aws-sdk-lexmodelsv2 1.3.0 → 1.4.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 8b253026c4990cc2405291342012919dc31d257ab49b2e4174d17de16fb9c495
-  data.tar.gz: 1f532da8491cffbeb75b02b50f2843bf8a0af8131e295c1975c133d7f2bf87b3
+  metadata.gz: dbd5c99d5bfb133ba82cd3ef06fcf3b460659d217b4977a4f22dfb86f0df8ab5
+  data.tar.gz: 7c10d9d7a366ca1cd919883e8ccb38c1edbedf38bf5b416173e98377c7e52fd5
 SHA512:
-  metadata.gz: 348dde856044652c80b0d1ab7a961a4eb530c94564e7b15de27842ddd9a258cacd5405efc2e23db4ddbaaef9bcb3b75bc8ae866bf84d8a5de9a5fa07cfabe872
-  data.tar.gz: d27a2bbb50e4004b42f0a3f852df563caee482059713d163bdc7d2d338414884afeeaeb9217bb92df71b6188051d0086737a8760aca75ef12f0e33d75a518b92
+  metadata.gz: c99eb903424dff1e76991a0aba3fdda20c3a2d3eb7303e4742f20962733c7f9357f38e833c3ec9f62b49a741a9dc9f5222137ccd07886cec20926f8246d0898c
+  data.tar.gz: dc30dd61ddd22cc274dbb59a4b7631e5d7982769d7a0a17246a69c4a3e01afba5b8e3ea9e7d159f2d75193cead2cc7409f1596669d812a122b1c3e20b15914de

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.4.0 (2021-05-20)
+------------------
+
+* Feature - Customers can now use resource-based policies to control access to their Lex V2 bots. This release adds APIs to attach and manage permissions for a bot or a bot alias. For details, see: https://docs.aws.amazon.com/lexv2/latest/dg/security_iam_service-with-iam.html
+
 1.3.0 (2021-05-18)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.3.0
+1.4.0

data/lib/aws-sdk-lexmodelsv2.rb

@@ -48,6 +48,6 @@ require_relative 'aws-sdk-lexmodelsv2/customizations'
 # @!group service
 module Aws::LexModelsV2
 
-  GEM_VERSION = '1.3.0'
+  GEM_VERSION = '1.4.0'
 
 end

data/lib/aws-sdk-lexmodelsv2/client.rb

@@ -1305,6 +1305,154 @@ module Aws::LexModelsV2
       req.send_request(options)
     end
 
+    # Creates a new resource policy with the specified policy statements.
+    #
+    # @option params [required, String] :resource_arn
+    #   The Amazon Resource Name (ARN) of the bot or bot alias that the
+    #   resource policy is attached to.
+    #
+    # @option params [required, String] :policy
+    #   A resource policy to add to the resource. The policy is a JSON
+    #   structure that contains one or more statements that define the policy.
+    #   The policy must follow the IAM syntax. For more information about the
+    #   contents of a JSON policy document, see [ IAM JSON policy reference
+    #   ][1].
+    #
+    #   If the policy isn't valid, Amazon Lex returns a validation exception.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies.html
+    #
+    # @return [Types::CreateResourcePolicyResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::CreateResourcePolicyResponse#resource_arn #resource_arn} => String
+    #   * {Types::CreateResourcePolicyResponse#revision_id #revision_id} => String
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.create_resource_policy({
+    #     resource_arn: "AmazonResourceName", # required
+    #     policy: "Policy", # required
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.resource_arn #=> String
+    #   resp.revision_id #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/models.lex.v2-2020-08-07/CreateResourcePolicy AWS API Documentation
+    #
+    # @overload create_resource_policy(params = {})
+    # @param [Hash] params ({})
+    def create_resource_policy(params = {}, options = {})
+      req = build_request(:create_resource_policy, params)
+      req.send_request(options)
+    end
+
+    # Adds a new resource policy statement to a bot or bot alias. If a
+    # resource policy exists, the statement is added to the current resource
+    # policy. If a policy doesn't exist, a new policy is created.
+    #
+    # You can create a resource policy statement that allows cross-account
+    # access.
+    #
+    # @option params [required, String] :resource_arn
+    #   The Amazon Resource Name (ARN) of the bot or bot alias that the
+    #   resource policy is attached to.
+    #
+    # @option params [required, String] :statement_id
+    #   The name of the statement. The ID is the same as the `Sid` IAM
+    #   property. The statement name must be unique within the policy. For
+    #   more information, see [IAM JSON policy elements: Sid][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_sid.html
+    #
+    # @option params [required, String] :effect
+    #   Determines whether the statement allows or denies access to the
+    #   resource.
+    #
+    # @option params [required, Array<Types::Principal>] :principal
+    #   An IAM principal, such as an IAM users, IAM roles, or AWS services
+    #   that is allowed or denied access to a resource. For more information,
+    #   see [AWS JSON policy elements: Principal][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_principal.html
+    #
+    # @option params [required, Array<String>] :action
+    #   The Amazon Lex action that this policy either allows or denies. The
+    #   action must apply to the resource type of the specified ARN. For more
+    #   information, see [ Actions, resources, and condition keys for Amazon
+    #   Lex V2][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonlexv2.html
+    #
+    # @option params [Hash<String,Hash>] :condition
+    #   Specifies a condition when the policy is in effect. If the principal
+    #   of the policy is a service principal, you must provide two condition
+    #   blocks, one with a SourceAccount global condition key and one with a
+    #   SourceArn global condition key.
+    #
+    #   For more information, see [IAM JSON policy elements: Condition ][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition.html
+    #
+    # @option params [String] :expected_revision_id
+    #   The identifier of the revision of the policy to edit. If this revision
+    #   ID doesn't match the current revision ID, Amazon Lex throws an
+    #   exception.
+    #
+    #   If you don't specify a revision, Amazon Lex overwrites the contents
+    #   of the policy with the new values.
+    #
+    # @return [Types::CreateResourcePolicyStatementResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::CreateResourcePolicyStatementResponse#resource_arn #resource_arn} => String
+    #   * {Types::CreateResourcePolicyStatementResponse#revision_id #revision_id} => String
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.create_resource_policy_statement({
+    #     resource_arn: "AmazonResourceName", # required
+    #     statement_id: "Name", # required
+    #     effect: "Allow", # required, accepts Allow, Deny
+    #     principal: [ # required
+    #       {
+    #         service: "ServicePrincipal",
+    #         arn: "PrincipalArn",
+    #       },
+    #     ],
+    #     action: ["Operation"], # required
+    #     condition: {
+    #       "ConditionOperator" => {
+    #         "ConditionKey" => "ConditionValue",
+    #       },
+    #     },
+    #     expected_revision_id: "RevisionId",
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.resource_arn #=> String
+    #   resp.revision_id #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/models.lex.v2-2020-08-07/CreateResourcePolicyStatement AWS API Documentation
+    #
+    # @overload create_resource_policy_statement(params = {})
+    # @param [Hash] params ({})
+    def create_resource_policy_statement(params = {}, options = {})
+      req = build_request(:create_resource_policy_statement, params)
+      req.send_request(options)
+    end
+
     # Creates a slot in an intent. A slot is a variable needed to fulfill an
     # intent. For example, an `OrderPizza` intent might need slots for size,
     # crust, and number of pizzas. For each slot, you define one or more
@@ -2161,6 +2309,94 @@ module Aws::LexModelsV2
       req.send_request(options)
     end
 
