aws-sdk-eks 1.93.0 → 1.95.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -21,6 +21,7 @@ module Aws::EKS
21
21
  # [2]: https://docs.aws.amazon.com/IAM/latest/UserGuide/access.html
22
22
  #
23
23
  # @!attribute [rw] message
24
+ # You do not have sufficient access to perform this action.
24
25
  # @return [String]
25
26
  #
26
27
  # @see http://docs.aws.amazon.com/goto/WebAPI/eks-2017-11-01/AccessDeniedException AWS API Documentation
@@ -340,6 +341,9 @@ module Aws::EKS
340
341
  # error message.
341
342
  #
342
343
  # @!attribute [rw] message
344
+ # This exception is thrown if the request contains a semantic error.
345
+ # The precise meaning will depend on the API, and will be documented
346
+ # in the error message.
343
347
  # @return [String]
344
348
  #
345
349
  # @see http://docs.aws.amazon.com/goto/WebAPI/eks-2017-11-01/BadRequestException AWS API Documentation
@@ -385,6 +389,7 @@ module Aws::EKS
385
389
  # @return [String]
386
390
  #
387
391
  # @!attribute [rw] addon_name
392
+ # The Amazon EKS add-on name associated with the exception.
388
393
  # @return [String]
389
394
  #
390
395
  # @!attribute [rw] subscription_id
@@ -392,6 +397,14 @@ module Aws::EKS
392
397
  # @return [String]
393
398
  #
394
399
  # @!attribute [rw] message
400
+ # These errors are usually caused by a client action. Actions can
401
+ # include using an action or resource on behalf of an [IAM
402
+ # principal][1] that doesn't have permissions to use the action or
403
+ # resource or specifying an identifier that is not valid.
404
+ #
405
+ #
406
+ #
407
+ # [1]: https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_terms-and-concepts.html
395
408
  # @return [String]
396
409
  #
397
410
  # @see http://docs.aws.amazon.com/goto/WebAPI/eks-2017-11-01/ClientException AWS API Documentation
@@ -983,7 +996,7 @@ module Aws::EKS
983
996
  #
984
997
  # @!attribute [rw] license_quantity
985
998
  # The number of licenses to purchase with the subscription. Valid
986
- # values are between 1 and 1000. This value cannot be changed after
999
+ # values are between 1 and 100. This value can't be changed after
987
1000
  # creating the subscription.
988
1001
  # @return [Integer]
989
1002
  #
@@ -1009,7 +1022,7 @@ module Aws::EKS
1009
1022
  # @!attribute [rw] tags
1010
1023
  # The metadata for a subscription to assist with categorization and
1011
1024
  # organization. Each tag consists of a key and an optional value.
1012
- # Subscription tags do not propagate to any other resources associated
1025
+ # Subscription tags don't propagate to any other resources associated
1013
1026
  # with the subscription.
1014
1027
  # @return [Hash<String,String>]
1015
1028
  #
@@ -1347,6 +1360,95 @@ module Aws::EKS
1347
1360
  include Aws::Structure
1348
1361
  end
1349
1362
 
1363
+ # @!attribute [rw] cluster_name
1364
+ # The name of the cluster to create the association in.
1365
+ # @return [String]
1366
+ #
1367
+ # @!attribute [rw] namespace
1368
+ # The name of the Kubernetes namespace inside the cluster to create
1369
+ # the association in. The service account and the pods that use the
1370
+ # service account must be in this namespace.
1371
+ # @return [String]
1372
+ #
1373
+ # @!attribute [rw] service_account
1374
+ # The name of the Kubernetes service account inside the cluster to
1375
+ # associate the IAM credentials with.
1376
+ # @return [String]
1377
+ #
1378
+ # @!attribute [rw] role_arn
1379
+ # The Amazon Resource Name (ARN) of the IAM role to associate with the
1380
+ # service account. The EKS Pod Identity agent manages credentials to
1381
+ # assume this role for applications in the containers in the pods that
1382
+ # use this service account.
1383
+ # @return [String]
1384
+ #
1385
+ # @!attribute [rw] client_request_token
1386
+ # Unique, case-sensitive identifier that you provide to ensure the
1387
+ # idempotency of the request.
1388
+ #
1389
+ # **A suitable default value is auto-generated.** You should normally
1390
+ # not need to pass this option.
