aws-sdk-ssm 1.100.0 → 1.105.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 93e73b8a694febf8c6e952fc85b110882e60c2bc1fe071539af701ebe15facf2
-  data.tar.gz: ad7a20e4c9faabd84ed9f2784d4bef9429003c26898ed6420640e9f291b47baa
+  metadata.gz: a987f1a0207b8dadd73dc227b9f9669146b4c04f0d7a7f885082885c43c074ef
+  data.tar.gz: 616e0ed5ed9127ec7767ed639ab6ab37c7aea8268f53fb4a3428907baedd0793
 SHA512:
-  metadata.gz: 7ff60f4c22619b371c04c924f3ce45498eacb765f5d29b65de780eb09d6325d45aacf7f64a776e87f67a4a2f7f1d52ecf99e985e021f4fc47bdd844ab0a2c768
-  data.tar.gz: 7dd2d933e43aab62907b24bf8679ae96a26db4f860727f561976211687c7310d1e692c672138ccb3fb1e5db6698cedd5e2dfeb926b35cdfcaaf694e44f44da3f
+  metadata.gz: 6d847063652f6e9b58ae71e1cbbe65d4d7d49595636a92860f3ec15b81fe06fcab98bfdf26da409681567f1852d1c63cec2f6a13da2598be6ffef1ffde16dc17
+  data.tar.gz: 1846b6694947e6026cc14dc6fc36123c3617152be47ee02ae5f22ed3369b2f1cbb9a8cfad2c5dc46037175bcc2241976886abd9f2b8c5da437fd22c5777f22fe

data/lib/aws-sdk-ssm.rb

@@ -49,6 +49,6 @@ require_relative 'aws-sdk-ssm/customizations'
 # @!group service
 module Aws::SSM
 
-  GEM_VERSION = '1.100.0'
+  GEM_VERSION = '1.105.0'
 
 end

data/lib/aws-sdk-ssm/client.rb

@@ -1563,8 +1563,8 @@ module Aws::SSM
     #   [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/patch-manager-approved-rejected-package-name-formats.html
     #
     # @option params [String] :approved_patches_compliance_level
-    #   Defines the compliance level for approved patches. This means that if
-    #   an approved patch is reported as missing, this is the severity of the
+    #   Defines the compliance level for approved patches. When an approved
+    #   patch is reported as missing, this value describes the severity of the
     #   compliance violation. The default value is UNSPECIFIED.
     #
     # @option params [Boolean] :approved_patches_enable_non_security
@@ -2941,16 +2941,28 @@ module Aws::SSM
     #   The permission type for the document. The permission type can be
     #   *Share*.
     #
+    # @option params [Integer] :max_results
+    #   The maximum number of items to return for this call. The call also
+    #   returns a token that you can specify in a subsequent call to get the
+    #   next set of results.
+    #
+    # @option params [String] :next_token
+    #   The token for the next set of items to return. (You received this
+    #   token from a previous call.)
+    #
     # @return [Types::DescribeDocumentPermissionResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::DescribeDocumentPermissionResponse#account_ids #account_ids} => Array<String>
     #   * {Types::DescribeDocumentPermissionResponse#account_sharing_info_list #account_sharing_info_list} => Array<Types::AccountSharingInfo>
+    #   * {Types::DescribeDocumentPermissionResponse#next_token #next_token} => String
     #
     # @example Request syntax with placeholder values
     #
     #   resp = client.describe_document_permission({
     #     name: "DocumentName", # required
     #     permission_type: "Share", # required, accepts Share
+    #     max_results: 1,
+    #     next_token: "NextToken",
     #   })
     #
     # @example Response structure
@@ -2960,6 +2972,7 @@ module Aws::SSM
     #   resp.account_sharing_info_list #=> Array
     #   resp.account_sharing_info_list[0].account_id #=> String
     #   resp.account_sharing_info_list[0].shared_document_version #=> String
+    #   resp.next_token #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ssm-2014-11-06/DescribeDocumentPermission AWS API Documentation
     #
@@ -3845,6 +3858,14 @@ module Aws::SSM
 
     # Lists the tasks in a maintenance window.
     #
+    # <note markdown="1"> For maintenance window tasks without a specified target, you cannot
+    # supply values for `--max-errors` and `--max-concurrency`. Instead, the
+    # system inserts a placeholder value of `1`, which may be reported in
+    # the response to this command. These values do not affect the running
+    # of your task and can be ignored.
+    #
+    #  </note>
+    #
     # @option params [required, String] :window_id
     #   The ID of the maintenance window whose tasks should be retrieved.
     #
@@ -4961,6 +4982,9 @@ module Aws::SSM
     # @option params [required, String] :snapshot_id
     #   The user-defined snapshot ID.
     #
+    # @option params [Types::BaselineOverride] :baseline_override
+    #   Defines the basic information about a patch baseline override.
+    #
     # @return [Types::GetDeployablePatchSnapshotForInstanceResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::GetDeployablePatchSnapshotForInstanceResult#instance_id #instance_id} => String
@@ -4973,6 +4997,47 @@ module Aws::SSM
     #   resp = client.get_deployable_patch_snapshot_for_instance({
     #     instance_id: "InstanceId", # required
     #     snapshot_id: "SnapshotId", # required
+    #     baseline_override: {
+    #       operating_system: "WINDOWS", # accepts WINDOWS, AMAZON_LINUX, AMAZON_LINUX_2, UBUNTU, REDHAT_ENTERPRISE_LINUX, SUSE, CENTOS, ORACLE_LINUX, DEBIAN, MACOS
+    #       global_filters: {
+    #         patch_filters: [ # required
+    #           {
+    #             key: "ARCH", # required, accepts ARCH, ADVISORY_ID, BUGZILLA_ID, PATCH_SET, PRODUCT, PRODUCT_FAMILY, CLASSIFICATION, CVE_ID, EPOCH, MSRC_SEVERITY, NAME, PATCH_ID, SECTION, PRIORITY, REPOSITORY, RELEASE, SEVERITY, SECURITY, VERSION
+    #             values: ["PatchFilterValue"], # required
+    #           },
+    #         ],
+    #       },
+    #       approval_rules: {
+    #         patch_rules: [ # required
+    #           {
+    #             patch_filter_group: { # required
+    #               patch_filters: [ # required
+    #                 {
+    #                   key: "ARCH", # required, accepts ARCH, ADVISORY_ID, BUGZILLA_ID, PATCH_SET, PRODUCT, PRODUCT_FAMILY, CLASSIFICATION, CVE_ID, EPOCH, MSRC_SEVERITY, NAME, PATCH_ID, SECTION, PRIORITY, REPOSITORY, RELEASE, SEVERITY, SECURITY, VERSION
+    #                   values: ["PatchFilterValue"], # required
+    #                 },
+    #               ],
+    #             },
+    #             compliance_level: "CRITICAL", # accepts CRITICAL, HIGH, MEDIUM, LOW, INFORMATIONAL, UNSPECIFIED
+    #             approve_after_days: 1,
+    #             approve_until_date: "PatchStringDateTime",
+    #             enable_non_security: false,
+    #           },
+    #         ],
+    #       },
+    #       approved_patches: ["PatchId"],
+    #       approved_patches_compliance_level: "CRITICAL", # accepts CRITICAL, HIGH, MEDIUM, LOW, INFORMATIONAL, UNSPECIFIED
+    #       rejected_patches: ["PatchId"],
+    #       rejected_patches_action: "ALLOW_AS_DEPENDENCY", # accepts ALLOW_AS_DEPENDENCY, BLOCK
+    #       approved_patches_enable_non_security: false,
+    #       sources: [
+    #         {
+    #           name: "PatchSourceName", # required
+    #           products: ["PatchSourceProduct"], # required
+    #           configuration: "PatchSourceConfiguration", # required
+    #         },
+    #       ],
+    #     },
     #   })
     #
     # @example Response structure
@@ -5435,6 +5500,14 @@ module Aws::SSM
 
