aws-sdk-datasync 1.119.0 → 1.121.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/CHANGELOG.md +10 -0
- data/VERSION +1 -1
- data/lib/aws-sdk-datasync/client.rb +259 -15
- data/lib/aws-sdk-datasync/client_api.rb +21 -2
- data/lib/aws-sdk-datasync/types.rb +312 -20
- data/lib/aws-sdk-datasync.rb +1 -1
- data/sig/client.rbs +90 -11
- data/sig/types.rbs +19 -0
- metadata +3 -3
|
@@ -305,7 +305,8 @@ module Aws::DataSync
|
|
|
305
305
|
# secret to store the location access credentials.
|
|
306
306
|
#
|
|
307
307
|
# Make sure that DataSync has permission to access the KMS key that
|
|
308
|
-
# you specify.
|
|
308
|
+
# you specify. For more information, see [ Using a service-managed
|
|
309
|
+
# secret encrypted with a custom KMS key][1].
|
|
309
310
|
#
|
|
310
311
|
# <note markdown="1"> You can use either `CmkSecretConfig` (with `SasConfiguration`) or
|
|
311
312
|
# `CustomSecretConfig` (without `SasConfiguration`) to provide
|
|
@@ -313,6 +314,10 @@ module Aws::DataSync
|
|
|
313
314
|
# both parameters for the same request.
|
|
314
315
|
#
|
|
315
316
|
# </note>
|
|
317
|
+
#
|
|
318
|
+
#
|
|
319
|
+
#
|
|
320
|
+
# [1]: https://docs.aws.amazon.com/datasync/latest/userguide/location-credentials.html#service-secret-custom-key
|
|
316
321
|
# @return [Types::CmkSecretConfig]
|
|
317
322
|
#
|
|
318
323
|
# @!attribute [rw] custom_secret_config
|
|
@@ -320,7 +325,8 @@ module Aws::DataSync
|
|
|
320
325
|
# Manager secret where the authentication token for an AzureBlob
|
|
321
326
|
# storage location is stored in plain text, in Secrets Manager. This
|
|
322
327
|
# configuration includes the secret ARN, and the ARN for an IAM role
|
|
323
|
-
# that provides access to the secret.
|
|
328
|
+
# that provides access to the secret. For more information, see [
|
|
329
|
+
# Using a secret that you manage][1].
|
|
324
330
|
#
|
|
325
331
|
# <note markdown="1"> You can use either `CmkSecretConfig` (with `SasConfiguration`) or
|
|
326
332
|
# `CustomSecretConfig` (without `SasConfiguration`) to provide
|
|
@@ -328,6 +334,10 @@ module Aws::DataSync
|
|
|
328
334
|
# both parameters for the same request.
|
|
329
335
|
#
|
|
330
336
|
# </note>
|
|
337
|
+
#
|
|
338
|
+
#
|
|
339
|
+
#
|
|
340
|
+
# [1]: https://docs.aws.amazon.com/datasync/latest/userguide/location-credentials.html#custom-secret-custom-key
|
|
331
341
|
# @return [Types::CustomSecretConfig]
|
|
332
342
|
#
|
|
333
343
|
# @see http://docs.aws.amazon.com/goto/WebAPI/datasync-2018-11-09/CreateLocationAzureBlobRequest AWS API Documentation
|
|
@@ -716,6 +726,53 @@ module Aws::DataSync
|
|
|
716
726
|
# File Server file system.
|
|
717
727
|
# @return [String]
|
|
718
728
|
#
|
|
729
|
+
# @!attribute [rw] cmk_secret_config
|
|
730
|
+
# Specifies configuration information for a DataSync-managed secret,
|
|
731
|
+
