aws-sdk-managedgrafana 1.9.0 → 1.10.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: cda23a7c1ebb830dbdde8198f1a1dce63a18a5c8c062d1ab4d5a4e421ec8ef13
-  data.tar.gz: 63bc8d03b962c433575a5bce8a7de7093fc275f46a296ce0480e116cf7edb3d5
+  metadata.gz: 98a3805f6f6c020f69a8681129b0ff5ebce892f8a0b4d2536cfa7abeca8f4cc5
+  data.tar.gz: 6c5f9dda87b536a675bf8e25613e79ca974371cdc30eb911eb58898624a6ffa4
 SHA512:
-  metadata.gz: 7af66647e58f6ac7c37b3c8f4104bb8edc2785bf00ab09fc52b631420c5380ef605fa1e573e2ca778819fd3ab50d68db2f410b9a85be184ea2aaace4082499ec
-  data.tar.gz: a90780e1bbe188b36909556841c4eb1b6715d71be86b68a233e86079b17d72a6445f48b02d490652e4a4b7e6257b321b0a3e10f6670f5dad0d7c1fd2c09ea852
+  metadata.gz: c878b1d4197f1c82ba977f416ba7891e6877f5bc9c92630b78f8e7cda676b1e4dfbec83adf97a252c83b3aeec715d392be3162b0e946724bb7c3b03b2a756232
+  data.tar.gz: 6c33ed2eb57ea1317c67c769e28c4a5d919a2cfbd564bd8f1813bf1d5edc80c65266bdd8497c707bef5b64c735b2604b745402955081fcab4bfd81991c3e28f0

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.10.0 (2022-11-23)
+------------------
+
+* Feature - This release includes support for configuring a Grafana workspace to connect to a datasource within a VPC as well as new APIs for configuring Grafana settings.
+
 1.9.0 (2022-10-25)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.9.0
+1.10.0

data/lib/aws-sdk-managedgrafana/client.rb

@@ -401,7 +401,7 @@ module Aws::ManagedGrafana
     #   resp.workspace.authentication.saml_configuration_status #=> String, one of "CONFIGURED", "NOT_CONFIGURED"
     #   resp.workspace.created #=> Time
     #   resp.workspace.data_sources #=> Array
-    #   resp.workspace.data_sources[0] #=> String, one of "AMAZON_OPENSEARCH_SERVICE", "CLOUDWATCH", "PROMETHEUS", "XRAY", "TIMESTREAM", "SITEWISE", "ATHENA", "REDSHIFT"
+    #   resp.workspace.data_sources[0] #=> String, one of "AMAZON_OPENSEARCH_SERVICE", "CLOUDWATCH", "PROMETHEUS", "XRAY", "TIMESTREAM", "SITEWISE", "ATHENA", "REDSHIFT", "TWINMAKER"
     #   resp.workspace.description #=> String
     #   resp.workspace.endpoint #=> String
     #   resp.workspace.free_trial_consumed #=> Boolean
@@ -422,6 +422,10 @@ module Aws::ManagedGrafana
     #   resp.workspace.status #=> String, one of "ACTIVE", "CREATING", "DELETING", "FAILED", "UPDATING", "UPGRADING", "DELETION_FAILED", "CREATION_FAILED", "UPDATE_FAILED", "UPGRADE_FAILED", "LICENSE_REMOVAL_FAILED"
     #   resp.workspace.tags #=> Hash
     #   resp.workspace.tags["TagKey"] #=> String
+    #   resp.workspace.vpc_configuration.security_group_ids #=> Array
+    #   resp.workspace.vpc_configuration.security_group_ids[0] #=> String
+    #   resp.workspace.vpc_configuration.subnet_ids #=> Array
+    #   resp.workspace.vpc_configuration.subnet_ids[0] #=> String
     #   resp.workspace.workspace_role_arn #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/grafana-2020-08-18/AssociateLicense AWS API Documentation
@@ -454,10 +458,10 @@ module Aws::ManagedGrafana
     #   `workspaceOrganizationalUnits` parameter.
     #
     # @option params [required, Array<String>] :authentication_providers
-    #   Specifies whether this workspace uses SAML 2.0, Amazon Web Services
-    #   Single Sign On, or both to authenticate users for using the Grafana
-    #   console within a workspace. For more information, see [User
-    #   authentication in Amazon Managed Grafana][1].
+    #   Specifies whether this workspace uses SAML 2.0, IAM Identity Center
+    #   (successor to Single Sign-On), or both to authenticate users for using
+    #   the Grafana console within a workspace. For more information, see
+    #   [User authentication in Amazon Managed Grafana][1].
     #
     #
     #
@@ -470,6 +474,19 @@ module Aws::ManagedGrafana
     #   **A suitable default value is auto-generated.** You should normally
     #   not need to pass this option.**
     #
+    # @option params [String] :configuration
+    #   The configuration string for the workspace that you create. For more
+    #   information about the format and configuration options available, see
+    #   [Working in your Grafana workspace][1].
+    #
+    #   **SDK automatically handles json encoding and base64 encoding for you
+    #   when the required value (Hash, Array, etc.) is provided according to
+    #   the description.**
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/grafana/latest/userguide/AMG-configure-workspace.html
+    #
     # @option params [String] :organization_role_name
     #   The name of an IAM role that already exists to use with Organizations
     #   to access Amazon Web Services data sources and notification channels
@@ -479,8 +496,12 @@ module Aws::ManagedGrafana
     #   If you specify `SERVICE_MANAGED` on AWS Grafana console, Amazon
     #   Managed Grafana automatically creates the IAM roles and provisions the
     #   permissions that the workspace needs to use Amazon Web Services data
-    #   sources and notification channels. In CLI mode, the permissionType
-    #   `SERVICE_MANAGED` will not create the IAM role for you.
+    #   sources and notification channels. In the CLI mode, the permissionType
+    #   `SERVICE_MANAGED` will not create the IAM role for you. The ability
+    #   for the Amazon Managed Grafana to create the IAM role on behalf of the
+    #   user is supported only in the Amazon Managed Grafana AWS console. Use
+    #   only the `CUSTOMER_MANAGED` permission type when creating a workspace
+    #   in the CLI.
     #
     #   If you specify `CUSTOMER_MANAGED`, you will manage those roles and
     #   permissions yourself. If you are creating this workspace in a member
@@ -504,6 +525,10 @@ module Aws::ManagedGrafana
     # @option params [Hash<String,String>] :tags
     #   The list of tags associated with the workspace.
     #
+    # @option params [Types::VpcConfiguration] :vpc_configuration
+    #   The configuration settings for an Amazon VPC that contains data
+    #   sources for your Grafana workspace to connect to.
+    #
     # @option params [Array<String>] :workspace_data_sources
     #   Specify the Amazon Web Services data sources that you want to be
     #   queried in this workspace. Specifying these data sources here enables
@@ -551,13 +576,18 @@ module Aws::ManagedGrafana
     #     account_access_type: "CURRENT_ACCOUNT", # required, accepts CURRENT_ACCOUNT, ORGANIZATION
     #     authentication_providers: ["AWS_SSO"], # required, accepts AWS_SSO, SAML
     #     client_token: "ClientToken",
+    #     configuration: "OverridableConfigurationJson",
     #     organization_role_name: "OrganizationRoleName",
     #     permission_type: "CUSTOMER_MANAGED", # required, accepts CUSTOMER_MANAGED, SERVICE_MANAGED
     #     stack_set_name: "StackSetName",
     #     tags: {
     #       "TagKey" => "TagValue",
     #     },
-    #     workspace_data_sources: ["AMAZON_OPENSEARCH_SERVICE"], # accepts AMAZON_OPENSEARCH_SERVICE, CLOUDWATCH, PROMETHEUS, XRAY, TIMESTREAM, SITEWISE, ATHENA, REDSHIFT
+    #     vpc_configuration: {
+    #       security_group_ids: ["SecurityGroupId"], # required
+    #       subnet_ids: ["SubnetId"], # required
+    #     },
+    #     workspace_data_sources: ["AMAZON_OPENSEARCH_SERVICE"], # accepts AMAZON_OPENSEARCH_SERVICE, CLOUDWATCH, PROMETHEUS, XRAY, TIMESTREAM, SITEWISE, ATHENA, REDSHIFT, TWINMAKER
     #     workspace_description: "Description",
     #     workspace_name: "WorkspaceName",
     #     workspace_notification_destinations: ["SNS"], # accepts SNS
@@ -573,7 +603,7 @@ module Aws::ManagedGrafana
     #   resp.workspace.authentication.saml_configuration_status #=> String, one of "CONFIGURED", "NOT_CONFIGURED"
     #   resp.workspace.created #=> Time
     #   resp.workspace.data_sources #=> Array
-    #   resp.workspace.data_sources[0] #=> String, one of "AMAZON_OPENSEARCH_SERVICE", "CLOUDWATCH", "PROMETHEUS", "XRAY", "TIMESTREAM", "SITEWISE", "ATHENA", "REDSHIFT"
+    #   resp.workspace.data_sources[0] #=> String, one of "AMAZON_OPENSEARCH_SERVICE", "CLOUDWATCH", "PROMETHEUS", "XRAY", "TIMESTREAM", "SITEWISE", "ATHENA", "REDSHIFT", "TWINMAKER"
     #   resp.workspace.description #=> String
     #   resp.workspace.endpoint #=> String
     #   resp.workspace.free_trial_consumed #=> Boolean
@@ -594,6 +624,10 @@ module Aws::ManagedGrafana
     #   resp.workspace.status #=> String, one of "ACTIVE", "CREATING", "DELETING", "FAILED", "UPDATING", "UPGRADING", "DELETION_FAILED", "CREATION_FAILED", "UPDATE_FAILED", "UPGRADE_FAILED", "LICENSE_REMOVAL_FAILED"
     #   resp.workspace.tags #=> Hash
     #   resp.workspace.tags["TagKey"] #=> String
+    #   resp.workspace.vpc_configuration.security_group_ids #=> Array
+    #   resp.workspace.vpc_configuration.security_group_ids[0] #=> String
+    #   resp.workspace.vpc_configuration.subnet_ids #=> Array
+    #   resp.workspace.vpc_configuration.subnet_ids[0] #=> String
     #   resp.workspace.workspace_role_arn #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/grafana-2020-08-18/CreateWorkspace AWS API Documentation
@@ -605,27 +639,30 @@ module Aws::ManagedGrafana
       req.send_request(options)
     end
 
