aws-sdk-datasync 1.46.0 → 1.47.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a55193f2d81610b8a139fd4a3141f92836988303e8be894a6518f83fba89205b
-  data.tar.gz: 01e7df4e5ef7c720976b87ff1b6774b31cdcd739c363abf42df8b692222615a2
+  metadata.gz: f4b4666d779f79d3e61f739a78e58ce6c2f99dd4896bca06a5c8974f27687418
+  data.tar.gz: 9bef7aa7fb8dfbc06c9ed60e1866017981cfe83749133ce08f2ce3ba393d8d9f
 SHA512:
-  metadata.gz: 2ee5e6f414f53b6bf6ad322c411cbcc597bea3d4edb7b44dc31714b07cc9c569f4c8f8707e9b2475f20e9ea2c4499aa429330a0f9e735456bddcc8b08f572e88
-  data.tar.gz: 9017a3c21891d2e4fdf9589f6799baf47ecfd70eabe1503e4b8829215f0d072586a2db2e482154f28ea276e9dd8f00d91771f6512663b0f83b186887b4b1a666
+  metadata.gz: 14263ad0d6e96e6ff3cc74963fdb1716d5956bf6c0fd85a93b57e02da0da9cd3cd3b76e87f0ed91850100ee7bb1532ec54c09e4180f8ade5254c10b0c8e3a0dc
+  data.tar.gz: 2cafbcf534a3933d757cebb5d39b78a5679f91df0f7baac2aec6e9c88e744f6452268b77835cdfa655de193c3ab7f7afe5e6a212c8b7116e7e4cfb9201444eed

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.47.0 (2022-05-27)
+------------------
+
+* Feature - AWS DataSync now supports TLS encryption in transit, file system policies and access points for EFS locations.
+
 1.46.0 (2022-05-05)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.46.0
+1.47.0

data/lib/aws-sdk-datasync/client.rb

@@ -508,50 +508,53 @@ module Aws::DataSync
       req.send_request(options)
     end
 
-    # Creates an endpoint for an Amazon EFS file system.
+    # Creates an endpoint for an Amazon EFS file system that DataSync can
+    # access for a transfer. For more information, see [Creating a location
+    # for Amazon EFS][1].
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/datasync/latest/userguide/create-efs-location.html
     #
     # @option params [String] :subdirectory
-    #   A subdirectory in the location’s path. This subdirectory in the EFS
-    #   file system is used to read data from the EFS source location or write
-    #   data to the EFS destination. By default, DataSync uses the root
-    #   directory.
+    #   Specifies a mount path for your Amazon EFS file system. This is where
+    #   DataSync reads or writes data (depending on if this is a source or
+    #   destination location). By default, DataSync uses the root directory,
+    #   but you can also include subdirectories.
     #
-    #   <note markdown="1"> `Subdirectory` must be specified with forward slashes. For example,
-    #   `/path/to/folder`.
+    #   <note markdown="1"> You must specify a value with forward slashes (for example,
+    #   `/path/to/folder`).
     #
     #    </note>
     #
     # @option params [required, String] :efs_filesystem_arn
-    #   The Amazon Resource Name (ARN) for the Amazon EFS file system.
+    #   Specifies the ARN for the Amazon EFS file system.
     #
     # @option params [required, Types::Ec2Config] :ec2_config
-    #   The subnet and security group that the Amazon EFS file system uses.
-    #   The security group that you provide needs to be able to communicate
-    #   with the security group on the mount target in the subnet specified.
+    #   Specifies the subnet and security groups DataSync uses to access your
+    #   Amazon EFS file system.
     #
-    #   The exact relationship between security group M (of the mount target)
-    #   and security group S (which you provide for DataSync to use at this
-    #   stage) is as follows:
+    # @option params [Array<Types::TagListEntry>] :tags
+    #   Specifies the key-value pair that represents a tag that you want to
+    #   add to the resource. The value can be an empty string. This value
+    #   helps you manage, filter, and search for your resources. We recommend
+    #   that you create a name tag for your location.
     #
-    #   * Security group M (which you associate with the mount target) must
-    #     allow inbound access for the Transmission Control Protocol (TCP) on
-    #     the NFS port (2049) from security group S. You can enable inbound
-    #     connections either by IP address (CIDR range) or security group.
+    # @option params [String] :access_point_arn
+    #   Specifies the Amazon Resource Name (ARN) of the access point that
+    #   DataSync uses to access the Amazon EFS file system.
     #
-    #   * Security group S (provided to DataSync to access EFS) should have a
-    #     rule that enables outbound connections to the NFS port on one of the
-    #     file system’s mount targets. You can enable outbound connections
-    #     either by IP address (CIDR range) or security group.
+    # @option params [String] :file_system_access_role_arn
+    #   Specifies an Identity and Access Management (IAM) role that DataSync
+    #   assumes when mounting the Amazon EFS file system.
     #
-    #     For information about security groups and mount targets, see
-    #     Security Groups for Amazon EC2 Instances and Mount Targets in the
-    #     *Amazon EFS User Guide.*
+    # @option params [String] :in_transit_encryption
+    #   Specifies whether you want DataSync to use TLS encryption when
+    #   transferring data to or from your Amazon EFS file system.
     #
-    # @option params [Array<Types::TagListEntry>] :tags
-    #   The key-value pair that represents a tag that you want to add to the
-    #   resource. The value can be an empty string. This value helps you
-    #   manage, filter, and search for your resources. We recommend that you
-    #   create a name tag for your location.
+    #   If you specify an access point using `AccessPointArn` or an IAM role
+    #   using `FileSystemAccessRoleArn`, you must set this parameter to
+    #   `TLS1_2`.
     #
     # @return [Types::CreateLocationEfsResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
@@ -572,6 +575,9 @@ module Aws::DataSync
     #         value: "TagValue",
     #       },
     #     ],
+    #     access_point_arn: "EfsAccessPointArn",
+    #     file_system_access_role_arn: "IamRoleArn",
+    #     in_transit_encryption: "NONE", # accepts NONE, TLS1_2
     #   })
     #
     # @example Response structure
@@ -1562,11 +1568,12 @@ module Aws::DataSync
       req.send_request(options)
     end
 
