aws-sdk-ssm 1.164.0 → 1.166.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: aa045babfdc00e595896bf83d5256faa5618204fe3d333692aac80ce6ccd9240
4
- data.tar.gz: f185e8470c2d91643ffbba920cc92a0c0bd91d414072777e0cb0e144ab646560
3
+ metadata.gz: 3198fb88def7d777bd506c12c862399e88d33fefce1feba7af94235f8ddb2595
4
+ data.tar.gz: aa2fd260f8b3888c2e375143418b7726590e5d6ee9037ee26d698c2a43b9377e
5
5
  SHA512:
6
- metadata.gz: ea7750981ba94f304a68badb8c9c84a972011eb02d4e08fc65d1cc0c7f3c6db64b041172684cec904123fc6b5372692239b0df3e7eb0ddf07cc7c024f1688ea2
7
- data.tar.gz: 8742b96a17d80c176369b17f147070e2577c96593b1fec92f4dda9eaa3fb8484cb1856c703895d4a6e04739c6df8e1f87bae6601e322bf4063f7b5cf3f783545
6
+ metadata.gz: c3bf1a80b504cedc349858d212fc3bc1806a36d297345015878df04c215a12395afcba55ce9c3fb917e561b49bbb8e7708ad41f00ae9d6fa24ec67a447ace7cf
7
+ data.tar.gz: e9bf9d6233110708ed865d8cb7114a66c956e495944364386436f625375fe861e04ac0a7398ea3af43af5f3877a522f9c5c75c9506c027ae39f989401d74de8b
data/CHANGELOG.md CHANGED
@@ -1,6 +1,16 @@
1
1
  Unreleased Changes
2
2
  ------------------
3
3
 
4
+ 1.166.0 (2024-03-12)
5
+ ------------------
6
+
7
+ * Feature - March 2024 doc-only updates for Systems Manager.
8
+
9
+ 1.165.0 (2024-02-21)
10
+ ------------------
11
+
12
+ * Feature - This release adds support for sharing Systems Manager parameters with other AWS accounts.
13
+
4
14
  1.164.0 (2024-01-31)
5
15
  ------------------
6
16
 
data/VERSION CHANGED
@@ -1 +1 @@
1
- 1.164.0
1
+ 1.166.0
@@ -430,8 +430,8 @@ module Aws::SSM
430
430
  # meaning to and are interpreted strictly as a string of characters.
431
431
  #
432
432
  # For more information about using tags with Amazon Elastic Compute
433
- # Cloud (Amazon EC2) instances, see [Tagging your Amazon EC2
434
- # resources][1] in the *Amazon EC2 User Guide*.
433
+ # Cloud (Amazon EC2) instances, see [Tag your Amazon EC2 resources][1]
434
+ # in the *Amazon EC2 User Guide*.
435
435
  #
436
436
  #
437
437
  #
@@ -627,8 +627,8 @@ module Aws::SSM
627
627
  # Agent on machines in your hybrid environment. For more information
628
628
  # about requirements for managing on-premises machines using Systems
629
629
  # Manager, see [Setting up Amazon Web Services Systems Manager for
630
- # hybrid environments][1] in the *Amazon Web Services Systems Manager
631
- # User Guide*.
630
+ # hybrid and multicloud environments][1] in the *Amazon Web Services
631
+ # Systems Manager User Guide*.
632
632
  #
633
633
  # <note markdown="1"> Amazon Elastic Compute Cloud (Amazon EC2) instances, edge devices, and
634
634
  # on-premises servers and VMs that are configured for Systems Manager
@@ -658,8 +658,9 @@ module Aws::SSM
658
658
  # want to assign to the managed node. This IAM role must provide
659
659
  # AssumeRole permissions for the Amazon Web Services Systems Manager
660
660
  # service principal `ssm.amazonaws.com`. For more information, see
661
- # [Create an IAM service role for a hybrid environment][1] in the
662
- # *Amazon Web Services Systems Manager User Guide*.
661
+ # [Create an IAM service role for a hybrid and multicloud
662
+ # environment][1] in the *Amazon Web Services Systems Manager User
663
+ # Guide*.
663
664
  #
664
665
  # <note markdown="1"> You can't specify an IAM service-linked role for this parameter. You
665
666
  # must create a unique role.
@@ -789,8 +790,8 @@ module Aws::SSM
789
790
  # For example, `AWS-ApplyPatchBaseline` or `My-Document`.
790
791
  #
791
792
  # @option params [String] :document_version
792
- # The document version you want to associate with the target(s). Can be
793
- # a specific version or the default version.
793
+ # The document version you want to associate with the targets. Can be a
794
+ # specific version or the default version.