+    # Removes an existing policy from a bot or bot alias. If the resource
+    # doesn't have a policy attached, Amazon Lex returns an exception.
+    #
+    # @option params [required, String] :resource_arn
+    #   The Amazon Resource Name (ARN) of the bot or bot alias that has the
+    #   resource policy attached.
+    #
+    # @option params [String] :expected_revision_id
+    #   The identifier of the revision to edit. If this ID doesn't match the
+    #   current revision number, Amazon Lex returns an exception
+    #
+    #   If you don't specify a revision ID, Amazon Lex will delete the
+    #   current policy.
+    #
+    # @return [Types::DeleteResourcePolicyResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::DeleteResourcePolicyResponse#resource_arn #resource_arn} => String
+    #   * {Types::DeleteResourcePolicyResponse#revision_id #revision_id} => String
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.delete_resource_policy({
+    #     resource_arn: "AmazonResourceName", # required
+    #     expected_revision_id: "RevisionId",
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.resource_arn #=> String
+    #   resp.revision_id #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/models.lex.v2-2020-08-07/DeleteResourcePolicy AWS API Documentation
+    #
+    # @overload delete_resource_policy(params = {})
+    # @param [Hash] params ({})
+    def delete_resource_policy(params = {}, options = {})
+      req = build_request(:delete_resource_policy, params)
+      req.send_request(options)
+    end
+
+    # Deletes a policy statement from a resource policy. If you delete the
+    # last statement from a policy, the policy is deleted. If you specify a
+    # statement ID that doesn't exist in the policy, or if the bot or bot
+    # alias doesn't have a policy attached, Amazon Lex returns an
+    # exception.
+    #
+    # @option params [required, String] :resource_arn
+    #   The Amazon Resource Name (ARN) of the bot or bot alias that the
+    #   resource policy is attached to.
+    #
+    # @option params [required, String] :statement_id
+    #   The name of the statement (SID) to delete from the policy.
+    #
+    # @option params [String] :expected_revision_id
+    #   The identifier of the revision of the policy to delete the statement
+    #   from. If this revision ID doesn't match the current revision ID,
+    #   Amazon Lex throws an exception.
+    #
+    #   If you don't specify a revision, Amazon Lex removes the current
+    #   contents of the statement.
+    #
+    # @return [Types::DeleteResourcePolicyStatementResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::DeleteResourcePolicyStatementResponse#resource_arn #resource_arn} => String
+    #   * {Types::DeleteResourcePolicyStatementResponse#revision_id #revision_id} => String
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.delete_resource_policy_statement({
+    #     resource_arn: "AmazonResourceName", # required
+    #     statement_id: "Name", # required
+    #     expected_revision_id: "RevisionId",
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.resource_arn #=> String
+    #   resp.revision_id #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/models.lex.v2-2020-08-07/DeleteResourcePolicyStatement AWS API Documentation
+    #
+    # @overload delete_resource_policy_statement(params = {})
+    # @param [Hash] params ({})
+    def delete_resource_policy_statement(params = {}, options = {})
+      req = build_request(:delete_resource_policy_statement, params)
+      req.send_request(options)
+    end
+
     # Deletes the specified slot from an intent.
     #
     # @option params [required, String] :slot_id
@@ -2748,6 +2984,39 @@ module Aws::LexModelsV2
       req.send_request(options)
     end
 
+    # Gets the resource policy and policy revision for a bot or bot alias.
+    #
+    # @option params [required, String] :resource_arn
+    #   The Amazon Resource Name (ARN) of the bot or bot alias that the
+    #   resource policy is attached to.
+    #
+    # @return [Types::DescribeResourcePolicyResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::DescribeResourcePolicyResponse#resource_arn #resource_arn} => String
+    #   * {Types::DescribeResourcePolicyResponse#policy #policy} => String
+    #   * {Types::DescribeResourcePolicyResponse#revision_id #revision_id} => String
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.describe_resource_policy({
+    #     resource_arn: "AmazonResourceName", # required
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.resource_arn #=> String
+    #   resp.policy #=> String
+    #   resp.revision_id #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/models.lex.v2-2020-08-07/DescribeResourcePolicy AWS API Documentation
+    #
+    # @overload describe_resource_policy(params = {})
+    # @param [Hash] params ({})
+    def describe_resource_policy(params = {}, options = {})
+      req = build_request(:describe_resource_policy, params)
+      req.send_request(options)
+    end
+
     # Gets metadata information about a slot.
     #
     # @option params [required, String] :slot_id
@@ -4765,6 +5034,62 @@ module Aws::LexModelsV2
       req.send_request(options)
     end
 
+    # Replaces the existing resource policy for a bot or bot alias with a
+    # new one. If the policy doesn't exist, Amazon Lex returns an
+    # exception.
+    #
+    # @option params [required, String] :resource_arn
+    #   The Amazon Resource Name (ARN) of the bot or bot alias that the
+    #   resource policy is attached to.
+    #
+    # @option params [required, String] :policy
+    #   A resource policy to add to the resource. The policy is a JSON
+    #   structure that contains one or more statements that define the policy.
+    #   The policy must follow the IAM syntax. For more information about the
+    #   contents of a JSON policy document, see [ IAM JSON policy reference
+    #   ][1].
+    #
+    #   If the policy isn't valid, Amazon Lex returns a validation exception.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies.html
+    #
+    # @option params [String] :expected_revision_id
+    #   The identifier of the revision of the policy to update. If this
+    #   revision ID doesn't match the current revision ID, Amazon Lex throws
+    #   an exception.
+    #
+    #   If you don't specify a revision, Amazon Lex overwrites the contents
+    #   of the policy with the new values.
+    #
+    # @return [Types::UpdateResourcePolicyResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::UpdateResourcePolicyResponse#resource_arn #resource_arn} => String
+    #   * {Types::UpdateResourcePolicyResponse#revision_id #revision_id} => String
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.update_resource_policy({
+    #     resource_arn: "AmazonResourceName", # required
+    #     policy: "Policy", # required
+    #     expected_revision_id: "RevisionId",
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.resource_arn #=> String
+    #   resp.revision_id #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/models.lex.v2-2020-08-07/UpdateResourcePolicy AWS API Documentation
+    #
+    # @overload update_resource_policy(params = {})
+    # @param [Hash] params ({})
+    def update_resource_policy(params = {}, options = {})
+      req = build_request(:update_resource_policy, params)
+      req.send_request(options)
+    end
+
     # Updates the settings for a slot.
     #
     # @option params [required, String] :slot_id
@@ -5306,7 +5631,7 @@ module Aws::LexModelsV2
         params: params,
         config: config)
       context[:gem_name] = 'aws-sdk-lexmodelsv2'
-      context[:gem_version] = '1.3.0'
+      context[:gem_version] = '1.4.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-lexmodelsv2/client_api.rb

