aws-sdk-macie2 1.26.0 → 1.27.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 8312d9a8cbab7c3b940504b68878ff52067f516b39387516c6730912248fc380
-  data.tar.gz: 9873072f2ffde814bdb325b7f0cfab36ce52b67edae78ec6fb5ffdeed700ee70
+  metadata.gz: b52d5175c41c494be9cf58b4e8d5cb714b082fa7d7086e5893cb6db016400856
+  data.tar.gz: 517e2a12fc1e5086bf8c7791d22acd5e65ad3ff26a6aeb9eb712eb4153e5faf7
 SHA512:
-  metadata.gz: 66d1ad4f766cfe4b4c1a16022db47113b213faffe4f483da55f096d7687e486c3488d5748580093c807f7a0bbe84b0bd177fe9e9c2d30a395b83fdec707fe6af
-  data.tar.gz: 89326c79facb785cd6bb914ada9e970763c4e1201c7a4397938e6c7a96cad0053cb1952159a4a50dcb8ecf8c28df488367ce8537e4a0f3e4a5e5bbd910a761a8
+  metadata.gz: ef03ba248c71d3c5d3472b9aa5cc336eb7264d029bfbd47795fd8715c811385d3debefc97a97c3f39540339b8b96aac967defd54b846d42d8f26ea77ec5e9667
+  data.tar.gz: 7866928330a894da7908780670ea1b8573abae7dcf3667b508135ea412875cc08ff91ed30bac9c9b2616b10c68bbcc86ac684878623864e734ebae5cd9d820d9

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.27.0 (2021-04-29)
+------------------
+
+* Feature - The Amazon Macie API now provides S3 bucket metadata that indicates whether a bucket policy requires server-side encryption of objects when objects are uploaded to the bucket.
+
 1.26.0 (2021-03-22)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.26.0
+1.27.0

data/lib/aws-sdk-macie2.rb

@@ -48,6 +48,6 @@ require_relative 'aws-sdk-macie2/customizations'
 # @!group service
 module Aws::Macie2
 
-  GEM_VERSION = '1.26.0'
+  GEM_VERSION = '1.27.0'
 
