aws-sdk-shield 1.37.0 → 1.38.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 879c6b88e06bd722d2015a9f8970f372ae2485a60775d7f7b02fd75797503fbf
4
- data.tar.gz: ca8a001ad6a7d3c4ae4470549cb87b5bc707166652634da9b6b7a4d20d1d1ae6
3
+ metadata.gz: 326588a64c345c4bcd07a2da9cd82f6b2533c105c4db833008ef39e72d9274da
4
+ data.tar.gz: e697b7c957fffbf4798d1287e09b217e947fb25a8980f059c53385fc65b6df41
5
5
  SHA512:
6
- metadata.gz: 22c72a55bc53073aa29422b028b6c8a2cdfb5157b49f9dbd1db75e62c5146c732f5b4562a8d36155cda5611486afb4fb3718406d64d3629cedf2e35f7c7a0627
7
- data.tar.gz: 8396bc9a95170b6d8a85876f0efec7202fe6b4d38364c2f9d86fd47cc47db6b45ecb77b5ad37473aa267d386c2f336b37305601ef4acc495fe16646ba5c94fde
6
+ metadata.gz: df6865b5f1bb201321fd3b2149de5e5f18a51fcb8479d28090cddedb108445eb6a1ebec7fcbcd79d02efdf83d2039688e048cef9dbfe52c45f0c00baab4a8377
7
+ data.tar.gz: 0b797117f138bdce1e50b7b453526913efccbb01372a7d677c80bb68e99d6815daeaa51cfb60106c4071bba37d3af43bef197cbb514d8bdf835f30e05f850ee3
data/CHANGELOG.md CHANGED
@@ -1,6 +1,11 @@
1
1
  Unreleased Changes
2
2
  ------------------
3
3
 
4
+ 1.38.0 (2021-07-27)
5
+ ------------------
6
+
7
+ * Feature - Change name of DDoS Response Team (DRT) to Shield Response Team (SRT)
8
+
4
9
  1.37.0 (2021-04-09)
5
10
  ------------------
6
11
 
data/VERSION CHANGED
@@ -1 +1 @@
1
- 1.37.0
1
+ 1.38.0
@@ -48,6 +48,6 @@ require_relative 'aws-sdk-shield/customizations'
48
48
  # @!group service
49
49
  module Aws::Shield
50
50
 
51
- GEM_VERSION = '1.37.0'
51
+ GEM_VERSION = '1.38.0'
52
52
 
53
53
  end
@@ -337,11 +337,12 @@ module Aws::Shield
337
337
 
338
338
  # @!group API Operations
339
339
 
340
- # Authorizes the DDoS Response Team (DRT) to access the specified Amazon
341
- # S3 bucket containing your AWS WAF logs. You can associate up to 10
342
- # Amazon S3 buckets with your subscription.
340
+ # Authorizes the Shield Response Team (SRT) to access the specified
341
+ # Amazon S3 bucket containing log data such as Application Load Balancer
342
+ # access logs, CloudFront logs, or logs from third party sources. You
343
+ # can associate up to 10 Amazon S3 buckets with your subscription.
343
344
  #
344
- # To use the services of the DRT and make an `AssociateDRTLogBucket`
345
+ # To use the services of the SRT and make an `AssociateDRTLogBucket`
345
346
  # request, you must be subscribed to the [Business Support plan][1] or
346
347
  # the [Enterprise Support plan][2].
347
348
  #
@@ -351,7 +352,7 @@ module Aws::Shield
351
352
  # [2]: https://aws.amazon.com/premiumsupport/enterprise-support/
352
353
  #
353
354
  # @option params [required, String] :log_bucket
354
- # The Amazon S3 bucket that contains your AWS WAF logs.
355
+ # The Amazon S3 bucket that contains the logs that you want to share.
355
356
  #
356
357
  # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
357
358
  #
@@ -370,10 +371,10 @@ module Aws::Shield
370
371
  req.send_request(options)
371
372
  end
372
373
 
373
- # Authorizes the DDoS Response Team (DRT), using the specified role, to
374
- # access your AWS account to assist with DDoS attack mitigation during
375
- # potential attacks. This enables the DRT to inspect your AWS WAF
376
- # configuration and create or update AWS WAF rules and web ACLs.
374
+ # Authorizes the Shield Response Team (SRT) using the specified role, to
375
+ # access your Amazon Web Services account to assist with DDoS attack
376
+ # mitigation during potential attacks. This enables the SRT to inspect
377
+ # your WAF configuration and create or update WAF rules and web ACLs.
377
378
  #
378
379
  # You can associate only one `RoleArn` with your subscription. If you
379
380
  # submit an `AssociateDRTRole` request for an account that already has
@@ -389,17 +390,17 @@ module Aws::Shield
389
390
  # drt.shield.amazonaws.com`. For more information, see [IAM JSON Policy
390
391
  # Elements: Principal][2].
391
392
  #
392
- # The DRT will have access only to your AWS WAF and Shield resources. By
393
- # submitting this request, you authorize the DRT to inspect your AWS WAF
394
- # and Shield configuration and create and update AWS WAF rules and web
395
- # ACLs on your behalf. The DRT takes these actions only if explicitly
396
- # authorized by you.
393
+ # The SRT will have access only to your WAF and Shield resources. By
394
+ # submitting this request, you authorize the SRT to inspect your WAF and
395
+ # Shield configuration and create and update WAF rules and web ACLs on
396
+ # your behalf. The SRT takes these actions only if explicitly authorized
397
+ # by you.
397
398
  #
398
399
  # You must have the `iam:PassRole` permission to make an
399
400
  # `AssociateDRTRole` request. For more information, see [Granting a User
400
- # Permissions to Pass a Role to an AWS Service][3].
401
+ # Permissions to Pass a Role to an Amazon Web Services Service][3].
401
402
  #
402
- # To use the services of the DRT and make an `AssociateDRTRole` request,
403
+ # To use the services of the SRT and make an `AssociateDRTRole` request,
403
404
  # you must be subscribed to the [Business Support plan][4] or the
404
405
  # [Enterprise Support plan][5].
405
406
  #
@@ -412,8 +413,8 @@ module Aws::Shield
412
413
  # [5]: https://aws.amazon.com/premiumsupport/enterprise-support/
413
414
  #
414
415
  # @option params [required, String] :role_arn
415
- # The Amazon Resource Name (ARN) of the role the DRT will use to access
416
- # your AWS account.
416
+ # The Amazon Resource Name (ARN) of the role the SRT will use to access
417
+ # your Amazon Web Services account.
417
418
  #
418
419
  # Prior to making the `AssociateDRTRole` request, you must attach the
419
420
  # [AWSShieldDRTAccessPolicy][1] managed policy to this role. For more
@@ -443,18 +444,16 @@ module Aws::Shield
443
444
 
