aws-sdk-shield 1.37.0 → 1.38.0

Sign up to get free protection for your applications and to get access to all the features.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 879c6b88e06bd722d2015a9f8970f372ae2485a60775d7f7b02fd75797503fbf
4
- data.tar.gz: ca8a001ad6a7d3c4ae4470549cb87b5bc707166652634da9b6b7a4d20d1d1ae6
3
+ metadata.gz: 326588a64c345c4bcd07a2da9cd82f6b2533c105c4db833008ef39e72d9274da
4
+ data.tar.gz: e697b7c957fffbf4798d1287e09b217e947fb25a8980f059c53385fc65b6df41
5
5
  SHA512:
6
- metadata.gz: 22c72a55bc53073aa29422b028b6c8a2cdfb5157b49f9dbd1db75e62c5146c732f5b4562a8d36155cda5611486afb4fb3718406d64d3629cedf2e35f7c7a0627
7
- data.tar.gz: 8396bc9a95170b6d8a85876f0efec7202fe6b4d38364c2f9d86fd47cc47db6b45ecb77b5ad37473aa267d386c2f336b37305601ef4acc495fe16646ba5c94fde
6
+ metadata.gz: df6865b5f1bb201321fd3b2149de5e5f18a51fcb8479d28090cddedb108445eb6a1ebec7fcbcd79d02efdf83d2039688e048cef9dbfe52c45f0c00baab4a8377
7
+ data.tar.gz: 0b797117f138bdce1e50b7b453526913efccbb01372a7d677c80bb68e99d6815daeaa51cfb60106c4071bba37d3af43bef197cbb514d8bdf835f30e05f850ee3
data/CHANGELOG.md CHANGED
@@ -1,6 +1,11 @@
1
1
  Unreleased Changes
2
2
  ------------------
3
3
 
4
+ 1.38.0 (2021-07-27)
5
+ ------------------
6
+
7
+ * Feature - Change name of DDoS Response Team (DRT) to Shield Response Team (SRT)
8
+
4
9
  1.37.0 (2021-04-09)
5
10
  ------------------
6
11
 
data/VERSION CHANGED
@@ -1 +1 @@
1
- 1.37.0
1
+ 1.38.0
@@ -48,6 +48,6 @@ require_relative 'aws-sdk-shield/customizations'
48
48
  # @!group service
49
49
  module Aws::Shield
50
50
 
51
- GEM_VERSION = '1.37.0'
51
+ GEM_VERSION = '1.38.0'
52
52
 
53
53
  end
@@ -337,11 +337,12 @@ module Aws::Shield
337
337
 
338
338
  # @!group API Operations
339
339
 
340
- # Authorizes the DDoS Response Team (DRT) to access the specified Amazon
341
- # S3 bucket containing your AWS WAF logs. You can associate up to 10
342
- # Amazon S3 buckets with your subscription.
340
+ # Authorizes the Shield Response Team (SRT) to access the specified
341
+ # Amazon S3 bucket containing log data such as Application Load Balancer
342
+ # access logs, CloudFront logs, or logs from third party sources. You
343
+ # can associate up to 10 Amazon S3 buckets with your subscription.
343
344
  #
344
- # To use the services of the DRT and make an `AssociateDRTLogBucket`
345
+ # To use the services of the SRT and make an `AssociateDRTLogBucket`
345
346
  # request, you must be subscribed to the [Business Support plan][1] or
346
347
  # the [Enterprise Support plan][2].
347
348
  #
@@ -351,7 +352,7 @@ module Aws::Shield
351
352
  # [2]: https://aws.amazon.com/premiumsupport/enterprise-support/
352
353
  #
353
354
  # @option params [required, String] :log_bucket
354
- # The Amazon S3 bucket that contains your AWS WAF logs.
355
+ # The Amazon S3 bucket that contains the logs that you want to share.
355
356
  #
356
357
  # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
357
358
  #
@@ -370,10 +371,10 @@ module Aws::Shield
370
371
  req.send_request(options)
371
372
  end
372
373
 
373
- # Authorizes the DDoS Response Team (DRT), using the specified role, to
374
- # access your AWS account to assist with DDoS attack mitigation during
375
- # potential attacks. This enables the DRT to inspect your AWS WAF
376
- # configuration and create or update AWS WAF rules and web ACLs.
374
+ # Authorizes the Shield Response Team (SRT) using the specified role, to
375
+ # access your Amazon Web Services account to assist with DDoS attack
376
+ # mitigation during potential attacks. This enables the SRT to inspect
377
+ # your WAF configuration and create or update WAF rules and web ACLs.
377
378
  #
378
379
  # You can associate only one `RoleArn` with your subscription. If you
379
380
  # submit an `AssociateDRTRole` request for an account that already has
@@ -389,17 +390,17 @@ module Aws::Shield
389
390
  # drt.shield.amazonaws.com`. For more information, see [IAM JSON Policy
390
391
  # Elements: Principal][2].
391
392
  #
392
- # The DRT will have access only to your AWS WAF and Shield resources. By
393
- # submitting this request, you authorize the DRT to inspect your AWS WAF
394
- # and Shield configuration and create and update AWS WAF rules and web
395
- # ACLs on your behalf. The DRT takes these actions only if explicitly
396
- # authorized by you.
393
+ # The SRT will have access only to your WAF and Shield resources. By
394
+ # submitting this request, you authorize the SRT to inspect your WAF and
395
+ # Shield configuration and create and update WAF rules and web ACLs on
396
+ # your behalf. The SRT takes these actions only if explicitly authorized
397
+ # by you.
397
398
  #
398
399
  # You must have the `iam:PassRole` permission to make an
399
400
  # `AssociateDRTRole` request. For more information, see [Granting a User
400
- # Permissions to Pass a Role to an AWS Service][3].
401
+ # Permissions to Pass a Role to an Amazon Web Services Service][3].
401
402
  #
402
- # To use the services of the DRT and make an `AssociateDRTRole` request,
403
+ # To use the services of the SRT and make an `AssociateDRTRole` request,
403
404
  # you must be subscribed to the [Business Support plan][4] or the
404
405
  # [Enterprise Support plan][5].
405
406
  #
@@ -412,8 +413,8 @@ module Aws::Shield
412
413
  # [5]: https://aws.amazon.com/premiumsupport/enterprise-support/
413
414
  #
414
415
  # @option params [required, String] :role_arn
415
- # The Amazon Resource Name (ARN) of the role the DRT will use to access
416
- # your AWS account.
416
+ # The Amazon Resource Name (ARN) of the role the SRT will use to access
417
+ # your Amazon Web Services account.
417
418
  #
418
419
  # Prior to making the `AssociateDRTRole` request, you must attach the
419
420
  # [AWSShieldDRTAccessPolicy][1] managed policy to this role. For more
@@ -443,18 +444,16 @@ module Aws::Shield
443
444
 