-    # Creates an API key for the workspace. This key can be used to
-    # authenticate requests sent to the workspace's HTTP API. See [
-    # https://docs.aws.amazon.com/grafana/latest/userguide/Using-Grafana-APIs.html](
-    # https://docs.aws.amazon.com/grafana/latest/userguide/Using-Grafana-APIs.html)
+    # Creates a Grafana API key for the workspace. This key can be used to
+    # authenticate requests sent to the workspace's HTTP API. See
+    # [https://docs.aws.amazon.com/grafana/latest/userguide/Using-Grafana-APIs.html][1]
     # for available APIs and example requests.
     #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/grafana/latest/userguide/Using-Grafana-APIs.html
+    #
     # @option params [required, String] :key_name
-    #   Specifies the name of the key to create. Key names must be unique to
-    #   the workspace.
+    #   Specifies the name of the key. Keynames must be unique to the
+    #   workspace.
     #
     # @option params [required, String] :key_role
     #   Specifies the permission level of the key.
     #
-    #   Valid Values: `VIEWER` \| `EDITOR` \| `ADMIN`
+    #   Valid values: `VIEWER`\|`EDITOR`\|`ADMIN`
     #
     # @option params [required, Integer] :seconds_to_live
     #   Specifies the time in seconds until the key expires. Keys can be valid
     #   for up to 30 days.
     #
     # @option params [required, String] :workspace_id
-    #   The ID of the workspace in which to create an API key.
+    #   The ID of the workspace to create an API key.
     #
     # @return [Types::CreateWorkspaceApiKeyResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
@@ -680,7 +717,7 @@ module Aws::ManagedGrafana
     #   resp.workspace.authentication.saml_configuration_status #=> String, one of "CONFIGURED", "NOT_CONFIGURED"
     #   resp.workspace.created #=> Time
     #   resp.workspace.data_sources #=> Array
-    #   resp.workspace.data_sources[0] #=> String, one of "AMAZON_OPENSEARCH_SERVICE", "CLOUDWATCH", "PROMETHEUS", "XRAY", "TIMESTREAM", "SITEWISE", "ATHENA", "REDSHIFT"
+    #   resp.workspace.data_sources[0] #=> String, one of "AMAZON_OPENSEARCH_SERVICE", "CLOUDWATCH", "PROMETHEUS", "XRAY", "TIMESTREAM", "SITEWISE", "ATHENA", "REDSHIFT", "TWINMAKER"
     #   resp.workspace.description #=> String
     #   resp.workspace.endpoint #=> String
     #   resp.workspace.free_trial_consumed #=> Boolean
@@ -701,6 +738,10 @@ module Aws::ManagedGrafana
     #   resp.workspace.status #=> String, one of "ACTIVE", "CREATING", "DELETING", "FAILED", "UPDATING", "UPGRADING", "DELETION_FAILED", "CREATION_FAILED", "UPDATE_FAILED", "UPGRADE_FAILED", "LICENSE_REMOVAL_FAILED"
     #   resp.workspace.tags #=> Hash
     #   resp.workspace.tags["TagKey"] #=> String
+    #   resp.workspace.vpc_configuration.security_group_ids #=> Array
+    #   resp.workspace.vpc_configuration.security_group_ids[0] #=> String
+    #   resp.workspace.vpc_configuration.subnet_ids #=> Array
+    #   resp.workspace.vpc_configuration.subnet_ids[0] #=> String
     #   resp.workspace.workspace_role_arn #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/grafana-2020-08-18/DeleteWorkspace AWS API Documentation
@@ -712,7 +753,7 @@ module Aws::ManagedGrafana
       req.send_request(options)
     end
 
-    # Deletes an API key for a workspace.
+    # Deletes a Grafana API key for the workspace.
     #
     # @option params [required, String] :key_name
     #   The name of the API key to delete.
@@ -769,7 +810,7 @@ module Aws::ManagedGrafana
     #   resp.workspace.authentication.saml_configuration_status #=> String, one of "CONFIGURED", "NOT_CONFIGURED"
     #   resp.workspace.created #=> Time
     #   resp.workspace.data_sources #=> Array
-    #   resp.workspace.data_sources[0] #=> String, one of "AMAZON_OPENSEARCH_SERVICE", "CLOUDWATCH", "PROMETHEUS", "XRAY", "TIMESTREAM", "SITEWISE", "ATHENA", "REDSHIFT"
+    #   resp.workspace.data_sources[0] #=> String, one of "AMAZON_OPENSEARCH_SERVICE", "CLOUDWATCH", "PROMETHEUS", "XRAY", "TIMESTREAM", "SITEWISE", "ATHENA", "REDSHIFT", "TWINMAKER"
     #   resp.workspace.description #=> String
     #   resp.workspace.endpoint #=> String
     #   resp.workspace.free_trial_consumed #=> Boolean
@@ -790,6 +831,10 @@ module Aws::ManagedGrafana
     #   resp.workspace.status #=> String, one of "ACTIVE", "CREATING", "DELETING", "FAILED", "UPDATING", "UPGRADING", "DELETION_FAILED", "CREATION_FAILED", "UPDATE_FAILED", "UPGRADE_FAILED", "LICENSE_REMOVAL_FAILED"
     #   resp.workspace.tags #=> Hash
     #   resp.workspace.tags["TagKey"] #=> String
+    #   resp.workspace.vpc_configuration.security_group_ids #=> Array
+    #   resp.workspace.vpc_configuration.security_group_ids[0] #=> String
+    #   resp.workspace.vpc_configuration.subnet_ids #=> Array
+    #   resp.workspace.vpc_configuration.subnet_ids[0] #=> String
     #   resp.workspace.workspace_role_arn #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/grafana-2020-08-18/DescribeWorkspace AWS API Documentation
@@ -848,6 +893,34 @@ module Aws::ManagedGrafana
       req.send_request(options)
     end
 