444
445
  # Adds health-based detection to the Shield Advanced protection for a
445
446
  # resource. Shield Advanced health-based detection uses the health of
446
- # your AWS resource to improve responsiveness and accuracy in attack
447
- # detection and mitigation.
447
+ # your Amazon Web Services resource to improve responsiveness and
448
+ # accuracy in attack detection and mitigation.
448
449
  #
449
450
  # You define the health check in Route 53 and then associate it with
450
451
  # your Shield Advanced protection. For more information, see [Shield
451
- # Advanced Health-Based Detection][1] in the [AWS WAF and AWS Shield
452
- # Developer Guide][2].
452
+ # Advanced Health-Based Detection][1] in the *WAF Developer Guide*.
453
453
  #
454
454
  #
455
455
  #
456
456
  # [1]: https://docs.aws.amazon.com/waf/latest/developerguide/ddos-overview.html#ddos-advanced-health-check-option
457
- # [2]: https://docs.aws.amazon.com/waf/latest/developerguide/
458
457
  #
459
458
  # @option params [required, String] :protection_id
460
459
  # The unique identifier (ID) for the Protection object to add the health
@@ -483,7 +482,7 @@ module Aws::Shield
483
482
  end
484
483
 
485
484
  # Initializes proactive engagement and sets the list of contacts for the
486
- # DDoS Response Team (DRT) to use. You must provide at least one phone
485
+ # Shield Response Team (SRT) to use. You must provide at least one phone
487
486
  # number in the emergency contact list.
488
487
  #
489
488
  # After you have initialized proactive engagement using this call, to
@@ -491,8 +490,8 @@ module Aws::Shield
491
490
  # `DisableProactiveEngagement` and `EnableProactiveEngagement`.
492
491
  #
493
492
  # <note markdown="1"> This call defines the list of email addresses and phone numbers that
494
- # the DDoS Response Team (DRT) can use to contact you for escalations to
495
- # the DRT and to initiate proactive customer support.
493
+ # the SRT can use to contact you for escalations to the SRT and to
494
+ # initiate proactive customer support.
496
495
  #
497
496
  # The contacts that you provide in the request replace any contacts that
498
497
  # were already defined. If you already have contacts defined and want to
@@ -502,8 +501,8 @@ module Aws::Shield
502
501
  # </note>
503
502
  #
504
503
  # @option params [required, Array<Types::EmergencyContact>] :emergency_contact_list
505
- # A list of email addresses and phone numbers that the DDoS Response
506
- # Team (DRT) can use to contact you for escalations to the DRT and to
504
+ # A list of email addresses and phone numbers that the Shield Response
505
+ # Team (SRT) can use to contact you for escalations to the SRT and to
507
506
  # initiate proactive customer support.
508
507
  #
509
508
  # To enable proactive engagement, the contact list must include at least
@@ -539,16 +538,16 @@ module Aws::Shield
539
538
  req.send_request(options)
540
539
  end
541
540
 
542
- # Enables AWS Shield Advanced for a specific AWS resource. The resource
543
- # can be an Amazon CloudFront distribution, Elastic Load Balancing load
544
- # balancer, AWS Global Accelerator accelerator, Elastic IP Address, or
545
- # an Amazon Route 53 hosted zone.
541
+ # Enables Shield Advanced for a specific Amazon Web Services resource.
542
+ # The resource can be an Amazon CloudFront distribution, Elastic Load
543
+ # Balancing load balancer, Global Accelerator accelerator, Elastic IP
544
+ # Address, or an Amazon Route 53 hosted zone.
546
545
  #
547
546
  # You can add protection to only a single resource with each
548
547
  # CreateProtection request. If you want to add protection to multiple
549
- # resources at once, use the [AWS WAF console][1]. For more information
550
- # see [Getting Started with AWS Shield Advanced][2] and [Add AWS Shield
551
- # Advanced Protection to more AWS Resources][3].
548
+ # resources at once, use the [WAF console][1]. For more information see
549
+ # [Getting Started with Shield Advanced][2] and [Add Shield Advanced
550
+ # Protection to more Amazon Web Services Resources][3].
552
551
  #
553
552
  #
554
553
  #
@@ -572,10 +571,10 @@ module Aws::Shield
572
571
  # `arn:aws:elasticloadbalancing:region:account-id:loadbalancer/load-balancer-name
573
572
  # `
574
573
  #
575
- # * For an AWS CloudFront distribution:
574
+ # * For an Amazon CloudFront distribution:
576
575
  # `arn:aws:cloudfront::account-id:distribution/distribution-id `
577
576
  #
578
- # * For an AWS Global Accelerator accelerator:
577
+ # * For an Global Accelerator accelerator:
579
578
  # `arn:aws:globalaccelerator::account-id:accelerator/accelerator-id `
580
579
  #
581
580
  # * For Amazon Route 53: `arn:aws:route53:::hostedzone/hosted-zone-id `
@@ -627,8 +626,8 @@ module Aws::Shield
627
626
  # example to update, delete, or describe it.
628
627
  #
629
628
  # @option params [required, String] :aggregation
630
- # Defines how AWS Shield combines resource data for the group in order
631
- # to detect, mitigate, and report events.
629
+ # Defines how Shield combines resource data for the group in order to
630
+ # detect, mitigate, and report events.
632
631
  #
633
632
  # * Sum - Use the total traffic across the group. This is a good choice
634
633
  # for most cases. Examples include Elastic IP addresses for EC2
@@ -640,8 +639,8 @@ module Aws::Shield
640
639
  #
641
640
  # * Max - Use the highest traffic from each resource. This is useful for
642
641
  # resources that don't share traffic and for resources that share
643
- # that traffic in a non-uniform way. Examples include CloudFront
644
- # distributions and origin resources for CloudFront distributions.
642
+ # that traffic in a non-uniform way. Examples include Amazon
643
+ # CloudFront and origin resources for CloudFront distributions.
645
644
  #
646
645
  # @option params [required, String] :pattern
647
646
  # The criteria to use to choose the protected resources for inclusion in
@@ -691,7 +690,7 @@ module Aws::Shield
691
690
  req.send_request(options)
692
691
  end
693
692
 
