aws-sdk-ec2 1.603.0 → 1.604.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 16ccb526cedb37d55d55cc906f580462044827a07db196cc71f3cca69b761626
-  data.tar.gz: 5a44f95beece7624d380f98fc978e50405b95b024e94a109447b2b22b89340a2
+  metadata.gz: 146704f0ddff52a6dbcd3d1cd44b59c75148158d0af36594454dc2248a1f2786
+  data.tar.gz: 3d21cf7fcb6296a406c433b18e78aa3207a0c3e1400e495c9f8a917cbec21acc
 SHA512:
-  metadata.gz: fbac11ecec320a8311e01e32d267bdb090eea998576079f8810758263951a9aca5230713c3c5c98f8e2656555343bee76097cadfbe4bce6bb9fc5cf6455940fb
-  data.tar.gz: 13698ad5b3345c8863e5517512450dc6d246b803424439fffaabb5dd44df65d56b43c248d6bcefebb4ed870a842fd563457ae617a8353ecaf5a3806e0bb2fb0f
+  metadata.gz: 82a54bf934282c1c3399e3cfb28ed1603c9735225990346a1aaaf6256d4f5b6ce8be0b0cd86b3a66dbe47a3c21eb34828cd46f304548114bb987a0ddab4e21ed
+  data.tar.gz: 033d4f746ac1fc7b65a76762e02766b3b02ccf164e39df689b7f1a54b852fb58e3d7f5d5d46ee1b4e6ffc5ed0cedf18e5fdad608b1af7ee4f0f0570e56efd96b

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.604.0 (2026-02-24)
+------------------
+
+* Feature - Adds httpTokensEnforced property to ModifyInstanceMetadataDefaults API. Set per account or manage organization-wide using declarative policies to prevent IMDSv1-enabled instance launch and block attempts to enable IMDSv1 on existing IMDSv2-only instances.
+
 1.603.0 (2026-02-17)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.603.0
+1.604.0

data/lib/aws-sdk-ec2/client.rb

@@ -1284,7 +1284,7 @@ module Aws::EC2
     #     client_token: "String",
     #     instance_type: "String",
     #     quantity: 1,
-    #     availability_zone: "String",
+    #     availability_zone: "AvailabilityZoneName",
     #   })
     #
     # @example Response structure
@@ -52357,6 +52357,7 @@ module Aws::EC2
     #   resp.account_level.instance_metadata_tags #=> String, one of "disabled", "enabled"
     #   resp.account_level.managed_by #=> String, one of "account", "declarative-policy"
     #   resp.account_level.managed_exception_message #=> String
+    #   resp.account_level.http_tokens_enforced #=> String, one of "disabled", "enabled"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/GetInstanceMetadataDefaults AWS API Documentation
     #
@@ -59425,6 +59426,17 @@ module Aws::EC2
     #   If you have the required permissions, the error response is
     #   `DryRunOperation`. Otherwise, it is `UnauthorizedOperation`.
     #
+    # @option params [String] :http_tokens_enforced
+    #   Specifies whether to enforce the requirement of IMDSv2 on an instance
+    #   at the time of launch. When enforcement is enabled, the instance
+    #   can't launch unless IMDSv2 (`HttpTokens`) is set to `required`. For
+    #   more information, see [Enforce IMDSv2 at the account level][1] in the
+    #   *Amazon EC2 User Guide*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/configuring-IMDS-new-instances.html#enforce-imdsv2-at-the-account-level
+    #
     # @return [Types::ModifyInstanceMetadataDefaultsResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::ModifyInstanceMetadataDefaultsResult#return #return} => Boolean
@@ -59437,6 +59449,7 @@ module Aws::EC2
     #     http_endpoint: "disabled", # accepts disabled, enabled, no-preference
     #     instance_metadata_tags: "disabled", # accepts disabled, enabled, no-preference
     #     dry_run: false,
+    #     http_tokens_enforced: "disabled", # accepts disabled, enabled, no-preference
     #   })
     #
     # @example Response structure
@@ -73029,7 +73042,7 @@ module Aws::EC2
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-ec2'
-      context[:gem_version] = '1.603.0'
+      context[:gem_version] = '1.604.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-ec2/client_api.rb

