aws-sdk-shield 1.31.0 → 1.36.0

data/VERSION

@@ -0,0 +1 @@
+1.36.0

data/lib/aws-sdk-shield.rb

@@ -3,7 +3,7 @@
 # WARNING ABOUT GENERATED CODE
 #
 # This file is generated. See the contributing guide for more information:
-# https://github.com/aws/aws-sdk-ruby/blob/master/CONTRIBUTING.md
+# https://github.com/aws/aws-sdk-ruby/blob/version-3/CONTRIBUTING.md
 #
 # WARNING ABOUT GENERATED CODE
 
@@ -48,6 +48,6 @@ require_relative 'aws-sdk-shield/customizations'
 # @!group service
 module Aws::Shield
 
-  GEM_VERSION = '1.31.0'
+  GEM_VERSION = '1.36.0'
 
 end

data/lib/aws-sdk-shield/client.rb

@@ -3,7 +3,7 @@
 # WARNING ABOUT GENERATED CODE
 #
 # This file is generated. See the contributing guide for more information:
-# https://github.com/aws/aws-sdk-ruby/blob/master/CONTRIBUTING.md
+# https://github.com/aws/aws-sdk-ruby/blob/version-3/CONTRIBUTING.md
 #
 # WARNING ABOUT GENERATED CODE
 
@@ -583,6 +583,10 @@ module Aws::Shield
     #   * For an Elastic IP address:
     #     `arn:aws:ec2:region:account-id:eip-allocation/allocation-id `
     #
+    # @option params [Array<Types::Tag>] :tags
+    #   One or more tag key-value pairs for the Protection object that is
+    #   created.
+    #
     # @return [Types::CreateProtectionResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::CreateProtectionResponse#protection_id #protection_id} => String
@@ -592,6 +596,12 @@ module Aws::Shield
     #   resp = client.create_protection({
     #     name: "ProtectionName", # required
     #     resource_arn: "ResourceArn", # required
+    #     tags: [
+    #       {
+    #         key: "TagKey",
+    #         value: "TagValue",
+    #       },
+    #     ],
     #   })
     #
     # @example Response structure
@@ -607,6 +617,80 @@ module Aws::Shield
       req.send_request(options)
     end
 
+    # Creates a grouping of protected resources so they can be handled as a
+    # collective. This resource grouping improves the accuracy of detection
+    # and reduces false positives.
+    #
+    # @option params [required, String] :protection_group_id
+    #   The name of the protection group. You use this to identify the
+    #   protection group in lists and to manage the protection group, for
+    #   example to update, delete, or describe it.
+    #
+    # @option params [required, String] :aggregation
+    #   Defines how AWS Shield combines resource data for the group in order
+    #   to detect, mitigate, and report events.
+    #
+    #   * Sum - Use the total traffic across the group. This is a good choice
+    #     for most cases. Examples include Elastic IP addresses for EC2
+    #     instances that scale manually or automatically.
+    #
+    #   * Mean - Use the average of the traffic across the group. This is a
+    #     good choice for resources that share traffic uniformly. Examples
+    #     include accelerators and load balancers.
+    #
+    #   * Max - Use the highest traffic from each resource. This is useful for
+    #     resources that don't share traffic and for resources that share
+    #     that traffic in a non-uniform way. Examples include CloudFront
+    #     distributions and origin resources for CloudFront distributions.
+    #
+    # @option params [required, String] :pattern
+    #   The criteria to use to choose the protected resources for inclusion in
+    #   the group. You can include all resources that have protections,
+    #   provide a list of resource Amazon Resource Names (ARNs), or include
+    #   all resources of a specified resource type.
+    #
+    # @option params [String] :resource_type
+    #   The resource type to include in the protection group. All protected
+    #   resources of this type are included in the protection group. Newly
+    #   protected resources of this type are automatically added to the group.
+    #   You must set this when you set `Pattern` to `BY_RESOURCE_TYPE` and you
+    #   must not set it for any other `Pattern` setting.
+    #
+    # @option params [Array<String>] :members
+    #   The Amazon Resource Names (ARNs) of the resources to include in the
+    #   protection group. You must set this when you set `Pattern` to
+    #   `ARBITRARY` and you must not set it for any other `Pattern` setting.
+    #
+    # @option params [Array<Types::Tag>] :tags
+    #   One or more tag key-value pairs for the protection group.
+    #
+    # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.create_protection_group({
+    #     protection_group_id: "ProtectionGroupId", # required
+    #     aggregation: "SUM", # required, accepts SUM, MEAN, MAX
+    #     pattern: "ALL", # required, accepts ALL, ARBITRARY, BY_RESOURCE_TYPE
+    #     resource_type: "CLOUDFRONT_DISTRIBUTION", # accepts CLOUDFRONT_DISTRIBUTION, ROUTE_53_HOSTED_ZONE, ELASTIC_IP_ALLOCATION, CLASSIC_LOAD_BALANCER, APPLICATION_LOAD_BALANCER, GLOBAL_ACCELERATOR
+    #     members: ["ResourceArn"],
+    #     tags: [
+    #       {
+    #         key: "TagKey",
+    #         value: "TagValue",
+    #       },
+    #     ],
+    #   })
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/shield-2016-06-02/CreateProtectionGroup AWS API Documentation
+    #
+    # @overload create_protection_group(params = {})
+    # @param [Hash] params ({})
+    def create_protection_group(params = {}, options = {})
+      req = build_request(:create_protection_group, params)
+      req.send_request(options)
+    end
+
     # Activates AWS Shield Advanced for an account.
     #
     # When you initally create a subscription, your subscription is set to
@@ -647,6 +731,30 @@ module Aws::Shield
       req.send_request(options)
     end
 
