aws-sdk-fsx 1.37.0 → 1.38.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 2c2e3f3c646f21f3588616aeab447a7474a2ffd30fe909e142a14d932bef9671
-  data.tar.gz: 0a4414b73cd208104009996a51bb1d74b1ef275c471db3e8648d499f413b9544
+  metadata.gz: '08f42978a93897f71d42153e280e4536ea91d81addf70f22e6accaccf5194397'
+  data.tar.gz: eab8451197ca6b2ef5f058ce3009699ff23d79b3f98dff2a8378745e3db89545
 SHA512:
-  metadata.gz: aade5300028bb38bd55916aeec79e7d778955a6ebd265e538192e212243e579a33aae4abc9de1a8c248cb4f6ac833b35d594e2bdeb661d8d40fc22247a7bf2b1
-  data.tar.gz: b37594d2fd864bce815fbb81b32fab1fba15b536a08060dfffd43883811376973ad7c84304875ed509ca39cba60fb3a9eeda9b3c746c9f3422afb1a3086df99f
+  metadata.gz: 9c9a1af4f686c9f62bc950e4a85e9868d956feb389cd6336b3717cfb5f6326b470c4f502f15448092c017fb438afcd86d9c0cfe50418d7a8e5809eee4438df85
+  data.tar.gz: abc95507f464dcd66ce79756f5721fe6c38dfdda5ee54a2b5956e7a7e7210b265ead75a2df58e1b031bb27c511dce6eacd5f7ba10a9e972a0931fcc94c77a710

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.38.0 (2021-06-08)
+------------------
+
+* Feature - This release adds support for auditing end-user access to files, folders, and file shares using Windows event logs, enabling customers to meet their security and compliance needs.
+
 1.37.0 (2021-05-27)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.37.0
+1.38.0

data/lib/aws-sdk-fsx.rb

@@ -48,6 +48,6 @@ require_relative 'aws-sdk-fsx/customizations'
 # @!group service
 module Aws::FSx
 
-  GEM_VERSION = '1.37.0'
+  GEM_VERSION = '1.38.0'
 
 end

data/lib/aws-sdk-fsx/client.rb

@@ -651,6 +651,9 @@ module Aws::FSx
     #   resp.backup.file_system.windows_configuration.aliases #=> Array
     #   resp.backup.file_system.windows_configuration.aliases[0].name #=> String
     #   resp.backup.file_system.windows_configuration.aliases[0].lifecycle #=> String, one of "AVAILABLE", "CREATING", "DELETING", "CREATE_FAILED", "DELETE_FAILED"
+    #   resp.backup.file_system.windows_configuration.audit_log_configuration.file_access_audit_log_level #=> String, one of "DISABLED", "SUCCESS_ONLY", "FAILURE_ONLY", "SUCCESS_AND_FAILURE"
+    #   resp.backup.file_system.windows_configuration.audit_log_configuration.file_share_access_audit_log_level #=> String, one of "DISABLED", "SUCCESS_ONLY", "FAILURE_ONLY", "SUCCESS_AND_FAILURE"
+    #   resp.backup.file_system.windows_configuration.audit_log_configuration.audit_log_destination #=> String
     #   resp.backup.file_system.lustre_configuration.weekly_maintenance_start_time #=> String
     #   resp.backup.file_system.lustre_configuration.data_repository_configuration.lifecycle #=> String, one of "CREATING", "AVAILABLE", "MISCONFIGURED", "UPDATING", "DELETING"
     #   resp.backup.file_system.lustre_configuration.data_repository_configuration.import_path #=> String
@@ -869,6 +872,9 @@ module Aws::FSx
     #   resp.backup.file_system.windows_configuration.aliases #=> Array
     #   resp.backup.file_system.windows_configuration.aliases[0].name #=> String
     #   resp.backup.file_system.windows_configuration.aliases[0].lifecycle #=> String, one of "AVAILABLE", "CREATING", "DELETING", "CREATE_FAILED", "DELETE_FAILED"
+    #   resp.backup.file_system.windows_configuration.audit_log_configuration.file_access_audit_log_level #=> String, one of "DISABLED", "SUCCESS_ONLY", "FAILURE_ONLY", "SUCCESS_AND_FAILURE"
+    #   resp.backup.file_system.windows_configuration.audit_log_configuration.file_share_access_audit_log_level #=> String, one of "DISABLED", "SUCCESS_ONLY", "FAILURE_ONLY", "SUCCESS_AND_FAILURE"
+    #   resp.backup.file_system.windows_configuration.audit_log_configuration.audit_log_destination #=> String
     #   resp.backup.file_system.lustre_configuration.weekly_maintenance_start_time #=> String
