aws-sdk-ssm 1.149.0 → 1.150.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 9788959f97d846bf078ddf00281fb56a29065bde4bb723fb03c8e881c5783ca4
-  data.tar.gz: cfdc759517aa8ab388f1732ec4c4caaa5e09d7925ab78b67ae92eea720515047
+  metadata.gz: 184ef695f37be946e4b3ab18c4d2fcaa4dc552e477a11aac3ec092faa676a4d1
+  data.tar.gz: '09c9d87e13f3751694c140a5c56ff7d09ddb2d4706831d0b948521a119891d7d'
 SHA512:
-  metadata.gz: 1df2ae005beff500eb05abfe232a8321eab4e4491775110dd6352c1cdf96ed1b57c76667ed0e8fd8682fb80f1028d192cfe12d7c67875fa43c6fdfe3e26c98f3
-  data.tar.gz: 5c930b0583f7e5886f747a95f03b4a6db86487b9e2fad60063c3409e3c78d4062c4bee8238ff0d57799238c1bc9df82f5b1049cb197e3145f9c18d7da9c5c1e9
+  metadata.gz: 66acf8563fb457dc15813ad4e5f8bb7d8f8c62e7c692061c55d02a5eadadb2d4e40f52a2eb0352e0af4825ddb481d046f801b8586a1477805a4837ecfc8af9d4
+  data.tar.gz: d1e3423290c640e0f27e566a867c9dadcd91a1b110cf2ccab548274f1622808f12e05019b815f25f83e83a3927fc57005ab8162fdeebded5bfc9b3f76fc7f7a5

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.150.0 (2023-03-22)
+------------------
+
+* Feature - This Patch Manager release supports creating, updating, and deleting Patch Baselines for AmazonLinux2023, AlmaLinux.
+
 1.149.0 (2023-02-22)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.149.0
+1.150.0

data/lib/aws-sdk-ssm/client.rb

@@ -431,11 +431,11 @@ module Aws::SSM
     #
     #   Use the ID of the resource. Here are some examples:
     #
-    #   `MaintenanceWindow`\: `mw-012345abcde`
+    #   `MaintenanceWindow`: `mw-012345abcde`
     #
-    #   `PatchBaseline`\: `pb-012345abcde`
+    #   `PatchBaseline`: `pb-012345abcde`
     #
-    #   `Automation`\: `example-c160-4567-8519-012345abcde`
+    #   `Automation`: `example-c160-4567-8519-012345abcde`
     #
     #   `OpsMetadata` object: `ResourceID` for tagging is created from the
     #   Amazon Resource Name (ARN) for the object. Specifically, `ResourceID`
@@ -448,7 +448,7 @@ module Aws::SSM
     #   For the `Document` and `Parameter` values, use the name of the
     #   resource.
     #
-    #   `ManagedInstance`\: `mi-012345abcde`
+    #   `ManagedInstance`: `mi-012345abcde`
     #
     #   <note markdown="1"> The `ManagedInstance` type for this API operation is only for
     #   on-premises managed nodes. You must specify the name of the managed
@@ -504,9 +504,9 @@ module Aws::SSM
     #   The type of resource that you want to associate with an OpsItem.
     #   OpsCenter supports the following types:
     #
-    #   `AWS::SSMIncidents::IncidentRecord`\: an Incident Manager incident.
+    #   `AWS::SSMIncidents::IncidentRecord`: an Incident Manager incident.
     #
-    #   `AWS::SSM::Document`\: a Systems Manager (SSM) document.
+    #   `AWS::SSM::Document`: a Systems Manager (SSM) document.