 end

data/lib/aws-sdk-macie2/client.rb

@@ -919,6 +919,7 @@ module Aws::Macie2
     #
     #   resp.buckets #=> Array
     #   resp.buckets[0].account_id #=> String
+    #   resp.buckets[0].allows_unencrypted_object_uploads #=> String, one of "TRUE", "FALSE", "UNKNOWN"
     #   resp.buckets[0].bucket_arn #=> String
     #   resp.buckets[0].bucket_created_at #=> Time
     #   resp.buckets[0].bucket_name #=> String
@@ -934,6 +935,7 @@ module Aws::Macie2
     #   resp.buckets[0].object_count_by_encryption_type.kms_managed #=> Integer
     #   resp.buckets[0].object_count_by_encryption_type.s3_managed #=> Integer
     #   resp.buckets[0].object_count_by_encryption_type.unencrypted #=> Integer
+    #   resp.buckets[0].object_count_by_encryption_type.unknown #=> Integer
     #   resp.buckets[0].public_access.effective_permission #=> String, one of "PUBLIC", "NOT_PUBLIC", "UNKNOWN"
     #   resp.buckets[0].public_access.permission_configuration.account_level_permissions.block_public_access.block_public_acls #=> Boolean
     #   resp.buckets[0].public_access.permission_configuration.account_level_permissions.block_public_access.block_public_policy #=> Boolean
@@ -1281,6 +1283,7 @@ module Aws::Macie2
     #   * {Types::GetBucketStatisticsResponse#bucket_count #bucket_count} => Integer
     #   * {Types::GetBucketStatisticsResponse#bucket_count_by_effective_permission #bucket_count_by_effective_permission} => Types::BucketCountByEffectivePermission
     #   * {Types::GetBucketStatisticsResponse#bucket_count_by_encryption_type #bucket_count_by_encryption_type} => Types::BucketCountByEncryptionType
+    #   * {Types::GetBucketStatisticsResponse#bucket_count_by_object_encryption_requirement #bucket_count_by_object_encryption_requirement} => Types::BucketCountPolicyAllowsUnencryptedObjectUploads
     #   * {Types::GetBucketStatisticsResponse#bucket_count_by_shared_access_type #bucket_count_by_shared_access_type} => Types::BucketCountBySharedAccessType
     #   * {Types::GetBucketStatisticsResponse#classifiable_object_count #classifiable_object_count} => Integer
     #   * {Types::GetBucketStatisticsResponse#classifiable_size_in_bytes #classifiable_size_in_bytes} => Integer
@@ -1307,6 +1310,10 @@ module Aws::Macie2
     #   resp.bucket_count_by_encryption_type.kms_managed #=> Integer
     #   resp.bucket_count_by_encryption_type.s3_managed #=> Integer
     #   resp.bucket_count_by_encryption_type.unencrypted #=> Integer
+    #   resp.bucket_count_by_encryption_type.unknown #=> Integer
+    #   resp.bucket_count_by_object_encryption_requirement.allows_unencrypted_object_uploads #=> Integer
+    #   resp.bucket_count_by_object_encryption_requirement.denies_unencrypted_object_uploads #=> Integer
+    #   resp.bucket_count_by_object_encryption_requirement.unknown #=> Integer
     #   resp.bucket_count_by_shared_access_type.external #=> Integer
     #   resp.bucket_count_by_shared_access_type.internal #=> Integer
     #   resp.bucket_count_by_shared_access_type.not_shared #=> Integer
@@ -1612,6 +1619,7 @@ module Aws::Macie2
     #   resp.findings[0].policy_details.actor.user_identity.root.principal_id #=> String
     #   resp.findings[0].policy_details.actor.user_identity.type #=> String, one of "AssumedRole", "IAMUser", "FederatedUser", "Root", "AWSAccount", "AWSService"
     #   resp.findings[0].region #=> String
+    #   resp.findings[0].resources_affected.s3_bucket.allows_unencrypted_object_uploads #=> String, one of "TRUE", "FALSE", "UNKNOWN"
     #   resp.findings[0].resources_affected.s3_bucket.arn #=> String
     #   resp.findings[0].resources_affected.s3_bucket.created_at #=> Time
     #   resp.findings[0].resources_affected.s3_bucket.default_server_side_encryption.encryption_type #=> String, one of "NONE", "AES256", "aws:kms", "UNKNOWN"
@@ -2683,7 +2691,7 @@ module Aws::Macie2
         params: params,
         config: config)
       context[:gem_name] = 'aws-sdk-macie2'
-      context[:gem_version] = '1.26.0'
+      context[:gem_version] = '1.27.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-macie2/client_api.rb

@@ -21,6 +21,7 @@ module Aws::Macie2
     AccountLevelPermissions = Shapes::StructureShape.new(name: 'AccountLevelPermissions')
     AdminAccount = Shapes::StructureShape.new(name: 'AdminAccount')
     AdminStatus = Shapes::StringShape.new(name: 'AdminStatus')
+    AllowsUnencryptedObjectUploads = Shapes::StringShape.new(name: 'AllowsUnencryptedObjectUploads')
     ApiCallDetails = Shapes::StructureShape.new(name: 'ApiCallDetails')
     AssumedRole = Shapes::StructureShape.new(name: 'AssumedRole')
     AwsAccount = Shapes::StructureShape.new(name: 'AwsAccount')
@@ -32,6 +33,7 @@ module Aws::Macie2
     BucketCountByEffectivePermission = Shapes::StructureShape.new(name: 'BucketCountByEffectivePermission')
     BucketCountByEncryptionType = Shapes::StructureShape.new(name: 'BucketCountByEncryptionType')
     BucketCountBySharedAccessType = Shapes::StructureShape.new(name: 'BucketCountBySharedAccessType')
+    BucketCountPolicyAllowsUnencryptedObjectUploads = Shapes::StructureShape.new(name: 'BucketCountPolicyAllowsUnencryptedObjectUploads')
     BucketCriteria = Shapes::MapShape.new(name: 'BucketCriteria')
     BucketCriteriaAdditionalProperties = Shapes::StructureShape.new(name: 'BucketCriteriaAdditionalProperties')
     BucketLevelPermissions = Shapes::StructureShape.new(name: 'BucketLevelPermissions')
@@ -385,6 +387,7 @@ module Aws::Macie2
     BucketCountByEncryptionType.add_member(:kms_managed, Shapes::ShapeRef.new(shape: __long, location_name: "kmsManaged"))
     BucketCountByEncryptionType.add_member(:s3_managed, Shapes::ShapeRef.new(shape: __long, location_name: "s3Managed"))
     BucketCountByEncryptionType.add_member(:unencrypted, Shapes::ShapeRef.new(shape: __long, location_name: "unencrypted"))
+    BucketCountByEncryptionType.add_member(:unknown, Shapes::ShapeRef.new(shape: __long, location_name: "unknown"))
     BucketCountByEncryptionType.struct_class = Types::BucketCountByEncryptionType
 
