aws-sdk-directoryservice 1.73.0 → 1.74.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: aa31a7731315218ade139cae851208f3a99f775c5dce3e8690a20b562b48a382
-  data.tar.gz: 685c1f55919d3349671398f002be8fb263d3ff7817b44178e345de41f27e2ff4
+  metadata.gz: 6179b3e5131b17f877722e292832336c5e24b1217c7abe201d49bc917510ae3e
+  data.tar.gz: c0528199ca9ae3fada733bf98eeeba9258711c1bee64ce1a739467fc2de0b414
 SHA512:
-  metadata.gz: 4f4ba19f534e4305ec15fea910ee4574d01f61192197bbb95e54829f6165df036ceb99a5c5e4009687f142410703708b6b3470653a6b124f73d4193b8893709d
-  data.tar.gz: 76c190eaf05ca0dbee59a2e66ab135d41afd02c005039117a8786f60b2f5652babe05d39d6dcace4a0841d9e1bd3b4845bc6fdad6797d050834028b76b84425c
+  metadata.gz: 273780d3d92a1ab6dabcd9e3916bee985a90adb5c31ef73aeb6fe3eaf6f0f0371f3034d61b72f1805a6ad67f97838ff8d95afb58242fe63e41476e2aa308ff46
+  data.tar.gz: d0ee69f1a6c6b9353f29fb7f117ad2458b17bcdb5fdece2feba63052a3e9867f5c45bb38685e78ca03ce66fc6c2b1e4b1b2de3f6e5bee97bdb4140ec432ae24b

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.74.0 (2024-09-18)
+------------------
+
+* Feature - Added new APIs for enabling, disabling, and describing access to the AWS Directory Service Data API
+
 1.73.0 (2024-09-11)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.73.0
+1.74.0

data/lib/aws-sdk-directoryservice/client.rb

@@ -521,41 +521,56 @@ module Aws::DirectoryService
     #
     #   Inbound:
     #
-    #   * Type: Custom UDP Rule, Protocol: UDP, Range: 88, Source: 0.0.0.0/0
+    #   * Type: Custom UDP Rule, Protocol: UDP, Range: 88, Source: Managed
+    #     Microsoft AD VPC IPv4 CIDR
     #
-    #   * Type: Custom UDP Rule, Protocol: UDP, Range: 123, Source: 0.0.0.0/0
+    #   * Type: Custom UDP Rule, Protocol: UDP, Range: 123, Source: Managed
+    #     Microsoft AD VPC IPv4 CIDR
     #
-    #   * Type: Custom UDP Rule, Protocol: UDP, Range: 138, Source: 0.0.0.0/0
+    #   * Type: Custom UDP Rule, Protocol: UDP, Range: 138, Source: Managed
+    #     Microsoft AD VPC IPv4 CIDR
     #
-    #   * Type: Custom UDP Rule, Protocol: UDP, Range: 389, Source: 0.0.0.0/0
+    #   * Type: Custom UDP Rule, Protocol: UDP, Range: 389, Source: Managed
+    #     Microsoft AD VPC IPv4 CIDR
     #
-    #   * Type: Custom UDP Rule, Protocol: UDP, Range: 464, Source: 0.0.0.0/0
+    #   * Type: Custom UDP Rule, Protocol: UDP, Range: 464, Source: Managed
+    #     Microsoft AD VPC IPv4 CIDR
     #
-    #   * Type: Custom UDP Rule, Protocol: UDP, Range: 445, Source: 0.0.0.0/0
+    #   * Type: Custom UDP Rule, Protocol: UDP, Range: 445, Source: Managed
+    #     Microsoft AD VPC IPv4 CIDR
     #
-    #   * Type: Custom TCP Rule, Protocol: TCP, Range: 88, Source: 0.0.0.0/0
+    #   * Type: Custom TCP Rule, Protocol: TCP, Range: 88, Source: Managed
+    #     Microsoft AD VPC IPv4 CIDR
     #
-    #   * Type: Custom TCP Rule, Protocol: TCP, Range: 135, Source: 0.0.0.0/0
+    #   * Type: Custom TCP Rule, Protocol: TCP, Range: 135, Source: Managed
+    #     Microsoft AD VPC IPv4 CIDR
     #
-    #   * Type: Custom TCP Rule, Protocol: TCP, Range: 445, Source: 0.0.0.0/0
+    #   * Type: Custom TCP Rule, Protocol: TCP, Range: 445, Source: Managed
+    #     Microsoft AD VPC IPv4 CIDR
     #
-    #   * Type: Custom TCP Rule, Protocol: TCP, Range: 464, Source: 0.0.0.0/0
+    #   * Type: Custom TCP Rule, Protocol: TCP, Range: 464, Source: Managed
+    #     Microsoft AD VPC IPv4 CIDR
     #
-    #   * Type: Custom TCP Rule, Protocol: TCP, Range: 636, Source: 0.0.0.0/0
+    #   * Type: Custom TCP Rule, Protocol: TCP, Range: 636, Source: Managed
+    #     Microsoft AD VPC IPv4 CIDR
     #
     #   * Type: Custom TCP Rule, Protocol: TCP, Range: 1024-65535, Source:
-    #     0.0.0.0/0
+    #     Managed Microsoft AD VPC IPv4 CIDR
     #
     #   * Type: Custom TCP Rule, Protocol: TCP, Range: 3268-33269, Source:
-    #     0.0.0.0/0
+    #     Managed Microsoft AD VPC IPv4 CIDR
     #
-    #   * Type: DNS (UDP), Protocol: UDP, Range: 53, Source: 0.0.0.0/0
+    #   * Type: DNS (UDP), Protocol: UDP, Range: 53, Source: Managed Microsoft
+    #     AD VPC IPv4 CIDR
     #
-    #   * Type: DNS (TCP), Protocol: TCP, Range: 53, Source: 0.0.0.0/0
+    #   * Type: DNS (TCP), Protocol: TCP, Range: 53, Source: Managed Microsoft
+    #     AD VPC IPv4 CIDR
     #
-    #   * Type: LDAP, Protocol: TCP, Range: 389, Source: 0.0.0.0/0
+    #   * Type: LDAP, Protocol: TCP, Range: 389, Source: Managed Microsoft AD
+    #     VPC IPv4 CIDR
     #
-    #   * Type: All ICMP, Protocol: All, Range: N/A, Source: 0.0.0.0/0
+    #   * Type: All ICMP, Protocol: All, Range: N/A, Source: Managed Microsoft
+    #     AD VPC IPv4 CIDR
     #
     #
     #
@@ -1187,8 +1202,8 @@ module Aws::DirectoryService
     #   which to create the trust relationship.
     #
     # @option params [required, String] :trust_password
-    #   The trust password. The must be the same password that was used when
-    #   creating the trust relationship on the external domain.
+    #   The trust password. The trust password must be the same password that
+    #   was used when creating the trust relationship on the external domain.
     #
     # @option params [required, String] :trust_direction
     #   The direction of the trust relationship.
@@ -1636,7 +1651,7 @@ module Aws::DirectoryService
     #   resp.directory_descriptions[0].description #=> String
     #   resp.directory_descriptions[0].dns_ip_addrs #=> Array
     #   resp.directory_descriptions[0].dns_ip_addrs[0] #=> String
-    #   resp.directory_descriptions[0].stage #=> String, one of "Requested", "Creating", "Created", "Active", "Inoperable", "Impaired", "Restoring", "RestoreFailed", "Deleting", "Deleted", "Failed"
+    #   resp.directory_descriptions[0].stage #=> String, one of "Requested", "Creating", "Created", "Active", "Inoperable", "Impaired", "Restoring", "RestoreFailed", "Deleting", "Deleted", "Failed", "Updating"
     #   resp.directory_descriptions[0].share_status #=> String, one of "Shared", "PendingAcceptance", "Rejected", "Rejecting", "RejectFailed", "Sharing", "ShareFailed", "Deleted", "Deleting"
     #   resp.directory_descriptions[0].share_method #=> String, one of "ORGANIZATIONS", "HANDSHAKE"
     #   resp.directory_descriptions[0].share_notes #=> String
@@ -1706,6 +1721,35 @@ module Aws::DirectoryService
       req.send_request(options)
     end
 