1391
+ # @return [String]
1392
+ #
1393
+ # @!attribute [rw] tags
1394
+ # The metadata that you apply to a resource to assist with
1395
+ # categorization and organization. Each tag consists of a key and an
1396
+ # optional value. You define both.
1397
+ #
1398
+ # The following basic restrictions apply to tags:
1399
+ #
1400
+ # * Maximum number of tags per resource – 50
1401
+ #
1402
+ # * For each resource, each tag key must be unique, and each tag key
1403
+ # can have only one value.
1404
+ #
1405
+ # * Maximum key length – 128 Unicode characters in UTF-8
1406
+ #
1407
+ # * Maximum value length – 256 Unicode characters in UTF-8
1408
+ #
1409
+ # * If your tagging schema is used across multiple services and
1410
+ # resources, remember that other services may have restrictions on
1411
+ # allowed characters. Generally allowed characters are: letters,
1412
+ # numbers, and spaces representable in UTF-8, and the following
1413
+ # characters: + - = . \_ : / @.
1414
+ #
1415
+ # * Tag keys and values are case-sensitive.
1416
+ #
1417
+ # * Do not use `aws:`, `AWS:`, or any upper or lowercase combination
1418
+ # of such as a prefix for either keys or values as it is reserved
1419
+ # for Amazon Web Services use. You cannot edit or delete tag keys or
1420
+ # values with this prefix. Tags with this prefix do not count
1421
+ # against your tags per resource limit.
1422
+ # @return [Hash<String,String>]
1423
+ #
1424
+ # @see http://docs.aws.amazon.com/goto/WebAPI/eks-2017-11-01/CreatePodIdentityAssociationRequest AWS API Documentation
1425
+ #
1426
+ class CreatePodIdentityAssociationRequest < Struct.new(
1427
+ :cluster_name,
1428
+ :namespace,
1429
+ :service_account,
1430
+ :role_arn,
1431
+ :client_request_token,
1432
+ :tags)
1433
+ SENSITIVE = []
1434
+ include Aws::Structure
1435
+ end
1436
+
1437
+ # @!attribute [rw] association
1438
+ # The full description of your new association.
1439
+ #
1440
+ # The description includes an ID for the association. Use the ID of
1441
+ # the association in further actions to manage the association.
1442
+ # @return [Types::PodIdentityAssociation]
1443
+ #
1444
+ # @see http://docs.aws.amazon.com/goto/WebAPI/eks-2017-11-01/CreatePodIdentityAssociationResponse AWS API Documentation
1445
+ #
1446
+ class CreatePodIdentityAssociationResponse < Struct.new(
1447
+ :association)
1448
+ SENSITIVE = []
1449
+ include Aws::Structure
1450
+ end
1451
+
1350
1452
  # @!attribute [rw] cluster_name
1351
1453
  # The name of the cluster to delete the add-on from.
1352
1454
  # @return [String]
@@ -1501,6 +1603,36 @@ module Aws::EKS
1501
1603
  include Aws::Structure
1502
1604
  end
1503
1605
 
1606
+ # @!attribute [rw] cluster_name
1607
+ # The cluster name that
1608
+ # @return [String]
1609
+ #
1610
+ # @!attribute [rw] association_id
1611
+ # The ID of the association to be deleted.
1612
+ # @return [String]
1613
+ #
1614
+ # @see http://docs.aws.amazon.com/goto/WebAPI/eks-2017-11-01/DeletePodIdentityAssociationRequest AWS API Documentation
1615
+ #
1616
+ class DeletePodIdentityAssociationRequest < Struct.new(
1617
+ :cluster_name,
1618
+ :association_id)
1619
+ SENSITIVE = []
1620
+ include Aws::Structure
1621
+ end
1622
+
1623
+ # @!attribute [rw] association
1624
+ # The full description of the EKS Pod Identity association that was
1625
+ # deleted.
1626
+ # @return [Types::PodIdentityAssociation]
1627
+ #
1628
+ # @see http://docs.aws.amazon.com/goto/WebAPI/eks-2017-11-01/DeletePodIdentityAssociationResponse AWS API Documentation
1629
+ #
1630
+ class DeletePodIdentityAssociationResponse < Struct.new(
1631
+ :association)
1632
+ SENSITIVE = []
1633
+ include Aws::Structure
1634
+ end
1635
+
1504
1636
  # @!attribute [rw] name
1505
1637
  # The name of the connected cluster to deregister.
1506
1638
  # @return [String]
@@ -1685,11 +1817,11 @@ module Aws::EKS
1685
1817
  # @return [Array<Types::AddonInfo>]
1686
1818
  #
1687
1819
  # @!attribute [rw] next_token
1688
- # The `nextToken` value returned from a previous paginated
1689
- # `DescribeAddonVersionsResponse` where `maxResults` was used and the
1690
- # results exceeded the value of that parameter. Pagination continues
1691
- # from the end of the previous results that returned the `nextToken`
1692
- # value.
