aws-sdk-iot 1.0.0 → 1.1.0

data/lib/aws-sdk-iot/types.rb

@@ -187,6 +187,123 @@ module Aws::IoT
       include Aws::Structure
     end
 
+    # @note When making an API call, you may pass AddThingToThingGroupRequest
+    #   data as a hash:
+    #
+    #       {
+    #         thing_group_name: "ThingGroupName",
+    #         thing_group_arn: "ThingGroupArn",
+    #         thing_name: "ThingName",
+    #         thing_arn: "ThingArn",
+    #       }
+    #
+    # @!attribute [rw] thing_group_name
+    #   The name of the group to which you are adding a thing.
+    #   @return [String]
+    #
+    # @!attribute [rw] thing_group_arn
+    #   The ARN of the group to which you are adding a thing.
+    #   @return [String]
+    #
+    # @!attribute [rw] thing_name
+    #   The name of the thing to add to a group.
+    #   @return [String]
+    #
+    # @!attribute [rw] thing_arn
+    #   The ARN of the thing to add to a group.
+    #   @return [String]
+    #
+    class AddThingToThingGroupRequest < Struct.new(
+      :thing_group_name,
+      :thing_group_arn,
+      :thing_name,
+      :thing_arn)
+      include Aws::Structure
+    end
+
+    class AddThingToThingGroupResponse < Aws::EmptyStructure; end
+
+    # Contains information that allowed the authorization.
+    #
+    # @!attribute [rw] policies
+    #   A list of policies that allowed the authentication.
+    #   @return [Array<Types::Policy>]
+    #
+    class Allowed < Struct.new(
+      :policies)
+      include Aws::Structure
+    end
+
+    # @note When making an API call, you may pass AssociateTargetsWithJobRequest
+    #   data as a hash:
+    #
+    #       {
+    #         targets: ["TargetArn"], # required
+    #         job_id: "JobId", # required
+    #         comment: "Comment",
+    #       }
+    #
+    # @!attribute [rw] targets
+    #   A list of thing group ARNs that define the targets of the job.
+    #   @return [Array<String>]
+    #
+    # @!attribute [rw] job_id
+    #   The unique identifier you assigned to this job when it was created.
+    #   @return [String]
+    #
+    # @!attribute [rw] comment
+    #   An optional comment string describing why the job was associated
+    #   with the targets.
+    #   @return [String]
+    #
+    class AssociateTargetsWithJobRequest < Struct.new(
+      :targets,
+      :job_id,
+      :comment)
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] job_arn
+    #   An ARN identifying the job.
+    #   @return [String]
+    #
+    # @!attribute [rw] job_id
+    #   The unique identifier you assigned to this job when it was created.
+    #   @return [String]
+    #
+    # @!attribute [rw] description
+    #   A short text description of the job.
+    #   @return [String]
+    #
+    class AssociateTargetsWithJobResponse < Struct.new(
+      :job_arn,
+      :job_id,
+      :description)
+      include Aws::Structure
+    end
+
+    # @note When making an API call, you may pass AttachPolicyRequest
+    #   data as a hash:
+    #
+    #       {
+    #         policy_name: "PolicyName", # required
+    #         target: "PolicyTarget", # required
+    #       }
+    #
+    # @!attribute [rw] policy_name
+    #   The name of the policy to attach.
+    #   @return [String]
+    #
+    # @!attribute [rw] target
+    #   The identity to which the policy is attached.
+    #   @return [String]
+    #
+    class AttachPolicyRequest < Struct.new(
+      :policy_name,
+      :target)
+      include Aws::Structure
+    end
+
     # The input for the AttachPrincipalPolicy operation.
     #
     # @note When making an API call, you may pass AttachPrincipalPolicyRequest
@@ -278,6 +395,128 @@ module Aws::IoT
       include Aws::Structure
     end
 
+    # A collection of authorization information.
+    #
+    # @note When making an API call, you may pass AuthInfo
+    #   data as a hash:
+    #
+    #       {
+    #         action_type: "PUBLISH", # accepts PUBLISH, SUBSCRIBE, RECEIVE, CONNECT
+    #         resources: ["Resource"],
+    #       }
+    #
+    # @!attribute [rw] action_type
+    #   The type of action for which the principal is being authorized.
+    #   @return [String]
+    #
+    # @!attribute [rw] resources
+    #   The resources for which the principal is being authorized to perform
+    #   the specified action.
+    #   @return [Array<String>]
+    #
+    class AuthInfo < Struct.new(
+      :action_type,
+      :resources)
+      include Aws::Structure
+    end
+
+    # The authorizer result.
+    #
+    # @!attribute [rw] auth_info
+    #   Authorization information.
+    #   @return [Types::AuthInfo]
+    #
+    # @!attribute [rw] allowed
+    #   The policies and statements that allowed the specified action.
+    #   @return [Types::Allowed]
+    #
+    # @!attribute [rw] denied
+    #   The policies and statements that denied the specified action.
+    #   @return [Types::Denied]
+    #
+    # @!attribute [rw] auth_decision
+    #   The final authorization decision of this scenario. Multiple
+    #   statements are taken into account when determining the authorization
+    #   decision. An explicit deny statement can override multiple allow
+    #   statements.
+    #   @return [String]
+    #
+    # @!attribute [rw] missing_context_values
+    #   Contains any missing context values found while evaluating policy.
+    #   @return [Array<String>]
+    #
+    class AuthResult < Struct.new(
+      :auth_info,
+      :allowed,
+      :denied,
+      :auth_decision,
+      :missing_context_values)
+      include Aws::Structure
+    end
+
+    # The authorizer description.
+    #
+    # @!attribute [rw] authorizer_name
+    #   The authorizer name.
+    #   @return [String]
+    #
+    # @!attribute [rw] authorizer_arn
+    #   The authorizer ARN.
+    #   @return [String]
+    #
+    # @!attribute [rw] authorizer_function_arn
+    #   The authorizer's Lambda function ARN.
+    #   @return [String]
+    #
+    # @!attribute [rw] token_key_name
+    #   The key used to extract the token from the HTTP headers.
+    #   @return [String]
+    #
+    # @!attribute [rw] token_signing_public_keys
+    #   The public keys used to validate the token signature returned by
+    #   your custom authentication service.
+    #   @return [Hash<String,String>]
+    #
+    # @!attribute [rw] status
+    #   The status of the authorizer.
+    #   @return [String]
+    #
+    # @!attribute [rw] creation_date
+    #   The UNIX timestamp of when the authorizer was created.
+    #   @return [Time]
+    #
+    # @!attribute [rw] last_modified_date
+    #   The UNIX timestamp of when the authorizer was last updated.
+    #   @return [Time]
+    #
+    class AuthorizerDescription < Struct.new(
+      :authorizer_name,
+      :authorizer_arn,
+      :authorizer_function_arn,
+      :token_key_name,
+      :token_signing_public_keys,
+      :status,
+      :creation_date,
+      :last_modified_date)
+      include Aws::Structure
+    end
+
+    # The authorizer summary.
+    #
+    # @!attribute [rw] authorizer_name
+    #   The authorizer name.
+    #   @return [String]
+    #
+    # @!attribute [rw] authorizer_arn
+    #   The authorizer ARN.
+    #   @return [String]
+    #
+    class AuthorizerSummary < Struct.new(
+      :authorizer_name,
+      :authorizer_arn)
+      include Aws::Structure
+    end
+
     # A CA certificate.
     #
     # @!attribute [rw] certificate_arn
@@ -367,6 +606,47 @@ module Aws::IoT
       include Aws::Structure
     end
 
+    # @note When making an API call, you may pass CancelJobRequest
+    #   data as a hash:
+    #
+    #       {
+    #         job_id: "JobId", # required
+    #         comment: "Comment",
+    #       }
+    #
+    # @!attribute [rw] job_id
+    #   The unique identifier you assigned to this job when it was created.
+    #   @return [String]
+    #
+    # @!attribute [rw] comment
+    #   An optional comment string describing why the job was canceled.
+    #   @return [String]
+    #
+    class CancelJobRequest < Struct.new(
+      :job_id,
+      :comment)
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] job_arn
+    #   The job ARN.
+    #   @return [String]
+    #
+    # @!attribute [rw] job_id
+    #   The unique identifier you assigned to this job when it was created.
+    #   @return [String]
+    #
+    # @!attribute [rw] description
+    #   A short text description of the job.
+    #   @return [String]
+    #
+    class CancelJobResponse < Struct.new(
+      :job_arn,
+      :job_id,
+      :description)
+      include Aws::Structure
+    end
+
     # Information about a certificate.
     #
     # @!attribute [rw] certificate_arn
@@ -453,6 +733,12 @@ module Aws::IoT
       include Aws::Structure
     end
 
+    # @api private
+    #
+    class ClearDefaultAuthorizerRequest < Aws::EmptyStructure; end
+
+    class ClearDefaultAuthorizerResponse < Aws::EmptyStructure; end
+
     # Describes an action that updates a CloudWatch alarm.
     #
     # @note When making an API call, you may pass CloudwatchAlarmAction
@@ -546,6 +832,82 @@ module Aws::IoT
       include Aws::Structure
     end
 
+    # Configuration.
+    #
+    # @note When making an API call, you may pass Configuration
+    #   data as a hash:
+    #
+    #       {
+    #         enabled: false,
+    #       }
+    #
+    # @!attribute [rw] enabled
+    #   True to enable the configuration.
+    #   @return [Boolean]
+    #
+    class Configuration < Struct.new(
+      :enabled)
+      include Aws::Structure
+    end
+
+    # @note When making an API call, you may pass CreateAuthorizerRequest
+    #   data as a hash:
+    #
+    #       {
+    #         authorizer_name: "AuthorizerName", # required
+    #         authorizer_function_arn: "AuthorizerFunctionArn", # required
+    #         token_key_name: "TokenKeyName", # required
+    #         token_signing_public_keys: { # required
+    #           "KeyName" => "KeyValue",
+    #         },
+    #         status: "ACTIVE", # accepts ACTIVE, INACTIVE
+    #       }
+    #
+    # @!attribute [rw] authorizer_name
+    #   The authorizer name.
+    #   @return [String]
+    #
+    # @!attribute [rw] authorizer_function_arn
+    #   The ARN of the authorizer's Lambda function.
+    #   @return [String]
+    #
+    # @!attribute [rw] token_key_name
+    #   The name of the token key used to extract the token from the HTTP
+    #   headers.
+    #   @return [String]
+    #
+    # @!attribute [rw] token_signing_public_keys
+    #   The public keys used to verify the digital signature returned by
+    #   your custom authentication service.
+    #   @return [Hash<String,String>]
+    #
+    # @!attribute [rw] status
+    #   The status of the create authorizer request.
+    #   @return [String]
+    #
+    class CreateAuthorizerRequest < Struct.new(
+      :authorizer_name,
+      :authorizer_function_arn,
+      :token_key_name,
+      :token_signing_public_keys,
+      :status)
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] authorizer_name
+    #   The authorizer's name.
+    #   @return [String]
+    #
+    # @!attribute [rw] authorizer_arn
+    #   The authorizer ARN.
+    #   @return [String]
+    #
+    class CreateAuthorizerResponse < Struct.new(
+      :authorizer_name,
+      :authorizer_arn)
+      include Aws::Structure
+    end
+
     # The input for the CreateCertificateFromCsr operation.
     #
     # @note When making an API call, you may pass CreateCertificateFromCsrRequest
@@ -593,6 +955,103 @@ module Aws::IoT
       include Aws::Structure
     end
 
+    # @note When making an API call, you may pass CreateJobRequest
+    #   data as a hash:
+    #
+    #       {
+    #         job_id: "JobId", # required
+    #         targets: ["TargetArn"], # required
+    #         document_source: "JobDocumentSource",
+    #         document: "JobDocument",
+    #         description: "JobDescription",
+    #         presigned_url_config: {
+    #           role_arn: "RoleArn",
+    #           expires_in_sec: 1,
+    #         },
+    #         target_selection: "CONTINUOUS", # accepts CONTINUOUS, SNAPSHOT
+    #         job_executions_rollout_config: {
+    #           maximum_per_minute: 1,
+    #         },
+    #         document_parameters: {
+    #           "ParameterKey" => "ParameterValue",
+    #         },
+    #       }
+    #
+    # @!attribute [rw] job_id
+    #   A job identifier which must be unique for your AWS account. We
+    #   recommend using a UUID. Alpha-numeric characters, "-" and "\_"
+    #   are valid for use here.
+    #   @return [String]
+    #
+    # @!attribute [rw] targets
+    #   A list of things and thing groups to which the job should be sent.
+    #   @return [Array<String>]
+    #
+    # @!attribute [rw] document_source
+    #   An S3 link to the job document.
+    #   @return [String]
+    #
+    # @!attribute [rw] document
+    #   The job document.
+    #   @return [String]
+    #
+    # @!attribute [rw] description
+    #   A short text description of the job.
+    #   @return [String]
+    #
+    # @!attribute [rw] presigned_url_config
+    #   Configuration information for pre-signed S3 URLs.
+    #   @return [Types::PresignedUrlConfig]
+    #
+    # @!attribute [rw] target_selection
+    #   Specifies whether the job will continue to run (CONTINUOUS), or will
+    #   be complete after all those things specified as targets have
+    #   completed the job (SNAPSHOT). If continuous, the job may also be run
+    #   on a thing when a change is detected in a target. For example, a job
+    #   will run on a thing when the thing is added to a target group, even
+    #   after the job was completed by all things originally in the group.
+    #   @return [String]
+    #
+    # @!attribute [rw] job_executions_rollout_config
+    #   Allows you to create a staged rollout of the job.
+    #   @return [Types::JobExecutionsRolloutConfig]
+    #
+    # @!attribute [rw] document_parameters
+    #   Parameters for the job document.
+    #   @return [Hash<String,String>]
+    #
+    class CreateJobRequest < Struct.new(
+      :job_id,
+      :targets,
+      :document_source,
+      :document,
+      :description,
+      :presigned_url_config,
+      :target_selection,
+      :job_executions_rollout_config,
+      :document_parameters)
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] job_arn
+    #   The job ARN.
+    #   @return [String]
+    #
+    # @!attribute [rw] job_id
+    #   The unique identifier you assigned to this job.
+    #   @return [String]
+    #
+    # @!attribute [rw] description
+    #   The job description.
+    #   @return [String]
+    #
+    class CreateJobResponse < Struct.new(
+      :job_arn,
+      :job_id,
+      :description)
+      include Aws::Structure
+    end
+
     # The input for the CreateKeysAndCertificate operation.
     #
     # @note When making an API call, you may pass CreateKeysAndCertificateRequest
@@ -707,7 +1166,7 @@ module Aws::IoT
     #
     # @!attribute [rw] policy_document
     #   The JSON document that describes the policy. Minimum length of 1.
-    #   Maximum length of 2048, excluding whitespaces
+    #   Maximum length of 2048, excluding whitespace.
     #   @return [String]
     #
     # @!attribute [rw] set_as_default
@@ -750,41 +1209,139 @@ module Aws::IoT
       include Aws::Structure
     end
 