     #   resp.backup.file_system.lustre_configuration.data_repository_configuration.lifecycle #=> String, one of "CREATING", "AVAILABLE", "MISCONFIGURED", "UPDATING", "DELETING"
     #   resp.backup.file_system.lustre_configuration.data_repository_configuration.import_path #=> String
@@ -1267,6 +1273,11 @@ module Aws::FSx
     #       automatic_backup_retention_days: 1,
     #       copy_tags_to_backups: false,
     #       aliases: ["AlternateDNSName"],
+    #       audit_log_configuration: {
+    #         file_access_audit_log_level: "DISABLED", # required, accepts DISABLED, SUCCESS_ONLY, FAILURE_ONLY, SUCCESS_AND_FAILURE
+    #         file_share_access_audit_log_level: "DISABLED", # required, accepts DISABLED, SUCCESS_ONLY, FAILURE_ONLY, SUCCESS_AND_FAILURE
+    #         audit_log_destination: "GeneralARN",
+    #       },
     #     },
     #     lustre_configuration: {
     #       weekly_maintenance_start_time: "WeeklyTime",
@@ -1326,6 +1337,9 @@ module Aws::FSx
     #   resp.file_system.windows_configuration.aliases #=> Array
     #   resp.file_system.windows_configuration.aliases[0].name #=> String
     #   resp.file_system.windows_configuration.aliases[0].lifecycle #=> String, one of "AVAILABLE", "CREATING", "DELETING", "CREATE_FAILED", "DELETE_FAILED"
+    #   resp.file_system.windows_configuration.audit_log_configuration.file_access_audit_log_level #=> String, one of "DISABLED", "SUCCESS_ONLY", "FAILURE_ONLY", "SUCCESS_AND_FAILURE"
+    #   resp.file_system.windows_configuration.audit_log_configuration.file_share_access_audit_log_level #=> String, one of "DISABLED", "SUCCESS_ONLY", "FAILURE_ONLY", "SUCCESS_AND_FAILURE"
+    #   resp.file_system.windows_configuration.audit_log_configuration.audit_log_destination #=> String
     #   resp.file_system.lustre_configuration.weekly_maintenance_start_time #=> String
     #   resp.file_system.lustre_configuration.data_repository_configuration.lifecycle #=> String, one of "CREATING", "AVAILABLE", "MISCONFIGURED", "UPDATING", "DELETING"
     #   resp.file_system.lustre_configuration.data_repository_configuration.import_path #=> String
@@ -1562,6 +1576,11 @@ module Aws::FSx
     #       automatic_backup_retention_days: 1,
     #       copy_tags_to_backups: false,
     #       aliases: ["AlternateDNSName"],
+    #       audit_log_configuration: {
+    #         file_access_audit_log_level: "DISABLED", # required, accepts DISABLED, SUCCESS_ONLY, FAILURE_ONLY, SUCCESS_AND_FAILURE
+    #         file_share_access_audit_log_level: "DISABLED", # required, accepts DISABLED, SUCCESS_ONLY, FAILURE_ONLY, SUCCESS_AND_FAILURE
+    #         audit_log_destination: "GeneralARN",
+    #       },
     #     },
     #     lustre_configuration: {
     #       weekly_maintenance_start_time: "WeeklyTime",
@@ -1623,6 +1642,9 @@ module Aws::FSx
     #   resp.file_system.windows_configuration.aliases #=> Array
     #   resp.file_system.windows_configuration.aliases[0].name #=> String
     #   resp.file_system.windows_configuration.aliases[0].lifecycle #=> String, one of "AVAILABLE", "CREATING", "DELETING", "CREATE_FAILED", "DELETE_FAILED"
+    #   resp.file_system.windows_configuration.audit_log_configuration.file_access_audit_log_level #=> String, one of "DISABLED", "SUCCESS_ONLY", "FAILURE_ONLY", "SUCCESS_AND_FAILURE"
+    #   resp.file_system.windows_configuration.audit_log_configuration.file_share_access_audit_log_level #=> String, one of "DISABLED", "SUCCESS_ONLY", "FAILURE_ONLY", "SUCCESS_AND_FAILURE"
+    #   resp.file_system.windows_configuration.audit_log_configuration.audit_log_destination #=> String
     #   resp.file_system.lustre_configuration.weekly_maintenance_start_time #=> String