# which includes the password that DataSync uses to access a specific
|
|
732
|
+
# FSx Windows storage location, with a customer-managed KMS key.
|
|
733
|
+
#
|
|
734
|
+
# When you include this parameter as part of a
|
|
735
|
+
# `CreateLocationFsxWindows` request, you provide only the KMS key
|
|
736
|
+
# ARN. DataSync uses this KMS key together with the `Password` you
|
|
737
|
+
# specify for to create a DataSync-managed secret to store the
|
|
738
|
+
# location access credentials.
|
|
739
|
+
#
|
|
740
|
+
# Make sure that DataSync has permission to access the KMS key that
|
|
741
|
+
# you specify. For more information, see [ Using a service-managed
|
|
742
|
+
# secret encrypted with a custom KMS key][1].
|
|
743
|
+
#
|
|
744
|
+
# <note markdown="1"> You can use either `CmkSecretConfig` (with `Password`) or
|
|
745
|
+
# `CustomSecretConfig` (without `Password`) to provide credentials for
|
|
746
|
+
# a `CreateLocationFsxWindows` request. Do not provide both parameters
|
|
747
|
+
# for the same request.
|
|
748
|
+
#
|
|
749
|
+
# </note>
|
|
750
|
+
#
|
|
751
|
+
#
|
|
752
|
+
#
|
|
753
|
+
# [1]: https://docs.aws.amazon.com/datasync/latest/userguide/location-credentials.html#service-secret-custom-key
|
|
754
|
+
# @return [Types::CmkSecretConfig]
|
|
755
|
+
#
|
|
756
|
+
# @!attribute [rw] custom_secret_config
|
|
757
|
+
# Specifies configuration information for a customer-managed Secrets
|
|
758
|
+
# Manager secret where the password for an FSx for Windows File Server
|
|
759
|
+
# storage location is stored in plain text, in Secrets Manager. This
|
|
760
|
+
# configuration includes the secret ARN, and the ARN for an IAM role
|
|
761
|
+
# that provides access to the secret. For more information, see [
|
|
762
|
+
# Using a secret that you manage][1].
|
|
763
|
+
#
|
|
764
|
+
# <note markdown="1"> You can use either `CmkSecretConfig` (with `Password`) or
|
|
765
|
+
# `CustomSecretConfig` (without `Password`) to provide credentials for
|
|
766
|
+
# a `CreateLocationFsxWindows` request. Do not provide both parameters
|
|
767
|
+
# for the same request.
|
|
768
|
+
#
|
|
769
|
+
# </note>
|
|
770
|
+
#
|
|
771
|
+
#
|
|
772
|
+
#
|
|
773
|
+
# [1]: https://docs.aws.amazon.com/datasync/latest/userguide/location-credentials.html#custom-secret-custom-key
|
|
774
|
+
# @return [Types::CustomSecretConfig]
|
|
775
|
+
#
|
|
719
776
|
# @see http://docs.aws.amazon.com/goto/WebAPI/datasync-2018-11-09/CreateLocationFsxWindowsRequest AWS API Documentation
|
|
720
777
|
#
|
|
721
778
|
class CreateLocationFsxWindowsRequest < Struct.new(
|
|
@@ -725,7 +782,9 @@ module Aws::DataSync
|
|
|
725
782
|
:tags,
|
|
726
783
|
:user,
|
|
727
784
|
:domain,
|
|
728
|
-
:password
|
|
785
|
+
:password,
|
|
786
|
+
:cmk_secret_config,
|
|
787
|
+
:custom_secret_config)
|
|
729
788
|
SENSITIVE = [:password]
