aws-sdk-ecr 1.33.0 → 1.38.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 6954dd0033c1368041d7d973927c9233c1f1cddd18bfecbf4e9f534eeb597174
-  data.tar.gz: bc27920674c82bdc4d115d663d9f22592a1dafb0083e34e3a8da01a8815f5163
+  metadata.gz: 297938c37b7ac55709db18cc8e81ac484d2eb11a30ad6839eba9148e6eda9a2a
+  data.tar.gz: '02896188c833cf03f4a254e4a0643fb2c220b2f3529d0de6f1df4ae91762c6bb'
 SHA512:
-  metadata.gz: 6ae5317c3ff61f2f9f7810a8dd2544fb8b186f92110f63000d01194d91bbfb5896eb90003b0c654a5f16a5aa306fa7b5c5ad4035b3af824ee9afb7ce1a3b6040
-  data.tar.gz: f99f05c5fb4c1c21db52b28ed785f9655ba6363db78bc5d1ed9e36e5fa28de5e201486053e9274423215887038431d27903de79fd4370a2dd9caa7ad5af5ef6b
+  metadata.gz: ff8a9cff4e9394f1509025a990a55ddbb2837a2f06baeb8372676c17670cbc02c64eefe4be155bd06a9047750e36a787b213b5a52f625731464be26e69941200
+  data.tar.gz: 564e72869fd2a4315de0972e79da9e0fd09cf2f387ae87c63e38675896ff9c81c3ab852870c35a08ccf95ed51b7b41a4c874e55bf1853d594cd409bd27ee58a6

data/lib/aws-sdk-ecr.rb

@@ -7,6 +7,7 @@
 #
 # WARNING ABOUT GENERATED CODE
 
+
 require 'aws-sdk-core'
 require 'aws-sigv4'
 
@@ -45,9 +46,9 @@ require_relative 'aws-sdk-ecr/customizations'
 #
 # See {Errors} for more information.
 #
-# @service
+# @!group service
 module Aws::ECR
 
-  GEM_VERSION = '1.33.0'
+  GEM_VERSION = '1.38.0'
 