694
- # Activates AWS Shield Advanced for an account.
693
+ # Activates Shield Advanced for an account.
695
694
  #
696
695
  # When you initally create a subscription, your subscription is set to
697
696
  # be automatically renewed at the end of the existing subscription
@@ -709,7 +708,7 @@ module Aws::Shield
709
708
  req.send_request(options)
710
709
  end
711
710
 
712
- # Deletes an AWS Shield Advanced Protection.
711
+ # Deletes an Shield Advanced Protection.
713
712
  #
714
713
  # @option params [required, String] :protection_id
715
714
  # The unique identifier (ID) for the Protection object to be deleted.
@@ -755,9 +754,9 @@ module Aws::Shield
755
754
  req.send_request(options)
756
755
  end
757
756
 
758
- # Removes AWS Shield Advanced from an account. AWS Shield Advanced
759
- # requires a 1-year subscription commitment. You cannot delete a
760
- # subscription prior to the completion of that commitment.
757
+ # Removes Shield Advanced from an account. Shield Advanced requires a
758
+ # 1-year subscription commitment. You cannot delete a subscription prior
759
+ # to the completion of that commitment.
761
760
  #
762
761
  # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
763
762
  #
@@ -837,8 +836,8 @@ module Aws::Shield
837
836
  req.send_request(options)
838
837
  end
839
838
 
840
- # Provides information about the number and type of attacks AWS Shield
841
- # has detected in the last year for all resources that belong to your
839
+ # Provides information about the number and type of attacks Shield has
840
+ # detected in the last year for all resources that belong to your
842
841
  # account, regardless of whether you've defined Shield protections for
843
842
  # them. This operation is available to Shield customers as well as to
844
843
  # Shield Advanced customers.
@@ -877,8 +876,8 @@ module Aws::Shield
877
876
  end
878
877
 
879
878
  # Returns the current role and list of Amazon S3 log buckets used by the
880
- # DDoS Response Team (DRT) to access your AWS account while assisting
881
- # with attack mitigation.
879
+ # Shield Response Team (SRT) to access your Amazon Web Services account
880
+ # while assisting with attack mitigation.
882
881
  #
883
882
  # @return [Types::DescribeDRTAccessResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
884
883
  #
@@ -900,9 +899,9 @@ module Aws::Shield
900
899
  req.send_request(options)
901
900
  end
902
901
 
903
- # A list of email addresses and phone numbers that the DDoS Response
904
- # Team (DRT) can use to contact you if you have proactive engagement
905
- # enabled, for escalations to the DRT and to initiate proactive customer
902
+ # A list of email addresses and phone numbers that the Shield Response
903
+ # Team (SRT) can use to contact you if you have proactive engagement
904
+ # enabled, for escalations to the SRT and to initiate proactive customer
906
905
  # support.
907
906
  #
908
907
  # @return [Types::DescribeEmergencyContactSettingsResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
@@ -933,10 +932,10 @@ module Aws::Shield
933
932
  # provide either the `ResourceArn` or the `ProtectionID`, but not both.
934
933
  #
935
934
  # @option params [String] :resource_arn
936
- # The ARN (Amazon Resource Name) of the AWS resource for the Protection
937
- # object that is described. When submitting the `DescribeProtection`
938
- # request you must provide either the `ResourceArn` or the
939
- # `ProtectionID`, but not both.
935
+ # The ARN (Amazon Resource Name) of the Amazon Web Services resource for
936
+ # the Protection object that is described. When submitting the
937
+ # `DescribeProtection` request you must provide either the `ResourceArn`
938
+ # or the `ProtectionID`, but not both.
940
939
  #
941
940
  # @return [Types::DescribeProtectionResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
942
941
  #
@@ -1003,7 +1002,7 @@ module Aws::Shield
1003
1002
  req.send_request(options)
1004
1003
  end
1005
1004
 
1006
- # Provides details about the AWS Shield Advanced subscription for an
1005
+ # Provides details about the Shield Advanced subscription for an
1007
1006
  # account.
1008
1007
  #
1009
1008
  # @return [Types::DescribeSubscriptionResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
@@ -1036,8 +1035,8 @@ module Aws::Shield
1036
1035
  req.send_request(options)
1037
1036
  end
1038
1037
 
1039
- # Removes authorization from the DDoS Response Team (DRT) to notify
1040
- # contacts about escalations to the DRT and to initiate proactive
1038
+ # Removes authorization from the Shield Response Team (SRT) to notify
1039
+ # contacts about escalations to the SRT and to initiate proactive
1041
1040
  # customer support.
1042
1041
  #
1043
1042
  # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
@@ -1051,13 +1050,13 @@ module Aws::Shield
1051
1050
  req.send_request(options)
1052
1051
  end
1053
1052
 
