aws-sdk-securitylake 1.15.0 → 1.17.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: cd995ef1173ee9ccc86b5ce24d46ee90e0001e32c4f10952d3dbd69ad9c58a1e
-  data.tar.gz: a6526f4f14c024f162c0852a98ada3e9ce61b11401612e5bfd03fcd6bafceefb
+  metadata.gz: 5577a231fca4cf5a58d08ac24d16d805d4391792e093ee9e1c0e62e1b3f20ef9
+  data.tar.gz: 506c2d5b70c8aa6898f0b61e8f26dca7ae1fa6b1beefcafc8e861fa8ab24223a
 SHA512:
-  metadata.gz: 551aba3600a96c48c37609a6269186267df8f7f4d344cf20721af520e233fecec6b0d3c24f6041304c352e7fe0c86faa440202037d78ec4722afa3ffb76f6212
-  data.tar.gz: a8b454497624dd412470f977ee4fbc0cf258f6c80d64bfe9a961a47f0350d92a8ddb578675d171a7e21aa1d0d729aaf9dd73725a4be6cd37a059ca427009abfb
+  metadata.gz: f38f2f0c37a813f643fb4c1848ec612a387d52d8b3234fe8e654c70ed3e9c4355d90480b397bdd92b3999b0cb67c7084bda81689a5ae29f375803b486ba3d58c
+  data.tar.gz: ca2a53ed1391a22e9222930f9ddcb03d11bdedc421cdaf9e6f4b5cac979d88830b7948aafbc8692f2e27c8404f59ac906336e17b4608b71a32750c0576148703

data/CHANGELOG.md

@@ -1,6 +1,16 @@
 Unreleased Changes
 ------------------
 
+1.17.0 (2024-02-29)
+------------------
+
+* Feature - Add capability to update the Data Lake's MetaStoreManager Role in order to perform required data lake updates to use Iceberg table format in their data lake or update the role for any other reason.
+
+1.16.0 (2024-02-13)
+------------------
+
+* Feature - Documentation updates for Security Lake
+
 1.15.0 (2024-01-26)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.15.0
+1.17.0