794
795
  #
795
796
  # State Manager doesn't support running associations that use a new
796
797
  # version of a document if that document is shared from another account.
@@ -823,8 +824,8 @@ module Aws::SSM
823
824
  # Amazon Web Services account, or individual managed node IDs. You can
824
825
  # target all managed nodes in an Amazon Web Services account by
825
826
  # specifying the `InstanceIds` key with a value of `*`. For more
826
- # information about choosing targets for an association, see [Using
827
- # targets and rate controls with State Manager associations][1] in the
827
+ # information about choosing targets for an association, see [About
828
+ # targets and rate controls in State Manager associations][1] in the
828
829
  # *Amazon Web Services Systems Manager User Guide*.
829
830
  #
830
831
  #
@@ -832,8 +833,7 @@ module Aws::SSM
832
833
  # [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-state-manager-targets-and-rate-controls.html
833
834
  #
834
835
  # @option params [String] :schedule_expression
835
- # A cron expression when the association will be applied to the
836
- # target(s).
836
+ # A cron expression when the association will be applied to the targets.
837
837
  #
838
838
  # @option params [Types::InstanceAssociationOutputLocation] :output_location
839
839
  # An Amazon Simple Storage Service (Amazon S3) bucket where you want to
@@ -1346,16 +1346,17 @@ module Aws::SSM
1346
1346
  # For examples, see the following topics in the *Amazon Web Services
1347
1347
  # Systems Manager User Guide*.
1348
1348
  #
1349
- # * [Create an SSM document (Amazon Web Services API)][1]
1349
+ # * [Create an SSM document (console)][1]
1350
1350
  #
1351
- # * [Create an SSM document (Amazon Web Services CLI)][2]
1351
+ # * [Create an SSM document (command line)][2]
1352
1352
  #
1353
- # * [Create an SSM document (API)][1]
1353
+ # * [Create an SSM document (API)][3]
1354
1354
  #
1355
1355
  #
1356
1356
  #
1357
- # [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/create-ssm-document-api.html
1358
- # [2]: https://docs.aws.amazon.com/systems-manager/latest/userguide/create-ssm-document-cli.html
1357
+ # [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/documents-using.html#create-ssm-console
1358
+ # [2]: https://docs.aws.amazon.com/systems-manager/latest/userguide/documents-using.html#create-ssm-document-cli
1359
+ # [3]: https://docs.aws.amazon.com/systems-manager/latest/userguide/documents-using.html#create-ssm-document-api
1359
1360
  #
1360
1361
  # @option params [Array<Types::DocumentRequires>] :requires
1361
1362
  # A list of SSM documents required by a document. This parameter is used
@@ -1741,8 +1742,8 @@ module Aws::SSM
1741
1742
  # resource in the request. Use the `/aws/automations` key in
1742
1743
  # OperationalData to associate an Automation runbook with the OpsItem.
1743
1744
  # To view Amazon Web Services CLI example commands that use these keys,
1744
- # see [Creating OpsItems manually][1] in the *Amazon Web Services
1745
- # Systems Manager User Guide*.
1745
+ # see [Create OpsItems manually][1] in the *Amazon Web Services Systems
1746
+ # Manager User Guide*.
1746
1747
  #
1747
1748
  #
1748
1749
  #
@@ -1997,12 +1998,13 @@ module Aws::SSM
1997
1998
  # and its status is reported as `InstalledOther`. This is the default
1998
1999
  # action if no option is specified.
1999
2000
  #
2000
- # * <b> <code>BLOCK</code> </b>: Packages in the `RejectedPatches` list,
2001
- # and packages that include them as dependencies, aren't installed
2002
- # under any circumstances. If a package was installed before it was
2003
- # added to the Rejected patches list, it is considered non-compliant
2004
- # with the patch baseline, and its status is reported as
2005
- # `InstalledRejected`.
2001
+ # * **BLOCK**: Packages in the **Rejected patches** list, and packages
2002
+ # that include them as dependencies, aren't installed by Patch
2003
+ # Manager under any circumstances. If a package was installed before
2004
+ # it was added to the **Rejected patches** list, or is installed
2005
+ # outside of Patch Manager afterward, it's considered noncompliant
2006
+ # with the patch baseline and its status is reported as
2007
+ # *InstalledRejected*.
2006
2008
  #
2007
2009
  # @option params [String] :description
2008
2010
  # A description of the patch baseline.
@@ -2501,6 +2503,11 @@ module Aws::SSM
2501
2503
  # @option params [required, String] :name
2502
2504
  # The name of the parameter to delete.
2503
2505
  #
2506
+ # <note markdown="1"> You can't enter the Amazon Resource Name (ARN) for a parameter, only
2507
+ # the parameter name itself.
