aws-sdk-fms 1.43.0 → 1.47.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 289318abe4d524870dc40b0aa24e9b4baa2d1d8b8453956a3a3ba59624b5bfe7
-  data.tar.gz: ae232a88f7e060e0d31adb346c4fafbeb68dfeab25d2a0f8d6fccad322975601
+  metadata.gz: ac66fe199eca3c706d54588681e88004bab31c37a6b9e094a1c39c2eea632311
+  data.tar.gz: 4c64723258ede121d9240b0c58dbab797fba0f1eb631bcc530c091c45bad9ea7
 SHA512:
-  metadata.gz: 10834ec6a172e46b7ce3a50bd04cabbcad46c9bb8832533b57b1628cf295c32a5f5a539d1f018ce2b516f66f08f432dd57bcbbcc26ed2ac7514dec12736acc49
-  data.tar.gz: 4d20f316e9cff2767087c54baddc62c055bf554e598867ad3ce3eee83ac26ec1046b5762a9f87dbf7380b079b8ebcdd86d4a0ad6e4a74d113ad1da587b456531
+  metadata.gz: e86373d74b66f5061cc4c50608a1d01d64ddb4dee9f4917c0b27e8a0cbaf5e763038fff4f41b01f4aca5b1285a9cdf0d204d3957271917a073cd24e709fef408
+  data.tar.gz: 92c205a69570cd5f39c42a21cacb00a5b606b90d6d6f84add7cefed0dc6fe3eeecc522fb4df122a6d51da5522a3e060417d06f6fd2342d990ce640aadc813c88

data/CHANGELOG.md

@@ -1,6 +1,26 @@
 Unreleased Changes
 ------------------
 
+1.47.0 (2022-02-03)
+------------------
+
+* Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
+
+1.46.0 (2022-01-12)
+------------------
+
+* Feature - Shield Advanced policies for Amazon CloudFront resources now support automatic application layer DDoS mitigation. The max length for SecurityServicePolicyData ManagedServiceData is now 8192 characters, instead of 4096.
+
+1.45.0 (2021-12-21)
+------------------
+
+* Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
+
+1.44.0 (2021-11-30)
+------------------
+
+* Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
+
 1.43.0 (2021-11-04)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.43.0
+1.47.0

data/lib/aws-sdk-fms/client.rb

@@ -27,6 +27,8 @@ require 'aws-sdk-core/plugins/client_metrics_plugin.rb'
 require 'aws-sdk-core/plugins/client_metrics_send_plugin.rb'
 require 'aws-sdk-core/plugins/transfer_encoding.rb'
 require 'aws-sdk-core/plugins/http_checksum.rb'
+require 'aws-sdk-core/plugins/defaults_mode.rb'
+require 'aws-sdk-core/plugins/recursion_detection.rb'
 require 'aws-sdk-core/plugins/signature_v4.rb'
 require 'aws-sdk-core/plugins/protocols/json_rpc.rb'
 
@@ -73,6 +75,8 @@ module Aws::FMS
     add_plugin(Aws::Plugins::ClientMetricsSendPlugin)
     add_plugin(Aws::Plugins::TransferEncoding)
     add_plugin(Aws::Plugins::HttpChecksum)
+    add_plugin(Aws::Plugins::DefaultsMode)
+    add_plugin(Aws::Plugins::RecursionDetection)
     add_plugin(Aws::Plugins::SignatureV4)
     add_plugin(Aws::Plugins::Protocols::JsonRpc)
 
