aws-sdk-sagemaker 1.64.0 → 1.69.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 3dd514dc94ac9a72dbf30134179cd7996354fbce6bbea433880986af5ed18a90
-  data.tar.gz: 691fec9934ce5ae29898a274d0012ab7e7566426351658b08e4c1d33a90a8bea
+  metadata.gz: 9c650d0d2e8d26fbeac0436d2df360c92fefb30b609f5f596824dc6df6f44987
+  data.tar.gz: d913e7998418e98f82e0afbe72791515a12facc00998b93e0c8066455644e704
 SHA512:
-  metadata.gz: 0febc6c10d0afe0d14609064267f2f587b90dffab2f94f47e8d6662974e92305188a47dbd5a2616fb346a945da2ee33e33e3a35024e4dbb67a0d6b9307f69ee0
-  data.tar.gz: 2b9ed20523f9f255ef59b925f8697a56ff887f60b770303e83330de53efce42d88d66656bf919b9b4309846407253aaa2f2a6760f05ed24c943eb39be5e6373f
+  metadata.gz: e1d08317e47a3cfba20208a04a4509045173b092e5a3ef91456a70f06349f8af7e8f56760e855c0915cc65fa69ad0f529f1b27316d2fc900cacb64e875b11a35
+  data.tar.gz: 053b1e63e6d178fcbf4f72b732d3f7813b7c2a021016073f0ca1044310e7d93d84bf22479944ae1200ffc13c17a7d6712e40e76dd1ec7a47a5097c36f8853c64

data/lib/aws-sdk-sagemaker.rb

@@ -7,6 +7,7 @@
 #
 # WARNING ABOUT GENERATED CODE
 
+
 require 'aws-sdk-core'
 require 'aws-sigv4'
 
@@ -45,9 +46,9 @@ require_relative 'aws-sdk-sagemaker/customizations'
 #
 # See {Errors} for more information.
 #
-# @service
+# @!group service
 module Aws::SageMaker
 
-  GEM_VERSION = '1.64.0'
+  GEM_VERSION = '1.69.0'
 
 end

data/lib/aws-sdk-sagemaker/client.rb

@@ -85,13 +85,28 @@ module Aws::SageMaker
     #     * `Aws::Credentials` - Used for configuring static, non-refreshing
     #       credentials.
     #
+    #     * `Aws::SharedCredentials` - Used for loading static credentials from a
+    #       shared file, such as `~/.aws/config`.
+    #
+    #     * `Aws::AssumeRoleCredentials` - Used when you need to assume a role.
+    #
+    #     * `Aws::AssumeRoleWebIdentityCredentials` - Used when you need to
+    #       assume a role after providing credentials via the web.
+    #
+    #     * `Aws::SSOCredentials` - Used for loading credentials from AWS SSO using an
+    #       access token generated from `aws login`.
+    #
+    #     * `Aws::ProcessCredentials` - Used for loading credentials from a
+    #       process that outputs to stdout.
+    #
     #     * `Aws::InstanceProfileCredentials` - Used for loading credentials
     #       from an EC2 IMDS on an EC2 instance.
     #
-    #     * `Aws::SharedCredentials` - Used for loading credentials from a
-    #       shared file, such as `~/.aws/config`.
+    #     * `Aws::ECSCredentials` - Used for loading credentials from
+    #       instances running in ECS.
     #
-    #     * `Aws::AssumeRoleCredentials` - Used when you need to assume a role.
+    #     * `Aws::CognitoIdentityCredentials` - Used for loading credentials
+    #       from the Cognito Identity service.
     #
     #     When `:credentials` are not configured directly, the following
     #     locations will be searched for credentials:
@@ -101,10 +116,10 @@ module Aws::SageMaker
     #     * ENV['AWS_ACCESS_KEY_ID'], ENV['AWS_SECRET_ACCESS_KEY']
     #     * `~/.aws/credentials`
     #     * `~/.aws/config`
-    #     * EC2 IMDS instance profile - When used by default, the timeouts are
-    #       very aggressive. Construct and pass an instance of
-    #       `Aws::InstanceProfileCredentails` to enable retries and extended
-    #       timeouts.