1054
- # Removes the DDoS Response Team's (DRT) access to the specified Amazon
1055
- # S3 bucket containing your AWS WAF logs.
1053
+ # Removes the Shield Response Team's (SRT) access to the specified
1054
+ # Amazon S3 bucket containing the logs that you shared previously.
1056
1055
  #
1057
1056
  # To make a `DisassociateDRTLogBucket` request, you must be subscribed
1058
1057
  # to the [Business Support plan][1] or the [Enterprise Support plan][2].
1059
1058
  # However, if you are not subscribed to one of these support plans, but
1060
- # had been previously and had granted the DRT access to your account,
1059
+ # had been previously and had granted the SRT access to your account,
1061
1060
  # you can submit a `DisassociateDRTLogBucket` request to remove this
1062
1061
  # access.
1063
1062
  #
@@ -1067,7 +1066,7 @@ module Aws::Shield
1067
1066
  # [2]: https://aws.amazon.com/premiumsupport/enterprise-support/
1068
1067
  #
1069
1068
  # @option params [required, String] :log_bucket
1070
- # The Amazon S3 bucket that contains your AWS WAF logs.
1069
+ # The Amazon S3 bucket that contains the logs that you want to share.
1071
1070
  #
1072
1071
  # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
1073
1072
  #
@@ -1086,12 +1085,13 @@ module Aws::Shield
1086
1085
  req.send_request(options)
1087
1086
  end
1088
1087
 
1089
- # Removes the DDoS Response Team's (DRT) access to your AWS account.
1088
+ # Removes the Shield Response Team's (SRT) access to your Amazon Web
1089
+ # Services account.
1090
1090
  #
1091
1091
  # To make a `DisassociateDRTRole` request, you must be subscribed to the
1092
1092
  # [Business Support plan][1] or the [Enterprise Support plan][2].
1093
1093
  # However, if you are not subscribed to one of these support plans, but
1094
- # had been previously and had granted the DRT access to your account,
1094
+ # had been previously and had granted the SRT access to your account,
1095
1095
  # you can submit a `DisassociateDRTRole` request to remove this access.
1096
1096
  #
1097
1097
  #
@@ -1112,18 +1112,17 @@ module Aws::Shield
1112
1112
 
1113
1113
  # Removes health-based detection from the Shield Advanced protection for
1114
1114
  # a resource. Shield Advanced health-based detection uses the health of
1115
- # your AWS resource to improve responsiveness and accuracy in attack
1116
- # detection and mitigation.
1115
+ # your Amazon Web Services resource to improve responsiveness and
1116
+ # accuracy in attack detection and mitigation.
1117
1117
  #
1118
1118
  # You define the health check in Route 53 and then associate or
1119
1119
  # disassociate it with your Shield Advanced protection. For more
1120
1120
  # information, see [Shield Advanced Health-Based Detection][1] in the
1121
- # [AWS WAF and AWS Shield Developer Guide][2].
1121
+ # *WAF Developer Guide*.
1122
1122
  #
1123
1123
  #
1124
1124
  #
1125
1125
  # [1]: https://docs.aws.amazon.com/waf/latest/developerguide/ddos-overview.html#ddos-advanced-health-check-option
1126
- # [2]: https://docs.aws.amazon.com/waf/latest/developerguide/
1127
1126
  #
1128
1127
  # @option params [required, String] :protection_id
1129
1128
  # The unique identifier (ID) for the Protection object to remove the
@@ -1151,8 +1150,8 @@ module Aws::Shield
1151
1150
  req.send_request(options)
1152
1151
  end
1153
1152
 
1154
- # Authorizes the DDoS Response Team (DRT) to use email and phone to
1155
- # notify contacts about escalations to the DRT and to initiate proactive
1153
+ # Authorizes the Shield Response Team (SRT) to use email and phone to
1154
+ # notify contacts about escalations to the SRT and to initiate proactive
1156
1155
  # customer support.
1157
1156
  #
1158
1157
  # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
@@ -1426,8 +1425,8 @@ module Aws::Shield
1426
1425
  req.send_request(options)
1427
1426
  end
1428
1427
 
1429
- # Gets information about AWS tags for a specified Amazon Resource Name
1430
- # (ARN) in AWS Shield.
1428
+ # Gets information about Amazon Web Services tags for a specified Amazon
1429
+ # Resource Name (ARN) in Shield.
1431
1430
  #
1432
1431
  # @option params [required, String] :resource_arn
1433
1432
  # The Amazon Resource Name (ARN) of the resource to get tags for.
@@ -1457,7 +1456,7 @@ module Aws::Shield
1457
1456
  req.send_request(options)
1458
1457
  end
1459
1458
 
1460
- # Adds or updates tags for a resource in AWS Shield.
1459
+ # Adds or updates tags for a resource in Shield.
1461
1460
  #
1462
1461
  # @option params [required, String] :resource_arn
1463
1462
  # The Amazon Resource Name (ARN) of the resource that you want to add or
@@ -1489,7 +1488,7 @@ module Aws::Shield
1489
1488
  req.send_request(options)
1490
1489
  end
1491
1490
 
1492
- # Removes tags from a resource in AWS Shield.
1491
+ # Removes tags from a resource in Shield.
1493
1492
  #
1494
1493
  # @option params [required, String] :resource_arn
1495
1494
  # The Amazon Resource Name (ARN) of the resource that you want to remove
@@ -1517,14 +1516,14 @@ module Aws::Shield
1517
1516
  end
1518
1517
 
