aws-sdk-ecs 1.104.0 → 1.106.0

data/lib/aws-sdk-ecs/client.rb

@@ -577,6 +577,28 @@ module Aws::ECS
     #   when it was created, it can be defined later with the
     #   PutClusterCapacityProviders API operation.
     #
+    # @option params [Types::ClusterServiceConnectDefaultsRequest] :service_connect_defaults
+    #   Use this parameter to set a default Service Connect namespace. After
+    #   you set a default Service Connect namespace, any new services with
+    #   Service Connect turned on that are created in the cluster are added as
+    #   client services in the namespace. This setting only applies to new
+    #   services that set the `enabled` parameter to `true` in the
+    #   `ServiceConnectConfiguration`. You can set the namespace of each
+    #   service individually in the `ServiceConnectConfiguration` to override
+    #   this default parameter.
+    #
+    #   Tasks that run in a namespace can use short names to connect to
+    #   services in the namespace. Tasks can connect to services across all of
+    #   the clusters in the namespace. Tasks connect through a managed proxy
+    #   container that collects logs and metrics for increased visibility.
+    #   Only the tasks that Amazon ECS services create are supported with
+    #   Service Connect. For more information, see [Service Connect][1] in the
+    #   *Amazon Elastic Container Service Developer Guide*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/service-connect.html
+    #
     # @return [Types::CreateClusterResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::CreateClusterResponse#cluster #cluster} => Types::Cluster
@@ -640,6 +662,9 @@ module Aws::ECS
     #         base: 1,
     #       },
     #     ],
+    #     service_connect_defaults: {
+    #       namespace: "String", # required
+    #     },
     #   })
     #
     # @example Response structure
@@ -681,6 +706,7 @@ module Aws::ECS
     #   resp.cluster.attachments[0].details[0].name #=> String
     #   resp.cluster.attachments[0].details[0].value #=> String
     #   resp.cluster.attachments_status #=> String
+    #   resp.cluster.service_connect_defaults.namespace #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ecs-2014-11-13/CreateCluster AWS API Documentation
     #
@@ -1015,8 +1041,8 @@ module Aws::ECS
     #   defined and you don't specify a health check grace period value, the
     #   default value of `0` is used.
     #
-    #   If you do not use an Elastic Load Balancing, we recomend that you use
-    #   the `startPeriod` in the task definition healtch check parameters. For
+    #   If you do not use an Elastic Load Balancing, we recommend that you use
+    #   the `startPeriod` in the task definition health check parameters. For
     #   more information, see [Health check][1].
     #
     #   If your service's tasks take a while to start and respond to Elastic
@@ -1118,6 +1144,23 @@ module Aws::ECS
     #   the service. If `true`, this enables execute command functionality on
     #   all containers in the service tasks.
     #
+    # @option params [Types::ServiceConnectConfiguration] :service_connect_configuration
+    #   The configuration for this service to discover and connect to
+    #   services, and be discovered by, and connected from, other services
+    #   within a namespace.
+    #
+    #   Tasks that run in a namespace can use short names to connect to
+    #   services in the namespace. Tasks can connect to services across all of
+    #   the clusters in the namespace. Tasks connect through a managed proxy
+    #   container that collects logs and metrics for increased visibility.
+    #   Only the tasks that Amazon ECS services create are supported with
+    #   Service Connect. For more information, see [Service Connect][1] in the
+    #   *Amazon Elastic Container Service Developer Guide*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/service-connect.html
+    #
     # @return [Types::CreateServiceResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::CreateServiceResponse#service #service} => Types::Service
@@ -1315,6 +1358,35 @@ module Aws::ECS
     #     enable_ecs_managed_tags: false,
     #     propagate_tags: "TASK_DEFINITION", # accepts TASK_DEFINITION, SERVICE, NONE
     #     enable_execute_command: false,
+    #     service_connect_configuration: {
+    #       enabled: false, # required
+    #       namespace: "String",
+    #       services: [
+    #         {
+    #           port_name: "String", # required
+    #           discovery_name: "String",
+    #           client_aliases: [
+    #             {
+    #               port: 1, # required
+    #               dns_name: "String",
+    #             },
+    #           ],
+    #           ingress_port_override: 1,
+    #         },
+    #       ],
+    #       log_configuration: {
+    #         log_driver: "json-file", # required, accepts json-file, syslog, journald, gelf, fluentd, awslogs, splunk, awsfirelens
+    #         options: {
+    #           "String" => "String",
+    #         },
+    #         secret_options: [
+    #           {
+    #             name: "String", # required
+    #             value_from: "String", # required
+    #           },
+    #         ],
+    #       },
+    #     },
     #   })
     #
     # @example Response structure
@@ -1415,6 +1487,24 @@ module Aws::ECS
     #   resp.service.deployments[0].network_configuration.awsvpc_configuration.assign_public_ip #=> String, one of "ENABLED", "DISABLED"
     #   resp.service.deployments[0].rollout_state #=> String, one of "COMPLETED", "FAILED", "IN_PROGRESS"
     #   resp.service.deployments[0].rollout_state_reason #=> String
+    #   resp.service.deployments[0].service_connect_configuration.enabled #=> Boolean