+    # Removes the specified protection group.
+    #
+    # @option params [required, String] :protection_group_id
+    #   The name of the protection group. You use this to identify the
+    #   protection group in lists and to manage the protection group, for
+    #   example to update, delete, or describe it.
+    #
+    # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.delete_protection_group({
+    #     protection_group_id: "ProtectionGroupId", # required
+    #   })
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/shield-2016-06-02/DeleteProtectionGroup AWS API Documentation
+    #
+    # @overload delete_protection_group(params = {})
+    # @param [Hash] params ({})
+    def delete_protection_group(params = {}, options = {})
+      req = build_request(:delete_protection_group, params)
+      req.send_request(options)
+    end
+
     # Removes AWS Shield Advanced from an account. AWS Shield Advanced
     # requires a 1-year subscription commitment. You cannot delete a
     # subscription prior to the completion of that commitment.
@@ -729,6 +837,45 @@ module Aws::Shield
       req.send_request(options)
     end
 
+    # Provides information about the number and type of attacks AWS Shield
+    # has detected in the last year for all resources that belong to your
+    # account, regardless of whether you've defined Shield protections for
+    # them. This operation is available to Shield customers as well as to
+    # Shield Advanced customers.
+    #
+    # The operation returns data for the time range of midnight UTC, one
+    # year ago, to midnight UTC, today. For example, if the current time is
+    # `2020-10-26 15:39:32 PDT`, equal to `2020-10-26 22:39:32 UTC`, then
+    # the time range for the attack data returned is from `2019-10-26
+    # 00:00:00 UTC` to `2020-10-26 00:00:00 UTC`.
+    #
+    # The time range indicates the period covered by the attack statistics
+    # data items.
+    #
+    # @return [Types::DescribeAttackStatisticsResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::DescribeAttackStatisticsResponse#time_range #time_range} => Types::TimeRange
+    #   * {Types::DescribeAttackStatisticsResponse#data_items #data_items} => Array&lt;Types::AttackStatisticsDataItem&gt;
+    #
+    # @example Response structure
+    #
+    #   resp.time_range.from_inclusive #=> Time
+    #   resp.time_range.to_exclusive #=> Time
+    #   resp.data_items #=> Array
+    #   resp.data_items[0].attack_volume.bits_per_second.max #=> Float
+    #   resp.data_items[0].attack_volume.packets_per_second.max #=> Float
+    #   resp.data_items[0].attack_volume.requests_per_second.max #=> Float
+    #   resp.data_items[0].attack_count #=> Integer
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/shield-2016-06-02/DescribeAttackStatistics AWS API Documentation
+    #
+    # @overload describe_attack_statistics(params = {})
+    # @param [Hash] params ({})
+    def describe_attack_statistics(params = {}, options = {})
+      req = build_request(:describe_attack_statistics, params)
+      req.send_request(options)
+    end
+
     # Returns the current role and list of Amazon S3 log buckets used by the
     # DDoS Response Team (DRT) to access your AWS account while assisting
     # with attack mitigation.
@@ -809,6 +956,7 @@ module Aws::Shield
     #   resp.protection.resource_arn #=> String
     #   resp.protection.health_check_ids #=> Array
     #   resp.protection.health_check_ids[0] #=> String
+    #   resp.protection.protection_arn #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/shield-2016-06-02/DescribeProtection AWS API Documentation
     #
@@ -819,6 +967,42 @@ module Aws::Shield
       req.send_request(options)
     end
 