1519
1518
  # Updates the details of the list of email addresses and phone numbers
1520
- # that the DDoS Response Team (DRT) can use to contact you if you have
1521
- # proactive engagement enabled, for escalations to the DRT and to
1519
+ # that the Shield Response Team (SRT) can use to contact you if you have
1520
+ # proactive engagement enabled, for escalations to the SRT and to
1522
1521
  # initiate proactive customer support.
1523
1522
  #
1524
1523
  # @option params [Array<Types::EmergencyContact>] :emergency_contact_list
1525
- # A list of email addresses and phone numbers that the DDoS Response
1526
- # Team (DRT) can use to contact you if you have proactive engagement
1527
- # enabled, for escalations to the DRT and to initiate proactive customer
1524
+ # A list of email addresses and phone numbers that the Shield Response
1525
+ # Team (SRT) can use to contact you if you have proactive engagement
1526
+ # enabled, for escalations to the SRT and to initiate proactive customer
1528
1527
  # support.
1529
1528
  #
1530
1529
  # If you have proactive engagement enabled, the contact list must
@@ -1564,8 +1563,8 @@ module Aws::Shield
1564
1563
  # example to update, delete, or describe it.
1565
1564
  #
1566
1565
  # @option params [required, String] :aggregation
1567
- # Defines how AWS Shield combines resource data for the group in order
1568
- # to detect, mitigate, and report events.
1566
+ # Defines how Shield combines resource data for the group in order to
1567
+ # detect, mitigate, and report events.
1569
1568
  #
1570
1569
  # * Sum - Use the total traffic across the group. This is a good choice
1571
1570
  # for most cases. Examples include Elastic IP addresses for EC2
@@ -1577,8 +1576,9 @@ module Aws::Shield
1577
1576
  #
1578
1577
  # * Max - Use the highest traffic from each resource. This is useful for
1579
1578
  # resources that don't share traffic and for resources that share
1580
- # that traffic in a non-uniform way. Examples include CloudFront
1581
- # distributions and origin resources for CloudFront distributions.
1579
+ # that traffic in a non-uniform way. Examples include Amazon
1580
+ # CloudFront distributions and origin resources for CloudFront
1581
+ # distributions.
1582
1582
  #
1583
1583
  # @option params [required, String] :pattern
1584
1584
  # The criteria to use to choose the protected resources for inclusion in
@@ -1659,7 +1659,7 @@ module Aws::Shield
1659
1659
  params: params,
1660
1660
  config: config)
1661
1661
  context[:gem_name] = 'aws-sdk-shield'
1662
- context[:gem_version] = '1.37.0'
1662
+ context[:gem_version] = '1.38.0'
1663
1663
  Seahorse::Client::Request.new(handlers, context)
1664
1664
  end
1665
1665
 
@@ -25,11 +25,11 @@ module Aws::Shield
25
25
  include Aws::Structure
26
26
  end
27
27
 
28
- # In order to grant the necessary access to the DDoS Response Team
29
- # (DRT), the user submitting the request must have the `iam:PassRole`
28
+ # In order to grant the necessary access to the Shield Response Team
29
+ # (SRT) the user submitting the request must have the `iam:PassRole`
30
30
  # permission. This error indicates the user did not have the appropriate
31
31
  # permissions. For more information, see [Granting a User Permissions to
32
- # Pass a Role to an AWS Service][1].
32
+ # Pass a Role to an Amazon Web Services Service][1].
33
33
  #
34
34
  #
35
35
  #
@@ -54,7 +54,7 @@ module Aws::Shield
54
54
  # }
55
55
  #
56
56
  # @!attribute [rw] log_bucket
57
- # The Amazon S3 bucket that contains your AWS WAF logs.
57
+ # The Amazon S3 bucket that contains the logs that you want to share.
58
58
  # @return [String]
59
59
  #
60
60
  # @see http://docs.aws.amazon.com/goto/WebAPI/shield-2016-06-02/AssociateDRTLogBucketRequest AWS API Documentation
@@ -77,8 +77,8 @@ module Aws::Shield
77
77
  # }
78
78
  #
79
79
  # @!attribute [rw] role_arn
80
- # The Amazon Resource Name (ARN) of the role the DRT will use to
81
- # access your AWS account.
80
+ # The Amazon Resource Name (ARN) of the role the SRT will use to
81
+ # access your Amazon Web Services account.
82
82
  #
83
83
  # Prior to making the `AssociateDRTRole` request, you must attach the
84
84
  # [AWSShieldDRTAccessPolicy][1] managed policy to this role. For more
@@ -147,8 +147,8 @@ module Aws::Shield
147
147
  # }
148
148
  #
149
149
  # @!attribute [rw] emergency_contact_list
150
- # A list of email addresses and phone numbers that the DDoS Response
151
- # Team (DRT) can use to contact you for escalations to the DRT and to
150
+ # A list of email addresses and phone numbers that the Shield Response
151
+ # Team (SRT) can use to contact you for escalations to the SRT and to
152
152
  # initiate proactive customer support.
153
153
  #
154
154
  # To enable proactive engagement, the contact list must include at
@@ -213,7 +213,16 @@ module Aws::Shield
213
213
  # @return [Array<Types::SummarizedCounter>]
214
214
  #
215
215
  # @!attribute [rw] attack_properties
216
- # The array of AttackProperty objects.
216
+ # The array of objects that provide details of the Shield event.
217
+ #
218
+ # For infrastructure layer events (L3 and L4 events) after January 25,
219
+ # 2021, you can view metrics for top contributors in Amazon CloudWatch
220
+ # metrics. For more information, see [Shield metrics and alarms][1] in
221
+ # the *WAF Developer Guide*.
222
+ #
223
+ #
224
+ #
225
+ # [1]: https://docs.aws.amazon.com/waf/latest/developerguide/monitoring-cloudwatch.html#set-ddos-alarms
217
226
  # @return [Array<Types::AttackProperty>]
218
227
  #
219
228
  # @!attribute [rw] mitigations
@@ -235,33 +244,41 @@ module Aws::Shield
235
244
  include Aws::Structure
236
245
  end
237
246
 