     # Lists the tasks in a maintenance window.
     #
+    # <note markdown="1"> For maintenance window tasks without a specified target, you cannot
+    # supply values for `--max-errors` and `--max-concurrency`. Instead, the
+    # system inserts a placeholder value of `1`, which may be reported in
+    # the response to this command. These values do not affect the running
+    # of your task and can be ignored.
+    #
+    #  </note>
+    #
     # @option params [required, String] :window_id
     #   The maintenance window ID that includes the task to retrieve.
     #
@@ -5895,9 +5968,11 @@ module Aws::SSM
     #
     # @option params [required, String] :path
     #   The hierarchy for the parameter. Hierarchies start with a forward
-    #   slash (/) and end with the parameter name. A parameter name hierarchy
-    #   can have a maximum of 15 levels. Here is an example of a hierarchy:
-    #   `/Finance/Prod/IAD/WinServ2016/license33`
+    #   slash (/). The hierachy is the parameter name except the last part of
+    #   the parameter. For the API call to succeeed, the last part of the
+    #   parameter name cannot be in the path. A parameter name hierarchy can
+    #   have a maximum of 15 levels. Here is an example of a hierarchy:
+    #   `/Finance/Prod/IAD/WinServ2016/license33 `
     #
     # @option params [Boolean] :recursive
     #   Retrieve all parameters within a hierarchy.
@@ -6111,6 +6186,8 @@ module Aws::SSM
     #
     # @option params [required, String] :setting_id
     #   The ID of the service setting to get. The setting ID can be
+    #   `/ssm/automation/customer-script-log-destination`,
+    #   `/ssm/automation/customer-script-log-group-name`,
     #   `/ssm/parameter-store/default-parameter-tier`,
     #   `/ssm/parameter-store/high-throughput-enabled`, or
     #   `/ssm/managed-instance/activation-tier`.
@@ -6826,14 +6903,20 @@ module Aws::SSM
     #   This data type is deprecated. Instead, use `Filters`.
     #
     # @option params [Array<Types::DocumentKeyValuesFilter>] :filters
-    #   One or more DocumentKeyValuesFilter objects. Use a filter to return a
-    #   more specific list of results. For keys, you can specify one or more
+    #   One or more `DocumentKeyValuesFilter` objects. Use a filter to return
+    #   a more specific list of results. For keys, you can specify one or more
     #   key-value pair tags that have been applied to a document. Other valid
     #   keys include `Owner`, `Name`, `PlatformTypes`, `DocumentType`, and
     #   `TargetType`. For example, to return documents you own use
     #   `Key=Owner,Values=Self`. To specify a custom key-value pair, use the
     #   format `Key=tag:tagName,Values=valueName`.
     #
+    #   <note markdown="1"> This API action only supports filtering documents by using a single
+    #   tag key and one or more tag values. For example:
+    #   `Key=tag:tagName,Values=valueName1,valueName2`
+    #
+    #    </note>
+    #
     # @option params [Integer] :max_results
     #   The maximum number of items to return for this call. The call also
     #   returns a token that you can specify in a subsequent call to get the
@@ -7511,7 +7594,11 @@ module Aws::SSM
     #     (case-insensitive).
     #
     #   * Parameter names can include only the following symbols and letters:
-    #     `a-zA-Z0-9_.-/`
+    #     `a-zA-Z0-9_.-`
+    #
+    #     In addition, the slash character ( / ) is used to delineate
+    #     hierarchies in parameter names. For example:
+    #     `/Dev/Production/East/Project-ABC/MyParameter`
     #
     #   * A parameter name can't include spaces.
     #
@@ -7519,8 +7606,8 @@ module Aws::SSM
     #     levels.
     #
     #   For additional information about valid values for parameter names, see
-    #   [About requirements and constraints for parameter names][1] in the
-    #   *AWS Systems Manager User Guide*.
+    #   [Creating Systems Manager parameters][1] in the *AWS Systems Manager
+    #   User Guide*.
     #
     #   <note markdown="1"> The maximum length constraint listed below includes capacity for
     #   additional system attributes that are not part of the name. The
@@ -7534,7 +7621,7 @@ module Aws::SSM
     #
     #
     #
-    #   [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/sysman-parameter-name-constraints.html
+    #   [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/sysman-paramstore-su-create.html
     #
     # @option params [String] :description
     #   Information about the parameter that you want to add to the system.
@@ -7862,6 +7949,14 @@ module Aws::SSM
     #   The targets to register with the maintenance window. In other words,
     #   the instances to run commands on when the maintenance window runs.
     #
+    #   <note markdown="1"> If a single maintenance window task is registered with multiple
+    #   targets, its task invocations occur sequentially and not in parallel.
+    #   If your task must run on multiple targets at the same time, register a
+    #   task for each target individually and assign each task the same
+    #   priority level.
+    #
+    #    </note>
+    #
     #   You can specify targets using instance IDs, resource group names, or
     #   tags that have been applied to instances.
     #
@@ -7958,9 +8053,18 @@ module Aws::SSM
     # @option params [required, String] :window_id
     #   The ID of the maintenance window the task should be added to.
     #
-    # @option params [required, Array<Types::Target>] :targets
+    # @option params [Array<Types::Target>] :targets
     #   The targets (either instances or maintenance window targets).
     #
+    #   <note markdown="1"> One or more targets must be specified for maintenance window Run
+    #   Command-type tasks. Depending on the task, targets are optional for
+    #   other maintenance window task types (Automation, AWS Lambda, and AWS
+    #   Step Functions). For more information about running tasks that do not
+    #   specify targets, see [Registering maintenance window tasks without
+    #   targets][1] in the *AWS Systems Manager User Guide*.
+    #
+    #    </note>
+    #
     #   Specify instances using the following format:
     #
     #   `Key=InstanceIds,Values=<instance-id-1>,<instance-id-2>`
@@ -7969,6 +8073,10 @@ module Aws::SSM
     #
     #   `Key=WindowTargetIds,Values=<window-target-id-1>,<window-target-id-2>`
     #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/maintenance-windows-targetless-tasks.html
+    #
     # @option params [required, String] :task_arn
     #   The ARN of the task to run.
     #
@@ -8017,13 +8125,27 @@ module Aws::SSM
     #   scheduled in priority order with tasks that have the same priority
     #   scheduled in parallel.
     #
-    # @option params [required, String] :max_concurrency
+    # @option params [String] :max_concurrency
     #   The maximum number of targets this task can be run for in parallel.
     #
-    # @option params [required, String] :max_errors
+    #   <note markdown="1"> For maintenance window tasks without a target specified, you cannot
+    #   supply a value for this option. Instead, the system inserts a
+    #   placeholder value of `1`. This value does not affect the running of
+    #   your task.
+    #
+    #    </note>
+    #
+    # @option params [String] :max_errors
     #   The maximum number of errors allowed before this task stops being
     #   scheduled.
     #
+    #   <note markdown="1"> For maintenance window tasks without a target specified, you cannot
+    #   supply a value for this option. Instead, the system inserts a
+    #   placeholder value of `1`. This value does not affect the running of
+    #   your task.
+    #
+    #    </note>
+    #
     # @option params [Types::LoggingInfo] :logging_info