+    # Returns the specification for the specified protection group.
+    #
+    # @option params [required, String] :protection_group_id
+    #   The name of the protection group. You use this to identify the
+    #   protection group in lists and to manage the protection group, for
+    #   example to update, delete, or describe it.
+    #
+    # @return [Types::DescribeProtectionGroupResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::DescribeProtectionGroupResponse#protection_group #protection_group} => Types::ProtectionGroup
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.describe_protection_group({
+    #     protection_group_id: "ProtectionGroupId", # required
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.protection_group.protection_group_id #=> String
+    #   resp.protection_group.aggregation #=> String, one of "SUM", "MEAN", "MAX"
+    #   resp.protection_group.pattern #=> String, one of "ALL", "ARBITRARY", "BY_RESOURCE_TYPE"
+    #   resp.protection_group.resource_type #=> String, one of "CLOUDFRONT_DISTRIBUTION", "ROUTE_53_HOSTED_ZONE", "ELASTIC_IP_ALLOCATION", "CLASSIC_LOAD_BALANCER", "APPLICATION_LOAD_BALANCER", "GLOBAL_ACCELERATOR"
+    #   resp.protection_group.members #=> Array
+    #   resp.protection_group.members[0] #=> String
+    #   resp.protection_group.protection_group_arn #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/shield-2016-06-02/DescribeProtectionGroup AWS API Documentation
+    #
+    # @overload describe_protection_group(params = {})
+    # @param [Hash] params ({})
+    def describe_protection_group(params = {}, options = {})
+      req = build_request(:describe_protection_group, params)
+      req.send_request(options)
+    end
+
     # Provides details about the AWS Shield Advanced subscription for an
     # account.
     #
@@ -836,6 +1020,12 @@ module Aws::Shield
     #   resp.subscription.limits[0].type #=> String
     #   resp.subscription.limits[0].max #=> Integer
     #   resp.subscription.proactive_engagement_status #=> String, one of "ENABLED", "DISABLED", "PENDING"
+    #   resp.subscription.subscription_limits.protection_limits.protected_resource_type_limits #=> Array
+    #   resp.subscription.subscription_limits.protection_limits.protected_resource_type_limits[0].type #=> String
+    #   resp.subscription.subscription_limits.protection_limits.protected_resource_type_limits[0].max #=> Integer
+    #   resp.subscription.subscription_limits.protection_group_limits.max_protection_groups #=> Integer
+    #   resp.subscription.subscription_limits.protection_group_limits.pattern_type_limits.arbitrary_pattern_limits.max_members #=> Integer
+    #   resp.subscription.subscription_arn #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/shield-2016-06-02/DescribeSubscription AWS API Documentation
     #
@@ -1028,15 +1218,15 @@ module Aws::Shield
     #   `ListAttacksRequest`. Pass null if this is the first call.
     #
     # @option params [Integer] :max_results
-    #   The maximum number of AttackSummary objects to be returned. If this is
-    #   left blank, the first 20 results will be returned.
+    #   The maximum number of AttackSummary objects to return. If you leave
+    #   this blank, Shield Advanced returns the first 20 results.
     #
-    #   This is a maximum value; it is possible that AWS WAF will return the
-    #   results in smaller batches. That is, the number of AttackSummary
-    #   objects returned could be less than `MaxResults`, even if there are
-    #   still more AttackSummary objects yet to return. If there are more
-    #   AttackSummary objects to return, AWS WAF will always also return a
-    #   `NextToken`.
+    #   This is a maximum value. Shield Advanced might return the results in
+    #   smaller batches. That is, the number of objects returned could be less
+    #   than `MaxResults`, even if there are still more objects yet to return.
+    #   If there are more objects to return, Shield Advanced returns a value
+    #   in `NextToken` that you can use in your next request, to get the next
+    #   batch of objects.
     #
     # @return [Types::ListAttacksResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
@@ -1081,6 +1271,58 @@ module Aws::Shield
       req.send_request(options)
     end
 