 end

data/lib/aws-sdk-ecr/client.rb

@@ -85,13 +85,28 @@ module Aws::ECR
     #     * `Aws::Credentials` - Used for configuring static, non-refreshing
     #       credentials.
     #
+    #     * `Aws::SharedCredentials` - Used for loading static credentials from a
+    #       shared file, such as `~/.aws/config`.
+    #
+    #     * `Aws::AssumeRoleCredentials` - Used when you need to assume a role.
+    #
+    #     * `Aws::AssumeRoleWebIdentityCredentials` - Used when you need to
+    #       assume a role after providing credentials via the web.
+    #
+    #     * `Aws::SSOCredentials` - Used for loading credentials from AWS SSO using an
+    #       access token generated from `aws login`.
+    #
+    #     * `Aws::ProcessCredentials` - Used for loading credentials from a
+    #       process that outputs to stdout.
+    #
     #     * `Aws::InstanceProfileCredentials` - Used for loading credentials
     #       from an EC2 IMDS on an EC2 instance.
     #
-    #     * `Aws::SharedCredentials` - Used for loading credentials from a
-    #       shared file, such as `~/.aws/config`.
+    #     * `Aws::ECSCredentials` - Used for loading credentials from
+    #       instances running in ECS.
     #
-    #     * `Aws::AssumeRoleCredentials` - Used when you need to assume a role.
+    #     * `Aws::CognitoIdentityCredentials` - Used for loading credentials
+    #       from the Cognito Identity service.
     #
     #     When `:credentials` are not configured directly, the following
     #     locations will be searched for credentials:
@@ -101,10 +116,10 @@ module Aws::ECR
     #     * ENV['AWS_ACCESS_KEY_ID'], ENV['AWS_SECRET_ACCESS_KEY']
     #     * `~/.aws/credentials`
     #     * `~/.aws/config`
-    #     * EC2 IMDS instance profile - When used by default, the timeouts are
-    #       very aggressive. Construct and pass an instance of
-    #       `Aws::InstanceProfileCredentails` to enable retries and extended
-    #       timeouts.
+    #     * EC2/ECS IMDS instance profile - When used by default, the timeouts
+    #       are very aggressive. Construct and pass an instance of
+    #       `Aws::InstanceProfileCredentails` or `Aws::ECSCredentials` to
+    #       enable retries and extended timeouts.
     #
     #   @option options [required, String] :region
     #     The AWS region to connect to.  The configured `:region` is
@@ -456,7 +471,7 @@ module Aws::ECR
     #   resp.failures #=> Array
     #   resp.failures[0].image_id.image_digest #=> String
     #   resp.failures[0].image_id.image_tag #=> String
-    #   resp.failures[0].failure_code #=> String, one of "InvalidImageDigest", "InvalidImageTag", "ImageTagDoesNotMatchDigest", "ImageNotFound", "MissingDigestAndTag", "ImageReferencedByManifestList"
+    #   resp.failures[0].failure_code #=> String, one of "InvalidImageDigest", "InvalidImageTag", "ImageTagDoesNotMatchDigest", "ImageNotFound", "MissingDigestAndTag", "ImageReferencedByManifestList", "KmsError"
     #   resp.failures[0].failure_reason #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ecr-2015-09-21/BatchDeleteImage AWS API Documentation
@@ -557,7 +572,7 @@ module Aws::ECR
     #   resp.failures #=> Array
     #   resp.failures[0].image_id.image_digest #=> String
     #   resp.failures[0].image_id.image_tag #=> String
-    #   resp.failures[0].failure_code #=> String, one of "InvalidImageDigest", "InvalidImageTag", "ImageTagDoesNotMatchDigest", "ImageNotFound", "MissingDigestAndTag", "ImageReferencedByManifestList"
+    #   resp.failures[0].failure_code #=> String, one of "InvalidImageDigest", "InvalidImageTag", "ImageTagDoesNotMatchDigest", "ImageNotFound", "MissingDigestAndTag", "ImageReferencedByManifestList", "KmsError"
     #   resp.failures[0].failure_reason #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ecr-2015-09-21/BatchGetImage AWS API Documentation
@@ -659,9 +674,13 @@ module Aws::ECR
     #   them from being overwritten.
     #
     # @option params [Types::ImageScanningConfiguration] :image_scanning_configuration
-    #   The image scanning configuration for the repository. This setting
-    #   determines whether images are scanned for known vulnerabilities after
-    #   being pushed to the repository.
+    #   The image scanning configuration for the repository. This determines
+    #   whether images are scanned for known vulnerabilities after being
+    #   pushed to the repository.
+    #
+    # @option params [Types::EncryptionConfiguration] :encryption_configuration
+    #   The encryption configuration for the repository. This determines how
+    #   the contents of your repository are encrypted at rest.
     #
     # @return [Types::CreateRepositoryResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
@@ -700,6 +719,10 @@ module Aws::ECR
     #     image_scanning_configuration: {
     #       scan_on_push: false,
     #     },
+    #     encryption_configuration: {
+    #       encryption_type: "AES256", # required, accepts AES256, KMS
+    #       kms_key: "KmsKey",
+    #     },
     #   })
     #
     # @example Response structure
@@ -711,6 +734,8 @@ module Aws::ECR
     #   resp.repository.created_at #=> Time
     #   resp.repository.image_tag_mutability #=> String, one of "MUTABLE", "IMMUTABLE"
     #   resp.repository.image_scanning_configuration.scan_on_push #=> Boolean
+    #   resp.repository.encryption_configuration.encryption_type #=> String, one of "AES256", "KMS"
+    #   resp.repository.encryption_configuration.kms_key #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ecr-2015-09-21/CreateRepository AWS API Documentation
     #
@@ -817,6 +842,8 @@ module Aws::ECR
     #   resp.repository.created_at #=> Time
     #   resp.repository.image_tag_mutability #=> String, one of "MUTABLE", "IMMUTABLE"
     #   resp.repository.image_scanning_configuration.scan_on_push #=> Boolean
+    #   resp.repository.encryption_configuration.encryption_type #=> String, one of "AES256", "KMS"
+    #   resp.repository.encryption_configuration.kms_key #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ecr-2015-09-21/DeleteRepository AWS API Documentation
     #
@@ -1059,6 +1086,8 @@ module Aws::ECR
     #   resp.image_details[0].image_scan_findings_summary.vulnerability_source_updated_at #=> Time
     #   resp.image_details[0].image_scan_findings_summary.finding_severity_counts #=> Hash
     #   resp.image_details[0].image_scan_findings_summary.finding_severity_counts["FindingSeverity"] #=> Integer
+    #   resp.image_details[0].image_manifest_media_type #=> String
+    #   resp.image_details[0].artifact_media_type #=> String
     #   resp.next_token #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ecr-2015-09-21/DescribeImages AWS API Documentation
@@ -1159,6 +1188,8 @@ module Aws::ECR
     #   resp.repositories[0].created_at #=> Time
     #   resp.repositories[0].image_tag_mutability #=> String, one of "MUTABLE", "IMMUTABLE"
     #   resp.repositories[0].image_scanning_configuration.scan_on_push #=> Boolean
+    #   resp.repositories[0].encryption_configuration.encryption_type #=> String, one of "AES256", "KMS"
+    #   resp.repositories[0].encryption_configuration.kms_key #=> String
     #   resp.next_token #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ecr-2015-09-21/DescribeRepositories AWS API Documentation
@@ -1690,7 +1721,8 @@ module Aws::ECR
     #
     # @option params [String] :image_tag
     #   The tag to associate with the image. This parameter is required for
-    #   images that use the Docker Image Manifest V2 Schema 2 or OCI formats.
+    #   images that use the Docker Image Manifest V2 Schema 2 or Open
+    #   Container Initiative (OCI) formats.
     #
     # @option params [String] :image_digest
     #   The image digest of the image manifest corresponding to the image.
@@ -2137,7 +2169,7 @@ module Aws::ECR
     #   The position of the last byte of the layer part within the overall
     #   image layer.
     #
-    # @option params [required, String, IO] :layer_part_blob
+    # @option params [required, String, StringIO, File] :layer_part_blob
     #   The base64-encoded layer part payload.
     #
     # @return [Types::UploadLayerPartResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
@@ -2187,7 +2219,7 @@ module Aws::ECR
         params: params,
         config: config)
       context[:gem_name] = 'aws-sdk-ecr'
-      context[:gem_version] = '1.33.0'
+      context[:gem_version] = '1.38.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-ecr/client_api.rb