+    #     * EC2/ECS IMDS instance profile - When used by default, the timeouts
+    #       are very aggressive. Construct and pass an instance of
+    #       `Aws::InstanceProfileCredentails` or `Aws::ECSCredentials` to
+    #       enable retries and extended timeouts.
     #
     #   @option options [required, String] :region
     #     The AWS region to connect to.  The configured `:region` is
@@ -713,15 +728,14 @@ module Aws::SageMaker
       req.send_request(options)
     end
 
-    # Creates an AutoPilot job.
+    # Creates an Autopilot job.
     #
-    # After you run an AutoPilot job, you can find the best performing model
-    # by calling , and then deploy that model by following the steps
-    # described in [Step 6.1: Deploy the Model to Amazon SageMaker Hosting
-    # Services][1].
+    # Find the best performing model after you run an Autopilot job by
+    # calling . Deploy that model by following the steps described in [Step
+    # 6.1: Deploy the Model to Amazon SageMaker Hosting Services][1].
     #
-    # For information about how to use AutoPilot, see [Use AutoPilot to
-    # Automate Model Development][2].
+    # For information about how to use Autopilot, see [ Automate Model
+    # Development with Amazon SageMaker Autopilot][2].
     #
     #
     #
@@ -729,12 +743,12 @@ module Aws::SageMaker
     # [2]: https://docs.aws.amazon.com/sagemaker/latest/dg/autopilot-automate-model-development.html
     #
     # @option params [required, String] :auto_ml_job_name
-    #   Identifies an AutoPilot job. Must be unique to your account and is
+    #   Identifies an Autopilot job. Must be unique to your account and is
     #   case-insensitive.
     #
     # @option params [required, Array<Types::AutoMLChannel>] :input_data_config
     #   Similar to InputDataConfig supported by Tuning. Format(s) supported:
-    #   CSV. Minimum of 1000 rows.
+    #   CSV. Minimum of 500 rows.
     #
     # @option params [required, Types::AutoMLOutputDataConfig] :output_data_config
     #   Similar to OutputDataConfig supported by Tuning. Format(s) supported:
@@ -746,20 +760,21 @@ module Aws::SageMaker
     #   MulticlassClassification, and Regression.
     #
     # @option params [Types::AutoMLJobObjective] :auto_ml_job_objective
-    #   Defines the job's objective. You provide a MetricName and AutoML will
-    #   infer minimize or maximize. If this is not provided, the most commonly
-    #   used ObjectiveMetric for problem type will be selected.
+    #   Defines the objective of a an AutoML job. You provide a
+    #   AutoMLJobObjective$MetricName and Autopilot infers whether to minimize
+    #   or maximize it. If a metric is not specified, the most commonly used
+    #   ObjectiveMetric for problem type is automaically selected.
     #
     # @option params [Types::AutoMLJobConfig] :auto_ml_job_config
     #   Contains CompletionCriteria and SecurityConfig.
     #
     # @option params [required, String] :role_arn
-    #   The ARN of the role that will be used to access the data.
+    #   The ARN of the role that is used to access the data.
     #
     # @option params [Boolean] :generate_candidate_definitions_only
-    #   This will generate possible candidates without training a model. A
-    #   candidate is a combination of data preprocessors, algorithms, and
-    #   algorithm parameter settings.
+    #   Generates possible candidates without training a model. A candidate is
+    #   a combination of data preprocessors, algorithms, and algorithm
+    #   parameter settings.
     #
     # @option params [Array<Types::Tag>] :tags
     #   Each tag consists of a key and an optional value. Tag keys must be
@@ -791,7 +806,7 @@ module Aws::SageMaker
     #     },
     #     problem_type: "BinaryClassification", # accepts BinaryClassification, MulticlassClassification, Regression
     #     auto_ml_job_objective: {
-    #       metric_name: "Accuracy", # required, accepts Accuracy, MSE, F1, F1macro
+    #       metric_name: "Accuracy", # required, accepts Accuracy, MSE, F1, F1macro, AUC
     #     },
     #     auto_ml_job_config: {
     #       completion_criteria: {
@@ -997,26 +1012,65 @@ module Aws::SageMaker
       req.send_request(options)
     end
 
-    # Creates a `Domain` used by SageMaker Studio. A domain consists of an
-    # associated directory, a list of authorized users, and a variety of
-    # security, application, policy, and Amazon Virtual Private Cloud (VPC)
-    # configurations. An AWS account is limited to one domain per region.