data/lib/aws-sdk-securitylake/client.rb

@@ -415,7 +415,7 @@ module Aws::SecurityLake
     #       {
     #         accounts: ["AwsAccountId"],
     #         regions: ["Region"], # required
-    #         source_name: "ROUTE53", # required, accepts ROUTE53, VPC_FLOW, SH_FINDINGS, CLOUD_TRAIL_MGMT, LAMBDA_EXECUTION, S3_DATA
+    #         source_name: "ROUTE53", # required, accepts ROUTE53, VPC_FLOW, SH_FINDINGS, CLOUD_TRAIL_MGMT, LAMBDA_EXECUTION, S3_DATA, EKS_AUDIT, WAF
     #         source_version: "AwsLogSourceVersion",
     #       },
     #     ],
@@ -445,7 +445,7 @@ module Aws::SecurityLake
     # source. In addition, this operation also creates an associated Glue
     # table and an Glue crawler.
     #
-    # @option params [Types::CustomLogSourceConfiguration] :configuration
+    # @option params [required, Types::CustomLogSourceConfiguration] :configuration
     #   The configuration for the third-party custom source.
     #
     # @option params [Array<String>] :event_classes
@@ -526,7 +526,7 @@ module Aws::SecurityLake
     # @example Request syntax with placeholder values
     #
     #   resp = client.create_custom_log_source({
-    #     configuration: {
+    #     configuration: { # required
     #       crawler_configuration: { # required
     #         role_arn: "RoleArn", # required
     #       },
@@ -700,7 +700,7 @@ module Aws::SecurityLake
     # your organization. Security Lake is not automatically enabled for any
     # existing member accounts in your organization.
     #
-    # @option params [required, Array<Types::DataLakeAutoEnableNewAccountConfiguration>] :auto_enable_new_account
+    # @option params [Array<Types::DataLakeAutoEnableNewAccountConfiguration>] :auto_enable_new_account
     #   Enable Security Lake with the specified configuration settings, to
     #   begin collecting security data for new accounts in your organization.
     #
@@ -709,12 +709,12 @@ module Aws::SecurityLake
     # @example Request syntax with placeholder values
     #
     #   resp = client.create_data_lake_organization_configuration({
-    #     auto_enable_new_account: [ # required
+    #     auto_enable_new_account: [
     #       {
     #         region: "Region", # required
     #         sources: [ # required
     #           {
-    #             source_name: "ROUTE53", # accepts ROUTE53, VPC_FLOW, SH_FINDINGS, CLOUD_TRAIL_MGMT, LAMBDA_EXECUTION, S3_DATA
+    #             source_name: "ROUTE53", # accepts ROUTE53, VPC_FLOW, SH_FINDINGS, CLOUD_TRAIL_MGMT, LAMBDA_EXECUTION, S3_DATA, EKS_AUDIT, WAF
     #             source_version: "AwsLogSourceVersion",
     #           },
     #         ],
@@ -768,7 +768,7 @@ module Aws::SecurityLake
     #     sources: [ # required
     #       {
     #         aws_log_source: {
-    #           source_name: "ROUTE53", # accepts ROUTE53, VPC_FLOW, SH_FINDINGS, CLOUD_TRAIL_MGMT, LAMBDA_EXECUTION, S3_DATA
+    #           source_name: "ROUTE53", # accepts ROUTE53, VPC_FLOW, SH_FINDINGS, CLOUD_TRAIL_MGMT, LAMBDA_EXECUTION, S3_DATA, EKS_AUDIT, WAF
     #           source_version: "AwsLogSourceVersion",
     #         },
     #         custom_log_source: {
@@ -810,7 +810,7 @@ module Aws::SecurityLake
     #   resp.subscriber.role_arn #=> String
     #   resp.subscriber.s3_bucket_arn #=> String
     #   resp.subscriber.sources #=> Array
-    #   resp.subscriber.sources[0].aws_log_source.source_name #=> String, one of "ROUTE53", "VPC_FLOW", "SH_FINDINGS", "CLOUD_TRAIL_MGMT", "LAMBDA_EXECUTION", "S3_DATA"
+    #   resp.subscriber.sources[0].aws_log_source.source_name #=> String, one of "ROUTE53", "VPC_FLOW", "SH_FINDINGS", "CLOUD_TRAIL_MGMT", "LAMBDA_EXECUTION", "S3_DATA", "EKS_AUDIT", "WAF"
     #   resp.subscriber.sources[0].aws_log_source.source_version #=> String
     #   resp.subscriber.sources[0].custom_log_source.attributes.crawler_arn #=> String
     #   resp.subscriber.sources[0].custom_log_source.attributes.database_arn #=> String
@@ -910,7 +910,7 @@ module Aws::SecurityLake
     #       {
     #         accounts: ["AwsAccountId"],
     #         regions: ["Region"], # required
-    #         source_name: "ROUTE53", # required, accepts ROUTE53, VPC_FLOW, SH_FINDINGS, CLOUD_TRAIL_MGMT, LAMBDA_EXECUTION, S3_DATA
+    #         source_name: "ROUTE53", # required, accepts ROUTE53, VPC_FLOW, SH_FINDINGS, CLOUD_TRAIL_MGMT, LAMBDA_EXECUTION, S3_DATA, EKS_AUDIT, WAF
     #         source_version: "AwsLogSourceVersion",
     #       },
     #     ],
@@ -1016,7 +1016,7 @@ module Aws::SecurityLake