1820
+ # The `nextToken` value to include in a future `DescribeAddonVersions`
1821
+ # request. When the results of a `DescribeAddonVersions` request
1822
+ # exceed `maxResults`, you can use this value to retrieve the next
1823
+ # page of results. This value is `null` when there are no more results
1824
+ # to return.
1693
1825
  #
1694
1826
  # <note markdown="1"> This token should be treated as an opaque identifier that is used
1695
1827
  # only to retrieve the next items in a list and not for other
@@ -1845,6 +1977,35 @@ module Aws::EKS
1845
1977
  include Aws::Structure
1846
1978
  end
1847
1979
 
1980
+ # @!attribute [rw] cluster_name
1981
+ # The name of the cluster that the association is in.
1982
+ # @return [String]
1983
+ #
1984
+ # @!attribute [rw] association_id
1985
+ # The ID of the association that you want the description of.
1986
+ # @return [String]
1987
+ #
1988
+ # @see http://docs.aws.amazon.com/goto/WebAPI/eks-2017-11-01/DescribePodIdentityAssociationRequest AWS API Documentation
1989
+ #
1990
+ class DescribePodIdentityAssociationRequest < Struct.new(
1991
+ :cluster_name,
1992
+ :association_id)
1993
+ SENSITIVE = []
1994
+ include Aws::Structure
1995
+ end
1996
+
1997
+ # @!attribute [rw] association
1998
+ # The full description of the EKS Pod Identity association.
1999
+ # @return [Types::PodIdentityAssociation]
2000
+ #
2001
+ # @see http://docs.aws.amazon.com/goto/WebAPI/eks-2017-11-01/DescribePodIdentityAssociationResponse AWS API Documentation
2002
+ #
2003
+ class DescribePodIdentityAssociationResponse < Struct.new(
2004
+ :association)
2005
+ SENSITIVE = []
2006
+ include Aws::Structure
2007
+ end
2008
+
1848
2009
  # @!attribute [rw] name
1849
2010
  # The name of the Amazon EKS cluster associated with the update.
1850
2011
  # @return [String]
@@ -1957,7 +2118,7 @@ module Aws::EKS
1957
2118
  #
1958
2119
  # @!attribute [rw] license_quantity
1959
2120
  # The number of licenses included in a subscription. Valid values are
1960
- # between 1 and 1000.
2121
+ # between 1 and 100.
1961
2122
  # @return [Integer]
1962
2123
  #
1963
2124
  # @!attribute [rw] license_type
@@ -1980,7 +2141,8 @@ module Aws::EKS
1980
2141
  # @return [Boolean]
1981
2142
  #
1982
2143
  # @!attribute [rw] license_arns
1983
- # License Manager License ARNs associated with the subscription.
2144
+ # Amazon Web Services License Manager ARN associated with the
2145
+ # subscription.
1984
2146
  # @return [Array<String>]
1985
2147
  #
1986
2148
  # @!attribute [rw] tags
@@ -2020,7 +2182,7 @@ module Aws::EKS
2020
2182
  # @return [Integer]
2021
2183
  #
2022
2184
  # @!attribute [rw] unit
2023
- # The term unit of the subscription. Valid value is MONTHS.
2185
+ # The term unit of the subscription. Valid value is `MONTHS`.
2024
2186
  # @return [String]
2025
2187
  #
2026
2188
  # @see http://docs.aws.amazon.com/goto/WebAPI/eks-2017-11-01/EksAnywhereSubscriptionTerm AWS API Documentation
@@ -2258,6 +2420,8 @@ module Aws::EKS
2258
2420
  # @return [String]
2259
2421
  #
2260
2422
  # @!attribute [rw] addon_name
2423
+ # The specified parameter for the add-on name is invalid. Review the
2424
+ # available parameters for the API request
2261
2425
  # @return [String]
2262
2426
  #
2263
2427
  # @!attribute [rw] subscription_id
@@ -2265,6 +2429,8 @@ module Aws::EKS
2265
2429
  # @return [String]
2266
2430
  #
2267
2431
  # @!attribute [rw] message
2432
+ # The specified parameter is invalid. Review the available parameters
2433
+ # for the API request.