@@ -119,7 +123,9 @@ module Aws::FMS
     #     * EC2/ECS IMDS instance profile - When used by default, the timeouts
     #       are very aggressive. Construct and pass an instance of
     #       `Aws::InstanceProfileCredentails` or `Aws::ECSCredentials` to
-    #       enable retries and extended timeouts.
+    #       enable retries and extended timeouts. Instance profile credential
+    #       fetching can be disabled by setting ENV['AWS_EC2_METADATA_DISABLED']
+    #       to true.
     #
     #   @option options [required, String] :region
     #     The AWS region to connect to.  The configured `:region` is
@@ -173,6 +179,10 @@ module Aws::FMS
     #     Used only in `standard` and adaptive retry modes. Specifies whether to apply
     #     a clock skew correction and retry requests with skewed client clocks.
     #
+    #   @option options [String] :defaults_mode ("legacy")
+    #     See {Aws::DefaultsModeConfiguration} for a list of the
+    #     accepted modes and the configuration defaults that are included.
+    #
     #   @option options [Boolean] :disable_host_prefix_injection (false)
     #     Set to true to disable SDK automatically adding host prefix
     #     to default service endpoint when available.
@@ -305,7 +315,7 @@ module Aws::FMS
     #     seconds to wait when opening a HTTP session before raising a
     #     `Timeout::Error`.
     #
-    #   @option options [Integer] :http_read_timeout (60) The default
+    #   @option options [Float] :http_read_timeout (60) The default
     #     number of seconds to wait for response data.  This value can
     #     safely be set per-request on the session.
     #
@@ -321,6 +331,9 @@ module Aws::FMS
     #     disables this behaviour.  This value can safely be set per
     #     request on the session.
     #
+    #   @option options [Float] :ssl_timeout (nil) Sets the SSL timeout
+    #     in seconds.
+    #
     #   @option options [Boolean] :http_wire_trace (false) When `true`,
     #     HTTP debug output will be sent to the `:logger`.
     #
@@ -1592,7 +1605,7 @@ module Aws::FMS
     # * An Network Firewall policy, which provides firewall rules to filter
     #   network traffic in specified Amazon VPCs.
     #
-    # * A DNS Firewall policy, which provides Route 53 Resolver DNS Firewall
+    # * A DNS Firewall policy, which provides Route 53 Resolver DNS Firewall
     #   rules to filter DNS queries for specified VPCs.
     #
     # Each policy is specific to one of the types. If you want to enforce
@@ -1820,7 +1833,7 @@ module Aws::FMS
         params: params,
         config: config)
       context[:gem_name] = 'aws-sdk-fms'
-      context[:gem_version] = '1.43.0'
+      context[:gem_version] = '1.47.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-fms/types.rb