-    # Returns metadata, such as the path information about an Amazon EFS
-    # location.
+    # Returns metadata about your DataSync location for an Amazon EFS file
+    # system.
     #
     # @option params [required, String] :location_arn
-    #   The Amazon Resource Name (ARN) of the EFS location to describe.
+    #   The Amazon Resource Name (ARN) of the Amazon EFS file system location
+    #   that you want information about.
     #
     # @return [Types::DescribeLocationEfsResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
@@ -1574,6 +1581,9 @@ module Aws::DataSync
     #   * {Types::DescribeLocationEfsResponse#location_uri #location_uri} => String
     #   * {Types::DescribeLocationEfsResponse#ec2_config #ec2_config} => Types::Ec2Config
     #   * {Types::DescribeLocationEfsResponse#creation_time #creation_time} => Time
+    #   * {Types::DescribeLocationEfsResponse#access_point_arn #access_point_arn} => String
+    #   * {Types::DescribeLocationEfsResponse#file_system_access_role_arn #file_system_access_role_arn} => String
+    #   * {Types::DescribeLocationEfsResponse#in_transit_encryption #in_transit_encryption} => String
     #
     # @example Request syntax with placeholder values
     #
@@ -1589,6 +1599,9 @@ module Aws::DataSync
     #   resp.ec2_config.security_group_arns #=> Array
     #   resp.ec2_config.security_group_arns[0] #=> String
     #   resp.creation_time #=> Time
+    #   resp.access_point_arn #=> String
+    #   resp.file_system_access_role_arn #=> String
+    #   resp.in_transit_encryption #=> String, one of "NONE", "TLS1_2"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/datasync-2018-11-09/DescribeLocationEfs AWS API Documentation
     #
@@ -3022,7 +3035,7 @@ module Aws::DataSync
         params: params,
         config: config)
       context[:gem_name] = 'aws-sdk-datasync'
-      context[:gem_version] = '1.46.0'
+      context[:gem_version] = '1.47.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-datasync/client_api.rb