     # this operation, new member accounts won't automatically contribute
     # data to the data lake.
     #
-    # @option params [required, Array<Types::DataLakeAutoEnableNewAccountConfiguration>] :auto_enable_new_account
+    # @option params [Array<Types::DataLakeAutoEnableNewAccountConfiguration>] :auto_enable_new_account
     #   Turns off automatic enablement of Security Lake for member accounts
     #   that are added to an organization.
     #
@@ -1025,12 +1025,12 @@ module Aws::SecurityLake
     # @example Request syntax with placeholder values
     #
     #   resp = client.delete_data_lake_organization_configuration({
-    #     auto_enable_new_account: [ # required
+    #     auto_enable_new_account: [
     #       {
     #         region: "Region", # required
     #         sources: [ # required
     #           {
-    #             source_name: "ROUTE53", # accepts ROUTE53, VPC_FLOW, SH_FINDINGS, CLOUD_TRAIL_MGMT, LAMBDA_EXECUTION, S3_DATA
+    #             source_name: "ROUTE53", # accepts ROUTE53, VPC_FLOW, SH_FINDINGS, CLOUD_TRAIL_MGMT, LAMBDA_EXECUTION, S3_DATA, EKS_AUDIT, WAF
     #             source_version: "AwsLogSourceVersion",
     #           },
     #         ],
@@ -1152,7 +1152,7 @@ module Aws::SecurityLake
     #   resp.auto_enable_new_account #=> Array
     #   resp.auto_enable_new_account[0].region #=> String
     #   resp.auto_enable_new_account[0].sources #=> Array
-    #   resp.auto_enable_new_account[0].sources[0].source_name #=> String, one of "ROUTE53", "VPC_FLOW", "SH_FINDINGS", "CLOUD_TRAIL_MGMT", "LAMBDA_EXECUTION", "S3_DATA"
+    #   resp.auto_enable_new_account[0].sources[0].source_name #=> String, one of "ROUTE53", "VPC_FLOW", "SH_FINDINGS", "CLOUD_TRAIL_MGMT", "LAMBDA_EXECUTION", "S3_DATA", "EKS_AUDIT", "WAF"
     #   resp.auto_enable_new_account[0].sources[0].source_version #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securitylake-2018-05-10/GetDataLakeOrganizationConfiguration AWS API Documentation
@@ -1252,7 +1252,7 @@ module Aws::SecurityLake
     #   resp.subscriber.role_arn #=> String
     #   resp.subscriber.s3_bucket_arn #=> String
     #   resp.subscriber.sources #=> Array
-    #   resp.subscriber.sources[0].aws_log_source.source_name #=> String, one of "ROUTE53", "VPC_FLOW", "SH_FINDINGS", "CLOUD_TRAIL_MGMT", "LAMBDA_EXECUTION", "S3_DATA"
+    #   resp.subscriber.sources[0].aws_log_source.source_name #=> String, one of "ROUTE53", "VPC_FLOW", "SH_FINDINGS", "CLOUD_TRAIL_MGMT", "LAMBDA_EXECUTION", "S3_DATA", "EKS_AUDIT", "WAF"
     #   resp.subscriber.sources[0].aws_log_source.source_version #=> String
     #   resp.subscriber.sources[0].custom_log_source.attributes.crawler_arn #=> String
     #   resp.subscriber.sources[0].custom_log_source.attributes.database_arn #=> String
@@ -1296,8 +1296,7 @@ module Aws::SecurityLake
     #   pagination token will return an HTTP 400 InvalidToken error.
     #
     # @option params [Array<String>] :regions
-    #   List the Amazon Web Services Regions from which exceptions are
-    #   retrieved.
+    #   The Amazon Web Services Regions from which exceptions are retrieved.
     #
     # @return [Types::ListDataLakeExceptionsResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
@@ -1337,7 +1336,7 @@ module Aws::SecurityLake
     # determine whether Security Lake is enabled for a Region.
     #
     # @option params [Array<String>] :regions
-    #   The list of regions where Security Lake is enabled.
+    #   The list of Regions where Security Lake is enabled.
     #
     # @return [Types::ListDataLakesResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
@@ -1393,7 +1392,7 @@ module Aws::SecurityLake
     #   repeat the call using the returned token to retrieve the next page.
     #
     # @option params [Array<String>] :regions
-    #   The list of regions for which log sources are displayed.
+    #   The list of Regions for which log sources are displayed.
     #
     # @option params [Array<Types::LogSourceResource>] :sources
     #   The list of sources for which log sources are displayed.
@@ -1415,7 +1414,7 @@ module Aws::SecurityLake
     #     sources: [
     #       {
     #         aws_log_source: {
-    #           source_name: "ROUTE53", # accepts ROUTE53, VPC_FLOW, SH_FINDINGS, CLOUD_TRAIL_MGMT, LAMBDA_EXECUTION, S3_DATA
+    #           source_name: "ROUTE53", # accepts ROUTE53, VPC_FLOW, SH_FINDINGS, CLOUD_TRAIL_MGMT, LAMBDA_EXECUTION, S3_DATA, EKS_AUDIT, WAF
     #           source_version: "AwsLogSourceVersion",
     #         },
     #         custom_log_source: {