2268
2434
  # @return [String]
2269
2435
  #
2270
2436
  # @see http://docs.aws.amazon.com/goto/WebAPI/eks-2017-11-01/InvalidParameterException AWS API Documentation
@@ -2292,6 +2458,8 @@ module Aws::EKS
2292
2458
  # @return [String]
2293
2459
  #
2294
2460
  # @!attribute [rw] addon_name
2461
+ # The request is invalid given the state of the add-on name. Check the
2462
+ # state of the cluster and the associated operations.
2295
2463
  # @return [String]
2296
2464
  #
2297
2465
  # @!attribute [rw] subscription_id
@@ -2299,6 +2467,7 @@ module Aws::EKS
2299
2467
  # @return [String]
2300
2468
  #
2301
2469
  # @!attribute [rw] message
2470
+ # The Amazon EKS add-on name associated with the exception.
2302
2471
  # @return [String]
2303
2472
  #
2304
2473
  # @see http://docs.aws.amazon.com/goto/WebAPI/eks-2017-11-01/InvalidRequestException AWS API Documentation
@@ -2599,10 +2768,10 @@ module Aws::EKS
2599
2768
  # @return [Array<String>]
2600
2769
  #
2601
2770
  # @!attribute [rw] next_token
2602
- # The `nextToken` value returned from a previous paginated
2603
- # `ListAddonsResponse` where `maxResults` was used and the results
2604
- # exceeded the value of that parameter. Pagination continues from the
2605
- # end of the previous results that returned the `nextToken` value.
2771
+ # The `nextToken` value to include in a future `ListAddons` request.
2772
+ # When the results of a `ListAddons` request exceed `maxResults`, you
2773
+ # can use this value to retrieve the next page of results. This value
2774
+ # is `null` when there are no more results to return.
2606
2775
  #
2607
2776
  # <note markdown="1"> This token should be treated as an opaque identifier that is used
2608
2777
  # only to retrieve the next items in a list and not for other
@@ -2695,11 +2864,11 @@ module Aws::EKS
2695
2864
  # @return [Integer]
2696
2865
  #
2697
2866
  # @!attribute [rw] next_token
2698
- # The nextToken value to include in a future
2699
- # ListEksAnywhereSubscriptions request. When the results of a
2700
- # ListEksAnywhereSubscriptions request exceed maxResults, you can use
2701
- # this value to retrieve the next page of results. This value is null
2702
- # when there are no more results to return.
2867
+ # The `nextToken` value returned from a previous paginated
2868
+ # `ListEksAnywhereSubscriptions` request where `maxResults` was used
2869
+ # and the results exceeded the value of that parameter. Pagination
2870
+ # continues from the end of the previous results that returned the
2871
+ # `nextToken` value.
2703
2872
  # @return [String]
2704
2873
  #
2705
2874
  # @!attribute [rw] include_status
@@ -2835,11 +3004,11 @@ module Aws::EKS
2835
3004
  # @return [Array<Types::IdentityProviderConfig>]
2836
3005
  #
2837
3006
  # @!attribute [rw] next_token
2838
- # The `nextToken` value returned from a previous paginated
2839
- # `ListIdentityProviderConfigsResponse` where `maxResults` was used
2840
- # and the results exceeded the value of that parameter. Pagination
2841
- # continues from the end of the previous results that returned the
2842
- # `nextToken` value.
3007
+ # The `nextToken` value to include in a future
3008
+ # `ListIdentityProviderConfigsResponse` request. When the results of a
3009
+ # `ListIdentityProviderConfigsResponse` request exceed `maxResults`,
3010
+ # you can use this value to retrieve the next page of results. This
3011
+ # value is `null` when there are no more results to return.
2843
3012
  # @return [String]
2844
3013
  #
2845
3014
  # @see http://docs.aws.amazon.com/goto/WebAPI/eks-2017-11-01/ListIdentityProviderConfigsResponse AWS API Documentation
@@ -2907,6 +3076,97 @@ module Aws::EKS
2907
3076
  include Aws::Structure
2908
3077
  end
2909
3078
 
3079
+ # @!attribute [rw] cluster_name
3080
+ # The name of the cluster that the associations are in.