+    # Obtains status of directory data access enablement through the
+    # Directory Service Data API for the specified directory.
+    #
+    # @option params [required, String] :directory_id
+    #   The directory identifier.
+    #
+    # @return [Types::DescribeDirectoryDataAccessResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::DescribeDirectoryDataAccessResult#data_access_status #data_access_status} => String
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.describe_directory_data_access({
+    #     directory_id: "DirectoryId", # required
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.data_access_status #=> String, one of "Disabled", "Disabling", "Enabled", "Enabling", "Failed"
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ds-2015-04-16/DescribeDirectoryDataAccess AWS API Documentation
+    #
+    # @overload describe_directory_data_access(params = {})
+    # @param [Hash] params ({})
+    def describe_directory_data_access(params = {}, options = {})
+      req = build_request(:describe_directory_data_access, params)
+      req.send_request(options)
+    end
+
     # Provides information about any domain controllers in your directory.
     #
     # @option params [required, String] :directory_id
@@ -1748,7 +1792,7 @@ module Aws::DirectoryService
     #   resp.domain_controllers[0].vpc_id #=> String
     #   resp.domain_controllers[0].subnet_id #=> String
     #   resp.domain_controllers[0].availability_zone #=> String
-    #   resp.domain_controllers[0].status #=> String, one of "Creating", "Active", "Impaired", "Restoring", "Deleting", "Deleted", "Failed"
+    #   resp.domain_controllers[0].status #=> String, one of "Creating", "Active", "Impaired", "Restoring", "Deleting", "Deleted", "Failed", "Updating"
     #   resp.domain_controllers[0].status_reason #=> String
     #   resp.domain_controllers[0].launch_time #=> Time
     #   resp.domain_controllers[0].status_last_updated_date_time #=> Time
@@ -1892,7 +1936,7 @@ module Aws::DirectoryService
     #   resp.regions_description[0].directory_id #=> String
     #   resp.regions_description[0].region_name #=> String
     #   resp.regions_description[0].region_type #=> String, one of "Primary", "Additional"
-    #   resp.regions_description[0].status #=> String, one of "Requested", "Creating", "Created", "Active", "Inoperable", "Impaired", "Restoring", "RestoreFailed", "Deleting", "Deleted", "Failed"
+    #   resp.regions_description[0].status #=> String, one of "Requested", "Creating", "Created", "Active", "Inoperable", "Impaired", "Restoring", "RestoreFailed", "Deleting", "Deleted", "Failed", "Updating"
     #   resp.regions_description[0].vpc_settings.vpc_id #=> String
     #   resp.regions_description[0].vpc_settings.subnet_ids #=> Array
     #   resp.regions_description[0].vpc_settings.subnet_ids[0] #=> String
@@ -2210,8 +2254,8 @@ module Aws::DirectoryService
     #   The identifier of the directory
     #
     # @option params [required, String] :type
-    #   The type of client authentication to disable. Currently, only the
-    #   parameter, `SmartCard` is supported.
+    #   The type of client authentication to disable. Currently the only
+    #   parameter `"SmartCard"` is supported.
     #
     # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
     #
@@ -2231,6 +2275,29 @@ module Aws::DirectoryService
       req.send_request(options)
     end
 
