aws-sdk-macie2 1.43.0 → 1.46.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a076457499469b66c54e4af2541eb0fc067f58b60bee39bbc744a23ef88a987b
-  data.tar.gz: 34728ca0bdc4be44b73bede1b84c757eae158d398e88d8eb8ea6b92eea4a52b3
+  metadata.gz: a317528c809964c80728a1cac6b20a43b636dc0d6aa975f0ff0ec9b586ed8d83
+  data.tar.gz: 2e5807f4b3a33234006f4768255b34bcfeec044cefddd895e8f2a6afa5155d8b
 SHA512:
-  metadata.gz: e4071892a426894a5517a77ae2a4af36c0f84c73c63f84ab56970c20c8418500a61e1e8f9012a021868750baa52c4b2bfbdca69741809fee92c5718ed47eb8e1
-  data.tar.gz: ef5b00258f1c35a4bfa428f479141e81eded66a3404844a0be73f6b46975a7dc8bccb6b8bf42ef82e4543bc3cf38401d092a2506971de4cef79dcc3fbee26ace
+  metadata.gz: aa4dfacc438d4eb250dc94c607d3656a702b2a1256689dfea15d291751a3c22d09a4e5c58d2d5fcf8307f633c90d44d0dde59bc92524d413724fa64dc42853de
+  data.tar.gz: f272b9eb4b3c9a3b33bfb256855a315712ba79a909ca49bca6ba579b0bbf35bf7a55a32263e38a219d344b62a3cf7e255c6ea75e5e3fcc6fcc8afe9cff290154

data/CHANGELOG.md

@@ -1,6 +1,21 @@
 Unreleased Changes
 ------------------
 
+1.46.0 (2022-07-26)
+------------------
+
+* Feature - This release adds support for retrieving (revealing) sample occurrences of sensitive data that Amazon Macie detects and reports in findings.
+
+1.45.0 (2022-04-20)
+------------------
+
+* Feature - Sensitive data findings in Amazon Macie now indicate how Macie found the sensitive data that produced a finding (originType).
+
+1.44.0 (2022-02-24)
+------------------
+
+* Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
+
 1.43.0 (2022-02-03)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.43.0
+1.46.0

data/lib/aws-sdk-macie2/client.rb

@@ -27,6 +27,7 @@ require 'aws-sdk-core/plugins/client_metrics_plugin.rb'
 require 'aws-sdk-core/plugins/client_metrics_send_plugin.rb'
 require 'aws-sdk-core/plugins/transfer_encoding.rb'
 require 'aws-sdk-core/plugins/http_checksum.rb'
+require 'aws-sdk-core/plugins/checksum_algorithm.rb'
 require 'aws-sdk-core/plugins/defaults_mode.rb'
 require 'aws-sdk-core/plugins/recursion_detection.rb'
 require 'aws-sdk-core/plugins/signature_v4.rb'
@@ -75,6 +76,7 @@ module Aws::Macie2
     add_plugin(Aws::Plugins::ClientMetricsSendPlugin)
     add_plugin(Aws::Plugins::TransferEncoding)
     add_plugin(Aws::Plugins::HttpChecksum)
+    add_plugin(Aws::Plugins::ChecksumAlgorithm)
     add_plugin(Aws::Plugins::DefaultsMode)
     add_plugin(Aws::Plugins::RecursionDetection)
     add_plugin(Aws::Plugins::SignatureV4)
@@ -1628,6 +1630,7 @@ module Aws::Macie2
     #   resp.findings[0].classification_details.detailed_results_location #=> String
     #   resp.findings[0].classification_details.job_arn #=> String
     #   resp.findings[0].classification_details.job_id #=> String
+    #   resp.findings[0].classification_details.origin_type #=> String, one of "SENSITIVE_DATA_DISCOVERY_JOB"
     #   resp.findings[0].classification_details.result.additional_occurrences #=> Boolean
     #   resp.findings[0].classification_details.result.custom_data_identifiers.detections #=> Array
     #   resp.findings[0].classification_details.result.custom_data_identifiers.detections[0].arn #=> String
@@ -1995,6 +1998,97 @@ module Aws::Macie2
       req.send_request(options)
     end
 
+    # Retrieves the status and configuration settings for retrieving
+    # (revealing) occurrences of sensitive data reported by findings.
+    #
+    # @return [Types::GetRevealConfigurationResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::GetRevealConfigurationResponse#configuration #configuration} => Types::RevealConfiguration
+    #
+    # @example Response structure
+    #
+    #   resp.configuration.kms_key_id #=> String
+    #   resp.configuration.status #=> String, one of "ENABLED", "DISABLED"
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/macie2-2020-01-01/GetRevealConfiguration AWS API Documentation
+    #
+    # @overload get_reveal_configuration(params = {})
+    # @param [Hash] params ({})
+    def get_reveal_configuration(params = {}, options = {})
+      req = build_request(:get_reveal_configuration, params)
+      req.send_request(options)
+    end
+
+    # Retrieves (reveals) occurrences of sensitive data reported by a
+    # finding.
+    #
+    # @option params [required, String] :finding_id
+    #
+    # @return [Types::GetSensitiveDataOccurrencesResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::GetSensitiveDataOccurrencesResponse#error #error} => String
+    #   * {Types::GetSensitiveDataOccurrencesResponse#sensitive_data_occurrences #sensitive_data_occurrences} => Hash<String,Array<Types::DetectedDataDetails>>
+    #   * {Types::GetSensitiveDataOccurrencesResponse#status #status} => String
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.get_sensitive_data_occurrences({
+    #     finding_id: "__string", # required
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.error #=> String
+    #   resp.sensitive_data_occurrences #=> Hash
+    #   resp.sensitive_data_occurrences["__string"] #=> Array
+    #   resp.sensitive_data_occurrences["__string"][0].value #=> String
+    #   resp.status #=> String, one of "SUCCESS", "PROCESSING", "ERROR"
+    #
+    #
+    # The following waiters are defined for this operation (see {Client#wait_until} for detailed usage):
+    #
+    #   * finding_revealed
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/macie2-2020-01-01/GetSensitiveDataOccurrences AWS API Documentation
+    #
+    # @overload get_sensitive_data_occurrences(params = {})
+    # @param [Hash] params ({})
+    def get_sensitive_data_occurrences(params = {}, options = {})
+      req = build_request(:get_sensitive_data_occurrences, params)
+      req.send_request(options)
+    end
+
+    # Checks whether occurrences of sensitive data can be retrieved
+    # (revealed) for a finding.
+    #
+    # @option params [required, String] :finding_id
+    #
+    # @return [Types::GetSensitiveDataOccurrencesAvailabilityResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::GetSensitiveDataOccurrencesAvailabilityResponse#code #code} => String
+    #   * {Types::GetSensitiveDataOccurrencesAvailabilityResponse#reasons #reasons} => Array<String>
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.get_sensitive_data_occurrences_availability({
+    #     finding_id: "__string", # required
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.code #=> String, one of "AVAILABLE", "UNAVAILABLE"
+    #   resp.reasons #=> Array
+    #   resp.reasons[0] #=> String, one of "OBJECT_EXCEEDS_SIZE_QUOTA", "UNSUPPORTED_OBJECT_TYPE", "UNSUPPORTED_FINDING_TYPE", "INVALID_CLASSIFICATION_RESULT", "OBJECT_UNAVAILABLE"
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/macie2-2020-01-01/GetSensitiveDataOccurrencesAvailability AWS API Documentation
+    #
+    # @overload get_sensitive_data_occurrences_availability(params = {})
+    # @param [Hash] params ({})
+    def get_sensitive_data_occurrences_availability(params = {}, options = {})
+      req = build_request(:get_sensitive_data_occurrences_availability, params)
+      req.send_request(options)
+    end
+
     # Retrieves (queries) quotas and aggregated usage data for one or more
     # accounts.
     #
@@ -2976,6 +3070,45 @@ module Aws::Macie2
       req.send_request(options)
     end
 