-    # Users within a domain can share notebook files and other artifacts
-    # with each other.
+    # Creates a `Domain` used by Amazon SageMaker Studio. A domain consists
+    # of an associated Amazon Elastic File System (EFS) volume, a list of
+    # authorized users, and a variety of security, application, policy, and
+    # Amazon Virtual Private Cloud (VPC) configurations. An AWS account is
+    # limited to one domain per region. Users within a domain can share
+    # notebook files and other artifacts with each other.
+    #
+    # When a domain is created, an EFS volume is created for use by all of
+    # the users within the domain. Each user receives a private home
+    # directory within the EFS volume for notebooks, Git repositories, and
+    # data files.
+    #
+    # **VPC configuration**
+    #
+    # All SageMaker Studio traffic between the domain and the EFS volume is
+    # through the specified VPC and subnets. For other Studio traffic, you
+    # specify the `AppNetworkAccessType` parameter. `AppNetworkAccessType`
+    # corresponds to the VPC mode that's chosen when you onboard to Studio.
+    # The following options are available:
+    #
+    # * `PublicInternetOnly` - Non-EFS traffic goes through a VPC managed by
+    #   Amazon SageMaker, which allows internet access. This is the default
+    #   value.
+    #
+    # * `VpcOnly` - All Studio traffic is through the specified VPC and
+    #   subnets. Internet access is disabled by default. To allow internet
+    #   access, you must specify a NAT gateway.
+    #
+    #   When internet access is disabled, you won't be able to train or
+    #   host models unless your VPC has an interface endpoint (PrivateLink)
+    #   or a NAT gateway and your security groups allow outbound
+    #   connections.
     #
-    # When a domain is created, an Amazon Elastic File System (EFS) volume
-    # is also created for use by all of the users within the domain. Each
-    # user receives a private home directory within the EFS for notebooks,
-    # Git repositories, and data files.
+    # <b> <code>VpcOnly</code> mode</b>
     #
-    # All traffic between the domain and the EFS volume is communicated
-    # through the specified subnet IDs. All other traffic goes over the
-    # Internet through an Amazon SageMaker system VPC. The EFS traffic uses
-    # the NFS/TCP protocol over port 2049.
+    # When you specify `VpcOnly`, you must specify the following:
     #
-    # NFS traffic over TCP on port 2049 needs to be allowed in both inbound
-    # and outbound rules in order to launch a SageMaker Studio app
-    # successfully.
+    # * Security group inbound and outbound rules to allow NFS traffic over
+    #   TCP on port 2049 between the domain and the EFS volume
+    #
+    # * Security group inbound and outbound rules to allow traffic between
+    #   the JupyterServer app and the KernelGateway apps
+    #
+    # * Interface endpoints to access the SageMaker API and SageMaker
+    #   runtime
+    #
+    # For more information, see:
+    #
+    # * [Security groups for your VPC][1]
+    #
+    # * [VPC with public and private subnets (NAT)][2]
+    #
+    # * [Connect to SageMaker through a VPC interface endpoint][3]
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/vpc/latest/userguide/VPC_SecurityGroups.html
+    # [2]: https://docs.aws.amazon.com/vpc/latest/userguide/VPC_Scenario2.html
+    # [3]: https://docs.aws.amazon.com/sagemaker/latest/dg/interface-vpc-endpoint.html
     #
     # @option params [required, String] :domain_name
     #   A name for the domain.
@@ -1028,11 +1082,11 @@ module Aws::SageMaker
     #   The default user settings.
     #
     # @option params [required, Array<String>] :subnet_ids
-    #   The VPC subnets to use for communication with the EFS volume.
+    #   The VPC subnets that Studio uses for communication.
     #
     # @option params [required, String] :vpc_id
-    #   The ID of the Amazon Virtual Private Cloud (VPC) to use for
-    #   communication with the EFS volume.
+    #   The ID of the Amazon Virtual Private Cloud (VPC) that Studio uses for
+    #   communication.