@@ -1442,7 +1441,7 @@ module Aws::SecurityLake
     #   resp.sources[0].account #=> String
     #   resp.sources[0].region #=> String
     #   resp.sources[0].sources #=> Array
-    #   resp.sources[0].sources[0].aws_log_source.source_name #=> String, one of "ROUTE53", "VPC_FLOW", "SH_FINDINGS", "CLOUD_TRAIL_MGMT", "LAMBDA_EXECUTION", "S3_DATA"
+    #   resp.sources[0].sources[0].aws_log_source.source_name #=> String, one of "ROUTE53", "VPC_FLOW", "SH_FINDINGS", "CLOUD_TRAIL_MGMT", "LAMBDA_EXECUTION", "S3_DATA", "EKS_AUDIT", "WAF"
     #   resp.sources[0].sources[0].aws_log_source.source_version #=> String
     #   resp.sources[0].sources[0].custom_log_source.attributes.crawler_arn #=> String
     #   resp.sources[0].sources[0].custom_log_source.attributes.database_arn #=> String
@@ -1499,7 +1498,7 @@ module Aws::SecurityLake
     #   resp.subscribers[0].role_arn #=> String
     #   resp.subscribers[0].s3_bucket_arn #=> String
     #   resp.subscribers[0].sources #=> Array
-    #   resp.subscribers[0].sources[0].aws_log_source.source_name #=> String, one of "ROUTE53", "VPC_FLOW", "SH_FINDINGS", "CLOUD_TRAIL_MGMT", "LAMBDA_EXECUTION", "S3_DATA"
+    #   resp.subscribers[0].sources[0].aws_log_source.source_name #=> String, one of "ROUTE53", "VPC_FLOW", "SH_FINDINGS", "CLOUD_TRAIL_MGMT", "LAMBDA_EXECUTION", "S3_DATA", "EKS_AUDIT", "WAF"
     #   resp.subscribers[0].sources[0].aws_log_source.source_version #=> String
     #   resp.subscribers[0].sources[0].custom_log_source.attributes.crawler_arn #=> String
     #   resp.subscribers[0].sources[0].custom_log_source.attributes.database_arn #=> String
@@ -1533,8 +1532,8 @@ module Aws::SecurityLake
     # Amazon Web Services Region.
     #
     # @option params [required, String] :resource_arn
-    #   The Amazon Resource Name (ARN) of the Amazon Security Lake resource to
-    #   retrieve the tags for.
+    #   The Amazon Resource Name (ARN) of the Amazon Security Lake resource
+    #   for which you want to retrieve the tags.
     #
     # @return [Types::ListTagsForResourceResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
@@ -1677,6 +1676,11 @@ module Aws::SecurityLake
     #   Specify the Region or Regions that will contribute data to the rollup
     #   region.
     #
+    # @option params [String] :meta_store_manager_role_arn
+    #   The Amazon Resource Name (ARN) used to create and update the Glue
+    #   table. This table contains partitions generated by the ingestion and
+    #   normalization of Amazon Web Services log sources and custom sources.
+    #
     # @return [Types::UpdateDataLakeResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::UpdateDataLakeResponse#data_lakes #data_lakes} => Array&lt;Types::DataLakeResource&gt;
@@ -1707,6 +1711,7 @@ module Aws::SecurityLake
     #         },
     #       },
     #     ],
+    #     meta_store_manager_role_arn: "RoleArn",
     #   })
     #
     # @example Response structure
@@ -1805,7 +1810,7 @@ module Aws::SecurityLake
     #     sources: [
     #       {
     #         aws_log_source: {
-    #           source_name: "ROUTE53", # accepts ROUTE53, VPC_FLOW, SH_FINDINGS, CLOUD_TRAIL_MGMT, LAMBDA_EXECUTION, S3_DATA
+    #           source_name: "ROUTE53", # accepts ROUTE53, VPC_FLOW, SH_FINDINGS, CLOUD_TRAIL_MGMT, LAMBDA_EXECUTION, S3_DATA, EKS_AUDIT, WAF
     #           source_version: "AwsLogSourceVersion",
     #         },
     #         custom_log_source: {
@@ -1842,7 +1847,7 @@ module Aws::SecurityLake
     #   resp.subscriber.role_arn #=> String
     #   resp.subscriber.s3_bucket_arn #=> String
     #   resp.subscriber.sources #=> Array
-    #   resp.subscriber.sources[0].aws_log_source.source_name #=> String, one of "ROUTE53", "VPC_FLOW", "SH_FINDINGS", "CLOUD_TRAIL_MGMT", "LAMBDA_EXECUTION", "S3_DATA"
+    #   resp.subscriber.sources[0].aws_log_source.source_name #=> String, one of "ROUTE53", "VPC_FLOW", "SH_FINDINGS", "CLOUD_TRAIL_MGMT", "LAMBDA_EXECUTION", "S3_DATA", "EKS_AUDIT", "WAF"
     #   resp.subscriber.sources[0].aws_log_source.source_version #=> String
     #   resp.subscriber.sources[0].custom_log_source.attributes.crawler_arn #=> String
     #   resp.subscriber.sources[0].custom_log_source.attributes.database_arn #=> String
@@ -1928,7 +1933,7 @@ module Aws::SecurityLake
         params: params,
         config: config)
       context[:gem_name] = 'aws-sdk-securitylake'
-      context[:gem_version] = '1.15.0'
+      context[:gem_version] = '1.17.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-securitylake/client_api.rb