|
|
730
789
|
include Aws::Structure
|
|
731
790
|
end
|
|
@@ -840,6 +899,53 @@ module Aws::DataSync
|
|
|
840
899
|
# tags to name your resources.
|
|
841
900
|
# @return [Array<Types::TagListEntry>]
|
|
842
901
|
#
|
|
902
|
+
# @!attribute [rw] cmk_secret_config
|
|
903
|
+
# Specifies configuration information for a DataSync-managed secret,
|
|
904
|
+
# which includes the Kerberos keytab that DataSync uses to access a
|
|
905
|
+
# specific Hadoop Distributed File System (HDFS) storage location,
|
|
906
|
+
# with a customer-managed KMS key.
|
|
907
|
+
#
|
|
908
|
+
# When you include this parameter as part of a `CreateLocationHdfs`
|
|
909
|
+
# request, you provide only the KMS key ARN. DataSync uses this KMS
|
|
910
|
+
# key together with the `KerberosKeytab` you specify for to create a
|
|
911
|
+
# DataSync-managed secret to store the location access credentials.
|
|
912
|
+
#
|
|
913
|
+
# Make sure that DataSync has permission to access the KMS key that
|
|
914
|
+
# you specify. For more information, see [ Using a service-managed
|
|
915
|
+
# secret encrypted with a custom KMS key][1].
|
|
916
|
+
#
|
|
917
|
+
# <note markdown="1"> You can use either `CmkSecretConfig` (with `KerberosKeytab`) or
|
|
918
|
+
# `CustomSecretConfig` (without `KerberosKeytab`) to provide
|
|
919
|
+
# credentials for a `CreateLocationHdfs` request. Do not provide both
|
|
920
|
+
# parameters for the same request.
|
|
921
|
+
#
|
|
922
|
+
# </note>
|
|
923
|
+
#
|
|
924
|
+
#
|
|
925
|
+
#
|
|
926
|
+
# [1]: https://docs.aws.amazon.com/datasync/latest/userguide/location-credentials.html#service-secret-custom-key
|
|
927
|
+
# @return [Types::CmkSecretConfig]
|
|
928
|
+
#
|
|
929
|
+
# @!attribute [rw] custom_secret_config
|
|
930
|
+
# Specifies configuration information for a customer-managed Secrets
|
|
931
|
+
# Manager secret where the Kerberos keytab for the HDFS storage
|
|
932
|
+
# location is stored in binary, in Secrets Manager. This configuration
|
|
933
|
+
# includes the secret ARN, and the ARN for an IAM role that provides
|
|
934
|
+
# access to the secret. For more information, see [ Using a secret
|
|
935
|
+
# that you manage][1].
|
|
936
|
+
#
|
|
937
|
+
# <note markdown="1"> You can use either `CmkSecretConfig` (with `KerberosKeytab`) or
|
|
938
|
+
# `CustomSecretConfig` (without `KerberosKeytab`) to provide
|
|
939
|
+
# credentials for a `CreateLocationHdfs` request. Do not provide both
|
|
940
|
+
# parameters for the same request.
|
|
941
|
+
#
|
|
942
|
+
# </note>
|
|
943
|
+
#
|
|
944
|
+
#
|
|
945
|
+
#
|
|
946
|
+
# [1]: https://docs.aws.amazon.com/datasync/latest/userguide/location-credentials.html#custom-secret-custom-key
|
|
947
|
+
# @return [Types::CustomSecretConfig]
|
|
948
|
+
#
|
|
843
949
|
# @see http://docs.aws.amazon.com/goto/WebAPI/datasync-2018-11-09/CreateLocationHdfsRequest AWS API Documentation
|
|
844
950
|
#
|
|
845
951
|
class CreateLocationHdfsRequest < Struct.new(
|
|
@@ -855,7 +961,9 @@ module Aws::DataSync
|
|
|
855
961
|
:kerberos_keytab,
|
|
856
962
|
:kerberos_krb_5_conf,
|
|
857
963
|
:agent_arns,
|
|
858
|
-
:tags
|
|
964
|
+
:tags,
|
|
965
|
+
:cmk_secret_config,
|
|
966
|
+
:custom_secret_config)
|
|
859
967
|
SENSITIVE = []
|
|
860
968
|
include Aws::Structure
|
|
861
969
|
end
|
|
@@ -1046,7 +1154,8 @@ module Aws::DataSync
|
|
|
1046
1154
|
# store the location access credentials.
|
|
1047
1155
|
#
|
|
1048
1156
|
# Make sure that DataSync has permission to access the KMS key that
|
|
1049
|
-
# you specify.
|
|
1157
|
+
# you specify. For more information, see [ Using a service-managed
|
|
1158
|
+
# secret encrypted with a custom KMS key][1].
|
|
1050
1159
|
#
|
|
1051
1160
|
# <note markdown="1"> You can use either `CmkSecretConfig` (with `SecretKey`) or
|
|
1052
1161
|
# `CustomSecretConfig` (without `SecretKey`) to provide credentials
|
|
@@ -1054,6 +1163,10 @@ module Aws::DataSync
|
|
|
1054
1163
|
# parameters for the same request.
|
|
1055
1164
|
#
|
|
1056
1165
|
# </note>
|
|
1166
|
+
#
|
|
1167
|
+
#
|
|
1168
|
+
#
|
|
1169
|
+
# [1]: https://docs.aws.amazon.com/datasync/latest/userguide/location-credentials.html#service-secret-custom-key
|
|
1057
1170
|
# @return [Types::CmkSecretConfig]
|
|
1058
1171
|
#
|
|
1059
1172
|
# @!attribute [rw] custom_secret_config
|
|
@@ -1061,7 +1174,8 @@ module Aws::DataSync
|
|
|
1061
1174
|
# Manager secret where the secret key for a specific object storage
|
|
1062
1175
|
# location is stored in plain text, in Secrets Manager. This
|
|
1063
1176
|
# configuration includes the secret ARN, and the ARN for an IAM role
|
|
1064
|
-
# that provides access to the secret.
|
|
1177
|
+
# that provides access to the secret. For more information, see [
|
|
1178
|
+
# Using a secret that you manage][1].
|
|
1065
1179
|
#
|
|
1066
1180
|
# <note markdown="1"> You can use either `CmkSecretConfig` (with `SecretKey`) or
|
|
1067
1181
|
# `CustomSecretConfig` (without `SecretKey`) to provide credentials
|
|
@@ -1069,6 +1183,10 @@ module Aws::DataSync
|
|
|
1069
1183
|
# parameters for the same request.
|
|
1070
1184
|
#
|
|
1071
1185
|
# </note>
|
|
1186
|
+
#
|
|
1187
|
+
#
|
|
1188
|
+
#
|
|
1189
|
+
# [1]: https://docs.aws.amazon.com/datasync/latest/userguide/location-credentials.html#custom-secret-custom-key
|
|
1072
1190
|
# @return [Types::CustomSecretConfig]
|
|
1073
1191
|
#
|
|
1074
1192
|
# @see http://docs.aws.amazon.com/goto/WebAPI/datasync-2018-11-09/CreateLocationObjectStorageRequest AWS API Documentation