+    # Gets the current configuration string for the given workspace.
+    #
+    # @option params [required, String] :workspace_id
+    #   The ID of the workspace to get configuration information for.
+    #
+    # @return [Types::DescribeWorkspaceConfigurationResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::DescribeWorkspaceConfigurationResponse#configuration #configuration} => String
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.describe_workspace_configuration({
+    #     workspace_id: "WorkspaceId", # required
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.configuration #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/grafana-2020-08-18/DescribeWorkspaceConfiguration AWS API Documentation
+    #
+    # @overload describe_workspace_configuration(params = {})
+    # @param [Hash] params ({})
+    def describe_workspace_configuration(params = {}, options = {})
+      req = build_request(:describe_workspace_configuration, params)
+      req.send_request(options)
+    end
+
     # Removes the Grafana Enterprise license from a workspace.
     #
     # @option params [required, String] :license_type
@@ -875,7 +948,7 @@ module Aws::ManagedGrafana
     #   resp.workspace.authentication.saml_configuration_status #=> String, one of "CONFIGURED", "NOT_CONFIGURED"
     #   resp.workspace.created #=> Time
     #   resp.workspace.data_sources #=> Array
-    #   resp.workspace.data_sources[0] #=> String, one of "AMAZON_OPENSEARCH_SERVICE", "CLOUDWATCH", "PROMETHEUS", "XRAY", "TIMESTREAM", "SITEWISE", "ATHENA", "REDSHIFT"
+    #   resp.workspace.data_sources[0] #=> String, one of "AMAZON_OPENSEARCH_SERVICE", "CLOUDWATCH", "PROMETHEUS", "XRAY", "TIMESTREAM", "SITEWISE", "ATHENA", "REDSHIFT", "TWINMAKER"
     #   resp.workspace.description #=> String
     #   resp.workspace.endpoint #=> String
     #   resp.workspace.free_trial_consumed #=> Boolean
@@ -896,6 +969,10 @@ module Aws::ManagedGrafana
     #   resp.workspace.status #=> String, one of "ACTIVE", "CREATING", "DELETING", "FAILED", "UPDATING", "UPGRADING", "DELETION_FAILED", "CREATION_FAILED", "UPDATE_FAILED", "UPGRADE_FAILED", "LICENSE_REMOVAL_FAILED"
     #   resp.workspace.tags #=> Hash
     #   resp.workspace.tags["TagKey"] #=> String
+    #   resp.workspace.vpc_configuration.security_group_ids #=> Array
+    #   resp.workspace.vpc_configuration.security_group_ids[0] #=> String
+    #   resp.workspace.vpc_configuration.subnet_ids #=> Array
+    #   resp.workspace.vpc_configuration.subnet_ids[0] #=> String
     #   resp.workspace.workspace_role_arn #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/grafana-2020-08-18/DisassociateLicense AWS API Documentation
@@ -928,10 +1005,9 @@ module Aws::ManagedGrafana
     #   (Optional) Limits the results to only the user that matches this ID.
     #
     # @option params [String] :user_type
-    #   (Optional) If you specify `SSO_USER`, then only the permissions of
-    #   Amazon Web Services SSO users are returned. If you specify
-    #   `SSO_GROUP`, only the permissions of Amazon Web Services SSO groups
-    #   are returned.
+    #   (Optional) If you specify `SSO_USER`, then only the permissions of IAM
+    #   Identity Center users are returned. If you specify `SSO_GROUP`, only
+    #   the permissions of IAM Identity Center groups are returned.
     #
     # @option params [required, String] :workspace_id
     #   The ID of the workspace to list permissions for. This parameter is
@@ -1182,7 +1258,7 @@ module Aws::ManagedGrafana
     # those parameters are not changed.
     #
     # To modify the user authentication methods that the workspace uses,
-    # such as SAML or Amazon Web Services SSO, use
+    # such as SAML or IAM Identity Center, use
     # [UpdateWorkspaceAuthentication][1].
     #
     # To modify which users in the workspace have the `Admin` and `Editor`
@@ -1226,10 +1302,20 @@ module Aws::ManagedGrafana
     #
     #   [1]: https://docs.aws.amazon.com/grafana/latest/userguide/AMG-manage-permissions.html
     #
+    # @option params [Boolean] :remove_vpc_configuration
+    #   Whether to remove the VPC configuration from the workspace.
+    #
+    #   Setting this to `true` and providing a `vpcConfiguration` to set will
+    #   return an error.
+    #
     # @option params [String] :stack_set_name
     #   The name of the CloudFormation stack set to use to generate IAM roles
     #   to be used for this workspace.
     #
+    # @option params [Types::VpcConfiguration] :vpc_configuration
+    #   The configuration settings for an Amazon VPC that contains data
+    #   sources for your Grafana workspace to connect to.
+    #
     # @option params [Array<String>] :workspace_data_sources
     #   Specify the Amazon Web Services data sources that you want to be
     #   queried in this workspace. Specifying these data sources here enables
@@ -1280,8 +1366,13 @@ module Aws::ManagedGrafana
     #     account_access_type: "CURRENT_ACCOUNT", # accepts CURRENT_ACCOUNT, ORGANIZATION
     #     organization_role_name: "OrganizationRoleName",
     #     permission_type: "CUSTOMER_MANAGED", # accepts CUSTOMER_MANAGED, SERVICE_MANAGED
+    #     remove_vpc_configuration: false,
     #     stack_set_name: "StackSetName",
-    #     workspace_data_sources: ["AMAZON_OPENSEARCH_SERVICE"], # accepts AMAZON_OPENSEARCH_SERVICE, CLOUDWATCH, PROMETHEUS, XRAY, TIMESTREAM, SITEWISE, ATHENA, REDSHIFT
+    #     vpc_configuration: {
+    #       security_group_ids: ["SecurityGroupId"], # required
+    #       subnet_ids: ["SubnetId"], # required
+    #     },
+    #     workspace_data_sources: ["AMAZON_OPENSEARCH_SERVICE"], # accepts AMAZON_OPENSEARCH_SERVICE, CLOUDWATCH, PROMETHEUS, XRAY, TIMESTREAM, SITEWISE, ATHENA, REDSHIFT, TWINMAKER
     #     workspace_description: "Description",
     #     workspace_id: "WorkspaceId", # required
     #     workspace_name: "WorkspaceName",
@@ -1298,7 +1389,7 @@ module Aws::ManagedGrafana
     #   resp.workspace.authentication.saml_configuration_status #=> String, one of "CONFIGURED", "NOT_CONFIGURED"
     #   resp.workspace.created #=> Time
     #   resp.workspace.data_sources #=> Array
-    #   resp.workspace.data_sources[0] #=> String, one of "AMAZON_OPENSEARCH_SERVICE", "CLOUDWATCH", "PROMETHEUS", "XRAY", "TIMESTREAM", "SITEWISE", "ATHENA", "REDSHIFT"
+    #   resp.workspace.data_sources[0] #=> String, one of "AMAZON_OPENSEARCH_SERVICE", "CLOUDWATCH", "PROMETHEUS", "XRAY", "TIMESTREAM", "SITEWISE", "ATHENA", "REDSHIFT", "TWINMAKER"
     #   resp.workspace.description #=> String
     #   resp.workspace.endpoint #=> String
     #   resp.workspace.free_trial_consumed #=> Boolean
@@ -1319,6 +1410,10 @@ module Aws::ManagedGrafana
     #   resp.workspace.status #=> String, one of "ACTIVE", "CREATING", "DELETING", "FAILED", "UPDATING", "UPGRADING", "DELETION_FAILED", "CREATION_FAILED", "UPDATE_FAILED", "UPGRADE_FAILED", "LICENSE_REMOVAL_FAILED"
     #   resp.workspace.tags #=> Hash
     #   resp.workspace.tags["TagKey"] #=> String
+    #   resp.workspace.vpc_configuration.security_group_ids #=> Array
+    #   resp.workspace.vpc_configuration.security_group_ids[0] #=> String
+    #   resp.workspace.vpc_configuration.subnet_ids #=> Array
+    #   resp.workspace.vpc_configuration.subnet_ids[0] #=> String
     #   resp.workspace.workspace_role_arn #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/grafana-2020-08-18/UpdateWorkspace AWS API Documentation
@@ -1337,10 +1432,10 @@ module Aws::ManagedGrafana
     # roles in the workspace.
     #
     # @option params [required, Array<String>] :authentication_providers
-    #   Specifies whether this workspace uses SAML 2.0, Amazon Web Services
-    #   Single Sign On, or both to authenticate users for using the Grafana
-    #   console within a workspace. For more information, see [User
-    #   authentication in Amazon Managed Grafana][1].
+    #   Specifies whether this workspace uses SAML 2.0, IAM Identity Center
+    #   (successor to Single Sign-On), or both to authenticate users for using
+    #   the Grafana console within a workspace. For more information, see
+    #   [User authentication in Amazon Managed Grafana][1].
     #
     #
     #
@@ -1417,6 +1512,42 @@ module Aws::ManagedGrafana
       req.send_request(options)
     end
 