+    # Deactivates access to directory data via the Directory Service Data
+    # API for the specified directory.
+    #
+    # @option params [required, String] :directory_id
+    #   The directory identifier.
+    #
+    # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.disable_directory_data_access({
+    #     directory_id: "DirectoryId", # required
+    #   })
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ds-2015-04-16/DisableDirectoryDataAccess AWS API Documentation
+    #
+    # @overload disable_directory_data_access(params = {})
+    # @param [Hash] params ({})
+    def disable_directory_data_access(params = {}, options = {})
+      req = build_request(:disable_directory_data_access, params)
+      req.send_request(options)
+    end
+
     # Deactivates LDAP secure calls for the specified directory.
     #
     # @option params [required, String] :directory_id
@@ -2352,6 +2419,29 @@ module Aws::DirectoryService
       req.send_request(options)
     end
 
+    # Enables access to directory data via the Directory Service Data API
+    # for the specified directory.
+    #
+    # @option params [required, String] :directory_id
+    #   The directory identifier.
+    #
+    # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.enable_directory_data_access({
+    #     directory_id: "DirectoryId", # required
+    #   })
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ds-2015-04-16/EnableDirectoryDataAccess AWS API Documentation
+    #
+    # @overload enable_directory_data_access(params = {})
+    # @param [Hash] params ({})
+    def enable_directory_data_access(params = {}, options = {})
+      req = build_request(:enable_directory_data_access, params)
+      req.send_request(options)
+    end
+
     # Activates the switch for the specific directory to always use LDAP
     # secure calls.
     #
@@ -2944,7 +3034,8 @@ module Aws::DirectoryService
     end
 
     # Resets the password for any user in your Managed Microsoft AD or
-    # Simple AD directory.
+    # Simple AD directory. Disabled users will become enabled and can be
+    # authenticated following the API call.
     #
     # You can reset the password for any user in your directory with the
     # following exceptions:
@@ -3444,7 +3535,7 @@ module Aws::DirectoryService
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-directoryservice'
-      context[:gem_version] = '1.73.0'
+      context[:gem_version] = '1.74.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-directoryservice/client_api.rb

@@ -89,6 +89,7 @@ module Aws::DirectoryService
     CreatedDateTime = Shapes::TimestampShape.new(name: 'CreatedDateTime')
     CustomerId = Shapes::StringShape.new(name: 'CustomerId')
     CustomerUserName = Shapes::StringShape.new(name: 'CustomerUserName')
+    DataAccessStatus = Shapes::StringShape.new(name: 'DataAccessStatus')
     DeleteAssociatedConditionalForwarder = Shapes::BooleanShape.new(name: 'DeleteAssociatedConditionalForwarder')
     DeleteConditionalForwarderRequest = Shapes::StructureShape.new(name: 'DeleteConditionalForwarderRequest')
     DeleteConditionalForwarderResult = Shapes::StructureShape.new(name: 'DeleteConditionalForwarderResult')
@@ -112,6 +113,8 @@ module Aws::DirectoryService
     DescribeConditionalForwardersResult = Shapes::StructureShape.new(name: 'DescribeConditionalForwardersResult')
     DescribeDirectoriesRequest = Shapes::StructureShape.new(name: 'DescribeDirectoriesRequest')
     DescribeDirectoriesResult = Shapes::StructureShape.new(name: 'DescribeDirectoriesResult')
+    DescribeDirectoryDataAccessRequest = Shapes::StructureShape.new(name: 'DescribeDirectoryDataAccessRequest')
+    DescribeDirectoryDataAccessResult = Shapes::StructureShape.new(name: 'DescribeDirectoryDataAccessResult')
     DescribeDomainControllersRequest = Shapes::StructureShape.new(name: 'DescribeDomainControllersRequest')
     DescribeDomainControllersResult = Shapes::StructureShape.new(name: 'DescribeDomainControllersResult')
     DescribeEventTopicsRequest = Shapes::StructureShape.new(name: 'DescribeEventTopicsRequest')
@@ -166,6 +169,8 @@ module Aws::DirectoryService
     DirectoryVpcSettingsDescription = Shapes::StructureShape.new(name: 'DirectoryVpcSettingsDescription')
     DisableClientAuthenticationRequest = Shapes::StructureShape.new(name: 'DisableClientAuthenticationRequest')
     DisableClientAuthenticationResult = Shapes::StructureShape.new(name: 'DisableClientAuthenticationResult')
+    DisableDirectoryDataAccessRequest = Shapes::StructureShape.new(name: 'DisableDirectoryDataAccessRequest')
+    DisableDirectoryDataAccessResult = Shapes::StructureShape.new(name: 'DisableDirectoryDataAccessResult')
     DisableLDAPSRequest = Shapes::StructureShape.new(name: 'DisableLDAPSRequest')
     DisableLDAPSResult = Shapes::StructureShape.new(name: 'DisableLDAPSResult')
     DisableRadiusRequest = Shapes::StructureShape.new(name: 'DisableRadiusRequest')
@@ -182,6 +187,8 @@ module Aws::DirectoryService
     DomainControllers = Shapes::ListShape.new(name: 'DomainControllers')
     EnableClientAuthenticationRequest = Shapes::StructureShape.new(name: 'EnableClientAuthenticationRequest')
     EnableClientAuthenticationResult = Shapes::StructureShape.new(name: 'EnableClientAuthenticationResult')
+    EnableDirectoryDataAccessRequest = Shapes::StructureShape.new(name: 'EnableDirectoryDataAccessRequest')
+    EnableDirectoryDataAccessResult = Shapes::StructureShape.new(name: 'EnableDirectoryDataAccessResult')
     EnableLDAPSRequest = Shapes::StructureShape.new(name: 'EnableLDAPSRequest')
     EnableLDAPSResult = Shapes::StructureShape.new(name: 'EnableLDAPSResult')
     EnableRadiusRequest = Shapes::StructureShape.new(name: 'EnableRadiusRequest')
@@ -655,6 +662,12 @@ module Aws::DirectoryService
     DescribeDirectoriesResult.add_member(:next_token, Shapes::ShapeRef.new(shape: NextToken, location_name: "NextToken"))
     DescribeDirectoriesResult.struct_class = Types::DescribeDirectoriesResult
 