|
|
@@ -1288,7 +1406,8 @@ module Aws::DataSync
|
|
|
1288
1406
|
# to store the location access credentials.
|
|
1289
1407
|
#
|
|
1290
1408
|
# Make sure that DataSync has permission to access the KMS key that
|
|
1291
|
-
# you specify.
|
|
1409
|
+
# you specify. For more information, see [ Using a service-managed
|
|
1410
|
+
# secret encrypted with a custom KMS key][1].
|
|
1292
1411
|
#
|
|
1293
1412
|
# <note markdown="1"> You can use either `CmkSecretConfig` (with either `Password` or
|
|
1294
1413
|
# `KerberosKeytab`) or `CustomSecretConfig` (without any `Password`
|
|
@@ -1298,6 +1417,10 @@ module Aws::DataSync
|
|
|
1298
1417
|
# request.
|
|
1299
1418
|
#
|
|
1300
1419
|
# </note>
|
|
1420
|
+
#
|
|
1421
|
+
#
|
|
1422
|
+
#
|
|
1423
|
+
# [1]: https://docs.aws.amazon.com/datasync/latest/userguide/location-credentials.html#service-secret-custom-key
|
|
1301
1424
|
# @return [Types::CmkSecretConfig]
|
|
1302
1425
|
#
|
|
1303
1426
|
# @!attribute [rw] custom_secret_config
|
|
@@ -1305,7 +1428,8 @@ module Aws::DataSync
|
|
|
1305
1428
|
# Manager secret where the SMB storage location credentials is stored
|
|
1306
1429
|
# in Secrets Manager as plain text (for `Password`) or binary (for
|
|
1307
1430
|
# `KerberosKeytab`). This configuration includes the secret ARN, and
|
|
1308
|
-
# the ARN for an IAM role that provides access to the secret.
|
|
1431
|
+
# the ARN for an IAM role that provides access to the secret. For more
|
|
1432
|
+
# information, see [ Using a secret that you manage][1].
|
|
1309
1433
|
#
|
|
1310
1434
|
# <note markdown="1"> You can use either `CmkSecretConfig` (with `SasConfiguration`) or
|
|
1311
1435
|
# `CustomSecretConfig` (without `SasConfiguration`) to provide
|
|
@@ -1313,6 +1437,10 @@ module Aws::DataSync
|
|
|
1313
1437
|
# both parameters for the same request.
|
|
1314
1438
|
#
|
|
1315
1439
|
# </note>
|
|
1440
|
+
#
|
|
1441
|
+
#
|
|
1442
|
+
#
|
|
1443
|
+
# [1]: https://docs.aws.amazon.com/datasync/latest/userguide/location-credentials.html#custom-secret-custom-key
|
|
1316
1444
|
# @return [Types::CustomSecretConfig]
|
|
1317
1445
|
#
|
|
1318
1446
|
# @!attribute [rw] agent_arns
|
|
@@ -1841,7 +1969,8 @@ module Aws::DataSync
|
|
|
1841
1969
|
# @!attribute [rw] custom_secret_config
|
|
1842
1970
|
# Describes configuration information for a customer-managed secret,
|
|
1843
1971
|
# such as an authentication token that DataSync uses to access a
|
|
1844
|
-
# specific storage location, with a customer-managed
|
|
1972
|
+
# specific storage location, with a customer-managed Identity and
|
|
1973
|
+
# Access Management (IAM) role that provides access to the secret.
|
|
1845
1974
|
# @return [Types::CustomSecretConfig]
|
|
1846
1975
|
#
|
|
1847
1976
|
# @see http://docs.aws.amazon.com/goto/WebAPI/datasync-2018-11-09/DescribeLocationAzureBlobResponse AWS API Documentation