+    #   resp.service.deployments[0].service_connect_configuration.namespace #=> String
+    #   resp.service.deployments[0].service_connect_configuration.services #=> Array
+    #   resp.service.deployments[0].service_connect_configuration.services[0].port_name #=> String
+    #   resp.service.deployments[0].service_connect_configuration.services[0].discovery_name #=> String
+    #   resp.service.deployments[0].service_connect_configuration.services[0].client_aliases #=> Array
+    #   resp.service.deployments[0].service_connect_configuration.services[0].client_aliases[0].port #=> Integer
+    #   resp.service.deployments[0].service_connect_configuration.services[0].client_aliases[0].dns_name #=> String
+    #   resp.service.deployments[0].service_connect_configuration.services[0].ingress_port_override #=> Integer
+    #   resp.service.deployments[0].service_connect_configuration.log_configuration.log_driver #=> String, one of "json-file", "syslog", "journald", "gelf", "fluentd", "awslogs", "splunk", "awsfirelens"
+    #   resp.service.deployments[0].service_connect_configuration.log_configuration.options #=> Hash
+    #   resp.service.deployments[0].service_connect_configuration.log_configuration.options["String"] #=> String
+    #   resp.service.deployments[0].service_connect_configuration.log_configuration.secret_options #=> Array
+    #   resp.service.deployments[0].service_connect_configuration.log_configuration.secret_options[0].name #=> String
+    #   resp.service.deployments[0].service_connect_configuration.log_configuration.secret_options[0].value_from #=> String
+    #   resp.service.deployments[0].service_connect_resources #=> Array
+    #   resp.service.deployments[0].service_connect_resources[0].discovery_name #=> String
+    #   resp.service.deployments[0].service_connect_resources[0].discovery_arn #=> String
     #   resp.service.role_arn #=> String
     #   resp.service.events #=> Array
     #   resp.service.events[0].id #=> String
@@ -1968,6 +2058,7 @@ module Aws::ECS
     #   resp.cluster.attachments[0].details[0].name #=> String
     #   resp.cluster.attachments[0].details[0].value #=> String
     #   resp.cluster.attachments_status #=> String
+    #   resp.cluster.service_connect_defaults.namespace #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ecs-2014-11-13/DeleteCluster AWS API Documentation
     #
@@ -2138,6 +2229,24 @@ module Aws::ECS
     #   resp.service.deployments[0].network_configuration.awsvpc_configuration.assign_public_ip #=> String, one of "ENABLED", "DISABLED"
     #   resp.service.deployments[0].rollout_state #=> String, one of "COMPLETED", "FAILED", "IN_PROGRESS"
     #   resp.service.deployments[0].rollout_state_reason #=> String
+    #   resp.service.deployments[0].service_connect_configuration.enabled #=> Boolean
+    #   resp.service.deployments[0].service_connect_configuration.namespace #=> String
+    #   resp.service.deployments[0].service_connect_configuration.services #=> Array
+    #   resp.service.deployments[0].service_connect_configuration.services[0].port_name #=> String
+    #   resp.service.deployments[0].service_connect_configuration.services[0].discovery_name #=> String
+    #   resp.service.deployments[0].service_connect_configuration.services[0].client_aliases #=> Array
+    #   resp.service.deployments[0].service_connect_configuration.services[0].client_aliases[0].port #=> Integer
+    #   resp.service.deployments[0].service_connect_configuration.services[0].client_aliases[0].dns_name #=> String
+    #   resp.service.deployments[0].service_connect_configuration.services[0].ingress_port_override #=> Integer
+    #   resp.service.deployments[0].service_connect_configuration.log_configuration.log_driver #=> String, one of "json-file", "syslog", "journald", "gelf", "fluentd", "awslogs", "splunk", "awsfirelens"
+    #   resp.service.deployments[0].service_connect_configuration.log_configuration.options #=> Hash
+    #   resp.service.deployments[0].service_connect_configuration.log_configuration.options["String"] #=> String
+    #   resp.service.deployments[0].service_connect_configuration.log_configuration.secret_options #=> Array
+    #   resp.service.deployments[0].service_connect_configuration.log_configuration.secret_options[0].name #=> String
+    #   resp.service.deployments[0].service_connect_configuration.log_configuration.secret_options[0].value_from #=> String
+    #   resp.service.deployments[0].service_connect_resources #=> Array
+    #   resp.service.deployments[0].service_connect_resources[0].discovery_name #=> String
+    #   resp.service.deployments[0].service_connect_resources[0].discovery_arn #=> String
     #   resp.service.role_arn #=> String
     #   resp.service.events #=> Array
     #   resp.service.events[0].id #=> String
@@ -2459,6 +2568,8 @@ module Aws::ECS
     #   resp.task_definition.container_definitions[0].port_mappings[0].container_port #=> Integer
     #   resp.task_definition.container_definitions[0].port_mappings[0].host_port #=> Integer
     #   resp.task_definition.container_definitions[0].port_mappings[0].protocol #=> String, one of "tcp", "udp"
+    #   resp.task_definition.container_definitions[0].port_mappings[0].name #=> String
+    #   resp.task_definition.container_definitions[0].port_mappings[0].app_protocol #=> String, one of "http", "http2", "grpc"
     #   resp.task_definition.container_definitions[0].essential #=> Boolean
     #   resp.task_definition.container_definitions[0].entry_point #=> Array
     #   resp.task_definition.container_definitions[0].entry_point[0] #=> String
@@ -2711,7 +2822,8 @@ module Aws::ECS
     #   isn't included.
     #
     #   If `ATTACHMENTS` is specified, the attachments for the container
-    #   instances or tasks within the cluster are included.