@@ -82,6 +82,11 @@ module Aws::LexModelsV2
     CloudWatchLogGroupLogDestination = Shapes::StructureShape.new(name: 'CloudWatchLogGroupLogDestination')
     CodeHookInterfaceVersion = Shapes::StringShape.new(name: 'CodeHookInterfaceVersion')
     CodeHookSpecification = Shapes::StructureShape.new(name: 'CodeHookSpecification')
+    ConditionKey = Shapes::StringShape.new(name: 'ConditionKey')
+    ConditionKeyValueMap = Shapes::MapShape.new(name: 'ConditionKeyValueMap')
+    ConditionMap = Shapes::MapShape.new(name: 'ConditionMap')
+    ConditionOperator = Shapes::StringShape.new(name: 'ConditionOperator')
+    ConditionValue = Shapes::StringShape.new(name: 'ConditionValue')
     ConfidenceThreshold = Shapes::FloatShape.new(name: 'ConfidenceThreshold')
     ConflictException = Shapes::StructureShape.new(name: 'ConflictException')
     ContextTimeToLiveInSeconds = Shapes::IntegerShape.new(name: 'ContextTimeToLiveInSeconds')
@@ -99,6 +104,10 @@ module Aws::LexModelsV2
     CreateExportResponse = Shapes::StructureShape.new(name: 'CreateExportResponse')
     CreateIntentRequest = Shapes::StructureShape.new(name: 'CreateIntentRequest')
     CreateIntentResponse = Shapes::StructureShape.new(name: 'CreateIntentResponse')
+    CreateResourcePolicyRequest = Shapes::StructureShape.new(name: 'CreateResourcePolicyRequest')
+    CreateResourcePolicyResponse = Shapes::StructureShape.new(name: 'CreateResourcePolicyResponse')
+    CreateResourcePolicyStatementRequest = Shapes::StructureShape.new(name: 'CreateResourcePolicyStatementRequest')
+    CreateResourcePolicyStatementResponse = Shapes::StructureShape.new(name: 'CreateResourcePolicyStatementResponse')
     CreateSlotRequest = Shapes::StructureShape.new(name: 'CreateSlotRequest')
     CreateSlotResponse = Shapes::StructureShape.new(name: 'CreateSlotResponse')
     CreateSlotTypeRequest = Shapes::StructureShape.new(name: 'CreateSlotTypeRequest')
@@ -121,6 +130,10 @@ module Aws::LexModelsV2
     DeleteImportRequest = Shapes::StructureShape.new(name: 'DeleteImportRequest')
     DeleteImportResponse = Shapes::StructureShape.new(name: 'DeleteImportResponse')
     DeleteIntentRequest = Shapes::StructureShape.new(name: 'DeleteIntentRequest')
+    DeleteResourcePolicyRequest = Shapes::StructureShape.new(name: 'DeleteResourcePolicyRequest')
+    DeleteResourcePolicyResponse = Shapes::StructureShape.new(name: 'DeleteResourcePolicyResponse')
+    DeleteResourcePolicyStatementRequest = Shapes::StructureShape.new(name: 'DeleteResourcePolicyStatementRequest')
+    DeleteResourcePolicyStatementResponse = Shapes::StructureShape.new(name: 'DeleteResourcePolicyStatementResponse')
     DeleteSlotRequest = Shapes::StructureShape.new(name: 'DeleteSlotRequest')
     DeleteSlotTypeRequest = Shapes::StructureShape.new(name: 'DeleteSlotTypeRequest')
     DescribeBotAliasRequest = Shapes::StructureShape.new(name: 'DescribeBotAliasRequest')
@@ -137,6 +150,8 @@ module Aws::LexModelsV2
     DescribeImportResponse = Shapes::StructureShape.new(name: 'DescribeImportResponse')
     DescribeIntentRequest = Shapes::StructureShape.new(name: 'DescribeIntentRequest')
     DescribeIntentResponse = Shapes::StructureShape.new(name: 'DescribeIntentResponse')
+    DescribeResourcePolicyRequest = Shapes::StructureShape.new(name: 'DescribeResourcePolicyRequest')
+    DescribeResourcePolicyResponse = Shapes::StructureShape.new(name: 'DescribeResourcePolicyResponse')
     DescribeSlotRequest = Shapes::StructureShape.new(name: 'DescribeSlotRequest')
     DescribeSlotResponse = Shapes::StructureShape.new(name: 'DescribeSlotResponse')
     DescribeSlotTypeRequest = Shapes::StructureShape.new(name: 'DescribeSlotTypeRequest')
@@ -144,6 +159,7 @@ module Aws::LexModelsV2
     Description = Shapes::StringShape.new(name: 'Description')
     DialogCodeHookSettings = Shapes::StructureShape.new(name: 'DialogCodeHookSettings')
     DraftBotVersion = Shapes::StringShape.new(name: 'DraftBotVersion')
+    Effect = Shapes::StringShape.new(name: 'Effect')
     ExceptionMessage = Shapes::StringShape.new(name: 'ExceptionMessage')
     ExportFilter = Shapes::StructureShape.new(name: 'ExportFilter')
     ExportFilterName = Shapes::StringShape.new(name: 'ExportFilterName')
@@ -232,12 +248,18 @@ module Aws::LexModelsV2
     NumericalBotVersion = Shapes::StringShape.new(name: 'NumericalBotVersion')
     ObfuscationSetting = Shapes::StructureShape.new(name: 'ObfuscationSetting')
     ObfuscationSettingType = Shapes::StringShape.new(name: 'ObfuscationSettingType')
+    Operation = Shapes::StringShape.new(name: 'Operation')
+    OperationList = Shapes::ListShape.new(name: 'OperationList')
     OutputContext = Shapes::StructureShape.new(name: 'OutputContext')
     OutputContextsList = Shapes::ListShape.new(name: 'OutputContextsList')
     PlainTextMessage = Shapes::StructureShape.new(name: 'PlainTextMessage')
     PlainTextMessageValue = Shapes::StringShape.new(name: 'PlainTextMessageValue')
+    Policy = Shapes::StringShape.new(name: 'Policy')
     PreconditionFailedException = Shapes::StructureShape.new(name: 'PreconditionFailedException')
     PresignedS3Url = Shapes::StringShape.new(name: 'PresignedS3Url')
+    Principal = Shapes::StructureShape.new(name: 'Principal')
+    PrincipalArn = Shapes::StringShape.new(name: 'PrincipalArn')
+    PrincipalList = Shapes::ListShape.new(name: 'PrincipalList')
     PriorityValue = Shapes::IntegerShape.new(name: 'PriorityValue')
     PromptMaxRetries = Shapes::IntegerShape.new(name: 'PromptMaxRetries')
     PromptSpecification = Shapes::StructureShape.new(name: 'PromptSpecification')
@@ -247,6 +269,7 @@ module Aws::LexModelsV2
     ResourceNotFoundException = Shapes::StructureShape.new(name: 'ResourceNotFoundException')
     ResponseSpecification = Shapes::StructureShape.new(name: 'ResponseSpecification')
     RetryAfterSeconds = Shapes::IntegerShape.new(name: 'RetryAfterSeconds')
+    RevisionId = Shapes::StringShape.new(name: 'RevisionId')
     RoleArn = Shapes::StringShape.new(name: 'RoleArn')
     S3BucketArn = Shapes::StringShape.new(name: 'S3BucketArn')
     S3BucketLogDestination = Shapes::StructureShape.new(name: 'S3BucketLogDestination')
@@ -256,6 +279,7 @@ module Aws::LexModelsV2
     SampleUtterancesList = Shapes::ListShape.new(name: 'SampleUtterancesList')
     SampleValue = Shapes::StructureShape.new(name: 'SampleValue')
     SentimentAnalysisSettings = Shapes::StructureShape.new(name: 'SentimentAnalysisSettings')
+    ServicePrincipal = Shapes::StringShape.new(name: 'ServicePrincipal')
     ServiceQuotaExceededException = Shapes::StructureShape.new(name: 'ServiceQuotaExceededException')
     SessionTTL = Shapes::IntegerShape.new(name: 'SessionTTL')
     SkipResourceInUseCheck = Shapes::BooleanShape.new(name: 'SkipResourceInUseCheck')
@@ -319,6 +343,8 @@ module Aws::LexModelsV2
     UpdateExportResponse = Shapes::StructureShape.new(name: 'UpdateExportResponse')
     UpdateIntentRequest = Shapes::StructureShape.new(name: 'UpdateIntentRequest')
     UpdateIntentResponse = Shapes::StructureShape.new(name: 'UpdateIntentResponse')
+    UpdateResourcePolicyRequest = Shapes::StructureShape.new(name: 'UpdateResourcePolicyRequest')
+    UpdateResourcePolicyResponse = Shapes::StructureShape.new(name: 'UpdateResourcePolicyResponse')
     UpdateSlotRequest = Shapes::StructureShape.new(name: 'UpdateSlotRequest')
     UpdateSlotResponse = Shapes::StructureShape.new(name: 'UpdateSlotResponse')
     UpdateSlotTypeRequest = Shapes::StructureShape.new(name: 'UpdateSlotTypeRequest')
@@ -500,6 +526,12 @@ module Aws::LexModelsV2
     CodeHookSpecification.add_member(:lambda_code_hook, Shapes::ShapeRef.new(shape: LambdaCodeHook, required: true, location_name: "lambdaCodeHook"))
     CodeHookSpecification.struct_class = Types::CodeHookSpecification
 
