aws-sdk-networkfirewall 1.93.0 → 1.95.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ef2a6aefbcc9b2e553a741c25470ca960192913b427a4d8778e18e8a4a4ea029
-  data.tar.gz: fa225d509d9d0ef9e81810a56e047da7ce98129723a9ce21d53458e2bafc4e85
+  metadata.gz: e49743c64ce3f821f44464693c085ae86d078983edc7a7f6fff41380bca43f8a
+  data.tar.gz: 5a74a381f489461473bb6e7e2edb5049592ef9c1d632da1fe15c69ff40c10794
 SHA512:
-  metadata.gz: 9197c432406c641188dcbc6dc3fd9d101c6ba57f23b2fe249f455267c1f5c770282f6f4b2a33c45ae40f63b73320a82e5b76bac62ecd6a894d68218e348e630f
-  data.tar.gz: 00c8ebe6fb7e7e92d92d1ab5a6296e2fb41dfe9197b4a1babe59b321bf1bb14b4d12d3732f33904ac1adf9a4c8d4ba2a230e2088125af4f14baabe45a47e7be0
+  metadata.gz: bb18a57f675717b97dffb189a47648616e174416041cf5349ef269972a82dcf57a93eeacf435b8b0a65cd977bc1c3c2d77eb0867e0c76d178e5b5ba86303ad95
+  data.tar.gz: df180bc6465716ce039593c897f80e50b2b454ff37c021870475ab0c4942389e14717d589574d60aacd735a92d7786ebd3d8b1a73ed3a185b5668936f9590b4c

data/CHANGELOG.md

@@ -1,6 +1,16 @@
 Unreleased Changes
 ------------------
 
+1.95.0 (2026-07-31)
+------------------
+
+* Feature - Doc Updates for Container Attributes
+
+1.94.0 (2026-07-30)
+------------------
+
+* Feature - Adds UPDATING field to Container Association Status
+
 1.93.0 (2026-07-09)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.93.0
+1.95.0

data/lib/aws-sdk-networkfirewall/client.rb

@@ -846,17 +846,10 @@ module Aws::NetworkFirewall
       req.send_request(options)
     end
 
-    # Creates a container association for Network Firewall. A container
-    # association links container clusters (ECS or EKS) to Network Firewall,
-    # enabling dynamic IP resolution for firewall rules based on container
-    # attributes.
-    #
-    # To manage a container association's tags, use the standard Amazon Web
-    # Services resource tagging operations, ListTagsForResource,
-    # TagResource, and UntagResource.
-    #
-    # To retrieve information about container associations, use
-    # ListContainerAssociations and DescribeContainerAssociation.
+    # Creates a Network Firewall container association. The association
+    # monitors container lifecycle events in your Amazon ECS or Amazon EKS
+    # clusters and resolves running container addresses for use in firewall
+    # rules.
     #
     # @option params [required, String] :container_association_name
     #   The descriptive name of the container association. You can't change
@@ -866,13 +859,17 @@ module Aws::NetworkFirewall
     #   A description of the container association.
     #
     # @option params [required, String] :type
-    #   The type of container orchestration platform for the clusters in this
-    #   association. Valid values are `ECS` and `EKS`. You can't change the
-    #   type after creation.
+    #   The type of containers to monitor. You can't change the container
+    #   type after creation. Valid values:
+    #
+    #   * `ECS` - Amazon Elastic Container Service
+    #
+    #   * `EKS` - Amazon Elastic Kubernetes Service
     #
     # @option params [required, Array<Types::ContainerMonitoringConfiguration>] :container_monitoring_configurations
-    #   The list of container monitoring configurations that define which
-    #   clusters and container attributes to monitor.
+    #   The monitoring configurations for the container association. Each
+    #   configuration specifies an Amazon ECS or Amazon EKS cluster to monitor
+    #   and optional attribute filters to narrow which containers are tracked.
     #
     # @option params [Array<Types::Tag>] :tags
     #   The key:value pairs to associate with the resource.
@@ -924,7 +921,7 @@ module Aws::NetworkFirewall
     #   resp.container_monitoring_configurations[0].attribute_filters #=> Array
     #   resp.container_monitoring_configurations[0].attribute_filters[0].key #=> String
     #   resp.container_monitoring_configurations[0].attribute_filters[0].value #=> String
-    #   resp.status #=> String, one of "ACTIVE", "CREATING", "DELETING"
+    #   resp.status #=> String, one of "ACTIVE", "CREATING", "DELETING", "UPDATING"
     #   resp.tags #=> Array
     #   resp.tags[0].key #=> String
     #   resp.tags[0].value #=> String
@@ -2328,18 +2325,20 @@ module Aws::NetworkFirewall
       req.send_request(options)
     end
 