+    #   instances or tasks within the cluster are included, for example the
+    #   capacity providers.
     #
     #   If `SETTINGS` is specified, the settings for the cluster are included.
     #
@@ -2800,6 +2912,7 @@ module Aws::ECS
     #   resp.clusters[0].attachments[0].details[0].name #=> String
     #   resp.clusters[0].attachments[0].details[0].value #=> String
     #   resp.clusters[0].attachments_status #=> String
+    #   resp.clusters[0].service_connect_defaults.namespace #=> String
     #   resp.failures #=> Array
     #   resp.failures[0].arn #=> String
     #   resp.failures[0].reason #=> String
@@ -3190,6 +3303,24 @@ module Aws::ECS
     #   resp.services[0].deployments[0].network_configuration.awsvpc_configuration.assign_public_ip #=> String, one of "ENABLED", "DISABLED"
     #   resp.services[0].deployments[0].rollout_state #=> String, one of "COMPLETED", "FAILED", "IN_PROGRESS"
     #   resp.services[0].deployments[0].rollout_state_reason #=> String
+    #   resp.services[0].deployments[0].service_connect_configuration.enabled #=> Boolean
+    #   resp.services[0].deployments[0].service_connect_configuration.namespace #=> String
+    #   resp.services[0].deployments[0].service_connect_configuration.services #=> Array
+    #   resp.services[0].deployments[0].service_connect_configuration.services[0].port_name #=> String
+    #   resp.services[0].deployments[0].service_connect_configuration.services[0].discovery_name #=> String
+    #   resp.services[0].deployments[0].service_connect_configuration.services[0].client_aliases #=> Array
+    #   resp.services[0].deployments[0].service_connect_configuration.services[0].client_aliases[0].port #=> Integer
+    #   resp.services[0].deployments[0].service_connect_configuration.services[0].client_aliases[0].dns_name #=> String
+    #   resp.services[0].deployments[0].service_connect_configuration.services[0].ingress_port_override #=> Integer
+    #   resp.services[0].deployments[0].service_connect_configuration.log_configuration.log_driver #=> String, one of "json-file", "syslog", "journald", "gelf", "fluentd", "awslogs", "splunk", "awsfirelens"
+    #   resp.services[0].deployments[0].service_connect_configuration.log_configuration.options #=> Hash
+    #   resp.services[0].deployments[0].service_connect_configuration.log_configuration.options["String"] #=> String
+    #   resp.services[0].deployments[0].service_connect_configuration.log_configuration.secret_options #=> Array
+    #   resp.services[0].deployments[0].service_connect_configuration.log_configuration.secret_options[0].name #=> String
+    #   resp.services[0].deployments[0].service_connect_configuration.log_configuration.secret_options[0].value_from #=> String
+    #   resp.services[0].deployments[0].service_connect_resources #=> Array
+    #   resp.services[0].deployments[0].service_connect_resources[0].discovery_name #=> String
+    #   resp.services[0].deployments[0].service_connect_resources[0].discovery_arn #=> String
     #   resp.services[0].role_arn #=> String
     #   resp.services[0].events #=> Array
     #   resp.services[0].events[0].id #=> String
@@ -3348,6 +3479,8 @@ module Aws::ECS
     #   resp.task_definition.container_definitions[0].port_mappings[0].container_port #=> Integer
     #   resp.task_definition.container_definitions[0].port_mappings[0].host_port #=> Integer
     #   resp.task_definition.container_definitions[0].port_mappings[0].protocol #=> String, one of "tcp", "udp"
+    #   resp.task_definition.container_definitions[0].port_mappings[0].name #=> String
+    #   resp.task_definition.container_definitions[0].port_mappings[0].app_protocol #=> String, one of "http", "http2", "grpc"
     #   resp.task_definition.container_definitions[0].essential #=> Boolean
     #   resp.task_definition.container_definitions[0].entry_point #=> Array
     #   resp.task_definition.container_definitions[0].entry_point[0] #=> String
@@ -3780,7 +3913,7 @@ module Aws::ECS
     #   resp.tasks[0].pull_stopped_at #=> Time
     #   resp.tasks[0].started_at #=> Time
     #   resp.tasks[0].started_by #=> String
-    #   resp.tasks[0].stop_code #=> String, one of "TaskFailedToStart", "EssentialContainerExited", "UserInitiated"
+    #   resp.tasks[0].stop_code #=> String, one of "TaskFailedToStart", "EssentialContainerExited", "UserInitiated", "ServiceSchedulerInitiated", "SpotInterruption", "TerminationNotice"
     #   resp.tasks[0].stopped_at #=> Time
     #   resp.tasks[0].stopped_reason #=> String
     #   resp.tasks[0].stopping_at #=> Time
@@ -3835,6 +3968,7 @@ module Aws::ECS
     #
     #   * {Types::DiscoverPollEndpointResponse#endpoint #endpoint} => String
     #   * {Types::DiscoverPollEndpointResponse#telemetry_endpoint #telemetry_endpoint} => String
+    #   * {Types::DiscoverPollEndpointResponse#service_connect_endpoint #service_connect_endpoint} => String
     #
     # @example Request syntax with placeholder values
     #
@@ -3847,6 +3981,7 @@ module Aws::ECS
     #
     #   resp.endpoint #=> String
     #   resp.telemetry_endpoint #=> String
+    #   resp.service_connect_endpoint #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ecs-2014-11-13/DiscoverPollEndpoint AWS API Documentation