3081
+ # @return [String]
3082
+ #
3083
+ # @!attribute [rw] namespace
3084
+ # The name of the Kubernetes namespace inside the cluster that the
3085
+ # associations are in.
3086
+ # @return [String]
3087
+ #
3088
+ # @!attribute [rw] service_account
3089
+ # The name of the Kubernetes service account that the associations
3090
+ # use.
3091
+ # @return [String]
3092
+ #
3093
+ # @!attribute [rw] max_results
3094
+ # The maximum number of EKS Pod Identity association results returned
3095
+ # by `ListPodIdentityAssociations` in paginated output. When you use
3096
+ # this parameter, `ListPodIdentityAssociations` returns only
3097
+ # `maxResults` results in a single page along with a `nextToken`
3098
+ # response element. You can see the remaining results of the initial
3099
+ # request by sending another `ListPodIdentityAssociations` request
3100
+ # with the returned `nextToken` value. This value can be between 1 and
3101
+ # 100. If you don't use this parameter, `ListPodIdentityAssociations`
3102
+ # returns up to 100 results and a `nextToken` value if applicable.
3103
+ # @return [Integer]
3104
+ #
3105
+ # @!attribute [rw] next_token
3106
+ # The `nextToken` value returned from a previous paginated
3107
+ # `ListUpdates` request where `maxResults` was used and the results
3108
+ # exceeded the value of that parameter. Pagination continues from the
3109
+ # end of the previous results that returned the `nextToken` value.
3110
+ #
3111
+ # <note markdown="1"> This token should be treated as an opaque identifier that is used
3112
+ # only to retrieve the next items in a list and not for other
3113
+ # programmatic purposes.
3114
+ #
3115
+ # </note>
3116
+ # @return [String]
3117
+ #
3118
+ # @see http://docs.aws.amazon.com/goto/WebAPI/eks-2017-11-01/ListPodIdentityAssociationsRequest AWS API Documentation
3119
+ #
3120
+ class ListPodIdentityAssociationsRequest < Struct.new(
3121
+ :cluster_name,
3122
+ :namespace,
3123
+ :service_account,
3124
+ :max_results,
3125
+ :next_token)
3126
+ SENSITIVE = []
3127
+ include Aws::Structure
3128
+ end
3129
+
3130
+ # @!attribute [rw] associations
3131
+ # The list of summarized descriptions of the associations that are in
3132
+ # the cluster and match any filters that you provided.
3133
+ #
3134
+ # Each summary is simplified by removing these fields compared to the
3135
+ # full ` PodIdentityAssociation `:
3136
+ #
3137
+ # * The IAM role: `roleArn`
3138
+ #
3139
+ # * The timestamp that the association was created at: `createdAt`
3140
+ #
3141
+ # * The most recent timestamp that the association was modified at:.
3142
+ # `modifiedAt`
3143
+ #
3144
+ # * The tags on the association: `tags`
3145
+ # @return [Array<Types::PodIdentityAssociationSummary>]
3146
+ #
3147
+ # @!attribute [rw] next_token
3148
+ # The `nextToken` value to include in a future
3149
+ # `ListPodIdentityAssociations` request. When the results of a
3150
+ # `ListPodIdentityAssociations` request exceed `maxResults`, you can
3151
+ # use this value to retrieve the next page of results. This value is
3152
+ # `null` when there are no more results to return.
3153
+ #
3154
+ # <note markdown="1"> This token should be treated as an opaque identifier that is used
3155
+ # only to retrieve the next items in a list and not for other
3156
+ # programmatic purposes.
3157
+ #
3158
+ # </note>
3159
+ # @return [String]
3160
+ #
3161
+ # @see http://docs.aws.amazon.com/goto/WebAPI/eks-2017-11-01/ListPodIdentityAssociationsResponse AWS API Documentation
3162
+ #
3163
+ class ListPodIdentityAssociationsResponse < Struct.new(
3164
+ :associations,
3165
+ :next_token)
3166
+ SENSITIVE = []
3167
+ include Aws::Structure
3168
+ end
3169
+
2910
3170
  # @!attribute [rw] resource_arn
2911
3171
  # The Amazon Resource Name (ARN) that identifies the resource for
2912
3172
  # which to list the tags. Currently, the supported resources are
@@ -3341,6 +3601,8 @@ module Aws::EKS
3341
3601
  # Clients should not retry such requests.
3342
3602
  #
3343
3603
  # @!attribute [rw] message
3604
+ # A service resource associated with the request could not be found.