     #
     # @option params [required, String] :resource_uri
     #   The Amazon Resource Name (ARN) of the Amazon Web Services resource
@@ -1949,17 +1949,17 @@ module Aws::SSM
     #   The action for Patch Manager to take on patches included in the
     #   `RejectedPackages` list.
     #
-    #   * <b> <code>ALLOW_AS_DEPENDENCY</code> </b>\: A package in the
+    #   * <b> <code>ALLOW_AS_DEPENDENCY</code> </b>: A package in the
     #     `Rejected` patches list is installed only if it is a dependency of
     #     another package. It is considered compliant with the patch baseline,
     #     and its status is reported as `InstalledOther`. This is the default
     #     action if no option is specified.
     #
-    #   * <b> <code>BLOCK</code> </b>\: Packages in the `RejectedPatches`
-    #     list, and packages that include them as dependencies, aren't
-    #     installed under any circumstances. If a package was installed before
-    #     it was added to the Rejected patches list, it is considered
-    #     non-compliant with the patch baseline, and its status is reported as
+    #   * <b> <code>BLOCK</code> </b>: Packages in the `RejectedPatches` list,
+    #     and packages that include them as dependencies, aren't installed
+    #     under any circumstances. If a package was installed before it was
+    #     added to the Rejected patches list, it is considered non-compliant
+    #     with the patch baseline, and its status is reported as
     #     `InstalledRejected`.
     #
     # @option params [String] :description
@@ -2000,7 +2000,7 @@ module Aws::SSM
     # @example Request syntax with placeholder values
     #
     #   resp = client.create_patch_baseline({
-    #     operating_system: "WINDOWS", # accepts WINDOWS, AMAZON_LINUX, AMAZON_LINUX_2, AMAZON_LINUX_2022, UBUNTU, REDHAT_ENTERPRISE_LINUX, SUSE, CENTOS, ORACLE_LINUX, DEBIAN, MACOS, RASPBIAN, ROCKY_LINUX
+    #     operating_system: "WINDOWS", # accepts WINDOWS, AMAZON_LINUX, AMAZON_LINUX_2, AMAZON_LINUX_2022, UBUNTU, REDHAT_ENTERPRISE_LINUX, SUSE, CENTOS, ORACLE_LINUX, DEBIAN, MACOS, RASPBIAN, ROCKY_LINUX, ALMA_LINUX, AMAZON_LINUX_2023
     #     name: "BaselineName", # required
     #     global_filters: {
     #       patch_filters: [ # required
@@ -4928,7 +4928,7 @@ module Aws::SSM
     #   resp.baseline_identities #=> Array
     #   resp.baseline_identities[0].baseline_id #=> String
     #   resp.baseline_identities[0].baseline_name #=> String
-    #   resp.baseline_identities[0].operating_system #=> String, one of "WINDOWS", "AMAZON_LINUX", "AMAZON_LINUX_2", "AMAZON_LINUX_2022", "UBUNTU", "REDHAT_ENTERPRISE_LINUX", "SUSE", "CENTOS", "ORACLE_LINUX", "DEBIAN", "MACOS", "RASPBIAN", "ROCKY_LINUX"
+    #   resp.baseline_identities[0].operating_system #=> String, one of "WINDOWS", "AMAZON_LINUX", "AMAZON_LINUX_2", "AMAZON_LINUX_2022", "UBUNTU", "REDHAT_ENTERPRISE_LINUX", "SUSE", "CENTOS", "ORACLE_LINUX", "DEBIAN", "MACOS", "RASPBIAN", "ROCKY_LINUX", "ALMA_LINUX", "AMAZON_LINUX_2023"
     #   resp.baseline_identities[0].baseline_description #=> String
     #   resp.baseline_identities[0].default_baseline #=> Boolean
     #   resp.next_token #=> String
@@ -5041,7 +5041,7 @@ module Aws::SSM
     #   resp.mappings[0].patch_group #=> String
     #   resp.mappings[0].baseline_identity.baseline_id #=> String
     #   resp.mappings[0].baseline_identity.baseline_name #=> String
-    #   resp.mappings[0].baseline_identity.operating_system #=> String, one of "WINDOWS", "AMAZON_LINUX", "AMAZON_LINUX_2", "AMAZON_LINUX_2022", "UBUNTU", "REDHAT_ENTERPRISE_LINUX", "SUSE", "CENTOS", "ORACLE_LINUX", "DEBIAN", "MACOS", "RASPBIAN", "ROCKY_LINUX"
+    #   resp.mappings[0].baseline_identity.operating_system #=> String, one of "WINDOWS", "AMAZON_LINUX", "AMAZON_LINUX_2", "AMAZON_LINUX_2022", "UBUNTU", "REDHAT_ENTERPRISE_LINUX", "SUSE", "CENTOS", "ORACLE_LINUX", "DEBIAN", "MACOS", "RASPBIAN", "ROCKY_LINUX", "ALMA_LINUX", "AMAZON_LINUX_2023"
     #   resp.mappings[0].baseline_identity.baseline_description #=> String
     #   resp.mappings[0].baseline_identity.default_baseline #=> Boolean
     #   resp.next_token #=> String
@@ -5136,7 +5136,7 @@ module Aws::SSM
     # @example Request syntax with placeholder values
     #
     #   resp = client.describe_patch_properties({
-    #     operating_system: "WINDOWS", # required, accepts WINDOWS, AMAZON_LINUX, AMAZON_LINUX_2, AMAZON_LINUX_2022, UBUNTU, REDHAT_ENTERPRISE_LINUX, SUSE, CENTOS, ORACLE_LINUX, DEBIAN, MACOS, RASPBIAN, ROCKY_LINUX
+    #     operating_system: "WINDOWS", # required, accepts WINDOWS, AMAZON_LINUX, AMAZON_LINUX_2, AMAZON_LINUX_2022, UBUNTU, REDHAT_ENTERPRISE_LINUX, SUSE, CENTOS, ORACLE_LINUX, DEBIAN, MACOS, RASPBIAN, ROCKY_LINUX, ALMA_LINUX, AMAZON_LINUX_2023
     #     property: "PRODUCT", # required, accepts PRODUCT, PRODUCT_FAMILY, CLASSIFICATION, MSRC_SEVERITY, PRIORITY, SEVERITY
     #     patch_set: "OS", # accepts OS, APPLICATION
     #     max_results: 1,
@@ -5633,13 +5633,13 @@ module Aws::SSM
     # @example Request syntax with placeholder values
     #
     #   resp = client.get_default_patch_baseline({
-    #     operating_system: "WINDOWS", # accepts WINDOWS, AMAZON_LINUX, AMAZON_LINUX_2, AMAZON_LINUX_2022, UBUNTU, REDHAT_ENTERPRISE_LINUX, SUSE, CENTOS, ORACLE_LINUX, DEBIAN, MACOS, RASPBIAN, ROCKY_LINUX
+    #     operating_system: "WINDOWS", # accepts WINDOWS, AMAZON_LINUX, AMAZON_LINUX_2, AMAZON_LINUX_2022, UBUNTU, REDHAT_ENTERPRISE_LINUX, SUSE, CENTOS, ORACLE_LINUX, DEBIAN, MACOS, RASPBIAN, ROCKY_LINUX, ALMA_LINUX, AMAZON_LINUX_2023
     #   })
     #
     # @example Response structure
     #
     #   resp.baseline_id #=> String
-    #   resp.operating_system #=> String, one of "WINDOWS", "AMAZON_LINUX", "AMAZON_LINUX_2", "AMAZON_LINUX_2022", "UBUNTU", "REDHAT_ENTERPRISE_LINUX", "SUSE", "CENTOS", "ORACLE_LINUX", "DEBIAN", "MACOS", "RASPBIAN", "ROCKY_LINUX"
+    #   resp.operating_system #=> String, one of "WINDOWS", "AMAZON_LINUX", "AMAZON_LINUX_2", "AMAZON_LINUX_2022", "UBUNTU", "REDHAT_ENTERPRISE_LINUX", "SUSE", "CENTOS", "ORACLE_LINUX", "DEBIAN", "MACOS", "RASPBIAN", "ROCKY_LINUX", "ALMA_LINUX", "AMAZON_LINUX_2023"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ssm-2014-11-06/GetDefaultPatchBaseline AWS API Documentation
     #
@@ -5690,7 +5690,7 @@ module Aws::SSM
     #     instance_id: "InstanceId", # required
     #     snapshot_id: "SnapshotId", # required
     #     baseline_override: {
-    #       operating_system: "WINDOWS", # accepts WINDOWS, AMAZON_LINUX, AMAZON_LINUX_2, AMAZON_LINUX_2022, UBUNTU, REDHAT_ENTERPRISE_LINUX, SUSE, CENTOS, ORACLE_LINUX, DEBIAN, MACOS, RASPBIAN, ROCKY_LINUX
+    #       operating_system: "WINDOWS", # accepts WINDOWS, AMAZON_LINUX, AMAZON_LINUX_2, AMAZON_LINUX_2022, UBUNTU, REDHAT_ENTERPRISE_LINUX, SUSE, CENTOS, ORACLE_LINUX, DEBIAN, MACOS, RASPBIAN, ROCKY_LINUX, ALMA_LINUX, AMAZON_LINUX_2023