     #   resp.file_system.lustre_configuration.data_repository_configuration.lifecycle #=> String, one of "CREATING", "AVAILABLE", "MISCONFIGURED", "UPDATING", "DELETING"
     #   resp.file_system.lustre_configuration.data_repository_configuration.import_path #=> String
@@ -1988,6 +2010,9 @@ module Aws::FSx
     #   resp.backups[0].file_system.windows_configuration.aliases #=> Array
     #   resp.backups[0].file_system.windows_configuration.aliases[0].name #=> String
     #   resp.backups[0].file_system.windows_configuration.aliases[0].lifecycle #=> String, one of "AVAILABLE", "CREATING", "DELETING", "CREATE_FAILED", "DELETE_FAILED"
+    #   resp.backups[0].file_system.windows_configuration.audit_log_configuration.file_access_audit_log_level #=> String, one of "DISABLED", "SUCCESS_ONLY", "FAILURE_ONLY", "SUCCESS_AND_FAILURE"
+    #   resp.backups[0].file_system.windows_configuration.audit_log_configuration.file_share_access_audit_log_level #=> String, one of "DISABLED", "SUCCESS_ONLY", "FAILURE_ONLY", "SUCCESS_AND_FAILURE"
+    #   resp.backups[0].file_system.windows_configuration.audit_log_configuration.audit_log_destination #=> String
     #   resp.backups[0].file_system.lustre_configuration.weekly_maintenance_start_time #=> String
     #   resp.backups[0].file_system.lustre_configuration.data_repository_configuration.lifecycle #=> String, one of "CREATING", "AVAILABLE", "MISCONFIGURED", "UPDATING", "DELETING"
     #   resp.backups[0].file_system.lustre_configuration.data_repository_configuration.import_path #=> String
@@ -2327,6 +2352,9 @@ module Aws::FSx
     #   resp.file_systems[0].windows_configuration.aliases #=> Array
     #   resp.file_systems[0].windows_configuration.aliases[0].name #=> String
     #   resp.file_systems[0].windows_configuration.aliases[0].lifecycle #=> String, one of "AVAILABLE", "CREATING", "DELETING", "CREATE_FAILED", "DELETE_FAILED"
+    #   resp.file_systems[0].windows_configuration.audit_log_configuration.file_access_audit_log_level #=> String, one of "DISABLED", "SUCCESS_ONLY", "FAILURE_ONLY", "SUCCESS_AND_FAILURE"
+    #   resp.file_systems[0].windows_configuration.audit_log_configuration.file_share_access_audit_log_level #=> String, one of "DISABLED", "SUCCESS_ONLY", "FAILURE_ONLY", "SUCCESS_AND_FAILURE"
+    #   resp.file_systems[0].windows_configuration.audit_log_configuration.audit_log_destination #=> String
     #   resp.file_systems[0].lustre_configuration.weekly_maintenance_start_time #=> String
     #   resp.file_systems[0].lustre_configuration.data_repository_configuration.lifecycle #=> String, one of "CREATING", "AVAILABLE", "MISCONFIGURED", "UPDATING", "DELETING"
     #   resp.file_systems[0].lustre_configuration.data_repository_configuration.import_path #=> String
@@ -2599,6 +2627,8 @@ module Aws::FSx
     # For Amazon FSx for Windows File Server file systems, you can update
     # the following properties:
     #
+    # * AuditLogConfiguration
+    #
     # * AutomaticBackupRetentionDays
     #
     # * DailyAutomaticBackupStartTime
@@ -2745,6 +2775,11 @@ module Aws::FSx
     #         password: "DirectoryPassword",
     #         dns_ips: ["IpAddress"],
     #       },
+    #       audit_log_configuration: {
+    #         file_access_audit_log_level: "DISABLED", # required, accepts DISABLED, SUCCESS_ONLY, FAILURE_ONLY, SUCCESS_AND_FAILURE
+    #         file_share_access_audit_log_level: "DISABLED", # required, accepts DISABLED, SUCCESS_ONLY, FAILURE_ONLY, SUCCESS_AND_FAILURE
+    #         audit_log_destination: "GeneralARN",
+    #       },
     #     },
     #     lustre_configuration: {
     #       weekly_maintenance_start_time: "WeeklyTime",
@@ -2797,6 +2832,9 @@ module Aws::FSx
     #   resp.file_system.windows_configuration.aliases #=> Array