     #
@@ -3861,7 +3996,7 @@ module Aws::ECS
     #
     # If you use a condition key in your IAM policy to refine the conditions
     # for the policy statement, for example limit the actions to a specific
-    # cluster, you recevie an `AccessDeniedException` when there is a
+    # cluster, you receive an `AccessDeniedException` when there is a
     # mismatch between the condition key value and the corresponding
     # parameter value.
     #
@@ -3923,6 +4058,72 @@ module Aws::ECS
       req.send_request(options)
     end
 
+    # Retrieves the protection status of tasks in an Amazon ECS service.
+    #
+    # @option params [required, String] :cluster
+    #   The short name or full Amazon Resource Name (ARN) of the cluster that
+    #   hosts the service that the task sets exist in.
+    #
+    # @option params [Array<String>] :tasks
+    #   A list of up to 100 task IDs or full ARN entries.
+    #
+    # @return [Types::GetTaskProtectionResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::GetTaskProtectionResponse#protected_tasks #protected_tasks} => Array&lt;Types::ProtectedTask&gt;
+    #   * {Types::GetTaskProtectionResponse#failures #failures} => Array&lt;Types::Failure&gt;
+    #
+    #
+    # @example Example: To get the protection status of a task
+    #
+    #   # In this example, we get the protection status for a single task.
+    #
+    #   resp = client.get_task_protection({
+    #     cluster: "test-task-protection", 
+    #     tasks: [
+    #       "b8b1cf532d0e46ba8d44a40d1de16772", 
+    #     ], 
+    #   })
+    #
+    #   resp.to_h outputs the following:
+    #   {
+    #     failures: [
+    #     ], 
+    #     protected_tasks: [
+    #       {
+    #         expiration_date: Time.parse("2022-11-02T06:56:32.553Z"), 
+    #         protection_enabled: true, 
+    #         task_arn: "arn:aws:ecs:us-west-2:012345678910:task/b8b1cf532d0e46ba8d44a40d1de16772", 
+    #       }, 
+    #     ], 
+    #   }
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.get_task_protection({
+    #     cluster: "String", # required
+    #     tasks: ["String"],
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.protected_tasks #=> Array
+    #   resp.protected_tasks[0].task_arn #=> String
+    #   resp.protected_tasks[0].protection_enabled #=> Boolean
+    #   resp.protected_tasks[0].expiration_date #=> Time
+    #   resp.failures #=> Array
+    #   resp.failures[0].arn #=> String
+    #   resp.failures[0].reason #=> String
+    #   resp.failures[0].detail #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ecs-2014-11-13/GetTaskProtection AWS API Documentation
+    #
+    # @overload get_task_protection(params = {})
+    # @param [Hash] params ({})
+    def get_task_protection(params = {}, options = {})
+      req = build_request(:get_task_protection, params)
+      req.send_request(options)
+    end
+
     # Lists the account settings for a specified principal.
     #
     # @option params [String] :name
@@ -4406,6 +4607,82 @@ module Aws::ECS
       req.send_request(options)
     end
 
+    # This operation lists all of the services that are associated with a
+    # Cloud Map namespace. This list might include services in different
+    # clusters. In contrast, `ListServices` can only list services in one
+    # cluster at a time. If you need to filter the list of services in a
+    # single cluster by various parameters, use `ListServices`. For more
+    # information, see [Service Connect][1] in the *Amazon Elastic Container
+    # Service Developer Guide*.
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/service-connect.html
+    #
+    # @option params [required, String] :namespace
+    #   The namespace name or full Amazon Resource Name (ARN) of the Cloud Map
+    #   namespace to list the services in.
+    #
+    #   Tasks that run in a namespace can use short names to connect to
+    #   services in the namespace. Tasks can connect to services across all of
+    #   the clusters in the namespace. Tasks connect through a managed proxy
+    #   container that collects logs and metrics for increased visibility.
+    #   Only the tasks that Amazon ECS services create are supported with
+    #   Service Connect. For more information, see [Service Connect][1] in the
+    #   *Amazon Elastic Container Service Developer Guide*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/service-connect.html
+    #
+    # @option params [String] :next_token
+    #   The `nextToken` value that's returned from a
+    #   `ListServicesByNamespace` request. It indicates that more results are
+    #   available to fulfill the request and further calls are needed. If
+    #   `maxResults` is returned, it is possible the number of results is less
+    #   than `maxResults`.