-    # Deletes the specified container association. When you delete a
-    # container association, Network Firewall stops monitoring the
-    # associated container clusters and removes the resolved IP addresses
-    # from firewall rules.
+    # Deletes a container association. The resource transitions to a
+    # `DELETING` state. Deletion is asynchronous - Network Firewall returns
+    # immediately while cleanup proceeds in the background. You can't
+    # delete a container association while a rule group references it.
     #
     # @option params [String] :container_association_name
-    #   The descriptive name of the container association. You must specify
-    #   the ARN or the name, and you can specify both.
+    #   The descriptive name of the container association.
+    #
+    #   You must specify the ARN or the name, and you can specify both.
     #
     # @option params [String] :container_association_arn
-    #   The Amazon Resource Name (ARN) of the container association. You must
-    #   specify the ARN or the name, and you can specify both.
+    #   The Amazon Resource Name (ARN) of the container association.
+    #
+    #   You must specify the ARN or the name, and you can specify both.
     #
     # @return [Types::DeleteContainerAssociationResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
@@ -2358,7 +2357,7 @@ module Aws::NetworkFirewall
     #
     #   resp.container_association_name #=> String
     #   resp.container_association_arn #=> String
-    #   resp.status #=> String, one of "ACTIVE", "CREATING", "DELETING"
+    #   resp.status #=> String, one of "ACTIVE", "CREATING", "DELETING", "UPDATING"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/network-firewall-2020-11-12/DeleteContainerAssociation AWS API Documentation
     #
@@ -2959,15 +2958,17 @@ module Aws::NetworkFirewall
       req.send_request(options)
     end
 
-    # Returns the properties of a container association.
+    # Retrieves the configuration and status of a container association.
     #
     # @option params [String] :container_association_name
-    #   The descriptive name of the container association. You must specify
-    #   the ARN or the name, and you can specify both.
+    #   The descriptive name of the container association.
+    #
+    #   You must specify the ARN or the name, and you can specify both.
     #
     # @option params [String] :container_association_arn
-    #   The Amazon Resource Name (ARN) of the container association. You must
-    #   specify the ARN or the name, and you can specify both.
+    #   The Amazon Resource Name (ARN) of the container association.
+    #
+    #   You must specify the ARN or the name, and you can specify both.
     #
     # @return [Types::DescribeContainerAssociationResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
@@ -3000,7 +3001,7 @@ module Aws::NetworkFirewall
     #   resp.container_monitoring_configurations[0].attribute_filters #=> Array
     #   resp.container_monitoring_configurations[0].attribute_filters[0].key #=> String
     #   resp.container_monitoring_configurations[0].attribute_filters[0].value #=> String
-    #   resp.status #=> String, one of "ACTIVE", "CREATING", "DELETING"
+    #   resp.status #=> String, one of "ACTIVE", "CREATING", "DELETING", "UPDATING"
     #   resp.resolved_cidr_count #=> Integer
     #   resp.last_updated_time #=> Time
     #   resp.tags #=> Array
@@ -4376,8 +4377,9 @@ module Aws::NetworkFirewall
       req.send_request(options)
     end
 
-    # Retrieves the metadata for the container associations that you have
-    # defined. You can optionally page through results.
+    # Lists the container associations in your account and Region. Use the
+    # `NextToken` parameter in subsequent requests to retrieve additional
+    # results.
     #
     # @option params [Integer] :max_results
     #   The maximum number of objects that you want Network Firewall to return
@@ -5594,43 +5596,54 @@ module Aws::NetworkFirewall
       req.send_request(options)
     end
 