@@ -48,6 +48,8 @@ module Aws::ECR
     DescribeRepositoriesRequest = Shapes::StructureShape.new(name: 'DescribeRepositoriesRequest')
     DescribeRepositoriesResponse = Shapes::StructureShape.new(name: 'DescribeRepositoriesResponse')
     EmptyUploadException = Shapes::StructureShape.new(name: 'EmptyUploadException')
+    EncryptionConfiguration = Shapes::StructureShape.new(name: 'EncryptionConfiguration')
+    EncryptionType = Shapes::StringShape.new(name: 'EncryptionType')
     EvaluationTimestamp = Shapes::TimestampShape.new(name: 'EvaluationTimestamp')
     ExceptionMessage = Shapes::StringShape.new(name: 'ExceptionMessage')
     ExpirationTimestamp = Shapes::TimestampShape.new(name: 'ExpirationTimestamp')
@@ -101,6 +103,9 @@ module Aws::ECR
     InvalidLayerPartException = Shapes::StructureShape.new(name: 'InvalidLayerPartException')
     InvalidParameterException = Shapes::StructureShape.new(name: 'InvalidParameterException')
     InvalidTagParameterException = Shapes::StructureShape.new(name: 'InvalidTagParameterException')
+    KmsError = Shapes::StringShape.new(name: 'KmsError')
+    KmsException = Shapes::StructureShape.new(name: 'KmsException')
+    KmsKey = Shapes::StringShape.new(name: 'KmsKey')
     Layer = Shapes::StructureShape.new(name: 'Layer')
     LayerAlreadyExistsException = Shapes::StructureShape.new(name: 'LayerAlreadyExistsException')
     LayerAvailability = Shapes::StringShape.new(name: 'LayerAvailability')
@@ -251,6 +256,7 @@ module Aws::ECR
     CreateRepositoryRequest.add_member(:tags, Shapes::ShapeRef.new(shape: TagList, location_name: "tags"))
     CreateRepositoryRequest.add_member(:image_tag_mutability, Shapes::ShapeRef.new(shape: ImageTagMutability, location_name: "imageTagMutability"))
     CreateRepositoryRequest.add_member(:image_scanning_configuration, Shapes::ShapeRef.new(shape: ImageScanningConfiguration, location_name: "imageScanningConfiguration"))
+    CreateRepositoryRequest.add_member(:encryption_configuration, Shapes::ShapeRef.new(shape: EncryptionConfiguration, location_name: "encryptionConfiguration"))
     CreateRepositoryRequest.struct_class = Types::CreateRepositoryRequest
 