+    # Retrieves the ProtectionGroup objects for the account.
+    #
+    # @option params [String] :next_token
+    #   The next token value from a previous call to `ListProtectionGroups`.
+    #   Pass null if this is the first call.
+    #
+    # @option params [Integer] :max_results
+    #   The maximum number of ProtectionGroup objects to return. If you leave
+    #   this blank, Shield Advanced returns the first 20 results.
+    #
+    #   This is a maximum value. Shield Advanced might return the results in
+    #   smaller batches. That is, the number of objects returned could be less
+    #   than `MaxResults`, even if there are still more objects yet to return.
+    #   If there are more objects to return, Shield Advanced returns a value
+    #   in `NextToken` that you can use in your next request, to get the next
+    #   batch of objects.
+    #
+    # @return [Types::ListProtectionGroupsResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::ListProtectionGroupsResponse#protection_groups #protection_groups} => Array&lt;Types::ProtectionGroup&gt;
+    #   * {Types::ListProtectionGroupsResponse#next_token #next_token} => String
+    #
+    # The returned {Seahorse::Client::Response response} is a pageable response and is Enumerable. For details on usage see {Aws::PageableResponse PageableResponse}.
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.list_protection_groups({
+    #     next_token: "Token",
+    #     max_results: 1,
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.protection_groups #=> Array
+    #   resp.protection_groups[0].protection_group_id #=> String
+    #   resp.protection_groups[0].aggregation #=> String, one of "SUM", "MEAN", "MAX"
+    #   resp.protection_groups[0].pattern #=> String, one of "ALL", "ARBITRARY", "BY_RESOURCE_TYPE"
+    #   resp.protection_groups[0].resource_type #=> String, one of "CLOUDFRONT_DISTRIBUTION", "ROUTE_53_HOSTED_ZONE", "ELASTIC_IP_ALLOCATION", "CLASSIC_LOAD_BALANCER", "APPLICATION_LOAD_BALANCER", "GLOBAL_ACCELERATOR"
+    #   resp.protection_groups[0].members #=> Array
+    #   resp.protection_groups[0].members[0] #=> String
+    #   resp.protection_groups[0].protection_group_arn #=> String
+    #   resp.next_token #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/shield-2016-06-02/ListProtectionGroups AWS API Documentation
+    #
+    # @overload list_protection_groups(params = {})
+    # @param [Hash] params ({})
+    def list_protection_groups(params = {}, options = {})
+      req = build_request(:list_protection_groups, params)
+      req.send_request(options)
+    end
+
     # Lists all Protection objects for the account.
     #
     # @option params [String] :next_token
@@ -1088,14 +1330,15 @@ module Aws::Shield
     #   `ListProtections`. Pass null if this is the first call.
     #
     # @option params [Integer] :max_results
-    #   The maximum number of Protection objects to be returned. If this is
-    #   left blank the first 20 results will be returned.
+    #   The maximum number of Protection objects to return. If you leave this
+    #   blank, Shield Advanced returns the first 20 results.
     #
-    #   This is a maximum value; it is possible that AWS WAF will return the
-    #   results in smaller batches. That is, the number of Protection objects
-    #   returned could be less than `MaxResults`, even if there are still more
-    #   Protection objects yet to return. If there are more Protection objects
-    #   to return, AWS WAF will always also return a `NextToken`.
+    #   This is a maximum value. Shield Advanced might return the results in
+    #   smaller batches. That is, the number of objects returned could be less
+    #   than `MaxResults`, even if there are still more objects yet to return.
+    #   If there are more objects to return, Shield Advanced returns a value
+    #   in `NextToken` that you can use in your next request, to get the next
+    #   batch of objects.
     #
     # @return [Types::ListProtectionsResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
@@ -1119,6 +1362,7 @@ module Aws::Shield
     #   resp.protections[0].resource_arn #=> String
     #   resp.protections[0].health_check_ids #=> Array
     #   resp.protections[0].health_check_ids[0] #=> String
+    #   resp.protections[0].protection_arn #=> String
     #   resp.next_token #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/shield-2016-06-02/ListProtections AWS API Documentation
@@ -1130,6 +1374,148 @@ module Aws::Shield
       req.send_request(options)
     end
 