3605
+ # Clients should not retry such requests.
3344
3606
  # @return [String]
3345
3607
  #
3346
3608
  # @see http://docs.aws.amazon.com/goto/WebAPI/eks-2017-11-01/NotFoundException AWS API Documentation
@@ -3624,6 +3886,144 @@ module Aws::EKS
3624
3886
  include Aws::Structure
3625
3887
  end
3626
3888
 
3889
+ # Amazon EKS Pod Identity associations provide the ability to manage
3890
+ # credentials for your applications, similar to the way that 7EC2l
3891
+ # instance profiles provide credentials to Amazon EC2 instances.
3892
+ #
3893
+ # @!attribute [rw] cluster_name
3894
+ # The name of the cluster that the association is in.
3895
+ # @return [String]
3896
+ #
3897
+ # @!attribute [rw] namespace
3898
+ # The name of the Kubernetes namespace inside the cluster to create
3899
+ # the association in. The service account and the pods that use the
3900
+ # service account must be in this namespace.
3901
+ # @return [String]
3902
+ #
3903
+ # @!attribute [rw] service_account
3904
+ # The name of the Kubernetes service account inside the cluster to
3905
+ # associate the IAM credentials with.
3906
+ # @return [String]
3907
+ #
3908
+ # @!attribute [rw] role_arn
3909
+ # The Amazon Resource Name (ARN) of the IAM role to associate with the
3910
+ # service account. The EKS Pod Identity agent manages credentials to
3911
+ # assume this role for applications in the containers in the pods that
3912
+ # use this service account.
3913
+ # @return [String]
3914
+ #
3915
+ # @!attribute [rw] association_arn
3916
+ # The Amazon Resource Name (ARN) of the association.
3917
+ # @return [String]
3918
+ #
3919
+ # @!attribute [rw] association_id
3920
+ # The ID of the association.
3921
+ # @return [String]
3922
+ #
3923
+ # @!attribute [rw] tags
3924
+ # The metadata that you apply to a resource to assist with
3925
+ # categorization and organization. Each tag consists of a key and an
3926
+ # optional value. You define both.
3927
+ #
3928
+ # The following basic restrictions apply to tags:
3929
+ #
3930
+ # * Maximum number of tags per resource – 50
3931
+ #
3932
+ # * For each resource, each tag key must be unique, and each tag key
3933
+ # can have only one value.
3934
+ #
3935
+ # * Maximum key length – 128 Unicode characters in UTF-8
3936
+ #
3937
+ # * Maximum value length – 256 Unicode characters in UTF-8
3938
+ #
3939
+ # * If your tagging schema is used across multiple services and
3940
+ # resources, remember that other services may have restrictions on
3941
+ # allowed characters. Generally allowed characters are: letters,
3942
+ # numbers, and spaces representable in UTF-8, and the following
3943
+ # characters: + - = . \_ : / @.
3944
+ #
3945
+ # * Tag keys and values are case-sensitive.
3946
+ #
3947
+ # * Do not use `aws:`, `AWS:`, or any upper or lowercase combination
3948
+ # of such as a prefix for either keys or values as it is reserved
3949
+ # for Amazon Web Services use. You cannot edit or delete tag keys or
3950
+ # values with this prefix. Tags with this prefix do not count
3951
+ # against your tags per resource limit.
3952
+ # @return [Hash<String,String>]
3953
+ #
3954
+ # @!attribute [rw] created_at
3955
+ # The timestamp that the association was created at.
3956
+ # @return [Time]
3957
+ #
3958
+ # @!attribute [rw] modified_at
3959
+ # The most recent timestamp that the association was modified at
3960
+ # @return [Time]
3961
+ #
3962
+ # @see http://docs.aws.amazon.com/goto/WebAPI/eks-2017-11-01/PodIdentityAssociation AWS API Documentation
3963
+ #
3964
+ class PodIdentityAssociation < Struct.new(
3965
+ :cluster_name,
3966
+ :namespace,
3967
+ :service_account,
3968
+ :role_arn,
3969
+ :association_arn,
3970
+ :association_id,
3971
+ :tags,
3972
+ :created_at,
3973
+ :modified_at)
3974
+ SENSITIVE = []
3975
+ include Aws::Structure
3976
+ end
3977
+
3978
+ # The summarized description of the association.