@@ -2152,8 +2152,9 @@ module Aws::FMS
     #   specify a resource type of `ResourceTypeList` and then specify the
     #   resource types in a `ResourceTypeList`.
     #
-    #   For WAF and Shield Advanced, example resource types include
-    #   `AWS::ElasticLoadBalancingV2::LoadBalancer` and
+    #   For WAF and Shield Advanced, resource types include
+    #   `AWS::ElasticLoadBalancingV2::LoadBalancer`,
+    #   `AWS::ElasticLoadBalancing::LoadBalancer`, `AWS::EC2::EIP`, and
     #   `AWS::CloudFront::Distribution`. For a security group common policy,
     #   valid values are `AWS::EC2::NetworkInterface` and
     #   `AWS::EC2::Instance`. For a security group content audit policy,
@@ -2191,10 +2192,16 @@ module Aws::FMS
     #   @return [Boolean]
     #
     # @!attribute [rw] delete_unused_fm_managed_resources
-    #   Indicates whether Firewall Manager should delete Firewall Manager
-    #   managed resources, such as web ACLs and security groups, when they
-    #   are not in use by the Firewall Manager policy. By default, Firewall
-    #   Manager doesn't delete unused Firewall Manager managed resources.
+    #   Indicates whether Firewall Manager should automatically remove
+    #   protections from resources that leave the policy scope and clean up
+    #   resources that Firewall Manager is managing for accounts when those
+    #   accounts leave policy scope. For example, Firewall Manager will
+    #   disassociate a Firewall Manager managed web ACL from a protected
+    #   customer resource when the customer resource leaves policy scope.
+    #
+    #   By default, Firewall Manager doesn't remove protections or delete
+    #   Firewall Manager managed resources.
+    #
     #   This option is not available for Shield Advanced or WAF Classic
     #   policies.
     #   @return [Boolean]
@@ -2427,10 +2434,16 @@ module Aws::FMS
     #   @return [Boolean]
     #
     # @!attribute [rw] delete_unused_fm_managed_resources
-    #   Indicates whether Firewall Manager should delete Firewall Manager
-    #   managed resources, such as web ACLs and security groups, when they
-    #   are not in use by the Firewall Manager policy. By default, Firewall
-    #   Manager doesn't delete unused Firewall Manager managed resources.
+    #   Indicates whether Firewall Manager should automatically remove
+    #   protections from resources that leave the policy scope and clean up
+    #   resources that Firewall Manager is managing for accounts when those
+    #   accounts leave policy scope. For example, Firewall Manager will
+    #   disassociate a Firewall Manager managed web ACL from a protected
+    #   customer resource when the customer resource leaves policy scope.
+    #
+    #   By default, Firewall Manager doesn't remove protections or delete
+    #   Firewall Manager managed resources.
+    #
     #   This option is not available for Shield Advanced or WAF Classic
     #   policies.
     #   @return [Boolean]
@@ -3172,8 +3185,7 @@ module Aws::FMS
     #
     # @!attribute [rw] managed_service_data
     #   Details about the service that are specific to the service type, in
-    #   JSON format. For service type `SHIELD_ADVANCED`, this is an empty
-    #   string.
+    #   JSON format.
     #
     #   * Example: `DNS_FIREWALL`
     #
@@ -3190,6 +3202,28 @@ module Aws::FMS
     #     `"\{"type":"NETWORK_FIREWALL","networkFirewallStatelessRuleGroupReferences":[\{"resourceARN":"arn:aws:network-firewall:us-west-1:1234567891011:stateless-rulegroup/rulegroup2","priority":10\}],"networkFirewallStatelessDefaultActions":["aws:pass","custom1"],"networkFirewallStatelessFragmentDefaultActions":["custom2","aws:pass"],"networkFirewallStatelessCustomActions":[\{"actionName":"custom1","actionDefinition":\{"publishMetricAction":\{"dimensions":[\{"value":"dimension1"\}]\}\}\},\{"actionName":"custom2","actionDefinition":\{"publishMetricAction":\{"dimensions":[\{"value":"dimension2"\}]\}\}\}],"networkFirewallStatefulRuleGroupReferences":[\{"resourceARN":"arn:aws:network-firewall:us-west-1:1234567891011:stateful-rulegroup/rulegroup1"\}],"networkFirewallOrchestrationConfig":\{"singleFirewallEndpointPerVPC":true,"allowedIPV4CidrList":["10.24.34.0/28"]\}
     #     \}"`
     #
+    #   * Specification for `SHIELD_ADVANCED` for Amazon CloudFront
+    #     distributions
+    #
+    #     `"\{"type":"SHIELD_ADVANCED","automaticResponseConfiguration":
+    #     \{"automaticResponseStatus":"ENABLED|IGNORED|DISABLED",
+    #     "automaticResponseAction":"BLOCK|COUNT"\},
+    #     "overrideCustomerWebaclClassic":true|false\}"`
+    #
+    #     For example:
+    #     `"\{"type":"SHIELD_ADVANCED","automaticResponseConfiguration":
+    #     \{"automaticResponseStatus":"ENABLED",
+    #     "automaticResponseAction":"COUNT"\}\}"`
+    #
+    #     The default value for `automaticResponseStatus` is `IGNORED`. The
+    #     value for `automaticResponseAction` is only required when
+    #     `automaticResponseStatus` is set to `ENABLED`. The default value
+    #     for `overrideCustomerWebaclClassic` is `false`.
+    #
+    #     For other resource types that you can protect with a Shield
+    #     Advanced policy, this `ManagedServiceData` configuration is an
+    #     empty string.
+    #
     #   * Example: `WAFV2`
     #
     #     `"\{"type":"WAFV2","preProcessRuleGroups":[\{"ruleGroupArn":null,"overrideAction":\{"type":"NONE"\},"managedRuleGroupIdentifier":\{"version":null,"vendorName":"AWS","managedRuleGroupName":"AWSManagedRulesAmazonIpReputationList"\},"ruleGroupType":"ManagedRuleGroup","excludeRules":[\{"name":"NoUserAgent_HEADER"\}]\}],"postProcessRuleGroups":[],"defaultAction":\{"type":"ALLOW"\},"overrideCustomerWebACLAssociation":false,"loggingConfiguration":\{"logDestinationConfigs":["arn:aws:firehose:us-west-2:12345678912:deliverystream/aws-waf-logs-fms-admin-destination"],"redactedFields":[\{"redactedFieldType":"SingleHeader","redactedFieldValue":"Cookies"\},\{"redactedFieldType":"Method"\}]\}\}"`

data/lib/aws-sdk-fms.rb

@@ -48,6 +48,6 @@ require_relative 'aws-sdk-fms/customizations'
 # @!group service
 module Aws::FMS
 
-  GEM_VERSION = '1.43.0'
+  GEM_VERSION = '1.47.0'
 
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-fms
 version: !ruby/object:Gem::Version
-  version: 1.43.0
+  version: 1.47.0
 platform: ruby
 authors:
 - Amazon Web Services
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-11-04 00:00:00.000000000 Z
+date: 2022-02-03 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-core
@@ -19,7 +19,7 @@ dependencies:
         version: '3'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.122.0
+        version: 3.126.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -29,7 +29,7 @@ dependencies:
         version: '3'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.122.0
+        version: 3.126.0
 - !ruby/object:Gem::Dependency
   name: aws-sigv4
   requirement: !ruby/object:Gem::Requirement