@@ -208,7 +208,7 @@ module Aws::SecurityLake
     CreateAwsLogSourceResponse.add_member(:failed, Shapes::ShapeRef.new(shape: AccountList, location_name: "failed"))
     CreateAwsLogSourceResponse.struct_class = Types::CreateAwsLogSourceResponse
 
-    CreateCustomLogSourceRequest.add_member(:configuration, Shapes::ShapeRef.new(shape: CustomLogSourceConfiguration, location_name: "configuration"))
+    CreateCustomLogSourceRequest.add_member(:configuration, Shapes::ShapeRef.new(shape: CustomLogSourceConfiguration, required: true, location_name: "configuration"))
     CreateCustomLogSourceRequest.add_member(:event_classes, Shapes::ShapeRef.new(shape: OcsfEventClassList, location_name: "eventClasses"))
     CreateCustomLogSourceRequest.add_member(:source_name, Shapes::ShapeRef.new(shape: CustomLogSourceName, required: true, location_name: "sourceName"))
     CreateCustomLogSourceRequest.add_member(:source_version, Shapes::ShapeRef.new(shape: CustomLogSourceVersion, location_name: "sourceVersion"))
@@ -224,7 +224,7 @@ module Aws::SecurityLake
 
     CreateDataLakeExceptionSubscriptionResponse.struct_class = Types::CreateDataLakeExceptionSubscriptionResponse
 
-    CreateDataLakeOrganizationConfigurationRequest.add_member(:auto_enable_new_account, Shapes::ShapeRef.new(shape: DataLakeAutoEnableNewAccountConfigurationList, required: true, location_name: "autoEnableNewAccount"))
+    CreateDataLakeOrganizationConfigurationRequest.add_member(:auto_enable_new_account, Shapes::ShapeRef.new(shape: DataLakeAutoEnableNewAccountConfigurationList, location_name: "autoEnableNewAccount"))
     CreateDataLakeOrganizationConfigurationRequest.struct_class = Types::CreateDataLakeOrganizationConfigurationRequest
 
     CreateDataLakeOrganizationConfigurationResponse.struct_class = Types::CreateDataLakeOrganizationConfigurationResponse
@@ -370,7 +370,7 @@ module Aws::SecurityLake
 
     DeleteDataLakeExceptionSubscriptionResponse.struct_class = Types::DeleteDataLakeExceptionSubscriptionResponse
 
-    DeleteDataLakeOrganizationConfigurationRequest.add_member(:auto_enable_new_account, Shapes::ShapeRef.new(shape: DataLakeAutoEnableNewAccountConfigurationList, required: true, location_name: "autoEnableNewAccount"))
+    DeleteDataLakeOrganizationConfigurationRequest.add_member(:auto_enable_new_account, Shapes::ShapeRef.new(shape: DataLakeAutoEnableNewAccountConfigurationList, location_name: "autoEnableNewAccount"))
     DeleteDataLakeOrganizationConfigurationRequest.struct_class = Types::DeleteDataLakeOrganizationConfigurationRequest
 
     DeleteDataLakeOrganizationConfigurationResponse.struct_class = Types::DeleteDataLakeOrganizationConfigurationResponse
@@ -566,6 +566,7 @@ module Aws::SecurityLake
     UpdateDataLakeExceptionSubscriptionResponse.struct_class = Types::UpdateDataLakeExceptionSubscriptionResponse
 
     UpdateDataLakeRequest.add_member(:configurations, Shapes::ShapeRef.new(shape: DataLakeConfigurationList, required: true, location_name: "configurations"))
+    UpdateDataLakeRequest.add_member(:meta_store_manager_role_arn, Shapes::ShapeRef.new(shape: RoleArn, location_name: "metaStoreManagerRoleArn"))
     UpdateDataLakeRequest.struct_class = Types::UpdateDataLakeRequest
 