-    # Updates the properties of an existing container association. Use this
-    # to modify the container monitoring configurations or description.
+    # Updates the monitoring configurations and description of a container
+    # association. You can't change the container type after creation.
+    # Provide an update token to enable optimistic concurrency control.
     #
     # @option params [String] :container_association_name
-    #   The descriptive name of the container association. You must specify
-    #   the ARN or the name, and you can specify both.
+    #   The descriptive name of the container association.
+    #
+    #   You must specify the ARN or the name, and you can specify both.
     #
     # @option params [String] :container_association_arn
-    #   The Amazon Resource Name (ARN) of the container association. You must
-    #   specify the ARN or the name, and you can specify both.
+    #   The Amazon Resource Name (ARN) of the container association.
+    #
+    #   You must specify the ARN or the name, and you can specify both.
     #
     # @option params [String] :description
-    #   A description of the container association.
+    #   A description of the container association. When omitted, the existing
+    #   description remains unchanged. To clear the description, pass an empty
+    #   string.
     #
     # @option params [required, String] :type
-    #   The type of container orchestration platform. This must match the type
-    #   specified when the container association was created.
+    #   The container type. This value must match the existing type and can't
+    #   be changed. Valid values:
+    #
+    #   * `ECS` - Amazon Elastic Container Service
+    #
+    #   * `EKS` - Amazon Elastic Kubernetes Service
     #
     # @option params [required, Array<Types::ContainerMonitoringConfiguration>] :container_monitoring_configurations
-    #   The updated list of container monitoring configurations that define
-    #   which clusters and container attributes to monitor.
+    #   The updated monitoring configurations for the container association.
+    #   Each configuration specifies an Amazon ECS or Amazon EKS cluster to
+    #   monitor and optional attribute filters.
     #
     # @option params [Array<Types::Tag>] :tags
-    #   The key:value pairs associated with the resource.
+    #   The key:value pairs to associate with the resource.
     #
     # @option params [required, String] :update_token
     #   A token used for optimistic locking. Network Firewall returns a token
     #   to your requests that access the container association. The token
     #   marks the state of the container association resource at the time of
-    #   the request. To make an update to the container association, provide
-    #   the token in your request. Network Firewall uses the token to ensure
-    #   that the container association hasn't changed since you last
-    #   retrieved it. If it has changed, the operation fails with an
-    #   `InvalidTokenException`. If this happens, retrieve the container
-    #   association again to get a current copy of it with a new token.
-    #   Reapply your changes as needed, then try the operation again using the
-    #   new token.
+    #   the request.
+    #
+    #   To make changes to the container association, you provide the token in
+    #   your request. Network Firewall uses the token to ensure that the
+    #   container association hasn't changed since you last retrieved it. If
+    #   it has changed, the operation fails with an `InvalidTokenException`.
+    #   If this happens, retrieve the container association again to get a
+    #   current copy of it with a current token. Reapply your changes as
+    #   needed, then try the operation again using the new token.
     #
     # @return [Types::UpdateContainerAssociationResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
@@ -5681,7 +5694,7 @@ module Aws::NetworkFirewall
     #   resp.container_monitoring_configurations[0].attribute_filters #=> Array
     #   resp.container_monitoring_configurations[0].attribute_filters[0].key #=> String
     #   resp.container_monitoring_configurations[0].attribute_filters[0].value #=> String
-    #   resp.status #=> String, one of "ACTIVE", "CREATING", "DELETING"
+    #   resp.status #=> String, one of "ACTIVE", "CREATING", "DELETING", "UPDATING"
     #   resp.tags #=> Array
     #   resp.tags[0].key #=> String
     #   resp.tags[0].value #=> String
@@ -7262,7 +7275,7 @@ module Aws::NetworkFirewall
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-networkfirewall'
-      context[:gem_version] = '1.93.0'
+      context[:gem_version] = '1.95.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-networkfirewall/types.rb

@@ -851,10 +851,9 @@ module Aws::NetworkFirewall
       include Aws::Structure
     end
 
-    # High-level information about a container association, returned by the
-    # ListContainerAssociations operation. You can use this information to
-    # retrieve the full details of a container association using
-    # DescribeContainerAssociation.
+    # The metadata for a container association returned by
+    # `ListContainerAssociations`. Contains the ARN and name that you use to
+    # identify the container association in other operations.
     #
     # @!attribute [rw] arn
     #   The Amazon Resource Name (ARN) of the container association.
@@ -873,15 +872,15 @@ module Aws::NetworkFirewall
       include Aws::Structure
     end
 