+    #
+    # @option params [Integer] :max_results
+    #   The maximum number of service results that `ListServicesByNamespace`
+    #   returns in paginated output. When this parameter is used,
+    #   `ListServicesByNamespace` only returns `maxResults` results in a
+    #   single page along with a `nextToken` response element. The remaining
+    #   results of the initial request can be seen by sending another
+    #   `ListServicesByNamespace` request with the returned `nextToken` value.
+    #   This value can be between 1 and 100. If this parameter isn't used,
+    #   then `ListServicesByNamespace` returns up to 10 results and a
+    #   `nextToken` value if applicable.
+    #
+    # @return [Types::ListServicesByNamespaceResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::ListServicesByNamespaceResponse#service_arns #service_arns} => Array&lt;String&gt;
+    #   * {Types::ListServicesByNamespaceResponse#next_token #next_token} => String
+    #
+    # The returned {Seahorse::Client::Response response} is a pageable response and is Enumerable. For details on usage see {Aws::PageableResponse PageableResponse}.
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.list_services_by_namespace({
+    #     namespace: "String", # required
+    #     next_token: "String",
+    #     max_results: 1,
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.service_arns #=> Array
+    #   resp.service_arns[0] #=> String
+    #   resp.next_token #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ecs-2014-11-13/ListServicesByNamespace AWS API Documentation
+    #
+    # @overload list_services_by_namespace(params = {})
+    # @param [Hash] params ({})
+    def list_services_by_namespace(params = {}, options = {})
+      req = build_request(:list_services_by_namespace, params)
+      req.send_request(options)
+    end
+
     # List the tags for an Amazon ECS resource.
     #
     # @option params [required, String] :resource_arn
@@ -4742,6 +5019,9 @@ module Aws::ECS
     #   `startedBy` value limits the results to tasks that were started with
     #   that value.
     #
+    #   When you specify `startedBy` as the filter, it must be the only filter
+    #   that you use.
+    #
     # @option params [String] :service_name
     #   The name of the service to use when filtering the `ListTasks` results.
     #   Specifying a `serviceName` limits the results to tasks that belong to
@@ -5223,6 +5503,7 @@ module Aws::ECS
     #   resp.cluster.attachments[0].details[0].name #=> String
     #   resp.cluster.attachments[0].details[0].value #=> String
     #   resp.cluster.attachments_status #=> String
+    #   resp.cluster.service_connect_defaults.namespace #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ecs-2014-11-13/PutClusterCapacityProviders AWS API Documentation
     #
@@ -5864,6 +6145,8 @@ module Aws::ECS
     #             container_port: 1,
     #             host_port: 1,
     #             protocol: "tcp", # accepts tcp, udp
+    #             name: "String",
+    #             app_protocol: "http", # accepts http, http2, grpc
     #           },
     #         ],
     #         essential: false,
@@ -6093,6 +6376,8 @@ module Aws::ECS
     #   resp.task_definition.container_definitions[0].port_mappings[0].container_port #=> Integer
     #   resp.task_definition.container_definitions[0].port_mappings[0].host_port #=> Integer
     #   resp.task_definition.container_definitions[0].port_mappings[0].protocol #=> String, one of "tcp", "udp"
+    #   resp.task_definition.container_definitions[0].port_mappings[0].name #=> String
+    #   resp.task_definition.container_definitions[0].port_mappings[0].app_protocol #=> String, one of "http", "http2", "grpc"
     #   resp.task_definition.container_definitions[0].essential #=> Boolean
     #   resp.task_definition.container_definitions[0].entry_point #=> Array
     #   resp.task_definition.container_definitions[0].entry_point[0] #=> String
@@ -6723,7 +7008,7 @@ module Aws::ECS
     #   resp.tasks[0].pull_stopped_at #=> Time
     #   resp.tasks[0].started_at #=> Time
     #   resp.tasks[0].started_by #=> String
-    #   resp.tasks[0].stop_code #=> String, one of "TaskFailedToStart", "EssentialContainerExited", "UserInitiated"
+    #   resp.tasks[0].stop_code #=> String, one of "TaskFailedToStart", "EssentialContainerExited", "UserInitiated", "ServiceSchedulerInitiated", "SpotInterruption", "TerminationNotice"
     #   resp.tasks[0].stopped_at #=> Time
     #   resp.tasks[0].stopped_reason #=> String
     #   resp.tasks[0].stopping_at #=> Time
@@ -7031,7 +7316,7 @@ module Aws::ECS
     #   resp.tasks[0].pull_stopped_at #=> Time
     #   resp.tasks[0].started_at #=> Time
     #   resp.tasks[0].started_by #=> String
-    #   resp.tasks[0].stop_code #=> String, one of "TaskFailedToStart", "EssentialContainerExited", "UserInitiated"
+    #   resp.tasks[0].stop_code #=> String, one of "TaskFailedToStart", "EssentialContainerExited", "UserInitiated", "ServiceSchedulerInitiated", "SpotInterruption", "TerminationNotice"
     #   resp.tasks[0].stopped_at #=> Time
     #   resp.tasks[0].stopped_reason #=> String
     #   resp.tasks[0].stopping_at #=> Time
@@ -7197,7 +7482,7 @@ module Aws::ECS
     #   resp.task.pull_stopped_at #=> Time
     #   resp.task.started_at #=> Time
     #   resp.task.started_by #=> String
-    #   resp.task.stop_code #=> String, one of "TaskFailedToStart", "EssentialContainerExited", "UserInitiated"
+    #   resp.task.stop_code #=> String, one of "TaskFailedToStart", "EssentialContainerExited", "UserInitiated", "ServiceSchedulerInitiated", "SpotInterruption", "TerminationNotice"