     #       global_filters: {
     #         patch_filters: [ # required
     #           {
@@ -6735,11 +6735,11 @@ module Aws::SSM
     # @option params [Array<Types::ParameterStringFilter>] :parameter_filters
     #   Filters to limit the request results.
     #
-    #   <note markdown="1"> The following `Key` values are supported for `GetParametersByPath`\:
+    #   <note markdown="1"> The following `Key` values are supported for `GetParametersByPath`:
     #   `Type`, `KeyId`, and `Label`.
     #
     #    The following `Key` values aren't supported for
-    #   `GetParametersByPath`\: `tag`, `DataType`, `Name`, `Path`, and `Tier`.
+    #   `GetParametersByPath`: `tag`, `DataType`, `Name`, `Path`, and `Tier`.
     #
     #    </note>
     #
@@ -6844,7 +6844,7 @@ module Aws::SSM
     #
     #   resp.baseline_id #=> String
     #   resp.name #=> String
-    #   resp.operating_system #=> String, one of "WINDOWS", "AMAZON_LINUX", "AMAZON_LINUX_2", "AMAZON_LINUX_2022", "UBUNTU", "REDHAT_ENTERPRISE_LINUX", "SUSE", "CENTOS", "ORACLE_LINUX", "DEBIAN", "MACOS", "RASPBIAN", "ROCKY_LINUX"
+    #   resp.operating_system #=> String, one of "WINDOWS", "AMAZON_LINUX", "AMAZON_LINUX_2", "AMAZON_LINUX_2022", "UBUNTU", "REDHAT_ENTERPRISE_LINUX", "SUSE", "CENTOS", "ORACLE_LINUX", "DEBIAN", "MACOS", "RASPBIAN", "ROCKY_LINUX", "ALMA_LINUX", "AMAZON_LINUX_2023"
     #   resp.global_filters.patch_filters #=> Array
     #   resp.global_filters.patch_filters[0].key #=> String, one of "ARCH", "ADVISORY_ID", "BUGZILLA_ID", "PATCH_SET", "PRODUCT", "PRODUCT_FAMILY", "CLASSIFICATION", "CVE_ID", "EPOCH", "MSRC_SEVERITY", "NAME", "PATCH_ID", "SECTION", "PRIORITY", "REPOSITORY", "RELEASE", "SEVERITY", "SECURITY", "VERSION"
     #   resp.global_filters.patch_filters[0].values #=> Array
@@ -6905,14 +6905,14 @@ module Aws::SSM
     #
     #   resp = client.get_patch_baseline_for_patch_group({
     #     patch_group: "PatchGroup", # required
-    #     operating_system: "WINDOWS", # accepts WINDOWS, AMAZON_LINUX, AMAZON_LINUX_2, AMAZON_LINUX_2022, UBUNTU, REDHAT_ENTERPRISE_LINUX, SUSE, CENTOS, ORACLE_LINUX, DEBIAN, MACOS, RASPBIAN, ROCKY_LINUX
+    #     operating_system: "WINDOWS", # accepts WINDOWS, AMAZON_LINUX, AMAZON_LINUX_2, AMAZON_LINUX_2022, UBUNTU, REDHAT_ENTERPRISE_LINUX, SUSE, CENTOS, ORACLE_LINUX, DEBIAN, MACOS, RASPBIAN, ROCKY_LINUX, ALMA_LINUX, AMAZON_LINUX_2023
     #   })
     #
     # @example Response structure
     #
     #   resp.baseline_id #=> String
     #   resp.patch_group #=> String
-    #   resp.operating_system #=> String, one of "WINDOWS", "AMAZON_LINUX", "AMAZON_LINUX_2", "AMAZON_LINUX_2022", "UBUNTU", "REDHAT_ENTERPRISE_LINUX", "SUSE", "CENTOS", "ORACLE_LINUX", "DEBIAN", "MACOS", "RASPBIAN", "ROCKY_LINUX"
+    #   resp.operating_system #=> String, one of "WINDOWS", "AMAZON_LINUX", "AMAZON_LINUX_2", "AMAZON_LINUX_2022", "UBUNTU", "REDHAT_ENTERPRISE_LINUX", "SUSE", "CENTOS", "ORACLE_LINUX", "DEBIAN", "MACOS", "RASPBIAN", "ROCKY_LINUX", "ALMA_LINUX", "AMAZON_LINUX_2023"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ssm-2014-11-06/GetPatchBaselineForPatchGroup AWS API Documentation
     #
@@ -8659,12 +8659,11 @@ module Aws::SSM
     #   standard-parameter tier. If you use the advanced-parameter tier, you
     #   can specify one of the following as the default:
     #
-    #   * **Advanced**\: With this option, Parameter Store evaluates all
+    #   * **Advanced**: With this option, Parameter Store evaluates all
     #     requests as advanced parameters.
     #
-    #   * **Intelligent-Tiering**\: With this option, Parameter Store
-    #     evaluates each request to determine if the parameter is standard or
-    #     advanced.
+    #   * **Intelligent-Tiering**: With this option, Parameter Store evaluates
+    #     each request to determine if the parameter is standard or advanced.