     #
     # @option params [Array<Types::Tag>] :tags
     #   Tags to associated with the Domain. Each tag consists of a key and an
@@ -1043,6 +1097,16 @@ module Aws::SageMaker
     #   The AWS Key Management Service (KMS) encryption key ID. Encryption
     #   with a customer master key (CMK) is not supported.
     #
+    # @option params [String] :app_network_access_type
+    #   Specifies the VPC used for non-EFS traffic. The default value is
+    #   `PublicInternetOnly`.
+    #
+    #   * `PublicInternetOnly` - Non-EFS traffic is through a VPC managed by
+    #     Amazon SageMaker, which allows direct internet access
+    #
+    #   * `VpcOnly` - All Studio traffic is through the specified VPC and
+    #     subnets
+    #
     # @return [Types::CreateDomainResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::CreateDomainResponse#domain_arn #domain_arn} => String
@@ -1089,6 +1153,7 @@ module Aws::SageMaker
     #       },
     #     ],
     #     home_efs_file_system_kms_key_id: "KmsKeyId",
+    #     app_network_access_type: "PublicInternetOnly", # accepts PublicInternetOnly, VpcOnly
     #   })
     #
     # @example Response structure
@@ -2078,6 +2143,9 @@ module Aws::SageMaker
     #         s3_data_source: {
     #           manifest_s3_uri: "S3Uri", # required
     #         },
+    #         sns_data_source: {
+    #           sns_topic_arn: "SnsTopicArn", # required
+    #         },
     #       },
     #       data_attributes: {
     #         content_classifiers: ["FreeOfPersonallyIdentifiableInformation"], # accepts FreeOfPersonallyIdentifiableInformation, FreeOfAdultContent
@@ -2086,6 +2154,7 @@ module Aws::SageMaker
     #     output_config: { # required
     #       s3_output_path: "S3Uri", # required
     #       kms_key_id: "KmsKeyId",
+    #       sns_topic_arn: "SnsTopicArn",
     #     },
     #     role_arn: "RoleArn", # required
     #     label_category_config_s3_uri: "S3Uri",
@@ -2247,6 +2316,9 @@ module Aws::SageMaker
     #     primary_container: {
     #       container_hostname: "ContainerHostname",
     #       image: "ContainerImage",
+    #       image_config: {
+    #         repository_access_mode: "Platform", # required, accepts Platform, Vpc
+    #       },
     #       mode: "SingleModel", # accepts SingleModel, MultiModel
     #       model_data_url: "Url",
     #       environment: {
@@ -2258,6 +2330,9 @@ module Aws::SageMaker
     #       {
     #         container_hostname: "ContainerHostname",
     #         image: "ContainerImage",
+    #         image_config: {
+    #           repository_access_mode: "Platform", # required, accepts Platform, Vpc
+    #         },
     #         mode: "SingleModel", # accepts SingleModel, MultiModel
     #         model_data_url: "Url",
     #         environment: {
@@ -2821,6 +2896,12 @@ module Aws::SageMaker
     # This operation can only be called when the authentication mode equals
     # IAM.
     #
+    # <note markdown="1"> The URL that you get from a call to `CreatePresignedDomainUrl` is
+    # valid only for 5 minutes. If you try to use the URL after the 5-minute
+    # limit expires, you are directed to the AWS console sign-in page.
+    #
+    #  </note>
+    #
     # @option params [required, String] :domain_id
     #   The domain ID.
     #
@@ -3902,11 +3983,12 @@ module Aws::SageMaker
 
     # Use this operation to create a workforce. This operation will return
     # an error if a workforce already exists in the AWS Region that you
-    # specify. You can only create one workforce in each AWS Region.
+    # specify. You can only create one workforce in each AWS Region per AWS
+    # account.
     #
-    # If you want to create a new workforce in an AWS Region where the a
+    # If you want to create a new workforce in an AWS Region where a
     # workforce already exists, use the API operation to delete the existing
-    # workforce and then use this operation to create a new workforce.
+    # workforce and then use `CreateWorkforce` to create a new workforce.