+    # Updates the configuration string for the given workspace
+    #
+    # @option params [required, String] :configuration
+    #   The new configuration string for the workspace. For more information
+    #   about the format and configuration options available, see [Working in
+    #   your Grafana workspace][1].
+    #
+    #   **SDK automatically handles json encoding and base64 encoding for you
+    #   when the required value (Hash, Array, etc.) is provided according to
+    #   the description.**
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/grafana/latest/userguide/AMG-configure-workspace.html
+    #
+    # @option params [required, String] :workspace_id
+    #   The ID of the workspace to update.
+    #
+    # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.update_workspace_configuration({
+    #     configuration: "OverridableConfigurationJson", # required
+    #     workspace_id: "WorkspaceId", # required
+    #   })
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/grafana-2020-08-18/UpdateWorkspaceConfiguration AWS API Documentation
+    #
+    # @overload update_workspace_configuration(params = {})
+    # @param [Hash] params ({})
+    def update_workspace_configuration(params = {}, options = {})
+      req = build_request(:update_workspace_configuration, params)
+      req.send_request(options)
+    end
+
     # @!endgroup
 
     # @param params ({})
@@ -1430,7 +1561,7 @@ module Aws::ManagedGrafana
         params: params,
         config: config)
       context[:gem_name] = 'aws-sdk-managedgrafana'
-      context[:gem_version] = '1.9.0'
+      context[:gem_version] = '1.10.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-managedgrafana/client_api.rb

@@ -44,6 +44,8 @@ module Aws::ManagedGrafana
     DeleteWorkspaceResponse = Shapes::StructureShape.new(name: 'DeleteWorkspaceResponse')
     DescribeWorkspaceAuthenticationRequest = Shapes::StructureShape.new(name: 'DescribeWorkspaceAuthenticationRequest')
     DescribeWorkspaceAuthenticationResponse = Shapes::StructureShape.new(name: 'DescribeWorkspaceAuthenticationResponse')
+    DescribeWorkspaceConfigurationRequest = Shapes::StructureShape.new(name: 'DescribeWorkspaceConfigurationRequest')
+    DescribeWorkspaceConfigurationResponse = Shapes::StructureShape.new(name: 'DescribeWorkspaceConfigurationResponse')
     DescribeWorkspaceRequest = Shapes::StructureShape.new(name: 'DescribeWorkspaceRequest')
     DescribeWorkspaceResponse = Shapes::StructureShape.new(name: 'DescribeWorkspaceResponse')
     Description = Shapes::StringShape.new(name: 'Description')
@@ -71,6 +73,7 @@ module Aws::ManagedGrafana
     OrganizationRoleName = Shapes::StringShape.new(name: 'OrganizationRoleName')
     OrganizationalUnit = Shapes::StringShape.new(name: 'OrganizationalUnit')
     OrganizationalUnitList = Shapes::ListShape.new(name: 'OrganizationalUnitList')
+    OverridableConfigurationJson = Shapes::StringShape.new(name: 'OverridableConfigurationJson')
     PaginationToken = Shapes::StringShape.new(name: 'PaginationToken')
     PermissionEntry = Shapes::StructureShape.new(name: 'PermissionEntry')
     PermissionEntryList = Shapes::ListShape.new(name: 'PermissionEntryList')
@@ -84,10 +87,14 @@ module Aws::ManagedGrafana
     SamlAuthentication = Shapes::StructureShape.new(name: 'SamlAuthentication')
     SamlConfiguration = Shapes::StructureShape.new(name: 'SamlConfiguration')
     SamlConfigurationStatus = Shapes::StringShape.new(name: 'SamlConfigurationStatus')
+    SecurityGroupId = Shapes::StringShape.new(name: 'SecurityGroupId')
+    SecurityGroupIds = Shapes::ListShape.new(name: 'SecurityGroupIds')
     ServiceQuotaExceededException = Shapes::StructureShape.new(name: 'ServiceQuotaExceededException')
     SsoId = Shapes::StringShape.new(name: 'SsoId')
     StackSetName = Shapes::StringShape.new(name: 'StackSetName')
     String = Shapes::StringShape.new(name: 'String')
+    SubnetId = Shapes::StringShape.new(name: 'SubnetId')
+    SubnetIds = Shapes::ListShape.new(name: 'SubnetIds')
     TagKey = Shapes::StringShape.new(name: 'TagKey')
     TagKeys = Shapes::ListShape.new(name: 'TagKeys')
     TagMap = Shapes::MapShape.new(name: 'TagMap')
@@ -108,6 +115,8 @@ module Aws::ManagedGrafana
     UpdatePermissionsResponse = Shapes::StructureShape.new(name: 'UpdatePermissionsResponse')
     UpdateWorkspaceAuthenticationRequest = Shapes::StructureShape.new(name: 'UpdateWorkspaceAuthenticationRequest')
     UpdateWorkspaceAuthenticationResponse = Shapes::StructureShape.new(name: 'UpdateWorkspaceAuthenticationResponse')
+    UpdateWorkspaceConfigurationRequest = Shapes::StructureShape.new(name: 'UpdateWorkspaceConfigurationRequest')
+    UpdateWorkspaceConfigurationResponse = Shapes::StructureShape.new(name: 'UpdateWorkspaceConfigurationResponse')
     UpdateWorkspaceRequest = Shapes::StructureShape.new(name: 'UpdateWorkspaceRequest')
     UpdateWorkspaceResponse = Shapes::StructureShape.new(name: 'UpdateWorkspaceResponse')
     User = Shapes::StructureShape.new(name: 'User')
@@ -117,6 +126,7 @@ module Aws::ManagedGrafana
     ValidationExceptionField = Shapes::StructureShape.new(name: 'ValidationExceptionField')
     ValidationExceptionFieldList = Shapes::ListShape.new(name: 'ValidationExceptionFieldList')
     ValidationExceptionReason = Shapes::StringShape.new(name: 'ValidationExceptionReason')
+    VpcConfiguration = Shapes::StructureShape.new(name: 'VpcConfiguration')
     WorkspaceDescription = Shapes::StructureShape.new(name: 'WorkspaceDescription')
     WorkspaceId = Shapes::StringShape.new(name: 'WorkspaceId')
     WorkspaceList = Shapes::ListShape.new(name: 'WorkspaceList')
@@ -177,10 +187,12 @@ module Aws::ManagedGrafana
     CreateWorkspaceRequest.add_member(:account_access_type, Shapes::ShapeRef.new(shape: AccountAccessType, required: true, location_name: "accountAccessType"))
     CreateWorkspaceRequest.add_member(:authentication_providers, Shapes::ShapeRef.new(shape: AuthenticationProviders, required: true, location_name: "authenticationProviders"))
     CreateWorkspaceRequest.add_member(:client_token, Shapes::ShapeRef.new(shape: ClientToken, location_name: "clientToken", metadata: {"idempotencyToken"=>true}))
+    CreateWorkspaceRequest.add_member(:configuration, Shapes::ShapeRef.new(shape: OverridableConfigurationJson, location_name: "configuration", metadata: {"jsonvalue"=>true}))
     CreateWorkspaceRequest.add_member(:organization_role_name, Shapes::ShapeRef.new(shape: OrganizationRoleName, location_name: "organizationRoleName"))
     CreateWorkspaceRequest.add_member(:permission_type, Shapes::ShapeRef.new(shape: PermissionType, required: true, location_name: "permissionType"))
     CreateWorkspaceRequest.add_member(:stack_set_name, Shapes::ShapeRef.new(shape: StackSetName, location_name: "stackSetName"))
     CreateWorkspaceRequest.add_member(:tags, Shapes::ShapeRef.new(shape: TagMap, location_name: "tags"))
+    CreateWorkspaceRequest.add_member(:vpc_configuration, Shapes::ShapeRef.new(shape: VpcConfiguration, location_name: "vpcConfiguration"))
     CreateWorkspaceRequest.add_member(:workspace_data_sources, Shapes::ShapeRef.new(shape: DataSourceTypesList, location_name: "workspaceDataSources"))
     CreateWorkspaceRequest.add_member(:workspace_description, Shapes::ShapeRef.new(shape: Description, location_name: "workspaceDescription"))
     CreateWorkspaceRequest.add_member(:workspace_name, Shapes::ShapeRef.new(shape: WorkspaceName, location_name: "workspaceName"))
@@ -214,6 +226,12 @@ module Aws::ManagedGrafana
     DescribeWorkspaceAuthenticationResponse.add_member(:authentication, Shapes::ShapeRef.new(shape: AuthenticationDescription, required: true, location_name: "authentication"))
     DescribeWorkspaceAuthenticationResponse.struct_class = Types::DescribeWorkspaceAuthenticationResponse
 