2508
+ #
2509
+ # </note>
2510
+ #
2504
2511
  # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
2505
2512
  #
2506
2513
  # @example Request syntax with placeholder values
@@ -2525,6 +2532,11 @@ module Aws::SSM
2525
2532
  # The names of the parameters to delete. After deleting a parameter,
2526
2533
  # wait for at least 30 seconds to create a parameter with the same name.
2527
2534
  #
2535
+ # <note markdown="1"> You can't enter the Amazon Resource Name (ARN) for a parameter, only
2536
+ # the parameter name itself.
2537
+ #
2538
+ # </note>
2539
+ #
2528
2540
  # @return [Types::DeleteParametersResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
2529
2541
  #
2530
2542
  # * {Types::DeleteParametersResult#deleted_parameters #deleted_parameters} => Array&lt;String&gt;
@@ -2610,11 +2622,22 @@ module Aws::SSM
2610
2622
 
2611
2623
  # Deletes a Systems Manager resource policy. A resource policy helps you
2612
2624
  # to define the IAM entity (for example, an Amazon Web Services account)
2613
- # that can manage your Systems Manager resources. Currently,
2614
- # `OpsItemGroup` is the only resource that supports Systems Manager
2615
- # resource policies. The resource policy for `OpsItemGroup` enables
2616
- # Amazon Web Services accounts to view and interact with OpsCenter
2617
- # operational work items (OpsItems).
2625
+ # that can manage your Systems Manager resources. The following
2626
+ # resources support Systems Manager resource policies.
2627
+ #
2628
+ # * `OpsItemGroup` - The resource policy for `OpsItemGroup` enables
2629
+ # Amazon Web Services accounts to view and interact with OpsCenter
2630
+ # operational work items (OpsItems).
2631
+ #
2632
+ # * `Parameter` - The resource policy is used to share a parameter with
2633
+ # other accounts using Resource Access Manager (RAM). For more
2634
+ # information about cross-account sharing of parameters, see [Working
2635
+ # with shared parameters][1] in the *Amazon Web Services Systems
2636
+ # Manager User Guide*.
2637
+ #
2638
+ #
2639
+ #
2640
+ # [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/parameter-store-shared-parameters.html
2618
2641
  #
2619
2642
  # @option params [required, String] :resource_arn
2620
2643
  # Amazon Resource Name (ARN) of the resource to which the policies are
@@ -3640,7 +3663,7 @@ module Aws::SSM
3640
3663
  req.send_request(options)
3641
3664
  end
3642
3665
 
3643
- # All associations for the managed node(s).
3666
+ # All associations for the managed nodes.
3644
3667
  #
3645
3668
  # @option params [required, String] :instance_id
3646
3669
  # The managed node ID for which you want to view all associations.
@@ -3759,7 +3782,7 @@ module Aws::SSM
3759
3782
  req.send_request(options)
3760
3783
  end
3761
3784
 
3762
- # The status of the associations for the managed node(s).
3785
+ # The status of the associations for the managed nodes.
3763
3786
  #
3764
3787
  # @option params [required, String] :instance_id
3765
3788
  # The managed node IDs for which you want association status
@@ -4768,9 +4791,9 @@ module Aws::SSM
4768
4791
  # Operations engineers and IT professionals use Amazon Web Services
4769
4792
  # Systems Manager OpsCenter to view, investigate, and remediate
4770
4793
  # operational issues impacting the performance and health of their
4771
- # Amazon Web Services resources. For more information, see
4772
- # [OpsCenter][2] in the *Amazon Web Services Systems Manager User
4773
- # Guide*.
4794
+ # Amazon Web Services resources. For more information, see [Amazon Web
4795
+ # Services Systems Manager OpsCenter][2] in the *Amazon Web Services
4796
+ # Systems Manager User Guide*.
4774
4797
  #
4775
4798
  #
4776
4799
  #
@@ -4907,7 +4930,8 @@ module Aws::SSM
4907
4930
  req.send_request(options)
4908
4931
  end
4909
4932
 
4910
- # Get information about a parameter.
4933
+ # Lists the parameters in your Amazon Web Services account or the
4934
+ # parameters shared with you when you enable the [Shared][1] option.
4911
4935
  #
4912
4936
  # Request results are returned on a best-effort basis. If you specify
4913
4937
  # `MaxResults` in the request, the response includes information up to
@@ -4923,6 +4947,10 @@ module Aws::SSM
4923
4947
  # to reference KMS. Otherwise, `DescribeParameters` retrieves whatever
4924
4948
  # the original key alias was referencing.
4925
4949
  #
4950
+ #
4951
+ #
4952
+ # [1]: https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeParameters.html#systemsmanager-DescribeParameters-request-Shared
4953
+ #
4926
4954
  # @option params [Array<Types::ParametersFilter>] :filters
4927
4955
  # This data type is deprecated. Instead, use `ParameterFilters`.
4928
4956
  #
@@ -4938,6 +4966,28 @@ module Aws::SSM
4938
4966
  # The token for the next set of items to return. (You received this
4939
4967
  # token from a previous call.)
4940
4968
  #
4969
+ # @option params [Boolean] :shared
4970
+ # Lists parameters that are shared with you.