+    # Updates the status and configuration settings for retrieving
+    # (revealing) occurrences of sensitive data reported by findings.
+    #
+    # @option params [required, Types::RevealConfiguration] :configuration
+    #   Specifies the configuration settings for retrieving occurrences of
+    #   sensitive data reported by findings, and the status of the
+    #   configuration for an Amazon Macie account. When you enable the
+    #   configuration for the first time, your request must specify an AWS Key
+    #   Management Service (AWS KMS) key. Otherwise, an error occurs. Macie
+    #   uses the specified key to encrypt the sensitive data that you
+    #   retrieve.
+    #
+    # @return [Types::UpdateRevealConfigurationResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::UpdateRevealConfigurationResponse#configuration #configuration} => Types::RevealConfiguration
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.update_reveal_configuration({
+    #     configuration: { # required
+    #       kms_key_id: "__stringMin1Max2048",
+    #       status: "ENABLED", # required, accepts ENABLED, DISABLED
+    #     },
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.configuration.kms_key_id #=> String
+    #   resp.configuration.status #=> String, one of "ENABLED", "DISABLED"
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/macie2-2020-01-01/UpdateRevealConfiguration AWS API Documentation
+    #
+    # @overload update_reveal_configuration(params = {})
+    # @param [Hash] params ({})
+    def update_reveal_configuration(params = {}, options = {})
+      req = build_request(:update_reveal_configuration, params)
+      req.send_request(options)
+    end
+
     # @!endgroup
 
     # @param params ({})
@@ -2989,14 +3122,127 @@ module Aws::Macie2
         params: params,
         config: config)
       context[:gem_name] = 'aws-sdk-macie2'
-      context[:gem_version] = '1.43.0'
+      context[:gem_version] = '1.46.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 
+    # Polls an API operation until a resource enters a desired state.
+    #
+    # ## Basic Usage
+    #
+    # A waiter will call an API operation until:
+    #
+    # * It is successful
+    # * It enters a terminal state
+    # * It makes the maximum number of attempts
+    #
+    # In between attempts, the waiter will sleep.
+    #
+    #     # polls in a loop, sleeping between attempts
+    #     client.wait_until(waiter_name, params)
+    #
+    # ## Configuration
+    #
+    # You can configure the maximum number of polling attempts, and the
+    # delay (in seconds) between each polling attempt. You can pass
+    # configuration as the final arguments hash.
+    #
+    #     # poll for ~25 seconds
+    #     client.wait_until(waiter_name, params, {
+    #       max_attempts: 5,
+    #       delay: 5,
+    #     })
+    #
+    # ## Callbacks
+    #
+    # You can be notified before each polling attempt and before each
+    # delay. If you throw `:success` or `:failure` from these callbacks,
+    # it will terminate the waiter.
+    #
+    #     started_at = Time.now
+    #     client.wait_until(waiter_name, params, {
+    #
+    #       # disable max attempts
+    #       max_attempts: nil,
+    #
+    #       # poll for 1 hour, instead of a number of attempts
+    #       before_wait: -> (attempts, response) do
+    #         throw :failure if Time.now - started_at > 3600
+    #       end
+    #     })
+    #
+    # ## Handling Errors
+    #
+    # When a waiter is unsuccessful, it will raise an error.
+    # All of the failure errors extend from
+    # {Aws::Waiters::Errors::WaiterFailed}.
+    #
+    #     begin
+    #       client.wait_until(...)
+    #     rescue Aws::Waiters::Errors::WaiterFailed
+    #       # resource did not enter the desired state in time
+    #     end
+    #
+    # ## Valid Waiters
+    #
+    # The following table lists the valid waiter names, the operations they call,
+    # and the default `:delay` and `:max_attempts` values.
+    #
+    # | waiter_name      | params                                  | :delay   | :max_attempts |
+    # | ---------------- | --------------------------------------- | -------- | ------------- |
+    # | finding_revealed | {Client#get_sensitive_data_occurrences} | 2        | 60            |
+    #
+    # @raise [Errors::FailureStateError] Raised when the waiter terminates
+    #   because the waiter has entered a state that it will not transition
+    #   out of, preventing success.
+    #
+    # @raise [Errors::TooManyAttemptsError] Raised when the configured
+    #   maximum number of attempts have been made, and the waiter is not
+    #   yet successful.
+    #
+    # @raise [Errors::UnexpectedError] Raised when an error is encounted
+    #   while polling for a resource that is not expected.
+    #
+    # @raise [Errors::NoSuchWaiterError] Raised when you request to wait
+    #   for an unknown state.
+    #
+    # @return [Boolean] Returns `true` if the waiter was successful.
+    # @param [Symbol] waiter_name
+    # @param [Hash] params ({})
+    # @param [Hash] options ({})
+    # @option options [Integer] :max_attempts
+    # @option options [Integer] :delay
+    # @option options [Proc] :before_attempt
+    # @option options [Proc] :before_wait
+    def wait_until(waiter_name, params = {}, options = {})
+      w = waiter(waiter_name, options)
+      yield(w.waiter) if block_given? # deprecated
+      w.wait(params)
+    end
+
     # @api private
     # @deprecated
     def waiter_names
-      []
+      waiters.keys
+    end
+
+    private
+
+    # @param [Symbol] waiter_name
+    # @param [Hash] options ({})
+    def waiter(waiter_name, options = {})
+      waiter_class = waiters[waiter_name]
+      if waiter_class
+        waiter_class.new(options.merge(client: self))
+      else
+        raise Aws::Waiters::Errors::NoSuchWaiterError.new(waiter_name, waiters.keys)
+      end
+    end
+
+    def waiters
+      {
+        finding_revealed: Waiters::FindingRevealed
+      }
     end
 