-    # The input for the CreateThing operation.
-    #
-    # @note When making an API call, you may pass CreateThingRequest
+    # @note When making an API call, you may pass CreateRoleAliasRequest
     #   data as a hash:
     #
     #       {
-    #         thing_name: "ThingName", # required
-    #         thing_type_name: "ThingTypeName",
-    #         attribute_payload: {
-    #           attributes: {
-    #             "AttributeName" => "AttributeValue",
-    #           },
-    #           merge: false,
-    #         },
+    #         role_alias: "RoleAlias", # required
+    #         role_arn: "RoleArn", # required
+    #         credential_duration_seconds: 1,
     #       }
     #
-    # @!attribute [rw] thing_name
-    #   The name of the thing to create.
+    # @!attribute [rw] role_alias
+    #   The role alias that points to a role ARN. This allows you to change
+    #   the role without having to update the device.
     #   @return [String]
     #
-    # @!attribute [rw] thing_type_name
-    #   The name of the thing type associated with the new thing.
+    # @!attribute [rw] role_arn
+    #   The role ARN.
     #   @return [String]
     #
-    # @!attribute [rw] attribute_payload
-    #   The attribute payload, which consists of up to three name/value
-    #   pairs in a JSON document. For example:
-    #
-    #   `\{"attributes":\{"string1":"string2"\}\}`
-    #   @return [Types::AttributePayload]
+    # @!attribute [rw] credential_duration_seconds
+    #   How long (in seconds) the credentials will be valid.
+    #   @return [Integer]
     #
-    class CreateThingRequest < Struct.new(
-      :thing_name,
-      :thing_type_name,
-      :attribute_payload)
+    class CreateRoleAliasRequest < Struct.new(
+      :role_alias,
+      :role_arn,
+      :credential_duration_seconds)
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] role_alias
+    #   The role alias.
+    #   @return [String]
+    #
+    # @!attribute [rw] role_alias_arn
+    #   The role alias ARN.
+    #   @return [String]
+    #
+    class CreateRoleAliasResponse < Struct.new(
+      :role_alias,
+      :role_alias_arn)
+      include Aws::Structure
+    end
+
+    # @note When making an API call, you may pass CreateThingGroupRequest
+    #   data as a hash:
+    #
+    #       {
+    #         thing_group_name: "ThingGroupName", # required
+    #         parent_group_name: "ThingGroupName",
+    #         thing_group_properties: {
+    #           thing_group_description: "ThingGroupDescription",
+    #           attribute_payload: {
+    #             attributes: {
+    #               "AttributeName" => "AttributeValue",
+    #             },
+    #             merge: false,
+    #           },
+    #         },
+    #       }
+    #
+    # @!attribute [rw] thing_group_name
+    #   The thing group name to create.
+    #   @return [String]
+    #
+    # @!attribute [rw] parent_group_name
+    #   The name of the parent thing group.
+    #   @return [String]
+    #
+    # @!attribute [rw] thing_group_properties
+    #   The thing group properties.
+    #   @return [Types::ThingGroupProperties]
+    #
+    class CreateThingGroupRequest < Struct.new(
+      :thing_group_name,
+      :parent_group_name,
+      :thing_group_properties)
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] thing_group_name
+    #   The thing group name.
+    #   @return [String]
+    #
+    # @!attribute [rw] thing_group_arn
+    #   The thing group ARN.
+    #   @return [String]
+    #
+    # @!attribute [rw] thing_group_id
+    #   The thing group ID.
+    #   @return [String]
+    #
+    class CreateThingGroupResponse < Struct.new(
+      :thing_group_name,
+      :thing_group_arn,
+      :thing_group_id)
+      include Aws::Structure
+    end
+
+    # The input for the CreateThing operation.
+    #
+    # @note When making an API call, you may pass CreateThingRequest
+    #   data as a hash:
+    #
+    #       {
+    #         thing_name: "ThingName", # required
+    #         thing_type_name: "ThingTypeName",
+    #         attribute_payload: {
+    #           attributes: {
+    #             "AttributeName" => "AttributeValue",
+    #           },
+    #           merge: false,
+    #         },
+    #       }
+    #
+    # @!attribute [rw] thing_name
+    #   The name of the thing to create.
+    #   @return [String]
+    #
+    # @!attribute [rw] thing_type_name
+    #   The name of the thing type associated with the new thing.
+    #   @return [String]
+    #
+    # @!attribute [rw] attribute_payload
+    #   The attribute payload, which consists of up to three name/value
+    #   pairs in a JSON document. For example:
+    #
+    #   `\{"attributes":\{"string1":"string2"\}\}`
+    #   @return [Types::AttributePayload]
+    #
+    class CreateThingRequest < Struct.new(
+      :thing_name,
+      :thing_type_name,
+      :attribute_payload)
       include Aws::Structure
     end
 
@@ -798,9 +1355,14 @@ module Aws::IoT
     #   The ARN of the new thing.
     #   @return [String]
     #
+    # @!attribute [rw] thing_id
+    #   The thing ID.
+    #   @return [String]
+    #
     class CreateThingResponse < Struct.new(
       :thing_name,
-      :thing_arn)
+      :thing_arn,
+      :thing_id)
       include Aws::Structure
     end
 
@@ -843,9 +1405,14 @@ module Aws::IoT
     #   The Amazon Resource Name (ARN) of the thing type.
     #   @return [String]
     #
+    # @!attribute [rw] thing_type_id
+    #   The thing type ID.
+    #   @return [String]
+    #
     class CreateThingTypeResponse < Struct.new(
       :thing_type_name,
-      :thing_type_arn)
+      :thing_type_arn,
+      :thing_type_id)
       include Aws::Structure
     end
 
@@ -958,6 +1525,24 @@ module Aws::IoT
       include Aws::Structure
     end
 
+    # @note When making an API call, you may pass DeleteAuthorizerRequest
+    #   data as a hash:
+    #
+    #       {
+    #         authorizer_name: "AuthorizerName", # required
+    #       }
+    #
+    # @!attribute [rw] authorizer_name
+    #   The name of the authorizer to delete.
+    #   @return [String]
+    #
+    class DeleteAuthorizerRequest < Struct.new(
+      :authorizer_name)
+      include Aws::Structure
+    end
+
+    class DeleteAuthorizerResponse < Aws::EmptyStructure; end
+
     # Input for the DeleteCACertificate operation.
     #
     # @note When making an API call, you may pass DeleteCACertificateRequest
@@ -987,14 +1572,20 @@ module Aws::IoT
     #
     #       {
     #         certificate_id: "CertificateId", # required
+    #         force_delete: false,
     #       }
     #
     # @!attribute [rw] certificate_id
     #   The ID of the certificate.
     #   @return [String]
     #
+    # @!attribute [rw] force_delete
+    #   Forces a certificate request to be deleted.
+    #   @return [Boolean]
+    #
     class DeleteCertificateRequest < Struct.new(
-      :certificate_id)
+      :certificate_id,
+      :force_delete)
       include Aws::Structure
     end
 
@@ -1050,6 +1641,48 @@ module Aws::IoT
     #
     class DeleteRegistrationCodeResponse < Aws::EmptyStructure; end
 
+    # @note When making an API call, you may pass DeleteRoleAliasRequest
+    #   data as a hash:
+    #
+    #       {
+    #         role_alias: "RoleAlias", # required
+    #       }
+    #
+    # @!attribute [rw] role_alias
+    #   The role alias to delete.
+    #   @return [String]
+    #
+    class DeleteRoleAliasRequest < Struct.new(
+      :role_alias)
+      include Aws::Structure
+    end
+
+    class DeleteRoleAliasResponse < Aws::EmptyStructure; end
+
+    # @note When making an API call, you may pass DeleteThingGroupRequest
+    #   data as a hash:
+    #
+    #       {
+    #         thing_group_name: "ThingGroupName", # required
+    #         expected_version: 1,
+    #       }
+    #
+    # @!attribute [rw] thing_group_name
+    #   The name of the thing group to delete.
+    #   @return [String]
+    #
+    # @!attribute [rw] expected_version
+    #   The expected version of the thing group to delete.
+    #   @return [Integer]
+    #
+    class DeleteThingGroupRequest < Struct.new(
+      :thing_group_name,
+      :expected_version)
+      include Aws::Structure
+    end
+
+    class DeleteThingGroupResponse < Aws::EmptyStructure; end
+
     # The input for the DeleteThing operation.
     #
     # @note When making an API call, you may pass DeleteThingRequest
@@ -1121,6 +1754,47 @@ module Aws::IoT
       include Aws::Structure
     end
 
+    # @note When making an API call, you may pass DeleteV2LoggingLevelRequest
+    #   data as a hash:
+    #
+    #       {
+    #         target_type: "DEFAULT", # required, accepts DEFAULT, THING_GROUP
+    #         target_name: "LogTargetName", # required
+    #       }
+    #
+    # @!attribute [rw] target_type
+    #   The type of resource for which you are configuring logging. Must be
+    #   `THING_Group`.
+    #   @return [String]
+    #
+    # @!attribute [rw] target_name
+    #   The name of the resource for which you are configuring logging.
+    #   @return [String]
+    #
+    class DeleteV2LoggingLevelRequest < Struct.new(
+      :target_type,
+      :target_name)
+      include Aws::Structure
+    end
+
+    # Contains information that denied the authorization.
+    #
+    # @!attribute [rw] implicit_deny
+    #   Information that implicitly denies the authorization. When a policy
+    #   doesn't explicitly deny or allow an action on a resource it is
+    #   considered an implicit deny.
+    #   @return [Types::ImplicitDeny]
+    #
+    # @!attribute [rw] explicit_deny
+    #   Information that explicitly denies the authorization.
+    #   @return [Types::ExplicitDeny]
+    #
+    class Denied < Struct.new(
+      :implicit_deny,
+      :explicit_deny)
+      include Aws::Structure
+    end
+
     # The input for the DeprecateThingType operation.
     #
     # @note When making an API call, you may pass DeprecateThingTypeRequest
@@ -1151,6 +1825,31 @@ module Aws::IoT
     #
     class DeprecateThingTypeResponse < Aws::EmptyStructure; end
 
+    # @note When making an API call, you may pass DescribeAuthorizerRequest
+    #   data as a hash:
+    #
+    #       {
+    #         authorizer_name: "AuthorizerName", # required
+    #       }
+    #
+    # @!attribute [rw] authorizer_name
+    #   The name of the authorizer to describe.
+    #   @return [String]
+    #
+    class DescribeAuthorizerRequest < Struct.new(
+      :authorizer_name)
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] authorizer_description
+    #   The authorizer description.
+    #   @return [Types::AuthorizerDescription]
+    #
+    class DescribeAuthorizerResponse < Struct.new(
+      :authorizer_description)
+      include Aws::Structure
+    end
+
     # The input for the DescribeCACertificate operation.
     #
     # @note When making an API call, you may pass DescribeCACertificateRequest
@@ -1175,8 +1874,13 @@ module Aws::IoT
     #   The CA certificate description.
     #   @return [Types::CACertificateDescription]
     #
+    # @!attribute [rw] registration_config
+    #   Information about the registration configuration.
+    #   @return [Types::RegistrationConfig]
+    #
     class DescribeCACertificateResponse < Struct.new(
-      :certificate_description)
+      :certificate_description,
+      :registration_config)
       include Aws::Structure
     end
 
@@ -1209,11 +1913,36 @@ module Aws::IoT
       include Aws::Structure
     end
 
+    # @api private
+    #
+    class DescribeDefaultAuthorizerRequest < Aws::EmptyStructure; end
+
+    # @!attribute [rw] authorizer_description
+    #   The default authorizer's description.
+    #   @return [Types::AuthorizerDescription]
+    #
+    class DescribeDefaultAuthorizerResponse < Struct.new(
+      :authorizer_description)
+      include Aws::Structure
+    end
+
     # The input for the DescribeEndpoint operation.
     #
-    # @api private
+    # @note When making an API call, you may pass DescribeEndpointRequest
+    #   data as a hash:
     #
-    class DescribeEndpointRequest < Aws::EmptyStructure; end
+    #       {
+    #         endpoint_type: "EndpointType",
+    #       }
+    #
+    # @!attribute [rw] endpoint_type
+    #   The endpoint type.
+    #   @return [String]
+    #
+    class DescribeEndpointRequest < Struct.new(
+      :endpoint_type)
+      include Aws::Structure
+    end
 
     # The output from the DescribeEndpoint operation.
     #
@@ -1227,112 +1956,442 @@ module Aws::IoT
       include Aws::Structure
     end
 
-    # The input for the DescribeThing operation.
+    # @api private
     #
-    # @note When making an API call, you may pass DescribeThingRequest
+    class DescribeEventConfigurationsRequest < Aws::EmptyStructure; end
+
+    # @!attribute [rw] event_configurations
+    #   The event configurations.
+    #   @return [Hash<String,Types::Configuration>]
+    #
+    # @!attribute [rw] creation_date
+    #   The creation date of the event configuration.
+    #   @return [Time]
+    #
+    # @!attribute [rw] last_modified_date
+    #   The date the event configurations were last modified.
+    #   @return [Time]
+    #
+    class DescribeEventConfigurationsResponse < Struct.new(
+      :event_configurations,
+      :creation_date,
+      :last_modified_date)
+      include Aws::Structure
+    end
+
+    # @note When making an API call, you may pass DescribeIndexRequest
     #   data as a hash:
     #
     #       {
-    #         thing_name: "ThingName", # required
+    #         index_name: "IndexName", # required
     #       }
     #
-    # @!attribute [rw] thing_name
-    #   The name of the thing.
+    # @!attribute [rw] index_name
+    #   The index name.
     #   @return [String]
     #
-    class DescribeThingRequest < Struct.new(
-      :thing_name)
+    class DescribeIndexRequest < Struct.new(
+      :index_name)
       include Aws::Structure
     end
 
-    # The output from the DescribeThing operation.
-    #
-    # @!attribute [rw] default_client_id
-    #   The default client ID.
+    # @!attribute [rw] index_name
+    #   The index name.
     #   @return [String]
     #
-    # @!attribute [rw] thing_name
-    #   The name of the thing.
+    # @!attribute [rw] index_status
+    #   The index status.
     #   @return [String]
     #
-    # @!attribute [rw] thing_type_name
-    #   The thing type name.
+    # @!attribute [rw] schema
+    #   Contains a value that specifies the type of indexing performed.
+    #   Valid values are:
+    #
+    #   1.  REGISTRY – Your thing index will contain only registry data.
+    #
+    #   2.  REGISTRY\_AND\_SHADOW - Your thing index will contain registry
+    #       and shadow data.
     #   @return [String]
     #
-    # @!attribute [rw] attributes
-    #   The thing attributes.
-    #   @return [Hash<String,String>]
+    class DescribeIndexResponse < Struct.new(
+      :index_name,
+      :index_status,
+      :schema)
+      include Aws::Structure
+    end
+
+    # @note When making an API call, you may pass DescribeJobExecutionRequest
+    #   data as a hash:
     #
-    # @!attribute [rw] version
-    #   The current version of the thing record in the registry.
+    #       {
+    #         job_id: "JobId", # required
+    #         thing_name: "ThingName", # required
+    #         execution_number: 1,
+    #       }
     #
-    #   <note markdown="1"> To avoid unintentional changes to the information in the registry,
-    #   you can pass the version information in the `expectedVersion`
-    #   parameter of the `UpdateThing` and `DeleteThing` calls.
+    # @!attribute [rw] job_id
+    #   The unique identifier you assigned to this job when it was created.
+    #   @return [String]
     #
-    #    </note>
+    # @!attribute [rw] thing_name
+    #   The name of the thing on which the job execution is running.
+    #   @return [String]
+    #
+    # @!attribute [rw] execution_number
+    #   A string (consisting of the digits "0" through "9" which is used
+    #   to specify a particular job execution on a particular device.
     #   @return [Integer]
     #
-    class DescribeThingResponse < Struct.new(
-      :default_client_id,
+    class DescribeJobExecutionRequest < Struct.new(
+      :job_id,
       :thing_name,
-      :thing_type_name,
-      :attributes,
-      :version)
+      :execution_number)
       include Aws::Structure
     end
 