4971
+ #
4972
+ # <note markdown="1"> By default when using this option, the command returns parameters that
4973
+ # have been shared using a standard Resource Access Manager Resource
4974
+ # Share. In order for a parameter that was shared using the
4975
+ # PutResourcePolicy command to be returned, the associated `RAM Resource
4976
+ # Share Created From Policy` must have been promoted to a standard
4977
+ # Resource Share using the RAM
4978
+ # [PromoteResourceShareCreatedFromPolicy][1] API operation.
4979
+ #
4980
+ # For more information about sharing parameters, see [Working with
4981
+ # shared parameters][2] in the *Amazon Web Services Systems Manager User
4982
+ # Guide*.
4983
+ #
4984
+ # </note>
4985
+ #
4986
+ #
4987
+ #
4988
+ # [1]: https://docs.aws.amazon.com/ram/latest/APIReference/API_PromoteResourceShareCreatedFromPolicy.html
4989
+ # [2]: https://docs.aws.amazon.com/systems-manager/latest/userguide/parameter-store-shared-parameters.html
4990
+ #
4941
4991
  # @return [Types::DescribeParametersResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
4942
4992
  #
4943
4993
  # * {Types::DescribeParametersResult#parameters #parameters} => Array&lt;Types::ParameterMetadata&gt;
@@ -4963,12 +5013,14 @@ module Aws::SSM
4963
5013
  # ],
4964
5014
  # max_results: 1,
4965
5015
  # next_token: "NextToken",
5016
+ # shared: false,
4966
5017
  # })
4967
5018
  #
4968
5019
  # @example Response structure
4969
5020
  #
4970
5021
  # resp.parameters #=> Array
4971
5022
  # resp.parameters[0].name #=> String
5023
+ # resp.parameters[0].arn #=> String
4972
5024
  # resp.parameters[0].type #=> String, one of "String", "StringList", "SecureString"
4973
5025
  # resp.parameters[0].key_id #=> String
4974
5026
  # resp.parameters[0].last_modified_date #=> Time
@@ -6446,9 +6498,9 @@ module Aws::SSM
6446
6498
  # Operations engineers and IT professionals use Amazon Web Services
6447
6499
  # Systems Manager OpsCenter to view, investigate, and remediate
6448
6500
  # operational issues impacting the performance and health of their
6449
- # Amazon Web Services resources. For more information, see
6450
- # [OpsCenter][2] in the *Amazon Web Services Systems Manager User
6451
- # Guide*.
6501
+ # Amazon Web Services resources. For more information, see [Amazon Web
6502
+ # Services Systems Manager OpsCenter][2] in the *Amazon Web Services
6503
+ # Systems Manager User Guide*.
6452
6504
  #
6453
6505
  #
6454
6506
  #
@@ -6660,11 +6712,21 @@ module Aws::SSM
6660
6712
  # </note>
6661
6713
  #
6662
6714
  # @option params [required, String] :name
6663
- # The name of the parameter you want to query.
6715
+ # The name or Amazon Resource Name (ARN) of the parameter that you want
6716
+ # to query. For parameters shared with you from another account, you
6717
+ # must use the full ARN.
6664
6718
  #
6665
6719
  # To query by parameter label, use `"Name": "name:label"`. To query by
6666
6720
  # parameter version, use `"Name": "name:version"`.
6667
6721
  #
6722
+ # For more information about shared parameters, see [Working with shared
6723
+ # parameters][1] in the *Amazon Web Services Systems Manager User
6724
+ # Guide*.
6725
+ #
6726
+ #
6727
+ #
6728
+ # [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/sharing.html
6729
+ #
6668
6730
  # @option params [Boolean] :with_decryption
6669
6731
  # Return decrypted values for secure string parameters. This flag is
6670
6732
  # ignored for `String` and `StringList` parameter types.
@@ -6709,7 +6771,9 @@ module Aws::SSM
6709
6771
  # the original key alias was referencing.
6710
6772
  #
6711
6773
  # @option params [required, String] :name
6712
- # The name of the parameter for which you want to review history.
6774
+ # The name or Amazon Resource Name (ARN) of the parameter for which you
6775
+ # want to review history. For parameters shared with you from another
6776
+ # account, you must use the full ARN.