+    DescribeDirectoryDataAccessRequest.add_member(:directory_id, Shapes::ShapeRef.new(shape: DirectoryId, required: true, location_name: "DirectoryId"))
+    DescribeDirectoryDataAccessRequest.struct_class = Types::DescribeDirectoryDataAccessRequest
+
+    DescribeDirectoryDataAccessResult.add_member(:data_access_status, Shapes::ShapeRef.new(shape: DataAccessStatus, location_name: "DataAccessStatus"))
+    DescribeDirectoryDataAccessResult.struct_class = Types::DescribeDirectoryDataAccessResult
+
     DescribeDomainControllersRequest.add_member(:directory_id, Shapes::ShapeRef.new(shape: DirectoryId, required: true, location_name: "DirectoryId"))
     DescribeDomainControllersRequest.add_member(:domain_controller_ids, Shapes::ShapeRef.new(shape: DomainControllerIds, location_name: "DomainControllerIds"))
     DescribeDomainControllersRequest.add_member(:next_token, Shapes::ShapeRef.new(shape: NextToken, location_name: "NextToken"))
@@ -845,6 +858,11 @@ module Aws::DirectoryService
 
     DisableClientAuthenticationResult.struct_class = Types::DisableClientAuthenticationResult
 
+    DisableDirectoryDataAccessRequest.add_member(:directory_id, Shapes::ShapeRef.new(shape: DirectoryId, required: true, location_name: "DirectoryId"))
+    DisableDirectoryDataAccessRequest.struct_class = Types::DisableDirectoryDataAccessRequest
+
+    DisableDirectoryDataAccessResult.struct_class = Types::DisableDirectoryDataAccessResult
+
     DisableLDAPSRequest.add_member(:directory_id, Shapes::ShapeRef.new(shape: DirectoryId, required: true, location_name: "DirectoryId"))
     DisableLDAPSRequest.add_member(:type, Shapes::ShapeRef.new(shape: LDAPSType, required: true, location_name: "Type"))
     DisableLDAPSRequest.struct_class = Types::DisableLDAPSRequest
@@ -891,6 +909,11 @@ module Aws::DirectoryService
 
     EnableClientAuthenticationResult.struct_class = Types::EnableClientAuthenticationResult
 
+    EnableDirectoryDataAccessRequest.add_member(:directory_id, Shapes::ShapeRef.new(shape: DirectoryId, required: true, location_name: "DirectoryId"))
+    EnableDirectoryDataAccessRequest.struct_class = Types::EnableDirectoryDataAccessRequest
+
+    EnableDirectoryDataAccessResult.struct_class = Types::EnableDirectoryDataAccessResult
+
     EnableLDAPSRequest.add_member(:directory_id, Shapes::ShapeRef.new(shape: DirectoryId, required: true, location_name: "DirectoryId"))
     EnableLDAPSRequest.add_member(:type, Shapes::ShapeRef.new(shape: LDAPSType, required: true, location_name: "Type"))
     EnableLDAPSRequest.struct_class = Types::EnableLDAPSRequest
@@ -1744,6 +1767,19 @@ module Aws::DirectoryService
         )
       end)
 
+      api.add_operation(:describe_directory_data_access, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "DescribeDirectoryDataAccess"
+        o.http_method = "POST"
+        o.http_request_uri = "/"
+        o.input = Shapes::ShapeRef.new(shape: DescribeDirectoryDataAccessRequest)
+        o.output = Shapes::ShapeRef.new(shape: DescribeDirectoryDataAccessResult)
+        o.errors << Shapes::ShapeRef.new(shape: DirectoryDoesNotExistException)
+        o.errors << Shapes::ShapeRef.new(shape: UnsupportedOperationException)
+        o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
+        o.errors << Shapes::ShapeRef.new(shape: ClientException)
+        o.errors << Shapes::ShapeRef.new(shape: ServiceException)
+      end)
+
       api.add_operation(:describe_domain_controllers, Seahorse::Model::Operation.new.tap do |o|
         o.name = "DescribeDomainControllers"
         o.http_method = "POST"
@@ -1922,6 +1958,21 @@ module Aws::DirectoryService
         o.errors << Shapes::ShapeRef.new(shape: ServiceException)
       end)
 
+      api.add_operation(:disable_directory_data_access, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "DisableDirectoryDataAccess"
+        o.http_method = "POST"
+        o.http_request_uri = "/"
+        o.input = Shapes::ShapeRef.new(shape: DisableDirectoryDataAccessRequest)
+        o.output = Shapes::ShapeRef.new(shape: DisableDirectoryDataAccessResult)
+        o.errors << Shapes::ShapeRef.new(shape: DirectoryDoesNotExistException)
+        o.errors << Shapes::ShapeRef.new(shape: DirectoryUnavailableException)
+        o.errors << Shapes::ShapeRef.new(shape: UnsupportedOperationException)
+        o.errors << Shapes::ShapeRef.new(shape: DirectoryInDesiredStateException)
+        o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
+        o.errors << Shapes::ShapeRef.new(shape: ClientException)
+        o.errors << Shapes::ShapeRef.new(shape: ServiceException)
+      end)
+
       api.add_operation(:disable_ldaps, Seahorse::Model::Operation.new.tap do |o|
         o.name = "DisableLDAPS"
         o.http_method = "POST"
@@ -1976,6 +2027,21 @@ module Aws::DirectoryService
         o.errors << Shapes::ShapeRef.new(shape: ServiceException)
       end)
 