     #   resp.task.stopped_at #=> Time
     #   resp.task.stopped_reason #=> String
     #   resp.task.stopping_at #=> Time
@@ -7621,6 +7906,28 @@ module Aws::ECS
     # @option params [Types::ClusterConfiguration] :configuration
     #   The execute command configuration for the cluster.
     #
+    # @option params [Types::ClusterServiceConnectDefaultsRequest] :service_connect_defaults
+    #   Use this parameter to set a default Service Connect namespace. After
+    #   you set a default Service Connect namespace, any new services with
+    #   Service Connect turned on that are created in the cluster are added as
+    #   client services in the namespace. This setting only applies to new
+    #   services that set the `enabled` parameter to `true` in the
+    #   `ServiceConnectConfiguration`. You can set the namespace of each
+    #   service individually in the `ServiceConnectConfiguration` to override
+    #   this default parameter.
+    #
+    #   Tasks that run in a namespace can use short names to connect to
+    #   services in the namespace. Tasks can connect to services across all of
+    #   the clusters in the namespace. Tasks connect through a managed proxy
+    #   container that collects logs and metrics for increased visibility.
+    #   Only the tasks that Amazon ECS services create are supported with
+    #   Service Connect. For more information, see [Service Connect][1] in the
+    #   *Amazon Elastic Container Service Developer Guide*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/service-connect.html
+    #
     # @return [Types::UpdateClusterResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::UpdateClusterResponse#cluster #cluster} => Types::Cluster
@@ -7648,6 +7955,9 @@ module Aws::ECS
     #         },
     #       },
     #     },
+    #     service_connect_defaults: {
+    #       namespace: "String", # required
+    #     },
     #   })
     #
     # @example Response structure
@@ -7689,6 +7999,7 @@ module Aws::ECS
     #   resp.cluster.attachments[0].details[0].name #=> String
     #   resp.cluster.attachments[0].details[0].value #=> String
     #   resp.cluster.attachments_status #=> String
+    #   resp.cluster.service_connect_defaults.namespace #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ecs-2014-11-13/UpdateCluster AWS API Documentation
     #
@@ -7710,6 +8021,13 @@ module Aws::ECS
     #   specified, it overrides the `containerInsights` value set with
     #   PutAccountSetting or PutAccountSettingDefault.
     #
+    #   Currently, if you delete an existing cluster that does not have
+    #   Container Insights turned on, and then create a new cluster with the
+    #   same name with Container Insights tuned on, Container Insights will
+    #   not actually be turned on. If you want to preserve the same name for
+    #   your existing cluster and turn on Container Insights, you must wait 7
+    #   days before you can re-create it.
+    #
     # @return [Types::UpdateClusterSettingsResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::UpdateClusterSettingsResponse#cluster #cluster} => Types::Cluster
@@ -7765,6 +8083,7 @@ module Aws::ECS
     #   resp.cluster.attachments[0].details[0].name #=> String
     #   resp.cluster.attachments[0].details[0].value #=> String
     #   resp.cluster.attachments_status #=> String
+    #   resp.cluster.service_connect_defaults.namespace #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ecs-2014-11-13/UpdateClusterSettings AWS API Documentation
     #
@@ -7791,6 +8110,13 @@ module Aws::ECS
     #
     #  </note>
     #
+    # <note markdown="1"> Agent updates with the `UpdateContainerAgent` API operation do not
+    # apply to Windows container instances. We recommend that you launch new
+    # container instances to update the agent version in your Windows
+    # clusters.
+    #
+    #  </note>
+    #
     # The `UpdateContainerAgent` API requires an Amazon ECS-optimized AMI or
     # Amazon Linux AMI with the `ecs-init` service installed and running.
     # For help updating the Amazon ECS container agent on other operating
@@ -8359,6 +8685,23 @@ module Aws::ECS
     #
     #   [1]: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/service-discovery.html
     #
+    # @option params [Types::ServiceConnectConfiguration] :service_connect_configuration
+    #   The configuration for this service to discover and connect to
+    #   services, and be discovered by, and connected from, other services
+    #   within a namespace.
+    #
+    #   Tasks that run in a namespace can use short names to connect to
+    #   services in the namespace. Tasks can connect to services across all of
+    #   the clusters in the namespace. Tasks connect through a managed proxy
+    #   container that collects logs and metrics for increased visibility.