-    # A key-value pair that defines a container attribute filter for a
-    # container monitoring configuration.
+    # A key-value filter pair used in container association monitoring
+    # configurations to narrow which containers are tracked.
     #
     # @!attribute [rw] key
-    #   The key of the container attribute to filter on.
+    #   The attribute key to filter on.
     #   @return [String]
     #
     # @!attribute [rw] value
-    #   The value of the container attribute to filter on.
+    #   The attribute value to match.
     #   @return [String]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/network-firewall-2020-11-12/ContainerAttribute AWS API Documentation
@@ -893,18 +892,21 @@ module Aws::NetworkFirewall
       include Aws::Structure
     end
 
-    # Defines a container cluster to monitor, along with optional attribute
-    # filters that narrow the scope of monitored containers within the
-    # cluster.
+    # Contains the monitoring configuration for a single cluster in a
+    # container association. Specifies the cluster ARN and optional
+    # attribute filters to narrow which containers are tracked.
     #
     # @!attribute [rw] cluster_arn
-    #   The Amazon Resource Name (ARN) of the container cluster to monitor.
+    #   The ARN of the Amazon ECS or Amazon EKS cluster to monitor. The
+    #   cluster must be in the same Region and account as the container
+    #   association.
     #   @return [String]
     #
     # @!attribute [rw] attribute_filters
-    #   A list of key-value pairs that filter which containers within the
-    #   cluster are monitored. Only containers that match the specified
-    #   attributes are included.
+    #   Key-value pairs that filter which containers are tracked. For Amazon
+    #   EKS, you can filter by namespace and Kubernetes labels. For Amazon
+    #   ECS, you can filter by container instance attributes (EC2 launch
+    #   type only).
     #   @return [Array<Types::ContainerAttribute>]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/network-firewall-2020-11-12/ContainerMonitoringConfiguration AWS API Documentation
@@ -926,14 +928,19 @@ module Aws::NetworkFirewall
     #   @return [String]
     #
     # @!attribute [rw] type
-    #   The type of container orchestration platform for the clusters in
-    #   this association. Valid values are `ECS` and `EKS`. You can't
-    #   change the type after creation.
+    #   The type of containers to monitor. You can't change the container
+    #   type after creation. Valid values:
+    #
+    #   * `ECS` - Amazon Elastic Container Service
+    #
+    #   * `EKS` - Amazon Elastic Kubernetes Service
     #   @return [String]
     #
     # @!attribute [rw] container_monitoring_configurations
-    #   The list of container monitoring configurations that define which
-    #   clusters and container attributes to monitor.
+    #   The monitoring configurations for the container association. Each
+    #   configuration specifies an Amazon ECS or Amazon EKS cluster to
+    #   monitor and optional attribute filters to narrow which containers
+    #   are tracked.
     #   @return [Array<Types::ContainerMonitoringConfiguration>]
     #
     # @!attribute [rw] tags
@@ -965,32 +972,38 @@ module Aws::NetworkFirewall
     #   @return [String]
     #
     # @!attribute [rw] type
-    #   The type of container orchestration platform. Either `ECS` or `EKS`.
+    #   The container type. Valid values:
+    #
+    #   * `ECS` - Amazon Elastic Container Service
+    #
+    #   * `EKS` - Amazon Elastic Kubernetes Service
     #   @return [String]
     #
     # @!attribute [rw] container_monitoring_configurations
-    #   The container monitoring configurations for this container
-    #   association.
+    #   The monitoring configurations for the container association.
     #   @return [Array<Types::ContainerMonitoringConfiguration>]
     #
     # @!attribute [rw] status
-    #   The current status of the container association.
+    #   The current status of the container association. For a new container
+    #   association, the status is `CREATING`.
     #   @return [String]
     #
     # @!attribute [rw] tags
-    #   The key:value pairs associated with the resource.
+    #   The key:value pairs to associate with the resource.
     #   @return [Array<Types::Tag>]
     #
     # @!attribute [rw] update_token
     #   A token used for optimistic locking. Network Firewall returns a
     #   token to your requests that access the container association. The
     #   token marks the state of the container association resource at the
-    #   time of the request. To make an update to the container association,
-    #   provide the token in your request. Network Firewall uses the token
-    #   to ensure that the container association hasn't changed since you
-    #   last retrieved it. If it has changed, the operation fails with an
+    #   time of the request.
+    #
+    #   To make changes to the container association, you provide the token
+    #   in your request. Network Firewall uses the token to ensure that the
+    #   container association hasn't changed since you last retrieved it.
+    #   If it has changed, the operation fails with an
     #   `InvalidTokenException`. If this happens, retrieve the container
-    #   association again to get a current copy of it with a new token.
+    #   association again to get a current copy of it with a current token.
     #   Reapply your changes as needed, then try the operation again using
     #   the new token.
     #   @return [String]
@@ -1969,13 +1982,15 @@ module Aws::NetworkFirewall
     end
 