+    DescribeWorkspaceConfigurationRequest.add_member(:workspace_id, Shapes::ShapeRef.new(shape: WorkspaceId, required: true, location: "uri", location_name: "workspaceId"))
+    DescribeWorkspaceConfigurationRequest.struct_class = Types::DescribeWorkspaceConfigurationRequest
+
+    DescribeWorkspaceConfigurationResponse.add_member(:configuration, Shapes::ShapeRef.new(shape: OverridableConfigurationJson, required: true, location_name: "configuration", metadata: {"jsonvalue"=>true}))
+    DescribeWorkspaceConfigurationResponse.struct_class = Types::DescribeWorkspaceConfigurationResponse
+
     DescribeWorkspaceRequest.add_member(:workspace_id, Shapes::ShapeRef.new(shape: WorkspaceId, required: true, location: "uri", location_name: "workspaceId"))
     DescribeWorkspaceRequest.struct_class = Types::DescribeWorkspaceRequest
 
@@ -297,6 +315,8 @@ module Aws::ManagedGrafana
     SamlConfiguration.add_member(:role_values, Shapes::ShapeRef.new(shape: RoleValues, location_name: "roleValues"))
     SamlConfiguration.struct_class = Types::SamlConfiguration
 
+    SecurityGroupIds.member = Shapes::ShapeRef.new(shape: SecurityGroupId)
+
     ServiceQuotaExceededException.add_member(:message, Shapes::ShapeRef.new(shape: String, required: true, location_name: "message"))
     ServiceQuotaExceededException.add_member(:quota_code, Shapes::ShapeRef.new(shape: String, required: true, location_name: "quotaCode"))
     ServiceQuotaExceededException.add_member(:resource_id, Shapes::ShapeRef.new(shape: String, required: true, location_name: "resourceId"))
@@ -304,6 +324,8 @@ module Aws::ManagedGrafana
     ServiceQuotaExceededException.add_member(:service_code, Shapes::ShapeRef.new(shape: String, required: true, location_name: "serviceCode"))
     ServiceQuotaExceededException.struct_class = Types::ServiceQuotaExceededException
 
+    SubnetIds.member = Shapes::ShapeRef.new(shape: SubnetId)
+
     TagKeys.member = Shapes::ShapeRef.new(shape: TagKey)
 
     TagMap.key = Shapes::ShapeRef.new(shape: TagKey)
@@ -356,10 +378,18 @@ module Aws::ManagedGrafana
     UpdateWorkspaceAuthenticationResponse.add_member(:authentication, Shapes::ShapeRef.new(shape: AuthenticationDescription, required: true, location_name: "authentication"))
     UpdateWorkspaceAuthenticationResponse.struct_class = Types::UpdateWorkspaceAuthenticationResponse
 
+    UpdateWorkspaceConfigurationRequest.add_member(:configuration, Shapes::ShapeRef.new(shape: OverridableConfigurationJson, required: true, location_name: "configuration", metadata: {"jsonvalue"=>true}))
+    UpdateWorkspaceConfigurationRequest.add_member(:workspace_id, Shapes::ShapeRef.new(shape: WorkspaceId, required: true, location: "uri", location_name: "workspaceId"))
+    UpdateWorkspaceConfigurationRequest.struct_class = Types::UpdateWorkspaceConfigurationRequest
+
+    UpdateWorkspaceConfigurationResponse.struct_class = Types::UpdateWorkspaceConfigurationResponse
+
     UpdateWorkspaceRequest.add_member(:account_access_type, Shapes::ShapeRef.new(shape: AccountAccessType, location_name: "accountAccessType"))
     UpdateWorkspaceRequest.add_member(:organization_role_name, Shapes::ShapeRef.new(shape: OrganizationRoleName, location_name: "organizationRoleName"))
     UpdateWorkspaceRequest.add_member(:permission_type, Shapes::ShapeRef.new(shape: PermissionType, location_name: "permissionType"))
+    UpdateWorkspaceRequest.add_member(:remove_vpc_configuration, Shapes::ShapeRef.new(shape: Boolean, location_name: "removeVpcConfiguration"))
     UpdateWorkspaceRequest.add_member(:stack_set_name, Shapes::ShapeRef.new(shape: StackSetName, location_name: "stackSetName"))
+    UpdateWorkspaceRequest.add_member(:vpc_configuration, Shapes::ShapeRef.new(shape: VpcConfiguration, location_name: "vpcConfiguration"))
     UpdateWorkspaceRequest.add_member(:workspace_data_sources, Shapes::ShapeRef.new(shape: DataSourceTypesList, location_name: "workspaceDataSources"))
     UpdateWorkspaceRequest.add_member(:workspace_description, Shapes::ShapeRef.new(shape: Description, location_name: "workspaceDescription"))
     UpdateWorkspaceRequest.add_member(:workspace_id, Shapes::ShapeRef.new(shape: WorkspaceId, required: true, location: "uri", location_name: "workspaceId"))
@@ -389,6 +419,10 @@ module Aws::ManagedGrafana
 
     ValidationExceptionFieldList.member = Shapes::ShapeRef.new(shape: ValidationExceptionField)
 
+    VpcConfiguration.add_member(:security_group_ids, Shapes::ShapeRef.new(shape: SecurityGroupIds, required: true, location_name: "securityGroupIds"))
+    VpcConfiguration.add_member(:subnet_ids, Shapes::ShapeRef.new(shape: SubnetIds, required: true, location_name: "subnetIds"))
+    VpcConfiguration.struct_class = Types::VpcConfiguration
+
     WorkspaceDescription.add_member(:account_access_type, Shapes::ShapeRef.new(shape: AccountAccessType, location_name: "accountAccessType"))
     WorkspaceDescription.add_member(:authentication, Shapes::ShapeRef.new(shape: AuthenticationSummary, required: true, location_name: "authentication"))
     WorkspaceDescription.add_member(:created, Shapes::ShapeRef.new(shape: Timestamp, required: true, location_name: "created"))
@@ -410,6 +444,7 @@ module Aws::ManagedGrafana
     WorkspaceDescription.add_member(:stack_set_name, Shapes::ShapeRef.new(shape: StackSetName, location_name: "stackSetName"))
     WorkspaceDescription.add_member(:status, Shapes::ShapeRef.new(shape: WorkspaceStatus, required: true, location_name: "status"))
     WorkspaceDescription.add_member(:tags, Shapes::ShapeRef.new(shape: TagMap, location_name: "tags"))
+    WorkspaceDescription.add_member(:vpc_configuration, Shapes::ShapeRef.new(shape: VpcConfiguration, location_name: "vpcConfiguration"))
     WorkspaceDescription.add_member(:workspace_role_arn, Shapes::ShapeRef.new(shape: IamRoleArn, location_name: "workspaceRoleArn"))
     WorkspaceDescription.struct_class = Types::WorkspaceDescription
 