     #   resp.file_system.windows_configuration.aliases[0].name #=> String
     #   resp.file_system.windows_configuration.aliases[0].lifecycle #=> String, one of "AVAILABLE", "CREATING", "DELETING", "CREATE_FAILED", "DELETE_FAILED"
+    #   resp.file_system.windows_configuration.audit_log_configuration.file_access_audit_log_level #=> String, one of "DISABLED", "SUCCESS_ONLY", "FAILURE_ONLY", "SUCCESS_AND_FAILURE"
+    #   resp.file_system.windows_configuration.audit_log_configuration.file_share_access_audit_log_level #=> String, one of "DISABLED", "SUCCESS_ONLY", "FAILURE_ONLY", "SUCCESS_AND_FAILURE"
+    #   resp.file_system.windows_configuration.audit_log_configuration.audit_log_destination #=> String
     #   resp.file_system.lustre_configuration.weekly_maintenance_start_time #=> String
     #   resp.file_system.lustre_configuration.data_repository_configuration.lifecycle #=> String, one of "CREATING", "AVAILABLE", "MISCONFIGURED", "UPDATING", "DELETING"
     #   resp.file_system.lustre_configuration.data_repository_configuration.import_path #=> String
@@ -2842,7 +2880,7 @@ module Aws::FSx
         params: params,
         config: config)
       context[:gem_name] = 'aws-sdk-fsx'
-      context[:gem_version] = '1.37.0'
+      context[:gem_version] = '1.38.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-fsx/client_api.rb

@@ -126,6 +126,7 @@ module Aws::FSx
     FilterValues = Shapes::ListShape.new(name: 'FilterValues')
     Filters = Shapes::ListShape.new(name: 'Filters')
     Flag = Shapes::BooleanShape.new(name: 'Flag')
+    GeneralARN = Shapes::StringShape.new(name: 'GeneralARN')
     IncompatibleParameterError = Shapes::StructureShape.new(name: 'IncompatibleParameterError')
     IncompatibleRegionForMultiAZ = Shapes::StructureShape.new(name: 'IncompatibleRegionForMultiAZ')
     InternalServerError = Shapes::StructureShape.new(name: 'InternalServerError')
@@ -198,6 +199,9 @@ module Aws::FSx
     UpdateFileSystemWindowsConfiguration = Shapes::StructureShape.new(name: 'UpdateFileSystemWindowsConfiguration')
     VpcId = Shapes::StringShape.new(name: 'VpcId')
     WeeklyTime = Shapes::StringShape.new(name: 'WeeklyTime')
+    WindowsAccessAuditLogLevel = Shapes::StringShape.new(name: 'WindowsAccessAuditLogLevel')
+    WindowsAuditLogConfiguration = Shapes::StructureShape.new(name: 'WindowsAuditLogConfiguration')
+    WindowsAuditLogCreateConfiguration = Shapes::StructureShape.new(name: 'WindowsAuditLogCreateConfiguration')
     WindowsDeploymentType = Shapes::StringShape.new(name: 'WindowsDeploymentType')
     WindowsFileSystemConfiguration = Shapes::StructureShape.new(name: 'WindowsFileSystemConfiguration')
 
@@ -376,6 +380,7 @@ module Aws::FSx
     CreateFileSystemWindowsConfiguration.add_member(:automatic_backup_retention_days, Shapes::ShapeRef.new(shape: AutomaticBackupRetentionDays, location_name: "AutomaticBackupRetentionDays"))
     CreateFileSystemWindowsConfiguration.add_member(:copy_tags_to_backups, Shapes::ShapeRef.new(shape: Flag, location_name: "CopyTagsToBackups"))
     CreateFileSystemWindowsConfiguration.add_member(:aliases, Shapes::ShapeRef.new(shape: AlternateDNSNames, location_name: "Aliases"))
+    CreateFileSystemWindowsConfiguration.add_member(:audit_log_configuration, Shapes::ShapeRef.new(shape: WindowsAuditLogCreateConfiguration, location_name: "AuditLogConfiguration"))
     CreateFileSystemWindowsConfiguration.struct_class = Types::CreateFileSystemWindowsConfiguration
 
     DataRepositoryConfiguration.add_member(:lifecycle, Shapes::ShapeRef.new(shape: DataRepositoryLifecycle, location_name: "Lifecycle"))
@@ -709,8 +714,19 @@ module Aws::FSx
     UpdateFileSystemWindowsConfiguration.add_member(:automatic_backup_retention_days, Shapes::ShapeRef.new(shape: AutomaticBackupRetentionDays, location_name: "AutomaticBackupRetentionDays"))