     # @!attribute [rw] container_association_name
-    #   The descriptive name of the container association. You must specify
-    #   the ARN or the name, and you can specify both.
+    #   The descriptive name of the container association.
+    #
+    #   You must specify the ARN or the name, and you can specify both.
     #   @return [String]
     #
     # @!attribute [rw] container_association_arn
-    #   The Amazon Resource Name (ARN) of the container association. You
-    #   must specify the ARN or the name, and you can specify both.
+    #   The Amazon Resource Name (ARN) of the container association.
+    #
+    #   You must specify the ARN or the name, and you can specify both.
     #   @return [String]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/network-firewall-2020-11-12/DeleteContainerAssociationRequest AWS API Documentation
@@ -1996,7 +2011,8 @@ module Aws::NetworkFirewall
     #   @return [String]
     #
     # @!attribute [rw] status
-    #   The current status of the container association.
+    #   The current status of the container association. After deletion is
+    #   initiated, the status is `DELETING`.
     #   @return [String]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/network-firewall-2020-11-12/DeleteContainerAssociationResponse AWS API Documentation
@@ -2466,13 +2482,15 @@ module Aws::NetworkFirewall
     end
 
     # @!attribute [rw] container_association_name
-    #   The descriptive name of the container association. You must specify
-    #   the ARN or the name, and you can specify both.
+    #   The descriptive name of the container association.
+    #
+    #   You must specify the ARN or the name, and you can specify both.
     #   @return [String]
     #
     # @!attribute [rw] container_association_arn
-    #   The Amazon Resource Name (ARN) of the container association. You
-    #   must specify the ARN or the name, and you can specify both.
+    #   The Amazon Resource Name (ARN) of the container association.
+    #
+    #   You must specify the ARN or the name, and you can specify both.
     #   @return [String]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/network-firewall-2020-11-12/DescribeContainerAssociationRequest AWS API Documentation
@@ -2497,12 +2515,15 @@ module Aws::NetworkFirewall
     #   @return [String]
     #
     # @!attribute [rw] type
-    #   The type of container orchestration platform. Either `ECS` or `EKS`.
+    #   The container type. Valid values:
+    #
+    #   * `ECS` - Amazon Elastic Container Service
+    #
+    #   * `EKS` - Amazon Elastic Kubernetes Service
     #   @return [String]
     #
     # @!attribute [rw] container_monitoring_configurations
-    #   The container monitoring configurations for this container
-    #   association.
+    #   The monitoring configurations for the container association.
     #   @return [Array<Types::ContainerMonitoringConfiguration>]
     #
     # @!attribute [rw] status
@@ -2510,17 +2531,16 @@ module Aws::NetworkFirewall
     #   @return [String]
     #
     # @!attribute [rw] resolved_cidr_count
-    #   The number of CIDR blocks that have been resolved from the monitored
-    #   containers for this container association.
+    #   The number of CIDR blocks resolved from the monitored containers.
     #   @return [Integer]
     #
     # @!attribute [rw] last_updated_time
-    #   The last time that the container association was updated or resolved
-    #   new container IP addresses.
+    #   The most recent time that Network Firewall updated the container
+    #   association.
     #   @return [Time]
     #
     # @!attribute [rw] tags
-    #   The key:value pairs associated with the resource.
+    #   The key:value pairs to associate with the resource.
     #   @return [Array<Types::Tag>]
     #
     # @!attribute [rw] update_token
@@ -2528,6 +2548,15 @@ module Aws::NetworkFirewall
     #   token to your requests that access the container association. The
     #   token marks the state of the container association resource at the
     #   time of the request.
+    #
+    #   To make changes to the container association, you provide the token
+    #   in your request. Network Firewall uses the token to ensure that the
+    #   container association hasn't changed since you last retrieved it.
+    #   If it has changed, the operation fails with an
+    #   `InvalidTokenException`. If this happens, retrieve the container
+    #   association again to get a current copy of it with a current token.
+    #   Reapply your changes as needed, then try the operation again using
+    #   the new token.
     #   @return [String]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/network-firewall-2020-11-12/DescribeContainerAssociationResponse AWS API Documentation
@@ -4198,6 +4227,14 @@ module Aws::NetworkFirewall
     #
     #   * aws:alert\_established
     #
+    #   * aws:drop\_established\_app\_layer
+    #
+    #   * aws:alert\_established\_app\_layer
+    #
+    #   * aws:drop\_established\_app\_layer\_to\_server
+    #
+    #   * aws:alert\_established\_app\_layer\_to\_server
+    #
     #   For more information, see [Strict evaluation order][1] in the
     #   *Network Firewall Developer Guide*.
     #
@@ -5100,7 +5137,8 @@ module Aws::NetworkFirewall
     end
 