|
|
@@ -2141,6 +2270,26 @@ module Aws::DataSync
|
|
|
2141
2270
|
# Windows File Server file system belongs to.
|
|
2142
2271
|
# @return [String]
|
|
2143
2272
|
#
|
|
2273
|
+
# @!attribute [rw] managed_secret_config
|
|
2274
|
+
# Describes configuration information for a DataSync-managed secret,
|
|
2275
|
+
# such as a `Password` that DataSync uses to access a specific storage
|
|
2276
|
+
# location. DataSync uses the default Amazon Web Services-managed KMS
|
|
2277
|
+
# key to encrypt this secret in Secrets Manager.
|
|
2278
|
+
# @return [Types::ManagedSecretConfig]
|
|
2279
|
+
#
|
|
2280
|
+
# @!attribute [rw] cmk_secret_config
|
|
2281
|
+
# Describes configuration information for a DataSync-managed secret,
|
|
2282
|
+
# such as a `Password` that DataSync uses to access a specific storage
|
|
2283
|
+
# location, with a customer-managed KMS key.
|
|
2284
|
+
# @return [Types::CmkSecretConfig]
|
|
2285
|
+
#
|
|
2286
|
+
# @!attribute [rw] custom_secret_config
|
|
2287
|
+
# Describes configuration information for a customer-managed secret,
|
|
2288
|
+
# such as a `Password` that DataSync uses to access a specific storage
|
|
2289
|
+
# location, with a customer-managed Identity and Access Management
|
|
2290
|
+
# (IAM) role that provides access to the secret.
|
|
2291
|
+
# @return [Types::CustomSecretConfig]
|
|
2292
|
+
#
|
|
2144
2293
|
# @see http://docs.aws.amazon.com/goto/WebAPI/datasync-2018-11-09/DescribeLocationFsxWindowsResponse AWS API Documentation
|
|
2145
2294
|
#
|
|
2146
2295
|
class DescribeLocationFsxWindowsResponse < Struct.new(
|
|
@@ -2149,7 +2298,10 @@ module Aws::DataSync
|
|
|
2149
2298
|
:security_group_arns,
|
|
2150
2299
|
:creation_time,
|
|
2151
2300
|
:user,
|
|
2152
|
-
:domain
|
|
2301
|
+
:domain,
|
|
2302
|
+
:managed_secret_config,
|
|
2303
|
+
:cmk_secret_config,
|
|
2304
|
+
:custom_secret_config)
|
|
2153
2305
|
SENSITIVE = []
|
|
2154
2306
|
include Aws::Structure
|
|
2155
2307
|
end
|
|
@@ -2223,6 +2375,26 @@ module Aws::DataSync
|
|
|
2223
2375
|
# The time that the HDFS location was created.
|
|
2224
2376
|
# @return [Time]
|
|
2225
2377
|
#
|
|
2378
|
+
# @!attribute [rw] managed_secret_config
|
|
2379
|
+
# Describes configuration information for a DataSync-managed secret,
|
|
2380
|
+
# such as a `KerberosKeytab` that DataSync uses to access a specific
|
|
2381
|
+
# storage location. DataSync uses the default Amazon Web
|
|
2382
|
+
# Services-managed KMS key to encrypt this secret in Secrets Manager.
|
|
2383
|
+
# @return [Types::ManagedSecretConfig]
|
|
2384
|
+
#
|
|
2385
|
+
# @!attribute [rw] cmk_secret_config
|
|
2386
|
+
# Describes configuration information for a DataSync-managed secret,
|
|
2387
|
+
# such as a `KerberosKeytab` that DataSync uses to access a specific
|
|
2388
|
+
# storage location, with a customer-managed KMS key.
|
|
2389
|
+
# @return [Types::CmkSecretConfig]
|
|
2390
|
+
#
|
|
2391
|
+
# @!attribute [rw] custom_secret_config
|
|
2392
|
+
# Describes configuration information for a customer-managed secret,
|
|
2393
|
+
# such as a `KerberosKeytab` that DataSync uses to access a specific
|
|
2394
|
+
# storage location, with a customer-managed Identity and Access
|
|
2395
|
+
# Management (IAM) role that provides access to the secret.
|
|
2396
|
+
# @return [Types::CustomSecretConfig]
|
|
2397
|
+
#
|
|
2226
2398
|
# @see http://docs.aws.amazon.com/goto/WebAPI/datasync-2018-11-09/DescribeLocationHdfsResponse AWS API Documentation
|
|
2227
2399
|
#
|
|
2228
2400
|
class DescribeLocationHdfsResponse < Struct.new(
|
|
@@ -2237,7 +2409,10 @@ module Aws::DataSync
|
|
|
2237
2409
|
:simple_user,
|
|
2238
2410
|
:kerberos_principal,
|
|
2239
2411
|
:agent_arns,
|
|
2240
|
-
:creation_time
|
|
2412
|
+
:creation_time,
|
|
2413
|
+
:managed_secret_config,
|
|
2414
|
+
:cmk_secret_config,
|
|
2415
|
+
:custom_secret_config)
|
|
2241
2416
|
SENSITIVE = []