+    ConditionKeyValueMap.key = Shapes::ShapeRef.new(shape: ConditionKey)
+    ConditionKeyValueMap.value = Shapes::ShapeRef.new(shape: ConditionValue)
+
+    ConditionMap.key = Shapes::ShapeRef.new(shape: ConditionOperator)
+    ConditionMap.value = Shapes::ShapeRef.new(shape: ConditionKeyValueMap)
+
     ConflictException.add_member(:message, Shapes::ShapeRef.new(shape: ExceptionMessage, location_name: "message"))
     ConflictException.struct_class = Types::ConflictException
 
@@ -629,6 +661,27 @@ module Aws::LexModelsV2
     CreateIntentResponse.add_member(:creation_date_time, Shapes::ShapeRef.new(shape: Timestamp, location_name: "creationDateTime"))
     CreateIntentResponse.struct_class = Types::CreateIntentResponse
 
+    CreateResourcePolicyRequest.add_member(:resource_arn, Shapes::ShapeRef.new(shape: AmazonResourceName, required: true, location: "uri", location_name: "resourceArn"))
+    CreateResourcePolicyRequest.add_member(:policy, Shapes::ShapeRef.new(shape: Policy, required: true, location_name: "policy"))
+    CreateResourcePolicyRequest.struct_class = Types::CreateResourcePolicyRequest
+
+    CreateResourcePolicyResponse.add_member(:resource_arn, Shapes::ShapeRef.new(shape: AmazonResourceName, location_name: "resourceArn"))
+    CreateResourcePolicyResponse.add_member(:revision_id, Shapes::ShapeRef.new(shape: RevisionId, location_name: "revisionId"))
+    CreateResourcePolicyResponse.struct_class = Types::CreateResourcePolicyResponse
+
+    CreateResourcePolicyStatementRequest.add_member(:resource_arn, Shapes::ShapeRef.new(shape: AmazonResourceName, required: true, location: "uri", location_name: "resourceArn"))
+    CreateResourcePolicyStatementRequest.add_member(:statement_id, Shapes::ShapeRef.new(shape: Name, required: true, location_name: "statementId"))
+    CreateResourcePolicyStatementRequest.add_member(:effect, Shapes::ShapeRef.new(shape: Effect, required: true, location_name: "effect"))
+    CreateResourcePolicyStatementRequest.add_member(:principal, Shapes::ShapeRef.new(shape: PrincipalList, required: true, location_name: "principal"))
+    CreateResourcePolicyStatementRequest.add_member(:action, Shapes::ShapeRef.new(shape: OperationList, required: true, location_name: "action"))
+    CreateResourcePolicyStatementRequest.add_member(:condition, Shapes::ShapeRef.new(shape: ConditionMap, location_name: "condition"))
+    CreateResourcePolicyStatementRequest.add_member(:expected_revision_id, Shapes::ShapeRef.new(shape: RevisionId, location: "querystring", location_name: "expectedRevisionId"))
+    CreateResourcePolicyStatementRequest.struct_class = Types::CreateResourcePolicyStatementRequest
+
+    CreateResourcePolicyStatementResponse.add_member(:resource_arn, Shapes::ShapeRef.new(shape: AmazonResourceName, location_name: "resourceArn"))
+    CreateResourcePolicyStatementResponse.add_member(:revision_id, Shapes::ShapeRef.new(shape: RevisionId, location_name: "revisionId"))
+    CreateResourcePolicyStatementResponse.struct_class = Types::CreateResourcePolicyStatementResponse
+
     CreateSlotRequest.add_member(:slot_name, Shapes::ShapeRef.new(shape: Name, required: true, location_name: "slotName"))
     CreateSlotRequest.add_member(:description, Shapes::ShapeRef.new(shape: Description, location_name: "description"))
     CreateSlotRequest.add_member(:slot_type_id, Shapes::ShapeRef.new(shape: BuiltInOrCustomSlotTypeId, required: true, location_name: "slotTypeId"))
@@ -746,6 +799,23 @@ module Aws::LexModelsV2
     DeleteIntentRequest.add_member(:locale_id, Shapes::ShapeRef.new(shape: LocaleId, required: true, location: "uri", location_name: "localeId"))
     DeleteIntentRequest.struct_class = Types::DeleteIntentRequest
 