     BucketCountBySharedAccessType.add_member(:external, Shapes::ShapeRef.new(shape: __long, location_name: "external"))
@@ -393,6 +396,11 @@ module Aws::Macie2
     BucketCountBySharedAccessType.add_member(:unknown, Shapes::ShapeRef.new(shape: __long, location_name: "unknown"))
     BucketCountBySharedAccessType.struct_class = Types::BucketCountBySharedAccessType
 
+    BucketCountPolicyAllowsUnencryptedObjectUploads.add_member(:allows_unencrypted_object_uploads, Shapes::ShapeRef.new(shape: __long, location_name: "allowsUnencryptedObjectUploads"))
+    BucketCountPolicyAllowsUnencryptedObjectUploads.add_member(:denies_unencrypted_object_uploads, Shapes::ShapeRef.new(shape: __long, location_name: "deniesUnencryptedObjectUploads"))
+    BucketCountPolicyAllowsUnencryptedObjectUploads.add_member(:unknown, Shapes::ShapeRef.new(shape: __long, location_name: "unknown"))
+    BucketCountPolicyAllowsUnencryptedObjectUploads.struct_class = Types::BucketCountPolicyAllowsUnencryptedObjectUploads
+
     BucketCriteria.key = Shapes::ShapeRef.new(shape: __string)
     BucketCriteria.value = Shapes::ShapeRef.new(shape: BucketCriteriaAdditionalProperties)
 
@@ -411,6 +419,7 @@ module Aws::Macie2
     BucketLevelPermissions.struct_class = Types::BucketLevelPermissions
 
     BucketMetadata.add_member(:account_id, Shapes::ShapeRef.new(shape: __string, location_name: "accountId"))
+    BucketMetadata.add_member(:allows_unencrypted_object_uploads, Shapes::ShapeRef.new(shape: AllowsUnencryptedObjectUploads, location_name: "allowsUnencryptedObjectUploads"))
     BucketMetadata.add_member(:bucket_arn, Shapes::ShapeRef.new(shape: __string, location_name: "bucketArn"))
     BucketMetadata.add_member(:bucket_created_at, Shapes::ShapeRef.new(shape: __timestampIso8601, location_name: "bucketCreatedAt"))
     BucketMetadata.add_member(:bucket_name, Shapes::ShapeRef.new(shape: __string, location_name: "bucketName"))
@@ -754,6 +763,7 @@ module Aws::Macie2
     GetBucketStatisticsResponse.add_member(:bucket_count, Shapes::ShapeRef.new(shape: __long, location_name: "bucketCount"))
     GetBucketStatisticsResponse.add_member(:bucket_count_by_effective_permission, Shapes::ShapeRef.new(shape: BucketCountByEffectivePermission, location_name: "bucketCountByEffectivePermission"))
     GetBucketStatisticsResponse.add_member(:bucket_count_by_encryption_type, Shapes::ShapeRef.new(shape: BucketCountByEncryptionType, location_name: "bucketCountByEncryptionType"))
+    GetBucketStatisticsResponse.add_member(:bucket_count_by_object_encryption_requirement, Shapes::ShapeRef.new(shape: BucketCountPolicyAllowsUnencryptedObjectUploads, location_name: "bucketCountByObjectEncryptionRequirement"))
     GetBucketStatisticsResponse.add_member(:bucket_count_by_shared_access_type, Shapes::ShapeRef.new(shape: BucketCountBySharedAccessType, location_name: "bucketCountBySharedAccessType"))
     GetBucketStatisticsResponse.add_member(:classifiable_object_count, Shapes::ShapeRef.new(shape: __long, location_name: "classifiableObjectCount"))
     GetBucketStatisticsResponse.add_member(:classifiable_size_in_bytes, Shapes::ShapeRef.new(shape: __long, location_name: "classifiableSizeInBytes"))
@@ -1050,6 +1060,7 @@ module Aws::Macie2
     ObjectCountByEncryptionType.add_member(:kms_managed, Shapes::ShapeRef.new(shape: __long, location_name: "kmsManaged"))
     ObjectCountByEncryptionType.add_member(:s3_managed, Shapes::ShapeRef.new(shape: __long, location_name: "s3Managed"))
     ObjectCountByEncryptionType.add_member(:unencrypted, Shapes::ShapeRef.new(shape: __long, location_name: "unencrypted"))
+    ObjectCountByEncryptionType.add_member(:unknown, Shapes::ShapeRef.new(shape: __long, location_name: "unknown"))
     ObjectCountByEncryptionType.struct_class = Types::ObjectCountByEncryptionType
 