     class << self

data/lib/aws-sdk-macie2/client_api.rb

@@ -24,6 +24,7 @@ module Aws::Macie2
     AllowsUnencryptedObjectUploads = Shapes::StringShape.new(name: 'AllowsUnencryptedObjectUploads')
     ApiCallDetails = Shapes::StructureShape.new(name: 'ApiCallDetails')
     AssumedRole = Shapes::StructureShape.new(name: 'AssumedRole')
+    AvailabilityCode = Shapes::StringShape.new(name: 'AvailabilityCode')
     AwsAccount = Shapes::StructureShape.new(name: 'AwsAccount')
     AwsService = Shapes::StructureShape.new(name: 'AwsService')
     BatchGetCustomDataIdentifierSummary = Shapes::StructureShape.new(name: 'BatchGetCustomDataIdentifierSummary')
@@ -93,6 +94,7 @@ module Aws::Macie2
     DescribeClassificationJobResponse = Shapes::StructureShape.new(name: 'DescribeClassificationJobResponse')
     DescribeOrganizationConfigurationRequest = Shapes::StructureShape.new(name: 'DescribeOrganizationConfigurationRequest')
     DescribeOrganizationConfigurationResponse = Shapes::StructureShape.new(name: 'DescribeOrganizationConfigurationResponse')
+    DetectedDataDetails = Shapes::StructureShape.new(name: 'DetectedDataDetails')
     DisableMacieRequest = Shapes::StructureShape.new(name: 'DisableMacieRequest')
     DisableMacieResponse = Shapes::StructureShape.new(name: 'DisableMacieResponse')
     DisableOrganizationAdminAccountRequest = Shapes::StructureShape.new(name: 'DisableOrganizationAdminAccountRequest')
@@ -149,6 +151,12 @@ module Aws::Macie2
     GetMasterAccountResponse = Shapes::StructureShape.new(name: 'GetMasterAccountResponse')
     GetMemberRequest = Shapes::StructureShape.new(name: 'GetMemberRequest')
     GetMemberResponse = Shapes::StructureShape.new(name: 'GetMemberResponse')
+    GetRevealConfigurationRequest = Shapes::StructureShape.new(name: 'GetRevealConfigurationRequest')
+    GetRevealConfigurationResponse = Shapes::StructureShape.new(name: 'GetRevealConfigurationResponse')
+    GetSensitiveDataOccurrencesAvailabilityRequest = Shapes::StructureShape.new(name: 'GetSensitiveDataOccurrencesAvailabilityRequest')
+    GetSensitiveDataOccurrencesAvailabilityResponse = Shapes::StructureShape.new(name: 'GetSensitiveDataOccurrencesAvailabilityResponse')
+    GetSensitiveDataOccurrencesRequest = Shapes::StructureShape.new(name: 'GetSensitiveDataOccurrencesRequest')
+    GetSensitiveDataOccurrencesResponse = Shapes::StructureShape.new(name: 'GetSensitiveDataOccurrencesResponse')
     GetUsageStatisticsRequest = Shapes::StructureShape.new(name: 'GetUsageStatisticsRequest')
     GetUsageStatisticsResponse = Shapes::StructureShape.new(name: 'GetUsageStatisticsResponse')
     GetUsageTotalsRequest = Shapes::StructureShape.new(name: 'GetUsageTotalsRequest')
@@ -212,6 +220,7 @@ module Aws::Macie2
     ObjectLevelStatistics = Shapes::StructureShape.new(name: 'ObjectLevelStatistics')
     Occurrences = Shapes::StructureShape.new(name: 'Occurrences')
     OrderBy = Shapes::StringShape.new(name: 'OrderBy')
+    OriginType = Shapes::StringShape.new(name: 'OriginType')
     Page = Shapes::StructureShape.new(name: 'Page')
     Pages = Shapes::ListShape.new(name: 'Pages')
     PolicyDetails = Shapes::StructureShape.new(name: 'PolicyDetails')
@@ -227,6 +236,9 @@ module Aws::Macie2
     ReplicationDetails = Shapes::StructureShape.new(name: 'ReplicationDetails')
     ResourceNotFoundException = Shapes::StructureShape.new(name: 'ResourceNotFoundException')
     ResourcesAffected = Shapes::StructureShape.new(name: 'ResourcesAffected')
+    RevealConfiguration = Shapes::StructureShape.new(name: 'RevealConfiguration')
+    RevealRequestStatus = Shapes::StringShape.new(name: 'RevealRequestStatus')
+    RevealStatus = Shapes::StringShape.new(name: 'RevealStatus')
     S3Bucket = Shapes::StructureShape.new(name: 'S3Bucket')
     S3BucketCriteriaForJob = Shapes::StructureShape.new(name: 'S3BucketCriteriaForJob')
     S3BucketDefinitionForJob = Shapes::StructureShape.new(name: 'S3BucketDefinitionForJob')
@@ -252,6 +264,7 @@ module Aws::Macie2
     SensitiveData = Shapes::ListShape.new(name: 'SensitiveData')
     SensitiveDataItem = Shapes::StructureShape.new(name: 'SensitiveDataItem')
     SensitiveDataItemCategory = Shapes::StringShape.new(name: 'SensitiveDataItemCategory')
+    SensitiveDataOccurrences = Shapes::MapShape.new(name: 'SensitiveDataOccurrences')
     ServerSideEncryption = Shapes::StructureShape.new(name: 'ServerSideEncryption')
     ServiceLimit = Shapes::StructureShape.new(name: 'ServiceLimit')
     ServiceQuotaExceededException = Shapes::StructureShape.new(name: 'ServiceQuotaExceededException')
@@ -282,7 +295,9 @@ module Aws::Macie2
     ThrottlingException = Shapes::StructureShape.new(name: 'ThrottlingException')
     TimeRange = Shapes::StringShape.new(name: 'TimeRange')
     Type = Shapes::StringShape.new(name: 'Type')
+    UnavailabilityReasonCode = Shapes::StringShape.new(name: 'UnavailabilityReasonCode')
     Unit = Shapes::StringShape.new(name: 'Unit')
+    UnprocessableEntityException = Shapes::StructureShape.new(name: 'UnprocessableEntityException')
     UnprocessedAccount = Shapes::StructureShape.new(name: 'UnprocessedAccount')
     UntagResourceRequest = Shapes::StructureShape.new(name: 'UntagResourceRequest')
     UntagResourceResponse = Shapes::StructureShape.new(name: 'UntagResourceResponse')
@@ -296,6 +311,8 @@ module Aws::Macie2
     UpdateMemberSessionResponse = Shapes::StructureShape.new(name: 'UpdateMemberSessionResponse')
     UpdateOrganizationConfigurationRequest = Shapes::StructureShape.new(name: 'UpdateOrganizationConfigurationRequest')
     UpdateOrganizationConfigurationResponse = Shapes::StructureShape.new(name: 'UpdateOrganizationConfigurationResponse')
+    UpdateRevealConfigurationRequest = Shapes::StructureShape.new(name: 'UpdateRevealConfigurationRequest')
+    UpdateRevealConfigurationResponse = Shapes::StructureShape.new(name: 'UpdateRevealConfigurationResponse')
     UsageByAccount = Shapes::StructureShape.new(name: 'UsageByAccount')
     UsageRecord = Shapes::StructureShape.new(name: 'UsageRecord')
     UsageStatisticsFilter = Shapes::StructureShape.new(name: 'UsageStatisticsFilter')
@@ -319,6 +336,7 @@ module Aws::Macie2
     __listOfBucketMetadata = Shapes::ListShape.new(name: '__listOfBucketMetadata')
     __listOfCriteriaForJob = Shapes::ListShape.new(name: '__listOfCriteriaForJob')
     __listOfCustomDataIdentifierSummary = Shapes::ListShape.new(name: '__listOfCustomDataIdentifierSummary')
+    __listOfDetectedDataDetails = Shapes::ListShape.new(name: '__listOfDetectedDataDetails')
     __listOfFinding = Shapes::ListShape.new(name: '__listOfFinding')
     __listOfFindingType = Shapes::ListShape.new(name: '__listOfFindingType')
     __listOfFindingsFilterListItem = Shapes::ListShape.new(name: '__listOfFindingsFilterListItem')
@@ -336,6 +354,7 @@ module Aws::Macie2
     __listOfSearchResourcesTagCriterionPair = Shapes::ListShape.new(name: '__listOfSearchResourcesTagCriterionPair')
     __listOfTagCriterionPairForJob = Shapes::ListShape.new(name: '__listOfTagCriterionPairForJob')
     __listOfTagValuePair = Shapes::ListShape.new(name: '__listOfTagValuePair')
+    __listOfUnavailabilityReasonCode = Shapes::ListShape.new(name: '__listOfUnavailabilityReasonCode')
     __listOfUnprocessedAccount = Shapes::ListShape.new(name: '__listOfUnprocessedAccount')
     __listOfUsageByAccount = Shapes::ListShape.new(name: '__listOfUsageByAccount')
     __listOfUsageRecord = Shapes::ListShape.new(name: '__listOfUsageRecord')
@@ -344,6 +363,8 @@ module Aws::Macie2
     __listOf__string = Shapes::ListShape.new(name: '__listOf__string')
     __long = Shapes::IntegerShape.new(name: '__long')
     __string = Shapes::StringShape.new(name: '__string')
+    __stringMin1Max128 = Shapes::StringShape.new(name: '__stringMin1Max128')
+    __stringMin1Max2048 = Shapes::StringShape.new(name: '__stringMin1Max2048')
     __timestampIso8601 = Shapes::TimestampShape.new(name: '__timestampIso8601', timestampFormat: "iso8601")
     __timestampUnix = Shapes::TimestampShape.new(name: '__timestampUnix', timestampFormat: "unixTimestamp")
 