|
|
2242
2417
|
include Aws::Structure
|
|
2243
2418
|
end
|
|
@@ -2365,7 +2540,8 @@ module Aws::DataSync
|
|
|
2365
2540
|
# Describes configuration information for a customer-managed secret,
|
|
2366
2541
|
# such as an authentication token or set of credentials that DataSync
|
|
2367
2542
|
# uses to access a specific transfer location, and a customer-managed
|
|
2368
|
-
#
|
|
2543
|
+
# Identity and Access Management (IAM) role that provides access to
|
|
2544
|
+
# the secret.
|
|
2369
2545
|
# @return [Types::CustomSecretConfig]
|
|
2370
2546
|
#
|
|
2371
2547
|
# @see http://docs.aws.amazon.com/goto/WebAPI/datasync-2018-11-09/DescribeLocationObjectStorageResponse AWS API Documentation
|
|
@@ -2547,7 +2723,8 @@ module Aws::DataSync
|
|
|
2547
2723
|
# @!attribute [rw] custom_secret_config
|
|
2548
2724
|
# Describes configuration information for a customer-managed secret,
|
|
2549
2725
|
# such as a `Password` or `KerberosKeytab` that DataSync uses to
|
|
2550
|
-
# access a specific storage location, with a customer-managed
|
|
2726
|
+
# access a specific storage location, with a customer-managed Identity
|
|
2727
|
+
# and Access Management (IAM) role that provides access to the secret.
|
|
2551
2728
|
# @return [Types::CustomSecretConfig]
|
|
2552
2729
|
#
|
|
2553
2730
|
# @see http://docs.aws.amazon.com/goto/WebAPI/datasync-2018-11-09/DescribeLocationSmbResponse AWS API Documentation
|
|
@@ -3458,13 +3635,77 @@ module Aws::DataSync
|
|
|
3458
3635
|
# [1]: https://docs.aws.amazon.com/datasync/latest/userguide/create-ontap-location.html#create-ontap-location-smb
|
|
3459
3636
|
# @return [String]
|
|
3460
3637
|
#
|
|
3638
|
+
# @!attribute [rw] managed_secret_config
|
|
3639
|
+
# Describes configuration information for a DataSync-managed secret,
|
|
3640
|
+
# such as a `Password` that DataSync uses to access a specific storage
|
|
3641
|
+
# location. DataSync uses the default Amazon Web Services-managed KMS
|
|
3642
|
+
# key to encrypt this secret in Secrets Manager.
|
|
3643
|
+
#
|
|
3644
|
+
# <note markdown="1"> Do not provide this for a `CreateLocation` request.
|
|
3645
|
+
# `ManagedSecretConfig` is a ReadOnly property and is only be
|
|
3646
|
+
# populated in the `DescribeLocation` response.
|
|
3647
|
+
#
|
|
3648
|
+
# </note>
|
|
3649
|
+
# @return [Types::ManagedSecretConfig]
|
|
3650
|
+
#
|
|
3651
|
+
# @!attribute [rw] cmk_secret_config
|
|
3652
|
+
# Specifies configuration information for a DataSync-managed secret,
|
|
3653
|
+
# which includes the password that DataSync uses to access a specific
|
|
3654
|
+
# FSx for ONTAP storage location (using SMB), with a customer-managed
|
|
3655
|
+
# KMS key.
|
|
3656
|
+
#
|
|
3657
|
+
# When you include this parameter as part of a
|
|
3658
|
+
# `CreateLocationFsxOntap` request, you provide only the KMS key ARN.
|
|
3659
|
+
# DataSync uses this KMS key together with the `Password` you specify
|
|
3660
|
+
# for to create a DataSync-managed secret to store the location access
|
|
3661
|
+
# credentials.
|
|
3662
|
+
#
|
|
3663
|
+
# Make sure that DataSync has permission to access the KMS key that
|
|
3664
|
+
# you specify. For more information, see [ Using a service-managed
|
|
3665
|
+
# secret encrypted with a custom KMS key][1].
|
|
3666
|
+
#
|
|
3667
|
+
# <note markdown="1"> You can use either `CmkSecretConfig` (with `Password`) or
|
|
3668
|
+
# `CustomSecretConfig` (without `Password`) to provide credentials for
|
|
3669
|
+