444
445
  # Adds health-based detection to the Shield Advanced protection for a
445
446
  # resource. Shield Advanced health-based detection uses the health of
446
- # your AWS resource to improve responsiveness and accuracy in attack
447
- # detection and mitigation.
447
+ # your Amazon Web Services resource to improve responsiveness and
448
+ # accuracy in attack detection and mitigation.
448
449
  #
449
450
  # You define the health check in Route 53 and then associate it with
450
451
  # your Shield Advanced protection. For more information, see [Shield
451
- # Advanced Health-Based Detection][1] in the [AWS WAF and AWS Shield
452
- # Developer Guide][2].
452
+ # Advanced Health-Based Detection][1] in the *WAF Developer Guide*.
453
453
  #
454
454
  #
455
455
  #
456
456
  # [1]: https://docs.aws.amazon.com/waf/latest/developerguide/ddos-overview.html#ddos-advanced-health-check-option
457
- # [2]: https://docs.aws.amazon.com/waf/latest/developerguide/
458
457
  #
459
458
  # @option params [required, String] :protection_id
460
459
  # The unique identifier (ID) for the Protection object to add the health
@@ -483,7 +482,7 @@ module Aws::Shield
483
482
  end
484
483
 
485
484
  # Initializes proactive engagement and sets the list of contacts for the
486
- # DDoS Response Team (DRT) to use. You must provide at least one phone
485
+ # Shield Response Team (SRT) to use. You must provide at least one phone
487
486
  # number in the emergency contact list.
488
487
  #
489
488
  # After you have initialized proactive engagement using this call, to
@@ -491,8 +490,8 @@ module Aws::Shield
491
490
  # `DisableProactiveEngagement` and `EnableProactiveEngagement`.
492
491
  #
493
492
  # <note markdown="1"> This call defines the list of email addresses and phone numbers that
494
- # the DDoS Response Team (DRT) can use to contact you for escalations to
495
- # the DRT and to initiate proactive customer support.
493
+ # the SRT can use to contact you for escalations to the SRT and to
494
+ # initiate proactive customer support.
496
495
  #
497
496
  # The contacts that you provide in the request replace any contacts that
498
497
  # were already defined. If you already have contacts defined and want to
@@ -502,8 +501,8 @@ module Aws::Shield
502
501
  # </note>
503
502
  #
504
503
  # @option params [required, Array<Types::EmergencyContact>] :emergency_contact_list
505
- # A list of email addresses and phone numbers that the DDoS Response
506
- # Team (DRT) can use to contact you for escalations to the DRT and to
504
+ # A list of email addresses and phone numbers that the Shield Response
505
+ # Team (SRT) can use to contact you for escalations to the SRT and to
507
506
  # initiate proactive customer support.
508
507
  #
509
508
  # To enable proactive engagement, the contact list must include at least
@@ -539,16 +538,16 @@ module Aws::Shield
539
538
  req.send_request(options)
540
539
  end
541
540
 
542
- # Enables AWS Shield Advanced for a specific AWS resource. The resource
543
- # can be an Amazon CloudFront distribution, Elastic Load Balancing load
544
- # balancer, AWS Global Accelerator accelerator, Elastic IP Address, or
545
- # an Amazon Route 53 hosted zone.
541
+ # Enables Shield Advanced for a specific Amazon Web Services resource.
542
+ # The resource can be an Amazon CloudFront distribution, Elastic Load
543
+ # Balancing load balancer, Global Accelerator accelerator, Elastic IP
544
+ # Address, or an Amazon Route 53 hosted zone.
546
545
  #
547
546
  # You can add protection to only a single resource with each
548
547
  # CreateProtection request. If you want to add protection to multiple
549
- # resources at once, use the [AWS WAF console][1]. For more information
550
- # see [Getting Started with AWS Shield Advanced][2] and [Add AWS Shield
551
- # Advanced Protection to more AWS Resources][3].
548
+ # resources at once, use the [WAF console][1]. For more information see
549
+ # [Getting Started with Shield Advanced][2] and [Add Shield Advanced
550
+ # Protection to more Amazon Web Services Resources][3].
552
551
  #
553
552
  #
554
553
  #
@@ -572,10 +571,10 @@ module Aws::Shield
572
571
  # `arn:aws:elasticloadbalancing:region:account-id:loadbalancer/load-balancer-name
573
572
  # `
574
573
  #
575
- # * For an AWS CloudFront distribution:
574
+ # * For an Amazon CloudFront distribution:
576
575
  # `arn:aws:cloudfront::account-id:distribution/distribution-id `
577
576
  #
578
- # * For an AWS Global Accelerator accelerator:
577
+ # * For an Global Accelerator accelerator:
579
578
  # `arn:aws:globalaccelerator::account-id:accelerator/accelerator-id `
580
579
  #
581
580
  # * For Amazon Route 53: `arn:aws:route53:::hostedzone/hosted-zone-id `
@@ -627,8 +626,8 @@ module Aws::Shield
627
626
  # example to update, delete, or describe it.
628
627
  #
629
628
  # @option params [required, String] :aggregation
630
- # Defines how AWS Shield combines resource data for the group in order
631
- # to detect, mitigate, and report events.
629
+ # Defines how Shield combines resource data for the group in order to
630
+ # detect, mitigate, and report events.
632
631
  #
633
632
  # * Sum - Use the total traffic across the group. This is a good choice
634
633
  # for most cases. Examples include Elastic IP addresses for EC2
@@ -640,8 +639,8 @@ module Aws::Shield
640
639
  #
641
640
  # * Max - Use the highest traffic from each resource. This is useful for
642
641
  # resources that don't share traffic and for resources that share
643
- # that traffic in a non-uniform way. Examples include CloudFront
644
- # distributions and origin resources for CloudFront distributions.
642
+ # that traffic in a non-uniform way. Examples include Amazon
643
+ # CloudFront and origin resources for CloudFront distributions.
645
644
  #
646
645
  # @option params [required, String] :pattern
647
646
  # The criteria to use to choose the protected resources for inclusion in
@@ -691,7 +690,7 @@ module Aws::Shield
691
690
  req.send_request(options)
692
691
  end
693
692
 