@@ -81,7 +81,9 @@ module Aws::DataSync
     Ec2SecurityGroupArn = Shapes::StringShape.new(name: 'Ec2SecurityGroupArn')
     Ec2SecurityGroupArnList = Shapes::ListShape.new(name: 'Ec2SecurityGroupArnList')
     Ec2SubnetArn = Shapes::StringShape.new(name: 'Ec2SubnetArn')
+    EfsAccessPointArn = Shapes::StringShape.new(name: 'EfsAccessPointArn')
     EfsFilesystemArn = Shapes::StringShape.new(name: 'EfsFilesystemArn')
+    EfsInTransitEncryption = Shapes::StringShape.new(name: 'EfsInTransitEncryption')
     EfsSubdirectory = Shapes::StringShape.new(name: 'EfsSubdirectory')
     Endpoint = Shapes::StringShape.new(name: 'Endpoint')
     EndpointType = Shapes::StringShape.new(name: 'EndpointType')
@@ -252,6 +254,9 @@ module Aws::DataSync
     CreateLocationEfsRequest.add_member(:efs_filesystem_arn, Shapes::ShapeRef.new(shape: EfsFilesystemArn, required: true, location_name: "EfsFilesystemArn"))
     CreateLocationEfsRequest.add_member(:ec2_config, Shapes::ShapeRef.new(shape: Ec2Config, required: true, location_name: "Ec2Config"))
     CreateLocationEfsRequest.add_member(:tags, Shapes::ShapeRef.new(shape: InputTagList, location_name: "Tags"))
+    CreateLocationEfsRequest.add_member(:access_point_arn, Shapes::ShapeRef.new(shape: EfsAccessPointArn, location_name: "AccessPointArn"))
+    CreateLocationEfsRequest.add_member(:file_system_access_role_arn, Shapes::ShapeRef.new(shape: IamRoleArn, location_name: "FileSystemAccessRoleArn"))
+    CreateLocationEfsRequest.add_member(:in_transit_encryption, Shapes::ShapeRef.new(shape: EfsInTransitEncryption, location_name: "InTransitEncryption"))
     CreateLocationEfsRequest.struct_class = Types::CreateLocationEfsRequest
 
     CreateLocationEfsResponse.add_member(:location_arn, Shapes::ShapeRef.new(shape: LocationArn, location_name: "LocationArn"))
@@ -402,6 +407,9 @@ module Aws::DataSync
     DescribeLocationEfsResponse.add_member(:location_uri, Shapes::ShapeRef.new(shape: LocationUri, location_name: "LocationUri"))
     DescribeLocationEfsResponse.add_member(:ec2_config, Shapes::ShapeRef.new(shape: Ec2Config, location_name: "Ec2Config"))
     DescribeLocationEfsResponse.add_member(:creation_time, Shapes::ShapeRef.new(shape: Time, location_name: "CreationTime"))
+    DescribeLocationEfsResponse.add_member(:access_point_arn, Shapes::ShapeRef.new(shape: EfsAccessPointArn, location_name: "AccessPointArn"))
+    DescribeLocationEfsResponse.add_member(:file_system_access_role_arn, Shapes::ShapeRef.new(shape: IamRoleArn, location_name: "FileSystemAccessRoleArn"))
+    DescribeLocationEfsResponse.add_member(:in_transit_encryption, Shapes::ShapeRef.new(shape: EfsInTransitEncryption, location_name: "InTransitEncryption"))
     DescribeLocationEfsResponse.struct_class = Types::DescribeLocationEfsResponse
 
     DescribeLocationFsxLustreRequest.add_member(:location_arn, Shapes::ShapeRef.new(shape: LocationArn, required: true, location_name: "LocationArn"))