+      api.add_operation(:enable_directory_data_access, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "EnableDirectoryDataAccess"
+        o.http_method = "POST"
+        o.http_request_uri = "/"
+        o.input = Shapes::ShapeRef.new(shape: EnableDirectoryDataAccessRequest)
+        o.output = Shapes::ShapeRef.new(shape: EnableDirectoryDataAccessResult)
+        o.errors << Shapes::ShapeRef.new(shape: DirectoryDoesNotExistException)
+        o.errors << Shapes::ShapeRef.new(shape: DirectoryUnavailableException)
+        o.errors << Shapes::ShapeRef.new(shape: UnsupportedOperationException)
+        o.errors << Shapes::ShapeRef.new(shape: DirectoryInDesiredStateException)
+        o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
+        o.errors << Shapes::ShapeRef.new(shape: ClientException)
+        o.errors << Shapes::ShapeRef.new(shape: ServiceException)
+      end)
+
       api.add_operation(:enable_ldaps, Seahorse::Model::Operation.new.tap do |o|
         o.name = "EnableLDAPS"
         o.http_method = "POST"

data/lib/aws-sdk-directoryservice/endpoints.rb

@@ -287,6 +287,17 @@ module Aws::DirectoryService
       end
     end
 
+    class DescribeDirectoryDataAccess
+      def self.build(context)
+        Aws::DirectoryService::EndpointParameters.new(
+          region: context.config.region,
+          use_dual_stack: context.config.use_dualstack_endpoint,
+          use_fips: context.config.use_fips_endpoint,
+          endpoint: context.config.regional_endpoint ? nil : context.config.endpoint.to_s,
+        )
+      end
+    end
+
     class DescribeDomainControllers
       def self.build(context)
         Aws::DirectoryService::EndpointParameters.new(
@@ -397,6 +408,17 @@ module Aws::DirectoryService
       end
     end
 
+    class DisableDirectoryDataAccess
+      def self.build(context)
+        Aws::DirectoryService::EndpointParameters.new(
+          region: context.config.region,
+          use_dual_stack: context.config.use_dualstack_endpoint,
+          use_fips: context.config.use_fips_endpoint,
+          endpoint: context.config.regional_endpoint ? nil : context.config.endpoint.to_s,
+        )
+      end
+    end
+
     class DisableLDAPS
       def self.build(context)
         Aws::DirectoryService::EndpointParameters.new(
@@ -441,6 +463,17 @@ module Aws::DirectoryService
       end
     end
 
+    class EnableDirectoryDataAccess
+      def self.build(context)
+        Aws::DirectoryService::EndpointParameters.new(
+          region: context.config.region,
+          use_dual_stack: context.config.use_dualstack_endpoint,
+          use_fips: context.config.use_fips_endpoint,
+          endpoint: context.config.regional_endpoint ? nil : context.config.endpoint.to_s,
+        )
+      end
+    end
+
     class EnableLDAPS
       def self.build(context)
         Aws::DirectoryService::EndpointParameters.new(

data/lib/aws-sdk-directoryservice/plugins/endpoints.rb

@@ -117,6 +117,8 @@ module Aws::DirectoryService
             Aws::DirectoryService::Endpoints::DescribeConditionalForwarders.build(context)
           when :describe_directories
             Aws::DirectoryService::Endpoints::DescribeDirectories.build(context)
+          when :describe_directory_data_access
+            Aws::DirectoryService::Endpoints::DescribeDirectoryDataAccess.build(context)
           when :describe_domain_controllers
             Aws::DirectoryService::Endpoints::DescribeDomainControllers.build(context)
           when :describe_event_topics
@@ -137,6 +139,8 @@ module Aws::DirectoryService
             Aws::DirectoryService::Endpoints::DescribeUpdateDirectory.build(context)
           when :disable_client_authentication
             Aws::DirectoryService::Endpoints::DisableClientAuthentication.build(context)
+          when :disable_directory_data_access
+            Aws::DirectoryService::Endpoints::DisableDirectoryDataAccess.build(context)
           when :disable_ldaps
             Aws::DirectoryService::Endpoints::DisableLDAPS.build(context)
           when :disable_radius
@@ -145,6 +149,8 @@ module Aws::DirectoryService
             Aws::DirectoryService::Endpoints::DisableSso.build(context)
           when :enable_client_authentication
             Aws::DirectoryService::Endpoints::EnableClientAuthentication.build(context)
+          when :enable_directory_data_access
+            Aws::DirectoryService::Endpoints::EnableDirectoryDataAccess.build(context)
           when :enable_ldaps
             Aws::DirectoryService::Endpoints::EnableLDAPS.build(context)
           when :enable_radius

data/lib/aws-sdk-directoryservice/types.rb

@@ -36,7 +36,7 @@ module Aws::DirectoryService
       include Aws::Structure
     end
 