3979
+ #
3980
+ # Each summary is simplified by removing these fields compared to the
3981
+ # full ` PodIdentityAssociation `:
3982
+ #
3983
+ # * The IAM role: `roleArn`
3984
+ #
3985
+ # * The timestamp that the association was created at: `createdAt`
3986
+ #
3987
+ # * The most recent timestamp that the association was modified at:.
3988
+ # `modifiedAt`
3989
+ #
3990
+ # * The tags on the association: `tags`
3991
+ #
3992
+ # @!attribute [rw] cluster_name
3993
+ # The name of the cluster that the association is in.
3994
+ # @return [String]
3995
+ #
3996
+ # @!attribute [rw] namespace
3997
+ # The name of the Kubernetes namespace inside the cluster to create
3998
+ # the association in. The service account and the pods that use the
3999
+ # service account must be in this namespace.
4000
+ # @return [String]
4001
+ #
4002
+ # @!attribute [rw] service_account
4003
+ # The name of the Kubernetes service account inside the cluster to
4004
+ # associate the IAM credentials with.
4005
+ # @return [String]
4006
+ #
4007
+ # @!attribute [rw] association_arn
4008
+ # The Amazon Resource Name (ARN) of the association.
4009
+ # @return [String]
4010
+ #
4011
+ # @!attribute [rw] association_id
4012
+ # The ID of the association.
4013
+ # @return [String]
4014
+ #
4015
+ # @see http://docs.aws.amazon.com/goto/WebAPI/eks-2017-11-01/PodIdentityAssociationSummary AWS API Documentation
4016
+ #
4017
+ class PodIdentityAssociationSummary < Struct.new(
4018
+ :cluster_name,
4019
+ :namespace,
4020
+ :service_account,
4021
+ :association_arn,
4022
+ :association_id)
4023
+ SENSITIVE = []
4024
+ include Aws::Structure
4025
+ end
4026
+
3627
4027
  # Identifies the Key Management Service (KMS) key used to encrypt the
3628
4028
  # secrets.
3629
4029
  #
@@ -3748,9 +4148,11 @@ module Aws::EKS
3748
4148
  # @return [String]
3749
4149
  #
3750
4150
  # @!attribute [rw] addon_name
4151
+ # The specified add-on name is in use.
3751
4152
  # @return [String]
3752
4153
  #
3753
4154
  # @!attribute [rw] message
4155
+ # The Amazon EKS message associated with the exception.
3754
4156
  # @return [String]
3755
4157
  #
3756
4158
  # @see http://docs.aws.amazon.com/goto/WebAPI/eks-2017-11-01/ResourceInUseException AWS API Documentation
@@ -3779,6 +4181,7 @@ module Aws::EKS
3779
4181
  # @return [String]
3780
4182
  #
3781
4183
  # @!attribute [rw] message
4184
+ # The Amazon EKS message associated with the exception.
3782
4185
  # @return [String]
3783
4186
  #
3784
4187
  # @see http://docs.aws.amazon.com/goto/WebAPI/eks-2017-11-01/ResourceLimitExceededException AWS API Documentation
@@ -3810,6 +4213,7 @@ module Aws::EKS
3810
4213
  # @return [String]
3811
4214
  #
3812
4215
  # @!attribute [rw] addon_name
4216
+ # The Amazon EKS add-on name associated with the exception.
3813
4217
  # @return [String]
3814
4218
  #
3815
4219
  # @!attribute [rw] subscription_id
@@ -3817,6 +4221,7 @@ module Aws::EKS
3817
4221
  # @return [String]
3818
4222
  #
3819
4223
  # @!attribute [rw] message
4224
+ # The Amazon EKS message associated with the exception.
3820
4225
  # @return [String]
3821
4226
  #
3822
4227
  # @see http://docs.aws.amazon.com/goto/WebAPI/eks-2017-11-01/ResourceNotFoundException AWS API Documentation
@@ -3836,6 +4241,8 @@ module Aws::EKS
3836
4241
  # still propagating. Retry later.
3837
4242
  #
3838
4243
  # @!attribute [rw] message
4244
+ # Required resources (such as service-linked roles) were created and
4245
+ # are still propagating. Retry later.