694
- # Activates AWS Shield Advanced for an account.
693
+ # Activates Shield Advanced for an account.
695
694
  #
696
695
  # When you initally create a subscription, your subscription is set to
697
696
  # be automatically renewed at the end of the existing subscription
@@ -709,7 +708,7 @@ module Aws::Shield
709
708
  req.send_request(options)
710
709
  end
711
710
 
712
- # Deletes an AWS Shield Advanced Protection.
711
+ # Deletes an Shield Advanced Protection.
713
712
  #
714
713
  # @option params [required, String] :protection_id
715
714
  # The unique identifier (ID) for the Protection object to be deleted.
@@ -755,9 +754,9 @@ module Aws::Shield
755
754
  req.send_request(options)
756
755
  end
757
756
 
758
- # Removes AWS Shield Advanced from an account. AWS Shield Advanced
759
- # requires a 1-year subscription commitment. You cannot delete a
760
- # subscription prior to the completion of that commitment.
757
+ # Removes Shield Advanced from an account. Shield Advanced requires a
758
+ # 1-year subscription commitment. You cannot delete a subscription prior
759
+ # to the completion of that commitment.
761
760
  #
762
761
  # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
763
762
  #
@@ -837,8 +836,8 @@ module Aws::Shield
837
836
  req.send_request(options)
838
837
  end
839
838
 
840
- # Provides information about the number and type of attacks AWS Shield
841
- # has detected in the last year for all resources that belong to your
839
+ # Provides information about the number and type of attacks Shield has
840
+ # detected in the last year for all resources that belong to your
842
841
  # account, regardless of whether you've defined Shield protections for
843
842
  # them. This operation is available to Shield customers as well as to
844
843
  # Shield Advanced customers.
@@ -877,8 +876,8 @@ module Aws::Shield
877
876
  end
878
877
 
879
878
  # Returns the current role and list of Amazon S3 log buckets used by the
880
- # DDoS Response Team (DRT) to access your AWS account while assisting
881
- # with attack mitigation.
879
+ # Shield Response Team (SRT) to access your Amazon Web Services account
880
+ # while assisting with attack mitigation.
882
881
  #
883
882
  # @return [Types::DescribeDRTAccessResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
884
883
  #
@@ -900,9 +899,9 @@ module Aws::Shield
900
899
  req.send_request(options)
901
900
  end
902
901
 
903
- # A list of email addresses and phone numbers that the DDoS Response
904
- # Team (DRT) can use to contact you if you have proactive engagement
905
- # enabled, for escalations to the DRT and to initiate proactive customer
902
+ # A list of email addresses and phone numbers that the Shield Response
903
+ # Team (SRT) can use to contact you if you have proactive engagement
904
+ # enabled, for escalations to the SRT and to initiate proactive customer
906
905
  # support.
907
906
  #
908
907
  # @return [Types::DescribeEmergencyContactSettingsResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
@@ -933,10 +932,10 @@ module Aws::Shield
933
932
  # provide either the `ResourceArn` or the `ProtectionID`, but not both.
934
933
  #
935
934
  # @option params [String] :resource_arn
936
- # The ARN (Amazon Resource Name) of the AWS resource for the Protection
937
- # object that is described. When submitting the `DescribeProtection`
938
- # request you must provide either the `ResourceArn` or the
939
- # `ProtectionID`, but not both.
935
+ # The ARN (Amazon Resource Name) of the Amazon Web Services resource for
936
+ # the Protection object that is described. When submitting the
937
+ # `DescribeProtection` request you must provide either the `ResourceArn`
938
+ # or the `ProtectionID`, but not both.
940
939
  #
941
940
  # @return [Types::DescribeProtectionResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
942
941
  #
@@ -1003,7 +1002,7 @@ module Aws::Shield
1003
1002
  req.send_request(options)
1004
1003
  end
1005
1004
 
1006
- # Provides details about the AWS Shield Advanced subscription for an
1005
+ # Provides details about the Shield Advanced subscription for an
1007
1006
  # account.
1008
1007
  #
1009
1008
  # @return [Types::DescribeSubscriptionResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
@@ -1036,8 +1035,8 @@ module Aws::Shield
1036
1035
  req.send_request(options)
1037
1036
  end
1038
1037
 
1039
- # Removes authorization from the DDoS Response Team (DRT) to notify
1040
- # contacts about escalations to the DRT and to initiate proactive
1038
+ # Removes authorization from the Shield Response Team (SRT) to notify
1039
+ # contacts about escalations to the SRT and to initiate proactive
1041
1040
  # customer support.
1042
1041
  #
1043
1042
  # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
@@ -1051,13 +1050,13 @@ module Aws::Shield
1051
1050
  req.send_request(options)
1052
1051
  end
1053
1052
 