     #   A structure containing information about an S3 bucket to write
     #   instance-level logs to.
@@ -8057,7 +8179,7 @@ module Aws::SSM
     #
     #   resp = client.register_task_with_maintenance_window({
     #     window_id: "MaintenanceWindowId", # required
-    #     targets: [ # required
+    #     targets: [
     #       {
     #         key: "TargetKey",
     #         values: ["TargetValue"],
@@ -8111,8 +8233,8 @@ module Aws::SSM
     #       },
     #     },
     #     priority: 1,
-    #     max_concurrency: "MaxConcurrency", # required
-    #     max_errors: "MaxErrors", # required
+    #     max_concurrency: "MaxConcurrency",
+    #     max_errors: "MaxErrors",
     #     logging_info: {
     #       s3_bucket_name: "S3BucketName", # required
     #       s3_key_prefix: "S3KeyPrefix",
@@ -8207,7 +8329,9 @@ module Aws::SSM
     #
     # @option params [required, String] :setting_id
     #   The Amazon Resource Name (ARN) of the service setting to reset. The
-    #   setting ID can be `/ssm/parameter-store/default-parameter-tier`,
+    #   setting ID can be `/ssm/automation/customer-script-log-destination`,
+    #   `/ssm/automation/customer-script-log-group-name`,
+    #   `/ssm/parameter-store/default-parameter-tier`,
     #   `/ssm/parameter-store/high-throughput-enabled`, or
     #   `/ssm/managed-instance/activation-tier`. For example,
     #   `arn:aws:ssm:us-east-1:111122223333:servicesetting/ssm/parameter-store/high-throughput-enabled`.
@@ -8370,8 +8494,15 @@ module Aws::SSM
     #   [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/send-commands-multiple.html
     #
     # @option params [required, String] :document_name
-    #   Required. The name of the Systems Manager document to run. This can be
-    #   a public document or a custom document.
+    #   The name of the Systems Manager document to run. This can be a public
+    #   document or a custom document. To run a shared document belonging to
+    #   another account, specify the document ARN. For more information about
+    #   how to use shared documents, see [Using shared SSM documents][1] in
+    #   the *AWS Systems Manager User Guide*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/ssm-using-shared.html
     #
     # @option params [String] :document_version
     #   The SSM document version to use in the request. You can specify
@@ -8574,7 +8705,15 @@ module Aws::SSM
     # Initiates execution of an Automation document.
     #
     # @option params [required, String] :document_name
-    #   The name of the Automation document to use for this execution.
+    #   The name of the Systems Manager document to run. This can be a public
+    #   document or a custom document. To run a shared document belonging to
+    #   another account, specify the document ARN. For more information about
+    #   how to use shared documents, see [Using shared SSM documents][1] in
+    #   the *AWS Systems Manager User Guide*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/ssm-using-shared.html
     #
     # @option params [String] :document_version
     #   The version of the Automation document to use for this execution.
@@ -9702,6 +9841,15 @@ module Aws::SSM
     #
     # * MaxErrors
     #
+    # <note markdown="1"> One or more targets must be specified for maintenance window Run
+    # Command-type tasks. Depending on the task, targets are optional for
+    # other maintenance window task types (Automation, AWS Lambda, and AWS
+    # Step Functions). For more information about running tasks that do not
+    # specify targets, see [Registering maintenance window tasks without
+    # targets][1] in the *AWS Systems Manager User Guide*.
+    #
+    #  </note>
+    #
     # If the value for a parameter in `UpdateMaintenanceWindowTask` is null,
     # then the corresponding field is not modified. If you set `Replace` to
     # true, then all fields required by the
@@ -9718,6 +9866,10 @@ module Aws::SSM
     # and specify only a different `OutputS3BucketName` value, the values
     # for `Comment` and `NotificationConfig` are removed.
     #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/maintenance-windows-targetless-tasks.html
+    #
     # @option params [required, String] :window_id
     #   The maintenance window ID that contains the task to modify.
     #
@@ -9729,6 +9881,19 @@ module Aws::SSM
     #   specified using Key=instanceids,Values=instanceID\_1,instanceID\_2.
     #   Tags are specified using Key=tag\_name,Values=tag\_value.
     #
+    #   <note markdown="1"> One or more targets must be specified for maintenance window Run
+    #   Command-type tasks. Depending on the task, targets are optional for
+    #   other maintenance window task types (Automation, AWS Lambda, and AWS
+    #   Step Functions). For more information about running tasks that do not
+    #   specify targets, see [Registering maintenance window tasks without
+    #   targets][1] in the *AWS Systems Manager User Guide*.
+    #
+    #    </note>
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/maintenance-windows-targetless-tasks.html
+    #
     # @option params [String] :task_arn
     #   The task ARN to modify.
     #
@@ -9794,11 +9959,27 @@ module Aws::SSM
     #   is the number of targets that are allowed to run this task in
     #   parallel.
     #
+    #   <note markdown="1"> For maintenance window tasks without a target specified, you cannot
+    #   supply a value for this option. Instead, the system inserts a
+    #   placeholder value of `1`, which may be reported in the response to
+    #   this command. This value does not affect the running of your task and
+    #   can be ignored.
+    #
+    #    </note>
+    #
     # @option params [String] :max_errors
     #   The new `MaxErrors` value to specify. `MaxErrors` is the maximum
     #   number of errors that are allowed before the task stops being
     #   scheduled.
     #
+    #   <note markdown="1"> For maintenance window tasks without a target specified, you cannot
+    #   supply a value for this option. Instead, the system inserts a
+    #   placeholder value of `1`, which may be reported in the response to
+    #   this command. This value does not affect the running of your task and
+    #   can be ignored.
+    #
+    #    </note>
+    #
     # @option params [Types::LoggingInfo] :logging_info
     #   The new logging location in Amazon S3 to specify.
     #
@@ -10455,6 +10636,10 @@ module Aws::SSM
     #   `arn:aws:ssm:us-east-1:111122223333:servicesetting/ssm/parameter-store/high-throughput-enabled`.
     #   The setting ID can be one of the following.
     #
+    #   * `/ssm/automation/customer-script-log-destination`
+    #
+    #   * `/ssm/automation/customer-script-log-group-name`
+    #
     #   * `/ssm/parameter-store/default-parameter-tier`
     #
     #   * `/ssm/parameter-store/high-throughput-enabled`
@@ -10476,6 +10661,12 @@ module Aws::SSM
     #   `/ssm/managed-instance/activation-tier` setting IDs, the setting value
     #   can be true or false.
     #
+    #   For the `/ssm/automation/customer-script-log-destination` setting ID,
+    #   the setting value can be CloudWatch.
+    #
+    #   For the `/ssm/automation/customer-script-log-group-name` setting ID,
+    #   the setting value can be the name of a CloudWatch Logs log group.
+    #
     # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
     #
     # @example Request syntax with placeholder values
@@ -10507,7 +10698,7 @@ module Aws::SSM
         params: params,
         config: config)
       context[:gem_name] = 'aws-sdk-ssm'
-      context[:gem_version] = '1.100.0'
+      context[:gem_version] = '1.105.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-ssm/client_api.rb