+    #   Only the tasks that Amazon ECS services create are supported with
+    #   Service Connect. For more information, see [Service Connect][1] in the
+    #   *Amazon Elastic Container Service Developer Guide*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/service-connect.html
+    #
     # @return [Types::UpdateServiceResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::UpdateServiceResponse#service #service} => Types::Service
@@ -8453,6 +8796,35 @@ module Aws::ECS
     #         container_port: 1,
     #       },
     #     ],
+    #     service_connect_configuration: {
+    #       enabled: false, # required
+    #       namespace: "String",
+    #       services: [
+    #         {
+    #           port_name: "String", # required
+    #           discovery_name: "String",
+    #           client_aliases: [
+    #             {
+    #               port: 1, # required
+    #               dns_name: "String",
+    #             },
+    #           ],
+    #           ingress_port_override: 1,
+    #         },
+    #       ],
+    #       log_configuration: {
+    #         log_driver: "json-file", # required, accepts json-file, syslog, journald, gelf, fluentd, awslogs, splunk, awsfirelens
+    #         options: {
+    #           "String" => "String",
+    #         },
+    #         secret_options: [
+    #           {
+    #             name: "String", # required
+    #             value_from: "String", # required
+    #           },
+    #         ],
+    #       },
+    #     },
     #   })
     #
     # @example Response structure
@@ -8553,6 +8925,24 @@ module Aws::ECS
     #   resp.service.deployments[0].network_configuration.awsvpc_configuration.assign_public_ip #=> String, one of "ENABLED", "DISABLED"
     #   resp.service.deployments[0].rollout_state #=> String, one of "COMPLETED", "FAILED", "IN_PROGRESS"
     #   resp.service.deployments[0].rollout_state_reason #=> String
+    #   resp.service.deployments[0].service_connect_configuration.enabled #=> Boolean
+    #   resp.service.deployments[0].service_connect_configuration.namespace #=> String
+    #   resp.service.deployments[0].service_connect_configuration.services #=> Array
+    #   resp.service.deployments[0].service_connect_configuration.services[0].port_name #=> String
+    #   resp.service.deployments[0].service_connect_configuration.services[0].discovery_name #=> String
+    #   resp.service.deployments[0].service_connect_configuration.services[0].client_aliases #=> Array
+    #   resp.service.deployments[0].service_connect_configuration.services[0].client_aliases[0].port #=> Integer
+    #   resp.service.deployments[0].service_connect_configuration.services[0].client_aliases[0].dns_name #=> String
+    #   resp.service.deployments[0].service_connect_configuration.services[0].ingress_port_override #=> Integer
+    #   resp.service.deployments[0].service_connect_configuration.log_configuration.log_driver #=> String, one of "json-file", "syslog", "journald", "gelf", "fluentd", "awslogs", "splunk", "awsfirelens"
+    #   resp.service.deployments[0].service_connect_configuration.log_configuration.options #=> Hash
+    #   resp.service.deployments[0].service_connect_configuration.log_configuration.options["String"] #=> String
+    #   resp.service.deployments[0].service_connect_configuration.log_configuration.secret_options #=> Array
+    #   resp.service.deployments[0].service_connect_configuration.log_configuration.secret_options[0].name #=> String
+    #   resp.service.deployments[0].service_connect_configuration.log_configuration.secret_options[0].value_from #=> String
+    #   resp.service.deployments[0].service_connect_resources #=> Array
+    #   resp.service.deployments[0].service_connect_resources[0].discovery_name #=> String
+    #   resp.service.deployments[0].service_connect_resources[0].discovery_arn #=> String
     #   resp.service.role_arn #=> String
     #   resp.service.events #=> Array
     #   resp.service.events[0].id #=> String
@@ -8679,6 +9069,178 @@ module Aws::ECS
       req.send_request(options)
     end
 
+    # Updates the protection status of a task. You can set
+    # `protectionEnabled` to `true` to protect your task from termination
+    # during scale-in events from [Service Autoscaling][1] or
+    # [deployments][2].
+    #
+    # Task-protection, by default, expires after 2 hours at which point
+    # Amazon ECS unsets the `protectionEnabled` property making the task
+    # eligible for termination by a subsequent scale-in event.
+    #
+    # You can specify a custom expiration period for task protection from 1
+    # minute to up to 2,880 minutes (48 hours). To specify the custom
+    # expiration period, set the `expiresInMinutes` property. The
+    # `expiresInMinutes` property is always reset when you invoke this
+    # operation for a task that already has `protectionEnabled` set to
+    # `true`. You can keep extending the protection expiration period of a
+    # task by invoking this operation repeatedly.
+    #
+    # To learn more about Amazon ECS task protection, see [Task scale-in
+    # protection][3] in the <i> <i>Amazon Elastic Container Service
+    # Developer Guide</i> </i>.
+    #
+    # <note markdown="1"> This operation is only supported for tasks belonging to an Amazon ECS
+    # service. Invoking this operation for a standalone task will result in
+    # an `TASK_NOT_VALID` failure. For more information, see [API failure
+    # reasons][4].
+    #
+    #  </note>
+    #
+    # If you prefer to set task protection from within the container, we
+    # recommend using the [Task scale-in protection endpoint][5].
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/service-auto-scaling.html
+    # [2]: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/deployment-types.html
+    # [3]: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task-scale-in-protection.html
+    # [4]: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/api_failures_messages.html
+    # [5]: https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task-scale-in-protection-endpoint.html
+    #
+    # @option params [required, String] :cluster
+    #   The short name or full Amazon Resource Name (ARN) of the cluster that
+    #   hosts the service that the task sets exist in.
+    #
+    # @option params [required, Array<String>] :tasks
+    #   A list of up to 10 task IDs or full ARN entries.