@@ -510,6 +531,7 @@ module Aws::Macie2
     ClassificationDetails.add_member(:detailed_results_location, Shapes::ShapeRef.new(shape: __string, location_name: "detailedResultsLocation"))
     ClassificationDetails.add_member(:job_arn, Shapes::ShapeRef.new(shape: __string, location_name: "jobArn"))
     ClassificationDetails.add_member(:job_id, Shapes::ShapeRef.new(shape: __string, location_name: "jobId"))
+    ClassificationDetails.add_member(:origin_type, Shapes::ShapeRef.new(shape: OriginType, location_name: "originType"))
     ClassificationDetails.add_member(:result, Shapes::ShapeRef.new(shape: ClassificationResult, location_name: "result"))
     ClassificationDetails.struct_class = Types::ClassificationDetails
 
@@ -711,6 +733,9 @@ module Aws::Macie2
     DescribeOrganizationConfigurationResponse.add_member(:max_account_limit_reached, Shapes::ShapeRef.new(shape: __boolean, location_name: "maxAccountLimitReached"))
     DescribeOrganizationConfigurationResponse.struct_class = Types::DescribeOrganizationConfigurationResponse
 
+    DetectedDataDetails.add_member(:value, Shapes::ShapeRef.new(shape: __stringMin1Max128, required: true, location_name: "value"))
+    DetectedDataDetails.struct_class = Types::DetectedDataDetails
+
     DisableMacieRequest.struct_class = Types::DisableMacieRequest
 
     DisableMacieResponse.struct_class = Types::DisableMacieResponse
@@ -913,6 +938,26 @@ module Aws::Macie2
     GetMemberResponse.add_member(:updated_at, Shapes::ShapeRef.new(shape: __timestampIso8601, location_name: "updatedAt"))
     GetMemberResponse.struct_class = Types::GetMemberResponse
 
+    GetRevealConfigurationRequest.struct_class = Types::GetRevealConfigurationRequest
+
+    GetRevealConfigurationResponse.add_member(:configuration, Shapes::ShapeRef.new(shape: RevealConfiguration, location_name: "configuration"))
+    GetRevealConfigurationResponse.struct_class = Types::GetRevealConfigurationResponse
+
+    GetSensitiveDataOccurrencesAvailabilityRequest.add_member(:finding_id, Shapes::ShapeRef.new(shape: __string, required: true, location: "uri", location_name: "findingId"))
+    GetSensitiveDataOccurrencesAvailabilityRequest.struct_class = Types::GetSensitiveDataOccurrencesAvailabilityRequest
+
+    GetSensitiveDataOccurrencesAvailabilityResponse.add_member(:code, Shapes::ShapeRef.new(shape: AvailabilityCode, location_name: "code"))
+    GetSensitiveDataOccurrencesAvailabilityResponse.add_member(:reasons, Shapes::ShapeRef.new(shape: __listOfUnavailabilityReasonCode, location_name: "reasons"))
+    GetSensitiveDataOccurrencesAvailabilityResponse.struct_class = Types::GetSensitiveDataOccurrencesAvailabilityResponse
+
+    GetSensitiveDataOccurrencesRequest.add_member(:finding_id, Shapes::ShapeRef.new(shape: __string, required: true, location: "uri", location_name: "findingId"))
+    GetSensitiveDataOccurrencesRequest.struct_class = Types::GetSensitiveDataOccurrencesRequest
+
+    GetSensitiveDataOccurrencesResponse.add_member(:error, Shapes::ShapeRef.new(shape: __string, location_name: "error"))
+    GetSensitiveDataOccurrencesResponse.add_member(:sensitive_data_occurrences, Shapes::ShapeRef.new(shape: SensitiveDataOccurrences, location_name: "sensitiveDataOccurrences"))
+    GetSensitiveDataOccurrencesResponse.add_member(:status, Shapes::ShapeRef.new(shape: RevealRequestStatus, location_name: "status"))
+    GetSensitiveDataOccurrencesResponse.struct_class = Types::GetSensitiveDataOccurrencesResponse
+
     GetUsageStatisticsRequest.add_member(:filter_by, Shapes::ShapeRef.new(shape: __listOfUsageStatisticsFilter, location_name: "filterBy"))
     GetUsageStatisticsRequest.add_member(:max_results, Shapes::ShapeRef.new(shape: __integer, location_name: "maxResults"))
     GetUsageStatisticsRequest.add_member(:next_token, Shapes::ShapeRef.new(shape: __string, location_name: "nextToken"))
@@ -1203,6 +1248,10 @@ module Aws::Macie2
     ResourcesAffected.add_member(:s3_object, Shapes::ShapeRef.new(shape: S3Object, location_name: "s3Object"))
     ResourcesAffected.struct_class = Types::ResourcesAffected
 