     ObjectLevelStatistics.add_member(:file_type, Shapes::ShapeRef.new(shape: __long, location_name: "fileType"))
@@ -1112,6 +1123,7 @@ module Aws::Macie2
     ResourcesAffected.add_member(:s3_object, Shapes::ShapeRef.new(shape: S3Object, location_name: "s3Object"))
     ResourcesAffected.struct_class = Types::ResourcesAffected
 
+    S3Bucket.add_member(:allows_unencrypted_object_uploads, Shapes::ShapeRef.new(shape: AllowsUnencryptedObjectUploads, location_name: "allowsUnencryptedObjectUploads"))
     S3Bucket.add_member(:arn, Shapes::ShapeRef.new(shape: __string, location_name: "arn"))
     S3Bucket.add_member(:created_at, Shapes::ShapeRef.new(shape: __timestampIso8601, location_name: "createdAt"))
     S3Bucket.add_member(:default_server_side_encryption, Shapes::ShapeRef.new(shape: ServerSideEncryption, location_name: "defaultServerSideEncryption"))

data/lib/aws-sdk-macie2/types.rb

@@ -376,7 +376,13 @@ module Aws::Macie2
 
     # Provides information about the number of S3 buckets that use certain
     # types of server-side encryption by default or don't encrypt new
-    # objects by default.
+    # objects by default. For detailed information about these settings, see
+    # [Setting default server-side encryption behavior for Amazon S3
+    # buckets][1] in the *Amazon Simple Storage Service User Guide*.
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/bucket-encryption.html
     #
     # @!attribute [rw] kms_managed
     #   @return [Integer]
@@ -387,18 +393,22 @@ module Aws::Macie2
     # @!attribute [rw] unencrypted
     #   @return [Integer]
     #
+    # @!attribute [rw] unknown
+    #   @return [Integer]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/macie2-2020-01-01/BucketCountByEncryptionType AWS API Documentation
     #
     class BucketCountByEncryptionType < Struct.new(
       :kms_managed,
       :s3_managed,
-      :unencrypted)
+      :unencrypted,
+      :unknown)
       SENSITIVE = []
       include Aws::Structure
     end
 
-    # Provides information about the number of S3 buckets that are shared
-    # with other AWS accounts.
+    # Provides information about the number of S3 buckets that are and
+    # aren't shared with other AWS accounts.
     #
     # @!attribute [rw] external
     #   @return [Integer]
@@ -423,6 +433,29 @@ module Aws::Macie2
       include Aws::Structure
     end
 
+    # Provides information about the number of S3 buckets whose bucket
+    # policies do and don't require server-side encryption of objects when
+    # objects are uploaded to the buckets.
+    #
+    # @!attribute [rw] allows_unencrypted_object_uploads
+    #   @return [Integer]
+    #
+    # @!attribute [rw] denies_unencrypted_object_uploads
+    #   @return [Integer]
+    #
+    # @!attribute [rw] unknown
+    #   @return [Integer]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/macie2-2020-01-01/BucketCountPolicyAllowsUnencryptedObjectUploads AWS API Documentation
+    #
+    class BucketCountPolicyAllowsUnencryptedObjectUploads < Struct.new(
+      :allows_unencrypted_object_uploads,
+      :denies_unencrypted_object_uploads,
+      :unknown)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Specifies the operator to use in a property-based condition that
     # filters the results of a query for information about S3 buckets.
     #
@@ -495,7 +528,7 @@ module Aws::Macie2
     #   @return [Types::BlockPublicAccess]
     #
     # @!attribute [rw] bucket_policy
-    #   Provides information about the permissions settings of a bucket
+    #   Provides information about the permissions settings of the bucket
     #   policy for an S3 bucket.
     #   @return [Types::BucketPolicy]
     #
@@ -515,6 +548,9 @@ module Aws::Macie2
     # @!attribute [rw] account_id
     #   @return [String]
     #
+    # @!attribute [rw] allows_unencrypted_object_uploads
+    #   @return [String]
+    #
     # @!attribute [rw] bucket_arn
     #   @return [String]
     #
@@ -613,6 +649,7 @@ module Aws::Macie2
     #
     class BucketMetadata < Struct.new(
       :account_id,
+      :allows_unencrypted_object_uploads,
       :bucket_arn,
       :bucket_created_at,
       :bucket_name,
@@ -659,8 +696,8 @@ module Aws::Macie2
       include Aws::Structure
     end
 