1054
- # Removes the DDoS Response Team's (DRT) access to the specified Amazon
1055
- # S3 bucket containing your AWS WAF logs.
1053
+ # Removes the Shield Response Team's (SRT) access to the specified
1054
+ # Amazon S3 bucket containing the logs that you shared previously.
1056
1055
  #
1057
1056
  # To make a `DisassociateDRTLogBucket` request, you must be subscribed
1058
1057
  # to the [Business Support plan][1] or the [Enterprise Support plan][2].
1059
1058
  # However, if you are not subscribed to one of these support plans, but
1060
- # had been previously and had granted the DRT access to your account,
1059
+ # had been previously and had granted the SRT access to your account,
1061
1060
  # you can submit a `DisassociateDRTLogBucket` request to remove this
1062
1061
  # access.
1063
1062
  #
@@ -1067,7 +1066,7 @@ module Aws::Shield
1067
1066
  # [2]: https://aws.amazon.com/premiumsupport/enterprise-support/
1068
1067
  #
1069
1068
  # @option params [required, String] :log_bucket
1070
- # The Amazon S3 bucket that contains your AWS WAF logs.
1069
+ # The Amazon S3 bucket that contains the logs that you want to share.
1071
1070
  #
1072
1071
  # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
1073
1072
  #
@@ -1086,12 +1085,13 @@ module Aws::Shield
1086
1085
  req.send_request(options)
1087
1086
  end
1088
1087
 
1089
- # Removes the DDoS Response Team's (DRT) access to your AWS account.
1088
+ # Removes the Shield Response Team's (SRT) access to your Amazon Web
1089
+ # Services account.
1090
1090
  #
1091
1091
  # To make a `DisassociateDRTRole` request, you must be subscribed to the
1092
1092
  # [Business Support plan][1] or the [Enterprise Support plan][2].
1093
1093
  # However, if you are not subscribed to one of these support plans, but
1094
- # had been previously and had granted the DRT access to your account,
1094
+ # had been previously and had granted the SRT access to your account,
1095
1095
  # you can submit a `DisassociateDRTRole` request to remove this access.
1096
1096
  #
1097
1097
  #
@@ -1112,18 +1112,17 @@ module Aws::Shield
1112
1112
 
1113
1113
  # Removes health-based detection from the Shield Advanced protection for
1114
1114
  # a resource. Shield Advanced health-based detection uses the health of
1115
- # your AWS resource to improve responsiveness and accuracy in attack
1116
- # detection and mitigation.
1115
+ # your Amazon Web Services resource to improve responsiveness and
1116
+ # accuracy in attack detection and mitigation.
1117
1117
  #
1118
1118
  # You define the health check in Route 53 and then associate or
1119
1119
  # disassociate it with your Shield Advanced protection. For more
1120
1120
  # information, see [Shield Advanced Health-Based Detection][1] in the
1121
- # [AWS WAF and AWS Shield Developer Guide][2].
1121
+ # *WAF Developer Guide*.
1122
1122
  #
1123
1123
  #
1124
1124
  #
1125
1125
  # [1]: https://docs.aws.amazon.com/waf/latest/developerguide/ddos-overview.html#ddos-advanced-health-check-option
1126
- # [2]: https://docs.aws.amazon.com/waf/latest/developerguide/
1127
1126
  #
1128
1127
  # @option params [required, String] :protection_id
1129
1128
  # The unique identifier (ID) for the Protection object to remove the
@@ -1151,8 +1150,8 @@ module Aws::Shield
1151
1150
  req.send_request(options)
1152
1151
  end
1153
1152
 
1154
- # Authorizes the DDoS Response Team (DRT) to use email and phone to
1155
- # notify contacts about escalations to the DRT and to initiate proactive
1153
+ # Authorizes the Shield Response Team (SRT) to use email and phone to
1154
+ # notify contacts about escalations to the SRT and to initiate proactive
1156
1155
  # customer support.
1157
1156
  #
1158
1157
  # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
@@ -1426,8 +1425,8 @@ module Aws::Shield
1426
1425
  req.send_request(options)
1427
1426
  end
1428
1427
 
1429
- # Gets information about AWS tags for a specified Amazon Resource Name
1430
- # (ARN) in AWS Shield.
1428
+ # Gets information about Amazon Web Services tags for a specified Amazon
1429
+ # Resource Name (ARN) in Shield.
1431
1430
  #
1432
1431
  # @option params [required, String] :resource_arn
1433
1432
  # The Amazon Resource Name (ARN) of the resource to get tags for.
@@ -1457,7 +1456,7 @@ module Aws::Shield
1457
1456
  req.send_request(options)
1458
1457
  end
1459
1458
 
1460
- # Adds or updates tags for a resource in AWS Shield.
1459
+ # Adds or updates tags for a resource in Shield.
1461
1460
  #
1462
1461
  # @option params [required, String] :resource_arn
1463
1462
  # The Amazon Resource Name (ARN) of the resource that you want to add or
@@ -1489,7 +1488,7 @@ module Aws::Shield
1489
1488
  req.send_request(options)
1490
1489
  end
1491
1490
 
1492
- # Removes tags from a resource in AWS Shield.
1491
+ # Removes tags from a resource in Shield.
1493
1492
  #
1494
1493
  # @option params [required, String] :resource_arn
1495
1494
  # The Amazon Resource Name (ARN) of the resource that you want to remove
@@ -1517,14 +1516,14 @@ module Aws::Shield
1517
1516
  end
1518
1517
 