     #
     #     If the request doesn't include any options that require an advanced
     #     parameter, the parameter is created in the standard-parameter tier.
@@ -8945,23 +8944,23 @@ module Aws::SSM
     #   You can specify targets using managed node IDs, resource group names,
     #   or tags that have been applied to managed nodes.
     #
-    #   **Example 1**\: Specify managed node IDs
+    #   **Example 1**: Specify managed node IDs
     #
     #   `Key=InstanceIds,Values=<instance-id-1>,<instance-id-2>,<instance-id-3>`
     #
-    #   **Example 2**\: Use tag key-pairs applied to managed nodes
+    #   **Example 2**: Use tag key-pairs applied to managed nodes
     #
     #   `Key=tag:<my-tag-key>,Values=<my-tag-value-1>,<my-tag-value-2>`
     #
-    #   **Example 3**\: Use tag-keys applied to managed nodes
+    #   **Example 3**: Use tag-keys applied to managed nodes
     #
     #   `Key=tag-key,Values=<my-tag-key-1>,<my-tag-key-2>`
     #
-    #   **Example 4**\: Use resource group names
+    #   **Example 4**: Use resource group names
     #
     #   `Key=resource-groups:Name,Values=<resource-group-name>`
     #
-    #   **Example 5**\: Use filters for resource group types
+    #   **Example 5**: Use filters for resource group types
     #
     #   `Key=resource-groups:ResourceTypeFilters,Values=<resource-type-1>,<resource-type-2>`
     #
@@ -9073,7 +9072,7 @@ module Aws::SSM
     #   `RegisterTaskWithMaintenanceWindow`.
     #
     #   For more information, see the following topics in the in the *Amazon
-    #   Web Services Systems Manager User Guide*\:
+    #   Web Services Systems Manager User Guide*:
     #
     #   * [Using service-linked roles for Systems Manager][1]
     #
@@ -9177,10 +9176,10 @@ module Aws::SSM
     #   Indicates whether tasks should continue to run after the cutoff time
     #   specified in the maintenance windows is reached.
     #
-    #   * `CONTINUE_TASK`\: When the cutoff time is reached, any tasks that
-    #     are running continue. The default value.
+    #   * `CONTINUE_TASK`: When the cutoff time is reached, any tasks that are
+    #     running continue. The default value.
     #
-    #   * `CANCEL_TASK`\:
+    #   * `CANCEL_TASK`:
     #
     #     * For Automation, Lambda, Step Functions tasks: When the cutoff time
     #       is reached, any task invocations that are already running
@@ -9313,7 +9312,7 @@ module Aws::SSM
     #
     #   MaintenanceWindow: mw-012345abcde
     #
-    #   `Automation`\: `example-c160-4567-8519-012345abcde`
+    #   `Automation`: `example-c160-4567-8519-012345abcde`
     #
     #   PatchBaseline: pb-012345abcde
     #
@@ -9379,6 +9378,8 @@ module Aws::SSM
     #   The Amazon Resource Name (ARN) of the service setting to reset. The
     #   setting ID can be one of the following.
     #
+    #   * `/ssm/managed-instance/default-ec2-instance-management-role`
+    #
     #   * `/ssm/automation/customer-script-log-destination`
     #
     #   * `/ssm/automation/customer-script-log-group-name`
@@ -11273,7 +11274,7 @@ module Aws::SSM
     #   `RegisterTaskWithMaintenanceWindow`.
     #
     #   For more information, see the following topics in the in the *Amazon
-    #   Web Services Systems Manager User Guide*\:
+    #   Web Services Systems Manager User Guide*:
     #
     #   * [Using service-linked roles for Systems Manager][1]
     #
@@ -11390,10 +11391,10 @@ module Aws::SSM
     #   Indicates whether tasks should continue to run after the cutoff time
     #   specified in the maintenance windows is reached.
     #
-    #   * `CONTINUE_TASK`\: When the cutoff time is reached, any tasks that
-    #     are running continue. The default value.
+    #   * `CONTINUE_TASK`: When the cutoff time is reached, any tasks that are
+    #     running continue. The default value.
     #
-    #   * `CANCEL_TASK`\:
+    #   * `CANCEL_TASK`:
     #
     #     * For Automation, Lambda, Step Functions tasks: When the cutoff time
     #       is reached, any task invocations that are already running
@@ -11867,17 +11868,17 @@ module Aws::SSM
     #   The action for Patch Manager to take on patches included in the
     #   `RejectedPackages` list.
     #
-    #   * <b> <code>ALLOW_AS_DEPENDENCY</code> </b>\: A package in the
+    #   * <b> <code>ALLOW_AS_DEPENDENCY</code> </b>: A package in the
     #     `Rejected` patches list is installed only if it is a dependency of
     #     another package. It is considered compliant with the patch baseline,
     #     and its status is reported as `InstalledOther`. This is the default
     #     action if no option is specified.
     #
-    #   * <b> <code>BLOCK</code> </b>\: Packages in the `RejectedPatches`
-    #     list, and packages that include them as dependencies, aren't
-    #     installed under any circumstances. If a package was installed before
-    #     it was added to the `Rejected` patches list, it is considered
-    #     non-compliant with the patch baseline, and its status is reported as
+    #   * <b> <code>BLOCK</code> </b>: Packages in the `RejectedPatches` list,
+    #     and packages that include them as dependencies, aren't installed
+    #     under any circumstances. If a package was installed before it was
+    #     added to the `Rejected` patches list, it is considered non-compliant
+    #     with the patch baseline, and its status is reported as
     #     `InstalledRejected`.
     #
     # @option params [String] :description
@@ -11961,7 +11962,7 @@ module Aws::SSM
     #
     #   resp.baseline_id #=> String
     #   resp.name #=> String
-    #   resp.operating_system #=> String, one of "WINDOWS", "AMAZON_LINUX", "AMAZON_LINUX_2", "AMAZON_LINUX_2022", "UBUNTU", "REDHAT_ENTERPRISE_LINUX", "SUSE", "CENTOS", "ORACLE_LINUX", "DEBIAN", "MACOS", "RASPBIAN", "ROCKY_LINUX"
+    #   resp.operating_system #=> String, one of "WINDOWS", "AMAZON_LINUX", "AMAZON_LINUX_2", "AMAZON_LINUX_2022", "UBUNTU", "REDHAT_ENTERPRISE_LINUX", "SUSE", "CENTOS", "ORACLE_LINUX", "DEBIAN", "MACOS", "RASPBIAN", "ROCKY_LINUX", "ALMA_LINUX", "AMAZON_LINUX_2023"
     #   resp.global_filters.patch_filters #=> Array
     #   resp.global_filters.patch_filters[0].key #=> String, one of "ARCH", "ADVISORY_ID", "BUGZILLA_ID", "PATCH_SET", "PRODUCT", "PRODUCT_FAMILY", "CLASSIFICATION", "CVE_ID", "EPOCH", "MSRC_SEVERITY", "NAME", "PATCH_ID", "SECTION", "PRIORITY", "REPOSITORY", "RELEASE", "SEVERITY", "SECURITY", "VERSION"
     #   resp.global_filters.patch_filters[0].values #=> Array
@@ -12075,7 +12076,7 @@ module Aws::SSM
     # Update the service setting for the account.
     #
     # @option params [required, String] :setting_id
-    #   The Amazon Resource Name (ARN) of the service setting to reset. For
+    #   The Amazon Resource Name (ARN) of the service setting to update. For
     #   example,
     #   `arn:aws:ssm:us-east-1:111122223333:servicesetting/ssm/parameter-store/high-throughput-enabled`.
     #   The setting ID can be one of the following.
@@ -12096,26 +12097,37 @@ module Aws::SSM
     #
     #   * `/ssm/parameter-store/high-throughput-enabled`
     #
+    #   <note markdown="1"> Permissions to update the
+    #   `/ssm/managed-instance/default-ec2-instance-management-role` setting
+    #   should only be provided to administrators. Implement least privilege
+    #   access when allowing individuals to configure or modify the Default
+    #   Host Management Configuration.
+    #
+    #    </note>
+    #
     # @option params [required, String] :setting_value
     #   The new value to specify for the service setting. The following list
     #   specifies the available values for each setting.
     #
-    #   * `/ssm/automation/customer-script-log-destination`\: `CloudWatch`
+    #   * `/ssm/managed-instance/default-ec2-instance-management-role: The
+    #     name of an IAM role`
+    #
+    #   * `/ssm/automation/customer-script-log-destination`: `CloudWatch`
     #
-    #   * `/ssm/automation/customer-script-log-group-name`\: the name of an
+    #   * `/ssm/automation/customer-script-log-group-name`: The name of an
     #     Amazon CloudWatch Logs log group
     #
-    #   * `/ssm/documents/console/public-sharing-permission`\: `Enable` or
+    #   * `/ssm/documents/console/public-sharing-permission`: `Enable` or
     #     `Disable`
     #
-    #   * `/ssm/managed-instance/activation-tier`\: `standard` or `advanced`
+    #   * `/ssm/managed-instance/activation-tier`: `standard` or `advanced`
     #
-    #   * `/ssm/opsinsights/opscenter`\: `Enabled` or `Disabled`
+    #   * `/ssm/opsinsights/opscenter`: `Enabled` or `Disabled`
     #
-    #   * `/ssm/parameter-store/default-parameter-tier`\: `Standard`,
+    #   * `/ssm/parameter-store/default-parameter-tier`: `Standard`,
     #     `Advanced`, `Intelligent-Tiering`
     #
-    #   * `/ssm/parameter-store/high-throughput-enabled`\: `true` or `false`
+    #   * `/ssm/parameter-store/high-throughput-enabled`: `true` or `false`
     #
     # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
     #
@@ -12148,7 +12160,7 @@ module Aws::SSM
         params: params,
         config: config)
       context[:gem_name] = 'aws-sdk-ssm'
-      context[:gem_version] = '1.149.0'
+      context[:gem_version] = '1.150.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-ssm/types.rb

@@ -112,11 +112,11 @@ module Aws::SSM
     #
     #   Use the ID of the resource. Here are some examples:
     #
-    #   `MaintenanceWindow`\: `mw-012345abcde`
+    #   `MaintenanceWindow`: `mw-012345abcde`
     #
-    #   `PatchBaseline`\: `pb-012345abcde`
+    #   `PatchBaseline`: `pb-012345abcde`
     #
-    #   `Automation`\: `example-c160-4567-8519-012345abcde`
+    #   `Automation`: `example-c160-4567-8519-012345abcde`
     #
     #   `OpsMetadata` object: `ResourceID` for tagging is created from the
     #   Amazon Resource Name (ARN) for the object. Specifically,
@@ -130,7 +130,7 @@ module Aws::SSM
     #   For the `Document` and `Parameter` values, use the name of the
     #   resource.
     #
-    #   `ManagedInstance`\: `mi-012345abcde`
+    #   `ManagedInstance`: `mi-012345abcde`
     #
     #   <note markdown="1"> The `ManagedInstance` type for this API operation is only for
     #   on-premises managed nodes. You must specify the name of the managed
@@ -247,9 +247,9 @@ module Aws::SSM
     #   The type of resource that you want to associate with an OpsItem.
     #   OpsCenter supports the following types:
     #
-    #   `AWS::SSMIncidents::IncidentRecord`\: an Incident Manager incident.
+    #   `AWS::SSMIncidents::IncidentRecord`: an Incident Manager incident.
     #
-    #   `AWS::SSM::Document`\: a Systems Manager (SSM) document.
+    #   `AWS::SSM::Document`: a Systems Manager (SSM) document.