     UpdateDataLakeResponse.add_member(:data_lakes, Shapes::ShapeRef.new(shape: DataLakeResourceList, location_name: "dataLakes"))

data/lib/aws-sdk-securitylake/endpoint_provider.rb

@@ -32,7 +32,7 @@ module Aws::SecurityLake
             raise ArgumentError, "FIPS and DualStack are enabled, but this partition does not support one or both"
           end
           if Aws::Endpoints::Matchers.boolean_equals?(use_fips, true)
-            if Aws::Endpoints::Matchers.boolean_equals?(true, Aws::Endpoints::Matchers.attr(partition_result, "supportsFIPS"))
+            if Aws::Endpoints::Matchers.boolean_equals?(Aws::Endpoints::Matchers.attr(partition_result, "supportsFIPS"), true)
               return Aws::Endpoints::Endpoint.new(url: "https://securitylake-fips.#{region}.#{partition_result['dnsSuffix']}", headers: {}, properties: {})
             end
             raise ArgumentError, "FIPS is enabled but this partition does not support FIPS"

data/lib/aws-sdk-securitylake/types.rb

@@ -725,19 +725,28 @@ module Aws::SecurityLake
       include Aws::Structure
     end
 
-    # Provides replication details of Amazon Security Lake object.
+    # Provides replication details for objects stored in the Amazon Security
+    # Lake data lake.
     #
     # @!attribute [rw] regions
+    #   Specifies one or more centralized rollup Regions. The Amazon Web
+    #   Services Region specified in the `region` parameter of the [
+    #   `CreateDataLake` ][1] or [ `UpdateDataLake` ][2] operations
+    #   contributes data to the rollup Region or Regions specified in this
+    #   parameter.
+    #
     #   Replication enables automatic, asynchronous copying of objects
-    #   across Amazon S3 buckets. Amazon S3 buckets that are configured for
-    #   object replication can be owned by the same Amazon Web Services
-    #   account or by different accounts. You can replicate objects to a
-    #   single destination bucket or to multiple destination buckets. The
-    #   destination buckets can be in different Amazon Web Services Regions
-    #   or within the same Region as the source bucket.
-    #
-    #   Set up one or more rollup Regions by providing the Region or Regions
-    #   that should contribute to the central rollup Region.
+    #   across Amazon S3 buckets. S3 buckets that are configured for object
+    #   replication can be owned by the same Amazon Web Services account or
+    #   by different accounts. You can replicate objects to a single
+    #   destination bucket or to multiple destination buckets. The
+    #   destination buckets can be in different Regions or within the same
+    #   Region as the source bucket.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/security-lake/latest/APIReference/API_CreateDataLake.html
+    #   [2]: https://docs.aws.amazon.com/security-lake/latest/APIReference/API_UpdateDataLake.html
     #   @return [Array<String>]
     #
     # @!attribute [rw] role_arn
@@ -1327,8 +1336,7 @@ module Aws::SecurityLake
     #   @return [String]
     #
     # @!attribute [rw] regions
-    #   List the Amazon Web Services Regions from which exceptions are
-    #   retrieved.
+    #   The Amazon Web Services Regions from which exceptions are retrieved.
     #   @return [Array<String>]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securitylake-2018-05-10/ListDataLakeExceptionsRequest AWS API Documentation
@@ -1365,7 +1373,7 @@ module Aws::SecurityLake
     end
 
     # @!attribute [rw] regions
-    #   The list of regions where Security Lake is enabled.
+    #   The list of Regions where Security Lake is enabled.
     #   @return [Array<String>]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securitylake-2018-05-10/ListDataLakesRequest AWS API Documentation
@@ -1404,7 +1412,7 @@ module Aws::SecurityLake
     #   @return [String]
     #
     # @!attribute [rw] regions
-    #   The list of regions for which log sources are displayed.
+    #   The list of Regions for which log sources are displayed.
     #   @return [Array<String>]
     #
     # @!attribute [rw] sources
@@ -1482,7 +1490,7 @@ module Aws::SecurityLake
 
     # @!attribute [rw] resource_arn
     #   The Amazon Resource Name (ARN) of the Amazon Security Lake resource
-    #   to retrieve the tags for.
+    #   for which you want to retrieve the tags.
     #   @return [String]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securitylake-2018-05-10/ListTagsForResourceRequest AWS API Documentation
@@ -1913,10 +1921,17 @@ module Aws::SecurityLake
     #   rollup region.
     #   @return [Array<Types::DataLakeConfiguration>]
     #
+    # @!attribute [rw] meta_store_manager_role_arn
+    #   The Amazon Resource Name (ARN) used to create and update the Glue
+    #   table. This table contains partitions generated by the ingestion and
+    #   normalization of Amazon Web Services log sources and custom sources.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/securitylake-2018-05-10/UpdateDataLakeRequest AWS API Documentation
     #
     class UpdateDataLakeRequest < Struct.new(
-      :configurations)
+      :configurations,
+      :meta_store_manager_role_arn)
       SENSITIVE = []
       include Aws::Structure
     end

data/lib/aws-sdk-securitylake.rb

@@ -52,6 +52,6 @@ require_relative 'aws-sdk-securitylake/customizations'
 # @!group service
 module Aws::SecurityLake
 
