aws-sdk-ssm 1.173.0 → 1.197.0

data/lib/aws-sdk-ssm/client.rb

@@ -7,35 +7,34 @@
 #
 # WARNING ABOUT GENERATED CODE
 
-require 'seahorse/client/plugins/content_length.rb'
-require 'aws-sdk-core/plugins/credentials_configuration.rb'
-require 'aws-sdk-core/plugins/logging.rb'
-require 'aws-sdk-core/plugins/param_converter.rb'
-require 'aws-sdk-core/plugins/param_validator.rb'
-require 'aws-sdk-core/plugins/user_agent.rb'
-require 'aws-sdk-core/plugins/helpful_socket_errors.rb'
-require 'aws-sdk-core/plugins/retry_errors.rb'
-require 'aws-sdk-core/plugins/global_configuration.rb'
-require 'aws-sdk-core/plugins/regional_endpoint.rb'
-require 'aws-sdk-core/plugins/endpoint_discovery.rb'
-require 'aws-sdk-core/plugins/endpoint_pattern.rb'
-require 'aws-sdk-core/plugins/response_paging.rb'
-require 'aws-sdk-core/plugins/stub_responses.rb'
-require 'aws-sdk-core/plugins/idempotency_token.rb'
-require 'aws-sdk-core/plugins/invocation_id.rb'
-require 'aws-sdk-core/plugins/jsonvalue_converter.rb'
-require 'aws-sdk-core/plugins/client_metrics_plugin.rb'
-require 'aws-sdk-core/plugins/client_metrics_send_plugin.rb'
-require 'aws-sdk-core/plugins/transfer_encoding.rb'
-require 'aws-sdk-core/plugins/http_checksum.rb'
-require 'aws-sdk-core/plugins/checksum_algorithm.rb'
-require 'aws-sdk-core/plugins/request_compression.rb'
-require 'aws-sdk-core/plugins/defaults_mode.rb'
-require 'aws-sdk-core/plugins/recursion_detection.rb'
-require 'aws-sdk-core/plugins/sign.rb'
-require 'aws-sdk-core/plugins/protocols/json_rpc.rb'
-
-Aws::Plugins::GlobalConfiguration.add_identifier(:ssm)
+require 'seahorse/client/plugins/content_length'
+require 'aws-sdk-core/plugins/credentials_configuration'
+require 'aws-sdk-core/plugins/logging'
+require 'aws-sdk-core/plugins/param_converter'
+require 'aws-sdk-core/plugins/param_validator'
+require 'aws-sdk-core/plugins/user_agent'
+require 'aws-sdk-core/plugins/helpful_socket_errors'
+require 'aws-sdk-core/plugins/retry_errors'
+require 'aws-sdk-core/plugins/global_configuration'
+require 'aws-sdk-core/plugins/regional_endpoint'
+require 'aws-sdk-core/plugins/endpoint_discovery'
+require 'aws-sdk-core/plugins/endpoint_pattern'
+require 'aws-sdk-core/plugins/response_paging'
+require 'aws-sdk-core/plugins/stub_responses'
+require 'aws-sdk-core/plugins/idempotency_token'
+require 'aws-sdk-core/plugins/invocation_id'
+require 'aws-sdk-core/plugins/jsonvalue_converter'
+require 'aws-sdk-core/plugins/client_metrics_plugin'
+require 'aws-sdk-core/plugins/client_metrics_send_plugin'
+require 'aws-sdk-core/plugins/transfer_encoding'
+require 'aws-sdk-core/plugins/http_checksum'
+require 'aws-sdk-core/plugins/checksum_algorithm'
+require 'aws-sdk-core/plugins/request_compression'
+require 'aws-sdk-core/plugins/defaults_mode'
+require 'aws-sdk-core/plugins/recursion_detection'
+require 'aws-sdk-core/plugins/telemetry'
+require 'aws-sdk-core/plugins/sign'
+require 'aws-sdk-core/plugins/protocols/json_rpc'
 