-    # Client authentication is not available in this region at this time.
+    # You do not have sufficient access to perform this action.
     #
     # @!attribute [rw] message
     #   The descriptive message for the exception.
@@ -73,50 +73,56 @@ module Aws::DirectoryService
     #
     #   Inbound:
     #
-    #   * Type: Custom UDP Rule, Protocol: UDP, Range: 88, Source: 0.0.0.0/0
+    #   * Type: Custom UDP Rule, Protocol: UDP, Range: 88, Source: Managed
+    #     Microsoft AD VPC IPv4 CIDR
     #
-    #   * Type: Custom UDP Rule, Protocol: UDP, Range: 123, Source:
-    #     0.0.0.0/0
+    #   * Type: Custom UDP Rule, Protocol: UDP, Range: 123, Source: Managed
+    #     Microsoft AD VPC IPv4 CIDR
     #
-    #   * Type: Custom UDP Rule, Protocol: UDP, Range: 138, Source:
-    #     0.0.0.0/0
+    #   * Type: Custom UDP Rule, Protocol: UDP, Range: 138, Source: Managed
+    #     Microsoft AD VPC IPv4 CIDR
     #
-    #   * Type: Custom UDP Rule, Protocol: UDP, Range: 389, Source:
-    #     0.0.0.0/0
+    #   * Type: Custom UDP Rule, Protocol: UDP, Range: 389, Source: Managed
+    #     Microsoft AD VPC IPv4 CIDR
     #
-    #   * Type: Custom UDP Rule, Protocol: UDP, Range: 464, Source:
-    #     0.0.0.0/0
+    #   * Type: Custom UDP Rule, Protocol: UDP, Range: 464, Source: Managed
+    #     Microsoft AD VPC IPv4 CIDR
     #
-    #   * Type: Custom UDP Rule, Protocol: UDP, Range: 445, Source:
-    #     0.0.0.0/0
+    #   * Type: Custom UDP Rule, Protocol: UDP, Range: 445, Source: Managed
+    #     Microsoft AD VPC IPv4 CIDR
     #
-    #   * Type: Custom TCP Rule, Protocol: TCP, Range: 88, Source: 0.0.0.0/0
+    #   * Type: Custom TCP Rule, Protocol: TCP, Range: 88, Source: Managed
+    #     Microsoft AD VPC IPv4 CIDR
     #
-    #   * Type: Custom TCP Rule, Protocol: TCP, Range: 135, Source:
-    #     0.0.0.0/0
+    #   * Type: Custom TCP Rule, Protocol: TCP, Range: 135, Source: Managed
+    #     Microsoft AD VPC IPv4 CIDR
     #
-    #   * Type: Custom TCP Rule, Protocol: TCP, Range: 445, Source:
-    #     0.0.0.0/0
+    #   * Type: Custom TCP Rule, Protocol: TCP, Range: 445, Source: Managed
+    #     Microsoft AD VPC IPv4 CIDR
     #
-    #   * Type: Custom TCP Rule, Protocol: TCP, Range: 464, Source:
-    #     0.0.0.0/0
+    #   * Type: Custom TCP Rule, Protocol: TCP, Range: 464, Source: Managed
+    #     Microsoft AD VPC IPv4 CIDR
     #
-    #   * Type: Custom TCP Rule, Protocol: TCP, Range: 636, Source:
-    #     0.0.0.0/0
+    #   * Type: Custom TCP Rule, Protocol: TCP, Range: 636, Source: Managed
+    #     Microsoft AD VPC IPv4 CIDR
     #
     #   * Type: Custom TCP Rule, Protocol: TCP, Range: 1024-65535, Source:
-    #     0.0.0.0/0
+    #     Managed Microsoft AD VPC IPv4 CIDR
     #
     #   * Type: Custom TCP Rule, Protocol: TCP, Range: 3268-33269, Source:
-    #     0.0.0.0/0
+    #     Managed Microsoft AD VPC IPv4 CIDR
     #
-    #   * Type: DNS (UDP), Protocol: UDP, Range: 53, Source: 0.0.0.0/0
+    #   * Type: DNS (UDP), Protocol: UDP, Range: 53, Source: Managed
+    #     Microsoft AD VPC IPv4 CIDR
     #
-    #   * Type: DNS (TCP), Protocol: TCP, Range: 53, Source: 0.0.0.0/0
+    #   * Type: DNS (TCP), Protocol: TCP, Range: 53, Source: Managed
+    #     Microsoft AD VPC IPv4 CIDR
     #
-    #   * Type: LDAP, Protocol: TCP, Range: 389, Source: 0.0.0.0/0
+    #   * Type: LDAP, Protocol: TCP, Range: 389, Source: Managed Microsoft
+    #     AD VPC IPv4 CIDR
     #
-    #   * Type: All ICMP, Protocol: All, Range: N/A, Source: 0.0.0.0/0
+    #   * Type: All ICMP, Protocol: All, Range: N/A, Source: Managed
+    #     Microsoft AD VPC IPv4 CIDR
     #
     #
     #
@@ -978,8 +984,9 @@ module Aws::DirectoryService
     #   @return [String]
     #
     # @!attribute [rw] trust_password
-    #   The trust password. The must be the same password that was used when
-    #   creating the trust relationship on the external domain.
+    #   The trust password. The trust password must be the same password
+    #   that was used when creating the trust relationship on the external
+    #   domain.
     #   @return [String]
     #
     # @!attribute [rw] trust_direction
@@ -1391,6 +1398,31 @@ module Aws::DirectoryService
       include Aws::Structure
     end
 