+    #
+    # @option params [required, Boolean] :protection_enabled
+    #   Specify `true` to mark a task for protection and `false` to unset
+    #   protection, making it eligible for termination.
+    #
+    # @option params [Integer] :expires_in_minutes
+    #   If you set `protectionEnabled` to `true`, you can specify the duration
+    #   for task protection in minutes. You can specify a value from 1 minute
+    #   to up to 2,880 minutes (48 hours). During this time, your task will
+    #   not be terminated by scale-in events from Service Auto Scaling or
+    #   deployments. After this time period lapses, `protectionEnabled` will
+    #   be reset to `false`.
+    #
+    #   If you don’t specify the time, then the task is automatically
+    #   protected for 120 minutes (2 hours).
+    #
+    # @return [Types::UpdateTaskProtectionResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::UpdateTaskProtectionResponse#protected_tasks #protected_tasks} => Array&lt;Types::ProtectedTask&gt;
+    #   * {Types::UpdateTaskProtectionResponse#failures #failures} => Array&lt;Types::Failure&gt;
+    #
+    #
+    # @example Example: To set task scale-in protection for a task for 60 minutes
+    #
+    #   # This example enables scale-in protection for a task for 60 minutes.
+    #
+    #   resp = client.update_task_protection({
+    #     cluster: "test-task-protection", 
+    #     expires_in_minutes: 60, 
+    #     protection_enabled: true, 
+    #     tasks: [
+    #       "b8b1cf532d0e46ba8d44a40d1de16772", 
+    #     ], 
+    #   })
+    #
+    #   resp.to_h outputs the following:
+    #   {
+    #     failures: [
+    #     ], 
+    #     protected_tasks: [
+    #       {
+    #         expiration_date: Time.parse("2022-11-02T06:56:32.553Z"), 
+    #         protection_enabled: true, 
+    #         task_arn: "arn:aws:ecs:us-west-2:012345678910:task/b8b1cf532d0e46ba8d44a40d1de16772", 
+    #       }, 
+    #     ], 
+    #   }
+    #
+    # @example Example: To set task scale-in protection for the default time period in minutes
+    #
+    #   # This example enables task scale-in protection for a task, without specifying the expiresInMinutes parameter, for the
+    #   # default protection period of 120 minutes.
+    #
+    #   resp = client.update_task_protection({
+    #     cluster: "test-task-protection", 
+    #     protection_enabled: true, 
+    #     tasks: [
+    #       "b8b1cf532d0e46ba8d44a40d1de16772", 
+    #     ], 
+    #   })
+    #
+    #   resp.to_h outputs the following:
+    #   {
+    #     failures: [
+    #     ], 
+    #     protected_tasks: [
+    #       {
+    #         expiration_date: Time.parse("2022-11-02T06:56:32.553Z"), 
+    #         protection_enabled: true, 
+    #         task_arn: "arn:aws:ecs:us-west-2:012345678910:task/b8b1cf532d0e46ba8d44a40d1de16772", 
+    #       }, 
+    #     ], 
+    #   }
+    #
+    # @example Example: To remove task scale-in protection
+    #
+    #   # This example removes scale-in protection for a task.
+    #
+    #   resp = client.update_task_protection({
+    #     cluster: "test-task-protection", 
+    #     protection_enabled: false, 
+    #     tasks: [
+    #       "b8b1cf532d0e46ba8d44a40d1de16772", 
+    #     ], 
+    #   })
+    #
+    #   resp.to_h outputs the following:
+    #   {
+    #     failures: [
+    #     ], 
+    #     protected_tasks: [
+    #       {
+    #         protection_enabled: false, 
+    #         task_arn: "arn:aws:ecs:us-west-2:012345678910:task/b8b1cf532d0e46ba8d44a40d1de16772", 
+    #       }, 
+    #     ], 
+    #   }
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.update_task_protection({
+    #     cluster: "String", # required
+    #     tasks: ["String"], # required
+    #     protection_enabled: false, # required
+    #     expires_in_minutes: 1,
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.protected_tasks #=> Array
+    #   resp.protected_tasks[0].task_arn #=> String
+    #   resp.protected_tasks[0].protection_enabled #=> Boolean
+    #   resp.protected_tasks[0].expiration_date #=> Time
+    #   resp.failures #=> Array
+    #   resp.failures[0].arn #=> String
+    #   resp.failures[0].reason #=> String
+    #   resp.failures[0].detail #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ecs-2014-11-13/UpdateTaskProtection AWS API Documentation
+    #
+    # @overload update_task_protection(params = {})
+    # @param [Hash] params ({})
+    def update_task_protection(params = {}, options = {})
+      req = build_request(:update_task_protection, params)
+      req.send_request(options)
+    end
+
     # Modifies a task set. This is used when a service uses the `EXTERNAL`
     # deployment controller type. For more information, see [Amazon ECS
     # Deployment Types][1] in the *Amazon Elastic Container Service
@@ -8787,7 +9349,7 @@ module Aws::ECS
         params: params,
         config: config)
       context[:gem_name] = 'aws-sdk-ecs'
-      context[:gem_version] = '1.104.0'
+      context[:gem_version] = '1.106.0'
       Seahorse::Client::Request.new(handlers, context)
     end