+    DeleteResourcePolicyRequest.add_member(:resource_arn, Shapes::ShapeRef.new(shape: AmazonResourceName, required: true, location: "uri", location_name: "resourceArn"))
+    DeleteResourcePolicyRequest.add_member(:expected_revision_id, Shapes::ShapeRef.new(shape: RevisionId, location: "querystring", location_name: "expectedRevisionId"))
+    DeleteResourcePolicyRequest.struct_class = Types::DeleteResourcePolicyRequest
+
+    DeleteResourcePolicyResponse.add_member(:resource_arn, Shapes::ShapeRef.new(shape: AmazonResourceName, location_name: "resourceArn"))
+    DeleteResourcePolicyResponse.add_member(:revision_id, Shapes::ShapeRef.new(shape: RevisionId, location_name: "revisionId"))
+    DeleteResourcePolicyResponse.struct_class = Types::DeleteResourcePolicyResponse
+
+    DeleteResourcePolicyStatementRequest.add_member(:resource_arn, Shapes::ShapeRef.new(shape: AmazonResourceName, required: true, location: "uri", location_name: "resourceArn"))
+    DeleteResourcePolicyStatementRequest.add_member(:statement_id, Shapes::ShapeRef.new(shape: Name, required: true, location: "uri", location_name: "statementId"))
+    DeleteResourcePolicyStatementRequest.add_member(:expected_revision_id, Shapes::ShapeRef.new(shape: RevisionId, location: "querystring", location_name: "expectedRevisionId"))
+    DeleteResourcePolicyStatementRequest.struct_class = Types::DeleteResourcePolicyStatementRequest
+
+    DeleteResourcePolicyStatementResponse.add_member(:resource_arn, Shapes::ShapeRef.new(shape: AmazonResourceName, location_name: "resourceArn"))
+    DeleteResourcePolicyStatementResponse.add_member(:revision_id, Shapes::ShapeRef.new(shape: RevisionId, location_name: "revisionId"))
+    DeleteResourcePolicyStatementResponse.struct_class = Types::DeleteResourcePolicyStatementResponse
+
     DeleteSlotRequest.add_member(:slot_id, Shapes::ShapeRef.new(shape: Id, required: true, location: "uri", location_name: "slotId"))
     DeleteSlotRequest.add_member(:bot_id, Shapes::ShapeRef.new(shape: Id, required: true, location: "uri", location_name: "botId"))
     DeleteSlotRequest.add_member(:bot_version, Shapes::ShapeRef.new(shape: DraftBotVersion, required: true, location: "uri", location_name: "botVersion"))
@@ -883,6 +953,14 @@ module Aws::LexModelsV2
     DescribeIntentResponse.add_member(:last_updated_date_time, Shapes::ShapeRef.new(shape: Timestamp, location_name: "lastUpdatedDateTime"))
     DescribeIntentResponse.struct_class = Types::DescribeIntentResponse
 
+    DescribeResourcePolicyRequest.add_member(:resource_arn, Shapes::ShapeRef.new(shape: AmazonResourceName, required: true, location: "uri", location_name: "resourceArn"))
+    DescribeResourcePolicyRequest.struct_class = Types::DescribeResourcePolicyRequest
+
+    DescribeResourcePolicyResponse.add_member(:resource_arn, Shapes::ShapeRef.new(shape: AmazonResourceName, location_name: "resourceArn"))
+    DescribeResourcePolicyResponse.add_member(:policy, Shapes::ShapeRef.new(shape: Policy, location_name: "policy"))
+    DescribeResourcePolicyResponse.add_member(:revision_id, Shapes::ShapeRef.new(shape: RevisionId, location_name: "revisionId"))
+    DescribeResourcePolicyResponse.struct_class = Types::DescribeResourcePolicyResponse
+
     DescribeSlotRequest.add_member(:slot_id, Shapes::ShapeRef.new(shape: Id, required: true, location: "uri", location_name: "slotId"))
     DescribeSlotRequest.add_member(:bot_id, Shapes::ShapeRef.new(shape: Id, required: true, location: "uri", location_name: "botId"))
     DescribeSlotRequest.add_member(:bot_version, Shapes::ShapeRef.new(shape: BotVersion, required: true, location: "uri", location_name: "botVersion"))
@@ -1204,6 +1282,8 @@ module Aws::LexModelsV2
     ObfuscationSetting.add_member(:obfuscation_setting_type, Shapes::ShapeRef.new(shape: ObfuscationSettingType, required: true, location_name: "obfuscationSettingType"))
     ObfuscationSetting.struct_class = Types::ObfuscationSetting
 
+    OperationList.member = Shapes::ShapeRef.new(shape: Operation)
+
     OutputContext.add_member(:name, Shapes::ShapeRef.new(shape: Name, required: true, location_name: "name"))
     OutputContext.add_member(:time_to_live_in_seconds, Shapes::ShapeRef.new(shape: ContextTimeToLiveInSeconds, required: true, location_name: "timeToLiveInSeconds"))
     OutputContext.add_member(:turns_to_live, Shapes::ShapeRef.new(shape: ContextTurnsToLive, required: true, location_name: "turnsToLive"))
@@ -1217,6 +1297,12 @@ module Aws::LexModelsV2
     PreconditionFailedException.add_member(:message, Shapes::ShapeRef.new(shape: ExceptionMessage, location_name: "message"))
     PreconditionFailedException.struct_class = Types::PreconditionFailedException
 
+    Principal.add_member(:service, Shapes::ShapeRef.new(shape: ServicePrincipal, location_name: "service"))
+    Principal.add_member(:arn, Shapes::ShapeRef.new(shape: PrincipalArn, location_name: "arn"))
+    Principal.struct_class = Types::Principal
+
+    PrincipalList.member = Shapes::ShapeRef.new(shape: Principal)
+
     PromptSpecification.add_member(:message_groups, Shapes::ShapeRef.new(shape: MessageGroupsList, required: true, location_name: "messageGroups"))
     PromptSpecification.add_member(:max_retries, Shapes::ShapeRef.new(shape: PromptMaxRetries, required: true, location_name: "maxRetries"))
     PromptSpecification.add_member(:allow_interrupt, Shapes::ShapeRef.new(shape: BoxedBoolean, location_name: "allowInterrupt"))
@@ -1491,6 +1577,15 @@ module Aws::LexModelsV2
     UpdateIntentResponse.add_member(:last_updated_date_time, Shapes::ShapeRef.new(shape: Timestamp, location_name: "lastUpdatedDateTime"))
     UpdateIntentResponse.struct_class = Types::UpdateIntentResponse
 