     UpdateFileSystemWindowsConfiguration.add_member(:throughput_capacity, Shapes::ShapeRef.new(shape: MegabytesPerSecond, location_name: "ThroughputCapacity"))
     UpdateFileSystemWindowsConfiguration.add_member(:self_managed_active_directory_configuration, Shapes::ShapeRef.new(shape: SelfManagedActiveDirectoryConfigurationUpdates, location_name: "SelfManagedActiveDirectoryConfiguration"))
+    UpdateFileSystemWindowsConfiguration.add_member(:audit_log_configuration, Shapes::ShapeRef.new(shape: WindowsAuditLogCreateConfiguration, location_name: "AuditLogConfiguration"))
     UpdateFileSystemWindowsConfiguration.struct_class = Types::UpdateFileSystemWindowsConfiguration
 
+    WindowsAuditLogConfiguration.add_member(:file_access_audit_log_level, Shapes::ShapeRef.new(shape: WindowsAccessAuditLogLevel, required: true, location_name: "FileAccessAuditLogLevel"))
+    WindowsAuditLogConfiguration.add_member(:file_share_access_audit_log_level, Shapes::ShapeRef.new(shape: WindowsAccessAuditLogLevel, required: true, location_name: "FileShareAccessAuditLogLevel"))
+    WindowsAuditLogConfiguration.add_member(:audit_log_destination, Shapes::ShapeRef.new(shape: GeneralARN, location_name: "AuditLogDestination"))
+    WindowsAuditLogConfiguration.struct_class = Types::WindowsAuditLogConfiguration
+
+    WindowsAuditLogCreateConfiguration.add_member(:file_access_audit_log_level, Shapes::ShapeRef.new(shape: WindowsAccessAuditLogLevel, required: true, location_name: "FileAccessAuditLogLevel"))
+    WindowsAuditLogCreateConfiguration.add_member(:file_share_access_audit_log_level, Shapes::ShapeRef.new(shape: WindowsAccessAuditLogLevel, required: true, location_name: "FileShareAccessAuditLogLevel"))
+    WindowsAuditLogCreateConfiguration.add_member(:audit_log_destination, Shapes::ShapeRef.new(shape: GeneralARN, location_name: "AuditLogDestination"))
+    WindowsAuditLogCreateConfiguration.struct_class = Types::WindowsAuditLogCreateConfiguration
+
     WindowsFileSystemConfiguration.add_member(:active_directory_id, Shapes::ShapeRef.new(shape: DirectoryId, location_name: "ActiveDirectoryId"))
     WindowsFileSystemConfiguration.add_member(:self_managed_active_directory_configuration, Shapes::ShapeRef.new(shape: SelfManagedActiveDirectoryAttributes, location_name: "SelfManagedActiveDirectoryConfiguration"))
     WindowsFileSystemConfiguration.add_member(:deployment_type, Shapes::ShapeRef.new(shape: WindowsDeploymentType, location_name: "DeploymentType"))
@@ -724,6 +740,7 @@ module Aws::FSx
     WindowsFileSystemConfiguration.add_member(:automatic_backup_retention_days, Shapes::ShapeRef.new(shape: AutomaticBackupRetentionDays, location_name: "AutomaticBackupRetentionDays"))
     WindowsFileSystemConfiguration.add_member(:copy_tags_to_backups, Shapes::ShapeRef.new(shape: Flag, location_name: "CopyTagsToBackups"))
     WindowsFileSystemConfiguration.add_member(:aliases, Shapes::ShapeRef.new(shape: Aliases, location_name: "Aliases"))
+    WindowsFileSystemConfiguration.add_member(:audit_log_configuration, Shapes::ShapeRef.new(shape: WindowsAuditLogConfiguration, location_name: "AuditLogConfiguration"))
     WindowsFileSystemConfiguration.struct_class = Types::WindowsFileSystemConfiguration
 
 

data/lib/aws-sdk-fsx/types.rb

@@ -919,6 +919,11 @@ module Aws::FSx
     #           automatic_backup_retention_days: 1,
     #           copy_tags_to_backups: false,
     #           aliases: ["AlternateDNSName"],
+    #           audit_log_configuration: {
+    #             file_access_audit_log_level: "DISABLED", # required, accepts DISABLED, SUCCESS_ONLY, FAILURE_ONLY, SUCCESS_AND_FAILURE