+    # @!attribute [rw] directory_id
+    #   The directory identifier.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ds-2015-04-16/DescribeDirectoryDataAccessRequest AWS API Documentation
+    #
+    class DescribeDirectoryDataAccessRequest < Struct.new(
+      :directory_id)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] data_access_status
+    #   The current status of data access through the Directory Service Data
+    #   API.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ds-2015-04-16/DescribeDirectoryDataAccessResult AWS API Documentation
+    #
+    class DescribeDirectoryDataAccessResult < Struct.new(
+      :data_access_status)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] directory_id
     #   Identifier of the directory for which to retrieve the domain
     #   controller information.
@@ -2044,7 +2076,7 @@ module Aws::DirectoryService
     #   @return [Time]
     #
     # @!attribute [rw] type
-    #   The directory size.
+    #   The directory type.
     #   @return [String]
     #
     # @!attribute [rw] vpc_settings
@@ -2264,7 +2296,7 @@ module Aws::DirectoryService
       include Aws::Structure
     end
 
-    # The specified directory is unavailable or could not be found.
+    # The specified directory is unavailable.
     #
     # @!attribute [rw] message
     #   The descriptive message for the exception.
@@ -2340,8 +2372,8 @@ module Aws::DirectoryService
     #   @return [String]
     #
     # @!attribute [rw] type
-    #   The type of client authentication to disable. Currently, only the
-    #   parameter, `SmartCard` is supported.
+    #   The type of client authentication to disable. Currently the only
+    #   parameter `"SmartCard"` is supported.
     #   @return [String]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ds-2015-04-16/DisableClientAuthenticationRequest AWS API Documentation
@@ -2357,6 +2389,22 @@ module Aws::DirectoryService
     #
     class DisableClientAuthenticationResult < Aws::EmptyStructure; end
 
+    # @!attribute [rw] directory_id
+    #   The directory identifier.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ds-2015-04-16/DisableDirectoryDataAccessRequest AWS API Documentation
+    #
+    class DisableDirectoryDataAccessRequest < Struct.new(
+      :directory_id)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ds-2015-04-16/DisableDirectoryDataAccessResult AWS API Documentation
+    #
+    class DisableDirectoryDataAccessResult < Aws::EmptyStructure; end
+
     # @!attribute [rw] directory_id
     #   The identifier of the directory.
     #   @return [String]
@@ -2545,6 +2593,22 @@ module Aws::DirectoryService
     #
     class EnableClientAuthenticationResult < Aws::EmptyStructure; end
 
+    # @!attribute [rw] directory_id
+    #   The directory identifier.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ds-2015-04-16/EnableDirectoryDataAccessRequest AWS API Documentation
+    #
+    class EnableDirectoryDataAccessRequest < Struct.new(
+      :directory_id)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ds-2015-04-16/EnableDirectoryDataAccessResult AWS API Documentation
+    #
+    class EnableDirectoryDataAccessResult < Aws::EmptyStructure; end
+
     # @!attribute [rw] directory_id
     #   The identifier of the directory.
     #   @return [String]
@@ -3402,7 +3466,7 @@ module Aws::DirectoryService
     #
     # @!attribute [rw] radius_retries
     #   The maximum number of times that communication with the RADIUS
-    #   server is attempted.
+    #   server is retried after the initial attempt.
     #   @return [Integer]
     #
     # @!attribute [rw] shared_secret
@@ -4196,15 +4260,15 @@ module Aws::DirectoryService
     #   Required name of the tag. The string value can be Unicode characters
     #   and cannot be prefixed with "aws:". The string can contain only
     #   the set of Unicode letters, digits, white-space, '\_', '.',
-    #   '/', '=', '+', '-' (Java regex:
+    #   '/', '=', '+', '-', ':', '@'(Java regex:
     #   "^(\[\\\\p\\\{L\\}\\\\p\\\{Z\\}\\\\p\\\{N\\}\_.:/=+\\\\-\]*)$").
     #   @return [String]
     #
     # @!attribute [rw] value
     #   The optional value of the tag. The string value can be Unicode
     #   characters. The string can contain only the set of Unicode letters,
-    #   digits, white-space, '\_', '.', '/', '=', '+', '-' (Java
-    #   regex:
+    #   digits, white-space, '\_', '.', '/', '=', '+', '-',
+    #   ':', '@' (Java regex:
     #   "^(\[\\\\p\\\{L\\}\\\\p\\\{Z\\}\\\\p\\\{N\\}\_.:/=+\\\\-\]*)$").
     #   @return [String]
     #

data/lib/aws-sdk-directoryservice.rb

@@ -52,6 +52,6 @@ require_relative 'aws-sdk-directoryservice/customizations'
 # @!group service
 module Aws::DirectoryService
 
-  GEM_VERSION = '1.73.0'
+  GEM_VERSION = '1.74.0'
 
 end

data/sig/client.rbs

@@ -412,6 +412,16 @@ module Aws
                                 ) -> _DescribeDirectoriesResponseSuccess
                               | (?Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _DescribeDirectoriesResponseSuccess
 
+      interface _DescribeDirectoryDataAccessResponseSuccess
+        include ::Seahorse::Client::_ResponseSuccess[Types::DescribeDirectoryDataAccessResult]
+        def data_access_status: () -> ("Disabled" | "Disabling" | "Enabled" | "Enabling" | "Failed")
+      end
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/DirectoryService/Client.html#describe_directory_data_access-instance_method
+      def describe_directory_data_access: (
+                                            directory_id: ::String
+                                          ) -> _DescribeDirectoryDataAccessResponseSuccess
+                                        | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _DescribeDirectoryDataAccessResponseSuccess
+
       interface _DescribeDomainControllersResponseSuccess
         include ::Seahorse::Client::_ResponseSuccess[Types::DescribeDomainControllersResult]
         def domain_controllers: () -> ::Array[Types::DomainController]
@@ -544,6 +554,15 @@ module Aws
                                          ) -> _DisableClientAuthenticationResponseSuccess
                                        | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _DisableClientAuthenticationResponseSuccess
 