+    RevealConfiguration.add_member(:kms_key_id, Shapes::ShapeRef.new(shape: __stringMin1Max2048, location_name: "kmsKeyId"))
+    RevealConfiguration.add_member(:status, Shapes::ShapeRef.new(shape: RevealStatus, required: true, location_name: "status"))
+    RevealConfiguration.struct_class = Types::RevealConfiguration
+
     S3Bucket.add_member(:allows_unencrypted_object_uploads, Shapes::ShapeRef.new(shape: AllowsUnencryptedObjectUploads, location_name: "allowsUnencryptedObjectUploads"))
     S3Bucket.add_member(:arn, Shapes::ShapeRef.new(shape: __string, location_name: "arn"))
     S3Bucket.add_member(:created_at, Shapes::ShapeRef.new(shape: __timestampIso8601, location_name: "createdAt"))
@@ -1302,6 +1351,9 @@ module Aws::Macie2
     SensitiveDataItem.add_member(:total_count, Shapes::ShapeRef.new(shape: __long, location_name: "totalCount"))
     SensitiveDataItem.struct_class = Types::SensitiveDataItem
 
+    SensitiveDataOccurrences.key = Shapes::ShapeRef.new(shape: __string)
+    SensitiveDataOccurrences.value = Shapes::ShapeRef.new(shape: __listOfDetectedDataDetails)
+
     ServerSideEncryption.add_member(:encryption_type, Shapes::ShapeRef.new(shape: EncryptionType, location_name: "encryptionType"))
     ServerSideEncryption.add_member(:kms_master_key_id, Shapes::ShapeRef.new(shape: __string, location_name: "kmsMasterKeyId"))
     ServerSideEncryption.struct_class = Types::ServerSideEncryption
@@ -1397,6 +1449,9 @@ module Aws::Macie2
     ThrottlingException.add_member(:message, Shapes::ShapeRef.new(shape: __string, location_name: "message"))
     ThrottlingException.struct_class = Types::ThrottlingException
 
+    UnprocessableEntityException.add_member(:message, Shapes::ShapeRef.new(shape: __string, required: true, location_name: "message"))
+    UnprocessableEntityException.struct_class = Types::UnprocessableEntityException
+
     UnprocessedAccount.add_member(:account_id, Shapes::ShapeRef.new(shape: __string, location_name: "accountId"))
     UnprocessedAccount.add_member(:error_code, Shapes::ShapeRef.new(shape: ErrorCode, location_name: "errorCode"))
     UnprocessedAccount.add_member(:error_message, Shapes::ShapeRef.new(shape: __string, location_name: "errorMessage"))
@@ -1444,6 +1499,12 @@ module Aws::Macie2
 
     UpdateOrganizationConfigurationResponse.struct_class = Types::UpdateOrganizationConfigurationResponse
 
+    UpdateRevealConfigurationRequest.add_member(:configuration, Shapes::ShapeRef.new(shape: RevealConfiguration, required: true, location_name: "configuration"))
+    UpdateRevealConfigurationRequest.struct_class = Types::UpdateRevealConfigurationRequest
+
+    UpdateRevealConfigurationResponse.add_member(:configuration, Shapes::ShapeRef.new(shape: RevealConfiguration, location_name: "configuration"))
+    UpdateRevealConfigurationResponse.struct_class = Types::UpdateRevealConfigurationResponse
+
     UsageByAccount.add_member(:currency, Shapes::ShapeRef.new(shape: Currency, location_name: "currency"))
     UsageByAccount.add_member(:estimated_cost, Shapes::ShapeRef.new(shape: __string, location_name: "estimatedCost"))
     UsageByAccount.add_member(:service_limit, Shapes::ShapeRef.new(shape: ServiceLimit, location_name: "serviceLimit"))
@@ -1504,6 +1565,8 @@ module Aws::Macie2
 
     __listOfCustomDataIdentifierSummary.member = Shapes::ShapeRef.new(shape: CustomDataIdentifierSummary)
 
+    __listOfDetectedDataDetails.member = Shapes::ShapeRef.new(shape: DetectedDataDetails)
+
     __listOfFinding.member = Shapes::ShapeRef.new(shape: Finding)
 
     __listOfFindingType.member = Shapes::ShapeRef.new(shape: FindingType)
@@ -1538,6 +1601,8 @@ module Aws::Macie2
 
     __listOfTagValuePair.member = Shapes::ShapeRef.new(shape: TagValuePair)
 
+    __listOfUnavailabilityReasonCode.member = Shapes::ShapeRef.new(shape: UnavailabilityReasonCode)
+
     __listOfUnprocessedAccount.member = Shapes::ShapeRef.new(shape: UnprocessedAccount)
 
     __listOfUsageByAccount.member = Shapes::ShapeRef.new(shape: UsageByAccount)
@@ -2099,6 +2164,44 @@ module Aws::Macie2
         o.errors << Shapes::ShapeRef.new(shape: ConflictException)
       end)
 
+      api.add_operation(:get_reveal_configuration, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "GetRevealConfiguration"
+        o.http_method = "GET"
+        o.http_request_uri = "/reveal-configuration"
+        o.input = Shapes::ShapeRef.new(shape: GetRevealConfigurationRequest)
+        o.output = Shapes::ShapeRef.new(shape: GetRevealConfigurationResponse)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
+        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
+        o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
+        o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
+      end)
+
+      api.add_operation(:get_sensitive_data_occurrences, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "GetSensitiveDataOccurrences"
+        o.http_method = "GET"
+        o.http_request_uri = "/findings/{findingId}/reveal"
+        o.input = Shapes::ShapeRef.new(shape: GetSensitiveDataOccurrencesRequest)
+        o.output = Shapes::ShapeRef.new(shape: GetSensitiveDataOccurrencesResponse)
+        o.errors << Shapes::ShapeRef.new(shape: UnprocessableEntityException)
+        o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
+        o.errors << Shapes::ShapeRef.new(shape: ServiceQuotaExceededException)
+        o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
+        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
+      end)
+
+      api.add_operation(:get_sensitive_data_occurrences_availability, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "GetSensitiveDataOccurrencesAvailability"
+        o.http_method = "GET"
+        o.http_request_uri = "/findings/{findingId}/reveal/availability"
+        o.input = Shapes::ShapeRef.new(shape: GetSensitiveDataOccurrencesAvailabilityRequest)
+        o.output = Shapes::ShapeRef.new(shape: GetSensitiveDataOccurrencesAvailabilityResponse)
+        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
+        o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
+        o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
+      end)
+
       api.add_operation(:get_usage_statistics, Seahorse::Model::Operation.new.tap do |o|
         o.name = "GetUsageStatistics"
         o.http_method = "POST"
@@ -2454,6 +2557,18 @@ module Aws::Macie2
         o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
         o.errors << Shapes::ShapeRef.new(shape: ConflictException)
       end)
+
+      api.add_operation(:update_reveal_configuration, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "UpdateRevealConfiguration"
+        o.http_method = "PUT"
+        o.http_request_uri = "/reveal-configuration"
+        o.input = Shapes::ShapeRef.new(shape: UpdateRevealConfigurationRequest)
+        o.output = Shapes::ShapeRef.new(shape: UpdateRevealConfigurationResponse)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
+        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
+        o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
+        o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
+      end)
     end
 
   end

data/lib/aws-sdk-macie2/errors.rb

@@ -33,6 +33,7 @@ module Aws::Macie2
   # * {ResourceNotFoundException}
   # * {ServiceQuotaExceededException}
   # * {ThrottlingException}
+  # * {UnprocessableEntityException}
   # * {ValidationException}
   #
   # Additionally, error classes are dynamically generated for service errors based on the error code
@@ -131,6 +132,21 @@ module Aws::Macie2
       end
     end
 