6713
6777
  #
6714
6778
  # @option params [Boolean] :with_decryption
6715
6779
  # Return decrypted values for secure string parameters. This flag is
@@ -6780,11 +6844,21 @@ module Aws::SSM
6780
6844
  # </note>
6781
6845
  #
6782
6846
  # @option params [required, Array<String>] :names
6783
- # Names of the parameters for which you want to query information.
6847
+ # The names or Amazon Resource Names (ARNs) of the parameters that you
6848
+ # want to query. For parameters shared with you from another account,
6849
+ # you must use the full ARNs.
6784
6850
  #
6785
6851
  # To query by parameter label, use `"Name": "name:label"`. To query by
6786
6852
  # parameter version, use `"Name": "name:version"`.
6787
6853
  #
6854
+ # For more information about shared parameters, see [Working with shared
6855
+ # parameters][1] in the *Amazon Web Services Systems Manager User
6856
+ # Guide*.
6857
+ #
6858
+ #
6859
+ #
6860
+ # [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/parameter-store-shared-parameters.html
6861
+ #
6788
6862
  # @option params [Boolean] :with_decryption
6789
6863
  # Return decrypted secure string value. Return decrypted values for
6790
6864
  # secure string parameters. This flag is ignored for `String` and
@@ -7197,6 +7271,11 @@ module Aws::SSM
7197
7271
  # @option params [required, String] :name
7198
7272
  # The parameter name on which you want to attach one or more labels.
7199
7273
  #
7274
+ # <note markdown="1"> You can't enter the Amazon Resource Name (ARN) for a parameter, only
7275
+ # the parameter name itself.
7276
+ #
7277
+ # </note>
7278
+ #
7200
7279
  # @option params [Integer] :parameter_version
7201
7280
  # The specific version of the parameter on which you want to attach one
7202
7281
  # or more labels. If no version is specified, the system attaches the
@@ -8418,7 +8497,7 @@ module Aws::SSM
8418
8497
  # The Amazon Web Services users that should no longer have access to the
8419
8498
  # document. The Amazon Web Services user can either be a group of
8420
8499
  # account IDs or *All*. This action has a higher priority than
8421
- # *AccountIdsToAdd*. If you specify an ID to add and the same ID to
8500
+ # `AccountIdsToAdd`. If you specify an ID to add and the same ID to
8422
8501
  # remove, the system removes access to the document.
8423
8502
  #
8424
8503
  # @option params [String] :shared_document_version
@@ -8490,7 +8569,7 @@ module Aws::SSM
8490
8569
  #
8491
8570
  # * InstalledTime: The time the association, patch, or custom compliance
8492
8571
  # item was applied to the resource. Specify the time by using the
8493
- # following format: yyyy-MM-dd'T'HH:mm:ss'Z'
8572
+ # following format: `yyyy-MM-dd'T'HH:mm:ss'Z'`
8494
8573
  #
8495
8574
  # @option params [required, String] :resource_id
8496
8575
  # Specify an ID for this resource. For a managed node, this is the node
@@ -8508,7 +8587,7 @@ module Aws::SSM
8508
8587
  # A summary of the call execution that includes an execution ID, the
8509
8588
  # type of execution (for example, `Command`), and the date/time of the
8510
8589
  # execution using a datetime object that is saved in the following
8511
- # format: yyyy-MM-dd'T'HH:mm:ss'Z'.
8590
+ # format: `yyyy-MM-dd'T'HH:mm:ss'Z'`
8512
8591
  #
8513
8592
  # @option params [required, Array<Types::ComplianceItemEntry>] :items
8514
8593
  # Information about the compliance as defined by the resource type. For
@@ -8625,8 +8704,15 @@ module Aws::SSM
8625
8704
  #
8626
8705
  # @option params [required, String] :name
8627
8706
  # The fully qualified name of the parameter that you want to add to the
8628
- # system. The fully qualified name includes the complete hierarchy of
8629
- # the parameter path and name. For parameters in a hierarchy, you must
8707
+ # system.
8708
+ #
8709
+ # <note markdown="1"> You can't enter the Amazon Resource Name (ARN) for a parameter, only
8710
+ # the parameter name itself.
8711
+ #
8712
+ # </note>
8713
+ #
8714
+ # The fully qualified name includes the complete hierarchy of the
8715
+ # parameter path and name. For parameters in a hierarchy, you must
8630
8716
  # include a leading forward slash character (/) when you create or
8631
8717
  # reference a parameter. For example: `/Dev/DBServer/MySQL/db-string13`
8632
8718
  #
@@ -8757,8 +8843,8 @@ module Aws::SSM
8757
8843
  # configured to use parameter policies. You can create a maximum of
8758
8844
  # 100,000 advanced parameters for each Region in an Amazon Web Services
8759
8845
  # account. Advanced parameters incur a charge. For more information, see
8760
- # [Standard and advanced parameter tiers][1] in the *Amazon Web Services
8761
- # Systems Manager User Guide*.