data/lib/aws-sdk-datasync/types.rb

@@ -199,63 +199,68 @@ module Aws::DataSync
     #             value: "TagValue",
     #           },
     #         ],
+    #         access_point_arn: "EfsAccessPointArn",
+    #         file_system_access_role_arn: "IamRoleArn",
+    #         in_transit_encryption: "NONE", # accepts NONE, TLS1_2
     #       }
     #
     # @!attribute [rw] subdirectory
-    #   A subdirectory in the location’s path. This subdirectory in the EFS
-    #   file system is used to read data from the EFS source location or
-    #   write data to the EFS destination. By default, DataSync uses the
-    #   root directory.
+    #   Specifies a mount path for your Amazon EFS file system. This is
+    #   where DataSync reads or writes data (depending on if this is a
+    #   source or destination location). By default, DataSync uses the root
+    #   directory, but you can also include subdirectories.
     #
-    #   <note markdown="1"> `Subdirectory` must be specified with forward slashes. For example,
-    #   `/path/to/folder`.
+    #   <note markdown="1"> You must specify a value with forward slashes (for example,
+    #   `/path/to/folder`).
     #
     #    </note>
     #   @return [String]
     #
     # @!attribute [rw] efs_filesystem_arn
-    #   The Amazon Resource Name (ARN) for the Amazon EFS file system.
+    #   Specifies the ARN for the Amazon EFS file system.
     #   @return [String]
     #
     # @!attribute [rw] ec2_config
-    #   The subnet and security group that the Amazon EFS file system uses.
-    #   The security group that you provide needs to be able to communicate
-    #   with the security group on the mount target in the subnet specified.
-    #
-    #   The exact relationship between security group M (of the mount
-    #   target) and security group S (which you provide for DataSync to use
-    #   at this stage) is as follows:
-    #
-    #   * Security group M (which you associate with the mount target) must
-    #     allow inbound access for the Transmission Control Protocol (TCP)
-    #     on the NFS port (2049) from security group S. You can enable
-    #     inbound connections either by IP address (CIDR range) or security
-    #     group.
-    #
-    #   * Security group S (provided to DataSync to access EFS) should have
-    #     a rule that enables outbound connections to the NFS port on one of
-    #     the file system’s mount targets. You can enable outbound
-    #     connections either by IP address (CIDR range) or security group.
-    #
-    #     For information about security groups and mount targets, see
-    #     Security Groups for Amazon EC2 Instances and Mount Targets in the
-    #     *Amazon EFS User Guide.*
+    #   Specifies the subnet and security groups DataSync uses to access
+    #   your Amazon EFS file system.
     #   @return [Types::Ec2Config]
     #
     # @!attribute [rw] tags
-    #   The key-value pair that represents a tag that you want to add to the
-    #   resource. The value can be an empty string. This value helps you
-    #   manage, filter, and search for your resources. We recommend that you
-    #   create a name tag for your location.
+    #   Specifies the key-value pair that represents a tag that you want to
+    #   add to the resource. The value can be an empty string. This value
+    #   helps you manage, filter, and search for your resources. We
+    #   recommend that you create a name tag for your location.
     #   @return [Array<Types::TagListEntry>]
     #
+    # @!attribute [rw] access_point_arn
+    #   Specifies the Amazon Resource Name (ARN) of the access point that
+    #   DataSync uses to access the Amazon EFS file system.
+    #   @return [String]
+    #
+    # @!attribute [rw] file_system_access_role_arn
+    #   Specifies an Identity and Access Management (IAM) role that DataSync
+    #   assumes when mounting the Amazon EFS file system.
+    #   @return [String]
+    #
+    # @!attribute [rw] in_transit_encryption
+    #   Specifies whether you want DataSync to use TLS encryption when
+    #   transferring data to or from your Amazon EFS file system.
+    #
+    #   If you specify an access point using `AccessPointArn` or an IAM role
+    #   using `FileSystemAccessRoleArn`, you must set this parameter to
+    #   `TLS1_2`.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/datasync-2018-11-09/CreateLocationEfsRequest AWS API Documentation
     #
     class CreateLocationEfsRequest < Struct.new(
       :subdirectory,
       :efs_filesystem_arn,
       :ec2_config,
-      :tags)
+      :tags,
+      :access_point_arn,
+      :file_system_access_role_arn,
+      :in_transit_encryption)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -264,7 +269,7 @@ module Aws::DataSync
     #
     # @!attribute [rw] location_arn
     #   The Amazon Resource Name (ARN) of the Amazon EFS file system
-    #   location that is created.
+    #   location that you create.
     #   @return [String]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/datasync-2018-11-09/CreateLocationEfsResponse AWS API Documentation
@@ -1424,7 +1429,8 @@ module Aws::DataSync
     #       }
     #
     # @!attribute [rw] location_arn
-    #   The Amazon Resource Name (ARN) of the EFS location to describe.
+    #   The Amazon Resource Name (ARN) of the Amazon EFS file system
+    #   location that you want information about.
     #   @return [String]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/datasync-2018-11-09/DescribeLocationEfsRequest AWS API Documentation
@@ -1438,32 +1444,47 @@ module Aws::DataSync
     # DescribeLocationEfsResponse
     #
     # @!attribute [rw] location_arn
-    #   The Amazon Resource Name (ARN) of the EFS location that was
-    #   described.
+    #   The ARN of the Amazon EFS file system location.
     #   @return [String]
     #
     # @!attribute [rw] location_uri
-    #   The URL of the EFS location that was described.
+    #   The URL of the Amazon EFS file system location.
     #   @return [String]
     #
     # @!attribute [rw] ec2_config
-    #   The subnet that DataSync uses to access target EFS file system. The
-    #   subnet must have at least one mount target for that file system. The
-    #   security group that you provide needs to be able to communicate with
-    #   the security group on the mount target in the subnet specified.
+    #   The subnet and security groups that DataSync uses to access your
+    #   Amazon EFS file system.
     #   @return [Types::Ec2Config]
     #
     # @!attribute [rw] creation_time
-    #   The time that the EFS location was created.
+    #   The time that the location was created.
     #   @return [Time]
     #
+    # @!attribute [rw] access_point_arn
+    #   The ARN of the access point that DataSync uses to access the Amazon
+    #   EFS file system.
+    #   @return [String]
+    #
+    # @!attribute [rw] file_system_access_role_arn
+    #   The Identity and Access Management (IAM) role that DataSync assumes
+    #   when mounting the Amazon EFS file system.
+    #   @return [String]
+    #
+    # @!attribute [rw] in_transit_encryption
+    #   Whether DataSync uses TLS encryption when transferring data to or
+    #   from your Amazon EFS file system.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/datasync-2018-11-09/DescribeLocationEfsResponse AWS API Documentation
     #
     class DescribeLocationEfsResponse < Struct.new(
       :location_arn,
       :location_uri,
       :ec2_config,
-      :creation_time)
+      :creation_time,
+      :access_point_arn,
+      :file_system_access_role_arn,
+      :in_transit_encryption)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -2298,10 +2319,8 @@ module Aws::DataSync
       include Aws::Structure
     end
 