     #
     # To create a private workforce using Amazon Cognito, you must specify a
     # Cognito user pool in `CognitoConfig`. You can also create an Amazon
@@ -3914,9 +3996,10 @@ module Aws::SageMaker
     # information, see [ Create a Private Workforce (Amazon Cognito)][1].
     #
     # To create a private workforce using your own OIDC Identity Provider
-    # (IdP), specify your IdP configuration in `OidcConfig`. You must create
-    # a OIDC IdP workforce using this API operation. For more information,
-    # see [ Create a Private Workforce (OIDC IdP)][2].
+    # (IdP), specify your IdP configuration in `OidcConfig`. Your OIDC IdP
+    # must support *groups* because groups are used by Ground Truth and
+    # Amazon A2I to create work teams. For more information, see [ Create a
+    # Private Workforce (OIDC IdP)][2].
     #
     #
     #
@@ -3936,12 +4019,15 @@ module Aws::SageMaker
     #
     # @option params [Types::OidcConfig] :oidc_config
     #   Use this parameter to configure a private workforce using your own
-    #   OIDC Identity Provider. Do not use `CognitoConfig` if you specify
-    #   values for `OidcConfig`.
+    #   OIDC Identity Provider.
+    #
+    #   Do not use `CognitoConfig` if you specify values for `OidcConfig`.
     #
     # @option params [Types::SourceIpConfig] :source_ip_config
     #   A list of IP address ranges ([CIDRs][1]). Used to create an allow list
-    #   of IP addresses for a private workforce. For more information, see .
+    #   of IP addresses for a private workforce. Workers will only be able to
+    #   login to their worker portal from an IP address within this range. By
+    #   default, a workforce isn't restricted to specific IP addresses.
     #
     #
     #
@@ -4015,11 +4101,25 @@ module Aws::SageMaker
     #
     # @option params [required, Array<Types::MemberDefinition>] :member_definitions
     #   A list of `MemberDefinition` objects that contains objects that
-    #   identify the Amazon Cognito user pool that makes up the work team. For
-    #   more information, see [Amazon Cognito User Pools][1].
+    #   identify the workers that make up the work team.
+    #
+    #   Workforces can be created using Amazon Cognito or your own OIDC
+    #   Identity Provider (IdP). For private workforces created using Amazon
+    #   Cognito use `CognitoMemberDefinition`. For workforces created using
+    #   your own OIDC identity provider (IdP) use `OidcMemberDefinition`. Do
+    #   not provide input for both of these parameters in a single request.
     #
-    #   All of the `CognitoMemberDefinition` objects that make up the member
-    #   definition must have the same `ClientId` and `UserPool` values.
+    #   For workforces created using Amazon Cognito, private work teams
+    #   correspond to Amazon Cognito *user groups* within the user pool used
+    #   to create a workforce. All of the `CognitoMemberDefinition` objects
+    #   that make up the member definition must have the same `ClientId` and
+    #   `UserPool` values. To add a Amazon Cognito user group to an existing
+    #   worker pool, see [Adding groups to a User Pool](). For more
+    #   information about user pools, see [Amazon Cognito User Pools][1].
+    #
+    #   For workforces created using your own OIDC IdP, specify the user
+    #   groups that you want to include in your private work team in
+    #   `OidcMemberDefinition` by listing those groups in `Groups`.
     #
     #
     #
@@ -4594,10 +4694,15 @@ module Aws::SageMaker
 
     # Use this operation to delete a workforce.
     #
-    # If you want to create a new workforce in an AWS Region where the a
+    # If you want to create a new workforce in an AWS Region where a
     # workforce already exists, use this operation to delete the existing
     # workforce and then use to create a new workforce.
     #
+    # If a private workforce contains one or more work teams, you must use
+    # the operation to delete all work teams before you delete the
+    # workforce. If you try to delete a workforce that contains one or more
+    # work teams, you will recieve a `ResourceInUse` error.