+    UpdateResourcePolicyRequest.add_member(:resource_arn, Shapes::ShapeRef.new(shape: AmazonResourceName, required: true, location: "uri", location_name: "resourceArn"))
+    UpdateResourcePolicyRequest.add_member(:policy, Shapes::ShapeRef.new(shape: Policy, required: true, location_name: "policy"))
+    UpdateResourcePolicyRequest.add_member(:expected_revision_id, Shapes::ShapeRef.new(shape: RevisionId, location: "querystring", location_name: "expectedRevisionId"))
+    UpdateResourcePolicyRequest.struct_class = Types::UpdateResourcePolicyRequest
+
+    UpdateResourcePolicyResponse.add_member(:resource_arn, Shapes::ShapeRef.new(shape: AmazonResourceName, location_name: "resourceArn"))
+    UpdateResourcePolicyResponse.add_member(:revision_id, Shapes::ShapeRef.new(shape: RevisionId, location_name: "revisionId"))
+    UpdateResourcePolicyResponse.struct_class = Types::UpdateResourcePolicyResponse
+
     UpdateSlotRequest.add_member(:slot_id, Shapes::ShapeRef.new(shape: Id, required: true, location: "uri", location_name: "slotId"))
     UpdateSlotRequest.add_member(:slot_name, Shapes::ShapeRef.new(shape: Name, required: true, location_name: "slotName"))
     UpdateSlotRequest.add_member(:description, Shapes::ShapeRef.new(shape: Description, location_name: "description"))
@@ -1669,6 +1764,35 @@ module Aws::LexModelsV2
         o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
       end)
 
+      api.add_operation(:create_resource_policy, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "CreateResourcePolicy"
+        o.http_method = "POST"
+        o.http_request_uri = "/policy/{resourceArn}/"
+        o.input = Shapes::ShapeRef.new(shape: CreateResourcePolicyRequest)
+        o.output = Shapes::ShapeRef.new(shape: CreateResourcePolicyResponse)
+        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: ServiceQuotaExceededException)
+        o.errors << Shapes::ShapeRef.new(shape: PreconditionFailedException)
+        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
+        o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
+      end)
+
+      api.add_operation(:create_resource_policy_statement, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "CreateResourcePolicyStatement"
+        o.http_method = "POST"
+        o.http_request_uri = "/policy/{resourceArn}/statements/"
+        o.input = Shapes::ShapeRef.new(shape: CreateResourcePolicyStatementRequest)
+        o.output = Shapes::ShapeRef.new(shape: CreateResourcePolicyStatementResponse)
+        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: ConflictException)
+        o.errors << Shapes::ShapeRef.new(shape: ServiceQuotaExceededException)
+        o.errors << Shapes::ShapeRef.new(shape: PreconditionFailedException)
+        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
+        o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
+      end)
+
       api.add_operation(:create_slot, Seahorse::Model::Operation.new.tap do |o|
         o.name = "CreateSlot"
         o.http_method = "PUT"
@@ -1806,6 +1930,30 @@ module Aws::LexModelsV2
         o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
       end)
 
+      api.add_operation(:delete_resource_policy, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "DeleteResourcePolicy"
+        o.http_method = "DELETE"
+        o.http_request_uri = "/policy/{resourceArn}/"
+        o.input = Shapes::ShapeRef.new(shape: DeleteResourcePolicyRequest)
+        o.output = Shapes::ShapeRef.new(shape: DeleteResourcePolicyResponse)
+        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: PreconditionFailedException)
+        o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
+      end)
+
+      api.add_operation(:delete_resource_policy_statement, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "DeleteResourcePolicyStatement"
+        o.http_method = "DELETE"
+        o.http_request_uri = "/policy/{resourceArn}/statements/{statementId}/"
+        o.input = Shapes::ShapeRef.new(shape: DeleteResourcePolicyStatementRequest)
+        o.output = Shapes::ShapeRef.new(shape: DeleteResourcePolicyStatementResponse)
+        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: PreconditionFailedException)
+        o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
+      end)
+
       api.add_operation(:delete_slot, Seahorse::Model::Operation.new.tap do |o|
         o.name = "DeleteSlot"
         o.http_method = "DELETE"
@@ -1923,6 +2071,17 @@ module Aws::LexModelsV2
         o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
       end)
 
+      api.add_operation(:describe_resource_policy, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "DescribeResourcePolicy"
+        o.http_method = "GET"
+        o.http_request_uri = "/policy/{resourceArn}/"
+        o.input = Shapes::ShapeRef.new(shape: DescribeResourcePolicyRequest)
+        o.output = Shapes::ShapeRef.new(shape: DescribeResourcePolicyResponse)
+        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
+      end)
+
       api.add_operation(:describe_slot, Seahorse::Model::Operation.new.tap do |o|
         o.name = "DescribeSlot"
         o.http_method = "GET"
@@ -2265,6 +2424,20 @@ module Aws::LexModelsV2
         o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
       end)
 
+      api.add_operation(:update_resource_policy, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "UpdateResourcePolicy"
+        o.http_method = "PUT"
+        o.http_request_uri = "/policy/{resourceArn}/"
+        o.input = Shapes::ShapeRef.new(shape: UpdateResourcePolicyRequest)
+        o.output = Shapes::ShapeRef.new(shape: UpdateResourcePolicyResponse)
+        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: ServiceQuotaExceededException)
+        o.errors << Shapes::ShapeRef.new(shape: PreconditionFailedException)
+        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
+        o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
+      end)
+
       api.add_operation(:update_slot, Seahorse::Model::Operation.new.tap do |o|
         o.name = "UpdateSlot"
         o.http_method = "PUT"

data/lib/aws-sdk-lexmodelsv2/types.rb

@@ -2081,6 +2081,184 @@ module Aws::LexModelsV2
       include Aws::Structure
     end
 