-    # The subnet that DataSync uses to access target EFS file system. The
-    # subnet must have at least one mount target for that file system. The
-    # security group that you provide needs to be able to communicate with
-    # the security group on the mount target in the subnet specified.
+    # The subnet and security groups that DataSync uses to access your
+    # Amazon EFS file system.
     #
     # @note When making an API call, you may pass Ec2Config
     #   data as a hash:
@@ -2312,13 +2331,30 @@ module Aws::DataSync
     #       }
     #
     # @!attribute [rw] subnet_arn
-    #   The ARN of the subnet that DataSync uses to access the target EFS
-    #   file system.
+    #   Specifies the ARN of a subnet where DataSync creates the [network
+    #   interfaces][1] for managing traffic during your transfer.
+    #
+    #   The subnet must be located:
+    #
+    #   * In the same virtual private cloud (VPC) as the Amazon EFS file
+    #     system.
+    #
+    #   * In the same Availability Zone as at least one mount target for the
+    #     Amazon EFS file system.
+    #
+    #   <note markdown="1"> You don't need to specify a subnet that includes a file system
+    #   mount target.
+    #
+    #    </note>
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/datasync/latest/userguide/datasync-network.html#required-network-interfaces
     #   @return [String]
     #
     # @!attribute [rw] security_group_arns
-    #   The Amazon Resource Names (ARNs) of the security groups that are
-    #   configured for the Amazon EC2 resource.
+    #   Specifies the Amazon Resource Names (ARNs) of the security groups
+    #   associated with an Amazon EFS file system's mount target.
     #   @return [Array<String>]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/datasync-2018-11-09/Ec2Config AWS API Documentation

data/lib/aws-sdk-datasync.rb

@@ -48,6 +48,6 @@ require_relative 'aws-sdk-datasync/customizations'
 # @!group service
 module Aws::DataSync
 
-  GEM_VERSION = '1.46.0'
+  GEM_VERSION = '1.47.0'
 
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-datasync
 version: !ruby/object:Gem::Version
-  version: 1.46.0
+  version: 1.47.0
 platform: ruby
 authors:
 - Amazon Web Services
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-05-05 00:00:00.000000000 Z
+date: 2022-05-27 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-core