@@ -117,6 +117,7 @@ module Aws::SSM
     BaselineDescription = Shapes::StringShape.new(name: 'BaselineDescription')
     BaselineId = Shapes::StringShape.new(name: 'BaselineId')
     BaselineName = Shapes::StringShape.new(name: 'BaselineName')
+    BaselineOverride = Shapes::StructureShape.new(name: 'BaselineOverride')
     BatchErrorMessage = Shapes::StringShape.new(name: 'BatchErrorMessage')
     Boolean = Shapes::BooleanShape.new(name: 'Boolean')
     CalendarNameOrARN = Shapes::StringShape.new(name: 'CalendarNameOrARN')
@@ -337,6 +338,7 @@ module Aws::SSM
     DocumentParameterName = Shapes::StringShape.new(name: 'DocumentParameterName')
     DocumentParameterType = Shapes::StringShape.new(name: 'DocumentParameterType')
     DocumentPermissionLimit = Shapes::StructureShape.new(name: 'DocumentPermissionLimit')
+    DocumentPermissionMaxResults = Shapes::IntegerShape.new(name: 'DocumentPermissionMaxResults')
     DocumentPermissionType = Shapes::StringShape.new(name: 'DocumentPermissionType')
     DocumentRequires = Shapes::StructureShape.new(name: 'DocumentRequires')
     DocumentRequiresList = Shapes::ListShape.new(name: 'DocumentRequiresList')
@@ -1416,6 +1418,17 @@ module Aws::SSM
     AutomationStepNotFoundException.add_member(:message, Shapes::ShapeRef.new(shape: String, location_name: "Message"))
     AutomationStepNotFoundException.struct_class = Types::AutomationStepNotFoundException
 