     # @!attribute [rw] container_associations
-    #   The container association metadata objects.
+    #   The container association metadata objects for the account and
+    #   Region.
     #   @return [Array<Types::ContainerAssociationSummary>]
     #
     # @!attribute [rw] next_token
@@ -7027,7 +7065,7 @@ module Aws::NetworkFirewall
     #
     #
     #
-    #   [1]: https://suricata.readthedocs.io/en/suricata-7.0.3/rules/intro.html#rule-options
+    #   [1]: https://suricata.readthedocs.io/en/suricata-7.0.8/rules/intro.html#rule-options
     #   @return [String]
     #
     # @!attribute [rw] settings
@@ -7038,7 +7076,7 @@ module Aws::NetworkFirewall
     #
     #
     #
-    #   [1]: https://suricata.readthedocs.io/en/suricata-7.0.3/rules/intro.html#rule-options
+    #   [1]: https://suricata.readthedocs.io/en/suricata-7.0.8/rules/intro.html#rule-options
     #   @return [Array<String>]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/network-firewall-2020-11-12/RuleOption AWS API Documentation
@@ -7136,7 +7174,7 @@ module Aws::NetworkFirewall
     #
     #
     #
-    #   [1]: https://suricata.readthedocs.io/en/suricata-7.0.3/rules/intro.html
+    #   [1]: https://suricata.readthedocs.io/en/suricata-7.0.8/rules/intro.html
     #   @return [Array<Types::StatefulRule>]
     #
     # @!attribute [rw] stateless_rules_and_custom_actions
@@ -7599,6 +7637,11 @@ module Aws::NetworkFirewall
     # Configuration settings for the handling of the stateful rule groups in
     # a firewall policy.
     #
+    # Updating any setting in `StatefulEngineOptions` may require a restart
+    # of the stateful engine in order to apply the changes. When this
+    # occurs, existing connections will be treated according to your stream
+    # exception policy configuration.
+    #
     # @!attribute [rw] rule_order
     #   Indicates how to manage the order of stateful rule evaluation for
     #   the policy. `STRICT_ORDER` is the recommended option, but
@@ -7670,7 +7713,7 @@ module Aws::NetworkFirewall
     #
     #
     #
-    # [1]: https://suricata.readthedocs.io/en/suricata-7.0.3/rules/intro.html
+    # [1]: https://suricata.readthedocs.io/en/suricata-7.0.8/rules/intro.html
     #
     # @!attribute [rw] action
     #   Defines what Network Firewall should do with the packets in a
@@ -8555,43 +8598,54 @@ module Aws::NetworkFirewall
     end
 