# a `CreateLocationFsxOntap` request. Do not provide both parameters
|
|
3670
|
+
# for the same request.
|
|
3671
|
+
#
|
|
3672
|
+
# </note>
|
|
3673
|
+
#
|
|
3674
|
+
#
|
|
3675
|
+
#
|
|
3676
|
+
# [1]: https://docs.aws.amazon.com/datasync/latest/userguide/location-credentials.html#service-secret-custom-key
|
|
3677
|
+
# @return [Types::CmkSecretConfig]
|
|
3678
|
+
#
|
|
3679
|
+
# @!attribute [rw] custom_secret_config
|
|
3680
|
+
# Specifies configuration information for a customer-managed Secrets
|
|
3681
|
+
# Manager secret where the password for an FSx for ONTAP storage
|
|
3682
|
+
# location (using SMB) is stored in plain text, in Secrets Manager.
|
|
3683
|
+
# This configuration includes the secret ARN, and the ARN for an IAM
|
|
3684
|
+
# role that provides access to the secret. For more information, see [
|
|
3685
|
+
# Using a secret that you manage][1].
|
|
3686
|
+
#
|
|
3687
|
+
# <note markdown="1"> You can use either `CmkSecretConfig` (with `Password`) or
|
|
3688
|
+
# `CustomSecretConfig` (without `Password`) to provide credentials for
|
|
3689
|
+
# a `CreateLocationFsxOntap` request. Do not provide both parameters
|
|
3690
|
+
# for the same request.
|
|
3691
|
+
#
|
|
3692
|
+
# </note>
|
|
3693
|
+
#
|
|
3694
|
+
#
|
|
3695
|
+
#
|
|
3696
|
+
# [1]: https://docs.aws.amazon.com/datasync/latest/userguide/location-credentials.html#custom-secret-custom-key
|
|
3697
|
+
# @return [Types::CustomSecretConfig]
|
|
3698
|
+
#
|
|
3461
3699
|
# @see http://docs.aws.amazon.com/goto/WebAPI/datasync-2018-11-09/FsxProtocolSmb AWS API Documentation
|
|
3462
3700
|
#
|
|
3463
3701
|
class FsxProtocolSmb < Struct.new(
|
|
3464
3702
|
:domain,
|
|
3465
3703
|
:mount_options,
|
|
3466
3704
|
:password,
|
|
3467
|
-
:user
|
|
3705
|
+
:user,
|
|
3706
|
+
:managed_secret_config,
|
|
3707
|
+
:cmk_secret_config,
|
|
3708
|
+
:custom_secret_config)
|
|
3468
3709
|
SENSITIVE = [:password]
|
|
3469
3710
|
include Aws::Structure
|
|
3470
3711
|
end
|
|
@@ -3539,13 +3780,29 @@ module Aws::DataSync
|
|
|
3539
3780
|
# [1]: https://docs.aws.amazon.com/datasync/latest/userguide/create-ontap-location.html#create-ontap-location-smb
|
|
3540
3781
|
# @return [String]
|
|
3541
3782
|
#
|
|
3783
|
+
# @!attribute [rw] cmk_secret_config
|
|
3784
|
+
# Specifies configuration information for a DataSync-managed secret,
|
|
3785
|
+
# such as a `Password` or set of credentials that DataSync uses to
|
|
3786
|
+
# access a specific transfer location, and a customer-managed KMS key.
|
|
3787
|
+
# @return [Types::CmkSecretConfig]
|
|
3788
|
+
#
|
|
3789
|
+
# @!attribute [rw] custom_secret_config
|
|
3790
|
+
# Specifies configuration information for a customer-managed secret,
|
|
3791
|
+
# such as a `Password` or set of credentials that DataSync uses to
|
|
3792
|
+
# access a specific transfer location. This configuration includes the
|
|
3793
|
+
# secret ARN, and the ARN for an IAM role that provides access to the
|
|
3794
|
+
# secret.
|
|
3795
|
+
# @return [Types::CustomSecretConfig]
|
|
3796
|
+
#
|
|
3542
3797
|
# @see http://docs.aws.amazon.com/goto/WebAPI/datasync-2018-11-09/FsxUpdateProtocolSmb AWS API Documentation
|
|
3543
3798
|
#
|
|
3544
3799
|
class FsxUpdateProtocolSmb < Struct.new(
|
|
3545
3800
|
:domain,
|
|
3546
3801
|
:mount_options,
|
|
3547
3802
|
:password,
|
|
3548
|
-
:user
|
|
3803
|
+
:user,
|
|
3804
|
+
:cmk_secret_config,
|
|
3805
|
+
:custom_secret_config)
|
|
3549
3806
|
SENSITIVE = [:password]