+    #
     # @option params [required, String] :workforce_name
     #   The name of the workforce.
     #
@@ -4899,7 +5004,7 @@ module Aws::SageMaker
     #   resp.output_data_config.kms_key_id #=> String
     #   resp.output_data_config.s3_output_path #=> String
     #   resp.role_arn #=> String
-    #   resp.auto_ml_job_objective.metric_name #=> String, one of "Accuracy", "MSE", "F1", "F1macro"
+    #   resp.auto_ml_job_objective.metric_name #=> String, one of "Accuracy", "MSE", "F1", "F1macro", "AUC"
     #   resp.problem_type #=> String, one of "BinaryClassification", "MulticlassClassification", "Regression"
     #   resp.auto_ml_job_config.completion_criteria.max_candidates #=> Integer
     #   resp.auto_ml_job_config.completion_criteria.max_runtime_per_training_job_in_seconds #=> Integer
@@ -4916,7 +5021,7 @@ module Aws::SageMaker
     #   resp.failure_reason #=> String
     #   resp.best_candidate.candidate_name #=> String
     #   resp.best_candidate.final_auto_ml_job_objective_metric.type #=> String, one of "Maximize", "Minimize"
-    #   resp.best_candidate.final_auto_ml_job_objective_metric.metric_name #=> String, one of "Accuracy", "MSE", "F1", "F1macro"
+    #   resp.best_candidate.final_auto_ml_job_objective_metric.metric_name #=> String, one of "Accuracy", "MSE", "F1", "F1macro", "AUC"
     #   resp.best_candidate.final_auto_ml_job_objective_metric.value #=> Float
     #   resp.best_candidate.objective_status #=> String, one of "Succeeded", "Pending", "Failed"
     #   resp.best_candidate.candidate_steps #=> Array
@@ -4938,7 +5043,7 @@ module Aws::SageMaker
     #   resp.generate_candidate_definitions_only #=> Boolean
     #   resp.auto_ml_job_artifacts.candidate_definition_notebook_location #=> String
     #   resp.auto_ml_job_artifacts.data_exploration_notebook_location #=> String
-    #   resp.resolved_attributes.auto_ml_job_objective.metric_name #=> String, one of "Accuracy", "MSE", "F1", "F1macro"
+    #   resp.resolved_attributes.auto_ml_job_objective.metric_name #=> String, one of "Accuracy", "MSE", "F1", "F1macro", "AUC"
     #   resp.resolved_attributes.problem_type #=> String, one of "BinaryClassification", "MulticlassClassification", "Regression"
     #   resp.resolved_attributes.completion_criteria.max_candidates #=> Integer
     #   resp.resolved_attributes.completion_criteria.max_runtime_per_training_job_in_seconds #=> Integer
@@ -5077,6 +5182,7 @@ module Aws::SageMaker
     #   * {Types::DescribeDomainResponse#subnet_ids #subnet_ids} => Array&lt;String&gt;
     #   * {Types::DescribeDomainResponse#url #url} => String
     #   * {Types::DescribeDomainResponse#vpc_id #vpc_id} => String
+    #   * {Types::DescribeDomainResponse#app_network_access_type #app_network_access_type} => String
     #
     # @example Request syntax with placeholder values
     #
@@ -5113,6 +5219,7 @@ module Aws::SageMaker
     #   resp.subnet_ids[0] #=> String
     #   resp.url #=> String
     #   resp.vpc_id #=> String
+    #   resp.app_network_access_type #=> String, one of "PublicInternetOnly", "VpcOnly"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/sagemaker-2017-07-24/DescribeDomain AWS API Documentation
     #
@@ -5663,10 +5770,12 @@ module Aws::SageMaker
     #   resp.labeling_job_arn #=> String
     #   resp.label_attribute_name #=> String
     #   resp.input_config.data_source.s3_data_source.manifest_s3_uri #=> String
+    #   resp.input_config.data_source.sns_data_source.sns_topic_arn #=> String
     #   resp.input_config.data_attributes.content_classifiers #=> Array
     #   resp.input_config.data_attributes.content_classifiers[0] #=> String, one of "FreeOfPersonallyIdentifiableInformation", "FreeOfAdultContent"
     #   resp.output_config.s3_output_path #=> String
     #   resp.output_config.kms_key_id #=> String
+    #   resp.output_config.sns_topic_arn #=> String
     #   resp.role_arn #=> String
     #   resp.label_category_config_s3_uri #=> String
     #   resp.stopping_conditions.max_human_labeled_object_count #=> Integer
@@ -5732,6 +5841,7 @@ module Aws::SageMaker
     #   resp.model_name #=> String
     #   resp.primary_container.container_hostname #=> String
     #   resp.primary_container.image #=> String
+    #   resp.primary_container.image_config.repository_access_mode #=> String, one of "Platform", "Vpc"
     #   resp.primary_container.mode #=> String, one of "SingleModel", "MultiModel"
     #   resp.primary_container.model_data_url #=> String
     #   resp.primary_container.environment #=> Hash
@@ -5740,6 +5850,7 @@ module Aws::SageMaker
     #   resp.containers #=> Array
     #   resp.containers[0].container_hostname #=> String
     #   resp.containers[0].image #=> String
+    #   resp.containers[0].image_config.repository_access_mode #=> String, one of "Platform", "Vpc"