+    #             file_share_access_audit_log_level: "DISABLED", # required, accepts DISABLED, SUCCESS_ONLY, FAILURE_ONLY, SUCCESS_AND_FAILURE
+    #             audit_log_destination: "GeneralARN",
+    #           },
     #         },
     #         lustre_configuration: {
     #           weekly_maintenance_start_time: "WeeklyTime",
@@ -1307,6 +1312,11 @@ module Aws::FSx
     #           automatic_backup_retention_days: 1,
     #           copy_tags_to_backups: false,
     #           aliases: ["AlternateDNSName"],
+    #           audit_log_configuration: {
+    #             file_access_audit_log_level: "DISABLED", # required, accepts DISABLED, SUCCESS_ONLY, FAILURE_ONLY, SUCCESS_AND_FAILURE
+    #             file_share_access_audit_log_level: "DISABLED", # required, accepts DISABLED, SUCCESS_ONLY, FAILURE_ONLY, SUCCESS_AND_FAILURE
+    #             audit_log_destination: "GeneralARN",
+    #           },
     #         },
     #         lustre_configuration: {
     #           weekly_maintenance_start_time: "WeeklyTime",
@@ -1493,6 +1503,11 @@ module Aws::FSx
     #         automatic_backup_retention_days: 1,
     #         copy_tags_to_backups: false,
     #         aliases: ["AlternateDNSName"],
+    #         audit_log_configuration: {
+    #           file_access_audit_log_level: "DISABLED", # required, accepts DISABLED, SUCCESS_ONLY, FAILURE_ONLY, SUCCESS_AND_FAILURE
+    #           file_share_access_audit_log_level: "DISABLED", # required, accepts DISABLED, SUCCESS_ONLY, FAILURE_ONLY, SUCCESS_AND_FAILURE
+    #           audit_log_destination: "GeneralARN",
+    #         },
     #       }
     #
     # @!attribute [rw] active_directory_id
@@ -1620,6 +1635,12 @@ module Aws::FSx
     #   [2]: https://docs.aws.amazon.com/fsx/latest/WindowsGuide/walkthrough05-file-system-custom-CNAME.html
     #   @return [Array<String>]
     #
+    # @!attribute [rw] audit_log_configuration
+    #   The configuration that Amazon FSx for Windows File Server uses to
+    #   audit and log user accesses of files, folders, and file shares on
+    #   the Amazon FSx for Windows File Server file system.
+    #   @return [Types::WindowsAuditLogCreateConfiguration]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/fsx-2018-03-01/CreateFileSystemWindowsConfiguration AWS API Documentation
     #
     class CreateFileSystemWindowsConfiguration < Struct.new(
@@ -1632,7 +1653,8 @@ module Aws::FSx
       :daily_automatic_backup_start_time,
       :automatic_backup_retention_days,
       :copy_tags_to_backups,
-      :aliases)
+      :aliases,
+      :audit_log_configuration)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -3707,6 +3729,11 @@ module Aws::FSx
     #             password: "DirectoryPassword",
     #             dns_ips: ["IpAddress"],
     #           },
+    #           audit_log_configuration: {
+    #             file_access_audit_log_level: "DISABLED", # required, accepts DISABLED, SUCCESS_ONLY, FAILURE_ONLY, SUCCESS_AND_FAILURE
+    #             file_share_access_audit_log_level: "DISABLED", # required, accepts DISABLED, SUCCESS_ONLY, FAILURE_ONLY, SUCCESS_AND_FAILURE
+    #             audit_log_destination: "GeneralARN",
+    #           },
     #         },
     #         lustre_configuration: {
     #           weekly_maintenance_start_time: "WeeklyTime",
@@ -3822,6 +3849,11 @@ module Aws::FSx
     #           password: "DirectoryPassword",
     #           dns_ips: ["IpAddress"],
     #         },
+    #         audit_log_configuration: {
+    #           file_access_audit_log_level: "DISABLED", # required, accepts DISABLED, SUCCESS_ONLY, FAILURE_ONLY, SUCCESS_AND_FAILURE
+    #           file_share_access_audit_log_level: "DISABLED", # required, accepts DISABLED, SUCCESS_ONLY, FAILURE_ONLY, SUCCESS_AND_FAILURE