-  GEM_VERSION = '1.15.0'
+  GEM_VERSION = '1.17.0'
 
 end

data/sig/client.rbs

@@ -82,7 +82,7 @@ module Aws
                                      {
                                        accounts: Array[::String]?,
                                        regions: Array[::String],
-                                       source_name: ("ROUTE53" | "VPC_FLOW" | "SH_FINDINGS" | "CLOUD_TRAIL_MGMT" | "LAMBDA_EXECUTION" | "S3_DATA"),
+                                       source_name: ("ROUTE53" | "VPC_FLOW" | "SH_FINDINGS" | "CLOUD_TRAIL_MGMT" | "LAMBDA_EXECUTION" | "S3_DATA" | "EKS_AUDIT" | "WAF"),
                                        source_version: ::String?
                                      },
                                    ]
@@ -95,7 +95,7 @@ module Aws
       end
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/SecurityLake/Client.html#create_custom_log_source-instance_method
       def create_custom_log_source: (
-                                      ?configuration: {
+                                      configuration: {
                                         crawler_configuration: {
                                           role_arn: ::String
                                         },
@@ -165,19 +165,19 @@ module Aws
       end
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/SecurityLake/Client.html#create_data_lake_organization_configuration-instance_method
       def create_data_lake_organization_configuration: (
-                                                         auto_enable_new_account: Array[
+                                                         ?auto_enable_new_account: Array[
                                                            {
                                                              region: ::String,
                                                              sources: Array[
                                                                {
-                                                                 source_name: ("ROUTE53" | "VPC_FLOW" | "SH_FINDINGS" | "CLOUD_TRAIL_MGMT" | "LAMBDA_EXECUTION" | "S3_DATA")?,
+                                                                 source_name: ("ROUTE53" | "VPC_FLOW" | "SH_FINDINGS" | "CLOUD_TRAIL_MGMT" | "LAMBDA_EXECUTION" | "S3_DATA" | "EKS_AUDIT" | "WAF")?,
                                                                  source_version: ::String?
                                                                },
                                                              ]
                                                            },
                                                          ]
                                                        ) -> _CreateDataLakeOrganizationConfigurationResponseSuccess
-                                                     | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _CreateDataLakeOrganizationConfigurationResponseSuccess
+                                                     | (?Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _CreateDataLakeOrganizationConfigurationResponseSuccess
 
       interface _CreateSubscriberResponseSuccess
         include ::Seahorse::Client::_ResponseSuccess[Types::CreateSubscriberResponse]
@@ -189,7 +189,7 @@ module Aws
                                sources: Array[
                                  {
                                    aws_log_source: {
-                                     source_name: ("ROUTE53" | "VPC_FLOW" | "SH_FINDINGS" | "CLOUD_TRAIL_MGMT" | "LAMBDA_EXECUTION" | "S3_DATA")?,
+                                     source_name: ("ROUTE53" | "VPC_FLOW" | "SH_FINDINGS" | "CLOUD_TRAIL_MGMT" | "LAMBDA_EXECUTION" | "S3_DATA" | "EKS_AUDIT" | "WAF")?,
                                      source_version: ::String?
                                    }?,
                                    custom_log_source: {
@@ -253,7 +253,7 @@ module Aws
                                      {
                                        accounts: Array[::String]?,
                                        regions: Array[::String],
-                                       source_name: ("ROUTE53" | "VPC_FLOW" | "SH_FINDINGS" | "CLOUD_TRAIL_MGMT" | "LAMBDA_EXECUTION" | "S3_DATA"),
+                                       source_name: ("ROUTE53" | "VPC_FLOW" | "SH_FINDINGS" | "CLOUD_TRAIL_MGMT" | "LAMBDA_EXECUTION" | "S3_DATA" | "EKS_AUDIT" | "WAF"),
                                        source_version: ::String?
                                      },
                                    ]
@@ -292,19 +292,19 @@ module Aws
       end
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/SecurityLake/Client.html#delete_data_lake_organization_configuration-instance_method
       def delete_data_lake_organization_configuration: (
-                                                         auto_enable_new_account: Array[
+                                                         ?auto_enable_new_account: Array[
                                                            {
                                                              region: ::String,
                                                              sources: Array[
                                                                {
-                                                                 source_name: ("ROUTE53" | "VPC_FLOW" | "SH_FINDINGS" | "CLOUD_TRAIL_MGMT" | "LAMBDA_EXECUTION" | "S3_DATA")?,
+                                                                 source_name: ("ROUTE53" | "VPC_FLOW" | "SH_FINDINGS" | "CLOUD_TRAIL_MGMT" | "LAMBDA_EXECUTION" | "S3_DATA" | "EKS_AUDIT" | "WAF")?,
                                                                  source_version: ::String?
                                                                },
                                                              ]
                                                            },
                                                          ]
                                                        ) -> _DeleteDataLakeOrganizationConfigurationResponseSuccess
-                                                     | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _DeleteDataLakeOrganizationConfigurationResponseSuccess
+                                                     | (?Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _DeleteDataLakeOrganizationConfigurationResponseSuccess
 