+    BaselineOverride.add_member(:operating_system, Shapes::ShapeRef.new(shape: OperatingSystem, location_name: "OperatingSystem"))
+    BaselineOverride.add_member(:global_filters, Shapes::ShapeRef.new(shape: PatchFilterGroup, location_name: "GlobalFilters"))
+    BaselineOverride.add_member(:approval_rules, Shapes::ShapeRef.new(shape: PatchRuleGroup, location_name: "ApprovalRules"))
+    BaselineOverride.add_member(:approved_patches, Shapes::ShapeRef.new(shape: PatchIdList, location_name: "ApprovedPatches"))
+    BaselineOverride.add_member(:approved_patches_compliance_level, Shapes::ShapeRef.new(shape: PatchComplianceLevel, location_name: "ApprovedPatchesComplianceLevel"))
+    BaselineOverride.add_member(:rejected_patches, Shapes::ShapeRef.new(shape: PatchIdList, location_name: "RejectedPatches"))
+    BaselineOverride.add_member(:rejected_patches_action, Shapes::ShapeRef.new(shape: PatchAction, location_name: "RejectedPatchesAction"))
+    BaselineOverride.add_member(:approved_patches_enable_non_security, Shapes::ShapeRef.new(shape: Boolean, location_name: "ApprovedPatchesEnableNonSecurity"))
+    BaselineOverride.add_member(:sources, Shapes::ShapeRef.new(shape: PatchSourceList, location_name: "Sources"))
+    BaselineOverride.struct_class = Types::BaselineOverride
+
     CalendarNameOrARNList.member = Shapes::ShapeRef.new(shape: CalendarNameOrARN)
 
     CancelCommandRequest.add_member(:command_id, Shapes::ShapeRef.new(shape: CommandId, required: true, location_name: "CommandId"))
@@ -1878,10 +1891,13 @@ module Aws::SSM
 
     DescribeDocumentPermissionRequest.add_member(:name, Shapes::ShapeRef.new(shape: DocumentName, required: true, location_name: "Name"))
     DescribeDocumentPermissionRequest.add_member(:permission_type, Shapes::ShapeRef.new(shape: DocumentPermissionType, required: true, location_name: "PermissionType"))
+    DescribeDocumentPermissionRequest.add_member(:max_results, Shapes::ShapeRef.new(shape: DocumentPermissionMaxResults, location_name: "MaxResults", metadata: {"box"=>true}))
+    DescribeDocumentPermissionRequest.add_member(:next_token, Shapes::ShapeRef.new(shape: NextToken, location_name: "NextToken"))
     DescribeDocumentPermissionRequest.struct_class = Types::DescribeDocumentPermissionRequest
 
     DescribeDocumentPermissionResponse.add_member(:account_ids, Shapes::ShapeRef.new(shape: AccountIdList, location_name: "AccountIds"))
     DescribeDocumentPermissionResponse.add_member(:account_sharing_info_list, Shapes::ShapeRef.new(shape: AccountSharingInfoList, location_name: "AccountSharingInfoList"))
+    DescribeDocumentPermissionResponse.add_member(:next_token, Shapes::ShapeRef.new(shape: NextToken, location_name: "NextToken"))
     DescribeDocumentPermissionResponse.struct_class = Types::DescribeDocumentPermissionResponse
 
     DescribeDocumentRequest.add_member(:name, Shapes::ShapeRef.new(shape: DocumentARN, required: true, location_name: "Name"))
@@ -2334,6 +2350,7 @@ module Aws::SSM
 
     GetDeployablePatchSnapshotForInstanceRequest.add_member(:instance_id, Shapes::ShapeRef.new(shape: InstanceId, required: true, location_name: "InstanceId"))
     GetDeployablePatchSnapshotForInstanceRequest.add_member(:snapshot_id, Shapes::ShapeRef.new(shape: SnapshotId, required: true, location_name: "SnapshotId"))
+    GetDeployablePatchSnapshotForInstanceRequest.add_member(:baseline_override, Shapes::ShapeRef.new(shape: BaselineOverride, location_name: "BaselineOverride"))
     GetDeployablePatchSnapshotForInstanceRequest.struct_class = Types::GetDeployablePatchSnapshotForInstanceRequest
 
     GetDeployablePatchSnapshotForInstanceResult.add_member(:instance_id, Shapes::ShapeRef.new(shape: InstanceId, location_name: "InstanceId"))
@@ -3758,15 +3775,15 @@ module Aws::SSM
     RegisterTargetWithMaintenanceWindowResult.struct_class = Types::RegisterTargetWithMaintenanceWindowResult
 
     RegisterTaskWithMaintenanceWindowRequest.add_member(:window_id, Shapes::ShapeRef.new(shape: MaintenanceWindowId, required: true, location_name: "WindowId"))
-    RegisterTaskWithMaintenanceWindowRequest.add_member(:targets, Shapes::ShapeRef.new(shape: Targets, required: true, location_name: "Targets"))
+    RegisterTaskWithMaintenanceWindowRequest.add_member(:targets, Shapes::ShapeRef.new(shape: Targets, location_name: "Targets", metadata: {"box"=>true}))
     RegisterTaskWithMaintenanceWindowRequest.add_member(:task_arn, Shapes::ShapeRef.new(shape: MaintenanceWindowTaskArn, required: true, location_name: "TaskArn"))
     RegisterTaskWithMaintenanceWindowRequest.add_member(:service_role_arn, Shapes::ShapeRef.new(shape: ServiceRole, location_name: "ServiceRoleArn"))
     RegisterTaskWithMaintenanceWindowRequest.add_member(:task_type, Shapes::ShapeRef.new(shape: MaintenanceWindowTaskType, required: true, location_name: "TaskType"))
     RegisterTaskWithMaintenanceWindowRequest.add_member(:task_parameters, Shapes::ShapeRef.new(shape: MaintenanceWindowTaskParameters, location_name: "TaskParameters"))
     RegisterTaskWithMaintenanceWindowRequest.add_member(:task_invocation_parameters, Shapes::ShapeRef.new(shape: MaintenanceWindowTaskInvocationParameters, location_name: "TaskInvocationParameters"))
     RegisterTaskWithMaintenanceWindowRequest.add_member(:priority, Shapes::ShapeRef.new(shape: MaintenanceWindowTaskPriority, location_name: "Priority", metadata: {"box"=>true}))
-    RegisterTaskWithMaintenanceWindowRequest.add_member(:max_concurrency, Shapes::ShapeRef.new(shape: MaxConcurrency, required: true, location_name: "MaxConcurrency"))
-    RegisterTaskWithMaintenanceWindowRequest.add_member(:max_errors, Shapes::ShapeRef.new(shape: MaxErrors, required: true, location_name: "MaxErrors"))
+    RegisterTaskWithMaintenanceWindowRequest.add_member(:max_concurrency, Shapes::ShapeRef.new(shape: MaxConcurrency, location_name: "MaxConcurrency", metadata: {"box"=>true}))
+    RegisterTaskWithMaintenanceWindowRequest.add_member(:max_errors, Shapes::ShapeRef.new(shape: MaxErrors, location_name: "MaxErrors", metadata: {"box"=>true}))
     RegisterTaskWithMaintenanceWindowRequest.add_member(:logging_info, Shapes::ShapeRef.new(shape: LoggingInfo, location_name: "LoggingInfo"))
     RegisterTaskWithMaintenanceWindowRequest.add_member(:name, Shapes::ShapeRef.new(shape: MaintenanceWindowName, location_name: "Name"))
     RegisterTaskWithMaintenanceWindowRequest.add_member(:description, Shapes::ShapeRef.new(shape: MaintenanceWindowDescription, location_name: "Description"))
@@ -4842,7 +4859,9 @@ module Aws::SSM
         o.output = Shapes::ShapeRef.new(shape: DescribeDocumentPermissionResponse)
         o.errors << Shapes::ShapeRef.new(shape: InternalServerError)
         o.errors << Shapes::ShapeRef.new(shape: InvalidDocument)
+        o.errors << Shapes::ShapeRef.new(shape: InvalidNextToken)
         o.errors << Shapes::ShapeRef.new(shape: InvalidPermissionType)
+        o.errors << Shapes::ShapeRef.new(shape: InvalidDocumentOperation)
       end)
 