1519
1518
  # Updates the details of the list of email addresses and phone numbers
1520
- # that the DDoS Response Team (DRT) can use to contact you if you have
1521
- # proactive engagement enabled, for escalations to the DRT and to
1519
+ # that the Shield Response Team (SRT) can use to contact you if you have
1520
+ # proactive engagement enabled, for escalations to the SRT and to
1522
1521
  # initiate proactive customer support.
1523
1522
  #
1524
1523
  # @option params [Array<Types::EmergencyContact>] :emergency_contact_list
1525
- # A list of email addresses and phone numbers that the DDoS Response
1526
- # Team (DRT) can use to contact you if you have proactive engagement
1527
- # enabled, for escalations to the DRT and to initiate proactive customer
1524
+ # A list of email addresses and phone numbers that the Shield Response
1525
+ # Team (SRT) can use to contact you if you have proactive engagement
1526
+ # enabled, for escalations to the SRT and to initiate proactive customer
1528
1527
  # support.
1529
1528
  #
1530
1529
  # If you have proactive engagement enabled, the contact list must
@@ -1564,8 +1563,8 @@ module Aws::Shield
1564
1563
  # example to update, delete, or describe it.
1565
1564
  #
1566
1565
  # @option params [required, String] :aggregation
1567
- # Defines how AWS Shield combines resource data for the group in order
1568
- # to detect, mitigate, and report events.
1566
+ # Defines how Shield combines resource data for the group in order to
1567
+ # detect, mitigate, and report events.
1569
1568
  #
1570
1569
  # * Sum - Use the total traffic across the group. This is a good choice
1571
1570
  # for most cases. Examples include Elastic IP addresses for EC2
@@ -1577,8 +1576,9 @@ module Aws::Shield
1577
1576
  #
1578
1577
  # * Max - Use the highest traffic from each resource. This is useful for
1579
1578
  # resources that don't share traffic and for resources that share
1580
- # that traffic in a non-uniform way. Examples include CloudFront
1581
- # distributions and origin resources for CloudFront distributions.
1579
+ # that traffic in a non-uniform way. Examples include Amazon
1580
+ # CloudFront distributions and origin resources for CloudFront
1581
+ # distributions.
1582
1582
  #
1583
1583
  # @option params [required, String] :pattern
1584
1584
  # The criteria to use to choose the protected resources for inclusion in
@@ -1659,7 +1659,7 @@ module Aws::Shield
1659
1659
  params: params,
1660
1660
  config: config)
1661
1661
  context[:gem_name] = 'aws-sdk-shield'
1662
- context[:gem_version] = '1.37.0'
1662
+ context[:gem_version] = '1.38.0'
1663
1663
  Seahorse::Client::Request.new(handlers, context)
1664
1664
  end
1665
1665
 
@@ -25,11 +25,11 @@ module Aws::Shield
25
25
  include Aws::Structure
26
26
  end
27
27
 
28
- # In order to grant the necessary access to the DDoS Response Team
29
- # (DRT), the user submitting the request must have the `iam:PassRole`
28
+ # In order to grant the necessary access to the Shield Response Team
29
+ # (SRT) the user submitting the request must have the `iam:PassRole`
30
30
  # permission. This error indicates the user did not have the appropriate
31
31
  # permissions. For more information, see [Granting a User Permissions to
32
- # Pass a Role to an AWS Service][1].
32
+ # Pass a Role to an Amazon Web Services Service][1].
33
33
  #
34
34
  #
35
35
  #
@@ -54,7 +54,7 @@ module Aws::Shield
54
54
  # }
55
55
  #
56
56
  # @!attribute [rw] log_bucket
57
- # The Amazon S3 bucket that contains your AWS WAF logs.
57
+ # The Amazon S3 bucket that contains the logs that you want to share.
58
58
  # @return [String]
59
59
  #
60
60
  # @see http://docs.aws.amazon.com/goto/WebAPI/shield-2016-06-02/AssociateDRTLogBucketRequest AWS API Documentation
@@ -77,8 +77,8 @@ module Aws::Shield
77
77
  # }
78
78
  #
79
79
  # @!attribute [rw] role_arn
80
- # The Amazon Resource Name (ARN) of the role the DRT will use to
81
- # access your AWS account.
80
+ # The Amazon Resource Name (ARN) of the role the SRT will use to
81
+ # access your Amazon Web Services account.
82
82
  #
83
83
  # Prior to making the `AssociateDRTRole` request, you must attach the
84
84
  # [AWSShieldDRTAccessPolicy][1] managed policy to this role. For more
@@ -147,8 +147,8 @@ module Aws::Shield
147
147
  # }
148
148
  #
149
149
  # @!attribute [rw] emergency_contact_list
150
- # A list of email addresses and phone numbers that the DDoS Response
151
- # Team (DRT) can use to contact you for escalations to the DRT and to
150
+ # A list of email addresses and phone numbers that the Shield Response
151
+ # Team (SRT) can use to contact you for escalations to the SRT and to
152
152
  # initiate proactive customer support.
153
153
  #
154
154
  # To enable proactive engagement, the contact list must include at
@@ -213,7 +213,16 @@ module Aws::Shield
213
213
  # @return [Array<Types::SummarizedCounter>]
214
214
  #
215
215
  # @!attribute [rw] attack_properties
216
- # The array of AttackProperty objects.
216
+ # The array of objects that provide details of the Shield event.
217
+ #
218
+ # For infrastructure layer events (L3 and L4 events) after January 25,
219
+ # 2021, you can view metrics for top contributors in Amazon CloudWatch
220
+ # metrics. For more information, see [Shield metrics and alarms][1] in
221
+ # the *WAF Developer Guide*.
222
+ #
223
+ #
224
+ #
225
+ # [1]: https://docs.aws.amazon.com/waf/latest/developerguide/monitoring-cloudwatch.html#set-ddos-alarms
217
226
  # @return [Array<Types::AttackProperty>]
218
227
  #
219
228
  # @!attribute [rw] mitigations
@@ -235,33 +244,41 @@ module Aws::Shield
235
244
  include Aws::Structure
236
245
  end
237
246
 
