not supported.
+    #
+    #   You can specify either the `StackPolicyBody` or the `StackPolicyURL`
+    #   parameter, but not both.
     #
     #   You might update the stack policy, for example, in order to protect a
     #   new resource that you created during a stack update. If you don't
@@ -8031,6 +8113,20 @@ module Aws::CloudFormation
     # updated with the new parameter, you can then override the parameter
     # value using `UpdateStackInstances`.
     #
+    # <note markdown="1"> The maximum number of organizational unit (OUs) supported by a
+    # `UpdateStackInstances` operation is 50.
+    #
+    #  If you need more than 50, consider the following options:
+    #
+    #  * *Batch processing:* If you don't want to expose your OU hierarchy,
+    #   split up the operations into multiple calls with less than 50 OUs
+    #   each.
+    #
+    # * *Parent OU strategy:* If you don't mind exposing the OU hierarchy,
+    #   target a parent OU that contains all desired child OUs.
+    #
+    #  </note>
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_CreateStackInstances.html
@@ -8204,6 +8300,20 @@ module Aws::CloudFormation
     # CreateStackInstances calls on the specified stack set use the updated
     # stack set.
     #
+    # <note markdown="1"> The maximum number of organizational unit (OUs) supported by a
+    # `UpdateStackSet` operation is 50.
+    #
+    #  If you need more than 50, consider the following options:
+    #
+    #  * *Batch processing:* If you don't want to expose your OU hierarchy,
+    #   split up the operations into multiple calls with less than 50 OUs
+    #   each.
+    #
+    # * *Parent OU strategy:* If you don't mind exposing the OU hierarchy,
+    #   target a parent OU that contains all desired child OUs.
+    #
+    #  </note>
+    #
     # @option params [required, String] :stack_set_name
     #   The name or unique ID of the stack set that you want to update.
     #
@@ -8221,7 +8331,8 @@ module Aws::CloudFormation
     #   The URL of a file that contains the template body. The URL must point
     #   to a template (maximum size: 1 MB) that is located in an Amazon S3
     #   bucket or a Systems Manager document. The location for an Amazon S3
-    #   bucket must start with `https://`.
+    #   bucket must start with `https://`. S3 static website URLs are not
+    #   supported.
     #
     #   Conditional: You must specify only one of the following parameters:
     #   `TemplateBody` or `TemplateURL`—or set `UsePreviousTemplate` to true.
@@ -8298,13 +8409,13 @@ module Aws::CloudFormation
     #
     #
     #
-    #   [1]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-accesskey.html
-    #   [2]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-group.html
-    #   [3]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-instanceprofile.html
-    #   [4]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-policy.html
-    #   [5]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-role.html
-    #   [6]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-user.html
-    #   [7]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-usertogroupaddition.html
+    #   [1]: https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-accesskey.html
+    #   [2]: https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-group.html
+    #   [3]: https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-instanceprofile.html
+    #   [4]: https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-policy.html
+    #   [5]: https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-role.html
+    #   [6]: https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-user.html
+    #   [7]: https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/aws-resource-iam-usertogroupaddition.html
     #   [8]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/control-access-with-iam.html#using-iam-capabilities
     #   [9]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/template-macros.html
     #   [10]: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/transform-aws-include.html
@@ -8632,17 +8743,17 @@ module Aws::CloudFormation
     # returns a template validation error.
     #
     # @option params [String] :template_body
-    #   Structure containing the template body with a minimum length of 1 byte
-    #   and a maximum length of 51,200 bytes.
+    #   Structure that contains the template body with a minimum length of 1
+    #   byte and a maximum length of 51,200 bytes.
     #
     #   Conditional: You must pass `TemplateURL` or `TemplateBody`. If both
     #   are passed, only `TemplateBody` is used.
     #
     # @option params [String] :template_url
-    #   The URL of a file containing the template body. The URL must point to
-    #   a template (max size: 1 MB) that is located in an Amazon S3 bucket or
-    #   a Systems Manager document. The location for an Amazon S3 bucket must
-    #   start with `https://`.
+    #   The URL of a file that contains the template body. The URL must point
+    #   to a template (max size: 1 MB) that is located in an Amazon S3 bucket
+    #   or a Systems Manager document. The location for an Amazon S3 bucket
+    #   must start with `https://`.
     #
     #   Conditional: You must pass `TemplateURL` or `TemplateBody`. If both
     #   are passed, only `TemplateBody` is used.
@@ -8703,7 +8814,7 @@ module Aws::CloudFormation
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-cloudformation'
-      context[:gem_version] = '1.133.0'
+      context[:gem_version] = '1.135.0'
       Seahorse::Client::Request.new(handlers, context)
     end