+    #           audit_log_destination: "GeneralARN",
+    #         },
     #       }
     #
     # @!attribute [rw] weekly_maintenance_start_time
@@ -3866,6 +3898,12 @@ module Aws::FSx
     #   self-managed Microsoft AD update request in progress.
     #   @return [Types::SelfManagedActiveDirectoryConfigurationUpdates]
     #
+    # @!attribute [rw] audit_log_configuration
+    #   The configuration that Amazon FSx for Windows File Server uses to
+    #   audit and log user accesses of files, folders, and file shares on
+    #   the Amazon FSx for Windows File Server file system..
+    #   @return [Types::WindowsAuditLogCreateConfiguration]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/fsx-2018-03-01/UpdateFileSystemWindowsConfiguration AWS API Documentation
     #
     class UpdateFileSystemWindowsConfiguration < Struct.new(
@@ -3873,7 +3911,156 @@ module Aws::FSx
       :daily_automatic_backup_start_time,
       :automatic_backup_retention_days,
       :throughput_capacity,
-      :self_managed_active_directory_configuration)
+      :self_managed_active_directory_configuration,
+      :audit_log_configuration)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # The configuration that Amazon FSx for Windows File Server uses to
+    # audit and log user accesses of files, folders, and file shares on the
+    # Amazon FSx for Windows File Server file system. For more information,
+    # see [ File access auditing][1].
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/fsx/latest/WindowsGuide/file-access-auditing.html
+    #
+    # @!attribute [rw] file_access_audit_log_level
+    #   Sets which attempt type is logged by Amazon FSx for file and folder
+    #   accesses.
+    #
+    #   * `SUCCESS_ONLY` - only successful attempts to access files or
+    #     folders are logged.
+    #
+    #   * `FAILURE_ONLY` - only failed attempts to access files or folders
+    #     are logged.
+    #
+    #   * `SUCCESS_AND_FAILURE` - both successful attempts and failed
+    #     attempts to access files or folders are logged.
+    #
+    #   * `DISABLED` - access auditing of files and folders is turned off.
+    #   @return [String]
+    #
+    # @!attribute [rw] file_share_access_audit_log_level
+    #   Sets which attempt type is logged by Amazon FSx for file share
+    #   accesses.
+    #
+    #   * `SUCCESS_ONLY` - only successful attempts to access file shares
+    #     are logged.
+    #
+    #   * `FAILURE_ONLY` - only failed attempts to access file shares are
+    #     logged.
+    #
+    #   * `SUCCESS_AND_FAILURE` - both successful attempts and failed
+    #     attempts to access file shares are logged.
+    #
+    #   * `DISABLED` - access auditing of file shares is turned off.
+    #   @return [String]
+    #
+    # @!attribute [rw] audit_log_destination
+    #   The Amazon Resource Name (ARN) for the destination of the audit
+    #   logs. The destination can be any Amazon CloudWatch Logs log group
+    #   ARN or Amazon Kinesis Data Firehose delivery stream ARN.
+    #
+    #   The name of the Amazon CloudWatch Logs log group must begin with the
+    #   `/aws/fsx` prefix. The name of the Amazon Kinesis Data Firehouse
+    #   delivery stream must begin with the `aws-fsx` prefix.
+    #
+    #   The destination ARN (either CloudWatch Logs log group or Kinesis
+    #   Data Firehose delivery stream) must be in the same AWS partition,
+    #   AWS region, and AWS account as your Amazon FSx file system.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/fsx-2018-03-01/WindowsAuditLogConfiguration AWS API Documentation
+    #
+    class WindowsAuditLogConfiguration < Struct.new(
+      :file_access_audit_log_level,
+      :file_share_access_audit_log_level,
+      :audit_log_destination)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # The Windows file access auditing configuration used when creating or
+    # updating an Amazon FSx for Windows File Server file system.
+    #
+    # @note When making an API call, you may pass WindowsAuditLogCreateConfiguration
+    #   data as a hash:
+    #
+    #       {
+    #         file_access_audit_log_level: "DISABLED", # required, accepts DISABLED, SUCCESS_ONLY, FAILURE_ONLY, SUCCESS_AND_FAILURE
+    #         file_share_access_audit_log_level: "DISABLED", # required, accepts DISABLED, SUCCESS_ONLY, FAILURE_ONLY, SUCCESS_AND_FAILURE
+    #         audit_log_destination: "GeneralARN",
+    #       }
+    #
+    # @!attribute [rw] file_access_audit_log_level
+    #   Sets which attempt type is logged by Amazon FSx for file and folder
+    #   accesses.