     CreateRepositoryResponse.add_member(:repository, Shapes::ShapeRef.new(shape: Repository, location_name: "repository"))
@@ -326,6 +332,10 @@ module Aws::ECR
     EmptyUploadException.add_member(:message, Shapes::ShapeRef.new(shape: ExceptionMessage, location_name: "message"))
     EmptyUploadException.struct_class = Types::EmptyUploadException
 
+    EncryptionConfiguration.add_member(:encryption_type, Shapes::ShapeRef.new(shape: EncryptionType, required: true, location_name: "encryptionType"))
+    EncryptionConfiguration.add_member(:kms_key, Shapes::ShapeRef.new(shape: KmsKey, location_name: "kmsKey"))
+    EncryptionConfiguration.struct_class = Types::EncryptionConfiguration
+
     FindingSeverityCounts.key = Shapes::ShapeRef.new(shape: FindingSeverity)
     FindingSeverityCounts.value = Shapes::ShapeRef.new(shape: SeverityCount)
 
@@ -400,6 +410,8 @@ module Aws::ECR
     ImageDetail.add_member(:image_pushed_at, Shapes::ShapeRef.new(shape: PushTimestamp, location_name: "imagePushedAt"))
     ImageDetail.add_member(:image_scan_status, Shapes::ShapeRef.new(shape: ImageScanStatus, location_name: "imageScanStatus"))
     ImageDetail.add_member(:image_scan_findings_summary, Shapes::ShapeRef.new(shape: ImageScanFindingsSummary, location_name: "imageScanFindingsSummary"))
+    ImageDetail.add_member(:image_manifest_media_type, Shapes::ShapeRef.new(shape: MediaType, location_name: "imageManifestMediaType"))
+    ImageDetail.add_member(:artifact_media_type, Shapes::ShapeRef.new(shape: MediaType, location_name: "artifactMediaType"))
     ImageDetail.struct_class = Types::ImageDetail
 
     ImageDetailList.member = Shapes::ShapeRef.new(shape: ImageDetail)
@@ -481,6 +493,10 @@ module Aws::ECR
     InvalidTagParameterException.add_member(:message, Shapes::ShapeRef.new(shape: ExceptionMessage, location_name: "message"))
     InvalidTagParameterException.struct_class = Types::InvalidTagParameterException
 
+    KmsException.add_member(:message, Shapes::ShapeRef.new(shape: ExceptionMessage, location_name: "message"))
+    KmsException.add_member(:kms_error, Shapes::ShapeRef.new(shape: KmsError, location_name: "kmsError"))
+    KmsException.struct_class = Types::KmsException
+
     Layer.add_member(:layer_digest, Shapes::ShapeRef.new(shape: LayerDigest, location_name: "layerDigest"))
     Layer.add_member(:layer_availability, Shapes::ShapeRef.new(shape: LayerAvailability, location_name: "layerAvailability"))
     Layer.add_member(:layer_size, Shapes::ShapeRef.new(shape: LayerSizeInBytes, location_name: "layerSize"))
@@ -613,6 +629,7 @@ module Aws::ECR
     Repository.add_member(:created_at, Shapes::ShapeRef.new(shape: CreationTimestamp, location_name: "createdAt"))
     Repository.add_member(:image_tag_mutability, Shapes::ShapeRef.new(shape: ImageTagMutability, location_name: "imageTagMutability"))
     Repository.add_member(:image_scanning_configuration, Shapes::ShapeRef.new(shape: ImageScanningConfiguration, location_name: "imageScanningConfiguration"))
+    Repository.add_member(:encryption_configuration, Shapes::ShapeRef.new(shape: EncryptionConfiguration, location_name: "encryptionConfiguration"))
     Repository.struct_class = Types::Repository
 