@@ -736,6 +736,7 @@ module Aws::EC2
     DedicatedHostId = Shapes::StringShape.new(name: 'DedicatedHostId')
     DedicatedHostIdList = Shapes::ListShape.new(name: 'DedicatedHostIdList')
     DefaultEnaQueueCountPerInterface = Shapes::IntegerShape.new(name: 'DefaultEnaQueueCountPerInterface')
+    DefaultHttpTokensEnforcedState = Shapes::StringShape.new(name: 'DefaultHttpTokensEnforcedState')
     DefaultInstanceMetadataEndpointState = Shapes::StringShape.new(name: 'DefaultInstanceMetadataEndpointState')
     DefaultInstanceMetadataTagsState = Shapes::StringShape.new(name: 'DefaultInstanceMetadataTagsState')
     DefaultNetworkCardIndex = Shapes::IntegerShape.new(name: 'DefaultNetworkCardIndex')
@@ -1950,6 +1951,7 @@ module Aws::EC2
     HostTenancy = Shapes::StringShape.new(name: 'HostTenancy')
     HostnameType = Shapes::StringShape.new(name: 'HostnameType')
     Hour = Shapes::IntegerShape.new(name: 'Hour')
+    HttpTokensEnforcedState = Shapes::StringShape.new(name: 'HttpTokensEnforcedState')
     HttpTokensState = Shapes::StringShape.new(name: 'HttpTokensState')
     HypervisorType = Shapes::StringShape.new(name: 'HypervisorType')
     IKEVersionsList = Shapes::ListShape.new(name: 'IKEVersionsList')
@@ -4225,7 +4227,7 @@ module Aws::EC2
     AllocateHostsRequest.add_member(:client_token, Shapes::ShapeRef.new(shape: String, location_name: "clientToken"))
     AllocateHostsRequest.add_member(:instance_type, Shapes::ShapeRef.new(shape: String, location_name: "instanceType"))
     AllocateHostsRequest.add_member(:quantity, Shapes::ShapeRef.new(shape: Integer, location_name: "quantity"))
-    AllocateHostsRequest.add_member(:availability_zone, Shapes::ShapeRef.new(shape: String, location_name: "availabilityZone"))
+    AllocateHostsRequest.add_member(:availability_zone, Shapes::ShapeRef.new(shape: AvailabilityZoneName, location_name: "availabilityZone"))
     AllocateHostsRequest.struct_class = Types::AllocateHostsRequest
 
     AllocateHostsResult.add_member(:host_ids, Shapes::ShapeRef.new(shape: ResponseHostIdList, location_name: "hostIdSet"))
@@ -12675,6 +12677,7 @@ module Aws::EC2
     InstanceMetadataDefaultsResponse.add_member(:instance_metadata_tags, Shapes::ShapeRef.new(shape: InstanceMetadataTagsState, location_name: "instanceMetadataTags"))
     InstanceMetadataDefaultsResponse.add_member(:managed_by, Shapes::ShapeRef.new(shape: ManagedBy, location_name: "managedBy"))
     InstanceMetadataDefaultsResponse.add_member(:managed_exception_message, Shapes::ShapeRef.new(shape: String, location_name: "managedExceptionMessage"))
+    InstanceMetadataDefaultsResponse.add_member(:http_tokens_enforced, Shapes::ShapeRef.new(shape: HttpTokensEnforcedState, location_name: "httpTokensEnforced"))
     InstanceMetadataDefaultsResponse.struct_class = Types::InstanceMetadataDefaultsResponse
 
     InstanceMetadataOptionsRequest.add_member(:http_tokens, Shapes::ShapeRef.new(shape: HttpTokensState, location_name: "HttpTokens"))
@@ -14479,6 +14482,7 @@ module Aws::EC2
     ModifyInstanceMetadataDefaultsRequest.add_member(:http_endpoint, Shapes::ShapeRef.new(shape: DefaultInstanceMetadataEndpointState, location_name: "HttpEndpoint"))
     ModifyInstanceMetadataDefaultsRequest.add_member(:instance_metadata_tags, Shapes::ShapeRef.new(shape: DefaultInstanceMetadataTagsState, location_name: "InstanceMetadataTags"))
     ModifyInstanceMetadataDefaultsRequest.add_member(:dry_run, Shapes::ShapeRef.new(shape: Boolean, location_name: "DryRun"))
+    ModifyInstanceMetadataDefaultsRequest.add_member(:http_tokens_enforced, Shapes::ShapeRef.new(shape: DefaultHttpTokensEnforcedState, location_name: "HttpTokensEnforced"))
     ModifyInstanceMetadataDefaultsRequest.struct_class = Types::ModifyInstanceMetadataDefaultsRequest
 