       interface _DeleteSubscriberResponseSuccess
         include ::Seahorse::Client::_ResponseSuccess[Types::DeleteSubscriberResponse]
@@ -413,7 +413,7 @@ module Aws
                               ?sources: Array[
                                 {
                                   aws_log_source: {
-                                    source_name: ("ROUTE53" | "VPC_FLOW" | "SH_FINDINGS" | "CLOUD_TRAIL_MGMT" | "LAMBDA_EXECUTION" | "S3_DATA")?,
+                                    source_name: ("ROUTE53" | "VPC_FLOW" | "SH_FINDINGS" | "CLOUD_TRAIL_MGMT" | "LAMBDA_EXECUTION" | "S3_DATA" | "EKS_AUDIT" | "WAF")?,
                                     source_version: ::String?
                                   }?,
                                   custom_log_source: {
@@ -518,7 +518,8 @@ module Aws
                                     role_arn: ::String?
                                   }?
                                 },
-                              ]
+                              ],
+                              ?meta_store_manager_role_arn: ::String
                             ) -> _UpdateDataLakeResponseSuccess
                           | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _UpdateDataLakeResponseSuccess
 
@@ -542,7 +543,7 @@ module Aws
                                ?sources: Array[
                                  {
                                    aws_log_source: {
-                                     source_name: ("ROUTE53" | "VPC_FLOW" | "SH_FINDINGS" | "CLOUD_TRAIL_MGMT" | "LAMBDA_EXECUTION" | "S3_DATA")?,
+                                     source_name: ("ROUTE53" | "VPC_FLOW" | "SH_FINDINGS" | "CLOUD_TRAIL_MGMT" | "LAMBDA_EXECUTION" | "S3_DATA" | "EKS_AUDIT" | "WAF")?,
                                      source_version: ::String?
                                    }?,
                                    custom_log_source: {

data/sig/types.rbs

@@ -23,13 +23,13 @@ module Aws::SecurityLake
     class AwsLogSourceConfiguration
       attr_accessor accounts: ::Array[::String]
       attr_accessor regions: ::Array[::String]
-      attr_accessor source_name: ("ROUTE53" | "VPC_FLOW" | "SH_FINDINGS" | "CLOUD_TRAIL_MGMT" | "LAMBDA_EXECUTION" | "S3_DATA")
+      attr_accessor source_name: ("ROUTE53" | "VPC_FLOW" | "SH_FINDINGS" | "CLOUD_TRAIL_MGMT" | "LAMBDA_EXECUTION" | "S3_DATA" | "EKS_AUDIT" | "WAF")
       attr_accessor source_version: ::String
       SENSITIVE: []
     end
 
     class AwsLogSourceResource
-      attr_accessor source_name: ("ROUTE53" | "VPC_FLOW" | "SH_FINDINGS" | "CLOUD_TRAIL_MGMT" | "LAMBDA_EXECUTION" | "S3_DATA")
+      attr_accessor source_name: ("ROUTE53" | "VPC_FLOW" | "SH_FINDINGS" | "CLOUD_TRAIL_MGMT" | "LAMBDA_EXECUTION" | "S3_DATA" | "EKS_AUDIT" | "WAF")
       attr_accessor source_version: ::String
       SENSITIVE: []
     end
@@ -541,6 +541,7 @@ module Aws::SecurityLake
 
     class UpdateDataLakeRequest
       attr_accessor configurations: ::Array[Types::DataLakeConfiguration]
+      attr_accessor meta_store_manager_role_arn: ::String
       SENSITIVE: []
     end
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-securitylake
 version: !ruby/object:Gem::Version
-  version: 1.15.0
+  version: 1.17.0
 platform: ruby
 authors:
 - Amazon Web Services
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2024-01-26 00:00:00.000000000 Z
+date: 2024-02-29 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-core