@@ -542,6 +577,18 @@ module Aws::ManagedGrafana
         o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
       end)
 
+      api.add_operation(:describe_workspace_configuration, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "DescribeWorkspaceConfiguration"
+        o.http_method = "GET"
+        o.http_request_uri = "/workspaces/{workspaceId}/configuration"
+        o.input = Shapes::ShapeRef.new(shape: DescribeWorkspaceConfigurationRequest)
+        o.output = Shapes::ShapeRef.new(shape: DescribeWorkspaceConfigurationResponse)
+        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
+        o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
+        o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
+      end)
+
       api.add_operation(:disassociate_license, Seahorse::Model::Operation.new.tap do |o|
         o.name = "DisassociateLicense"
         o.http_method = "DELETE"
@@ -670,6 +717,20 @@ module Aws::ManagedGrafana
         o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
         o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
       end)
+
+      api.add_operation(:update_workspace_configuration, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "UpdateWorkspaceConfiguration"
+        o.http_method = "PUT"
+        o.http_request_uri = "/workspaces/{workspaceId}/configuration"
+        o.input = Shapes::ShapeRef.new(shape: UpdateWorkspaceConfigurationRequest)
+        o.output = Shapes::ShapeRef.new(shape: UpdateWorkspaceConfigurationResponse)
+        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
+        o.errors << Shapes::ShapeRef.new(shape: ConflictException)
+        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
+        o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
+        o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
+      end)
     end
 
   end

data/lib/aws-sdk-managedgrafana/endpoints.rb

@@ -109,6 +109,20 @@ module Aws::ManagedGrafana
       end
     end
 
+    class DescribeWorkspaceConfiguration
+      def self.build(context)
+        unless context.config.regional_endpoint
+          endpoint = context.config.endpoint.to_s
+        end
+        Aws::ManagedGrafana::EndpointParameters.new(
+          region: context.config.region,
+          use_dual_stack: context.config.use_dualstack_endpoint,
+          use_fips: context.config.use_fips_endpoint,
+          endpoint: endpoint,
+        )
+      end
+    end
+
     class DisassociateLicense
       def self.build(context)
         unless context.config.regional_endpoint
@@ -235,5 +249,19 @@ module Aws::ManagedGrafana
       end
     end
 
+    class UpdateWorkspaceConfiguration
+      def self.build(context)
+        unless context.config.regional_endpoint
+          endpoint = context.config.endpoint.to_s
+        end
+        Aws::ManagedGrafana::EndpointParameters.new(
+          region: context.config.region,
+          use_dual_stack: context.config.use_dualstack_endpoint,
+          use_fips: context.config.use_fips_endpoint,
+          endpoint: endpoint,
+        )
+      end
+    end
+
   end
 end

data/lib/aws-sdk-managedgrafana/plugins/endpoints.rb

@@ -70,6 +70,8 @@ module Aws::ManagedGrafana
             Aws::ManagedGrafana::Endpoints::DescribeWorkspace.build(context)
           when :describe_workspace_authentication
             Aws::ManagedGrafana::Endpoints::DescribeWorkspaceAuthentication.build(context)
+          when :describe_workspace_configuration
+            Aws::ManagedGrafana::Endpoints::DescribeWorkspaceConfiguration.build(context)
           when :disassociate_license
             Aws::ManagedGrafana::Endpoints::DisassociateLicense.build(context)
           when :list_permissions
@@ -88,6 +90,8 @@ module Aws::ManagedGrafana
             Aws::ManagedGrafana::Endpoints::UpdateWorkspace.build(context)
           when :update_workspace_authentication
             Aws::ManagedGrafana::Endpoints::UpdateWorkspaceAuthentication.build(context)
+          when :update_workspace_configuration
+            Aws::ManagedGrafana::Endpoints::UpdateWorkspaceConfiguration.build(context)
           end
         end
       end

data/lib/aws-sdk-managedgrafana/types.rb

@@ -124,13 +124,13 @@ module Aws::ManagedGrafana
     #
     # @!attribute [rw] aws_sso
     #   A structure containing information about how this workspace works
-    #   with Amazon Web Services SSO.
+    #   with IAM Identity Center.
     #   @return [Types::AwsSsoAuthentication]
     #
     # @!attribute [rw] providers
-    #   Specifies whether this workspace uses Amazon Web Services SSO, SAML,
-    #   or both methods to authenticate users to use the Grafana console in
-    #   the Amazon Managed Grafana workspace.
+    #   Specifies whether this workspace uses IAM Identity Center, SAML, or
+    #   both methods to authenticate users to use the Grafana console in the
+    #   Amazon Managed Grafana workspace.
     #   @return [Array<String>]
     #
     # @!attribute [rw] saml
@@ -149,13 +149,13 @@ module Aws::ManagedGrafana
       include Aws::Structure
     end
 
-    # A structure that describes whether the workspace uses SAML, Amazon Web
-    # Services SSO, or both methods for user authentication, and whether
+    # A structure that describes whether the workspace uses SAML, IAM
+    # Identity Center, or both methods for user authentication, and whether
     # that authentication is fully configured.
     #
     # @!attribute [rw] providers
-    #   Specifies whether the workspace uses SAML, Amazon Web Services SSO,
-    #   or both methods for user authentication.
+    #   Specifies whether the workspace uses SAML, IAM Identity Center, or
+    #   both methods for user authentication.
     #   @return [Array<String>]
     #
     # @!attribute [rw] saml_configuration_status
@@ -173,10 +173,10 @@ module Aws::ManagedGrafana
     end
 
     # A structure containing information about how this workspace works with
-    # Amazon Web Services SSO.
+    # IAM Identity Center.
     #
     # @!attribute [rw] sso_client_id
-    #   The ID of the Amazon Web Services SSO-managed application that is
+    #   The ID of the IAM Identity Center-managed application that is
     #   created by Amazon Managed Grafana.
     #   @return [String]
     #
@@ -224,14 +224,14 @@ module Aws::ManagedGrafana
     #       }
     #
     # @!attribute [rw] key_name
-    #   Specifies the name of the key to create. Key names must be unique to
-    #   the workspace.
+    #   Specifies the name of the key. Keynames must be unique to the
+    #   workspace.
     #   @return [String]
     #
     # @!attribute [rw] key_role
     #   Specifies the permission level of the key.
     #
-    #   Valid Values: `VIEWER` \| `EDITOR` \| `ADMIN`
+    #   Valid values: `VIEWER`\|`EDITOR`\|`ADMIN`
     #   @return [String]
     #
     # @!attribute [rw] seconds_to_live
@@ -240,7 +240,7 @@ module Aws::ManagedGrafana
     #   @return [Integer]
     #
     # @!attribute [rw] workspace_id
-    #   The ID of the workspace in which to create an API key.
+    #   The ID of the workspace to create an API key.
     #   @return [String]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/grafana-2020-08-18/CreateWorkspaceApiKeyRequest AWS API Documentation
@@ -255,8 +255,8 @@ module Aws::ManagedGrafana
     end
 