     RepositoryAlreadyExistsException.add_member(:message, Shapes::ShapeRef.new(shape: ExceptionMessage, location_name: "message"))
@@ -780,6 +797,7 @@ module Aws::ECR
         o.errors << Shapes::ShapeRef.new(shape: LayerPartTooSmallException)
         o.errors << Shapes::ShapeRef.new(shape: LayerAlreadyExistsException)
         o.errors << Shapes::ShapeRef.new(shape: EmptyUploadException)
+        o.errors << Shapes::ShapeRef.new(shape: KmsException)
       end)
 
       api.add_operation(:create_repository, Seahorse::Model::Operation.new.tap do |o|
@@ -794,6 +812,7 @@ module Aws::ECR
         o.errors << Shapes::ShapeRef.new(shape: TooManyTagsException)
         o.errors << Shapes::ShapeRef.new(shape: RepositoryAlreadyExistsException)
         o.errors << Shapes::ShapeRef.new(shape: LimitExceededException)
+        o.errors << Shapes::ShapeRef.new(shape: KmsException)
       end)
 
       api.add_operation(:delete_lifecycle_policy, Seahorse::Model::Operation.new.tap do |o|
@@ -818,6 +837,7 @@ module Aws::ECR
         o.errors << Shapes::ShapeRef.new(shape: InvalidParameterException)
         o.errors << Shapes::ShapeRef.new(shape: RepositoryNotFoundException)
         o.errors << Shapes::ShapeRef.new(shape: RepositoryNotEmptyException)
+        o.errors << Shapes::ShapeRef.new(shape: KmsException)
       end)
 
       api.add_operation(:delete_repository_policy, Seahorse::Model::Operation.new.tap do |o|
@@ -960,6 +980,7 @@ module Aws::ECR
         o.errors << Shapes::ShapeRef.new(shape: ServerException)
         o.errors << Shapes::ShapeRef.new(shape: InvalidParameterException)
         o.errors << Shapes::ShapeRef.new(shape: RepositoryNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: KmsException)
       end)
 
       api.add_operation(:list_images, Seahorse::Model::Operation.new.tap do |o|
@@ -1005,6 +1026,7 @@ module Aws::ECR
         o.errors << Shapes::ShapeRef.new(shape: LimitExceededException)
         o.errors << Shapes::ShapeRef.new(shape: ImageTagAlreadyExistsException)
         o.errors << Shapes::ShapeRef.new(shape: ImageDigestDoesNotMatchException)
+        o.errors << Shapes::ShapeRef.new(shape: KmsException)
       end)
 
       api.add_operation(:put_image_scanning_configuration, Seahorse::Model::Operation.new.tap do |o|
@@ -1116,6 +1138,7 @@ module Aws::ECR
         o.errors << Shapes::ShapeRef.new(shape: RepositoryNotFoundException)
         o.errors << Shapes::ShapeRef.new(shape: UploadNotFoundException)
         o.errors << Shapes::ShapeRef.new(shape: LimitExceededException)
+        o.errors << Shapes::ShapeRef.new(shape: KmsException)
       end)
     end
 

data/lib/aws-sdk-ecr/errors.rb

@@ -36,6 +36,7 @@ module Aws::ECR
   # * {InvalidLayerPartException}
   # * {InvalidParameterException}
   # * {InvalidTagParameterException}
+  # * {KmsException}
   # * {LayerAlreadyExistsException}
   # * {LayerInaccessibleException}
   # * {LayerPartTooSmallException}
@@ -216,6 +217,26 @@ module Aws::ECR
       end
     end
 
+    class KmsException < ServiceError
+
+      # @param [Seahorse::Client::RequestContext] context
+      # @param [String] message
+      # @param [Aws::ECR::Types::KmsException] data
+      def initialize(context, message, data = Aws::EmptyStructure.new)
+        super(context, message, data)
+      end
+
+      # @return [String]
+      def message
+        @message || @data[:message]
+      end
+
+      # @return [String]
+      def kms_error
+        @data[:kms_error]
+      end
+    end
+
     class LayerAlreadyExistsException < ServiceError
 