     # @!attribute [rw] container_association_name
-    #   The descriptive name of the container association. You must specify
-    #   the ARN or the name, and you can specify both.
+    #   The descriptive name of the container association.
+    #
+    #   You must specify the ARN or the name, and you can specify both.
     #   @return [String]
     #
     # @!attribute [rw] container_association_arn
-    #   The Amazon Resource Name (ARN) of the container association. You
-    #   must specify the ARN or the name, and you can specify both.
+    #   The Amazon Resource Name (ARN) of the container association.
+    #
+    #   You must specify the ARN or the name, and you can specify both.
     #   @return [String]
     #
     # @!attribute [rw] description
-    #   A description of the container association.
+    #   A description of the container association. When omitted, the
+    #   existing description remains unchanged. To clear the description,
+    #   pass an empty string.
     #   @return [String]
     #
     # @!attribute [rw] type
-    #   The type of container orchestration platform. This must match the
-    #   type specified when the container association was created.
+    #   The container type. This value must match the existing type and
+    #   can't be changed. Valid values:
+    #
+    #   * `ECS` - Amazon Elastic Container Service
+    #
+    #   * `EKS` - Amazon Elastic Kubernetes Service
     #   @return [String]
     #
     # @!attribute [rw] container_monitoring_configurations
-    #   The updated list of container monitoring configurations that define
-    #   which clusters and container attributes to monitor.
+    #   The updated monitoring configurations for the container association.
+    #   Each configuration specifies an Amazon ECS or Amazon EKS cluster to
+    #   monitor and optional attribute filters.
     #   @return [Array<Types::ContainerMonitoringConfiguration>]
     #
     # @!attribute [rw] tags
-    #   The key:value pairs associated with the resource.
+    #   The key:value pairs to associate with the resource.
     #   @return [Array<Types::Tag>]
     #
     # @!attribute [rw] update_token
     #   A token used for optimistic locking. Network Firewall returns a
     #   token to your requests that access the container association. The
     #   token marks the state of the container association resource at the
-    #   time of the request. To make an update to the container association,
-    #   provide the token in your request. Network Firewall uses the token
-    #   to ensure that the container association hasn't changed since you
-    #   last retrieved it. If it has changed, the operation fails with an
+    #   time of the request.
+    #
+    #   To make changes to the container association, you provide the token
+    #   in your request. Network Firewall uses the token to ensure that the
+    #   container association hasn't changed since you last retrieved it.
+    #   If it has changed, the operation fails with an
     #   `InvalidTokenException`. If this happens, retrieve the container
-    #   association again to get a current copy of it with a new token.
+    #   association again to get a current copy of it with a current token.
     #   Reapply your changes as needed, then try the operation again using
     #   the new token.
     #   @return [String]
@@ -8623,12 +8677,15 @@ module Aws::NetworkFirewall
     #   @return [String]
     #
     # @!attribute [rw] type
-    #   The type of container orchestration platform. Either `ECS` or `EKS`.
+    #   The container type. Valid values:
+    #
+    #   * `ECS` - Amazon Elastic Container Service
+    #
+    #   * `EKS` - Amazon Elastic Kubernetes Service
     #   @return [String]
     #
     # @!attribute [rw] container_monitoring_configurations
-    #   The container monitoring configurations for this container
-    #   association.
+    #   The monitoring configurations for the container association.
     #   @return [Array<Types::ContainerMonitoringConfiguration>]
     #
     # @!attribute [rw] status
@@ -8636,7 +8693,7 @@ module Aws::NetworkFirewall
     #   @return [String]
     #
     # @!attribute [rw] tags
-    #   The key:value pairs associated with the resource.
+    #   The key:value pairs to associate with the resource.
     #   @return [Array<Types::Tag>]
     #
     # @!attribute [rw] update_token
@@ -8644,6 +8701,15 @@ module Aws::NetworkFirewall
     #   token to your requests that access the container association. The
     #   token marks the state of the container association resource at the
     #   time of the request.
+    #
+    #   To make changes to the container association, you provide the token
+    #   in your request. Network Firewall uses the token to ensure that the
+    #   container association hasn't changed since you last retrieved it.
+    #   If it has changed, the operation fails with an
+    #   `InvalidTokenException`. If this happens, retrieve the container
+    #   association again to get a current copy of it with a current token.
+    #   Reapply your changes as needed, then try the operation again using
+    #   the new token.
     #   @return [String]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/network-firewall-2020-11-12/UpdateContainerAssociationResponse AWS API Documentation

data/lib/aws-sdk-networkfirewall.rb

@@ -54,7 +54,7 @@ module Aws::NetworkFirewall
   autoload :EndpointProvider, 'aws-sdk-networkfirewall/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-networkfirewall/endpoints'
 