-    # The input for the DescribeThingType operation.
+    # @!attribute [rw] execution
+    #   Information about the job execution.
+    #   @return [Types::JobExecution]
     #
-    # @note When making an API call, you may pass DescribeThingTypeRequest
+    class DescribeJobExecutionResponse < Struct.new(
+      :execution)
+      include Aws::Structure
+    end
+
+    # @note When making an API call, you may pass DescribeJobRequest
     #   data as a hash:
     #
     #       {
-    #         thing_type_name: "ThingTypeName", # required
+    #         job_id: "JobId", # required
     #       }
     #
-    # @!attribute [rw] thing_type_name
-    #   The name of the thing type.
+    # @!attribute [rw] job_id
+    #   The unique identifier you assigned to this job when it was created.
     #   @return [String]
     #
-    class DescribeThingTypeRequest < Struct.new(
-      :thing_type_name)
+    class DescribeJobRequest < Struct.new(
+      :job_id)
       include Aws::Structure
     end
 
-    # The output for the DescribeThingType operation.
-    #
-    # @!attribute [rw] thing_type_name
-    #   The name of the thing type.
+    # @!attribute [rw] document_source
+    #   An S3 link to the job document.
     #   @return [String]
     #
-    # @!attribute [rw] thing_type_properties
-    #   The ThingTypeProperties contains information about the thing type
-    #   including description, and a list of searchable thing attribute
-    #   names.
-    #   @return [Types::ThingTypeProperties]
-    #
-    # @!attribute [rw] thing_type_metadata
-    #   The ThingTypeMetadata contains additional information about the
-    #   thing type including: creation date and time, a value indicating
-    #   whether the thing type is deprecated, and a date and time when it
-    #   was deprecated.
-    #   @return [Types::ThingTypeMetadata]
+    # @!attribute [rw] job
+    #   Information about the job.
+    #   @return [Types::Job]
     #
-    class DescribeThingTypeResponse < Struct.new(
-      :thing_type_name,
-      :thing_type_properties,
-      :thing_type_metadata)
+    class DescribeJobResponse < Struct.new(
+      :document_source,
+      :job)
       include Aws::Structure
     end
 
-    # The input for the DetachPrincipalPolicy operation.
-    #
-    # @note When making an API call, you may pass DetachPrincipalPolicyRequest
+    # @note When making an API call, you may pass DescribeRoleAliasRequest
     #   data as a hash:
     #
     #       {
-    #         policy_name: "PolicyName", # required
+    #         role_alias: "RoleAlias", # required
+    #       }
+    #
+    # @!attribute [rw] role_alias
+    #   The role alias to describe.
+    #   @return [String]
+    #
+    class DescribeRoleAliasRequest < Struct.new(
+      :role_alias)
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] role_alias_description
+    #   The role alias description.
+    #   @return [Types::RoleAliasDescription]
+    #
+    class DescribeRoleAliasResponse < Struct.new(
+      :role_alias_description)
+      include Aws::Structure
+    end
+
+    # @note When making an API call, you may pass DescribeThingGroupRequest
+    #   data as a hash:
+    #
+    #       {
+    #         thing_group_name: "ThingGroupName", # required
+    #       }
+    #
+    # @!attribute [rw] thing_group_name
+    #   The name of the thing group.
+    #   @return [String]
+    #
+    class DescribeThingGroupRequest < Struct.new(
+      :thing_group_name)
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] thing_group_name
+    #   The name of the thing group.
+    #   @return [String]
+    #
+    # @!attribute [rw] thing_group_id
+    #   The thing group ID.
+    #   @return [String]
+    #
+    # @!attribute [rw] thing_group_arn
+    #   The thing group ARN.
+    #   @return [String]
+    #
+    # @!attribute [rw] version
+    #   The version of the thing group.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] thing_group_properties
+    #   The thing group properties.
+    #   @return [Types::ThingGroupProperties]
+    #
+    # @!attribute [rw] thing_group_metadata
+    #   Thing group metadata.
+    #   @return [Types::ThingGroupMetadata]
+    #
+    class DescribeThingGroupResponse < Struct.new(
+      :thing_group_name,
+      :thing_group_id,
+      :thing_group_arn,
+      :version,
+      :thing_group_properties,
+      :thing_group_metadata)
+      include Aws::Structure
+    end
+
+    # @note When making an API call, you may pass DescribeThingRegistrationTaskRequest
+    #   data as a hash:
+    #
+    #       {
+    #         task_id: "TaskId", # required
+    #       }
+    #
+    # @!attribute [rw] task_id
+    #   The task ID.
+    #   @return [String]
+    #
+    class DescribeThingRegistrationTaskRequest < Struct.new(
+      :task_id)
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] task_id
+    #   The task ID.
+    #   @return [String]
+    #
+    # @!attribute [rw] creation_date
+    #   The task creation date.
+    #   @return [Time]
+    #
+    # @!attribute [rw] last_modified_date
+    #   The date when the task was last modified.
+    #   @return [Time]
+    #
+    # @!attribute [rw] template_body
+    #   The task's template.
+    #   @return [String]
+    #
+    # @!attribute [rw] input_file_bucket
+    #   The S3 bucket that contains the input file.
+    #   @return [String]
+    #
+    # @!attribute [rw] input_file_key
+    #   The input file key.
+    #   @return [String]
+    #
+    # @!attribute [rw] role_arn
+    #   The role ARN that grants access to the input file bucket.
+    #   @return [String]
+    #
+    # @!attribute [rw] status
+    #   The status of the bulk thing provisioning task.
+    #   @return [String]
+    #
+    # @!attribute [rw] message
+    #   The message.
+    #   @return [String]
+    #
+    # @!attribute [rw] success_count
+    #   The number of things successfully provisioned.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] failure_count
+    #   The number of things that failed to be provisioned.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] percentage_progress
+    #   The progress of the bulk provisioning task expressed as a
+    #   percentage.
+    #   @return [Integer]
+    #
+    class DescribeThingRegistrationTaskResponse < Struct.new(
+      :task_id,
+      :creation_date,
+      :last_modified_date,
+      :template_body,
+      :input_file_bucket,
+      :input_file_key,
+      :role_arn,
+      :status,
+      :message,
+      :success_count,
+      :failure_count,
+      :percentage_progress)
+      include Aws::Structure
+    end
+
+    # The input for the DescribeThing operation.
+    #
+    # @note When making an API call, you may pass DescribeThingRequest
+    #   data as a hash:
+    #
+    #       {
+    #         thing_name: "ThingName", # required
+    #       }
+    #
+    # @!attribute [rw] thing_name
+    #   The name of the thing.
+    #   @return [String]
+    #
+    class DescribeThingRequest < Struct.new(
+      :thing_name)
+      include Aws::Structure
+    end
+
+    # The output from the DescribeThing operation.
+    #
+    # @!attribute [rw] default_client_id
+    #   The default client ID.
+    #   @return [String]
+    #
+    # @!attribute [rw] thing_name
+    #   The name of the thing.
+    #   @return [String]
+    #
+    # @!attribute [rw] thing_id
+    #   The ID of the thing to describe.
+    #   @return [String]
+    #
+    # @!attribute [rw] thing_arn
+    #   The ARN of the thing to describe.
+    #   @return [String]
+    #
+    # @!attribute [rw] thing_type_name
+    #   The thing type name.
+    #   @return [String]
+    #
+    # @!attribute [rw] attributes
+    #   The thing attributes.
+    #   @return [Hash<String,String>]
+    #
+    # @!attribute [rw] version
+    #   The current version of the thing record in the registry.
+    #
+    #   <note markdown="1"> To avoid unintentional changes to the information in the registry,
+    #   you can pass the version information in the `expectedVersion`
+    #   parameter of the `UpdateThing` and `DeleteThing` calls.
+    #
+    #    </note>
+    #   @return [Integer]
+    #
+    class DescribeThingResponse < Struct.new(
+      :default_client_id,
+      :thing_name,
+      :thing_id,
+      :thing_arn,
+      :thing_type_name,
+      :attributes,
+      :version)
+      include Aws::Structure
+    end
+
+    # The input for the DescribeThingType operation.
+    #
+    # @note When making an API call, you may pass DescribeThingTypeRequest
+    #   data as a hash:
+    #
+    #       {
+    #         thing_type_name: "ThingTypeName", # required
+    #       }
+    #
+    # @!attribute [rw] thing_type_name
+    #   The name of the thing type.
+    #   @return [String]
+    #
+    class DescribeThingTypeRequest < Struct.new(
+      :thing_type_name)
+      include Aws::Structure
+    end
+
+    # The output for the DescribeThingType operation.
+    #
+    # @!attribute [rw] thing_type_name
+    #   The name of the thing type.
+    #   @return [String]
+    #
+    # @!attribute [rw] thing_type_id
+    #   The thing type ID.
+    #   @return [String]
+    #
+    # @!attribute [rw] thing_type_arn
+    #   The thing type ARN.
+    #   @return [String]
+    #
+    # @!attribute [rw] thing_type_properties
+    #   The ThingTypeProperties contains information about the thing type
+    #   including description, and a list of searchable thing attribute
+    #   names.
+    #   @return [Types::ThingTypeProperties]
+    #
+    # @!attribute [rw] thing_type_metadata
+    #   The ThingTypeMetadata contains additional information about the
+    #   thing type including: creation date and time, a value indicating
+    #   whether the thing type is deprecated, and a date and time when it
+    #   was deprecated.
+    #   @return [Types::ThingTypeMetadata]
+    #
+    class DescribeThingTypeResponse < Struct.new(
+      :thing_type_name,
+      :thing_type_id,
+      :thing_type_arn,
+      :thing_type_properties,
+      :thing_type_metadata)
+      include Aws::Structure
+    end
+
+    # @note When making an API call, you may pass DetachPolicyRequest
+    #   data as a hash:
+    #
+    #       {
+    #         policy_name: "PolicyName", # required
+    #         target: "PolicyTarget", # required
+    #       }
+    #
+    # @!attribute [rw] policy_name
+    #   The policy to detach.
+    #   @return [String]
+    #
+    # @!attribute [rw] target
+    #   The target from which the policy will be detached.
+    #   @return [String]
+    #
+    class DetachPolicyRequest < Struct.new(
+      :policy_name,
+      :target)
+      include Aws::Structure
+    end
+
+    # The input for the DetachPrincipalPolicy operation.
+    #
+    # @note When making an API call, you may pass DetachPrincipalPolicyRequest
+    #   data as a hash:
+    #
+    #       {
+    #         policy_name: "PolicyName", # required
     #         principal: "Principal", # required
     #       }
     #
@@ -1529,6 +2588,27 @@ module Aws::IoT
       include Aws::Structure
     end
 
+    # The policy that has the effect on the authorization results.
+    #
+    # @!attribute [rw] policy_name
+    #   The policy name.
+    #   @return [String]
+    #
+    # @!attribute [rw] policy_arn
+    #   The policy ARN.
+    #   @return [String]
+    #
+    # @!attribute [rw] policy_document
+    #   The IAM policy document.
+    #   @return [String]
+    #
+    class EffectivePolicy < Struct.new(
+      :policy_name,
+      :policy_arn,
+      :policy_document)
+      include Aws::Structure
+    end
+
     # Describes an action that writes data to an Amazon Elasticsearch
     # Service domain.
     #
@@ -1590,6 +2670,17 @@ module Aws::IoT
       include Aws::Structure
     end
 
+    # Information that explicitly denies authorization.
+    #
+    # @!attribute [rw] policies
+    #   The policies that denied the authorization.
+    #   @return [Array<Types::Policy>]
+    #
+    class ExplicitDeny < Struct.new(
+      :policies)
+      include Aws::Structure
+    end
+
     # Describes an action that writes data to an Amazon Kinesis Firehose
     # stream.
     #
@@ -1603,7 +2694,7 @@ module Aws::IoT
     #       }
     #
     # @!attribute [rw] role_arn
-    #   The IAM role that grants access to the Amazon Kinesis Firehost
+    #   The IAM role that grants access to the Amazon Kinesis Firehose
     #   stream.
     #   @return [String]
     #
@@ -1624,29 +2715,104 @@ module Aws::IoT
       include Aws::Structure
     end
 
-    # The input for the GetLoggingOptions operation.
+    # @note When making an API call, you may pass GetEffectivePoliciesRequest
+    #   data as a hash:
     #
-    # @api private
+    #       {
+    #         principal: "Principal",
+    #         cognito_identity_pool_id: "CognitoIdentityPoolId",
+    #         thing_name: "ThingName",
+    #       }
     #
-    class GetLoggingOptionsRequest < Aws::EmptyStructure; end
-
-    # The output from the GetLoggingOptions operation.
+    # @!attribute [rw] principal
+    #   The principal.
+    #   @return [String]
     #
-    # @!attribute [rw] role_arn
-    #   The ARN of the IAM role that grants access.
+    # @!attribute [rw] cognito_identity_pool_id
+    #   The Cognito identity pool ID.
     #   @return [String]
     #
-    # @!attribute [rw] log_level
-    #   The logging level.
+    # @!attribute [rw] thing_name
+    #   The thing name.
     #   @return [String]
     #
-    class GetLoggingOptionsResponse < Struct.new(
-      :role_arn,
-      :log_level)
+    class GetEffectivePoliciesRequest < Struct.new(
+      :principal,
+      :cognito_identity_pool_id,
+      :thing_name)
       include Aws::Structure
     end
 