|
|
3550
3807
|
include Aws::Structure
|
|
3551
3808
|
end
|
|
@@ -5672,7 +5929,8 @@ module Aws::DataSync
|
|
|
5672
5929
|
# Specifies configuration information for a customer-managed secret,
|
|
5673
5930
|
# such as an authentication token or set of credentials that DataSync
|
|
5674
5931
|
# uses to access a specific transfer location, and a customer-managed
|
|
5675
|
-
#
|
|
5932
|
+
# Identity and Access Management (IAM) role that provides access to
|
|
5933
|
+
# the secret.
|
|
5676
5934
|
# @return [Types::CustomSecretConfig]
|
|
5677
5935
|
#
|
|
5678
5936
|
# @see http://docs.aws.amazon.com/goto/WebAPI/datasync-2018-11-09/UpdateLocationAzureBlobRequest AWS API Documentation
|
|
@@ -5908,6 +6166,19 @@ module Aws::DataSync
|
|
|
5908
6166
|
# File Server file system.
|
|
5909
6167
|
# @return [String]
|
|
5910
6168
|
#
|
|
6169
|
+
# @!attribute [rw] cmk_secret_config
|
|
6170
|
+
# Specifies configuration information for a DataSync-managed secret,
|
|
6171
|
+
# such as a `Password` or set of credentials that DataSync uses to
|
|
6172
|
+
# access a specific transfer location, and a customer-managed KMS key.
|
|
6173
|
+
# @return [Types::CmkSecretConfig]
|
|
6174
|
+
#
|
|
6175
|
+
# @!attribute [rw] custom_secret_config
|
|
6176
|
+
# Specifies configuration information for a customer-managed secret,
|
|
6177
|
+
# such as a `Password` or set of credentials that DataSync uses to
|
|
6178
|
+
# access a specific transfer location, and a customer-managed Identity
|
|
6179
|
+
# and Access Management (IAM) role that provides access to the secret.
|
|
6180
|
+
# @return [Types::CustomSecretConfig]
|
|
6181
|
+
#
|
|
5911
6182
|
# @see http://docs.aws.amazon.com/goto/WebAPI/datasync-2018-11-09/UpdateLocationFsxWindowsRequest AWS API Documentation
|
|
5912
6183
|
#
|
|
5913
6184
|
class UpdateLocationFsxWindowsRequest < Struct.new(
|
|
@@ -5915,7 +6186,9 @@ module Aws::DataSync
|
|
|
5915
6186
|
:subdirectory,
|
|
5916
6187
|
:domain,
|
|
5917
6188
|
:user,
|
|
5918
|
-
:password
|
|
6189
|
+
:password,
|
|
6190
|
+
:cmk_secret_config,
|
|
6191
|
+
:custom_secret_config)
|
|
5919
6192
|
SENSITIVE = [:password]
|
|
5920
6193
|
include Aws::Structure
|
|
5921
6194
|
end
|
|
@@ -5992,6 +6265,21 @@ module Aws::DataSync
|
|
|
5992
6265
|
# connect to your HDFS cluster.
|
|
5993
6266
|
# @return [Array<String>]
|
|
5994
6267
|
#
|
|
6268
|
+
# @!attribute [rw] cmk_secret_config
|
|
6269
|
+
# Specifies configuration information for a DataSync-managed secret,
|
|
6270
|
+
# such as a `KerberosKeytab` or set of credentials that DataSync uses
|
|
6271
|
+
# to access a specific transfer location, and a customer-managed KMS
|
|
6272
|
+
# key.
|
|
6273
|
+
# @return [Types::CmkSecretConfig]
|
|
6274
|
+
#
|
|
6275
|
+
# @!attribute [rw] custom_secret_config
|
|
6276
|
+
# Specifies configuration information for a customer-managed secret,
|
|
6277
|
+
# such as a `KerberosKeytab` or set of credentials that DataSync uses
|
|
6278
|
+
# to access a specific transfer location, and a customer-managed
|
|
6279
|
+
# Identity and Access Management (IAM) role that provides access to
|
|
6280
|
+
# the secret.
|
|
6281
|
+
# @return [Types::CustomSecretConfig]
|
|
6282
|
+
#
|
|
5995
6283
|
# @see http://docs.aws.amazon.com/goto/WebAPI/datasync-2018-11-09/UpdateLocationHdfsRequest AWS API Documentation
|
|
5996
6284
|
#
|
|
5997
6285
|
class UpdateLocationHdfsRequest < Struct.new(
|
|
@@ -6007,7 +6295,9 @@ module Aws::DataSync
|
|
|
6007
6295
|
:kerberos_principal,
|
|
6008
6296
|
:kerberos_keytab,
|
|
6009
6297
|
:kerberos_krb_5_conf,
|
|
6010
|
-
:agent_arns
|
|
6298
|
+
:agent_arns,
|
|
6299
|
+
:cmk_secret_config,
|
|
6300
|
+
:custom_secret_config)
|
|
6011
6301
|
SENSITIVE = []
|
|
6012
6302
|
include Aws::Structure
|
|
6013
6303
|
end
|
|
@@ -6160,7 +6450,8 @@ module Aws::DataSync
|
|
|
6160
6450
|
# Specifies configuration information for a customer-managed secret,
|
|
6161
6451
|
# such as an authentication token or set of credentials that DataSync
|
|
6162
6452
|
# uses to access a specific transfer location, and a customer-managed
|
|
6163
|
-
#
|
|
6453
|
+
# Identity and Access Management (IAM) role that provides access to
|
|
6454
|
+
# the secret.
|
|
6164
6455
|
# @return [Types::CustomSecretConfig]
|
|
6165
6456
|
#
|
|
6166
6457
|
# @see http://docs.aws.amazon.com/goto/WebAPI/datasync-2018-11-09/UpdateLocationObjectStorageRequest AWS API Documentation
|
|
@@ -6326,7 +6617,8 @@ module Aws::DataSync
|
|
|
6326
6617
|
# Specifies configuration information for a customer-managed secret,
|
|
6327
6618
|
# such as a `Password` or `KerberosKeytab` or set of credentials that
|
|
6328
6619
|
# DataSync uses to access a specific transfer location, and a
|
|
6329
|
-
# customer-managed
|
|
6620
|
+
# customer-managed Identity and Access Management (IAM) role that
|
|
6621
|
+
# provides access to the secret.
|
|
6330
6622
|
# @return [Types::CustomSecretConfig]
|
|
6331
6623
|
#
|
|
6332
6624
|
# @!attribute [rw] agent_arns
|