       api.add_operation(:describe_effective_instance_associations, Seahorse::Model::Operation.new.tap do |o|

data/lib/aws-sdk-ssm/types.rb

@@ -1219,10 +1219,7 @@ module Aws::SSM
     #       }
     #
     # @!attribute [rw] key
-    #   One or more keys to limit the results. Valid filter keys include the
-    #   following: DocumentNamePrefix, ExecutionStatus, ExecutionId,
-    #   ParentExecutionId, CurrentAction, StartTimeBefore, StartTimeAfter,
-    #   TargetResourceGroup.
+    #   One or more keys to limit the results.
     #   @return [String]
     #
     # @!attribute [rw] values
@@ -1452,6 +1449,132 @@ module Aws::SSM
       include Aws::Structure
     end
 
+    # Defines the basic information about a patch baseline override.
+    #
+    # @note When making an API call, you may pass BaselineOverride
+    #   data as a hash:
+    #
+    #       {
+    #         operating_system: "WINDOWS", # accepts WINDOWS, AMAZON_LINUX, AMAZON_LINUX_2, UBUNTU, REDHAT_ENTERPRISE_LINUX, SUSE, CENTOS, ORACLE_LINUX, DEBIAN, MACOS
+    #         global_filters: {
+    #           patch_filters: [ # required
+    #             {
+    #               key: "ARCH", # required, accepts ARCH, ADVISORY_ID, BUGZILLA_ID, PATCH_SET, PRODUCT, PRODUCT_FAMILY, CLASSIFICATION, CVE_ID, EPOCH, MSRC_SEVERITY, NAME, PATCH_ID, SECTION, PRIORITY, REPOSITORY, RELEASE, SEVERITY, SECURITY, VERSION
+    #               values: ["PatchFilterValue"], # required
+    #             },
+    #           ],
+    #         },
+    #         approval_rules: {
+    #           patch_rules: [ # required
+    #             {
+    #               patch_filter_group: { # required
+    #                 patch_filters: [ # required
+    #                   {
+    #                     key: "ARCH", # required, accepts ARCH, ADVISORY_ID, BUGZILLA_ID, PATCH_SET, PRODUCT, PRODUCT_FAMILY, CLASSIFICATION, CVE_ID, EPOCH, MSRC_SEVERITY, NAME, PATCH_ID, SECTION, PRIORITY, REPOSITORY, RELEASE, SEVERITY, SECURITY, VERSION
+    #                     values: ["PatchFilterValue"], # required
+    #                   },
+    #                 ],
+    #               },
+    #               compliance_level: "CRITICAL", # accepts CRITICAL, HIGH, MEDIUM, LOW, INFORMATIONAL, UNSPECIFIED
+    #               approve_after_days: 1,
+    #               approve_until_date: "PatchStringDateTime",
+    #               enable_non_security: false,
+    #             },
+    #           ],
+    #         },
+    #         approved_patches: ["PatchId"],
+    #         approved_patches_compliance_level: "CRITICAL", # accepts CRITICAL, HIGH, MEDIUM, LOW, INFORMATIONAL, UNSPECIFIED
+    #         rejected_patches: ["PatchId"],
+    #         rejected_patches_action: "ALLOW_AS_DEPENDENCY", # accepts ALLOW_AS_DEPENDENCY, BLOCK
+    #         approved_patches_enable_non_security: false,
+    #         sources: [
+    #           {
+    #             name: "PatchSourceName", # required
+    #             products: ["PatchSourceProduct"], # required
+    #             configuration: "PatchSourceConfiguration", # required
+    #           },
+    #         ],
+    #       }
+    #
+    # @!attribute [rw] operating_system
+    #   The operating system rule used by the patch baseline override.
+    #   @return [String]
+    #
+    # @!attribute [rw] global_filters
+    #   A set of patch filters, typically used for approval rules.
+    #   @return [Types::PatchFilterGroup]
+    #
+    # @!attribute [rw] approval_rules
+    #   A set of rules defining the approval rules for a patch baseline.
+    #   @return [Types::PatchRuleGroup]
+    #
+    # @!attribute [rw] approved_patches
+    #   A list of explicitly approved patches for the baseline.
+    #
+    #   For information about accepted formats for lists of approved patches
+    #   and rejected patches, see [About package name formats for approved
+    #   and rejected patch lists][1] in the *AWS Systems Manager User
+    #   Guide*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/patch-manager-approved-rejected-package-name-formats.html
+    #   @return [Array<String>]
+    #
+    # @!attribute [rw] approved_patches_compliance_level
+    #   Defines the compliance level for approved patches. When an approved
+    #   patch is reported as missing, this value describes the severity of
+    #   the compliance violation.
+    #   @return [String]
+    #
+    # @!attribute [rw] rejected_patches
+    #   A list of explicitly rejected patches for the baseline.
+    #
+    #   For information about accepted formats for lists of approved patches
+    #   and rejected patches, see [About package name formats for approved
+    #   and rejected patch lists][1] in the *AWS Systems Manager User
+    #   Guide*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/patch-manager-approved-rejected-package-name-formats.html
+    #   @return [Array<String>]
+    #
+    # @!attribute [rw] rejected_patches_action
+    #   The action for Patch Manager to take on patches included in the
+    #   RejectedPackages list. A patch can be allowed only if it is a
+    #   dependency of another package, or blocked entirely along with
+    #   packages that include it as a dependency.
+    #   @return [String]
+    #
+    # @!attribute [rw] approved_patches_enable_non_security
+    #   Indicates whether the list of approved patches includes non-security
+    #   updates that should be applied to the instances. The default value
+    #   is 'false'. Applies to Linux instances only.
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] sources
+    #   Information about the patches to use to update the instances,
+    #   including target operating systems and source repositories. Applies
+    #   to Linux instances only.
+    #   @return [Array<Types::PatchSource>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ssm-2014-11-06/BaselineOverride AWS API Documentation
+    #
+    class BaselineOverride < Struct.new(
+      :operating_system,
+      :global_filters,
+      :approval_rules,
+      :approved_patches,
+      :approved_patches_compliance_level,
+      :rejected_patches,
+      :rejected_patches_action,
+      :approved_patches_enable_non_security,
+      :sources)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @note When making an API call, you may pass CancelCommandRequest
     #   data as a hash:
     #
@@ -3626,8 +3749,8 @@ module Aws::SSM
     #   @return [Array<String>]
     #
     # @!attribute [rw] approved_patches_compliance_level
-    #   Defines the compliance level for approved patches. This means that
-    #   if an approved patch is reported as missing, this is the severity of
+    #   Defines the compliance level for approved patches. When an approved
+    #   patch is reported as missing, this value describes the severity of
     #   the compliance violation. The default value is UNSPECIFIED.
     #   @return [String]
     #
@@ -4822,6 +4945,8 @@ module Aws::SSM
     #       {
     #         name: "DocumentName", # required
     #         permission_type: "Share", # required, accepts Share
+    #         max_results: 1,
+    #         next_token: "NextToken",
     #       }
     #
     # @!attribute [rw] name
@@ -4833,11 +4958,24 @@ module Aws::SSM
     #   *Share*.
     #   @return [String]
     #
+    # @!attribute [rw] max_results
+    #   The maximum number of items to return for this call. The call also
+    #   returns a token that you can specify in a subsequent call to get the
+    #   next set of results.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] next_token
+    #   The token for the next set of items to return. (You received this
+    #   token from a previous call.)
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ssm-2014-11-06/DescribeDocumentPermissionRequest AWS API Documentation
     #
     class DescribeDocumentPermissionRequest < Struct.new(
       :name,
-      :permission_type)
+      :permission_type,
+      :max_results,
+      :next_token)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -4852,11 +4990,17 @@ module Aws::SSM
     #   version shared with each account.
     #   @return [Array<Types::AccountSharingInfo>]
     #
+    # @!attribute [rw] next_token
+    #   The token for the next set of items to return. Use this token to get
+    #   the next set of results.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ssm-2014-11-06/DescribeDocumentPermissionResponse AWS API Documentation
     #
     class DescribeDocumentPermissionResponse < Struct.new(
       :account_ids,
-      :account_sharing_info_list)
+      :account_sharing_info_list,
+      :next_token)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -7735,6 +7879,47 @@ module Aws::SSM
     #       {
     #         instance_id: "InstanceId", # required
     #         snapshot_id: "SnapshotId", # required
+    #         baseline_override: {
+    #           operating_system: "WINDOWS", # accepts WINDOWS, AMAZON_LINUX, AMAZON_LINUX_2, UBUNTU, REDHAT_ENTERPRISE_LINUX, SUSE, CENTOS, ORACLE_LINUX, DEBIAN, MACOS
+    #           global_filters: {
+    #             patch_filters: [ # required
+    #               {
+    #                 key: "ARCH", # required, accepts ARCH, ADVISORY_ID, BUGZILLA_ID, PATCH_SET, PRODUCT, PRODUCT_FAMILY, CLASSIFICATION, CVE_ID, EPOCH, MSRC_SEVERITY, NAME, PATCH_ID, SECTION, PRIORITY, REPOSITORY, RELEASE, SEVERITY, SECURITY, VERSION
+    #                 values: ["PatchFilterValue"], # required
+    #               },
+    #             ],
+    #           },
+    #           approval_rules: {
+    #             patch_rules: [ # required
+    #               {
+    #                 patch_filter_group: { # required
+    #                   patch_filters: [ # required
+    #                     {
+    #                       key: "ARCH", # required, accepts ARCH, ADVISORY_ID, BUGZILLA_ID, PATCH_SET, PRODUCT, PRODUCT_FAMILY, CLASSIFICATION, CVE_ID, EPOCH, MSRC_SEVERITY, NAME, PATCH_ID, SECTION, PRIORITY, REPOSITORY, RELEASE, SEVERITY, SECURITY, VERSION
+    #                       values: ["PatchFilterValue"], # required
+    #                     },
+    #                   ],
+    #                 },