238
- # Details of the described attack.
247
+ # Details of a Shield event. This is provided as part of an
248
+ # AttackDetail.
239
249
  #
240
250
  # @!attribute [rw] attack_layer
241
- # The type of distributed denial of service (DDoS) event that was
242
- # observed. `NETWORK` indicates layer 3 and layer 4 events and
243
- # `APPLICATION` indicates layer 7 events.
251
+ # The type of Shield event that was observed. `NETWORK` indicates
252
+ # layer 3 and layer 4 events and `APPLICATION` indicates layer 7
253
+ # events.
254
+ #
255
+ # For infrastructure layer events (L3 and L4 events) after January 25,
256
+ # 2021, you can view metrics for top contributors in Amazon CloudWatch
257
+ # metrics. For more information, see [Shield metrics and alarms][1] in
258
+ # the *WAF Developer Guide*.
259
+ #
260
+ #
261
+ #
262
+ # [1]: https://docs.aws.amazon.com/waf/latest/developerguide/monitoring-cloudwatch.html#set-ddos-alarms
244
263
  # @return [String]
245
264
  #
246
265
  # @!attribute [rw] attack_property_identifier
247
- # Defines the DDoS attack property information that is provided. The
266
+ # Defines the Shield event property information that is provided. The
248
267
  # `WORDPRESS_PINGBACK_REFLECTOR` and `WORDPRESS_PINGBACK_SOURCE`
249
- # values are valid only for WordPress reflective pingback DDoS
250
- # attacks.
268
+ # values are valid only for WordPress reflective pingback events.
251
269
  # @return [String]
252
270
  #
253
271
  # @!attribute [rw] top_contributors
254
- # The array of contributor objects that includes the top five
255
- # contributors to an attack.
272
+ # Contributor objects for the top five contributors to a Shield event.
256
273
  # @return [Array<Types::Contributor>]
257
274
  #
258
275
  # @!attribute [rw] unit
259
- # The unit of the `Value` of the contributions.
276
+ # The unit used for the `Contributor` `Value` property.
260
277
  # @return [String]
261
278
  #
262
279
  # @!attribute [rw] total
263
- # The total contributions made to this attack by all contributors, not
264
- # just the five listed in the `TopContributors` list.
280
+ # The total contributions made to this Shield event by all
281
+ # contributors.
265
282
  # @return [Integer]
266
283
  #
267
284
  # @see http://docs.aws.amazon.com/goto/WebAPI/shield-2016-06-02/AttackProperty AWS API Documentation
@@ -485,8 +502,8 @@ module Aws::Shield
485
502
  # @return [String]
486
503
  #
487
504
  # @!attribute [rw] aggregation
488
- # Defines how AWS Shield combines resource data for the group in order
489
- # to detect, mitigate, and report events.
505
+ # Defines how Shield combines resource data for the group in order to
506
+ # detect, mitigate, and report events.
490
507
  #
491
508
  # * Sum - Use the total traffic across the group. This is a good
492
509
  # choice for most cases. Examples include Elastic IP addresses for
@@ -498,9 +515,8 @@ module Aws::Shield
498
515
  #
499
516
  # * Max - Use the highest traffic from each resource. This is useful
500
517
  # for resources that don't share traffic and for resources that
501
- # share that traffic in a non-uniform way. Examples include
502
- # CloudFront distributions and origin resources for CloudFront
503
- # distributions.
518
+ # share that traffic in a non-uniform way. Examples include Amazon
519
+ # CloudFront and origin resources for CloudFront distributions.
504
520
  # @return [String]
505
521
  #
506
522
  # @!attribute [rw] pattern
@@ -577,10 +593,10 @@ module Aws::Shield
577
593
  # `arn:aws:elasticloadbalancing:region:account-id:loadbalancer/load-balancer-name
578
594
  # `
579
595
  #
580
- # * For an AWS CloudFront distribution:
596
+ # * For an Amazon CloudFront distribution:
581
597
  # `arn:aws:cloudfront::account-id:distribution/distribution-id `
582
598
  #
583
- # * For an AWS Global Accelerator accelerator:
599
+ # * For an Global Accelerator accelerator:
584
600
  # `arn:aws:globalaccelerator::account-id:accelerator/accelerator-id
585
601
  # `
586
602
  #
@@ -748,12 +764,12 @@ module Aws::Shield
748
764
  class DescribeDRTAccessRequest < Aws::EmptyStructure; end
749
765
 
750
766
  # @!attribute [rw] role_arn
751
- # The Amazon Resource Name (ARN) of the role the DRT used to access
752
- # your AWS account.
767
+ # The Amazon Resource Name (ARN) of the role the SRT used to access
768
+ # your Amazon Web Services account.
753
769
  # @return [String]
754
770
  #
755
771
  # @!attribute [rw] log_bucket_list
756
- # The list of Amazon S3 buckets accessed by the DRT.
772
+ # The list of Amazon S3 buckets accessed by the SRT.
757
773
  # @return [Array<String>]
758
774
  #
759
775
  # @see http://docs.aws.amazon.com/goto/WebAPI/shield-2016-06-02/DescribeDRTAccessResponse AWS API Documentation
@@ -772,9 +788,9 @@ module Aws::Shield
772
788
  class DescribeEmergencyContactSettingsRequest < Aws::EmptyStructure; end
773
789
 
774
790
  # @!attribute [rw] emergency_contact_list
775
- # A list of email addresses and phone numbers that the DDoS Response
776
- # Team (DRT) can use to contact you if you have proactive engagement
777
- # enabled, for escalations to the DRT and to initiate proactive
791
+ # A list of email addresses and phone numbers that the Shield Response
792
+ # Team (SRT) can use to contact you if you have proactive engagement
793
+ # enabled, for escalations to the SRT and to initiate proactive
778
794
  # customer support.
779
795
  # @return [Array<Types::EmergencyContact>]
780
796
  #
@@ -808,8 +824,8 @@ module Aws::Shield
808
824
  end
809
825
 
810
826
  # @!attribute [rw] protection_group
811
- # A grouping of protected resources that you and AWS Shield Advanced
812
- # can monitor as a collective. This resource grouping improves the
827
+ # A grouping of protected resources that you and Shield Advanced can
828
+ # monitor as a collective. This resource grouping improves the
813
829
  # accuracy of detection and reduces false positives.
814
830
  # @return [Types::ProtectionGroup]
815
831
  #
@@ -837,8 +853,8 @@ module Aws::Shield
837
853
  # @return [String]
838
854
  #
839
855
  # @!attribute [rw] resource_arn
840
- # The ARN (Amazon Resource Name) of the AWS resource for the
841
- # Protection object that is described. When submitting the
856
+ # The ARN (Amazon Resource Name) of the Amazon Web Services resource
857
+ # for the Protection object that is described. When submitting the
842
858
  # `DescribeProtection` request you must provide either the
843
859
  # `ResourceArn` or the `ProtectionID`, but not both.
844
860
  # @return [String]
@@ -871,7 +887,7 @@ module Aws::Shield
871
887
  class DescribeSubscriptionRequest < Aws::EmptyStructure; end
872
888
 