238
- # Details of the described attack.
247
+ # Details of a Shield event. This is provided as part of an
248
+ # AttackDetail.
239
249
  #
240
250
  # @!attribute [rw] attack_layer
241
- # The type of distributed denial of service (DDoS) event that was
242
- # observed. `NETWORK` indicates layer 3 and layer 4 events and
243
- # `APPLICATION` indicates layer 7 events.
251
+ # The type of Shield event that was observed. `NETWORK` indicates
252
+ # layer 3 and layer 4 events and `APPLICATION` indicates layer 7
253
+ # events.
254
+ #
255
+ # For infrastructure layer events (L3 and L4 events) after January 25,
256
+ # 2021, you can view metrics for top contributors in Amazon CloudWatch
257
+ # metrics. For more information, see [Shield metrics and alarms][1] in
258
+ # the *WAF Developer Guide*.
259
+ #
260
+ #
261
+ #
262
+ # [1]: https://docs.aws.amazon.com/waf/latest/developerguide/monitoring-cloudwatch.html#set-ddos-alarms
244
263
  # @return [String]
245
264
  #
246
265
  # @!attribute [rw] attack_property_identifier
247
- # Defines the DDoS attack property information that is provided. The
266
+ # Defines the Shield event property information that is provided. The
248
267
  # `WORDPRESS_PINGBACK_REFLECTOR` and `WORDPRESS_PINGBACK_SOURCE`
249
- # values are valid only for WordPress reflective pingback DDoS
250
- # attacks.
268
+ # values are valid only for WordPress reflective pingback events.
251
269
  # @return [String]
252
270
  #
253
271
  # @!attribute [rw] top_contributors
254
- # The array of contributor objects that includes the top five
255
- # contributors to an attack.
272
+ # Contributor objects for the top five contributors to a Shield event.
256
273
  # @return [Array<Types::Contributor>]
257
274
  #
258
275
  # @!attribute [rw] unit
259
- # The unit of the `Value` of the contributions.
276
+ # The unit used for the `Contributor` `Value` property.
260
277
  # @return [String]
261
278
  #
262
279
  # @!attribute [rw] total
263
- # The total contributions made to this attack by all contributors, not
264
- # just the five listed in the `TopContributors` list.
280
+ # The total contributions made to this Shield event by all
281
+ # contributors.
265
282
  # @return [Integer]
266
283
  #
267
284
  # @see http://docs.aws.amazon.com/goto/WebAPI/shield-2016-06-02/AttackProperty AWS API Documentation
@@ -485,8 +502,8 @@ module Aws::Shield
485
502
  # @return [String]
486
503
  #
487
504
  # @!attribute [rw] aggregation
488
- # Defines how AWS Shield combines resource data for the group in order
489
- # to detect, mitigate, and report events.
505
+ # Defines how Shield combines resource data for the group in order to
506
+ # detect, mitigate, and report events.
490
507
  #
491
508
  # * Sum - Use the total traffic across the group. This is a good
492
509
  # choice for most cases. Examples include Elastic IP addresses for
@@ -498,9 +515,8 @@ module Aws::Shield
498
515
  #
499
516
  # * Max - Use the highest traffic from each resource. This is useful
500
517
  # for resources that don't share traffic and for resources that
501
- # share that traffic in a non-uniform way. Examples include
502
- # CloudFront distributions and origin resources for CloudFront
503
- # distributions.
518
+ # share that traffic in a non-uniform way. Examples include Amazon
519
+ # CloudFront and origin resources for CloudFront distributions.
504
520
  # @return [String]
505
521
  #
506
522
  # @!attribute [rw] pattern
@@ -577,10 +593,10 @@ module Aws::Shield
577
593
  # `arn:aws:elasticloadbalancing:region:account-id:loadbalancer/load-balancer-name
578
594
  # `
579
595
  #
580
- # * For an AWS CloudFront distribution:
596
+ # * For an Amazon CloudFront distribution:
581
597
  # `arn:aws:cloudfront::account-id:distribution/distribution-id `
582
598
  #
583
- # * For an AWS Global Accelerator accelerator:
599
+ # * For an Global Accelerator accelerator:
584
600
  # `arn:aws:globalaccelerator::account-id:accelerator/accelerator-id
585
601
  # `
586
602
  #
@@ -748,12 +764,12 @@ module Aws::Shield
748
764
  class DescribeDRTAccessRequest < Aws::EmptyStructure; end
749
765
 
750
766
  # @!attribute [rw] role_arn
751
- # The Amazon Resource Name (ARN) of the role the DRT used to access
752
- # your AWS account.
767
+ # The Amazon Resource Name (ARN) of the role the SRT used to access
768
+ # your Amazon Web Services account.
753
769
  # @return [String]
754
770
  #
755
771
  # @!attribute [rw] log_bucket_list
756
- # The list of Amazon S3 buckets accessed by the DRT.
772
+ # The list of Amazon S3 buckets accessed by the SRT.
757
773
  # @return [Array<String>]
758
774
  #
759
775
  # @see http://docs.aws.amazon.com/goto/WebAPI/shield-2016-06-02/DescribeDRTAccessResponse AWS API Documentation
@@ -772,9 +788,9 @@ module Aws::Shield
772
788
  class DescribeEmergencyContactSettingsRequest < Aws::EmptyStructure; end
773
789
 
774
790
  # @!attribute [rw] emergency_contact_list
775
- # A list of email addresses and phone numbers that the DDoS Response
776
- # Team (DRT) can use to contact you if you have proactive engagement
777
- # enabled, for escalations to the DRT and to initiate proactive
791
+ # A list of email addresses and phone numbers that the Shield Response
792
+ # Team (SRT) can use to contact you if you have proactive engagement
793
+ # enabled, for escalations to the SRT and to initiate proactive
778
794
  # customer support.
779
795
  # @return [Array<Types::EmergencyContact>]
780
796
  #
@@ -808,8 +824,8 @@ module Aws::Shield
808
824
  end
809
825
 
810
826
  # @!attribute [rw] protection_group
811
- # A grouping of protected resources that you and AWS Shield Advanced
812
- # can monitor as a collective. This resource grouping improves the
827
+ # A grouping of protected resources that you and Shield Advanced can
828
+ # monitor as a collective. This resource grouping improves the
813
829
  # accuracy of detection and reduces false positives.
814
830
  # @return [Types::ProtectionGroup]
815
831
  #
@@ -837,8 +853,8 @@ module Aws::Shield
837
853
  # @return [String]
838
854
  #
839
855
  # @!attribute [rw] resource_arn
840
- # The ARN (Amazon Resource Name) of the AWS resource for the
841
- # Protection object that is described. When submitting the
856
+ # The ARN (Amazon Resource Name) of the Amazon Web Services resource
857
+ # for the Protection object that is described. When submitting the
842
858
  # `DescribeProtection` request you must provide either the
843
859
  # `ResourceArn` or the `ProtectionID`, but not both.
844
860
  # @return [String]
@@ -871,7 +887,7 @@ module Aws::Shield
871
887
  class DescribeSubscriptionRequest < Aws::EmptyStructure; end
872
888
 