       # @param [Seahorse::Client::RequestContext] context

data/lib/aws-sdk-ecr/types.rb

@@ -322,6 +322,10 @@ module Aws::ECR
     #         image_scanning_configuration: {
     #           scan_on_push: false,
     #         },
+    #         encryption_configuration: {
+    #           encryption_type: "AES256", # required, accepts AES256, KMS
+    #           kms_key: "KmsKey",
+    #         },
     #       }
     #
     # @!attribute [rw] repository_name
@@ -348,18 +352,24 @@ module Aws::ECR
     #   @return [String]
     #
     # @!attribute [rw] image_scanning_configuration
-    #   The image scanning configuration for the repository. This setting
-    #   determines whether images are scanned for known vulnerabilities
-    #   after being pushed to the repository.
+    #   The image scanning configuration for the repository. This determines
+    #   whether images are scanned for known vulnerabilities after being
+    #   pushed to the repository.
     #   @return [Types::ImageScanningConfiguration]
     #
+    # @!attribute [rw] encryption_configuration
+    #   The encryption configuration for the repository. This determines how
+    #   the contents of your repository are encrypted at rest.
+    #   @return [Types::EncryptionConfiguration]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ecr-2015-09-21/CreateRepositoryRequest AWS API Documentation
     #
     class CreateRepositoryRequest < Struct.new(
       :repository_name,
       :tags,
       :image_tag_mutability,
-      :image_scanning_configuration)
+      :image_scanning_configuration,
+      :encryption_configuration)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -840,6 +850,75 @@ module Aws::ECR
       include Aws::Structure
     end
 
+    # The encryption configuration for the repository. This determines how
+    # the contents of your repository are encrypted at rest.
+    #
+    # By default, when no encryption configuration is set or the `AES256`
+    # encryption type is used, Amazon ECR uses server-side encryption with
+    # Amazon S3-managed encryption keys which encrypts your data at rest
+    # using an AES-256 encryption algorithm. This does not require any
+    # action on your part.
+    #
+    # For more control over the encryption of the contents of your
+    # repository, you can use server-side encryption with customer master
+    # keys (CMKs) stored in AWS Key Management Service (AWS KMS) to encrypt
+    # your images. For more information, see [Amazon ECR encryption at
+    # rest][1] in the *Amazon Elastic Container Registry User Guide*.
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/AmazonECR/latest/userguide/encryption-at-rest.html
+    #
+    # @note When making an API call, you may pass EncryptionConfiguration
+    #   data as a hash:
+    #
+    #       {
+    #         encryption_type: "AES256", # required, accepts AES256, KMS
+    #         kms_key: "KmsKey",
+    #       }
+    #
+    # @!attribute [rw] encryption_type
+    #   The encryption type to use.
+    #
+    #   If you use the `KMS` encryption type, the contents of the repository
+    #   will be encrypted using server-side encryption with customer master
+    #   keys (CMKs) stored in AWS KMS. When you use AWS KMS to encrypt your
+    #   data, you can either use the default AWS managed CMK for Amazon ECR,
+    #   or specify your own CMK, which you already created. For more
+    #   information, see [Protecting Data Using Server-Side Encryption with
+    #   CMKs Stored in AWS Key Management Service (SSE-KMS)][1] in the
+    #   *Amazon Simple Storage Service Console Developer Guide.*.
+    #
+    #   If you use the `AES256` encryption type, Amazon ECR uses server-side
+    #   encryption with Amazon S3-managed encryption keys which encrypts the
+    #   images in the repository using an AES-256 encryption algorithm. For
+    #   more information, see [Protecting Data Using Server-Side Encryption
+    #   with Amazon S3-Managed Encryption Keys (SSE-S3)][2] in the *Amazon
+    #   Simple Storage Service Console Developer Guide.*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AmazonS3/latest/dev/UsingKMSEncryption.html
+    #   [2]: https://docs.aws.amazon.com/AmazonS3/latest/dev/UsingServerSideEncryption.html
+    #   @return [String]
+    #
+    # @!attribute [rw] kms_key
+    #   If you use the `KMS` encryption type, specify the CMK to use for
+    #   encryption. The alias, key ID, or full ARN of the CMK can be
+    #   specified. The key must exist in the same Region as the repository.
+    #   If no key is specified, the default AWS managed CMK for Amazon ECR
+    #   will be used.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ecr-2015-09-21/EncryptionConfiguration AWS API Documentation
+    #
+    class EncryptionConfiguration < Struct.new(
+      :encryption_type,
+      :kms_key)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @note When making an API call, you may pass GetAuthorizationTokenRequest
     #   data as a hash:
     #
@@ -1170,7 +1249,7 @@ module Aws::ECR
     #   @return [String]
     #
     # @!attribute [rw] image_manifest_media_type
-    #   The media type associated with the image manifest.
+    #   The manifest media type of the image.
     #   @return [String]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ecr-2015-09-21/Image AWS API Documentation
@@ -1248,6 +1327,14 @@ module Aws::ECR
     #   A summary of the last completed image scan.
     #   @return [Types::ImageScanFindingsSummary]
     #
+    # @!attribute [rw] image_manifest_media_type
+    #   The media type of the image manifest.
+    #   @return [String]
+    #
+    # @!attribute [rw] artifact_media_type
+    #   The artifact media type of the image.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ecr-2015-09-21/ImageDetail AWS API Documentation
     #
     class ImageDetail < Struct.new(
@@ -1258,7 +1345,9 @@ module Aws::ECR
       :image_size_in_bytes,
       :image_pushed_at,
       :image_scan_status,
-      :image_scan_findings_summary)
+      :image_scan_findings_summary,
+      :image_manifest_media_type,
+      :artifact_media_type)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -1615,6 +1704,24 @@ module Aws::ECR
       include Aws::Structure
     end
 