     #   resp.containers[0].mode #=> String, one of "SingleModel", "MultiModel"
     #   resp.containers[0].model_data_url #=> String
     #   resp.containers[0].environment #=> Hash
@@ -6972,8 +7083,8 @@ module Aws::SageMaker
     #   Request a list of jobs up to a specified limit.
     #
     # @option params [String] :next_token
-    #   If the previous response was truncated, you will receive this token.
-    #   Use it in your next request to receive the next set of results.
+    #   If the previous response was truncated, you receive this token. Use it
+    #   in your next request to receive the next set of results.
     #
     # @return [Types::ListAutoMLJobsResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
@@ -7040,8 +7151,8 @@ module Aws::SageMaker
     #   List the job's Candidates up to a specified limit.
     #
     # @option params [String] :next_token
-    #   If the previous response was truncated, you will receive this token.
-    #   Use it in your next request to receive the next set of results.
+    #   If the previous response was truncated, you receive this token. Use it
+    #   in your next request to receive the next set of results.
     #
     # @return [Types::ListCandidatesForAutoMLJobResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
@@ -7067,7 +7178,7 @@ module Aws::SageMaker
     #   resp.candidates #=> Array
     #   resp.candidates[0].candidate_name #=> String
     #   resp.candidates[0].final_auto_ml_job_objective_metric.type #=> String, one of "Maximize", "Minimize"
-    #   resp.candidates[0].final_auto_ml_job_objective_metric.metric_name #=> String, one of "Accuracy", "MSE", "F1", "F1macro"
+    #   resp.candidates[0].final_auto_ml_job_objective_metric.metric_name #=> String, one of "Accuracy", "MSE", "F1", "F1macro", "AUC"
     #   resp.candidates[0].final_auto_ml_job_objective_metric.value #=> Float
     #   resp.candidates[0].objective_status #=> String, one of "Succeeded", "Pending", "Failed"
     #   resp.candidates[0].candidate_steps #=> Array
@@ -7812,6 +7923,7 @@ module Aws::SageMaker
     #   resp.labeling_job_summary_list[0].labeling_job_output.output_dataset_s3_uri #=> String
     #   resp.labeling_job_summary_list[0].labeling_job_output.final_active_learning_model_arn #=> String
     #   resp.labeling_job_summary_list[0].input_config.data_source.s3_data_source.manifest_s3_uri #=> String
+    #   resp.labeling_job_summary_list[0].input_config.data_source.sns_data_source.sns_topic_arn #=> String
     #   resp.labeling_job_summary_list[0].input_config.data_attributes.content_classifiers #=> Array
     #   resp.labeling_job_summary_list[0].input_config.data_attributes.content_classifiers[0] #=> String, one of "FreeOfPersonallyIdentifiableInformation", "FreeOfAdultContent"
     #   resp.next_token #=> String
@@ -9125,9 +9237,9 @@ module Aws::SageMaker
       req.send_request(options)
     end
 
-    # Gets a list of work teams that you have defined in a region. The list
-    # may be empty if no work team satisfies the filter specified in the
-    # `NameContains` parameter.
+    # Gets a list of private work teams that you have defined in a region.
+    # The list may be empty if no work team satisfies the filter specified
+    # in the `NameContains` parameter.
     #
     # @option params [String] :sort_by
     #   The field to sort results by. The default is `CreationTime`.
@@ -10731,27 +10843,39 @@ module Aws::SageMaker
       req.send_request(options)
     end
 
-    # Restricts access to tasks assigned to workers in the specified
-    # workforce to those within specific ranges of IP addresses. You specify
-    # allowed IP addresses by creating a list of up to ten [CIDRs][1].