     # @!attribute [rw] key
-    #   The key token that was created. Use this value as a bearer token to
-    #   authenticate HTTP requests to the workspace.
+    #   The key token. Use this value as a bearer token to authenticate HTTP
+    #   requests to the workspace.
     #   @return [String]
     #
     # @!attribute [rw] key_name
@@ -284,13 +284,18 @@ module Aws::ManagedGrafana
     #         account_access_type: "CURRENT_ACCOUNT", # required, accepts CURRENT_ACCOUNT, ORGANIZATION
     #         authentication_providers: ["AWS_SSO"], # required, accepts AWS_SSO, SAML
     #         client_token: "ClientToken",
+    #         configuration: "OverridableConfigurationJson",
     #         organization_role_name: "OrganizationRoleName",
     #         permission_type: "CUSTOMER_MANAGED", # required, accepts CUSTOMER_MANAGED, SERVICE_MANAGED
     #         stack_set_name: "StackSetName",
     #         tags: {
     #           "TagKey" => "TagValue",
     #         },
-    #         workspace_data_sources: ["AMAZON_OPENSEARCH_SERVICE"], # accepts AMAZON_OPENSEARCH_SERVICE, CLOUDWATCH, PROMETHEUS, XRAY, TIMESTREAM, SITEWISE, ATHENA, REDSHIFT
+    #         vpc_configuration: {
+    #           security_group_ids: ["SecurityGroupId"], # required
+    #           subnet_ids: ["SubnetId"], # required
+    #         },
+    #         workspace_data_sources: ["AMAZON_OPENSEARCH_SERVICE"], # accepts AMAZON_OPENSEARCH_SERVICE, CLOUDWATCH, PROMETHEUS, XRAY, TIMESTREAM, SITEWISE, ATHENA, REDSHIFT, TWINMAKER
     #         workspace_description: "Description",
     #         workspace_name: "WorkspaceName",
     #         workspace_notification_destinations: ["SNS"], # accepts SNS
@@ -308,10 +313,10 @@ module Aws::ManagedGrafana
     #   @return [String]
     #
     # @!attribute [rw] authentication_providers
-    #   Specifies whether this workspace uses SAML 2.0, Amazon Web Services
-    #   Single Sign On, or both to authenticate users for using the Grafana
-    #   console within a workspace. For more information, see [User
-    #   authentication in Amazon Managed Grafana][1].
+    #   Specifies whether this workspace uses SAML 2.0, IAM Identity Center
+    #   (successor to Single Sign-On), or both to authenticate users for
+    #   using the Grafana console within a workspace. For more information,
+    #   see [User authentication in Amazon Managed Grafana][1].
     #
     #
     #
@@ -326,6 +331,16 @@ module Aws::ManagedGrafana
     #   not need to pass this option.
     #   @return [String]
     #
+    # @!attribute [rw] configuration
+    #   The configuration string for the workspace that you create. For more
+    #   information about the format and configuration options available,
+    #   see [Working in your Grafana workspace][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/grafana/latest/userguide/AMG-configure-workspace.html
+    #   @return [String]
+    #
     # @!attribute [rw] organization_role_name
     #   The name of an IAM role that already exists to use with
     #   Organizations to access Amazon Web Services data sources and
@@ -336,9 +351,12 @@ module Aws::ManagedGrafana
     #   If you specify `SERVICE_MANAGED` on AWS Grafana console, Amazon
     #   Managed Grafana automatically creates the IAM roles and provisions
     #   the permissions that the workspace needs to use Amazon Web Services
-    #   data sources and notification channels. In CLI mode, the
+    #   data sources and notification channels. In the CLI mode, the
     #   permissionType `SERVICE_MANAGED` will not create the IAM role for
-    #   you.
+    #   you. The ability for the Amazon Managed Grafana to create the IAM
+    #   role on behalf of the user is supported only in the Amazon Managed
+    #   Grafana AWS console. Use only the `CUSTOMER_MANAGED` permission type
+    #   when creating a workspace in the CLI.
     #
     #   If you specify `CUSTOMER_MANAGED`, you will manage those roles and
     #   permissions yourself. If you are creating this workspace in a member
@@ -365,6 +383,11 @@ module Aws::ManagedGrafana
     #   The list of tags associated with the workspace.
     #   @return [Hash<String,String>]
     #
+    # @!attribute [rw] vpc_configuration
+    #   The configuration settings for an Amazon VPC that contains data
+    #   sources for your Grafana workspace to connect to.
+    #   @return [Types::VpcConfiguration]
+    #
     # @!attribute [rw] workspace_data_sources
     #   Specify the Amazon Web Services data sources that you want to be
     #   queried in this workspace. Specifying these data sources here
@@ -415,10 +438,12 @@ module Aws::ManagedGrafana
       :account_access_type,
       :authentication_providers,
       :client_token,
+      :configuration,
       :organization_role_name,
       :permission_type,
       :stack_set_name,
       :tags,
+      :vpc_configuration,
       :workspace_data_sources,
       :workspace_description,
       :workspace_name,
@@ -467,7 +492,7 @@ module Aws::ManagedGrafana
     end
 
     # @!attribute [rw] key_name
-    #   The name of the API key that was deleted.
+    #   The name of the key that was deleted.
     #   @return [String]
     #
     # @!attribute [rw] workspace_id
@@ -547,6 +572,43 @@ module Aws::ManagedGrafana
       include Aws::Structure
     end
 
+    # @note When making an API call, you may pass DescribeWorkspaceConfigurationRequest
+    #   data as a hash:
+    #
+    #       {
+    #         workspace_id: "WorkspaceId", # required
+    #       }
+    #
+    # @!attribute [rw] workspace_id
+    #   The ID of the workspace to get configuration information for.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/grafana-2020-08-18/DescribeWorkspaceConfigurationRequest AWS API Documentation
+    #
+    class DescribeWorkspaceConfigurationRequest < Struct.new(
+      :workspace_id)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] configuration
+    #   The configuration string for the workspace that you requested. For
+    #   more information about the format and configuration options
+    #   available, see [Working in your Grafana workspace][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/grafana/latest/userguide/AMG-configure-workspace.html
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/grafana-2020-08-18/DescribeWorkspaceConfigurationResponse AWS API Documentation
+    #
+    class DescribeWorkspaceConfigurationResponse < Struct.new(
+      :configuration)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @note When making an API call, you may pass DescribeWorkspaceRequest
     #   data as a hash:
     #
@@ -620,18 +682,18 @@ module Aws::ManagedGrafana
     # integrate the identity provider with this workspace. You can specify
     # the metadata either by providing a URL to its location in the `url`
     # parameter, or by specifying the full metadata in XML format in the
-    # `xml` parameter.
+    # `xml` parameter. Specifying both will cause an error.
     #
     # @note IdpMetadata is a union - when making an API calls you must set exactly one of the members.
     #
     # @note IdpMetadata is a union - when returned from an API call exactly one value will be set and the returned type will be a subclass of IdpMetadata corresponding to the set member.
     #
     # @!attribute [rw] url
-    #   The URL of the location containing the metadata.
+    #   The URL of the location containing the IdP metadata.
     #   @return [String]
     #
     # @!attribute [rw] xml
-    #   The actual full metadata file, in XML format.
+    #   The full IdP metadata, in XML format.
     #   @return [String]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/grafana-2020-08-18/IdpMetadata AWS API Documentation
@@ -700,9 +762,8 @@ module Aws::ManagedGrafana
     #
     # @!attribute [rw] user_type
     #   (Optional) If you specify `SSO_USER`, then only the permissions of
-    #   Amazon Web Services SSO users are returned. If you specify
-    #   `SSO_GROUP`, only the permissions of Amazon Web Services SSO groups
-    #   are returned.
+    #   IAM Identity Center users are returned. If you specify `SSO_GROUP`,
+    #   only the permissions of IAM Identity Center groups are returned.
     #   @return [String]
     #
     # @!attribute [rw] workspace_id
@@ -817,11 +878,11 @@ module Aws::ManagedGrafana
     end
 
     # A structure containing the identity of one user or group and the
-    # `Admin` or `Editor` role that they have.
+    # `Admin`, `Editor`, or `Viewer` role that they have.
     #
     # @!attribute [rw] role
-    #   Specifies whether the user or group has the `Admin` or `Editor`
-    #   role.
+    #   Specifies whether the user or group has the `Admin`, `Editor`, or
+    #   `Viewer` role.
     #   @return [String]
     #
     # @!attribute [rw] user
@@ -863,7 +924,8 @@ module Aws::ManagedGrafana
 