-  GEM_VERSION = '1.93.0'
+  GEM_VERSION = '1.95.0'
 
 end
 

data/sig/client.rbs

@@ -173,7 +173,7 @@ module Aws
         def description: () -> ::String
         def type: () -> ("ECS" | "EKS")
         def container_monitoring_configurations: () -> ::Array[Types::ContainerMonitoringConfiguration]
-        def status: () -> ("ACTIVE" | "CREATING" | "DELETING")
+        def status: () -> ("ACTIVE" | "CREATING" | "DELETING" | "UPDATING")
         def tags: () -> ::Array[Types::Tag]
         def update_token: () -> ::String
       end
@@ -459,7 +459,7 @@ module Aws
         include ::Seahorse::Client::_ResponseSuccess[Types::DeleteContainerAssociationResponse]
         def container_association_name: () -> ::String
         def container_association_arn: () -> ::String
-        def status: () -> ("ACTIVE" | "CREATING" | "DELETING")
+        def status: () -> ("ACTIVE" | "CREATING" | "DELETING" | "UPDATING")
       end
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/NetworkFirewall/Client.html#delete_container_association-instance_method
       def delete_container_association: (
@@ -602,7 +602,7 @@ module Aws
         def description: () -> ::String
         def type: () -> ("ECS" | "EKS")
         def container_monitoring_configurations: () -> ::Array[Types::ContainerMonitoringConfiguration]
-        def status: () -> ("ACTIVE" | "CREATING" | "DELETING")
+        def status: () -> ("ACTIVE" | "CREATING" | "DELETING" | "UPDATING")
         def resolved_cidr_count: () -> ::Integer
         def last_updated_time: () -> ::Time
         def tags: () -> ::Array[Types::Tag]
@@ -1198,7 +1198,7 @@ module Aws
         def description: () -> ::String
         def type: () -> ("ECS" | "EKS")
         def container_monitoring_configurations: () -> ::Array[Types::ContainerMonitoringConfiguration]
-        def status: () -> ("ACTIVE" | "CREATING" | "DELETING")
+        def status: () -> ("ACTIVE" | "CREATING" | "DELETING" | "UPDATING")
         def tags: () -> ::Array[Types::Tag]
         def update_token: () -> ::String
       end

data/sig/types.rbs

@@ -190,7 +190,7 @@ module Aws::NetworkFirewall
       attr_accessor description: ::String
       attr_accessor type: ("ECS" | "EKS")
       attr_accessor container_monitoring_configurations: ::Array[Types::ContainerMonitoringConfiguration]
-      attr_accessor status: ("ACTIVE" | "CREATING" | "DELETING")
+      attr_accessor status: ("ACTIVE" | "CREATING" | "DELETING" | "UPDATING")
       attr_accessor tags: ::Array[Types::Tag]
       attr_accessor update_token: ::String
       SENSITIVE: []
@@ -379,7 +379,7 @@ module Aws::NetworkFirewall
     class DeleteContainerAssociationResponse
       attr_accessor container_association_name: ::String
       attr_accessor container_association_arn: ::String
-      attr_accessor status: ("ACTIVE" | "CREATING" | "DELETING")
+      attr_accessor status: ("ACTIVE" | "CREATING" | "DELETING" | "UPDATING")
       SENSITIVE: []
     end
 
@@ -521,7 +521,7 @@ module Aws::NetworkFirewall
       attr_accessor description: ::String
       attr_accessor type: ("ECS" | "EKS")
       attr_accessor container_monitoring_configurations: ::Array[Types::ContainerMonitoringConfiguration]
-      attr_accessor status: ("ACTIVE" | "CREATING" | "DELETING")
+      attr_accessor status: ("ACTIVE" | "CREATING" | "DELETING" | "UPDATING")
       attr_accessor resolved_cidr_count: ::Integer
       attr_accessor last_updated_time: ::Time
       attr_accessor tags: ::Array[Types::Tag]
@@ -1774,7 +1774,7 @@ module Aws::NetworkFirewall
       attr_accessor description: ::String
       attr_accessor type: ("ECS" | "EKS")
       attr_accessor container_monitoring_configurations: ::Array[Types::ContainerMonitoringConfiguration]
-      attr_accessor status: ("ACTIVE" | "CREATING" | "DELETING")
+      attr_accessor status: ("ACTIVE" | "CREATING" | "DELETING" | "UPDATING")
       attr_accessor tags: ::Array[Types::Tag]
       attr_accessor update_token: ::String
       SENSITIVE: []

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-networkfirewall
 version: !ruby/object:Gem::Version
-  version: 1.93.0
+  version: 1.95.0
 platform: ruby
 authors:
 - Amazon Web Services