     #   @return [String]
     #
     # @!attribute [rw] resource_uri
@@ -2024,15 +2024,15 @@ module Aws::SSM
     # @!attribute [rw] value
     #   The filter value. Valid values for each filter key are as follows:
     #
-    #   * **InvokedAfter**\: Specify a timestamp to limit your results. For
+    #   * **InvokedAfter**: Specify a timestamp to limit your results. For
     #     example, specify `2021-07-07T00:00:00Z` to see a list of command
     #     executions occurring July 7, 2021, and later.
     #
-    #   * **InvokedBefore**\: Specify a timestamp to limit your results. For
+    #   * **InvokedBefore**: Specify a timestamp to limit your results. For
     #     example, specify `2021-07-07T00:00:00Z` to see a list of command
     #     executions from before July 7, 2021.
     #
-    #   * **Status**\: Specify a valid command status to see a list of all
+    #   * **Status**: Specify a valid command status to see a list of all
     #     command executions with that status. The status choices depend on
     #     the API you call.
     #
@@ -2091,19 +2091,19 @@ module Aws::SSM
     #
     #     * `Terminated`
     #
-    #   * **DocumentName**\: Specify name of the Amazon Web Services Systems
+    #   * **DocumentName**: Specify name of the Amazon Web Services Systems
     #     Manager document (SSM document) for which you want to see command
     #     execution results. For example, specify `AWS-RunPatchBaseline` to
     #     see command executions that used this SSM document to perform
     #     security patching operations on managed nodes.
     #
-    #   * **ExecutionStage**\: Specify one of the following values
+    #   * **ExecutionStage**: Specify one of the following values
     #     (`ListCommands` operations only):
     #
-    #     * `Executing`\: Returns a list of command executions that are
+    #     * `Executing`: Returns a list of command executions that are
     #       currently still running.
     #
-    #     * `Complete`\: Returns a list of command executions that have
+    #     * `Complete`: Returns a list of command executions that have
     #       already completed.
     #   @return [String]
     #
@@ -3802,13 +3802,13 @@ module Aws::SSM
     #   The action for Patch Manager to take on patches included in the
     #   `RejectedPackages` list.
     #
-    #   * <b> <code>ALLOW_AS_DEPENDENCY</code> </b>\: A package in the
+    #   * <b> <code>ALLOW_AS_DEPENDENCY</code> </b>: A package in the
     #     `Rejected` patches list is installed only if it is a dependency of
     #     another package. It is considered compliant with the patch
     #     baseline, and its status is reported as `InstalledOther`. This is
     #     the default action if no option is specified.
     #
-    #   * <b> <code>BLOCK</code> </b>\: Packages in the `RejectedPatches`
+    #   * <b> <code>BLOCK</code> </b>: Packages in the `RejectedPatches`
     #     list, and packages that include them as dependencies, aren't
     #     installed under any circumstances. If a package was installed
     #     before it was added to the Rejected patches list, it is considered
@@ -6122,10 +6122,10 @@ module Aws::SSM
     # @!attribute [rw] mappings
     #   Each entry in the array contains:
     #
-    #   * `PatchGroup`\: string (between 1 and 256 characters. Regex:
+    #   * `PatchGroup`: string (between 1 and 256 characters. Regex:
     #     `^([\p\{L\}\p\{Z\}\p\{N\}_.:/=+\-@]*)$)`
     #
-    #   * `PatchBaselineIdentity`\: A `PatchBaselineIdentity` element.
+    #   * `PatchBaselineIdentity`: A `PatchBaselineIdentity` element.
     #   @return [Array<Types::PatchGroupPatchBaselineMapping>]
     #
     # @!attribute [rw] next_token
@@ -7994,9 +7994,9 @@ module Aws::SSM
     #
     #   The map has the following format:
     #
-    #   * `Key`\: string, between 1 and 255 characters
+    #   * `Key`: string, between 1 and 255 characters
     #
-    #   * `Value`\: an array of strings, each between 1 and 255 characters
+    #   * `Value`: an array of strings, each between 1 and 255 characters
     #   @return [Array<Hash<String,Types::MaintenanceWindowTaskParameterValueExpression>>]
     #
     # @!attribute [rw] priority
@@ -8573,11 +8573,11 @@ module Aws::SSM
     # @!attribute [rw] parameter_filters
     #   Filters to limit the request results.
     #
-    #   <note markdown="1"> The following `Key` values are supported for `GetParametersByPath`\:
+    #   <note markdown="1"> The following `Key` values are supported for `GetParametersByPath`:
     #   `Type`, `KeyId`, and `Label`.
     #
     #    The following `Key` values aren't supported for
-    #   `GetParametersByPath`\: `tag`, `DataType`, `Name`, `Path`, and
+    #   `GetParametersByPath`: `tag`, `DataType`, `Name`, `Path`, and
     #   `Tier`.
     #
     #    </note>
@@ -9535,11 +9535,11 @@ module Aws::SSM
     #
     #    </note>
     #
-    #   * `RebootIfNeeded`\: Patch Manager tries to reboot the managed node
+    #   * `RebootIfNeeded`: Patch Manager tries to reboot the managed node
     #     if it installed any patches, or if any patches are detected with a
     #     status of `InstalledPendingReboot`.
     #
-    #   * `NoReboot`\: Patch Manager attempts to install missing packages
+    #   * `NoReboot`: Patch Manager attempts to install missing packages
     #     without trying to reboot the system. Patches installed with this
     #     option are assigned a status of `InstalledPendingReboot`. These
     #     patches might not be in effect until a reboot is performed.
@@ -9599,15 +9599,15 @@ module Aws::SSM
     # Defines a filter used in DescribeInstancePatchStatesForPatchGroup to
     # scope down the information returned by the API.
     #
-    # **Example**\: To filter for all managed nodes in a patch group having
+    # **Example**: To filter for all managed nodes in a patch group having
     # more than three patches with a `FailedCount` status, use the following
     # for the filter:
     #
-    # * Value for `Key`\: `FailedCount`
+    # * Value for `Key`: `FailedCount`
     #
-    # * Value for `Type`\: `GreaterThan`
+    # * Value for `Type`: `GreaterThan`
     #
-    # * Value for `Values`\: `3`
+    # * Value for `Values`: `3`
     #
     # @!attribute [rw] key
     #   The key for the filter. Supported values include the following:
@@ -12535,12 +12535,12 @@ module Aws::SSM
     # @!attribute [rw] notification_type
     #   The type of notification.
     #
-    #   * `Command`\: Receive notification when the status of a command
+    #   * `Command`: Receive notification when the status of a command
     #     changes.
     #
-    #   * `Invocation`\: For commands sent to multiple managed nodes,
-    #     receive notification on a per-node basis when the status of a
-    #     command changes.