     # This structure defines which groups defined in the SAML assertion
     # attribute are to be mapped to the Grafana `Admin` and `Editor` roles
-    # in the workspace.
+    # in the workspace. SAML authenticated users not part of `Admin` or
+    # `Editor` role groups have `Viewer` permission over the workspace.
     #
     # @note When making an API call, you may pass RoleValues
     #   data as a hash:
@@ -1258,10 +1320,10 @@ module Aws::ManagedGrafana
     #       }
     #
     # @!attribute [rw] authentication_providers
-    #   Specifies whether this workspace uses SAML 2.0, Amazon Web Services
-    #   Single Sign On, or both to authenticate users for using the Grafana
-    #   console within a workspace. For more information, see [User
-    #   authentication in Amazon Managed Grafana][1].
+    #   Specifies whether this workspace uses SAML 2.0, IAM Identity Center
+    #   (successor to Single Sign-On), or both to authenticate users for
+    #   using the Grafana console within a workspace. For more information,
+    #   see [User authentication in Amazon Managed Grafana][1].
     #
     #
     #
@@ -1302,6 +1364,41 @@ module Aws::ManagedGrafana
       include Aws::Structure
     end
 
+    # @note When making an API call, you may pass UpdateWorkspaceConfigurationRequest
+    #   data as a hash:
+    #
+    #       {
+    #         configuration: "OverridableConfigurationJson", # required
+    #         workspace_id: "WorkspaceId", # required
+    #       }
+    #
+    # @!attribute [rw] configuration
+    #   The new configuration string for the workspace. For more information
+    #   about the format and configuration options available, see [Working
+    #   in your Grafana workspace][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/grafana/latest/userguide/AMG-configure-workspace.html
+    #   @return [String]
+    #
+    # @!attribute [rw] workspace_id
+    #   The ID of the workspace to update.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/grafana-2020-08-18/UpdateWorkspaceConfigurationRequest AWS API Documentation
+    #
+    class UpdateWorkspaceConfigurationRequest < Struct.new(
+      :configuration,
+      :workspace_id)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @see http://docs.aws.amazon.com/goto/WebAPI/grafana-2020-08-18/UpdateWorkspaceConfigurationResponse AWS API Documentation
+    #
+    class UpdateWorkspaceConfigurationResponse < Aws::EmptyStructure; end
+
     # @note When making an API call, you may pass UpdateWorkspaceRequest
     #   data as a hash:
     #
@@ -1309,8 +1406,13 @@ module Aws::ManagedGrafana
     #         account_access_type: "CURRENT_ACCOUNT", # accepts CURRENT_ACCOUNT, ORGANIZATION
     #         organization_role_name: "OrganizationRoleName",
     #         permission_type: "CUSTOMER_MANAGED", # accepts CUSTOMER_MANAGED, SERVICE_MANAGED
+    #         remove_vpc_configuration: false,
     #         stack_set_name: "StackSetName",
-    #         workspace_data_sources: ["AMAZON_OPENSEARCH_SERVICE"], # accepts AMAZON_OPENSEARCH_SERVICE, CLOUDWATCH, PROMETHEUS, XRAY, TIMESTREAM, SITEWISE, ATHENA, REDSHIFT
+    #         vpc_configuration: {
+    #           security_group_ids: ["SecurityGroupId"], # required
+    #           subnet_ids: ["SubnetId"], # required
+    #         },
+    #         workspace_data_sources: ["AMAZON_OPENSEARCH_SERVICE"], # accepts AMAZON_OPENSEARCH_SERVICE, CLOUDWATCH, PROMETHEUS, XRAY, TIMESTREAM, SITEWISE, ATHENA, REDSHIFT, TWINMAKER
     #         workspace_description: "Description",
     #         workspace_id: "WorkspaceId", # required
     #         workspace_name: "WorkspaceName",
@@ -1355,11 +1457,23 @@ module Aws::ManagedGrafana
     #   [1]: https://docs.aws.amazon.com/grafana/latest/userguide/AMG-manage-permissions.html
     #   @return [String]
     #
+    # @!attribute [rw] remove_vpc_configuration
+    #   Whether to remove the VPC configuration from the workspace.
+    #
+    #   Setting this to `true` and providing a `vpcConfiguration` to set
+    #   will return an error.
+    #   @return [Boolean]
+    #
     # @!attribute [rw] stack_set_name
     #   The name of the CloudFormation stack set to use to generate IAM
     #   roles to be used for this workspace.
     #   @return [String]
     #
+    # @!attribute [rw] vpc_configuration
+    #   The configuration settings for an Amazon VPC that contains data
+    #   sources for your Grafana workspace to connect to.
+    #   @return [Types::VpcConfiguration]
+    #
     # @!attribute [rw] workspace_data_sources
     #   Specify the Amazon Web Services data sources that you want to be
     #   queried in this workspace. Specifying these data sources here
@@ -1415,7 +1529,9 @@ module Aws::ManagedGrafana
       :account_access_type,
       :organization_role_name,
       :permission_type,
+      :remove_vpc_configuration,
       :stack_set_name,
+      :vpc_configuration,
       :workspace_data_sources,
       :workspace_description,
       :workspace_id,
@@ -1513,6 +1629,36 @@ module Aws::ManagedGrafana
       include Aws::Structure
     end
 
+    # The configuration settings for an Amazon VPC that contains data
+    # sources for your Grafana workspace to connect to.
+    #
+    # @note When making an API call, you may pass VpcConfiguration
+    #   data as a hash:
+    #
+    #       {
+    #         security_group_ids: ["SecurityGroupId"], # required
+    #         subnet_ids: ["SubnetId"], # required
+    #       }
+    #
+    # @!attribute [rw] security_group_ids
+    #   The list of Amazon EC2 security group IDs attached to the Amazon VPC
+    #   for your Grafana workspace to connect.
+    #   @return [Array<String>]
+    #
+    # @!attribute [rw] subnet_ids
+    #   The list of Amazon EC2 subnet IDs created in the Amazon VPC for your
+    #   Grafana workspace to connect.
+    #   @return [Array<String>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/grafana-2020-08-18/VpcConfiguration AWS API Documentation
+    #
+    class VpcConfiguration < Struct.new(
+      :security_group_ids,
+      :subnet_ids)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # A structure containing information about an Amazon Managed Grafana
     # workspace in your account.
     #
@@ -1526,8 +1672,8 @@ module Aws::ManagedGrafana
     #   @return [String]
     #
     # @!attribute [rw] authentication
-    #   A structure that describes whether the workspace uses SAML, Amazon
-    #   Web Services SSO, or both methods for user authentication.
+    #   A structure that describes whether the workspace uses SAML, IAM
+    #   Identity Center, or both methods for user authentication.
     #   @return [Types::AuthenticationSummary]
     #
     # @!attribute [rw] created
@@ -1637,6 +1783,11 @@ module Aws::ManagedGrafana
     #   The list of tags associated with the workspace.
     #   @return [Hash<String,String>]
     #
+    # @!attribute [rw] vpc_configuration
+    #   The configuration for connecting to data sources in a private VPC
+    #   (Amazon Virtual Private Cloud).
+    #   @return [Types::VpcConfiguration]
+    #
     # @!attribute [rw] workspace_role_arn
     #   The IAM role that grants permissions to the Amazon Web Services
     #   resources that the workspace will view data from. This role must
@@ -1667,6 +1818,7 @@ module Aws::ManagedGrafana
       :stack_set_name,
       :status,
       :tags,
+      :vpc_configuration,
       :workspace_role_arn)
       SENSITIVE = [:description, :name, :organization_role_name, :organizational_units, :workspace_role_arn]
       include Aws::Structure

data/lib/aws-sdk-managedgrafana.rb

@@ -52,6 +52,6 @@ require_relative 'aws-sdk-managedgrafana/customizations'
 # @!group service
 module Aws::ManagedGrafana
 
-  GEM_VERSION = '1.9.0'
+  GEM_VERSION = '1.10.0'
 
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-managedgrafana
 version: !ruby/object:Gem::Version
-  version: 1.9.0
+  version: 1.10.0
 platform: ruby
 authors:
 - Amazon Web Services
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-10-25 00:00:00.000000000 Z
+date: 2022-11-23 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-core