873
889
  # @!attribute [rw] subscription
874
- # The AWS Shield Advanced subscription details for an account.
890
+ # The Shield Advanced subscription details for an account.
875
891
  # @return [Types::Subscription]
876
892
  #
877
893
  # @see http://docs.aws.amazon.com/goto/WebAPI/shield-2016-06-02/DescribeSubscriptionResponse AWS API Documentation
@@ -900,7 +916,7 @@ module Aws::Shield
900
916
  # }
901
917
  #
902
918
  # @!attribute [rw] log_bucket
903
- # The Amazon S3 bucket that contains your AWS WAF logs.
919
+ # The Amazon S3 bucket that contains the logs that you want to share.
904
920
  # @return [String]
905
921
  #
906
922
  # @see http://docs.aws.amazon.com/goto/WebAPI/shield-2016-06-02/DisassociateDRTLogBucketRequest AWS API Documentation
@@ -956,8 +972,8 @@ module Aws::Shield
956
972
  #
957
973
  class DisassociateHealthCheckResponse < Aws::EmptyStructure; end
958
974
 
959
- # Contact information that the DRT can use to contact you if you have
960
- # proactive engagement enabled, for escalations to the DRT and to
975
+ # Contact information that the SRT can use to contact you if you have
976
+ # proactive engagement enabled, for escalations to the SRT and to
961
977
  # initiate proactive customer support.
962
978
  #
963
979
  # @note When making an API call, you may pass EmergencyContact
@@ -1282,9 +1298,9 @@ module Aws::Shield
1282
1298
  #
1283
1299
  # @!attribute [rw] next_token
1284
1300
  # If you specify a value for `MaxResults` and you have more protection
1285
- # groups than the value of MaxResults, AWS Shield Advanced returns
1286
- # this token that you can use in your next request, to get the next
1287
- # batch of objects.
1301
+ # groups than the value of MaxResults, Shield Advanced returns this
1302
+ # token that you can use in your next request, to get the next batch
1303
+ # of objects.
1288
1304
  # @return [String]
1289
1305
  #
1290
1306
  # @see http://docs.aws.amazon.com/goto/WebAPI/shield-2016-06-02/ListProtectionGroupsResponse AWS API Documentation
@@ -1336,12 +1352,11 @@ module Aws::Shield
1336
1352
  #
1337
1353
  # @!attribute [rw] next_token
1338
1354
  # If you specify a value for `MaxResults` and you have more
1339
- # Protections than the value of MaxResults, AWS Shield Advanced
1340
- # returns a NextToken value in the response that allows you to list
1341
- # another group of Protections. For the second and subsequent
1342
- # ListProtections requests, specify the value of NextToken from the
1343
- # previous response to get information about another batch of
1344
- # Protections.
1355
+ # Protections than the value of MaxResults, Shield Advanced returns a
1356
+ # NextToken value in the response that allows you to list another
1357
+ # group of Protections. For the second and subsequent ListProtections
1358
+ # requests, specify the value of NextToken from the previous response
1359
+ # to get information about another batch of Protections.
1345
1360
  #
1346
1361
  # Shield Advanced might return the list of Protection objects in
1347
1362
  # batches smaller than the number specified by MaxResults. If there
@@ -1408,7 +1423,7 @@ module Aws::Shield
1408
1423
  #
1409
1424
  # @!attribute [rw] next_token
1410
1425
  # If you specify a value for `MaxResults` and you have more resources
1411
- # in the protection group than the value of MaxResults, AWS Shield
1426
+ # in the protection group than the value of MaxResults, Shield
1412
1427
  # Advanced returns this token that you can use in your next request,
1413
1428
  # to get the next batch of objects.
1414
1429
  # @return [String]
@@ -1523,8 +1538,8 @@ module Aws::Shield
1523
1538
  # @return [String]
1524
1539
  #
1525
1540
  # @!attribute [rw] resource_arn
1526
- # The ARN (Amazon Resource Name) of the AWS resource that is
1527
- # protected.
1541
+ # The ARN (Amazon Resource Name) of the Amazon Web Services resource
1542
+ # that is protected.
1528
1543
  # @return [String]
1529
1544
  #
1530
1545
  # @!attribute [rw] health_check_ids
@@ -1548,7 +1563,7 @@ module Aws::Shield
1548
1563
  include Aws::Structure
1549
1564
  end
1550
1565
 
1551
- # A grouping of protected resources that you and AWS Shield Advanced can
1566
+ # A grouping of protected resources that you and Shield Advanced can
1552
1567
  # monitor as a collective. This resource grouping improves the accuracy
1553
1568
  # of detection and reduces false positives.
1554
1569
  #
@@ -1559,8 +1574,8 @@ module Aws::Shield
1559
1574
  # @return [String]
1560
1575
  #
1561
1576
  # @!attribute [rw] aggregation
1562
- # Defines how AWS Shield combines resource data for the group in order
1563
- # to detect, mitigate, and report events.
1577
+ # Defines how Shield combines resource data for the group in order to
1578
+ # detect, mitigate, and report events.
1564
1579
  #
1565
1580
  # * Sum - Use the total traffic across the group. This is a good
1566
1581
  # choice for most cases. Examples include Elastic IP addresses for
@@ -1572,7 +1587,7 @@ module Aws::Shield
1572
1587
  #
1573
1588
  # * Max - Use the highest traffic from each resource. This is useful
1574
1589
  # for resources that don't share traffic and for resources that
1575
- # share that traffic in a non-uniform way. Examples include
1590
+ # share that traffic in a non-uniform way. Examples include Amazon
1576
1591
  # CloudFront distributions and origin resources for CloudFront
1577
1592
  # distributions.
1578
1593
  # @return [String]
@@ -1747,7 +1762,7 @@ module Aws::Shield
1747
1762
  include Aws::Structure
1748
1763
  end
1749
1764
 