+    #   * `Invocation`: For commands sent to multiple managed nodes, receive
+    #     notification on a per-node basis when the status of a command
+    #     changes.
     #   @return [String]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ssm-2014-11-06/NotificationConfig AWS API Documentation
@@ -14786,10 +14786,10 @@ module Aws::SSM
     #   standard-parameter tier. If you use the advanced-parameter tier, you
     #   can specify one of the following as the default:
     #
-    #   * **Advanced**\: With this option, Parameter Store evaluates all
+    #   * **Advanced**: With this option, Parameter Store evaluates all
     #     requests as advanced parameters.
     #
-    #   * **Intelligent-Tiering**\: With this option, Parameter Store
+    #   * **Intelligent-Tiering**: With this option, Parameter Store
     #     evaluates each request to determine if the parameter is standard
     #     or advanced.
     #
@@ -15068,23 +15068,23 @@ module Aws::SSM
     #   You can specify targets using managed node IDs, resource group
     #   names, or tags that have been applied to managed nodes.
     #
-    #   **Example 1**\: Specify managed node IDs
+    #   **Example 1**: Specify managed node IDs
     #
     #   `Key=InstanceIds,Values=<instance-id-1>,<instance-id-2>,<instance-id-3>`
     #
-    #   **Example 2**\: Use tag key-pairs applied to managed nodes
+    #   **Example 2**: Use tag key-pairs applied to managed nodes
     #
     #   `Key=tag:<my-tag-key>,Values=<my-tag-value-1>,<my-tag-value-2>`
     #
-    #   **Example 3**\: Use tag-keys applied to managed nodes
+    #   **Example 3**: Use tag-keys applied to managed nodes
     #
     #   `Key=tag-key,Values=<my-tag-key-1>,<my-tag-key-2>`
     #
-    #   **Example 4**\: Use resource group names
+    #   **Example 4**: Use resource group names
     #
     #   `Key=resource-groups:Name,Values=<resource-group-name>`
     #
-    #   **Example 5**\: Use filters for resource group types
+    #   **Example 5**: Use filters for resource group types
     #
     #   `Key=resource-groups:ResourceTypeFilters,Values=<resource-type-1>,<resource-type-2>`
     #
@@ -15194,7 +15194,7 @@ module Aws::SSM
     #   is created when you run `RegisterTaskWithMaintenanceWindow`.
     #
     #   For more information, see the following topics in the in the *Amazon
-    #   Web Services Systems Manager User Guide*\:
+    #   Web Services Systems Manager User Guide*:
     #
     #   * [Using service-linked roles for Systems Manager][1]
     #
@@ -15309,10 +15309,10 @@ module Aws::SSM
     #   Indicates whether tasks should continue to run after the cutoff time
     #   specified in the maintenance windows is reached.
     #
-    #   * `CONTINUE_TASK`\: When the cutoff time is reached, any tasks that
+    #   * `CONTINUE_TASK`: When the cutoff time is reached, any tasks that
     #     are running continue. The default value.
     #
-    #   * `CANCEL_TASK`\:
+    #   * `CANCEL_TASK`:
     #
     #     * For Automation, Lambda, Step Functions tasks: When the cutoff
     #       time is reached, any task invocations that are already running
@@ -15421,7 +15421,7 @@ module Aws::SSM
     #
     #   MaintenanceWindow: mw-012345abcde
     #
-    #   `Automation`\: `example-c160-4567-8519-012345abcde`
+    #   `Automation`: `example-c160-4567-8519-012345abcde`
     #
     #   PatchBaseline: pb-012345abcde
     #
@@ -15467,6 +15467,8 @@ module Aws::SSM
     #   The Amazon Resource Name (ARN) of the service setting to reset. The
     #   setting ID can be one of the following.
     #
+    #   * `/ssm/managed-instance/default-ec2-instance-management-role`
+    #
     #   * `/ssm/automation/customer-script-log-destination`
     #
     #   * `/ssm/automation/customer-script-log-group-name`
@@ -15907,16 +15909,16 @@ module Aws::SSM
     #   The data type name for including resource data sync state. There are
     #   four sync states:
     #
-    #   `OrganizationNotExists`\: Your organization doesn't exist.
+    #   `OrganizationNotExists`: Your organization doesn't exist.
     #
-    #   `NoPermissions`\: The system can't locate the service-linked role.
+    #   `NoPermissions`: The system can't locate the service-linked role.
     #   This role is automatically created when a user creates a resource
     #   data sync in Explorer.
     #
-    #   `InvalidOrganizationalUnit`\: You specified or selected an invalid
+    #   `InvalidOrganizationalUnit`: You specified or selected an invalid
     #   unit in the resource data sync configuration.
     #
-    #   `TrustedAccessDisabled`\: You disabled Systems Manager access in the
+    #   `TrustedAccessDisabled`: You disabled Systems Manager access in the
     #   organization in Organizations.
     #   @return [String]
     #
@@ -17405,13 +17407,13 @@ module Aws::SSM
     #
     # * `Key=tag-key,Values=<my-tag-key-1>,<my-tag-key-2>`
     #
-    # * **Run Command and Maintenance window targets only**\:
+    # * **Run Command and Maintenance window targets only**:
     #   `Key=resource-groups:Name,Values=<resource-group-name>`
     #
-    # * **Maintenance window targets only**\:
+    # * **Maintenance window targets only**:
     #   `Key=resource-groups:ResourceTypeFilters,Values=<resource-type-1>,<resource-type-2>`
     #
-    # * **Automation targets only**\:
+    # * **Automation targets only**:
     #   `Key=ResourceGroup;Values=<resource-group-name>`
     #
     # For example:
@@ -17422,23 +17424,23 @@ module Aws::SSM
     #
     # * `Key=tag-key,Values=Name,Instance-Type,CostCenter`
     #
-    # * **Run Command and Maintenance window targets only**\:
+    # * **Run Command and Maintenance window targets only**:
     #   `Key=resource-groups:Name,Values=ProductionResourceGroup`
     #
     #   This example demonstrates how to target all resources in the
     #   resource group **ProductionResourceGroup** in your maintenance
     #   window.
     #
-    # * **Maintenance window targets only**\:
+    # * **Maintenance window targets only**:
     #   `Key=resource-groups:ResourceTypeFilters,Values=AWS::EC2::INSTANCE,AWS::EC2::VPC`
     #
     #   This example demonstrates how to target only Amazon Elastic Compute
     #   Cloud (Amazon EC2) instances and VPCs in your maintenance window.
     #
-    # * **Automation targets only**\:
+    # * **Automation targets only**:
     #   `Key=ResourceGroup,Values=MyResourceGroup`
     #
-    # * **State Manager association targets only**\:
+    # * **State Manager association targets only**:
     #   `Key=InstanceIds,Values=*`
     #
     #   This example demonstrates how to target all managed instances in the
@@ -18497,7 +18499,7 @@ module Aws::SSM
     #   is created when you run `RegisterTaskWithMaintenanceWindow`.
     #
     #   For more information, see the following topics in the in the *Amazon
-    #   Web Services Systems Manager User Guide*\:
+    #   Web Services Systems Manager User Guide*:
     #
     #   * [Using service-linked roles for Systems Manager][1]
     #
@@ -18627,10 +18629,10 @@ module Aws::SSM
     #   Indicates whether tasks should continue to run after the cutoff time
     #   specified in the maintenance windows is reached.
     #
-    #   * `CONTINUE_TASK`\: When the cutoff time is reached, any tasks that
+    #   * `CONTINUE_TASK`: When the cutoff time is reached, any tasks that
     #     are running continue. The default value.
     #
-    #   * `CANCEL_TASK`\:
+    #   * `CANCEL_TASK`:
     #
     #     * For Automation, Lambda, Step Functions tasks: When the cutoff
     #       time is reached, any task invocations that are already running
@@ -19046,13 +19048,13 @@ module Aws::SSM
     #   The action for Patch Manager to take on patches included in the
     #   `RejectedPackages` list.
     #
-    #   * <b> <code>ALLOW_AS_DEPENDENCY</code> </b>\: A package in the
+    #   * <b> <code>ALLOW_AS_DEPENDENCY</code> </b>: A package in the
     #     `Rejected` patches list is installed only if it is a dependency of
     #     another package. It is considered compliant with the patch
     #     baseline, and its status is reported as `InstalledOther`. This is
     #     the default action if no option is specified.
     #
-    #   * <b> <code>BLOCK</code> </b>\: Packages in the `RejectedPatches`
+    #   * <b> <code>BLOCK</code> </b>: Packages in the `RejectedPatches`
     #     list, and packages that include them as dependencies, aren't
     #     installed under any circumstances. If a package was installed
     #     before it was added to the `Rejected` patches list, it is
@@ -19210,7 +19212,7 @@ module Aws::SSM
     # The request body of the UpdateServiceSetting API operation.
     #
     # @!attribute [rw] setting_id
-    #   The Amazon Resource Name (ARN) of the service setting to reset. For
+    #   The Amazon Resource Name (ARN) of the service setting to update. For
     #   example,
     #   `arn:aws:ssm:us-east-1:111122223333:servicesetting/ssm/parameter-store/high-throughput-enabled`.
     #   The setting ID can be one of the following.
@@ -19230,28 +19232,39 @@ module Aws::SSM
     #   * `/ssm/parameter-store/default-parameter-tier`
     #
     #   * `/ssm/parameter-store/high-throughput-enabled`
+    #
+    #   <note markdown="1"> Permissions to update the
+    #   `/ssm/managed-instance/default-ec2-instance-management-role` setting
+    #   should only be provided to administrators. Implement least privilege
+    #   access when allowing individuals to configure or modify the Default
+    #   Host Management Configuration.
+    #
+    #    </note>
     #   @return [String]
     #
     # @!attribute [rw] setting_value
     #   The new value to specify for the service setting. The following list
     #   specifies the available values for each setting.
     #
-    #   * `/ssm/automation/customer-script-log-destination`\: `CloudWatch`
+    #   * `/ssm/managed-instance/default-ec2-instance-management-role: The
+    #     name of an IAM role`
+    #
+    #   * `/ssm/automation/customer-script-log-destination`: `CloudWatch`
     #
-    #   * `/ssm/automation/customer-script-log-group-name`\: the name of an
+    #   * `/ssm/automation/customer-script-log-group-name`: The name of an
     #     Amazon CloudWatch Logs log group
     #
-    #   * `/ssm/documents/console/public-sharing-permission`\: `Enable` or
+    #   * `/ssm/documents/console/public-sharing-permission`: `Enable` or
     #     `Disable`
     #
-    #   * `/ssm/managed-instance/activation-tier`\: `standard` or `advanced`
+    #   * `/ssm/managed-instance/activation-tier`: `standard` or `advanced`
     #
-    #   * `/ssm/opsinsights/opscenter`\: `Enabled` or `Disabled`
+    #   * `/ssm/opsinsights/opscenter`: `Enabled` or `Disabled`
     #
-    #   * `/ssm/parameter-store/default-parameter-tier`\: `Standard`,
+    #   * `/ssm/parameter-store/default-parameter-tier`: `Standard`,
     #     `Advanced`, `Intelligent-Tiering`
     #
-    #   * `/ssm/parameter-store/high-throughput-enabled`\: `true` or `false`
+    #   * `/ssm/parameter-store/high-throughput-enabled`: `true` or `false`
     #   @return [String]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ssm-2014-11-06/UpdateServiceSettingRequest AWS API Documentation

data/lib/aws-sdk-ssm.rb

@@ -53,6 +53,6 @@ require_relative 'aws-sdk-ssm/customizations'
 # @!group service
 module Aws::SSM
 
-  GEM_VERSION = '1.149.0'
+  GEM_VERSION = '1.150.0'
 
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-ssm
 version: !ruby/object:Gem::Version
-  version: 1.149.0
+  version: 1.150.0
 platform: ruby
 authors:
 - Amazon Web Services
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2023-02-22 00:00:00.000000000 Z
+date: 2023-03-22 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-core