     ModifyInstanceMetadataDefaultsResult.add_member(:return, Shapes::ShapeRef.new(shape: Boolean, location_name: "return"))

data/lib/aws-sdk-ec2/types.rb

@@ -50792,6 +50792,13 @@ module Aws::EC2
     #   declarative policy.
     #   @return [String]
     #
+    # @!attribute [rw] http_tokens_enforced
+    #   Indicates whether to enforce the requirement of IMDSv2 on an
+    #   instance at the time of launch. When enforcement is enabled, the
+    #   instance can't launch unless IMDSv2 (`HttpTokens`) is set to
+    #   `required`.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/InstanceMetadataDefaultsResponse AWS API Documentation
     #
     class InstanceMetadataDefaultsResponse < Struct.new(
@@ -50800,7 +50807,8 @@ module Aws::EC2
       :http_endpoint,
       :instance_metadata_tags,
       :managed_by,
-      :managed_exception_message)
+      :managed_exception_message,
+      :http_tokens_enforced)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -61456,6 +61464,18 @@ module Aws::EC2
     #   `DryRunOperation`. Otherwise, it is `UnauthorizedOperation`.
     #   @return [Boolean]
     #
+    # @!attribute [rw] http_tokens_enforced
+    #   Specifies whether to enforce the requirement of IMDSv2 on an
+    #   instance at the time of launch. When enforcement is enabled, the
+    #   instance can't launch unless IMDSv2 (`HttpTokens`) is set to
+    #   `required`. For more information, see [Enforce IMDSv2 at the account
+    #   level][1] in the *Amazon EC2 User Guide*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/configuring-IMDS-new-instances.html#enforce-imdsv2-at-the-account-level
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/ModifyInstanceMetadataDefaultsRequest AWS API Documentation
     #
     class ModifyInstanceMetadataDefaultsRequest < Struct.new(
@@ -61463,7 +61483,8 @@ module Aws::EC2
       :http_put_response_hop_limit,
       :http_endpoint,
       :instance_metadata_tags,
-      :dry_run)
+      :dry_run,
+      :http_tokens_enforced)
       SENSITIVE = []
       include Aws::Structure
     end

data/lib/aws-sdk-ec2.rb

@@ -78,7 +78,7 @@ module Aws::EC2
   autoload :VpcPeeringConnection, 'aws-sdk-ec2/vpc_peering_connection'
   autoload :VpcAddress, 'aws-sdk-ec2/vpc_address'
 
-  GEM_VERSION = '1.603.0'
+  GEM_VERSION = '1.604.0'
 
 end
 

data/sig/client.rbs

@@ -12523,7 +12523,8 @@ module Aws
                                                ?http_put_response_hop_limit: ::Integer,
                                                ?http_endpoint: ("disabled" | "enabled" | "no-preference"),
                                                ?instance_metadata_tags: ("disabled" | "enabled" | "no-preference"),
-                                               ?dry_run: bool
+                                               ?dry_run: bool,
+                                               ?http_tokens_enforced: ("disabled" | "enabled" | "no-preference")
                                              ) -> _ModifyInstanceMetadataDefaultsResponseSuccess
                                            | (?Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _ModifyInstanceMetadataDefaultsResponseSuccess
 

data/sig/types.rbs

@@ -11194,6 +11194,7 @@ module Aws::EC2
       attr_accessor instance_metadata_tags: ("disabled" | "enabled")
       attr_accessor managed_by: ("account" | "declarative-policy")
       attr_accessor managed_exception_message: ::String
+      attr_accessor http_tokens_enforced: ("disabled" | "enabled")
       SENSITIVE: []
     end
 
@@ -13174,6 +13175,7 @@ module Aws::EC2
       attr_accessor http_endpoint: ("disabled" | "enabled" | "no-preference")
       attr_accessor instance_metadata_tags: ("disabled" | "enabled" | "no-preference")
       attr_accessor dry_run: bool
+      attr_accessor http_tokens_enforced: ("disabled" | "enabled" | "no-preference")
       SENSITIVE: []
     end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-ec2
 version: !ruby/object:Gem::Version
-  version: 1.603.0
+  version: 1.604.0
 platform: ruby
 authors:
 - Amazon Web Services