8846
+ # [Managing parameter tiers][1] in the *Amazon Web Services Systems
8847
+ # Manager User Guide*.
8762
8848
  #
8763
8849
  # You can change a standard parameter to an advanced parameter any time.
8764
8850
  # But you can't revert an advanced parameter to a standard parameter.
@@ -8817,7 +8903,7 @@ module Aws::SSM
8817
8903
  #
8818
8904
  #
8819
8905
  # [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/parameter-store-advanced-parameters.html
8820
- # [2]: https://docs.aws.amazon.com/systems-manager/latest/userguide/ps-default-tier.html
8906
+ # [2]: https://docs.aws.amazon.com/systems-manager/latest/userguide/parameter-store-advanced-parameters.html#ps-default-tier
8821
8907
  #
8822
8908
  # @option params [String] :policies
8823
8909
  # One or more policies to apply to a parameter. This operation takes a
@@ -8878,7 +8964,7 @@ module Aws::SSM
8878
8964
  # `aws:ec2:image` parameters are created successfully, see [Setting up
8879
8965
  # notifications or trigger actions based on Parameter Store events][1].
8880
8966
  # For more information about AMI format validation , see [Native
8881
- # parameter support for Amazon Machine Image (AMI) IDs][2].
8967
+ # parameter support for Amazon Machine Image IDs][2].
8882
8968
  #
8883
8969
  # </note>
8884
8970
  #
@@ -8929,11 +9015,50 @@ module Aws::SSM
8929
9015
 
8930
9016
  # Creates or updates a Systems Manager resource policy. A resource
8931
9017
  # policy helps you to define the IAM entity (for example, an Amazon Web
8932
- # Services account) that can manage your Systems Manager resources.
8933
- # Currently, `OpsItemGroup` is the only resource that supports Systems
8934
- # Manager resource policies. The resource policy for `OpsItemGroup`
8935
- # enables Amazon Web Services accounts to view and interact with
8936
- # OpsCenter operational work items (OpsItems).
9018
+ # Services account) that can manage your Systems Manager resources. The
9019
+ # following resources support Systems Manager resource policies.
9020
+ #
9021
+ # * `OpsItemGroup` - The resource policy for `OpsItemGroup` enables
9022
+ # Amazon Web Services accounts to view and interact with OpsCenter
9023
+ # operational work items (OpsItems).
9024
+ #
9025
+ # * `Parameter` - The resource policy is used to share a parameter with
9026
+ # other accounts using Resource Access Manager (RAM).
9027
+ #
9028
+ # To share a parameter, it must be in the advanced parameter tier. For
9029
+ # information about parameter tiers, see [Managing parameter
9030
+ # tiers][1]. For information about changing an existing standard
9031
+ # parameter to an advanced parameter, see [Changing a standard
9032
+ # parameter to an advanced parameter][2].
9033
+ #
9034
+ # To share a `SecureString` parameter, it must be encrypted with a
9035
+ # customer managed key, and you must share the key separately through
9036
+ # Key Management Service. Amazon Web Services managed keys cannot be
9037
+ # shared. Parameters encrypted with the default Amazon Web Services
9038
+ # managed key can be updated to use a customer managed key instead.
9039
+ # For KMS key definitions, see [KMS concepts][3] in the *Key
9040
+ # Management Service Developer Guide*.
9041
+ #
9042
+ # While you can share a parameter using the Systems Manager
9043
+ # `PutResourcePolicy` operation, we recommend using Resource Access
9044
+ # Manager (RAM) instead. This is because using `PutResourcePolicy`
9045
+ # requires the extra step of promoting the parameter to a standard RAM
9046
+ # Resource Share using the RAM
9047
+ # [PromoteResourceShareCreatedFromPolicy][4] API operation. Otherwise,
9048
+ # the parameter won't be returned by the Systems Manager
9049
+ # [DescribeParameters][5] API operation using the `--shared` option.