+    class UnprocessableEntityException < ServiceError
+
+      # @param [Seahorse::Client::RequestContext] context
+      # @param [String] message
+      # @param [Aws::Macie2::Types::UnprocessableEntityException] data
+      def initialize(context, message, data = Aws::EmptyStructure.new)
+        super(context, message, data)
+      end
+
+      # @return [String]
+      def message
+        @message || @data[:message]
+      end
+    end
+
     class ValidationException < ServiceError
 
       # @param [Seahorse::Client::RequestContext] context

data/lib/aws-sdk-macie2/types.rb

@@ -832,8 +832,8 @@ module Aws::Macie2
       include Aws::Structure
     end
 
-    # Provides information about a sensitive data finding, including the
-    # classification job that produced the finding.
+    # Provides information about a sensitive data finding and the details of
+    # the finding.
     #
     # @!attribute [rw] detailed_results_location
     #   @return [String]
@@ -844,6 +844,11 @@ module Aws::Macie2
     # @!attribute [rw] job_id
     #   @return [String]
     #
+    # @!attribute [rw] origin_type
+    #   Specifies how Amazon Macie found the sensitive data that produced a
+    #   finding. The only possible value is:
+    #   @return [String]
+    #
     # @!attribute [rw] result
     #   Provides the details of a sensitive data finding, including the
     #   types, number of occurrences, and locations of the sensitive data
@@ -856,6 +861,7 @@ module Aws::Macie2
       :detailed_results_location,
       :job_arn,
       :job_id,
+      :origin_type,
       :result)
       SENSITIVE = []
       include Aws::Structure
@@ -1704,7 +1710,10 @@ module Aws::Macie2
     # @!attribute [rw] occurrences
     #   Specifies the location of 1-15 occurrences of sensitive data that
     #   was detected by a managed data identifier or a custom data
-    #   identifier and produced a sensitive data finding.
+    #   identifier and produced a sensitive data finding. Depending on the
+    #   file or storage format of the affected S3 object, you can optionally
+    #   retrieve (reveal) sample occurrences of the sensitive data that was
+    #   detected.
     #   @return [Types::Occurrences]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/macie2-2020-01-01/CustomDetection AWS API Documentation
@@ -1772,7 +1781,10 @@ module Aws::Macie2
     # @!attribute [rw] occurrences
     #   Specifies the location of 1-15 occurrences of sensitive data that
     #   was detected by a managed data identifier or a custom data
-    #   identifier and produced a sensitive data finding.
+    #   identifier and produced a sensitive data finding. Depending on the
+    #   file or storage format of the affected S3 object, you can optionally
+    #   retrieve (reveal) sample occurrences of the sensitive data that was
+    #   detected.
     #   @return [Types::Occurrences]
     #
     # @!attribute [rw] type
@@ -2128,6 +2140,20 @@ module Aws::Macie2
       include Aws::Structure
     end
 
+    # Specifies 1-10 occurrences of a specific type of sensitive data
+    # reported by a finding.
+    #
+    # @!attribute [rw] value
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/macie2-2020-01-01/DetectedDataDetails AWS API Documentation
+    #
+    class DetectedDataDetails < Struct.new(
+      :value)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @api private
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/macie2-2020-01-01/DisableMacieRequest AWS API Documentation
@@ -2352,8 +2378,8 @@ module Aws::Macie2
     #   @return [String]
     #
     # @!attribute [rw] classification_details
-    #   Provides information about a sensitive data finding, including the
-    #   classification job that produced the finding.
+    #   Provides information about a sensitive data finding and the details
+    #   of the finding.
     #   @return [Types::ClassificationDetails]
     #
     # @!attribute [rw] count
@@ -3213,6 +3239,117 @@ module Aws::Macie2
       include Aws::Structure
     end
 
+    # @api private
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/macie2-2020-01-01/GetRevealConfigurationRequest AWS API Documentation
+    #
+    class GetRevealConfigurationRequest < Aws::EmptyStructure; end
+
+    # Provides information about the configuration settings for retrieving
+    # occurrences of sensitive data reported by findings, and the status of
+    # the configuration for an Amazon Macie account.
+    #
+    # @!attribute [rw] configuration
+    #   Specifies the configuration settings for retrieving occurrences of
+    #   sensitive data reported by findings, and the status of the
+    #   configuration for an Amazon Macie account. When you enable the
+    #   configuration for the first time, your request must specify an AWS
+    #   Key Management Service (AWS KMS) key. Otherwise, an error occurs.
+    #   Macie uses the specified key to encrypt the sensitive data that you
+    #   retrieve.
+    #   @return [Types::RevealConfiguration]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/macie2-2020-01-01/GetRevealConfigurationResponse AWS API Documentation
+    #
+    class GetRevealConfigurationResponse < Struct.new(
+      :configuration)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @note When making an API call, you may pass GetSensitiveDataOccurrencesAvailabilityRequest
+    #   data as a hash:
+    #
+    #       {
+    #         finding_id: "__string", # required
+    #       }
+    #
+    # @!attribute [rw] finding_id
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/macie2-2020-01-01/GetSensitiveDataOccurrencesAvailabilityRequest AWS API Documentation
+    #
+    class GetSensitiveDataOccurrencesAvailabilityRequest < Struct.new(
+      :finding_id)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Provides information about whether occurrences of sensitive data can
+    # be retrieved for a finding and, if not, why the data can't be
+    # retrieved.
+    #
+    # @!attribute [rw] code
+    #   Specifies whether occurrences of sensitive data can be retrieved for
+    #   a finding. Possible values are:
+    #   @return [String]
+    #
+    # @!attribute [rw] reasons
+    #   @return [Array<String>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/macie2-2020-01-01/GetSensitiveDataOccurrencesAvailabilityResponse AWS API Documentation
+    #
+    class GetSensitiveDataOccurrencesAvailabilityResponse < Struct.new(
+      :code,
+      :reasons)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @note When making an API call, you may pass GetSensitiveDataOccurrencesRequest
+    #   data as a hash:
+    #
+    #       {
+    #         finding_id: "__string", # required
+    #       }
+    #
+    # @!attribute [rw] finding_id
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/macie2-2020-01-01/GetSensitiveDataOccurrencesRequest AWS API Documentation
+    #
+    class GetSensitiveDataOccurrencesRequest < Struct.new(
+      :finding_id)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Provides the results of a request to retrieve occurrences of sensitive
+    # data reported by a finding.
+    #
+    # @!attribute [rw] error
+    #   @return [String]
+    #
+    # @!attribute [rw] sensitive_data_occurrences
+    #   Specifies a type of sensitive data reported by a finding and
+    #   provides occurrences of the specified type of sensitive data.
+    #   @return [Hash<String,Array<Types::DetectedDataDetails>>]
+    #
+    # @!attribute [rw] status
+    #   The status of a request to retrieve occurrences of sensitive data
+    #   reported by a finding. Possible values are:
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/macie2-2020-01-01/GetSensitiveDataOccurrencesResponse AWS API Documentation
+    #
+    class GetSensitiveDataOccurrencesResponse < Struct.new(
+      :error,
+      :sensitive_data_occurrences,
+      :status)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Specifies criteria for filtering, sorting, and paginating the results
     # of a query for quotas and aggregated usage data for one or more Amazon
     # Macie accounts.
@@ -4117,7 +4254,8 @@ module Aws::Macie2
     #       }
     #
     # @!attribute [rw] comparator
-    #   The operator to use in a condition. Valid values are:
+    #   The operator to use in a condition. Depending on the type of
+    #   condition, possible values are:
     #   @return [String]
     #
     # @!attribute [rw] key
@@ -4599,7 +4737,9 @@ module Aws::Macie2
 