+    # Retrieves the resources that are included in the protection group.
+    #
+    # @option params [required, String] :protection_group_id
+    #   The name of the protection group. You use this to identify the
+    #   protection group in lists and to manage the protection group, for
+    #   example to update, delete, or describe it.
+    #
+    # @option params [String] :next_token
+    #   The next token value from a previous call to
+    #   `ListResourcesInProtectionGroup`. Pass null if this is the first call.
+    #
+    # @option params [Integer] :max_results
+    #   The maximum number of resource ARN objects to return. If you leave
+    #   this blank, Shield Advanced returns the first 20 results.
+    #
+    #   This is a maximum value. Shield Advanced might return the results in
+    #   smaller batches. That is, the number of objects returned could be less
+    #   than `MaxResults`, even if there are still more objects yet to return.
+    #   If there are more objects to return, Shield Advanced returns a value
+    #   in `NextToken` that you can use in your next request, to get the next
+    #   batch of objects.
+    #
+    # @return [Types::ListResourcesInProtectionGroupResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::ListResourcesInProtectionGroupResponse#resource_arns #resource_arns} => Array&lt;String&gt;
+    #   * {Types::ListResourcesInProtectionGroupResponse#next_token #next_token} => String
+    #
+    # The returned {Seahorse::Client::Response response} is a pageable response and is Enumerable. For details on usage see {Aws::PageableResponse PageableResponse}.
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.list_resources_in_protection_group({
+    #     protection_group_id: "ProtectionGroupId", # required
+    #     next_token: "Token",
+    #     max_results: 1,
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.resource_arns #=> Array
+    #   resp.resource_arns[0] #=> String
+    #   resp.next_token #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/shield-2016-06-02/ListResourcesInProtectionGroup AWS API Documentation
+    #
+    # @overload list_resources_in_protection_group(params = {})
+    # @param [Hash] params ({})
+    def list_resources_in_protection_group(params = {}, options = {})
+      req = build_request(:list_resources_in_protection_group, params)
+      req.send_request(options)
+    end
+
+    # Gets information about AWS tags for a specified Amazon Resource Name
+    # (ARN) in AWS Shield.
+    #
+    # @option params [required, String] :resource_arn
+    #   The Amazon Resource Name (ARN) of the resource to get tags for.
+    #
+    # @return [Types::ListTagsForResourceResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::ListTagsForResourceResponse#tags #tags} => Array&lt;Types::Tag&gt;
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.list_tags_for_resource({
+    #     resource_arn: "ResourceArn", # required
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.tags #=> Array
+    #   resp.tags[0].key #=> String
+    #   resp.tags[0].value #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/shield-2016-06-02/ListTagsForResource AWS API Documentation
+    #
+    # @overload list_tags_for_resource(params = {})
+    # @param [Hash] params ({})
+    def list_tags_for_resource(params = {}, options = {})
+      req = build_request(:list_tags_for_resource, params)
+      req.send_request(options)
+    end
+
+    # Adds or updates tags for a resource in AWS Shield.
+    #
+    # @option params [required, String] :resource_arn
+    #   The Amazon Resource Name (ARN) of the resource that you want to add or
+    #   update tags for.
+    #
+    # @option params [required, Array<Types::Tag>] :tags
+    #   The tags that you want to modify or add to the resource.
+    #
+    # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.tag_resource({
+    #     resource_arn: "ResourceArn", # required
+    #     tags: [ # required
+    #       {
+    #         key: "TagKey",
+    #         value: "TagValue",
+    #       },
+    #     ],
+    #   })
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/shield-2016-06-02/TagResource AWS API Documentation
+    #
+    # @overload tag_resource(params = {})
+    # @param [Hash] params ({})
+    def tag_resource(params = {}, options = {})
+      req = build_request(:tag_resource, params)
+      req.send_request(options)
+    end
+
+    # Removes tags from a resource in AWS Shield.
+    #
+    # @option params [required, String] :resource_arn
+    #   The Amazon Resource Name (ARN) of the resource that you want to remove
+    #   tags from.
+    #
+    # @option params [required, Array<String>] :tag_keys
+    #   The tag key for each tag that you want to remove from the resource.
+    #
+    # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.untag_resource({
+    #     resource_arn: "ResourceArn", # required
+    #     tag_keys: ["TagKey"], # required
+    #   })
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/shield-2016-06-02/UntagResource AWS API Documentation
+    #
+    # @overload untag_resource(params = {})
+    # @param [Hash] params ({})
+    def untag_resource(params = {}, options = {})
+      req = build_request(:untag_resource, params)
+      req.send_request(options)
+    end
+
     # Updates the details of the list of email addresses and phone numbers
     # that the DDoS Response Team (DRT) can use to contact you if you have
     # proactive engagement enabled, for escalations to the DRT and to
@@ -1167,6 +1553,71 @@ module Aws::Shield
       req.send_request(options)
     end
 