9050
+ #
9051
+ # For more information, see [Sharing a parameter][6] in the *Amazon
9052
+ # Web Services Systems Manager User Guide*
9053
+ #
9054
+ #
9055
+ #
9056
+ # [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/parameter-store-advanced-parameters.html
9057
+ # [2]: https://docs.aws.amazon.com/systems-manager/latest/userguide/parameter-store-advanced-parameters.html#parameter-store-advanced-parameters-enabling
9058
+ # [3]: https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html
9059
+ # [4]: https://docs.aws.amazon.com/ram/latest/APIReference/API_PromoteResourceShareCreatedFromPolicy.html
9060
+ # [5]: https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_DescribeParameters.html
9061
+ # [6]: https://docs.aws.amazon.com/systems-manager/latest/userguide/parameter-store-shared-parameters.html#share
8937
9062
  #
8938
9063
  # @option params [required, String] :resource_arn
8939
9064
  # Amazon Resource Name (ARN) of the resource to which you want to attach
@@ -9197,18 +9322,13 @@ module Aws::SSM
9197
9322
  # Systems Manager exists in your account, it is created when you run
9198
9323
  # `RegisterTaskWithMaintenanceWindow`.
9199
9324
  #
9200
- # For more information, see the following topics in the in the *Amazon
9201
- # Web Services Systems Manager User Guide*:
9202
- #
9203
- # * [Using service-linked roles for Systems Manager][1]
9204
- #
9205
- # * [Should I use a service-linked role or a custom service role to run
9206
- # maintenance window tasks? ][2]
9325
+ # For more information, see [Using service-linked roles for Systems
9326
+ # Manager][1] in the in the *Amazon Web Services Systems Manager User
9327
+ # Guide*:
9207
9328
  #
9208
9329
  #
9209
9330
  #
9210
9331
  # [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/using-service-linked-roles.html#slr-permissions
9211
- # [2]: https://docs.aws.amazon.com/systems-manager/latest/userguide/sysman-maintenance-permissions.html#maintenance-window-tasks-service-role
9212
9332
  #
9213
9333
  # @option params [required, String] :task_type
9214
9334
  # The type of task being registered.
@@ -9651,9 +9771,8 @@ module Aws::SSM
9651
9771
  # identify the managed nodes to send commands to, you can a send command
9652
9772
  # to tens, hundreds, or thousands of nodes at once.
9653
9773
  #
9654
- # For more information about how to use targets, see [Using targets and
9655
- # rate controls to send commands to a fleet][1] in the *Amazon Web
9656
- # Services Systems Manager User Guide*.
9774
+ # For more information about how to use targets, see [Run commands at
9775
+ # scale][1] in the *Amazon Web Services Systems Manager User Guide*.
9657
9776
  #
9658
9777
  #
9659
9778
  #
@@ -9670,9 +9789,8 @@ module Aws::SSM
9670
9789
  # To send a command to a smaller number of managed nodes, you can use
9671
9790
  # the `InstanceIds` option instead.
9672
9791
  #
9673
- # For more information about how to use targets, see [Sending commands
9674
- # to a fleet][1] in the *Amazon Web Services Systems Manager User
9675
- # Guide*.
9792
+ # For more information about how to use targets, see [Run commands at
9793
+ # scale][1] in the *Amazon Web Services Systems Manager User Guide*.
9676
9794
  #
9677
9795
  #
9678
9796
  #
@@ -9683,8 +9801,8 @@ module Aws::SSM
9683
9801
  # document) to run. This can be a public document or a custom document.
9684
9802
  # To run a shared document belonging to another account, specify the
9685
9803
  # document Amazon Resource Name (ARN). For more information about how to
9686
- # use shared documents, see [Using shared SSM documents][1] in the
9687
- # *Amazon Web Services Systems Manager User Guide*.
9804
+ # use shared documents, see [Sharing SSM documents][1] in the *Amazon
9805
+ # Web Services Systems Manager User Guide*.
9688
9806
  #
9689
9807
  # <note markdown="1"> If you specify a document name or ARN that hasn't been shared with
9690
9808
  # your account, you receive an `InvalidDocument` error.
@@ -9929,12 +10047,12 @@ module Aws::SSM
9929
10047
  # The name of the SSM document to run. This can be a public document or
9930
10048
  # a custom document. To run a shared document belonging to another
9931
10049
  # account, specify the document ARN. For more information about how to
9932
- # use shared documents, see [Using shared SSM documents][1] in the
9933
- # *Amazon Web Services Systems Manager User Guide*.
10050
+ # use shared documents, see [Sharing SSM documents][1] in the *Amazon
10051
+ # Web Services Systems Manager User Guide*.
9934
10052
  #
9935
10053
  #
9936
10054
  #
9937
- # [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/ssm-using-shared.html
10055
+ # [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/documents-ssm-sharing.html
9938
10056
  #
9939
10057
  # @option params [String] :document_version
9940
10058
  # The version of the Automation runbook to use for this execution.
@@ -10394,6 +10512,11 @@ module Aws::SSM
10394
10512
  # The name of the parameter from which you want to delete one or more
10395
10513
  # labels.
10396
10514
  #
10515
+ # <note markdown="1"> You can't enter the Amazon Resource Name (ARN) for a parameter, only
10516
+ # the parameter name itself.