+    # @note When making an API call, you may pass CreateResourcePolicyRequest
+    #   data as a hash:
+    #
+    #       {
+    #         resource_arn: "AmazonResourceName", # required
+    #         policy: "Policy", # required
+    #       }
+    #
+    # @!attribute [rw] resource_arn
+    #   The Amazon Resource Name (ARN) of the bot or bot alias that the
+    #   resource policy is attached to.
+    #   @return [String]
+    #
+    # @!attribute [rw] policy
+    #   A resource policy to add to the resource. The policy is a JSON
+    #   structure that contains one or more statements that define the
+    #   policy. The policy must follow the IAM syntax. For more information
+    #   about the contents of a JSON policy document, see [ IAM JSON policy
+    #   reference ][1].
+    #
+    #   If the policy isn't valid, Amazon Lex returns a validation
+    #   exception.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies.html
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/models.lex.v2-2020-08-07/CreateResourcePolicyRequest AWS API Documentation
+    #
+    class CreateResourcePolicyRequest < Struct.new(
+      :resource_arn,
+      :policy)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] resource_arn
+    #   The Amazon Resource Name (ARN) of the bot or bot alias that the
+    #   resource policy was attached to.
+    #   @return [String]
+    #
+    # @!attribute [rw] revision_id
+    #   The current revision of the resource policy. Use the revision ID to
+    #   make sure that you are updating the most current version of a
+    #   resource policy when you add a policy statement to a resource,
+    #   delete a resource, or update a resource.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/models.lex.v2-2020-08-07/CreateResourcePolicyResponse AWS API Documentation
+    #
+    class CreateResourcePolicyResponse < Struct.new(
+      :resource_arn,
+      :revision_id)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @note When making an API call, you may pass CreateResourcePolicyStatementRequest
+    #   data as a hash:
+    #
+    #       {
+    #         resource_arn: "AmazonResourceName", # required
+    #         statement_id: "Name", # required
+    #         effect: "Allow", # required, accepts Allow, Deny
+    #         principal: [ # required
+    #           {
+    #             service: "ServicePrincipal",
+    #             arn: "PrincipalArn",
+    #           },
+    #         ],
+    #         action: ["Operation"], # required
+    #         condition: {
+    #           "ConditionOperator" => {
+    #             "ConditionKey" => "ConditionValue",
+    #           },
+    #         },
+    #         expected_revision_id: "RevisionId",
+    #       }
+    #
+    # @!attribute [rw] resource_arn
+    #   The Amazon Resource Name (ARN) of the bot or bot alias that the
+    #   resource policy is attached to.
+    #   @return [String]
+    #
+    # @!attribute [rw] statement_id
+    #   The name of the statement. The ID is the same as the `Sid` IAM
+    #   property. The statement name must be unique within the policy. For
+    #   more information, see [IAM JSON policy elements: Sid][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_sid.html
+    #   @return [String]
+    #
+    # @!attribute [rw] effect
+    #   Determines whether the statement allows or denies access to the
+    #   resource.
+    #   @return [String]
+    #
+    # @!attribute [rw] principal
+    #   An IAM principal, such as an IAM users, IAM roles, or AWS services
+    #   that is allowed or denied access to a resource. For more
+    #   information, see [AWS JSON policy elements: Principal][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_principal.html
+    #   @return [Array<Types::Principal>]
+    #
+    # @!attribute [rw] action
+    #   The Amazon Lex action that this policy either allows or denies. The
+    #   action must apply to the resource type of the specified ARN. For
+    #   more information, see [ Actions, resources, and condition keys for
+    #   Amazon Lex V2][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonlexv2.html
+    #   @return [Array<String>]
+    #
+    # @!attribute [rw] condition
+    #   Specifies a condition when the policy is in effect. If the principal
+    #   of the policy is a service principal, you must provide two condition
+    #   blocks, one with a SourceAccount global condition key and one with a
+    #   SourceArn global condition key.
+    #
+    #   For more information, see [IAM JSON policy elements: Condition ][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition.html
+    #   @return [Hash<String,Hash<String,String>>]
+    #
+    # @!attribute [rw] expected_revision_id
+    #   The identifier of the revision of the policy to edit. If this
+    #   revision ID doesn't match the current revision ID, Amazon Lex
+    #   throws an exception.
+    #
+    #   If you don't specify a revision, Amazon Lex overwrites the contents
+    #   of the policy with the new values.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/models.lex.v2-2020-08-07/CreateResourcePolicyStatementRequest AWS API Documentation
+    #
+    class CreateResourcePolicyStatementRequest < Struct.new(
+      :resource_arn,
+      :statement_id,
+      :effect,
+      :principal,
+      :action,
+      :condition,
+      :expected_revision_id)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] resource_arn
+    #   The Amazon Resource Name (ARN) of the bot or bot alias that the
+    #   resource policy is attached to.
+    #   @return [String]
+    #
+    # @!attribute [rw] revision_id
+    #   The current revision of the resource policy. Use the revision ID to
+    #   make sure that you are updating the most current version of a
+    #   resource policy when you add a policy statement to a resource,
+    #   delete a resource, or update a resource.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/models.lex.v2-2020-08-07/CreateResourcePolicyStatementResponse AWS API Documentation
+    #
+    class CreateResourcePolicyStatementResponse < Struct.new(
+      :resource_arn,
+      :revision_id)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @note When making an API call, you may pass CreateSlotRequest
     #   data as a hash:
     #
@@ -3070,6 +3248,115 @@ module Aws::LexModelsV2
       include Aws::Structure
     end
 
+    # @note When making an API call, you may pass DeleteResourcePolicyRequest
+    #   data as a hash:
+    #
+    #       {
+    #         resource_arn: "AmazonResourceName", # required
+    #         expected_revision_id: "RevisionId",
+    #       }
+    #
+    # @!attribute [rw] resource_arn
+    #   The Amazon Resource Name (ARN) of the bot or bot alias that has the
+    #   resource policy attached.
+    #   @return [String]
+    #
+    # @!attribute [rw] expected_revision_id
+    #   The identifier of the revision to edit. If this ID doesn't match
+    #   the current revision number, Amazon Lex returns an exception
+    #
+    #   If you don't specify a revision ID, Amazon Lex will delete the
+    #   current policy.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/models.lex.v2-2020-08-07/DeleteResourcePolicyRequest AWS API Documentation
+    #
+    class DeleteResourcePolicyRequest < Struct.new(
+      :resource_arn,
+      :expected_revision_id)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] resource_arn
+    #   The Amazon Resource Name (ARN) of the bot or bot alias that the
+    #   resource policy was deleted from.
+    #   @return [String]
+    #
+    # @!attribute [rw] revision_id
+    #   The current revision of the resource policy. Use the revision ID to
+    #   make sure that you are updating the most current version of a
+    #   resource policy when you add a policy statement to a resource,
+    #   delete a resource, or update a resource.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/models.lex.v2-2020-08-07/DeleteResourcePolicyResponse AWS API Documentation
+    #
+    class DeleteResourcePolicyResponse < Struct.new(
+      :resource_arn,
+      :revision_id)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @note When making an API call, you may pass DeleteResourcePolicyStatementRequest
+    #   data as a hash:
+    #
+    #       {
+    #         resource_arn: "AmazonResourceName", # required
+    #         statement_id: "Name", # required
+    #         expected_revision_id: "RevisionId",
+    #       }
+    #
+    # @!attribute [rw] resource_arn
+    #   The Amazon Resource Name (ARN) of the bot or bot alias that the
+    #   resource policy is attached to.
+    #   @return [String]
+    #
+    # @!attribute [rw] statement_id
+    #   The name of the statement (SID) to delete from the policy.
+    #   @return [String]
+    #
+    # @!attribute [rw] expected_revision_id
+    #   The identifier of the revision of the policy to delete the statement
+    #   from. If this revision ID doesn't match the current revision ID,
+    #   Amazon Lex throws an exception.
+    #
+    #   If you don't specify a revision, Amazon Lex removes the current
+    #   contents of the statement.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/models.lex.v2-2020-08-07/DeleteResourcePolicyStatementRequest AWS API Documentation
+    #
+    class DeleteResourcePolicyStatementRequest < Struct.new(
+      :resource_arn,
+      :statement_id,
+      :expected_revision_id)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] resource_arn
+    #   The Amazon Resource Name (ARN) of the bot or bot alias that the
+    #   resource policy statement was removed from.
+    #   @return [String]
+    #
+    # @!attribute [rw] revision_id
+    #   The current revision of the resource policy. Use the revision ID to
+    #   make sure that you are updating the most current version of a
+    #   resource policy when you add a policy statement to a resource,
+    #   delete a resource, or update a resource.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/models.lex.v2-2020-08-07/DeleteResourcePolicyStatementResponse AWS API Documentation
+    #
+    class DeleteResourcePolicyStatementResponse < Struct.new(
+      :resource_arn,
+      :revision_id)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @note When making an API call, you may pass DeleteSlotRequest
     #   data as a hash:
     #
@@ -3850,6 +4137,58 @@ module Aws::LexModelsV2
       include Aws::Structure
     end
 