+    # The operation failed due to a KMS exception.
+    #
+    # @!attribute [rw] message
+    #   @return [String]
+    #
+    # @!attribute [rw] kms_error
+    #   The error code returned by AWS KMS.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ecr-2015-09-21/KmsException AWS API Documentation
+    #
+    class KmsException < Struct.new(
+      :message,
+      :kms_error)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # An object representing an Amazon ECR image layer.
     #
     # @!attribute [rw] layer_digest
@@ -1763,8 +1870,8 @@ module Aws::ECR
       include Aws::Structure
     end
 
-    # The previous lifecycle policy preview request has not completed.
-    # Please try again later.
+    # The previous lifecycle policy preview request has not completed. Wait
+    # and try again.
     #
     # @!attribute [rw] message
     #   @return [String]
@@ -2047,8 +2154,8 @@ module Aws::ECR
     #
     # @!attribute [rw] image_tag
     #   The tag to associate with the image. This parameter is required for
-    #   images that use the Docker Image Manifest V2 Schema 2 or OCI
-    #   formats.
+    #   images that use the Docker Image Manifest V2 Schema 2 or Open
+    #   Container Initiative (OCI) formats.
     #   @return [String]
     #
     # @!attribute [rw] image_digest
@@ -2288,8 +2395,8 @@ module Aws::ECR
     #   @return [String]
     #
     # @!attribute [rw] repository_uri
-    #   The URI for the repository. You can use this URI for Docker `push`
-    #   or `pull` operations.
+    #   The URI for the repository. You can use this URI for container image
+    #   `push` and `pull` operations.
     #   @return [String]
     #
     # @!attribute [rw] created_at
@@ -2305,6 +2412,11 @@ module Aws::ECR
     #   The image scanning configuration for a repository.
     #   @return [Types::ImageScanningConfiguration]
     #
+    # @!attribute [rw] encryption_configuration
+    #   The encryption configuration for the repository. This determines how
+    #   the contents of your repository are encrypted at rest.
+    #   @return [Types::EncryptionConfiguration]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ecr-2015-09-21/Repository AWS API Documentation
     #
     class Repository < Struct.new(
@@ -2314,7 +2426,8 @@ module Aws::ECR
       :repository_uri,
       :created_at,
       :image_tag_mutability,
-      :image_scanning_configuration)
+      :image_scanning_configuration,
+      :encryption_configuration)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -2814,7 +2927,7 @@ module Aws::ECR
       include Aws::Structure
     end
 
-    # The upload could not be found, or the specified upload id is not valid
+    # The upload could not be found, or the specified upload ID is not valid
     # for this repository.
     #
     # @!attribute [rw] message

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-ecr
 version: !ruby/object:Gem::Version
-  version: 1.33.0
+  version: 1.38.0
 platform: ruby
 authors:
 - Amazon Web Services
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-06-30 00:00:00.000000000 Z
+date: 2020-09-15 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-core