+    #
+    #   * `SUCCESS_ONLY` - only successful attempts to access files or
+    #     folders are logged.
+    #
+    #   * `FAILURE_ONLY` - only failed attempts to access files or folders
+    #     are logged.
+    #
+    #   * `SUCCESS_AND_FAILURE` - both successful attempts and failed
+    #     attempts to access files or folders are logged.
+    #
+    #   * `DISABLED` - access auditing of files and folders is turned off.
+    #   @return [String]
+    #
+    # @!attribute [rw] file_share_access_audit_log_level
+    #   Sets which attempt type is logged by Amazon FSx for file share
+    #   accesses.
+    #
+    #   * `SUCCESS_ONLY` - only successful attempts to access file shares
+    #     are logged.
+    #
+    #   * `FAILURE_ONLY` - only failed attempts to access file shares are
+    #     logged.
+    #
+    #   * `SUCCESS_AND_FAILURE` - both successful attempts and failed
+    #     attempts to access file shares are logged.
+    #
+    #   * `DISABLED` - access auditing of file shares is turned off.
+    #   @return [String]
+    #
+    # @!attribute [rw] audit_log_destination
+    #   The Amazon Resource Name (ARN) that specifies the destination of the
+    #   audit logs.
+    #
+    #   The destination can be any Amazon CloudWatch Logs log group ARN or
+    #   Amazon Kinesis Data Firehose delivery stream ARN, with the following
+    #   requirements:
+    #
+    #   * The destination ARN that you provide (either CloudWatch Logs log
+    #     group or Kinesis Data Firehose delivery stream) must be in the
+    #     same AWS partition, AWS region, and AWS account as your Amazon FSx
+    #     file system.
+    #
+    #   * The name of the Amazon CloudWatch Logs log group must begin with
+    #     the `/aws/fsx` prefix. The name of the Amazon Kinesis Data
+    #     Firehouse delivery stream must begin with the `aws-fsx` prefix.
+    #
+    #   * If you do not provide a destination in `AuditLogDestination`,
+    #     Amazon FSx will create and use a log stream in the CloudWatch Logs
+    #     `/aws/fsx/windows` log group.
+    #
+    #   * If `AuditLogDestination` is provided and the resource does not
+    #     exist, the request will fail with a `BadRequest` error.
+    #
+    #   * If `FileAccessAuditLogLevel` and `FileShareAccessAuditLogLevel`
+    #     are both set to `DISABLED`, you cannot specify a destination in
+    #     `AuditLogDestination`.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/fsx-2018-03-01/WindowsAuditLogCreateConfiguration AWS API Documentation
+    #
+    class WindowsAuditLogCreateConfiguration < Struct.new(
+      :file_access_audit_log_level,
+      :file_share_access_audit_log_level,
+      :audit_log_destination)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -4014,6 +4201,12 @@ module Aws::FSx
     #   [1]: https://docs.aws.amazon.com/fsx/latest/WindowsGuide/managing-dns-aliases.html
     #   @return [Array<Types::Alias>]
     #
+    # @!attribute [rw] audit_log_configuration
+    #   The configuration that Amazon FSx for Windows File Server uses to
+    #   audit and log user accesses of files, folders, and file shares on
+    #   the Amazon FSx for Windows File Server file system.
+    #   @return [Types::WindowsAuditLogConfiguration]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/fsx-2018-03-01/WindowsFileSystemConfiguration AWS API Documentation
     #
     class WindowsFileSystemConfiguration < Struct.new(
@@ -4029,7 +4222,8 @@ module Aws::FSx
       :daily_automatic_backup_start_time,
       :automatic_backup_retention_days,
       :copy_tags_to_backups,
-      :aliases)
+      :aliases,
+      :audit_log_configuration)
       SENSITIVE = []
       include Aws::Structure
     end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-fsx
 version: !ruby/object:Gem::Version
-  version: 1.37.0
+  version: 1.38.0
 platform: ruby
 authors:
 - Amazon Web Services
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-05-27 00:00:00.000000000 Z
+date: 2021-06-08 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-core