 module Aws::SSM
   # An API client for SSM.  To construct a client, you need to configure a `:region` and `:credentials`.
@@ -83,6 +82,7 @@ module Aws::SSM
     add_plugin(Aws::Plugins::RequestCompression)
     add_plugin(Aws::Plugins::DefaultsMode)
     add_plugin(Aws::Plugins::RecursionDetection)
+    add_plugin(Aws::Plugins::Telemetry)
     add_plugin(Aws::Plugins::Sign)
     add_plugin(Aws::Plugins::Protocols::JsonRpc)
     add_plugin(Aws::SSM::Plugins::Endpoints)
@@ -128,13 +128,15 @@ module Aws::SSM
     #     locations will be searched for credentials:
     #
     #     * `Aws.config[:credentials]`
-    #     * The `:access_key_id`, `:secret_access_key`, and `:session_token` options.
-    #     * ENV['AWS_ACCESS_KEY_ID'], ENV['AWS_SECRET_ACCESS_KEY']
+    #     * The `:access_key_id`, `:secret_access_key`, `:session_token`, and
+    #       `:account_id` options.
+    #     * ENV['AWS_ACCESS_KEY_ID'], ENV['AWS_SECRET_ACCESS_KEY'],
+    #       ENV['AWS_SESSION_TOKEN'], and ENV['AWS_ACCOUNT_ID']
     #     * `~/.aws/credentials`
     #     * `~/.aws/config`
     #     * EC2/ECS IMDS instance profile - When used by default, the timeouts
     #       are very aggressive. Construct and pass an instance of
-    #       `Aws::InstanceProfileCredentails` or `Aws::ECSCredentials` to
+    #       `Aws::InstanceProfileCredentials` or `Aws::ECSCredentials` to
     #       enable retries and extended timeouts. Instance profile credential
     #       fetching can be disabled by setting ENV['AWS_EC2_METADATA_DISABLED']
     #       to true.
@@ -153,6 +155,8 @@ module Aws::SSM
     #
     #   @option options [String] :access_key_id
     #
+    #   @option options [String] :account_id
+    #
     #   @option options [Boolean] :active_endpoint_cache (false)
     #     When set to `true`, a thread polling for endpoints will be running in
     #     the background every 60 secs (default). Defaults to `false`.
@@ -196,8 +200,7 @@ module Aws::SSM
     #     accepted modes and the configuration defaults that are included.
     #
     #   @option options [Boolean] :disable_host_prefix_injection (false)
-    #     Set to true to disable SDK automatically adding host prefix
-    #     to default service endpoint when available.
+    #     When `true`, the SDK will not prepend the modeled host prefix to the endpoint.
     #
     #   @option options [Boolean] :disable_request_compression (false)
     #     When set to 'true' the request body will not be compressed
@@ -253,11 +256,34 @@ module Aws::SSM
     #     Used when loading credentials from the shared credentials file
     #     at HOME/.aws/credentials.  When not specified, 'default' is used.
     #
+    #   @option options [String] :request_checksum_calculation ("when_supported")
+    #     Determines when a checksum will be calculated for request payloads. Values are:
+    #
+    #     * `when_supported` - (default) When set, a checksum will be
+    #       calculated for all request payloads of operations modeled with the
+    #       `httpChecksum` trait where `requestChecksumRequired` is `true` and/or a
+    #       `requestAlgorithmMember` is modeled.
+    #     * `when_required` - When set, a checksum will only be calculated for
+    #       request payloads of operations modeled with the  `httpChecksum` trait where
+    #       `requestChecksumRequired` is `true` or where a `requestAlgorithmMember`
+    #       is modeled and supplied.
+    #
     #   @option options [Integer] :request_min_compression_size_bytes (10240)
     #     The minimum size in bytes that triggers compression for request
     #     bodies. The value must be non-negative integer value between 0
     #     and 10485780 bytes inclusive.
     #
+    #   @option options [String] :response_checksum_validation ("when_supported")
+    #     Determines when checksum validation will be performed on response payloads. Values are:
+    #
+    #     * `when_supported` - (default) When set, checksum validation is performed on all
+    #       response payloads of operations modeled with the `httpChecksum` trait where
+    #       `responseAlgorithms` is modeled, except when no modeled checksum algorithms
+    #       are supported.
+    #     * `when_required` - When set, checksum validation is not performed on
+    #       response payloads of operations unless the checksum algorithm is supported and
+    #       the `requestValidationModeMember` member is set to `ENABLED`.
+    #
     #   @option options [Proc] :retry_backoff
     #     A proc or lambda used for backoff. Defaults to 2**retries * retry_base_delay.
     #     This option is only used in the `legacy` retry mode.
@@ -337,6 +363,16 @@ module Aws::SSM
     #     ** Please note ** When response stubbing is enabled, no HTTP
     #     requests are made, and retries are disabled.
     #
+    #   @option options [Aws::Telemetry::TelemetryProviderBase] :telemetry_provider (Aws::Telemetry::NoOpTelemetryProvider)
+    #     Allows you to provide a telemetry provider, which is used to
+    #     emit telemetry data. By default, uses `NoOpTelemetryProvider` which
+    #     will not record or emit any telemetry data. The SDK supports the
+    #     following telemetry providers:
+    #
+    #     * OpenTelemetry (OTel) - To use the OTel provider, install and require the
+    #     `opentelemetry-sdk` gem and then, pass in an instance of a
+    #     `Aws::Telemetry::OTelProvider` for telemetry provider.
+    #
     #   @option options [Aws::TokenProvider] :token_provider
     #     A Bearer Token Provider. This can be an instance of any one of the
     #     following classes:
@@ -364,7 +400,9 @@ module Aws::SSM
     #     sending the request.
     #
     #   @option options [Aws::SSM::EndpointProvider] :endpoint_provider
-    #     The endpoint provider used to resolve endpoints. Any object that responds to `#resolve_endpoint(parameters)` where `parameters` is a Struct similar to `Aws::SSM::EndpointParameters`
+    #     The endpoint provider used to resolve endpoints. Any object that responds to
+    #     `#resolve_endpoint(parameters)` where `parameters` is a Struct similar to
+    #     `Aws::SSM::EndpointParameters`.
     #
     #   @option options [Float] :http_continue_timeout (1)
     #     The number of seconds to wait for a 100-continue response before sending the
@@ -420,6 +458,12 @@ module Aws::SSM
     #   @option options [String] :ssl_ca_store
     #     Sets the X509::Store to verify peer certificate.
     #
+    #   @option options [OpenSSL::X509::Certificate] :ssl_cert
+    #     Sets a client certificate when creating http connections.
+    #
+    #   @option options [OpenSSL::PKey] :ssl_key
+    #     Sets a client key when creating http connections.
+    #
     #   @option options [Float] :ssl_timeout
     #     Sets the SSL timeout in seconds
     #
@@ -543,8 +587,8 @@ module Aws::SSM
 