-    # The input for the GetPolicy operation.
+    # @!attribute [rw] effective_policies
+    #   The effective policies.
+    #   @return [Array<Types::EffectivePolicy>]
+    #
+    class GetEffectivePoliciesResponse < Struct.new(
+      :effective_policies)
+      include Aws::Structure
+    end
+
+    # @api private
+    #
+    class GetIndexingConfigurationRequest < Aws::EmptyStructure; end
+
+    # @!attribute [rw] thing_indexing_configuration
+    #   Thing indexing configuration.
+    #   @return [Types::ThingIndexingConfiguration]
+    #
+    class GetIndexingConfigurationResponse < Struct.new(
+      :thing_indexing_configuration)
+      include Aws::Structure
+    end
+
+    # @note When making an API call, you may pass GetJobDocumentRequest
+    #   data as a hash:
+    #
+    #       {
+    #         job_id: "JobId", # required
+    #       }
+    #
+    # @!attribute [rw] job_id
+    #   The unique identifier you assigned to this job when it was created.
+    #   @return [String]
+    #
+    class GetJobDocumentRequest < Struct.new(
+      :job_id)
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] document
+    #   The job document content.
+    #   @return [String]
+    #
+    class GetJobDocumentResponse < Struct.new(
+      :document)
+      include Aws::Structure
+    end
+
+    # The input for the GetLoggingOptions operation.
+    #
+    # @api private
+    #
+    class GetLoggingOptionsRequest < Aws::EmptyStructure; end
+
+    # The output from the GetLoggingOptions operation.
+    #
+    # @!attribute [rw] role_arn
+    #   The ARN of the IAM role that grants access.
+    #   @return [String]
+    #
+    # @!attribute [rw] log_level
+    #   The logging level.
+    #   @return [String]
+    #
+    class GetLoggingOptionsResponse < Struct.new(
+      :role_arn,
+      :log_level)
+      include Aws::Structure
+    end
+
+    # The input for the GetPolicy operation.
     #
     # @note When making an API call, you may pass GetPolicyRequest
     #   data as a hash:
@@ -1796,6 +2962,401 @@ module Aws::IoT
       include Aws::Structure
     end
 
+    # @api private
+    #
+    class GetV2LoggingOptionsRequest < Aws::EmptyStructure; end
+
+    # @!attribute [rw] role_arn
+    #   The IAM role ARN AWS IoT uses to write to your CloudWatch logs.
+    #   @return [String]
+    #
+    # @!attribute [rw] default_log_level
+    #   The default log level.
+    #   @return [String]
+    #
+    # @!attribute [rw] disable_all_logs
+    #   Disables all logs.
+    #   @return [Boolean]
+    #
+    class GetV2LoggingOptionsResponse < Struct.new(
+      :role_arn,
+      :default_log_level,
+      :disable_all_logs)
+      include Aws::Structure
+    end
+
+    # The name and ARN of a group.
+    #
+    # @!attribute [rw] group_name
+    #   The group name.
+    #   @return [String]
+    #
+    # @!attribute [rw] group_arn
+    #   The group ARN.
+    #   @return [String]
+    #
+    class GroupNameAndArn < Struct.new(
+      :group_name,
+      :group_arn)
+      include Aws::Structure
+    end
+
+    # Information that implicitly denies authorization. When policy doesn't
+    # explicitly deny or allow an action on a resource it is considered an
+    # implicit deny.
+    #
+    # @!attribute [rw] policies
+    #   Policies that don't contain a matching allow or deny statement for
+    #   the specified action on the specified resource.
+    #   @return [Array<Types::Policy>]
+    #
+    class ImplicitDeny < Struct.new(
+      :policies)
+      include Aws::Structure
+    end
+
+    # The `Job` object contains details about a job.
+    #
+    # @!attribute [rw] job_arn
+    #   An ARN identifying the job with format
+    #   "arn:aws:iot:region:account:job/jobId".
+    #   @return [String]
+    #
+    # @!attribute [rw] job_id
+    #   The unique identifier you assigned to this job when it was created.
+    #   @return [String]
+    #
+    # @!attribute [rw] target_selection
+    #   Specifies whether the job will continue to run (CONTINUOUS), or will
+    #   be complete after all those things specified as targets have
+    #   completed the job (SNAPSHOT). If continuous, the job may also be run
+    #   on a thing when a change is detected in a target. For example, a job
+    #   will run on a device when the thing representing the device is added
+    #   to a target group, even after the job was completed by all things
+    #   originally in the group.
+    #   @return [String]
+    #
+    # @!attribute [rw] status
+    #   The status of the job, one of `IN_PROGRESS`, `CANCELED`, or
+    #   `COMPLETED`.
+    #   @return [String]
+    #
+    # @!attribute [rw] comment
+    #   If the job was updated, describes the reason for the update.
+    #   @return [String]
+    #
+    # @!attribute [rw] targets
+    #   A list of IoT things and thing groups to which the job should be
+    #   sent.
+    #   @return [Array<String>]
+    #
+    # @!attribute [rw] description
+    #   A short text description of the job.
+    #   @return [String]
+    #
+    # @!attribute [rw] presigned_url_config
+    #   Configuration for pre-signed S3 URLs.
+    #   @return [Types::PresignedUrlConfig]
+    #
+    # @!attribute [rw] job_executions_rollout_config
+    #   Allows you to create a staged rollout of a job.
+    #   @return [Types::JobExecutionsRolloutConfig]
+    #
+    # @!attribute [rw] created_at
+    #   The time, in milliseconds since the epoch, when the job was created.
+    #   @return [Time]
+    #
+    # @!attribute [rw] last_updated_at
+    #   The time, in milliseconds since the epoch, when the job was last
+    #   updated.
+    #   @return [Time]
+    #
+    # @!attribute [rw] completed_at
+    #   The time, in milliseconds since the epoch, when the job was
+    #   completed.
+    #   @return [Time]
+    #
+    # @!attribute [rw] job_process_details
+    #   Details about the job process.
+    #   @return [Types::JobProcessDetails]
+    #
+    # @!attribute [rw] document_parameters
+    #   The parameters specified for the job document.
+    #   @return [Hash<String,String>]
+    #
+    class Job < Struct.new(
+      :job_arn,
+      :job_id,
+      :target_selection,
+      :status,
+      :comment,
+      :targets,
+      :description,
+      :presigned_url_config,
+      :job_executions_rollout_config,
+      :created_at,
+      :last_updated_at,
+      :completed_at,
+      :job_process_details,
+      :document_parameters)
+      include Aws::Structure
+    end
+
+    # The job execution object represents the execution of a job on a
+    # particular device.
+    #
+    # @!attribute [rw] job_id
+    #   The unique identifier you assigned to the job when it was created.
+    #   @return [String]
+    #
+    # @!attribute [rw] status
+    #   The status of the job execution (IN\_PROGRESS, QUEUED, FAILED,
+    #   SUCCESS, CANCELED, or REJECTED).
+    #   @return [String]
+    #
+    # @!attribute [rw] status_details
+    #   A collection of name/value pairs that describe the status of the job
+    #   execution.
+    #   @return [Types::JobExecutionStatusDetails]
+    #
+    # @!attribute [rw] thing_arn
+    #   The ARN of the thing on which the job execution is running.
+    #   @return [String]
+    #
+    # @!attribute [rw] queued_at
+    #   The time, in milliseconds since the epoch, when the job execution
+    #   was queued.
+    #   @return [Time]
+    #
+    # @!attribute [rw] started_at
+    #   The time, in milliseconds since the epoch, when the job execution
+    #   started.
+    #   @return [Time]
+    #
+    # @!attribute [rw] last_updated_at
+    #   The time, in milliseconds since the epoch, when the job execution
+    #   was last updated.
+    #   @return [Time]
+    #
+    # @!attribute [rw] execution_number
+    #   A string (consisting of the digits "0" through "9") which
+    #   identifies this particular job execution on this particular device.
+    #   It can be used in commands which return or update job execution
+    #   information.
+    #   @return [Integer]
+    #
+    class JobExecution < Struct.new(
+      :job_id,
+      :status,
+      :status_details,
+      :thing_arn,
+      :queued_at,
+      :started_at,
+      :last_updated_at,
+      :execution_number)
+      include Aws::Structure
+    end
+
+    # Details of the job execution status.
+    #
+    # @!attribute [rw] details_map
+    #   The job execution status.
+    #   @return [Hash<String,String>]
+    #
+    class JobExecutionStatusDetails < Struct.new(
+      :details_map)
+      include Aws::Structure
+    end
+
+    # The job execution summary.
+    #
+    # @!attribute [rw] status
+    #   The status of the job execution.
+    #   @return [String]
+    #
+    # @!attribute [rw] queued_at
+    #   The time, in milliseconds since the epoch, when the job execution
+    #   was queued.
+    #   @return [Time]
+    #
+    # @!attribute [rw] started_at
+    #   The time, in milliseconds since the epoch, when the job execution
+    #   started.
+    #   @return [Time]
+    #
+    # @!attribute [rw] last_updated_at
+    #   The time, in milliseconds since the epoch, when the job execution
+    #   was last updated.
+    #   @return [Time]
+    #
+    # @!attribute [rw] execution_number
+    #   A string (consisting of the digits "0" through "9") which
+    #   identifies this particular job execution on this particular device.
+    #   It can be used later in commands which return or update job
+    #   execution information.
+    #   @return [Integer]
+    #
+    class JobExecutionSummary < Struct.new(
+      :status,
+      :queued_at,
+      :started_at,
+      :last_updated_at,
+      :execution_number)
+      include Aws::Structure
+    end
+
+    # Contains a summary of information about job executions for a specific
+    # job.
+    #
+    # @!attribute [rw] thing_arn
+    #   The ARN of the thing on which the job execution is running.
+    #   @return [String]
+    #
+    # @!attribute [rw] job_execution_summary
+    #   Contains a subset of information about a job execution.
+    #   @return [Types::JobExecutionSummary]
+    #
+    class JobExecutionSummaryForJob < Struct.new(
+      :thing_arn,
+      :job_execution_summary)
+      include Aws::Structure
+    end
+
+    # The job execution summary for a thing.
+    #
+    # @!attribute [rw] job_id
+    #   The unique identifier you assigned to this job when it was created.
+    #   @return [String]
+    #
+    # @!attribute [rw] job_execution_summary
+    #   Contains a subset of information about a job execution.
+    #   @return [Types::JobExecutionSummary]
+    #
+    class JobExecutionSummaryForThing < Struct.new(
+      :job_id,
+      :job_execution_summary)
+      include Aws::Structure
+    end
+
+    # Allows you to create a staged rollout of a job.
+    #
+    # @note When making an API call, you may pass JobExecutionsRolloutConfig
+    #   data as a hash:
+    #
+    #       {
+    #         maximum_per_minute: 1,
+    #       }
+    #
+    # @!attribute [rw] maximum_per_minute
+    #   The maximum number of things that will be notified of a pending job,
+    #   per minute. This parameter allows you to create a staged rollout.
+    #   @return [Integer]
+    #
+    class JobExecutionsRolloutConfig < Struct.new(
+      :maximum_per_minute)
+      include Aws::Structure
+    end
+
+    # The job process details.
+    #
+    # @!attribute [rw] processing_targets
+    #   The devices on which the job is executing.
+    #   @return [Array<String>]
+    #
+    # @!attribute [rw] number_of_canceled_things
+    #   The number of things that cancelled the job.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] number_of_succeeded_things
+    #   The number of things which successfully completed the job.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] number_of_failed_things
+    #   The number of things that failed executing the job.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] number_of_rejected_things
+    #   The number of things that rejected the job.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] number_of_queued_things
+    #   The number of things that are awaiting execution of the job.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] number_of_in_progress_things
+    #   The number of things currently executing the job.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] number_of_removed_things
+    #   The number of things that are no longer scheduled to execute the job
+    #   because they have been deleted or have been removed from the group
+    #   that was a target of the job.
+    #   @return [Integer]
+    #
+    class JobProcessDetails < Struct.new(
+      :processing_targets,
+      :number_of_canceled_things,
+      :number_of_succeeded_things,
+      :number_of_failed_things,
+      :number_of_rejected_things,
+      :number_of_queued_things,
+      :number_of_in_progress_things,
+      :number_of_removed_things)
+      include Aws::Structure
+    end
+
+    # The job summary.
+    #
+    # @!attribute [rw] job_arn
+    #   The job ARN.
+    #   @return [String]
+    #
+    # @!attribute [rw] job_id
+    #   The unique identifier you assigned to this job when it was created.
+    #   @return [String]
+    #
+    # @!attribute [rw] thing_group_id
+    #   The ID of the thing group.
+    #   @return [String]
+    #
+    # @!attribute [rw] target_selection
+    #   Specifies whether the job will continue to run (CONTINUOUS), or will
+    #   be complete after all those things specified as targets have
+    #   completed the job (SNAPSHOT). If continuous, the job may also be run
+    #   on a thing when a change is detected in a target. For example, a job
+    #   will run on a thing when the thing is added to a target group, even
+    #   after the job was completed by all things originally in the group.
+    #   @return [String]
+    #
+    # @!attribute [rw] status
+    #   The job summary status.
+    #   @return [String]
+    #
+    # @!attribute [rw] created_at
+    #   The time, in milliseconds since the epoch, when the job was created.
+    #   @return [Time]
+    #
+    # @!attribute [rw] last_updated_at
+    #   The time, in milliseconds since the epoch, when the job was last
+    #   updated.
+    #   @return [Time]
+    #
+    # @!attribute [rw] completed_at
+    #   The time, in milliseconds since the epoch, when the job completed.
+    #   @return [Time]
+    #
+    class JobSummary < Struct.new(
+      :job_arn,
+      :job_id,
+      :thing_group_id,
+      :target_selection,
+      :status,
+      :created_at,
+      :last_updated_at,
+      :completed_at)
+      include Aws::Structure
+    end
+
     # Describes a key pair.
     #
     # @!attribute [rw] public_key
@@ -1861,41 +3422,138 @@ module Aws::IoT
       include Aws::Structure
     end
 
-    # Input for the ListCACertificates operation.
-    #
-    # @note When making an API call, you may pass ListCACertificatesRequest
+    # @note When making an API call, you may pass ListAttachedPoliciesRequest
     #   data as a hash:
     #
     #       {
-    #         page_size: 1,
+    #         target: "PolicyTarget", # required
+    #         recursive: false,
     #         marker: "Marker",
-    #         ascending_order: false,
+    #         page_size: 1,
     #       }
     #
-    # @!attribute [rw] page_size
-    #   The result page size.
-    #   @return [Integer]
+    # @!attribute [rw] target
+    #   The group for which the policies will be listed.
+    #   @return [String]
+    #
+    # @!attribute [rw] recursive
+    #   When true, recursively list attached policies.
+    #   @return [Boolean]
     #
     # @!attribute [rw] marker
-    #   The marker for the next set of results.
+    #   The token to retrieve the next set of results.
     #   @return [String]
     #
-    # @!attribute [rw] ascending_order
-    #   Determines the order of the results.
-    #   @return [Boolean]
+    # @!attribute [rw] page_size
+    #   The maximum number of results to be returned per request.
+    #   @return [Integer]
     #
-    class ListCACertificatesRequest < Struct.new(
-      :page_size,
+    class ListAttachedPoliciesRequest < Struct.new(
+      :target,
+      :recursive,
       :marker,
-      :ascending_order)
+      :page_size)
       include Aws::Structure
     end
 