     # Specifies the location of 1-15 occurrences of sensitive data that was
     # detected by a managed data identifier or a custom data identifier and
-    # produced a sensitive data finding.
+    # produced a sensitive data finding. Depending on the file or storage
+    # format of the affected S3 object, you can optionally retrieve (reveal)
+    # sample occurrences of the sensitive data that was detected.
     #
     # @!attribute [rw] cells
     #   Specifies the location of occurrences of sensitive data in a
@@ -4607,9 +4747,13 @@ module Aws::Macie2
     #   @return [Array<Types::Cell>]
     #
     # @!attribute [rw] line_ranges
+    #   Specifies the locations of occurrences of sensitive data in a
+    #   non-binary text file.
     #   @return [Array<Types::Range>]
     #
     # @!attribute [rw] offset_ranges
+    #   Specifies the locations of occurrences of sensitive data in a
+    #   non-binary text file.
     #   @return [Array<Types::Range>]
     #
     # @!attribute [rw] pages
@@ -4618,6 +4762,8 @@ module Aws::Macie2
     #   @return [Array<Types::Page>]
     #
     # @!attribute [rw] records
+    #   Specifies the locations of occurrences of sensitive data in an
+    #   Apache Avro object container or a structured data file.
     #   @return [Array<Types::Record>]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/macie2-2020-01-01/Occurrences AWS API Documentation
@@ -4869,6 +5015,39 @@ module Aws::Macie2
       include Aws::Structure
     end
 
+    # Specifies the configuration settings for retrieving occurrences of
+    # sensitive data reported by findings, and the status of the
+    # configuration for an Amazon Macie account. When you enable the
+    # configuration for the first time, your request must specify an AWS Key
+    # Management Service (AWS KMS) key. Otherwise, an error occurs. Macie
+    # uses the specified key to encrypt the sensitive data that you
+    # retrieve.
+    #
+    # @note When making an API call, you may pass RevealConfiguration
+    #   data as a hash:
+    #
+    #       {
+    #         kms_key_id: "__stringMin1Max2048",
+    #         status: "ENABLED", # required, accepts ENABLED, DISABLED
+    #       }
+    #
+    # @!attribute [rw] kms_key_id
+    #   @return [String]
+    #
+    # @!attribute [rw] status
+    #   The status of the configuration for the Amazon Macie account. In a
+    #   request, valid values are:
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/macie2-2020-01-01/RevealConfiguration AWS API Documentation
+    #
+    class RevealConfiguration < Struct.new(
+      :kms_key_id,
+      :status)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Provides information about the S3 bucket that a finding applies to.
     #
     # @!attribute [rw] allows_unencrypted_object_uploads
@@ -5973,7 +6152,8 @@ module Aws::Macie2
     #       }
     #
     # @!attribute [rw] comparator
-    #   The operator to use in a condition. Valid values are:
+    #   The operator to use in a condition. Depending on the type of
+    #   condition, possible values are:
     #   @return [String]
     #
     # @!attribute [rw] key
@@ -6008,7 +6188,8 @@ module Aws::Macie2
     #       }
     #
     # @!attribute [rw] comparator
-    #   The operator to use in a condition. Valid values are:
+    #   The operator to use in a condition. Depending on the type of
+    #   condition, possible values are:
     #   @return [String]
     #
     # @!attribute [rw] key
@@ -6089,7 +6270,8 @@ module Aws::Macie2
     #       }
     #
     # @!attribute [rw] comparator
-    #   The operator to use in a condition. Valid values are:
+    #   The operator to use in a condition. Depending on the type of
+    #   condition, possible values are:
     #   @return [String]
     #
     # @!attribute [rw] tag_values
@@ -6190,7 +6372,8 @@ module Aws::Macie2
     #       }
     #
     # @!attribute [rw] comparator
-    #   The operator to use in a condition. Valid values are:
+    #   The operator to use in a condition. Depending on the type of
+    #   condition, possible values are:
     #   @return [String]
     #
     # @!attribute [rw] key
@@ -6311,6 +6494,20 @@ module Aws::Macie2
       include Aws::Structure
     end
 
+    # Provides information about an error that occurred due to an
+    # unprocessable entity.
+    #
+    # @!attribute [rw] message
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/macie2-2020-01-01/UnprocessableEntityException AWS API Documentation
+    #
+    class UnprocessableEntityException < Struct.new(
+      :message)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Provides information about an account-related request that hasn't
     # been processed.
     #
@@ -6583,6 +6780,60 @@ module Aws::Macie2
     #
     class UpdateOrganizationConfigurationResponse < Aws::EmptyStructure; end
 