873
889
  # @!attribute [rw] subscription
874
- # The AWS Shield Advanced subscription details for an account.
890
+ # The Shield Advanced subscription details for an account.
875
891
  # @return [Types::Subscription]
876
892
  #
877
893
  # @see http://docs.aws.amazon.com/goto/WebAPI/shield-2016-06-02/DescribeSubscriptionResponse AWS API Documentation
@@ -900,7 +916,7 @@ module Aws::Shield
900
916
  # }
901
917
  #
902
918
  # @!attribute [rw] log_bucket
903
- # The Amazon S3 bucket that contains your AWS WAF logs.
919
+ # The Amazon S3 bucket that contains the logs that you want to share.
904
920
  # @return [String]
905
921
  #
906
922
  # @see http://docs.aws.amazon.com/goto/WebAPI/shield-2016-06-02/DisassociateDRTLogBucketRequest AWS API Documentation
@@ -956,8 +972,8 @@ module Aws::Shield
956
972
  #
957
973
  class DisassociateHealthCheckResponse < Aws::EmptyStructure; end
958
974
 
959
- # Contact information that the DRT can use to contact you if you have
960
- # proactive engagement enabled, for escalations to the DRT and to
975
+ # Contact information that the SRT can use to contact you if you have
976
+ # proactive engagement enabled, for escalations to the SRT and to
961
977
  # initiate proactive customer support.
962
978
  #
963
979
  # @note When making an API call, you may pass EmergencyContact
@@ -1282,9 +1298,9 @@ module Aws::Shield
1282
1298
  #
1283
1299
  # @!attribute [rw] next_token
1284
1300
  # If you specify a value for `MaxResults` and you have more protection
1285
- # groups than the value of MaxResults, AWS Shield Advanced returns
1286
- # this token that you can use in your next request, to get the next
1287
- # batch of objects.
1301
+ # groups than the value of MaxResults, Shield Advanced returns this
1302
+ # token that you can use in your next request, to get the next batch
1303
+ # of objects.
1288
1304
  # @return [String]
1289
1305
  #
1290
1306
  # @see http://docs.aws.amazon.com/goto/WebAPI/shield-2016-06-02/ListProtectionGroupsResponse AWS API Documentation
@@ -1336,12 +1352,11 @@ module Aws::Shield
1336
1352
  #
1337
1353
  # @!attribute [rw] next_token
1338
1354
  # If you specify a value for `MaxResults` and you have more
1339
- # Protections than the value of MaxResults, AWS Shield Advanced
1340
- # returns a NextToken value in the response that allows you to list
1341
- # another group of Protections. For the second and subsequent
1342
- # ListProtections requests, specify the value of NextToken from the
1343
- # previous response to get information about another batch of
1344
- # Protections.
1355
+ # Protections than the value of MaxResults, Shield Advanced returns a
1356
+ # NextToken value in the response that allows you to list another
1357
+ # group of Protections. For the second and subsequent ListProtections
1358
+ # requests, specify the value of NextToken from the previous response
1359
+ # to get information about another batch of Protections.
1345
1360
  #
1346
1361
  # Shield Advanced might return the list of Protection objects in
1347
1362
  # batches smaller than the number specified by MaxResults. If there
@@ -1408,7 +1423,7 @@ module Aws::Shield
1408
1423
  #
1409
1424
  # @!attribute [rw] next_token
1410
1425
  # If you specify a value for `MaxResults` and you have more resources
1411
- # in the protection group than the value of MaxResults, AWS Shield
1426
+ # in the protection group than the value of MaxResults, Shield
1412
1427
  # Advanced returns this token that you can use in your next request,
1413
1428
  # to get the next batch of objects.
1414
1429
  # @return [String]
@@ -1523,8 +1538,8 @@ module Aws::Shield
1523
1538
  # @return [String]
1524
1539
  #
1525
1540
  # @!attribute [rw] resource_arn
1526
- # The ARN (Amazon Resource Name) of the AWS resource that is
1527
- # protected.
1541
+ # The ARN (Amazon Resource Name) of the Amazon Web Services resource
1542
+ # that is protected.
1528
1543
  # @return [String]
1529
1544
  #
1530
1545
  # @!attribute [rw] health_check_ids
@@ -1548,7 +1563,7 @@ module Aws::Shield
1548
1563
  include Aws::Structure
1549
1564
  end
1550
1565
 
1551
- # A grouping of protected resources that you and AWS Shield Advanced can
1566
+ # A grouping of protected resources that you and Shield Advanced can
1552
1567
  # monitor as a collective. This resource grouping improves the accuracy
1553
1568
  # of detection and reduces false positives.
1554
1569
  #
@@ -1559,8 +1574,8 @@ module Aws::Shield
1559
1574
  # @return [String]
1560
1575
  #
1561
1576
  # @!attribute [rw] aggregation
1562
- # Defines how AWS Shield combines resource data for the group in order
1563
- # to detect, mitigate, and report events.
1577
+ # Defines how Shield combines resource data for the group in order to
1578
+ # detect, mitigate, and report events.
1564
1579
  #
1565
1580
  # * Sum - Use the total traffic across the group. This is a good
1566
1581
  # choice for most cases. Examples include Elastic IP addresses for
@@ -1572,7 +1587,7 @@ module Aws::Shield
1572
1587
  #
1573
1588
  # * Max - Use the highest traffic from each resource. This is useful
1574
1589
  # for resources that don't share traffic and for resources that
1575
- # share that traffic in a non-uniform way. Examples include
1590
+ # share that traffic in a non-uniform way. Examples include Amazon
1576
1591
  # CloudFront distributions and origin resources for CloudFront
1577
1592
  # distributions.
1578
1593
  # @return [String]
@@ -1747,7 +1762,7 @@ module Aws::Shield
1747
1762
  include Aws::Structure
1748
1763
  end
1749
1764
 