3839
4246
  # @return [String]
3840
4247
  #
3841
4248
  # @see http://docs.aws.amazon.com/goto/WebAPI/eks-2017-11-01/ResourcePropagationDelayException AWS API Documentation
@@ -3857,6 +4264,7 @@ module Aws::EKS
3857
4264
  # @return [String]
3858
4265
  #
3859
4266
  # @!attribute [rw] addon_name
4267
+ # The Amazon EKS add-on name associated with the exception.
3860
4268
  # @return [String]
3861
4269
  #
3862
4270
  # @!attribute [rw] subscription_id
@@ -3864,6 +4272,7 @@ module Aws::EKS
3864
4272
  # @return [String]
3865
4273
  #
3866
4274
  # @!attribute [rw] message
4275
+ # These errors are usually caused by a server-side issue.
3867
4276
  # @return [String]
3868
4277
  #
3869
4278
  # @see http://docs.aws.amazon.com/goto/WebAPI/eks-2017-11-01/ServerException AWS API Documentation
@@ -3881,6 +4290,7 @@ module Aws::EKS
3881
4290
  # The service is unavailable. Back off and retry the operation.
3882
4291
  #
3883
4292
  # @!attribute [rw] message
4293
+ # The request has failed due to a temporary failure of the server.
3884
4294
  # @return [String]
3885
4295
  #
3886
4296
  # @see http://docs.aws.amazon.com/goto/WebAPI/eks-2017-11-01/ServiceUnavailableException AWS API Documentation
@@ -3950,6 +4360,10 @@ module Aws::EKS
3950
4360
  # choose subnets for your cluster.
3951
4361
  #
3952
4362
  # @!attribute [rw] message
4363
+ # At least one of your specified cluster subnets is in an Availability
4364
+ # Zone that does not support Amazon EKS. The exception output
4365
+ # specifies the supported Availability Zones for your account, from
4366
+ # which you can choose subnets for your cluster.
3953
4367
  # @return [String]
3954
4368
  #
3955
4369
  # @!attribute [rw] cluster_name
@@ -4241,6 +4655,7 @@ module Aws::EKS
4241
4655
  end
4242
4656
 
4243
4657
  # @!attribute [rw] id
4658
+ # The ID of the subscription.
4244
4659
  # @return [String]
4245
4660
  #
4246
4661
  # @!attribute [rw] auto_renew
@@ -4481,6 +4896,50 @@ module Aws::EKS
4481
4896
  include Aws::Structure
4482
4897
  end
4483
4898
 
4899
+ # @!attribute [rw] cluster_name
4900
+ # The name of the cluster that you want to update the association in.
4901
+ # @return [String]
4902
+ #
4903
+ # @!attribute [rw] association_id
4904
+ # The ID of the association to be updated.
4905
+ # @return [String]
4906
+ #
4907
+ # @!attribute [rw] role_arn
4908
+ # The new IAM role to change the
4909
+ # @return [String]
4910
+ #
4911
+ # @!attribute [rw] client_request_token
4912
+ # Unique, case-sensitive identifier that you provide to ensure the
4913
+ # idempotency of the request.
4914
+ #
4915
+ # **A suitable default value is auto-generated.** You should normally
4916
+ # not need to pass this option.
4917
+ # @return [String]
4918
+ #
4919
+ # @see http://docs.aws.amazon.com/goto/WebAPI/eks-2017-11-01/UpdatePodIdentityAssociationRequest AWS API Documentation
4920
+ #
4921
+ class UpdatePodIdentityAssociationRequest < Struct.new(
4922
+ :cluster_name,
4923
+ :association_id,
4924
+ :role_arn,
4925
+ :client_request_token)
4926
+ SENSITIVE = []
4927
+ include Aws::Structure
4928
+ end
4929
+
4930
+ # @!attribute [rw] association
4931
+ # The full description of the EKS Pod Identity association that was
4932
+ # updated.
4933
+ # @return [Types::PodIdentityAssociation]
4934
+ #
4935
+ # @see http://docs.aws.amazon.com/goto/WebAPI/eks-2017-11-01/UpdatePodIdentityAssociationResponse AWS API Documentation
4936
+ #
4937
+ class UpdatePodIdentityAssociationResponse < Struct.new(
4938
+ :association)
4939
+ SENSITIVE = []
4940
+ include Aws::Structure
4941
+ end
4942
+
4484
4943
  # An object representing the details of an update to a taints payload.
4485
4944
  # For more information, see [Node taints on managed node groups][1].
4486
4945
  #