10517
+ #
10518
+ # </note>
10519
+ #
10397
10520
  # @option params [required, Integer] :parameter_version
10398
10521
  # The specific version of the parameter which you want to delete one or
10399
10522
  # more labels from. If it isn't present, the call will fail.
@@ -11419,18 +11542,13 @@ module Aws::SSM
11419
11542
  # Systems Manager exists in your account, it is created when you run
11420
11543
  # `RegisterTaskWithMaintenanceWindow`.
11421
11544
  #
11422
- # For more information, see the following topics in the in the *Amazon
11423
- # Web Services Systems Manager User Guide*:
11424
- #
11425
- # * [Using service-linked roles for Systems Manager][1]
11426
- #
11427
- # * [Should I use a service-linked role or a custom service role to run
11428
- # maintenance window tasks? ][2]
11545
+ # For more information, see [Using service-linked roles for Systems
11546
+ # Manager][1] in the in the *Amazon Web Services Systems Manager User
11547
+ # Guide*:
11429
11548
  #
11430
11549
  #
11431
11550
  #
11432
11551
  # [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/using-service-linked-roles.html#slr-permissions
11433
- # [2]: https://docs.aws.amazon.com/systems-manager/latest/userguide/sysman-maintenance-permissions.html#maintenance-window-tasks-service-role
11434
11552
  #
11435
11553
  # @option params [Hash<String,Types::MaintenanceWindowTaskParameterValueExpression>] :task_parameters
11436
11554
  # The parameters to modify.
@@ -11729,8 +11847,9 @@ module Aws::SSM
11729
11847
  # want to assign to the managed node. This IAM role must provide
11730
11848
  # AssumeRole permissions for the Amazon Web Services Systems Manager
11731
11849
  # service principal `ssm.amazonaws.com`. For more information, see
11732
- # [Create an IAM service role for a hybrid environment][1] in the
11733
- # *Amazon Web Services Systems Manager User Guide*.
11850
+ # [Create an IAM service role for a hybrid and multicloud
11851
+ # environment][1] in the *Amazon Web Services Systems Manager User
11852
+ # Guide*.
11734
11853
  #
11735
11854
  # <note markdown="1"> You can't specify an IAM service-linked role for this parameter. You
11736
11855
  # must create a unique role.
@@ -11767,9 +11886,9 @@ module Aws::SSM
11767
11886
  # Operations engineers and IT professionals use Amazon Web Services
11768
11887
  # Systems Manager OpsCenter to view, investigate, and remediate
11769
11888
  # operational issues impacting the performance and health of their
11770
- # Amazon Web Services resources. For more information, see
11771
- # [OpsCenter][2] in the *Amazon Web Services Systems Manager User
11772
- # Guide*.
11889
+ # Amazon Web Services resources. For more information, see [Amazon Web
11890
+ # Services Systems Manager OpsCenter][2] in the *Amazon Web Services
11891
+ # Systems Manager User Guide*.
11773
11892
  #
11774
11893
  #
11775
11894
  #
@@ -12019,12 +12138,13 @@ module Aws::SSM
12019
12138
  # and its status is reported as `InstalledOther`. This is the default
12020
12139
  # action if no option is specified.
12021
12140
  #
12022
- # * <b> <code>BLOCK</code> </b>: Packages in the `RejectedPatches` list,
12023
- # and packages that include them as dependencies, aren't installed
12024
- # under any circumstances. If a package was installed before it was
12025
- # added to the `Rejected` patches list, it is considered non-compliant
12026
- # with the patch baseline, and its status is reported as
12027
- # `InstalledRejected`.
12141
+ # * **BLOCK**: Packages in the **Rejected patches** list, and packages
12142
+ # that include them as dependencies, aren't installed by Patch
12143
+ # Manager under any circumstances. If a package was installed before
12144
+ # it was added to the **Rejected patches** list, or is installed
12145
+ # outside of Patch Manager afterward, it's considered noncompliant
12146
+ # with the patch baseline and its status is reported as
12147
+ # *InstalledRejected*.
12028
12148
  #
12029
12149
  # @option params [String] :description
12030
12150
  # A description of the patch baseline.
@@ -12308,7 +12428,7 @@ module Aws::SSM
12308
12428
  params: params,
12309
12429
  config: config)
12310
12430
  context[:gem_name] = 'aws-sdk-ssm'
12311
- context[:gem_version] = '1.164.0'
12431
+ context[:gem_version] = '1.166.0'
12312
12432
  Seahorse::Client::Request.new(handlers, context)
12313
12433
  end
12314
12434