-    # Provides information about the permissions settings of a bucket policy
-    # for an S3 bucket.
+    # Provides information about the permissions settings of the bucket
+    # policy for an S3 bucket.
     #
     # @!attribute [rw] allows_public_read_access
     #   @return [Boolean]
@@ -2402,12 +2439,24 @@ module Aws::Macie2
     # @!attribute [rw] bucket_count_by_encryption_type
     #   Provides information about the number of S3 buckets that use certain
     #   types of server-side encryption by default or don't encrypt new
-    #   objects by default.
+    #   objects by default. For detailed information about these settings,
+    #   see [Setting default server-side encryption behavior for Amazon S3
+    #   buckets][1] in the *Amazon Simple Storage Service User Guide*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/bucket-encryption.html
     #   @return [Types::BucketCountByEncryptionType]
     #
+    # @!attribute [rw] bucket_count_by_object_encryption_requirement
+    #   Provides information about the number of S3 buckets whose bucket
+    #   policies do and don't require server-side encryption of objects
+    #   when objects are uploaded to the buckets.
+    #   @return [Types::BucketCountPolicyAllowsUnencryptedObjectUploads]
+    #
     # @!attribute [rw] bucket_count_by_shared_access_type
-    #   Provides information about the number of S3 buckets that are shared
-    #   with other AWS accounts.
+    #   Provides information about the number of S3 buckets that are and
+    #   aren't shared with other AWS accounts.
     #   @return [Types::BucketCountBySharedAccessType]
     #
     # @!attribute [rw] classifiable_object_count
@@ -2454,6 +2503,7 @@ module Aws::Macie2
       :bucket_count,
       :bucket_count_by_effective_permission,
       :bucket_count_by_encryption_type,
+      :bucket_count_by_object_encryption_requirement,
       :bucket_count_by_shared_access_type,
       :classifiable_object_count,
       :classifiable_size_in_bytes,
@@ -4088,13 +4138,17 @@ module Aws::Macie2
     # @!attribute [rw] unencrypted
     #   @return [Integer]
     #
+    # @!attribute [rw] unknown
+    #   @return [Integer]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/macie2-2020-01-01/ObjectCountByEncryptionType AWS API Documentation
     #
     class ObjectCountByEncryptionType < Struct.new(
       :customer_managed,
       :kms_managed,
       :s3_managed,
-      :unencrypted)
+      :unencrypted,
+      :unknown)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -4410,6 +4464,9 @@ module Aws::Macie2
 
     # Provides information about an S3 bucket that a finding applies to.
     #
+    # @!attribute [rw] allows_unencrypted_object_uploads
+    #   @return [String]
+    #
     # @!attribute [rw] arn
     #   @return [String]
     #
@@ -4442,6 +4499,7 @@ module Aws::Macie2
     # @see http://docs.aws.amazon.com/goto/WebAPI/macie2-2020-01-01/S3Bucket AWS API Documentation
     #
     class S3Bucket < Struct.new(
+      :allows_unencrypted_object_uploads,
       :arn,
       :created_at,
       :default_server_side_encryption,

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-macie2
 version: !ruby/object:Gem::Version
-  version: 1.26.0
+  version: 1.27.0
 platform: ruby
 authors:
 - Amazon Web Services
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-03-22 00:00:00.000000000 Z
+date: 2021-04-29 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-core
@@ -83,8 +83,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubyforge_project: 
-rubygems_version: 2.7.6.2
+rubygems_version: 3.1.6
 signing_key: 
 specification_version: 4
 summary: AWS SDK for Ruby - Amazon Macie 2