+    #                 compliance_level: "CRITICAL", # accepts CRITICAL, HIGH, MEDIUM, LOW, INFORMATIONAL, UNSPECIFIED
+    #                 approve_after_days: 1,
+    #                 approve_until_date: "PatchStringDateTime",
+    #                 enable_non_security: false,
+    #               },
+    #             ],
+    #           },
+    #           approved_patches: ["PatchId"],
+    #           approved_patches_compliance_level: "CRITICAL", # accepts CRITICAL, HIGH, MEDIUM, LOW, INFORMATIONAL, UNSPECIFIED
+    #           rejected_patches: ["PatchId"],
+    #           rejected_patches_action: "ALLOW_AS_DEPENDENCY", # accepts ALLOW_AS_DEPENDENCY, BLOCK
+    #           approved_patches_enable_non_security: false,
+    #           sources: [
+    #             {
+    #               name: "PatchSourceName", # required
+    #               products: ["PatchSourceProduct"], # required
+    #               configuration: "PatchSourceConfiguration", # required
+    #             },
+    #           ],
+    #         },
     #       }
     #
     # @!attribute [rw] instance_id
@@ -7746,11 +7931,16 @@ module Aws::SSM
     #   The user-defined snapshot ID.
     #   @return [String]
     #
+    # @!attribute [rw] baseline_override
+    #   Defines the basic information about a patch baseline override.
+    #   @return [Types::BaselineOverride]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ssm-2014-11-06/GetDeployablePatchSnapshotForInstanceRequest AWS API Documentation
     #
     class GetDeployablePatchSnapshotForInstanceRequest < Struct.new(
       :instance_id,
-      :snapshot_id)
+      :snapshot_id,
+      :baseline_override)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -8547,11 +8737,27 @@ module Aws::SSM
     #
     # @!attribute [rw] max_concurrency
     #   The maximum number of targets allowed to run this task in parallel.
+    #
+    #   <note markdown="1"> For maintenance window tasks without a target specified, you cannot
+    #   supply a value for this option. Instead, the system inserts a
+    #   placeholder value of `1`, which may be reported in the response to
+    #   this command. This value does not affect the running of your task
+    #   and can be ignored.
+    #
+    #    </note>
     #   @return [String]
     #
     # @!attribute [rw] max_errors
     #   The maximum number of errors allowed before the task stops being
     #   scheduled.
+    #
+    #   <note markdown="1"> For maintenance window tasks without a target specified, you cannot
+    #   supply a value for this option. Instead, the system inserts a
+    #   placeholder value of `1`, which may be reported in the response to
+    #   this command. This value does not affect the running of your task
+    #   and can be ignored.
+    #
+    #    </note>
     #   @return [String]
     #
     # @!attribute [rw] logging_info
@@ -8901,9 +9107,11 @@ module Aws::SSM
     #
     # @!attribute [rw] path
     #   The hierarchy for the parameter. Hierarchies start with a forward
-    #   slash (/) and end with the parameter name. A parameter name
-    #   hierarchy can have a maximum of 15 levels. Here is an example of a
-    #   hierarchy: `/Finance/Prod/IAD/WinServ2016/license33`
+    #   slash (/). The hierachy is the parameter name except the last part
+    #   of the parameter. For the API call to succeeed, the last part of the
+    #   parameter name cannot be in the path. A parameter name hierarchy can
+    #   have a maximum of 15 levels. Here is an example of a hierarchy:
+    #   `/Finance/Prod/IAD/WinServ2016/license33 `
     #   @return [String]
     #
     # @!attribute [rw] recursive
@@ -9191,6 +9399,8 @@ module Aws::SSM
     #
     # @!attribute [rw] setting_id
     #   The ID of the service setting to get. The setting ID can be
+    #   `/ssm/automation/customer-script-log-destination`,
+    #   `/ssm/automation/customer-script-log-group-name`,
     #   `/ssm/parameter-store/default-parameter-tier`,
     #   `/ssm/parameter-store/high-throughput-enabled`, or
     #   `/ssm/managed-instance/activation-tier`.
@@ -9648,6 +9858,11 @@ module Aws::SSM
     #
     #   "InstanceIds"\|"AgentVersion"\|"PingStatus"\|"PlatformTypes"\|"ActivationIds"\|"IamRole"\|"ResourceType"\|"AssociationStatus"\|"Tag
     #   Key"
+    #
+    #   `Tag key` is not a valid filter. You must specify either `tag-key`
+    #   or `tag:keyname` and a string. Here are some valid examples:
+    #   tag-key, tag:123, tag:al!, tag:Windows. Here are some *invalid*
+    #   examples: tag-keys, Tag Key, tag:, tagKey, abc:keyname.
     #   @return [String]
     #
     # @!attribute [rw] values
@@ -11595,13 +11810,19 @@ module Aws::SSM
     #   @return [Array<Types::DocumentFilter>]
     #
     # @!attribute [rw] filters
-    #   One or more DocumentKeyValuesFilter objects. Use a filter to return
-    #   a more specific list of results. For keys, you can specify one or
-    #   more key-value pair tags that have been applied to a document. Other
-    #   valid keys include `Owner`, `Name`, `PlatformTypes`, `DocumentType`,
-    #   and `TargetType`. For example, to return documents you own use
-    #   `Key=Owner,Values=Self`. To specify a custom key-value pair, use the
-    #   format `Key=tag:tagName,Values=valueName`.
+    #   One or more `DocumentKeyValuesFilter` objects. Use a filter to
+    #   return a more specific list of results. For keys, you can specify
+    #   one or more key-value pair tags that have been applied to a
+    #   document. Other valid keys include `Owner`, `Name`, `PlatformTypes`,
+    #   `DocumentType`, and `TargetType`. For example, to return documents
+    #   you own use `Key=Owner,Values=Self`. To specify a custom key-value
+    #   pair, use the format `Key=tag:tagName,Values=valueName`.
+    #
+    #   <note markdown="1"> This API action only supports filtering documents by using a single
+    #   tag key and one or more tag values. For example:
+    #   `Key=tag:tagName,Values=valueName1,valueName2`
+    #
+    #    </note>
     #   @return [Array<Types::DocumentKeyValuesFilter>]
     #
     # @!attribute [rw] max_results
@@ -14766,13 +14987,14 @@ module Aws::SSM
     #   The number of days after the release date of each patch matched by
     #   the rule that the patch is marked as approved in the patch baseline.
     #   For example, a value of `7` means that patches are approved seven
-    #   days after they are released. Not supported on Ubuntu Server.
+    #   days after they are released. Not supported on Debian Server or
+    #   Ubuntu Server.
     #   @return [Integer]
     #
     # @!attribute [rw] approve_until_date
     #   The cutoff date for auto approval of released patches. Any patches
     #   released on or before this date are installed automatically. Not
-    #   supported on Ubuntu Server.
+    #   supported on Debian Server or Ubuntu Server.
     #
     #   Enter dates in the format `YYYY-MM-DD`. For example, `2020-12-31`.
     #   @return [String]
@@ -14861,11 +15083,20 @@ module Aws::SSM
     #
     #   `[main]`
     #
-    #   `cachedir=/var/cache/yum/$basesearch$releasever`
+    #   `name=MyCustomRepository`
+    #
+    #   `baseurl=https://my-custom-repository`
     #
-    #   `keepcache=0`
+    #   `enabled=1`
     #
-    #   `debuglevel=2`
+    #   <note markdown="1"> For information about other options available for your yum
+    #   repository configuration, see [dnf.conf(5)][1].
+    #
+    #    </note>
+    #
+    #
+    #
+    #   [1]: https://man7.org/linux/man-pages/man5/dnf.conf.5.html
     #   @return [String]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ssm-2014-11-06/PatchSource AWS API Documentation
@@ -15147,7 +15378,11 @@ module Aws::SSM
     #     (case-insensitive).
     #
     #   * Parameter names can include only the following symbols and
-    #     letters: `a-zA-Z0-9_.-/`
+    #     letters: `a-zA-Z0-9_.-`
+    #
+    #     In addition, the slash character ( / ) is used to delineate
+    #     hierarchies in parameter names. For example:
+    #     `/Dev/Production/East/Project-ABC/MyParameter`
     #
     #   * A parameter name can't include spaces.
     #
@@ -15155,8 +15390,8 @@ module Aws::SSM
     #     levels.
     #
     #   For additional information about valid values for parameter names,
-    #   see [About requirements and constraints for parameter names][1] in
-    #   the *AWS Systems Manager User Guide*.
+    #   see [Creating Systems Manager parameters][1] in the *AWS Systems
+    #   Manager User Guide*.
     #
     #   <note markdown="1"> The maximum length constraint listed below includes capacity for
     #   additional system attributes that are not part of the name. The
@@ -15170,7 +15405,7 @@ module Aws::SSM
     #
     #
     #
-    #   [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/sysman-parameter-name-constraints.html
+    #   [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/sysman-paramstore-su-create.html
     #   @return [String]
     #
     # @!attribute [rw] description
@@ -15536,6 +15771,14 @@ module Aws::SSM
     #   The targets to register with the maintenance window. In other words,
     #   the instances to run commands on when the maintenance window runs.
     #
+    #   <note markdown="1"> If a single maintenance window task is registered with multiple
+    #   targets, its task invocations occur sequentially and not in
+    #   parallel. If your task must run on multiple targets at the same
+    #   time, register a task for each target individually and assign each
+    #   task the same priority level.
+    #
+    #    </note>
+    #
     #   You can specify targets using instance IDs, resource group names, or
     #   tags that have been applied to instances.
     #
@@ -15629,7 +15872,7 @@ module Aws::SSM
     #
     #       {
     #         window_id: "MaintenanceWindowId", # required
-    #         targets: [ # required
+    #         targets: [
     #           {
     #             key: "TargetKey",
     #             values: ["TargetValue"],
@@ -15683,8 +15926,8 @@ module Aws::SSM
     #           },
     #         },
     #         priority: 1,
-    #         max_concurrency: "MaxConcurrency", # required