+      interface _DisableDirectoryDataAccessResponseSuccess
+        include ::Seahorse::Client::_ResponseSuccess[Types::DisableDirectoryDataAccessResult]
+      end
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/DirectoryService/Client.html#disable_directory_data_access-instance_method
+      def disable_directory_data_access: (
+                                           directory_id: ::String
+                                         ) -> _DisableDirectoryDataAccessResponseSuccess
+                                       | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _DisableDirectoryDataAccessResponseSuccess
+
       interface _DisableLDAPSResponseSuccess
         include ::Seahorse::Client::_ResponseSuccess[Types::DisableLDAPSResult]
       end
@@ -584,6 +603,15 @@ module Aws
                                         ) -> _EnableClientAuthenticationResponseSuccess
                                       | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _EnableClientAuthenticationResponseSuccess
 
+      interface _EnableDirectoryDataAccessResponseSuccess
+        include ::Seahorse::Client::_ResponseSuccess[Types::EnableDirectoryDataAccessResult]
+      end
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/DirectoryService/Client.html#enable_directory_data_access-instance_method
+      def enable_directory_data_access: (
+                                          directory_id: ::String
+                                        ) -> _EnableDirectoryDataAccessResponseSuccess
+                                      | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _EnableDirectoryDataAccessResponseSuccess
+
       interface _EnableLDAPSResponseSuccess
         include ::Seahorse::Client::_ResponseSuccess[Types::EnableLDAPSResult]
       end

data/sig/types.rbs

@@ -386,6 +386,16 @@ module Aws::DirectoryService
       SENSITIVE: []
     end
 
+    class DescribeDirectoryDataAccessRequest
+      attr_accessor directory_id: ::String
+      SENSITIVE: []
+    end
+
+    class DescribeDirectoryDataAccessResult
+      attr_accessor data_access_status: ("Disabled" | "Disabling" | "Enabled" | "Enabling" | "Failed")
+      SENSITIVE: []
+    end
+
     class DescribeDomainControllersRequest
       attr_accessor directory_id: ::String
       attr_accessor domain_controller_ids: ::Array[::String]
@@ -548,7 +558,7 @@ module Aws::DirectoryService
       attr_accessor access_url: ::String
       attr_accessor description: ::String
       attr_accessor dns_ip_addrs: ::Array[::String]
-      attr_accessor stage: ("Requested" | "Creating" | "Created" | "Active" | "Inoperable" | "Impaired" | "Restoring" | "RestoreFailed" | "Deleting" | "Deleted" | "Failed")
+      attr_accessor stage: ("Requested" | "Creating" | "Created" | "Active" | "Inoperable" | "Impaired" | "Restoring" | "RestoreFailed" | "Deleting" | "Deleted" | "Failed" | "Updating")
       attr_accessor share_status: ("Shared" | "PendingAcceptance" | "Rejected" | "Rejecting" | "RejectFailed" | "Sharing" | "ShareFailed" | "Deleted" | "Deleting")
       attr_accessor share_method: ("ORGANIZATIONS" | "HANDSHAKE")
       attr_accessor share_notes: ::String
@@ -634,6 +644,14 @@ module Aws::DirectoryService
     class DisableClientAuthenticationResult < Aws::EmptyStructure
     end
 
+    class DisableDirectoryDataAccessRequest
+      attr_accessor directory_id: ::String
+      SENSITIVE: []
+    end
+
+    class DisableDirectoryDataAccessResult < Aws::EmptyStructure
+    end
+
     class DisableLDAPSRequest
       attr_accessor directory_id: ::String
       attr_accessor type: ("Client")
@@ -668,7 +686,7 @@ module Aws::DirectoryService
       attr_accessor vpc_id: ::String
       attr_accessor subnet_id: ::String
       attr_accessor availability_zone: ::String
-      attr_accessor status: ("Creating" | "Active" | "Impaired" | "Restoring" | "Deleting" | "Deleted" | "Failed")
+      attr_accessor status: ("Creating" | "Active" | "Impaired" | "Restoring" | "Deleting" | "Deleted" | "Failed" | "Updating")
       attr_accessor status_reason: ::String
       attr_accessor launch_time: ::Time
       attr_accessor status_last_updated_date_time: ::Time
@@ -690,6 +708,14 @@ module Aws::DirectoryService
     class EnableClientAuthenticationResult < Aws::EmptyStructure
     end
 
+    class EnableDirectoryDataAccessRequest
+      attr_accessor directory_id: ::String
+      SENSITIVE: []
+    end
+
+    class EnableDirectoryDataAccessResult < Aws::EmptyStructure
+    end
+
     class EnableLDAPSRequest
       attr_accessor directory_id: ::String
       attr_accessor type: ("Client")
@@ -955,7 +981,7 @@ module Aws::DirectoryService
       attr_accessor directory_id: ::String
       attr_accessor region_name: ::String
       attr_accessor region_type: ("Primary" | "Additional")
-      attr_accessor status: ("Requested" | "Creating" | "Created" | "Active" | "Inoperable" | "Impaired" | "Restoring" | "RestoreFailed" | "Deleting" | "Deleted" | "Failed")
+      attr_accessor status: ("Requested" | "Creating" | "Created" | "Active" | "Inoperable" | "Impaired" | "Restoring" | "RestoreFailed" | "Deleting" | "Deleted" | "Failed" | "Updating")
       attr_accessor vpc_settings: Types::DirectoryVpcSettings
       attr_accessor desired_number_of_domain_controllers: ::Integer
       attr_accessor launch_time: ::Time

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-directoryservice
 version: !ruby/object:Gem::Version
-  version: 1.73.0
+  version: 1.74.0
 platform: ruby
 authors:
 - Amazon Web Services
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2024-09-11 00:00:00.000000000 Z
+date: 2024-09-18 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-core