+    # Use this operation to update your workforce. You can use this
+    # operation to require that workers use specific IP addresses to work on
+    # tasks and to update your OpenID Connect (OIDC) Identity Provider (IdP)
+    # workforce configuration.
     #
-    # By default, a workforce isn't restricted to specific IP addresses. If
-    # you specify a range of IP addresses, workers who attempt to access
-    # tasks using any IP address outside the specified range are denied
-    # access and get a `Not Found` error message on the worker portal. After
-    # restricting access with this operation, you can see the allowed IP
-    # values for a private workforce with the operation.
+    # Use `SourceIpConfig` to restrict worker access to tasks to a specific
+    # range of IP addresses. You specify allowed IP addresses by creating a
+    # list of up to ten [CIDRs][1]. By default, a workforce isn't
+    # restricted to specific IP addresses. If you specify a range of IP
+    # addresses, workers who attempt to access tasks using any IP address
+    # outside the specified range are denied and get a `Not Found` error
+    # message on the worker portal.
     #
-    # This operation applies only to private workforces.
+    # Use `OidcConfig` to update the configuration of a workforce created
+    # using your own OIDC IdP.
+    #
+    # You can only update your OIDC IdP configuration when there are no work
+    # teams associated with your workforce. You can delete work teams using
+    # the operation.
+    #
+    # After restricting access to a range of IP addresses or updating your
+    # OIDC IdP configuration with this operation, you can view details about
+    # your update workforce using the operation.
+    #
+    # This operation only applies to private workforces.
     #
     #
     #
     # [1]: https://docs.aws.amazon.com/vpc/latest/userguide/VPC_Subnets.html
     #
     # @option params [required, String] :workforce_name
-    #   The name of the private workforce whose access you want to restrict.
-    #   `WorkforceName` is automatically set to `default` when a workforce is
-    #   created and cannot be modified.
+    #   The name of the private workforce that you want to update. You can
+    #   find your workforce name by using the operation.
     #
     # @option params [Types::SourceIpConfig] :source_ip_config
     #   A list of one to ten worker IP address ranges ([CIDRs][1]) that can be
@@ -10825,8 +10949,35 @@ module Aws::SageMaker
     #   The name of the work team to update.
     #
     # @option params [Array<Types::MemberDefinition>] :member_definitions
-    #   A list of `MemberDefinition` objects that contain the updated work
-    #   team members.
+    #   A list of `MemberDefinition` objects that contains objects that
+    #   identify the workers that make up the work team.
+    #
+    #   Workforces can be created using Amazon Cognito or your own OIDC
+    #   Identity Provider (IdP). For private workforces created using Amazon
+    #   Cognito use `CognitoMemberDefinition`. For workforces created using
+    #   your own OIDC identity provider (IdP) use `OidcMemberDefinition`. You
+    #   should not provide input for both of these parameters in a single
+    #   request.
+    #
+    #   For workforces created using Amazon Cognito, private work teams
+    #   correspond to Amazon Cognito *user groups* within the user pool used
+    #   to create a workforce. All of the `CognitoMemberDefinition` objects
+    #   that make up the member definition must have the same `ClientId` and
+    #   `UserPool` values. To add a Amazon Cognito user group to an existing
+    #   worker pool, see [Adding groups to a User Pool](). For more
+    #   information about user pools, see [Amazon Cognito User Pools][1].
+    #
+    #   For workforces created using your own OIDC IdP, specify the user
+    #   groups that you want to include in your private work team in
+    #   `OidcMemberDefinition` by listing those groups in `Groups`. Be aware
+    #   that user groups that are already in the work team must also be listed
+    #   in `Groups` when you make this request to remain on the work team. If
+    #   you do not include these user groups, they will no longer be
+    #   associated with the work team you update.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-identity-pools.html
     #
     # @option params [String] :description
     #   An updated description for the work team.
@@ -10902,7 +11053,7 @@ module Aws::SageMaker
         params: params,
         config: config)
       context[:gem_name] = 'aws-sdk-sagemaker'
-      context[:gem_version] = '1.64.0'
+      context[:gem_version] = '1.69.0'
       Seahorse::Client::Request.new(handlers, context)
     end