-    #         max_errors: "MaxErrors", # required
+    #         max_concurrency: "MaxConcurrency",
+    #         max_errors: "MaxErrors",
     #         logging_info: {
     #           s3_bucket_name: "S3BucketName", # required
     #           s3_key_prefix: "S3KeyPrefix",
@@ -15702,6 +15945,15 @@ module Aws::SSM
     # @!attribute [rw] targets
     #   The targets (either instances or maintenance window targets).
     #
+    #   <note markdown="1"> One or more targets must be specified for maintenance window Run
+    #   Command-type tasks. Depending on the task, targets are optional for
+    #   other maintenance window task types (Automation, AWS Lambda, and AWS
+    #   Step Functions). For more information about running tasks that do
+    #   not specify targets, see [Registering maintenance window tasks
+    #   without targets][1] in the *AWS Systems Manager User Guide*.
+    #
+    #    </note>
+    #
     #   Specify instances using the following format:
     #
     #   `Key=InstanceIds,Values=<instance-id-1>,<instance-id-2>`
@@ -15709,6 +15961,10 @@ module Aws::SSM
     #   Specify maintenance window targets using the following format:
     #
     #   `Key=WindowTargetIds,Values=<window-target-id-1>,<window-target-id-2>`
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/maintenance-windows-targetless-tasks.html
     #   @return [Array<Types::Target>]
     #
     # @!attribute [rw] task_arn
@@ -15768,11 +16024,25 @@ module Aws::SSM
     #
     # @!attribute [rw] max_concurrency
     #   The maximum number of targets this task can be run for in parallel.
+    #
+    #   <note markdown="1"> For maintenance window tasks without a target specified, you cannot
+    #   supply a value for this option. Instead, the system inserts a
+    #   placeholder value of `1`. This value does not affect the running of
+    #   your task.
+    #
+    #    </note>
     #   @return [String]
     #
     # @!attribute [rw] max_errors
     #   The maximum number of errors allowed before this task stops being
     #   scheduled.
+    #
+    #   <note markdown="1"> For maintenance window tasks without a target specified, you cannot
+    #   supply a value for this option. Instead, the system inserts a
+    #   placeholder value of `1`. This value does not affect the running of
+    #   your task.
+    #
+    #    </note>
     #   @return [String]
     #
     # @!attribute [rw] logging_info
@@ -15927,7 +16197,9 @@ module Aws::SSM
     #
     # @!attribute [rw] setting_id
     #   The Amazon Resource Name (ARN) of the service setting to reset. The
-    #   setting ID can be `/ssm/parameter-store/default-parameter-tier`,
+    #   setting ID can be `/ssm/automation/customer-script-log-destination`,
+    #   `/ssm/automation/customer-script-log-group-name`,
+    #   `/ssm/parameter-store/default-parameter-tier`,
     #   `/ssm/parameter-store/high-throughput-enabled`, or
     #   `/ssm/managed-instance/activation-tier`. For example,
     #   `arn:aws:ssm:us-east-1:111122223333:servicesetting/ssm/parameter-store/high-throughput-enabled`.
@@ -16865,8 +17137,15 @@ module Aws::SSM
     #   @return [Array<Types::Target>]
     #
     # @!attribute [rw] document_name
-    #   Required. The name of the Systems Manager document to run. This can
-    #   be a public document or a custom document.
+    #   The name of the Systems Manager document to run. This can be a
+    #   public document or a custom document. To run a shared document
+    #   belonging to another account, specify the document ARN. For more
+    #   information about how to use shared documents, see [Using shared SSM
+    #   documents][1] in the *AWS Systems Manager User Guide*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/ssm-using-shared.html
     #   @return [String]
     #
     # @!attribute [rw] document_version
@@ -17344,7 +17623,15 @@ module Aws::SSM
     #       }
     #
     # @!attribute [rw] document_name
-    #   The name of the Automation document to use for this execution.
+    #   The name of the Systems Manager document to run. This can be a
+    #   public document or a custom document. To run a shared document
+    #   belonging to another account, specify the document ARN. For more
+    #   information about how to use shared documents, see [Using shared SSM
+    #   documents][1] in the *AWS Systems Manager User Guide*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/ssm-using-shared.html
     #   @return [String]
     #
     # @!attribute [rw] document_version
@@ -17924,6 +18211,15 @@ module Aws::SSM
     # An array of search criteria that targets instances using a Key,Value
     # combination that you specify.
     #
+    # <note markdown="1"> One or more targets must be specified for maintenance window Run
+    # Command-type tasks. Depending on the task, targets are optional for
+    # other maintenance window task types (Automation, AWS Lambda, and AWS
+    # Step Functions). For more information about running tasks that do not
+    # specify targets, see [Registering maintenance window tasks without
+    # targets][1] in the *AWS Systems Manager User Guide*.
+    #
+    #  </note>
+    #
     # Supported formats include the following.
     #
     # * `Key=InstanceIds,Values=instance-id-1,instance-id-2,instance-id-3 `
@@ -17974,12 +18270,13 @@ module Aws::SSM
     #   AWS Region where the association was created.
     #
     # For more information about how to send commands that target instances
-    # using `Key,Value` parameters, see [Targeting multiple instances][1] in
+    # using `Key,Value` parameters, see [Targeting multiple instances][2] in
     # the *AWS Systems Manager User Guide*.
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/send-commands-multiple.html#send-commands-targeting
+    # [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/maintenance-windows-targetless-tasks.html
+    # [2]: https://docs.aws.amazon.com/systems-manager/latest/userguide/send-commands-multiple.html#send-commands-targeting
     #
     # @note When making an API call, you may pass Target
     #   data as a hash:
@@ -19096,6 +19393,19 @@ module Aws::SSM
     #   The targets (either instances or tags) to modify. Instances are
     #   specified using Key=instanceids,Values=instanceID\_1,instanceID\_2.
     #   Tags are specified using Key=tag\_name,Values=tag\_value.
+    #
+    #   <note markdown="1"> One or more targets must be specified for maintenance window Run
+    #   Command-type tasks. Depending on the task, targets are optional for
+    #   other maintenance window task types (Automation, AWS Lambda, and AWS
+    #   Step Functions). For more information about running tasks that do
+    #   not specify targets, see [Registering maintenance window tasks
+    #   without targets][1] in the *AWS Systems Manager User Guide*.
+    #
+    #    </note>
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/maintenance-windows-targetless-tasks.html
     #   @return [Array<Types::Target>]
     #
     # @!attribute [rw] task_arn
@@ -19170,12 +19480,28 @@ module Aws::SSM
     #   The new `MaxConcurrency` value you want to specify. `MaxConcurrency`
     #   is the number of targets that are allowed to run this task in
     #   parallel.
+    #
+    #   <note markdown="1"> For maintenance window tasks without a target specified, you cannot
+    #   supply a value for this option. Instead, the system inserts a
+    #   placeholder value of `1`, which may be reported in the response to
+    #   this command. This value does not affect the running of your task
+    #   and can be ignored.
+    #
+    #    </note>
     #   @return [String]
     #
     # @!attribute [rw] max_errors
     #   The new `MaxErrors` value to specify. `MaxErrors` is the maximum
     #   number of errors that are allowed before the task stops being
     #   scheduled.
+    #
+    #   <note markdown="1"> For maintenance window tasks without a target specified, you cannot
+    #   supply a value for this option. Instead, the system inserts a
+    #   placeholder value of `1`, which may be reported in the response to
+    #   this command. This value does not affect the running of your task
+    #   and can be ignored.
+    #
+    #    </note>
     #   @return [String]
     #
     # @!attribute [rw] logging_info
@@ -19865,6 +20191,10 @@ module Aws::SSM
     #   `arn:aws:ssm:us-east-1:111122223333:servicesetting/ssm/parameter-store/high-throughput-enabled`.
     #   The setting ID can be one of the following.
     #
+    #   * `/ssm/automation/customer-script-log-destination`
+    #
+    #   * `/ssm/automation/customer-script-log-group-name`
+    #
     #   * `/ssm/parameter-store/default-parameter-tier`
     #
     #   * `/ssm/parameter-store/high-throughput-enabled`
@@ -19886,6 +20216,12 @@ module Aws::SSM
     #   For the `/ssm/parameter-store/high-throughput-enabled`, and
     #   `/ssm/managed-instance/activation-tier` setting IDs, the setting
     #   value can be true or false.
+    #
+    #   For the `/ssm/automation/customer-script-log-destination` setting
+    #   ID, the setting value can be CloudWatch.
+    #
+    #   For the `/ssm/automation/customer-script-log-group-name` setting ID,
+    #   the setting value can be the name of a CloudWatch Logs log group.
     #   @return [String]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ssm-2014-11-06/UpdateServiceSettingRequest AWS API Documentation

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-ssm
 version: !ruby/object:Gem::Version
-  version: 1.100.0
+  version: 1.105.0
 platform: ruby
 authors:
 - Amazon Web Services
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2020-12-15 00:00:00.000000000 Z
+date: 2021-03-01 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-core
@@ -19,7 +19,7 @@ dependencies:
         version: '3'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.109.0
+        version: 3.112.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -29,7 +29,7 @@ dependencies:
         version: '3'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.109.0
+        version: 3.112.0
 - !ruby/object:Gem::Dependency
   name: aws-sigv4
   requirement: !ruby/object:Gem::Requirement