+    # @note When making an API call, you may pass DescribeResourcePolicyRequest
+    #   data as a hash:
+    #
+    #       {
+    #         resource_arn: "AmazonResourceName", # required
+    #       }
+    #
+    # @!attribute [rw] resource_arn
+    #   The Amazon Resource Name (ARN) of the bot or bot alias that the
+    #   resource policy is attached to.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/models.lex.v2-2020-08-07/DescribeResourcePolicyRequest AWS API Documentation
+    #
+    class DescribeResourcePolicyRequest < Struct.new(
+      :resource_arn)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] resource_arn
+    #   The Amazon Resource Name (ARN) of the bot or bot alias that the
+    #   resource policy is attached to.
+    #   @return [String]
+    #
+    # @!attribute [rw] policy
+    #   The JSON structure that contains the resource policy. For more
+    #   information about the contents of a JSON policy document, see [ IAM
+    #   JSON policy reference ][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies.html
+    #   @return [String]
+    #
+    # @!attribute [rw] revision_id
+    #   The current revision of the resource policy. Use the revision ID to
+    #   make sure that you are updating the most current version of a
+    #   resource policy when you add a policy statement to a resource,
+    #   delete a resource, or update a resource.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/models.lex.v2-2020-08-07/DescribeResourcePolicyResponse AWS API Documentation
+    #
+    class DescribeResourcePolicyResponse < Struct.new(
+      :resource_arn,
+      :policy,
+      :revision_id)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @note When making an API call, you may pass DescribeSlotRequest
     #   data as a hash:
     #
@@ -6218,6 +6557,41 @@ module Aws::LexModelsV2
       include Aws::Structure
     end
 
+    # The IAM principal that you allowing or denying access to an Amazon Lex
+    # action. You must provide a `service` or an `arn`, but not both in the
+    # same statement. For more information, see [ AWS JSON policy elements:
+    # Principal ][1].
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_principal.html
+    #
+    # @note When making an API call, you may pass Principal
+    #   data as a hash:
+    #
+    #       {
+    #         service: "ServicePrincipal",
+    #         arn: "PrincipalArn",
+    #       }
+    #
+    # @!attribute [rw] service
+    #   The name of the AWS service that should allowed or denied access to
+    #   an Amazon Lex action.
+    #   @return [String]
+    #
+    # @!attribute [rw] arn
+    #   The Amazon Resource Name (ARN) of the principal.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/models.lex.v2-2020-08-07/Principal AWS API Documentation
+    #
+    class Principal < Struct.new(
+      :service,
+      :arn)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Specifies a list of message groups that Amazon Lex sends to a user to
     # elicit a response.
     #
@@ -8434,6 +8808,75 @@ module Aws::LexModelsV2
       include Aws::Structure
     end
 
+    # @note When making an API call, you may pass UpdateResourcePolicyRequest
+    #   data as a hash:
+    #
+    #       {
+    #         resource_arn: "AmazonResourceName", # required
+    #         policy: "Policy", # required
+    #         expected_revision_id: "RevisionId",
+    #       }
+    #
+    # @!attribute [rw] resource_arn
+    #   The Amazon Resource Name (ARN) of the bot or bot alias that the
+    #   resource policy is attached to.
+    #   @return [String]
+    #
+    # @!attribute [rw] policy
+    #   A resource policy to add to the resource. The policy is a JSON
+    #   structure that contains one or more statements that define the
+    #   policy. The policy must follow the IAM syntax. For more information
+    #   about the contents of a JSON policy document, see [ IAM JSON policy
+    #   reference ][1].
+    #
+    #   If the policy isn't valid, Amazon Lex returns a validation
+    #   exception.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies.html
+    #   @return [String]
+    #
+    # @!attribute [rw] expected_revision_id
+    #   The identifier of the revision of the policy to update. If this
+    #   revision ID doesn't match the current revision ID, Amazon Lex
+    #   throws an exception.
+    #
+    #   If you don't specify a revision, Amazon Lex overwrites the contents
+    #   of the policy with the new values.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/models.lex.v2-2020-08-07/UpdateResourcePolicyRequest AWS API Documentation
+    #
+    class UpdateResourcePolicyRequest < Struct.new(
+      :resource_arn,
+      :policy,
+      :expected_revision_id)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] resource_arn
+    #   The Amazon Resource Name (ARN) of the bot or bot alias that the
+    #   resource policy is attached to.
+    #   @return [String]
+    #
+    # @!attribute [rw] revision_id
+    #   The current revision of the resource policy. Use the revision ID to
+    #   make sure that you are updating the most current version of a
+    #   resource policy when you add a policy statement to a resource,
+    #   delete a resource, or update a resource.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/models.lex.v2-2020-08-07/UpdateResourcePolicyResponse AWS API Documentation
+    #
+    class UpdateResourcePolicyResponse < Struct.new(
+      :resource_arn,
+      :revision_id)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @note When making an API call, you may pass UpdateSlotRequest
     #   data as a hash:
     #

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-lexmodelsv2
 version: !ruby/object:Gem::Version
-  version: 1.3.0
+  version: 1.4.0
 platform: ruby
 authors:
 - Amazon Web Services
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-05-18 00:00:00.000000000 Z
+date: 2021-05-20 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-core