+    # Specifies the configuration settings for retrieving occurrences of
+    # sensitive data reported by findings, and the status of the
+    # configuration for an Amazon Macie account.
+    #
+    # @note When making an API call, you may pass UpdateRevealConfigurationRequest
+    #   data as a hash:
+    #
+    #       {
+    #         configuration: { # required
+    #           kms_key_id: "__stringMin1Max2048",
+    #           status: "ENABLED", # required, accepts ENABLED, DISABLED
+    #         },
+    #       }
+    #
+    # @!attribute [rw] configuration
+    #   Specifies the configuration settings for retrieving occurrences of
+    #   sensitive data reported by findings, and the status of the
+    #   configuration for an Amazon Macie account. When you enable the
+    #   configuration for the first time, your request must specify an AWS
+    #   Key Management Service (AWS KMS) key. Otherwise, an error occurs.
+    #   Macie uses the specified key to encrypt the sensitive data that you
+    #   retrieve.
+    #   @return [Types::RevealConfiguration]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/macie2-2020-01-01/UpdateRevealConfigurationRequest AWS API Documentation
+    #
+    class UpdateRevealConfigurationRequest < Struct.new(
+      :configuration)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Provides information about updated configuration settings for
+    # retrieving occurrences of sensitive data reported by findings, and the
+    # status of the configuration for an Amazon Macie account.
+    #
+    # @!attribute [rw] configuration
+    #   Specifies the configuration settings for retrieving occurrences of
+    #   sensitive data reported by findings, and the status of the
+    #   configuration for an Amazon Macie account. When you enable the
+    #   configuration for the first time, your request must specify an AWS
+    #   Key Management Service (AWS KMS) key. Otherwise, an error occurs.
+    #   Macie uses the specified key to encrypt the sensitive data that you
+    #   retrieve.
+    #   @return [Types::RevealConfiguration]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/macie2-2020-01-01/UpdateRevealConfigurationResponse AWS API Documentation
+    #
+    class UpdateRevealConfigurationResponse < Struct.new(
+      :configuration)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Provides data for a specific usage metric and the corresponding quota
     # for an Amazon Macie account.
     #

data/lib/aws-sdk-macie2/waiters.rb

@@ -0,0 +1,121 @@
+# frozen_string_literal: true
+
+# WARNING ABOUT GENERATED CODE
+#
+# This file is generated. See the contributing guide for more information:
+# https://github.com/aws/aws-sdk-ruby/blob/version-3/CONTRIBUTING.md
+#
+# WARNING ABOUT GENERATED CODE
+
+require 'aws-sdk-core/waiters'
+
+module Aws::Macie2
+  # Waiters are utility methods that poll for a particular state to occur
+  # on a client. Waiters can fail after a number of attempts at a polling
+  # interval defined for the service client.
+  #
+  # For a list of operations that can be waited for and the
+  # client methods called for each operation, see the table below or the
+  # {Client#wait_until} field documentation for the {Client}.
+  #
+  # # Invoking a Waiter
+  # To invoke a waiter, call #wait_until on a {Client}. The first parameter
+  # is the waiter name, which is specific to the service client and indicates
+  # which operation is being waited for. The second parameter is a hash of
+  # parameters that are passed to the client method called by the waiter,
+  # which varies according to the waiter name.
+  #
+  # # Wait Failures
+  # To catch errors in a waiter, use WaiterFailed,
+  # as shown in the following example.
+  #
+  #     rescue rescue Aws::Waiters::Errors::WaiterFailed => error
+  #       puts "failed waiting for instance running: #{error.message}
+  #     end
+  #
+  # # Configuring a Waiter
+  # Each waiter has a default polling interval and a maximum number of
+  # attempts it will make before returning control to your program.
+  # To set these values, use the `max_attempts` and `delay` parameters
+  # in your `#wait_until` call.
+  # The following example waits for up to 25 seconds, polling every five seconds.
+  #
+  #     client.wait_until(...) do |w|
+  #       w.max_attempts = 5
+  #       w.delay = 5
+  #     end
+  #
+  # To disable wait failures, set the value of either of these parameters
+  # to `nil`.
+  #
+  # # Extending a Waiter
+  # To modify the behavior of waiters, you can register callbacks that are
+  # triggered before each polling attempt and before waiting.
+  #
+  # The following example implements an exponential backoff in a waiter
+  # by doubling the amount of time to wait on every attempt.
+  #
+  #     client.wait_until(...) do |w|
+  #       w.interval = 0 # disable normal sleep
+  #       w.before_wait do |n, resp|
+  #         sleep(n ** 2)
+  #       end
+  #     end
+  #
+  # # Available Waiters
+  #
+  # The following table lists the valid waiter names, the operations they call,
+  # and the default `:delay` and `:max_attempts` values.
+  #
+  # | waiter_name      | params                                  | :delay   | :max_attempts |
+  # | ---------------- | --------------------------------------- | -------- | ------------- |
+  # | finding_revealed | {Client#get_sensitive_data_occurrences} | 2        | 60            |
+  #
+  module Waiters
+
+    # Wait until the sensitive data occurrences are ready.
+    class FindingRevealed
+
+      # @param [Hash] options
+      # @option options [required, Client] :client
+      # @option options [Integer] :max_attempts (60)
+      # @option options [Integer] :delay (2)
+      # @option options [Proc] :before_attempt
+      # @option options [Proc] :before_wait
+      def initialize(options)
+        @client = options.fetch(:client)
+        @waiter = Aws::Waiters::Waiter.new({
+          max_attempts: 60,
+          delay: 2,
+          poller: Aws::Waiters::Poller.new(
+            operation_name: :get_sensitive_data_occurrences,
+            acceptors: [
+              {
+                "matcher" => "path",
+                "argument" => "status",
+                "state" => "success",
+                "expected" => "SUCCESS"
+              },
+              {
+                "matcher" => "path",
+                "argument" => "status",
+                "state" => "success",
+                "expected" => "ERROR"
+              }
+            ]
+          )
+        }.merge(options))
+      end
+
+      # @option (see Client#get_sensitive_data_occurrences)
+      # @return (see Client#get_sensitive_data_occurrences)
+      def wait(params = {})
+        @waiter.wait(client: @client, params: params)
+      end
+
+      # @api private
+      attr_reader :waiter
+
+    end
+  end
+end

data/lib/aws-sdk-macie2.rb

@@ -15,6 +15,7 @@ require_relative 'aws-sdk-macie2/types'
 require_relative 'aws-sdk-macie2/client_api'
 require_relative 'aws-sdk-macie2/client'
 require_relative 'aws-sdk-macie2/errors'
+require_relative 'aws-sdk-macie2/waiters'
 require_relative 'aws-sdk-macie2/resource'
 require_relative 'aws-sdk-macie2/customizations'
 
@@ -48,6 +49,6 @@ require_relative 'aws-sdk-macie2/customizations'
 # @!group service
 module Aws::Macie2
 
-  GEM_VERSION = '1.43.0'
+  GEM_VERSION = '1.46.0'
 
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-macie2
 version: !ruby/object:Gem::Version
-  version: 1.43.0
+  version: 1.46.0
 platform: ruby
 authors:
 - Amazon Web Services
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-02-03 00:00:00.000000000 Z
+date: 2022-07-26 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-core
@@ -19,7 +19,7 @@ dependencies:
         version: '3'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.126.0
+        version: 3.127.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -29,7 +29,7 @@ dependencies:
         version: '3'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.126.0
+        version: 3.127.0
 - !ruby/object:Gem::Dependency
   name: aws-sigv4
   requirement: !ruby/object:Gem::Requirement
@@ -62,6 +62,7 @@ files:
 - lib/aws-sdk-macie2/errors.rb
 - lib/aws-sdk-macie2/resource.rb
 - lib/aws-sdk-macie2/types.rb
+- lib/aws-sdk-macie2/waiters.rb
 homepage: https://github.com/aws/aws-sdk-ruby
 licenses:
 - Apache-2.0