-    # The output from the ListCACertificates operation.
-    #
-    # @!attribute [rw] certificates
-    #   The CA certificates registered in your AWS account.
-    #   @return [Array<Types::CACertificate>]
+    # @!attribute [rw] policies
+    #   The policies.
+    #   @return [Array<Types::Policy>]
+    #
+    # @!attribute [rw] next_marker
+    #   The token to retrieve the next set of results, or ``null`` if
+    #   there are no more results.
+    #   @return [String]
+    #
+    class ListAttachedPoliciesResponse < Struct.new(
+      :policies,
+      :next_marker)
+      include Aws::Structure
+    end
+
+    # @note When making an API call, you may pass ListAuthorizersRequest
+    #   data as a hash:
+    #
+    #       {
+    #         page_size: 1,
+    #         marker: "Marker",
+    #         ascending_order: false,
+    #         status: "ACTIVE", # accepts ACTIVE, INACTIVE
+    #       }
+    #
+    # @!attribute [rw] page_size
+    #   The maximum number of results to return at one time.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] marker
+    #   A marker used to get the next set of results.
+    #   @return [String]
+    #
+    # @!attribute [rw] ascending_order
+    #   Return the list of authorizers in ascending alphabetical order.
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] status
+    #   The status of the list authorizers request.
+    #   @return [String]
+    #
+    class ListAuthorizersRequest < Struct.new(
+      :page_size,
+      :marker,
+      :ascending_order,
+      :status)
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] authorizers
+    #   The authorizers.
+    #   @return [Array<Types::AuthorizerSummary>]
+    #
+    # @!attribute [rw] next_marker
+    #   A marker used to get the next set of results.
+    #   @return [String]
+    #
+    class ListAuthorizersResponse < Struct.new(
+      :authorizers,
+      :next_marker)
+      include Aws::Structure
+    end
+
+    # Input for the ListCACertificates operation.
+    #
+    # @note When making an API call, you may pass ListCACertificatesRequest
+    #   data as a hash:
+    #
+    #       {
+    #         page_size: 1,
+    #         marker: "Marker",
+    #         ascending_order: false,
+    #       }
+    #
+    # @!attribute [rw] page_size
+    #   The result page size.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] marker
+    #   The marker for the next set of results.
+    #   @return [String]
+    #
+    # @!attribute [rw] ascending_order
+    #   Determines the order of the results.
+    #   @return [Boolean]
+    #
+    class ListCACertificatesRequest < Struct.new(
+      :page_size,
+      :marker,
+      :ascending_order)
+      include Aws::Structure
+    end
+
+    # The output from the ListCACertificates operation.
+    #
+    # @!attribute [rw] certificates
+    #   The CA certificates registered in your AWS account.
+    #   @return [Array<Types::CACertificate>]
     #
     # @!attribute [rw] next_marker
     #   The current position within the list of CA certificates.
@@ -2011,6 +3669,212 @@ module Aws::IoT
       include Aws::Structure
     end
 
+    # @note When making an API call, you may pass ListIndicesRequest
+    #   data as a hash:
+    #
+    #       {
+    #         next_token: "NextToken",
+    #         max_results: 1,
+    #       }
+    #
+    # @!attribute [rw] next_token
+    #   The token used to get the next set of results, or **null** if there
+    #   are no additional results.
+    #   @return [String]
+    #
+    # @!attribute [rw] max_results
+    #   The maximum number of results to return at one time.
+    #   @return [Integer]
+    #
+    class ListIndicesRequest < Struct.new(
+      :next_token,
+      :max_results)
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] index_names
+    #   The index names.
+    #   @return [Array<String>]
+    #
+    # @!attribute [rw] next_token
+    #   The token used to get the next set of results, or **null** if there
+    #   are no additional results.
+    #   @return [String]
+    #
+    class ListIndicesResponse < Struct.new(
+      :index_names,
+      :next_token)
+      include Aws::Structure
+    end
+
+    # @note When making an API call, you may pass ListJobExecutionsForJobRequest
+    #   data as a hash:
+    #
+    #       {
+    #         job_id: "JobId", # required
+    #         status: "QUEUED", # accepts QUEUED, IN_PROGRESS, SUCCEEDED, FAILED, REJECTED, REMOVED, CANCELED
+    #         max_results: 1,
+    #         next_token: "NextToken",
+    #       }
+    #
+    # @!attribute [rw] job_id
+    #   The unique identifier you assigned to this job when it was created.
+    #   @return [String]
+    #
+    # @!attribute [rw] status
+    #   The status of the job.
+    #   @return [String]
+    #
+    # @!attribute [rw] max_results
+    #   The maximum number of results to be returned per request.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] next_token
+    #   The token to retrieve the next set of results.
+    #   @return [String]
+    #
+    class ListJobExecutionsForJobRequest < Struct.new(
+      :job_id,
+      :status,
+      :max_results,
+      :next_token)
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] execution_summaries
+    #   A list of job execution summaries.
+    #   @return [Array<Types::JobExecutionSummaryForJob>]
+    #
+    # @!attribute [rw] next_token
+    #   The token for the next set of results, or **null** if there are no
+    #   additional results.
+    #   @return [String]
+    #
+    class ListJobExecutionsForJobResponse < Struct.new(
+      :execution_summaries,
+      :next_token)
+      include Aws::Structure
+    end
+
+    # @note When making an API call, you may pass ListJobExecutionsForThingRequest
+    #   data as a hash:
+    #
+    #       {
+    #         thing_name: "ThingName", # required
+    #         status: "QUEUED", # accepts QUEUED, IN_PROGRESS, SUCCEEDED, FAILED, REJECTED, REMOVED, CANCELED
+    #         max_results: 1,
+    #         next_token: "NextToken",
+    #       }
+    #
+    # @!attribute [rw] thing_name
+    #   The thing name.
+    #   @return [String]
+    #
+    # @!attribute [rw] status
+    #   An optional filter that lets you search for jobs that have the
+    #   specified status.
+    #   @return [String]
+    #
+    # @!attribute [rw] max_results
+    #   The maximum number of results to be returned per request.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] next_token
+    #   The token to retrieve the next set of results.
+    #   @return [String]
+    #
+    class ListJobExecutionsForThingRequest < Struct.new(
+      :thing_name,
+      :status,
+      :max_results,
+      :next_token)
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] execution_summaries
+    #   A list of job execution summaries.
+    #   @return [Array<Types::JobExecutionSummaryForThing>]
+    #
+    # @!attribute [rw] next_token
+    #   The token for the next set of results, or **null** if there are no
+    #   additional results.
+    #   @return [String]
+    #
+    class ListJobExecutionsForThingResponse < Struct.new(
+      :execution_summaries,
+      :next_token)
+      include Aws::Structure
+    end
+
+    # @note When making an API call, you may pass ListJobsRequest
+    #   data as a hash:
+    #
+    #       {
+    #         status: "IN_PROGRESS", # accepts IN_PROGRESS, CANCELED, COMPLETED
+    #         target_selection: "CONTINUOUS", # accepts CONTINUOUS, SNAPSHOT
+    #         max_results: 1,
+    #         next_token: "NextToken",
+    #         thing_group_name: "ThingGroupName",
+    #         thing_group_id: "ThingGroupId",
+    #       }
+    #
+    # @!attribute [rw] status
+    #   An optional filter that lets you search for jobs that have the
+    #   specified status.
+    #   @return [String]
+    #
+    # @!attribute [rw] target_selection
+    #   Specifies whether the job will continue to run (CONTINUOUS), or will
+    #   be complete after all those things specified as targets have
+    #   completed the job (SNAPSHOT). If continuous, the job may also be run
+    #   on a thing when a change is detected in a target. For example, a job
+    #   will run on a thing when the thing is added to a target group, even
+    #   after the job was completed by all things originally in the group.
+    #   @return [String]
+    #
+    # @!attribute [rw] max_results
+    #   The maximum number of results to return per request.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] next_token
+    #   The token to retrieve the next set of results.
+    #   @return [String]
+    #
+    # @!attribute [rw] thing_group_name
+    #   A filter that limits the returned jobs to those for the specified
+    #   group.
+    #   @return [String]
+    #
+    # @!attribute [rw] thing_group_id
+    #   A filter that limits the returned jobs to those for the specified
+    #   group.
+    #   @return [String]
+    #
+    class ListJobsRequest < Struct.new(
+      :status,
+      :target_selection,
+      :max_results,
+      :next_token,
+      :thing_group_name,
+      :thing_group_id)
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] jobs
+    #   A list of jobs.
+    #   @return [Array<Types::JobSummary>]
+    #
+    # @!attribute [rw] next_token
+    #   The token for the next set of results, or **null** if there are no
+    #   additional results.
+    #   @return [String]
+    #
+    class ListJobsResponse < Struct.new(
+      :jobs,
+      :next_token)
+      include Aws::Structure
+    end
+
     # The input to the ListOutgoingCertificates operation.
     #
     # @note When making an API call, you may pass ListOutgoingCertificatesRequest
@@ -2045,7 +3909,7 @@ module Aws::IoT
     # The output from the ListOutgoingCertificates operation.
     #
     # @!attribute [rw] outgoing_certificates
-    #   The certificates that are being transfered but not yet accepted.
+    #   The certificates that are being transferred but not yet accepted.
     #   @return [Array<Types::OutgoingCertificate>]
     #
     # @!attribute [rw] next_marker
@@ -2173,120 +4037,306 @@ module Aws::IoT
     #   The policy name.
     #   @return [String]
     #
-    class ListPolicyVersionsRequest < Struct.new(
-      :policy_name)
+    class ListPolicyVersionsRequest < Struct.new(
+      :policy_name)
+      include Aws::Structure
+    end
+
+    # The output from the ListPolicyVersions operation.
+    #
+    # @!attribute [rw] policy_versions
+    #   The policy versions.
+    #   @return [Array<Types::PolicyVersion>]
+    #
+    class ListPolicyVersionsResponse < Struct.new(
+      :policy_versions)
+      include Aws::Structure
+    end
+
+    # The input for the ListPrincipalPolicies operation.
+    #
+    # @note When making an API call, you may pass ListPrincipalPoliciesRequest
+    #   data as a hash:
+    #
+    #       {
+    #         principal: "Principal", # required
+    #         marker: "Marker",
+    #         page_size: 1,
+    #         ascending_order: false,
+    #       }
+    #
+    # @!attribute [rw] principal
+    #   The principal.
+    #   @return [String]
+    #
+    # @!attribute [rw] marker
+    #   The marker for the next set of results.
+    #   @return [String]
+    #
+    # @!attribute [rw] page_size
+    #   The result page size.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] ascending_order
+    #   Specifies the order for results. If true, results are returned in
+    #   ascending creation order.
+    #   @return [Boolean]
+    #
+    class ListPrincipalPoliciesRequest < Struct.new(
+      :principal,
+      :marker,
+      :page_size,
+      :ascending_order)
+      include Aws::Structure
+    end
+
+    # The output from the ListPrincipalPolicies operation.
+    #
+    # @!attribute [rw] policies
+    #   The policies.
+    #   @return [Array<Types::Policy>]
+    #
+    # @!attribute [rw] next_marker
+    #   The marker for the next set of results, or null if there are no
+    #   additional results.
+    #   @return [String]
+    #
+    class ListPrincipalPoliciesResponse < Struct.new(
+      :policies,
+      :next_marker)
+      include Aws::Structure
+    end
+
+    # The input for the ListPrincipalThings operation.
+    #
+    # @note When making an API call, you may pass ListPrincipalThingsRequest
+    #   data as a hash:
+    #
+    #       {
+    #         next_token: "NextToken",
+    #         max_results: 1,
+    #         principal: "Principal", # required
+    #       }
+    #
+    # @!attribute [rw] next_token
+    #   The token used to get the next set of results, or **null** if there
+    #   are no additional results.
+    #   @return [String]
+    #
+    # @!attribute [rw] max_results
+    #   The maximum number of results to return in this operation.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] principal
+    #   The principal.
+    #   @return [String]
+    #
+    class ListPrincipalThingsRequest < Struct.new(
+      :next_token,
+      :max_results,
+      :principal)
+      include Aws::Structure
+    end
+
+    # The output from the ListPrincipalThings operation.
+    #
+    # @!attribute [rw] things
+    #   The things.
+    #   @return [Array<String>]
+    #
+    # @!attribute [rw] next_token
+    #   The token used to get the next set of results, or **null** if there
+    #   are no additional results.
+    #   @return [String]
+    #
+    class ListPrincipalThingsResponse < Struct.new(
+      :things,
+      :next_token)
+      include Aws::Structure
+    end
+
+    # @note When making an API call, you may pass ListRoleAliasesRequest
+    #   data as a hash:
+    #
+    #       {
+    #         page_size: 1,
+    #         marker: "Marker",
+    #         ascending_order: false,
+    #       }
+    #
+    # @!attribute [rw] page_size
+    #   The maximum number of results to return at one time.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] marker
+    #   A marker used to get the next set of results.
+    #   @return [String]
+    #
+    # @!attribute [rw] ascending_order
+    #   Return the list of role aliases in ascending alphabetical order.
+    #   @return [Boolean]
+    #
+    class ListRoleAliasesRequest < Struct.new(
+      :page_size,
+      :marker,
+      :ascending_order)
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] role_aliases
+    #   The role aliases.
+    #   @return [Array<String>]
+    #
+    # @!attribute [rw] next_marker
+    #   A marker used to get the next set of results.
+    #   @return [String]
+    #
+    class ListRoleAliasesResponse < Struct.new(
+      :role_aliases,
+      :next_marker)
+      include Aws::Structure
+    end
+
+    # @note When making an API call, you may pass ListTargetsForPolicyRequest
+    #   data as a hash:
+    #
+    #       {
+    #         policy_name: "PolicyName", # required
+    #         marker: "Marker",
+    #         page_size: 1,
+    #       }
+    #
+    # @!attribute [rw] policy_name
+    #   The policy name.
+    #   @return [String]
+    #
+    # @!attribute [rw] marker
+    #   A marker used to get the next set of results.
+    #   @return [String]
+    #
+    # @!attribute [rw] page_size
+    #   The maximum number of results to return at one time.
+    #   @return [Integer]
+    #
+    class ListTargetsForPolicyRequest < Struct.new(
+      :policy_name,
+      :marker,
+      :page_size)
       include Aws::Structure
     end
 
-    # The output from the ListPolicyVersions operation.
+    # @!attribute [rw] targets
+    #   The policy targets.
+    #   @return [Array<String>]
     #
-    # @!attribute [rw] policy_versions
-    #   The policy versions.
-    #   @return [Array<Types::PolicyVersion>]
+    # @!attribute [rw] next_marker
+    #   A marker used to get the next set of results.
+    #   @return [String]
     #
-    class ListPolicyVersionsResponse < Struct.new(
-      :policy_versions)
+    class ListTargetsForPolicyResponse < Struct.new(
+      :targets,
+      :next_marker)
       include Aws::Structure
     end
 