+    # Updates an existing protection group. A protection group is a grouping
+    # of protected resources so they can be handled as a collective. This
+    # resource grouping improves the accuracy of detection and reduces false
+    # positives.
+    #
+    # @option params [required, String] :protection_group_id
+    #   The name of the protection group. You use this to identify the
+    #   protection group in lists and to manage the protection group, for
+    #   example to update, delete, or describe it.
+    #
+    # @option params [required, String] :aggregation
+    #   Defines how AWS Shield combines resource data for the group in order
+    #   to detect, mitigate, and report events.
+    #
+    #   * Sum - Use the total traffic across the group. This is a good choice
+    #     for most cases. Examples include Elastic IP addresses for EC2
+    #     instances that scale manually or automatically.
+    #
+    #   * Mean - Use the average of the traffic across the group. This is a
+    #     good choice for resources that share traffic uniformly. Examples
+    #     include accelerators and load balancers.
+    #
+    #   * Max - Use the highest traffic from each resource. This is useful for
+    #     resources that don't share traffic and for resources that share
+    #     that traffic in a non-uniform way. Examples include CloudFront
+    #     distributions and origin resources for CloudFront distributions.
+    #
+    # @option params [required, String] :pattern
+    #   The criteria to use to choose the protected resources for inclusion in
+    #   the group. You can include all resources that have protections,
+    #   provide a list of resource Amazon Resource Names (ARNs), or include
+    #   all resources of a specified resource type.
+    #
+    # @option params [String] :resource_type
+    #   The resource type to include in the protection group. All protected
+    #   resources of this type are included in the protection group. You must
+    #   set this when you set `Pattern` to `BY_RESOURCE_TYPE` and you must not
+    #   set it for any other `Pattern` setting.
+    #
+    # @option params [Array<String>] :members
+    #   The Amazon Resource Names (ARNs) of the resources to include in the
+    #   protection group. You must set this when you set `Pattern` to
+    #   `ARBITRARY` and you must not set it for any other `Pattern` setting.
+    #
+    # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.update_protection_group({
+    #     protection_group_id: "ProtectionGroupId", # required
+    #     aggregation: "SUM", # required, accepts SUM, MEAN, MAX
+    #     pattern: "ALL", # required, accepts ALL, ARBITRARY, BY_RESOURCE_TYPE
+    #     resource_type: "CLOUDFRONT_DISTRIBUTION", # accepts CLOUDFRONT_DISTRIBUTION, ROUTE_53_HOSTED_ZONE, ELASTIC_IP_ALLOCATION, CLASSIC_LOAD_BALANCER, APPLICATION_LOAD_BALANCER, GLOBAL_ACCELERATOR
+    #     members: ["ResourceArn"],
+    #   })
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/shield-2016-06-02/UpdateProtectionGroup AWS API Documentation
+    #
+    # @overload update_protection_group(params = {})
+    # @param [Hash] params ({})
+    def update_protection_group(params = {}, options = {})
+      req = build_request(:update_protection_group, params)
+      req.send_request(options)
+    end
+
     # Updates the details of an existing subscription. Only enter values for
     # parameters you want to change. Empty parameters are not updated.
     #
@@ -1208,7 +1659,7 @@ module Aws::Shield
         params: params,
         config: config)
       context[:gem_name] = 'aws-sdk-shield'
-      context[:gem_version] = '1.31.0'
+      context[:gem_version] = '1.36.0'
       Seahorse::Client::Request.new(handlers, context)
     end