1750
- # Information about the AWS Shield Advanced subscription for an account.
1765
+ # Information about the Shield Advanced subscription for an account.
1751
1766
  #
1752
1767
  # @!attribute [rw] start_time
1753
1768
  # The start time of the subscription, in Unix time in seconds. For
@@ -1763,8 +1778,8 @@ module Aws::Shield
1763
1778
  # @return [Time]
1764
1779
  #
1765
1780
  # @!attribute [rw] time_commitment_in_seconds
1766
- # The length, in seconds, of the AWS Shield Advanced subscription for
1767
- # the account.
1781
+ # The length, in seconds, of the Shield Advanced subscription for the
1782
+ # account.
1768
1783
  # @return [Integer]
1769
1784
  #
1770
1785
  # @!attribute [rw] auto_renew
@@ -1783,15 +1798,15 @@ module Aws::Shield
1783
1798
  # @return [Array<Types::Limit>]
1784
1799
  #
1785
1800
  # @!attribute [rw] proactive_engagement_status
1786
- # If `ENABLED`, the DDoS Response Team (DRT) will use email and phone
1787
- # to notify contacts about escalations to the DRT and to initiate
1788
- # proactive customer support.
1801
+ # If `ENABLED`, the Shield Response Team (SRT) will use email and
1802
+ # phone to notify contacts about escalations to the SRT and to
1803
+ # initiate proactive customer support.
1789
1804
  #
1790
1805
  # If `PENDING`, you have requested proactive engagement and the
1791
1806
  # request is pending. The status changes to `ENABLED` when your
1792
1807
  # request is fully processed.
1793
1808
  #
1794
- # If `DISABLED`, the DRT will not proactively notify contacts about
1809
+ # If `DISABLED`, the SRT will not proactively notify contacts about
1795
1810
  # escalations or to initiate proactive customer support.
1796
1811
  # @return [String]
1797
1812
  #
@@ -1895,15 +1910,15 @@ module Aws::Shield
1895
1910
  include Aws::Structure
1896
1911
  end
1897
1912
 
1898
- # A tag associated with an AWS resource. Tags are key:value pairs that
1899
- # you can use to categorize and manage your resources, for purposes like
1900
- # billing or other management. Typically, the tag key represents a
1901
- # category, such as "environment", and the tag value represents a
1902
- # specific value within that category, such as "test,"
1903
- # "development," or "production". Or you might set the tag key to
1904
- # "customer" and the value to the customer name or ID. You can specify
1905
- # one or more tags to add to each AWS resource, up to 50 tags for a
1906
- # resource.
1913
+ # A tag associated with an Amazon Web Services resource. Tags are
1914
+ # key:value pairs that you can use to categorize and manage your
1915
+ # resources, for purposes like billing or other management. Typically,
1916
+ # the tag key represents a category, such as "environment", and the
1917
+ # tag value represents a specific value within that category, such as
1918
+ # "test," "development," or "production". Or you might set the tag
1919
+ # key to "customer" and the value to the customer name or ID. You can
1920
+ # specify one or more tags to add to each Amazon Web Services resource,
1921
+ # up to 50 tags for a resource.
1907
1922
  #
1908
1923
  # @note When making an API call, you may pass Tag
1909
1924
  # data as a hash:
@@ -2050,9 +2065,9 @@ module Aws::Shield
2050
2065
  # }
2051
2066
  #
2052
2067
  # @!attribute [rw] emergency_contact_list
2053
- # A list of email addresses and phone numbers that the DDoS Response
2054
- # Team (DRT) can use to contact you if you have proactive engagement
2055
- # enabled, for escalations to the DRT and to initiate proactive
2068
+ # A list of email addresses and phone numbers that the Shield Response
2069
+ # Team (SRT) can use to contact you if you have proactive engagement
2070
+ # enabled, for escalations to the SRT and to initiate proactive
2056
2071
  # customer support.
2057
2072
  #
2058
2073
  # If you have proactive engagement enabled, the contact list must
@@ -2089,8 +2104,8 @@ module Aws::Shield
2089
2104
  # @return [String]
2090
2105
  #
2091
2106
  # @!attribute [rw] aggregation
2092
- # Defines how AWS Shield combines resource data for the group in order
2093
- # to detect, mitigate, and report events.
2107
+ # Defines how Shield combines resource data for the group in order to
2108
+ # detect, mitigate, and report events.
2094
2109
  #
2095
2110
  # * Sum - Use the total traffic across the group. This is a good
2096
2111
  # choice for most cases. Examples include Elastic IP addresses for
@@ -2102,7 +2117,7 @@ module Aws::Shield
2102
2117
  #
2103
2118
  # * Max - Use the highest traffic from each resource. This is useful
2104
2119
  # for resources that don't share traffic and for resources that
2105
- # share that traffic in a non-uniform way. Examples include
2120
+ # share that traffic in a non-uniform way. Examples include Amazon
2106
2121
  # CloudFront distributions and origin resources for CloudFront
2107
2122
  # distributions.
2108
2123
  # @return [String]
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: aws-sdk-shield
3
3
  version: !ruby/object:Gem::Version
4
- version: 1.37.0
4
+ version: 1.38.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Amazon Web Services
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2021-04-09 00:00:00.000000000 Z
11
+ date: 2021-07-27 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: aws-sdk-core
@@ -83,8 +83,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
83
83
  - !ruby/object:Gem::Version
84
84
  version: '0'
85
85
  requirements: []
86
- rubyforge_project:
87
- rubygems_version: 2.7.6.2
86
+ rubygems_version: 3.1.6
88
87
  signing_key:
89
88
  specification_version: 4
90
89
  summary: AWS SDK for Ruby - AWS Shield