-    # The input for the ListPrincipalPolicies operation.
-    #
-    # @note When making an API call, you may pass ListPrincipalPoliciesRequest
+    # @note When making an API call, you may pass ListThingGroupsForThingRequest
     #   data as a hash:
     #
     #       {
-    #         principal: "Principal", # required
-    #         marker: "Marker",
-    #         page_size: 1,
-    #         ascending_order: false,
+    #         thing_name: "ThingName", # required
+    #         next_token: "NextToken",
+    #         max_results: 1,
     #       }
     #
-    # @!attribute [rw] principal
-    #   The principal.
+    # @!attribute [rw] thing_name
+    #   The thing name.
     #   @return [String]
     #
-    # @!attribute [rw] marker
-    #   The marker for the next set of results.
+    # @!attribute [rw] next_token
+    #   The token used to get the next set of results, or **null** if there
+    #   are no additional results.
     #   @return [String]
     #
-    # @!attribute [rw] page_size
-    #   The result page size.
+    # @!attribute [rw] max_results
+    #   The maximum number of results to return at one time.
     #   @return [Integer]
     #
-    # @!attribute [rw] ascending_order
-    #   Specifies the order for results. If true, results are returned in
-    #   ascending creation order.
-    #   @return [Boolean]
-    #
-    class ListPrincipalPoliciesRequest < Struct.new(
-      :principal,
-      :marker,
-      :page_size,
-      :ascending_order)
+    class ListThingGroupsForThingRequest < Struct.new(
+      :thing_name,
+      :next_token,
+      :max_results)
       include Aws::Structure
     end
 
-    # The output from the ListPrincipalPolicies operation.
-    #
-    # @!attribute [rw] policies
-    #   The policies.
-    #   @return [Array<Types::Policy>]
+    # @!attribute [rw] thing_groups
+    #   The thing groups.
+    #   @return [Array<Types::GroupNameAndArn>]
     #
-    # @!attribute [rw] next_marker
-    #   The marker for the next set of results, or null if there are no
-    #   additional results.
+    # @!attribute [rw] next_token
+    #   The token used to get the next set of results, or **null** if there
+    #   are no additional results.
     #   @return [String]
     #
-    class ListPrincipalPoliciesResponse < Struct.new(
-      :policies,
-      :next_marker)
+    class ListThingGroupsForThingResponse < Struct.new(
+      :thing_groups,
+      :next_token)
       include Aws::Structure
     end
 
-    # The input for the ListPrincipalThings operation.
-    #
-    # @note When making an API call, you may pass ListPrincipalThingsRequest
+    # @note When making an API call, you may pass ListThingGroupsRequest
     #   data as a hash:
     #
     #       {
     #         next_token: "NextToken",
     #         max_results: 1,
-    #         principal: "Principal", # required
+    #         parent_group: "ThingGroupName",
+    #         name_prefix_filter: "ThingGroupName",
+    #         recursive: false,
     #       }
     #
     # @!attribute [rw] next_token
-    #   The token for the next set of results, or **null** if there are no
-    #   additional results.
+    #   The token used to get the next set of results, or **null** if there
+    #   are no additional results.
     #   @return [String]
     #
     # @!attribute [rw] max_results
-    #   The maximum number of results to return in this operation.
+    #   The maximum number of results to return at one time.
     #   @return [Integer]
     #
-    # @!attribute [rw] principal
-    #   The principal.
+    # @!attribute [rw] parent_group
+    #   A filter that limits the results to those with the specified parent
+    #   group.
     #   @return [String]
     #
-    class ListPrincipalThingsRequest < Struct.new(
+    # @!attribute [rw] name_prefix_filter
+    #   A filter that limits the results to those with the specified name
+    #   prefix.
+    #   @return [String]
+    #
+    # @!attribute [rw] recursive
+    #   If true, return child groups as well.
+    #   @return [Boolean]
+    #
+    class ListThingGroupsRequest < Struct.new(
       :next_token,
       :max_results,
-      :principal)
+      :parent_group,
+      :name_prefix_filter,
+      :recursive)
       include Aws::Structure
     end
 
-    # The output from the ListPrincipalThings operation.
-    #
-    # @!attribute [rw] things
-    #   The things.
-    #   @return [Array<String>]
+    # @!attribute [rw] thing_groups
+    #   The thing groups.
+    #   @return [Array<Types::GroupNameAndArn>]
     #
     # @!attribute [rw] next_token
-    #   The token for the next set of results, or **null** if there are no
-    #   additional results.
+    #   The token used to get the next set of results, or **null** if there
+    #   are no additional results.
     #   @return [String]
     #
-    class ListPrincipalThingsResponse < Struct.new(
-      :things,
+    class ListThingGroupsResponse < Struct.new(
+      :thing_groups,
       :next_token)
       include Aws::Structure
     end
@@ -2320,6 +4370,103 @@ module Aws::IoT
       include Aws::Structure
     end
 
+    # @note When making an API call, you may pass ListThingRegistrationTaskReportsRequest
+    #   data as a hash:
+    #
+    #       {
+    #         task_id: "TaskId", # required
+    #         report_type: "ERRORS", # required, accepts ERRORS, RESULTS
+    #         next_token: "NextToken",
+    #         max_results: 1,
+    #       }
+    #
+    # @!attribute [rw] task_id
+    #   The id of the task.
+    #   @return [String]
+    #
+    # @!attribute [rw] report_type
+    #   The type of task report.
+    #   @return [String]
+    #
+    # @!attribute [rw] next_token
+    #   The token to retrieve the next set of results.
+    #   @return [String]
+    #
+    # @!attribute [rw] max_results
+    #   The maximum number of results to return per request.
+    #   @return [Integer]
+    #
+    class ListThingRegistrationTaskReportsRequest < Struct.new(
+      :task_id,
+      :report_type,
+      :next_token,
+      :max_results)
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] resource_links
+    #   Links to the task resources.
+    #   @return [Array<String>]
+    #
+    # @!attribute [rw] report_type
+    #   The type of task report.
+    #   @return [String]
+    #
+    # @!attribute [rw] next_token
+    #   The token to retrieve the next set of results.
+    #   @return [String]
+    #
+    class ListThingRegistrationTaskReportsResponse < Struct.new(
+      :resource_links,
+      :report_type,
+      :next_token)
+      include Aws::Structure
+    end
+
+    # @note When making an API call, you may pass ListThingRegistrationTasksRequest
+    #   data as a hash:
+    #
+    #       {
+    #         next_token: "NextToken",
+    #         max_results: 1,
+    #         status: "InProgress", # accepts InProgress, Completed, Failed, Cancelled, Cancelling
+    #       }
+    #
+    # @!attribute [rw] next_token
+    #   The token used to get the next set of results, or **null** if there
+    #   are no additional results.
+    #   @return [String]
+    #
+    # @!attribute [rw] max_results
+    #   The maximum number of results to return at one time.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] status
+    #   The status of the bulk thing provisioning task.
+    #   @return [String]
+    #
+    class ListThingRegistrationTasksRequest < Struct.new(
+      :next_token,
+      :max_results,
+      :status)
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] task_ids
+    #   A list of bulk thing provisioning task IDs.
+    #   @return [Array<String>]
+    #
+    # @!attribute [rw] next_token
+    #   The token used to get the next set of results, or **null** if there
+    #   are no additional results.
+    #   @return [String]
+    #
+    class ListThingRegistrationTasksResponse < Struct.new(
+      :task_ids,
+      :next_token)
+      include Aws::Structure
+    end
+
     # The input for the ListThingTypes operation.
     #
     # @note When making an API call, you may pass ListThingTypesRequest
@@ -2368,6 +4515,57 @@ module Aws::IoT
       include Aws::Structure
     end
 
+    # @note When making an API call, you may pass ListThingsInThingGroupRequest
+    #   data as a hash:
+    #
+    #       {
+    #         thing_group_name: "ThingGroupName", # required
+    #         recursive: false,
+    #         next_token: "NextToken",
+    #         max_results: 1,
+    #       }
+    #
+    # @!attribute [rw] thing_group_name
+    #   The thing group name.
+    #   @return [String]
+    #
+    # @!attribute [rw] recursive
+    #   When true, list things in this thing group and in all child groups
+    #   as well.
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] next_token
+    #   The token used to get the next set of results, or **null** if there
+    #   are no additional results.
+    #   @return [String]
+    #
+    # @!attribute [rw] max_results
+    #   The maximum number of results to return at one time.
+    #   @return [Integer]
+    #
+    class ListThingsInThingGroupRequest < Struct.new(
+      :thing_group_name,
+      :recursive,
+      :next_token,
+      :max_results)
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] things
+    #   The things in the specified thing group.
+    #   @return [Array<String>]
+    #
+    # @!attribute [rw] next_token
+    #   The token used to get the next set of results, or **null** if there
+    #   are no additional results.
+    #   @return [String]
+    #
+    class ListThingsInThingGroupResponse < Struct.new(
+      :things,
+      :next_token)
+      include Aws::Structure
+    end
+
     # The input for the ListThings operation.
     #
     # @note When making an API call, you may pass ListThingsRequest
@@ -2382,8 +4580,8 @@ module Aws::IoT
     #       }
     #
     # @!attribute [rw] next_token
-    #   The token for the next set of results, or **null** if there are no
-    #   additional results.
+    #   The token used to get the next set of results, or **null** if there
+    #   are no additional results.
     #   @return [String]
     #
     # @!attribute [rw] max_results
@@ -2418,8 +4616,8 @@ module Aws::IoT
     #   @return [Array<Types::ThingAttribute>]
     #
     # @!attribute [rw] next_token
-    #   The token for the next set of results, or **null** if there are no
-    #   additional results.
+    #   The token used to get the next set of results, or **null** if there
+    #   are no additional results.
     #   @return [String]
     #
     class ListThingsResponse < Struct.new(
@@ -2480,6 +4678,91 @@ module Aws::IoT
       include Aws::Structure
     end
 
+    # @note When making an API call, you may pass ListV2LoggingLevelsRequest
+    #   data as a hash:
+    #
+    #       {
+    #         target_type: "DEFAULT", # accepts DEFAULT, THING_GROUP
+    #         next_token: "NextToken",
+    #         max_results: 1,
+    #       }
+    #
+    # @!attribute [rw] target_type
+    #   The type of resource for which you are configuring logging. Must be
+    #   `THING_Group`.
+    #   @return [String]
+    #
+    # @!attribute [rw] next_token
+    #   The token used to get the next set of results, or **null** if there
+    #   are no additional results.
+    #   @return [String]
+    #
+    # @!attribute [rw] max_results
+    #   The maximum number of results to return at one time.
+    #   @return [Integer]
+    #
+    class ListV2LoggingLevelsRequest < Struct.new(
+      :target_type,
+      :next_token,
+      :max_results)
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] log_target_configurations
+    #   The logging configuration for a target.
+    #   @return [Array<Types::LogTargetConfiguration>]
+    #
+    # @!attribute [rw] next_token
+    #   The token used to get the next set of results, or **null** if there
+    #   are no additional results.
+    #   @return [String]
+    #
+    class ListV2LoggingLevelsResponse < Struct.new(
+      :log_target_configurations,
+      :next_token)
+      include Aws::Structure
+    end
+
+    # A log target.
+    #
+    # @note When making an API call, you may pass LogTarget
+    #   data as a hash:
+    #
+    #       {
+    #         target_type: "DEFAULT", # required, accepts DEFAULT, THING_GROUP
+    #         target_name: "LogTargetName",
+    #       }
+    #
+    # @!attribute [rw] target_type
+    #   The target type.
+    #   @return [String]
+    #
+    # @!attribute [rw] target_name
+    #   The target name.
+    #   @return [String]
+    #
+    class LogTarget < Struct.new(
+      :target_type,
+      :target_name)
+      include Aws::Structure
+    end
+
+    # The target configuration.
+    #
+    # @!attribute [rw] log_target
+    #   A log target
+    #   @return [Types::LogTarget]
+    #
+    # @!attribute [rw] log_level
+    #   The logging level.
+    #   @return [String]
+    #
+    class LogTargetConfiguration < Struct.new(
+      :log_target,
+      :log_level)
+      include Aws::Structure
+    end
+
     # Describes the logging options payload.
     #
     # @note When making an API call, you may pass LoggingOptionsPayload
@@ -2495,7 +4778,7 @@ module Aws::IoT
     #   @return [String]
     #
     # @!attribute [rw] log_level
-    #   The logging level.
+    #   The log level.
     #   @return [String]
     #
     class LoggingOptionsPayload < Struct.new(
@@ -2504,7 +4787,7 @@ module Aws::IoT
       include Aws::Structure
     end
 
-    # A certificate that has been transfered but not yet accepted.
+    # A certificate that has been transferred but not yet accepted.
     #
     # @!attribute [rw] certificate_arn
     #   The certificate ARN.
@@ -2577,6 +4860,34 @@ module Aws::IoT
       include Aws::Structure
     end
 
+    # Configuration for pre-signed S3 URLs.
+    #
+    # @note When making an API call, you may pass PresignedUrlConfig
+    #   data as a hash:
+    #
+    #       {
+    #         role_arn: "RoleArn",
+    #         expires_in_sec: 1,
+    #       }
+    #
+    # @!attribute [rw] role_arn
+    #   The ARN of an IAM role that grants grants permission to download
+    #   files from the S3 bucket where the job data/updates are stored. The
+    #   role must also grant permission for IoT to download the files.
+    #   @return [String]
+    #
+    # @!attribute [rw] expires_in_sec
+    #   How long (in seconds) pre-signed URLs are valid. Valid values are 60
+    #   - 3600, the default value is 3600 seconds. Pre-signed URLs are
+    #   generated when Jobs receives an MQTT request for the job document.
+    #   @return [Integer]
+    #
+    class PresignedUrlConfig < Struct.new(
+      :role_arn,
+      :expires_in_sec)
+      include Aws::Structure
+    end
+
     # The input for the DynamoActionVS action that specifies the DynamoDB
     # table to which the message data will be written.
     #
@@ -2606,6 +4917,10 @@ module Aws::IoT
     #         verification_certificate: "CertificatePem", # required
     #         set_as_active: false,
     #         allow_auto_registration: false,
+    #         registration_config: {
+    #           template_body: "TemplateBody",
+    #           role_arn: "RoleArn",
+    #         },
     #       }
     #
     # @!attribute [rw] ca_certificate
@@ -2626,11 +4941,16 @@ module Aws::IoT
     #   device certificates.
     #   @return [Boolean]
     #
+    # @!attribute [rw] registration_config
+    #   Information about the registration configuration.
+    #   @return [Types::RegistrationConfig]
+    #
     class RegisterCACertificateRequest < Struct.new(
       :ca_certificate,
       :verification_certificate,
       :set_as_active,
-      :allow_auto_registration)
+      :allow_auto_registration,
+      :registration_config)
       include Aws::Structure
     end
 