1750
- # Information about the AWS Shield Advanced subscription for an account.
1765
+ # Information about the Shield Advanced subscription for an account.
1751
1766
  #
1752
1767
  # @!attribute [rw] start_time
1753
1768
  # The start time of the subscription, in Unix time in seconds. For
@@ -1763,8 +1778,8 @@ module Aws::Shield
1763
1778
  # @return [Time]
1764
1779
  #
1765
1780
  # @!attribute [rw] time_commitment_in_seconds
1766
- # The length, in seconds, of the AWS Shield Advanced subscription for
1767
- # the account.
1781
+ # The length, in seconds, of the Shield Advanced subscription for the
1782
+ # account.
1768
1783
  # @return [Integer]
1769
1784
  #
1770
1785
  # @!attribute [rw] auto_renew
@@ -1783,15 +1798,15 @@ module Aws::Shield
1783
1798
  # @return [Array<Types::Limit>]
1784
1799
  #
1785
1800
  # @!attribute [rw] proactive_engagement_status
1786
- # If `ENABLED`, the DDoS Response Team (DRT) will use email and phone
1787
- # to notify contacts about escalations to the DRT and to initiate
1788
- # proactive customer support.
1801
+ # If `ENABLED`, the Shield Response Team (SRT) will use email and
1802
+ # phone to notify contacts about escalations to the SRT and to
1803
+ # initiate proactive customer support.
1789
1804
  #
1790
1805
  # If `PENDING`, you have requested proactive engagement and the
1791
1806
  # request is pending. The status changes to `ENABLED` when your
1792
1807
  # request is fully processed.
1793
1808
  #
1794
- # If `DISABLED`, the DRT will not proactively notify contacts about
1809
+ # If `DISABLED`, the SRT will not proactively notify contacts about
1795
1810
  # escalations or to initiate proactive customer support.
1796
1811
  # @return [String]
1797
1812
  #
@@ -1895,15 +1910,15 @@ module Aws::Shield
1895
1910
  include Aws::Structure
1896
1911
  end
1897
1912
 
1898
- # A tag associated with an AWS resource. Tags are key:value pairs that
1899
- # you can use to categorize and manage your resources, for purposes like
1900
- # billing or other management. Typically, the tag key represents a
1901
- # category, such as "environment", and the tag value represents a
1902
- # specific value within that category, such as "test,"
1903
- # "development," or "production". Or you might set the tag key to
1904
- # "customer" and the value to the customer name or ID. You can specify
1905
- # one or more tags to add to each AWS resource, up to 50 tags for a
1906
- # resource.
1913
+ # A tag associated with an Amazon Web Services resource. Tags are
1914
+ # key:value pairs that you can use to categorize and manage your
1915
+ # resources, for purposes like billing or other management. Typically,
1916
+ # the tag key represents a category, such as "environment", and the
1917
+ # tag value represents a specific value within that category, such as
1918
+ # "test," "development," or "production". Or you might set the tag
1919
+ # key to "customer" and the value to the customer name or ID. You can
1920
+ # specify one or more tags to add to each Amazon Web Services resource,
1921
+ # up to 50 tags for a resource.
1907
1922
  #
1908
1923
  # @note When making an API call, you may pass Tag
1909
1924
  # data as a hash:
@@ -2050,9 +2065,9 @@ module Aws::Shield
2050
2065
  # }
2051
2066
  #
2052
2067
  # @!attribute [rw] emergency_contact_list
2053
- # A list of email addresses and phone numbers that the DDoS Response
2054
- # Team (DRT) can use to contact you if you have proactive engagement
2055
- # enabled, for escalations to the DRT and to initiate proactive
2068
+ # A list of email addresses and phone numbers that the Shield Response
2069
+ # Team (SRT) can use to contact you if you have proactive engagement
2070
+ # enabled, for escalations to the SRT and to initiate proactive
2056
2071
  # customer support.
2057
2072
  #
2058
2073
  # If you have proactive engagement enabled, the contact list must
@@ -2089,8 +2104,8 @@ module Aws::Shield
2089
2104
  # @return [String]
2090
2105
  #
2091
2106
  # @!attribute [rw] aggregation
2092
- # Defines how AWS Shield combines resource data for the group in order
2093
- # to detect, mitigate, and report events.
2107
+ # Defines how Shield combines resource data for the group in order to
2108
+ # detect, mitigate, and report events.
2094
2109
  #
2095
2110
  # * Sum - Use the total traffic across the group. This is a good
2096
2111
  # choice for most cases. Examples include Elastic IP addresses for
@@ -2102,7 +2117,7 @@ module Aws::Shield
2102
2117
  #
2103
2118
  # * Max - Use the highest traffic from each resource. This is useful
2104
2119
  # for resources that don't share traffic and for resources that
2105
- # share that traffic in a non-uniform way. Examples include
2120
+ # share that traffic in a non-uniform way. Examples include Amazon
2106
2121
  # CloudFront distributions and origin resources for CloudFront
2107
2122
  # distributions.
2108
2123
  # @return [String]
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: aws-sdk-shield
3
3
  version: !ruby/object:Gem::Version
4
- version: 1.37.0
4
+ version: 1.38.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Amazon Web Services
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2021-04-09 00:00:00.000000000 Z
11
+ date: 2021-07-27 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: aws-sdk-core
@@ -83,8 +83,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
83
83
  - !ruby/object:Gem::Version
84
84
  version: '0'
85
85
  requirements: []
86
- rubyforge_project:
87
- rubygems_version: 2.7.6.2
86
+ rubygems_version: 3.1.6
88
87
  signing_key:
89
88
  specification_version: 4
90
89
  summary: AWS SDK for Ruby - AWS Shield