@@ -2704,6 +5024,68 @@ module Aws::IoT
       include Aws::Structure
     end
 
+    # @note When making an API call, you may pass RegisterThingRequest
+    #   data as a hash:
+    #
+    #       {
+    #         template_body: "TemplateBody", # required
+    #         parameters: {
+    #           "Parameter" => "Value",
+    #         },
+    #       }
+    #
+    # @!attribute [rw] template_body
+    #   The provisioning template.
+    #   @return [String]
+    #
+    # @!attribute [rw] parameters
+    #   The parameters for provisioning a thing.
+    #   @return [Hash<String,String>]
+    #
+    class RegisterThingRequest < Struct.new(
+      :template_body,
+      :parameters)
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] certificate_pem
+    #   The PEM of a certificate.
+    #   @return [String]
+    #
+    # @!attribute [rw] resource_arns
+    #   ARNs for the generated resources.
+    #   @return [Hash<String,String>]
+    #
+    class RegisterThingResponse < Struct.new(
+      :certificate_pem,
+      :resource_arns)
+      include Aws::Structure
+    end
+
+    # The registration configuration.
+    #
+    # @note When making an API call, you may pass RegistrationConfig
+    #   data as a hash:
+    #
+    #       {
+    #         template_body: "TemplateBody",
+    #         role_arn: "RoleArn",
+    #       }
+    #
+    # @!attribute [rw] template_body
+    #   The template body.
+    #   @return [String]
+    #
+    # @!attribute [rw] role_arn
+    #   The ARN of the role.
+    #   @return [String]
+    #
+    class RegistrationConfig < Struct.new(
+      :template_body,
+      :role_arn)
+      include Aws::Structure
+    end
+
     # The input for the RejectCertificateTransfer operation.
     #
     # @note When making an API call, you may pass RejectCertificateTransferRequest
@@ -2728,6 +5110,42 @@ module Aws::IoT
       include Aws::Structure
     end
 
+    # @note When making an API call, you may pass RemoveThingFromThingGroupRequest
+    #   data as a hash:
+    #
+    #       {
+    #         thing_group_name: "ThingGroupName",
+    #         thing_group_arn: "ThingGroupArn",
+    #         thing_name: "ThingName",
+    #         thing_arn: "ThingArn",
+    #       }
+    #
+    # @!attribute [rw] thing_group_name
+    #   The group name.
+    #   @return [String]
+    #
+    # @!attribute [rw] thing_group_arn
+    #   The group ARN.
+    #   @return [String]
+    #
+    # @!attribute [rw] thing_name
+    #   The name of the thing to remove from the group.
+    #   @return [String]
+    #
+    # @!attribute [rw] thing_arn
+    #   The ARN of the thing to remove from the group.
+    #   @return [String]
+    #
+    class RemoveThingFromThingGroupRequest < Struct.new(
+      :thing_group_name,
+      :thing_group_arn,
+      :thing_name,
+      :thing_arn)
+      include Aws::Structure
+    end
+
+    class RemoveThingFromThingGroupResponse < Aws::EmptyStructure; end
+
     # The input for the ReplaceTopicRule operation.
     #
     # @note When making an API call, you may pass ReplaceTopicRuleRequest
@@ -2861,6 +5279,42 @@ module Aws::IoT
       include Aws::Structure
     end
 
+    # Role alias description.
+    #
+    # @!attribute [rw] role_alias
+    #   The role alias.
+    #   @return [String]
+    #
+    # @!attribute [rw] role_arn
+    #   The role ARN.
+    #   @return [String]
+    #
+    # @!attribute [rw] owner
+    #   The role alias owner.
+    #   @return [String]
+    #
+    # @!attribute [rw] credential_duration_seconds
+    #   The number of seconds for which the credential is valid.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] creation_date
+    #   The UNIX timestamp of when the role alias was created.
+    #   @return [Time]
+    #
+    # @!attribute [rw] last_modified_date
+    #   The UNIX timestamp of when the role alias was last modified.
+    #   @return [Time]
+    #
+    class RoleAliasDescription < Struct.new(
+      :role_alias,
+      :role_arn,
+      :owner,
+      :credential_duration_seconds,
+      :creation_date,
+      :last_modified_date)
+      include Aws::Structure
+    end
+
     # Describes an action to write data to an Amazon S3 bucket.
     #
     # @note When making an API call, you may pass S3Action
@@ -2932,6 +5386,92 @@ module Aws::IoT
       include Aws::Structure
     end
 
+    # @note When making an API call, you may pass SearchIndexRequest
+    #   data as a hash:
+    #
+    #       {
+    #         index_name: "IndexName",
+    #         query_string: "QueryString", # required
+    #         next_token: "NextToken",
+    #         max_results: 1,
+    #         query_version: "QueryVersion",
+    #       }
+    #
+    # @!attribute [rw] index_name
+    #   The search index name.
+    #   @return [String]
+    #
+    # @!attribute [rw] query_string
+    #   The search query string.
+    #   @return [String]
+    #
+    # @!attribute [rw] next_token
+    #   The token used to get the next set of results, or **null** if there
+    #   are no additional results.
+    #   @return [String]
+    #
+    # @!attribute [rw] max_results
+    #   The maximum number of results to return at one time.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] query_version
+    #   The query version.
+    #   @return [String]
+    #
+    class SearchIndexRequest < Struct.new(
+      :index_name,
+      :query_string,
+      :next_token,
+      :max_results,
+      :query_version)
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] next_token
+    #   The token used to get the next set of results, or **null** if there
+    #   are no additional results.
+    #   @return [String]
+    #
+    # @!attribute [rw] things
+    #   The things that match the search query.
+    #   @return [Array<Types::ThingDocument>]
+    #
+    class SearchIndexResponse < Struct.new(
+      :next_token,
+      :things)
+      include Aws::Structure
+    end
+
+    # @note When making an API call, you may pass SetDefaultAuthorizerRequest
+    #   data as a hash:
+    #
+    #       {
+    #         authorizer_name: "AuthorizerName", # required
+    #       }
+    #
+    # @!attribute [rw] authorizer_name
+    #   The authorizer name.
+    #   @return [String]
+    #
+    class SetDefaultAuthorizerRequest < Struct.new(
+      :authorizer_name)
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] authorizer_name
+    #   The authorizer name.
+    #   @return [String]
+    #
+    # @!attribute [rw] authorizer_arn
+    #   The authorizer ARN.
+    #   @return [String]
+    #
+    class SetDefaultAuthorizerResponse < Struct.new(
+      :authorizer_name,
+      :authorizer_arn)
+      include Aws::Structure
+    end
+
     # The input for the SetDefaultPolicyVersion operation.
     #
     # @note When making an API call, you may pass SetDefaultPolicyVersionRequest
@@ -2977,6 +5517,59 @@ module Aws::IoT
       include Aws::Structure
     end
 
+    # @note When making an API call, you may pass SetV2LoggingLevelRequest
+    #   data as a hash:
+    #
+    #       {
+    #         log_target: { # required
+    #           target_type: "DEFAULT", # required, accepts DEFAULT, THING_GROUP
+    #           target_name: "LogTargetName",
+    #         },
+    #         log_level: "DEBUG", # required, accepts DEBUG, INFO, ERROR, WARN, DISABLED
+    #       }
+    #
+    # @!attribute [rw] log_target
+    #   The log target.
+    #   @return [Types::LogTarget]
+    #
+    # @!attribute [rw] log_level
+    #   The log level.
+    #   @return [String]
+    #
+    class SetV2LoggingLevelRequest < Struct.new(
+      :log_target,
+      :log_level)
+      include Aws::Structure
+    end
+
+    # @note When making an API call, you may pass SetV2LoggingOptionsRequest
+    #   data as a hash:
+    #
+    #       {
+    #         role_arn: "AwsArn",
+    #         default_log_level: "DEBUG", # accepts DEBUG, INFO, ERROR, WARN, DISABLED
+    #         disable_all_logs: false,
+    #       }
+    #
+    # @!attribute [rw] role_arn
+    #   The role ARN that allows IoT to write to Cloudwatch logs.
+    #   @return [String]
+    #
+    # @!attribute [rw] default_log_level
+    #   The default logging level.
+    #   @return [String]
+    #
+    # @!attribute [rw] disable_all_logs
+    #   Set to true to disable all logs, otherwise set to false.
+    #   @return [Boolean]
+    #
+    class SetV2LoggingOptionsRequest < Struct.new(
+      :role_arn,
+      :default_log_level,
+      :disable_all_logs)
+      include Aws::Structure
+    end
+
     # Describes an action to publish to an Amazon SNS topic.
     #
     # @note When making an API call, you may pass SnsAction
@@ -2988,62 +5581,248 @@ module Aws::IoT
     #         message_format: "RAW", # accepts RAW, JSON
     #       }
     #
-    # @!attribute [rw] target_arn
-    #   The ARN of the SNS topic.
+    # @!attribute [rw] target_arn
+    #   The ARN of the SNS topic.
+    #   @return [String]
+    #
+    # @!attribute [rw] role_arn
+    #   The ARN of the IAM role that grants access.
+    #   @return [String]
+    #
+    # @!attribute [rw] message_format
+    #   The message format of the message to publish. Optional. Accepted
+    #   values are "JSON" and "RAW". The default value of the attribute
+    #   is "RAW". SNS uses this setting to determine if the payload should
+    #   be parsed and relevant platform-specific bits of the payload should
+    #   be extracted. To read more about SNS message formats, see
+    #   [http://docs.aws.amazon.com/sns/latest/dg/json-formats.html][1]
+    #   refer to their official documentation.
+    #
+    #
+    #
+    #   [1]: http://docs.aws.amazon.com/sns/latest/dg/json-formats.html
+    #   @return [String]
+    #
+    class SnsAction < Struct.new(
+      :target_arn,
+      :role_arn,
+      :message_format)
+      include Aws::Structure
+    end
+
+    # Describes an action to publish data to an Amazon SQS queue.
+    #
+    # @note When making an API call, you may pass SqsAction
+    #   data as a hash:
+    #
+    #       {
+    #         role_arn: "AwsArn", # required
+    #         queue_url: "QueueUrl", # required
+    #         use_base_64: false,
+    #       }
+    #
+    # @!attribute [rw] role_arn
+    #   The ARN of the IAM role that grants access.
+    #   @return [String]
+    #
+    # @!attribute [rw] queue_url
+    #   The URL of the Amazon SQS queue.
+    #   @return [String]
+    #
+    # @!attribute [rw] use_base_64
+    #   Specifies whether to use Base64 encoding.
+    #   @return [Boolean]
+    #
+    class SqsAction < Struct.new(
+      :role_arn,
+      :queue_url,
+      :use_base_64)
+      include Aws::Structure
+    end
+
+    # @note When making an API call, you may pass StartThingRegistrationTaskRequest
+    #   data as a hash:
+    #
+    #       {
+    #         template_body: "TemplateBody", # required
+    #         input_file_bucket: "RegistryS3BucketName", # required
+    #         input_file_key: "RegistryS3KeyName", # required
+    #         role_arn: "RoleArn", # required
+    #       }
+    #
+    # @!attribute [rw] template_body
+    #   The provisioning template.
+    #   @return [String]
+    #
+    # @!attribute [rw] input_file_bucket
+    #   The S3 bucket that contains the input file.
+    #   @return [String]
+    #
+    # @!attribute [rw] input_file_key
+    #   The name of input file within the S3 bucket. This file contains a
+    #   newline delimited JSON file. Each line contains the parameter values
+    #   to provision one device (thing).
+    #   @return [String]
+    #
+    # @!attribute [rw] role_arn
+    #   The IAM role ARN that grants permission the input file.
+    #   @return [String]
+    #
+    class StartThingRegistrationTaskRequest < Struct.new(
+      :template_body,
+      :input_file_bucket,
+      :input_file_key,
+      :role_arn)
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] task_id
+    #   The bulk thing provisioning task ID.
+    #   @return [String]
+    #
+    class StartThingRegistrationTaskResponse < Struct.new(
+      :task_id)
+      include Aws::Structure
+    end
+
+    # @note When making an API call, you may pass StopThingRegistrationTaskRequest
+    #   data as a hash:
+    #
+    #       {
+    #         task_id: "TaskId", # required
+    #       }
+    #
+    # @!attribute [rw] task_id
+    #   The bulk thing provisioning task ID.
+    #   @return [String]
+    #
+    class StopThingRegistrationTaskRequest < Struct.new(
+      :task_id)
+      include Aws::Structure
+    end
+
+    class StopThingRegistrationTaskResponse < Aws::EmptyStructure; end
+
+    # @note When making an API call, you may pass TestAuthorizationRequest
+    #   data as a hash:
+    #
+    #       {
+    #         principal: "Principal",
+    #         cognito_identity_pool_id: "CognitoIdentityPoolId",
+    #         auth_infos: [ # required
+    #           {
+    #             action_type: "PUBLISH", # accepts PUBLISH, SUBSCRIBE, RECEIVE, CONNECT
+    #             resources: ["Resource"],
+    #           },
+    #         ],
+    #         client_id: "ClientId",
+    #         policy_names_to_add: ["PolicyName"],
+    #         policy_names_to_skip: ["PolicyName"],
+    #       }
+    #
+    # @!attribute [rw] principal
+    #   The principal.
     #   @return [String]
     #
-    # @!attribute [rw] role_arn
-    #   The ARN of the IAM role that grants access.
+    # @!attribute [rw] cognito_identity_pool_id
+    #   The Cognito identity pool ID.
     #   @return [String]
     #
-    # @!attribute [rw] message_format
-    #   The message format of the message to publish. Optional. Accepted
-    #   values are "JSON" and "RAW". The default value of the attribute
-    #   is "RAW". SNS uses this setting to determine if the payload should
-    #   be parsed and relevant platform-specific bits of the payload should
-    #   be extracted. To read more about SNS message formats, see
-    #   [http://docs.aws.amazon.com/sns/latest/dg/json-formats.html][1]
-    #   refer to their official documentation.
+    # @!attribute [rw] auth_infos
+    #   A list of authorization info objects. Simulating authorization will
+    #   create a response for each `authInfo` object in the list.
+    #   @return [Array<Types::AuthInfo>]
     #
+    # @!attribute [rw] client_id
+    #   The MQTT client ID.
+    #   @return [String]
     #
+    # @!attribute [rw] policy_names_to_add
+    #   When testing custom authorization, the policies specified here are
+    #   treated as if they are attached to the principal being authorized.
+    #   @return [Array<String>]
     #
-    #   [1]: http://docs.aws.amazon.com/sns/latest/dg/json-formats.html
-    #   @return [String]
+    # @!attribute [rw] policy_names_to_skip
+    #   When testing custom authorization, the policies specified here are
+    #   treated as if they are not attached to the principal being
+    #   authorized.
+    #   @return [Array<String>]
     #
-    class SnsAction < Struct.new(
-      :target_arn,
-      :role_arn,
-      :message_format)
+    class TestAuthorizationRequest < Struct.new(
+      :principal,
+      :cognito_identity_pool_id,
+      :auth_infos,
+      :client_id,
+      :policy_names_to_add,
+      :policy_names_to_skip)
       include Aws::Structure
     end
 
-    # Describes an action to publish data to an Amazon SQS queue.
+    # @!attribute [rw] auth_results
+    #   The authentication results.
+    #   @return [Array<Types::AuthResult>]
     #
-    # @note When making an API call, you may pass SqsAction
+    class TestAuthorizationResponse < Struct.new(
+      :auth_results)
+      include Aws::Structure
+    end
+
+    # @note When making an API call, you may pass TestInvokeAuthorizerRequest
     #   data as a hash:
     #
     #       {
-    #         role_arn: "AwsArn", # required
-    #         queue_url: "QueueUrl", # required
-    #         use_base_64: false,
+    #         authorizer_name: "AuthorizerName", # required
+    #         token: "Token", # required
+    #         token_signature: "TokenSignature", # required
     #       }
     #
-    # @!attribute [rw] role_arn
-    #   The ARN of the IAM role that grants access.
+    # @!attribute [rw] authorizer_name
+    #   The custom authorizer name.
     #   @return [String]
     #
-    # @!attribute [rw] queue_url
-    #   The URL of the Amazon SQS queue.
+    # @!attribute [rw] token
+    #   The token returned by your custom authentication service.
     #   @return [String]
     #
-    # @!attribute [rw] use_base_64
-    #   Specifies whether to use Base64 encoding.
+    # @!attribute [rw] token_signature
+    #   The signature made with the token and your custom authentication
+    #   service's private key.
+    #   @return [String]
+    #
+    class TestInvokeAuthorizerRequest < Struct.new(
+      :authorizer_name,
+      :token,
+      :token_signature)
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] is_authenticated
+    #   True if the token is authenticated, otherwise false.
     #   @return [Boolean]
     #
-    class SqsAction < Struct.new(
-      :role_arn,
-      :queue_url,
-      :use_base_64)
+    # @!attribute [rw] principal_id
+    #   The principal ID.
+    #   @return [String]
+    #
+    # @!attribute [rw] policy_documents
+    #   IAM policy documents.
+    #   @return [Array<String>]
+    #
+    # @!attribute [rw] refresh_after_in_seconds
+    #   The number of seconds after which the temporary credentials are
+    #   refreshed.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] disconnect_after_in_seconds
+    #   The number of seconds after which the connection is terminated.
+    #   @return [Integer]
+    #
+    class TestInvokeAuthorizerResponse < Struct.new(
+      :is_authenticated,
+      :principal_id,
+      :policy_documents,
+      :refresh_after_in_seconds,
+      :disconnect_after_in_seconds)
       include Aws::Structure
     end
 
@@ -3059,6 +5838,10 @@ module Aws::IoT
     #   type.
     #   @return [String]
     #
+    # @!attribute [rw] thing_arn
+    #   The thing ARN.
+    #   @return [String]
+    #
     # @!attribute [rw] attributes
     #   A list of thing attributes which are name-value pairs.
     #   @return [Hash<String,String>]
@@ -3070,11 +5853,123 @@ module Aws::IoT
     class ThingAttribute < Struct.new(
       :thing_name,
       :thing_type_name,
+      :thing_arn,
       :attributes,
       :version)
       include Aws::Structure
     end
 
+    # The thing search index document.
+    #
+    # @!attribute [rw] thing_name
+    #   The thing name.
+    #   @return [String]
+    #
+    # @!attribute [rw] thing_id
+    #   The thing ID.
+    #   @return [String]
+    #
+    # @!attribute [rw] thing_type_name
+    #   The thing type name.
+    #   @return [String]
+    #
+    # @!attribute [rw] thing_group_names
+    #   Thing group names.
+    #   @return [Array<String>]
+    #
+    # @!attribute [rw] attributes
+    #   The attributes.
+    #   @return [Hash<String,String>]
+    #
+    # @!attribute [rw] shadow
+    #   The thing shadow.
+    #   @return [String]
+    #
+    class ThingDocument < Struct.new(
+      :thing_name,
+      :thing_id,
+      :thing_type_name,
+      :thing_group_names,
+      :attributes,
+      :shadow)
+      include Aws::Structure
+    end
+
+    # Thing group metadata.
+    #
+    # @!attribute [rw] parent_group_name
+    #   The parent thing group name.
+    #   @return [String]
+    #
+    # @!attribute [rw] root_to_parent_thing_groups
+    #   The root parent thing group.
+    #   @return [Array<Types::GroupNameAndArn>]
+    #
+    # @!attribute [rw] creation_date
+    #   The UNIX timestamp of when the thing group was created.
+    #   @return [Time]
+    #
+    class ThingGroupMetadata < Struct.new(
+      :parent_group_name,
+      :root_to_parent_thing_groups,
+      :creation_date)
+      include Aws::Structure
+    end
+
+    # Thing group properties.
+    #
+    # @note When making an API call, you may pass ThingGroupProperties
+    #   data as a hash:
+    #
+    #       {
+    #         thing_group_description: "ThingGroupDescription",
+    #         attribute_payload: {
+    #           attributes: {
+    #             "AttributeName" => "AttributeValue",
+    #           },
+    #           merge: false,
+    #         },
+    #       }
+    #
+    # @!attribute [rw] thing_group_description
+    #   The thing group description.
+    #   @return [String]
+    #
+    # @!attribute [rw] attribute_payload
+    #   The thing group attributes in JSON format.
+    #   @return [Types::AttributePayload]
+    #
+    class ThingGroupProperties < Struct.new(
+      :thing_group_description,
+      :attribute_payload)
+      include Aws::Structure
+    end
+
+    # Thing indexing configuration.
+    #
+    # @note When making an API call, you may pass ThingIndexingConfiguration
+    #   data as a hash:
+    #
+    #       {
+    #         thing_indexing_mode: "OFF", # accepts OFF, REGISTRY, REGISTRY_AND_SHADOW
+    #       }
+    #
+    # @!attribute [rw] thing_indexing_mode
+    #   Thing indexing mode. Valid values are:
+    #
+    #   * REGISTRY – Your thing index will contain only registry data.
+    #
+    #   * REGISTRY\_AND\_SHADOW - Your thing index will contain registry and
+    #     shadow data.
+    #
+    #   * OFF - Thing indexing is disabled.
+    #   @return [String]
+    #
+    class ThingIndexingConfiguration < Struct.new(
+      :thing_indexing_mode)
+      include Aws::Structure
+    end
+
     # The definition of the thing type, including thing type name and
     # description.
     #
@@ -3082,6 +5977,10 @@ module Aws::IoT
     #   The name of the thing type.
     #   @return [String]
     #
+    # @!attribute [rw] thing_type_arn
+    #   The thing type ARN.
+    #   @return [String]
+    #
     # @!attribute [rw] thing_type_properties
     #   The ThingTypeProperties for the thing type.
     #   @return [Types::ThingTypeProperties]
@@ -3095,6 +5994,7 @@ module Aws::IoT
     #
     class ThingTypeDefinition < Struct.new(
       :thing_type_name,
+      :thing_type_arn,
       :thing_type_properties,
       :thing_type_metadata)
       include Aws::Structure
@@ -3422,6 +6322,62 @@ module Aws::IoT
       include Aws::Structure
     end
 
+    # @note When making an API call, you may pass UpdateAuthorizerRequest
+    #   data as a hash:
+    #
+    #       {
+    #         authorizer_name: "AuthorizerName", # required
+    #         authorizer_function_arn: "AuthorizerFunctionArn",
+    #         token_key_name: "TokenKeyName",
+    #         token_signing_public_keys: {
+    #           "KeyName" => "KeyValue",
+    #         },
+    #         status: "ACTIVE", # accepts ACTIVE, INACTIVE
+    #       }
+    #
+    # @!attribute [rw] authorizer_name
+    #   The authorizer name.
+    #   @return [String]
+    #
+    # @!attribute [rw] authorizer_function_arn
+    #   The ARN of the authorizer's Lambda function.
+    #   @return [String]
+    #
+    # @!attribute [rw] token_key_name
+    #   The key used to extract the token from the HTTP headers.
+    #   @return [String]
+    #
+    # @!attribute [rw] token_signing_public_keys
+    #   The public keys used to verify the token signature.
+    #   @return [Hash<String,String>]
+    #
+    # @!attribute [rw] status
+    #   The status of the update authorizer request.
+    #   @return [String]
+    #
+    class UpdateAuthorizerRequest < Struct.new(
+      :authorizer_name,
+      :authorizer_function_arn,
+      :token_key_name,
+      :token_signing_public_keys,
+      :status)
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] authorizer_name
+    #   The authorizer name.
+    #   @return [String]
+    #
+    # @!attribute [rw] authorizer_arn
+    #   The authorizer ARN.
+    #   @return [String]
+    #
+    class UpdateAuthorizerResponse < Struct.new(
+      :authorizer_name,
+      :authorizer_arn)
+      include Aws::Structure
+    end
+
     # The input to the UpdateCACertificate operation.
     #
     # @note When making an API call, you may pass UpdateCACertificateRequest
@@ -3431,6 +6387,11 @@ module Aws::IoT
     #         certificate_id: "CertificateId", # required
     #         new_status: "ACTIVE", # accepts ACTIVE, INACTIVE
     #         new_auto_registration_status: "ENABLE", # accepts ENABLE, DISABLE
+    #         registration_config: {
+    #           template_body: "TemplateBody",
+    #           role_arn: "RoleArn",
+    #         },
+    #         remove_auto_registration: false,
     #       }
     #
     # @!attribute [rw] certificate_id
@@ -3449,10 +6410,20 @@ module Aws::IoT
     #   "ENABLE" or "DISABLE".
     #   @return [String]
     #
+    # @!attribute [rw] registration_config
+    #   Information about the registration configuration.
+    #   @return [Types::RegistrationConfig]
+    #
+    # @!attribute [rw] remove_auto_registration
+    #   If true, remove auto registration.
+    #   @return [Boolean]
+    #
     class UpdateCACertificateRequest < Struct.new(
       :certificate_id,
       :new_status,
-      :new_auto_registration_status)
+      :new_auto_registration_status,
+      :registration_config,
+      :remove_auto_registration)
       include Aws::Structure
     end
 
@@ -3487,6 +6458,166 @@ module Aws::IoT
       include Aws::Structure
     end
 
+    # @note When making an API call, you may pass UpdateEventConfigurationsRequest
+    #   data as a hash:
+    #
+    #       {
+    #         event_configurations: {
+    #           "THING" => {
+    #             enabled: false,
+    #           },
+    #         },
+    #       }
+    #
+    # @!attribute [rw] event_configurations
+    #   The new event configuration values.
+    #   @return [Hash<String,Types::Configuration>]
+    #
+    class UpdateEventConfigurationsRequest < Struct.new(
+      :event_configurations)
+      include Aws::Structure
+    end
+
+    class UpdateEventConfigurationsResponse < Aws::EmptyStructure; end
+
+    # @note When making an API call, you may pass UpdateIndexingConfigurationRequest
+    #   data as a hash:
+    #
+    #       {
+    #         thing_indexing_configuration: {
+    #           thing_indexing_mode: "OFF", # accepts OFF, REGISTRY, REGISTRY_AND_SHADOW
+    #         },
+    #       }
+    #
+    # @!attribute [rw] thing_indexing_configuration
+    #   Thing indexing configuration.
+    #   @return [Types::ThingIndexingConfiguration]
+    #
+    class UpdateIndexingConfigurationRequest < Struct.new(
+      :thing_indexing_configuration)
+      include Aws::Structure
+    end
+
+    class UpdateIndexingConfigurationResponse < Aws::EmptyStructure; end
+
+    # @note When making an API call, you may pass UpdateRoleAliasRequest
+    #   data as a hash:
+    #
+    #       {
+    #         role_alias: "RoleAlias", # required
+    #         role_arn: "RoleArn",
+    #         credential_duration_seconds: 1,
+    #       }
+    #
+    # @!attribute [rw] role_alias
+    #   The role alias to update.
+    #   @return [String]
+    #
+    # @!attribute [rw] role_arn
+    #   The role ARN.
+    #   @return [String]
+    #
+    # @!attribute [rw] credential_duration_seconds
+    #   The number of seconds the credential will be valid.
+    #   @return [Integer]
+    #
+    class UpdateRoleAliasRequest < Struct.new(
+      :role_alias,
+      :role_arn,
+      :credential_duration_seconds)
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] role_alias
+    #   The role alias.
+    #   @return [String]
+    #
+    # @!attribute [rw] role_alias_arn
+    #   The role alias ARN.
+    #   @return [String]
+    #
+    class UpdateRoleAliasResponse < Struct.new(
+      :role_alias,
+      :role_alias_arn)
+      include Aws::Structure
+    end
+
+    # @note When making an API call, you may pass UpdateThingGroupRequest
+    #   data as a hash:
+    #
+    #       {
+    #         thing_group_name: "ThingGroupName", # required
+    #         thing_group_properties: { # required
+    #           thing_group_description: "ThingGroupDescription",
+    #           attribute_payload: {
+    #             attributes: {
+    #               "AttributeName" => "AttributeValue",
+    #             },
+    #             merge: false,
+    #           },
+    #         },
+    #         expected_version: 1,
+    #       }
+    #
+    # @!attribute [rw] thing_group_name
+    #   The thing group to update.
+    #   @return [String]
+    #
+    # @!attribute [rw] thing_group_properties
+    #   The thing group properties.
+    #   @return [Types::ThingGroupProperties]
+    #
+    # @!attribute [rw] expected_version
+    #   The expected version of the thing group. If this does not match the
+    #   version of the thing group being updated, the update will fail.
+    #   @return [Integer]
+    #
+    class UpdateThingGroupRequest < Struct.new(
+      :thing_group_name,
+      :thing_group_properties,
+      :expected_version)
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] version
+    #   The version of the updated thing group.
+    #   @return [Integer]
+    #
+    class UpdateThingGroupResponse < Struct.new(
+      :version)
+      include Aws::Structure
+    end
+
+    # @note When making an API call, you may pass UpdateThingGroupsForThingRequest
+    #   data as a hash:
+    #
+    #       {
+    #         thing_name: "ThingName",
+    #         thing_groups_to_add: ["ThingGroupName"],
+    #         thing_groups_to_remove: ["ThingGroupName"],
+    #       }
+    #
+    # @!attribute [rw] thing_name
+    #   The thing whose group memberships will be updated.
+    #   @return [String]
+    #
+    # @!attribute [rw] thing_groups_to_add
+    #   The groups to which the thing will be added.
+    #   @return [Array<String>]
+    #
+    # @!attribute [rw] thing_groups_to_remove
+    #   The groups from which the thing will be removed.
+    #   @return [Array<String>]
+    #
+    class UpdateThingGroupsForThingRequest < Struct.new(
+      :thing_name,
+      :thing_groups_to_add,
+      :thing_groups_to_remove)
+      include Aws::Structure
+    end
+
+    class UpdateThingGroupsForThingResponse < Aws::EmptyStructure; end
+
     # The input for the UpdateThing operation.
     #
     # @note When making an API call, you may pass UpdateThingRequest
@@ -3531,7 +6662,7 @@ module Aws::IoT
     #   @return [Integer]
     #
     # @!attribute [rw] remove_thing_type
-    #   Remove a thing type association. If **true**, the assocation is
+    #   Remove a thing type association. If **true**, the association is
     #   removed.
     #   @return [Boolean]
     #