     # Associates a related item to a Systems Manager OpsCenter OpsItem. For
     # example, you can associate an Incident Manager incident or analysis
-    # with an OpsItem. Incident Manager and OpsCenter are capabilities of
-    # Amazon Web Services Systems Manager.
+    # with an OpsItem. Incident Manager and OpsCenter are tools in Amazon
+    # Web Services Systems Manager.
     #
     # @option params [required, String] :ops_item_id
     #   The ID of the OpsItem to which you want to associate a resource as a
@@ -657,12 +701,12 @@ module Aws::SSM
     # your on-premises servers, edge devices, or virtual machine (VM) with
     # Amazon Web Services Systems Manager. Registering these machines with
     # Systems Manager makes it possible to manage them using Systems Manager
-    # capabilities. You use the activation code and ID when installing SSM
-    # Agent on machines in your hybrid environment. For more information
-    # about requirements for managing on-premises machines using Systems
-    # Manager, see [Setting up Amazon Web Services Systems Manager for
-    # hybrid and multicloud environments][1] in the *Amazon Web Services
-    # Systems Manager User Guide*.
+    # tools. You use the activation code and ID when installing SSM Agent on
+    # machines in your hybrid environment. For more information about
+    # requirements for managing on-premises machines using Systems Manager,
+    # see [Using Amazon Web Services Systems Manager in hybrid and
+    # multicloud environments][1] in the *Amazon Web Services Systems
+    # Manager User Guide*.
     #
     # <note markdown="1"> Amazon Elastic Compute Cloud (Amazon EC2) instances, edge devices, and
     # on-premises servers and VMs that are configured for Systems Manager
@@ -672,7 +716,7 @@ module Aws::SSM
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-managedinstances.html
+    # [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-hybrid-multicloud.html
     #
     # @option params [String] :description
     #   A user-defined description of the resource that you want to register
@@ -692,9 +736,9 @@ module Aws::SSM
     #   want to assign to the managed node. This IAM role must provide
     #   AssumeRole permissions for the Amazon Web Services Systems Manager
     #   service principal `ssm.amazonaws.com`. For more information, see
-    #   [Create an IAM service role for a hybrid and multicloud
-    #   environment][1] in the *Amazon Web Services Systems Manager User
-    #   Guide*.
+    #   [Create the IAM service role required for Systems Manager in a hybrid
+    #   and multicloud environments][1] in the *Amazon Web Services Systems
+    #   Manager User Guide*.
     #
     #   <note markdown="1"> You can't specify an IAM service-linked role for this parameter. You
     #   must create a unique role.
@@ -703,7 +747,7 @@ module Aws::SSM
     #
     #
     #
-    #   [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/sysman-service-role.html
+    #   [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/hybrid-multicloud-service-role.html
     #
     # @option params [Integer] :registration_limit
     #   Specify the maximum number of managed nodes you want to register. The
@@ -711,7 +755,7 @@ module Aws::SSM
     #
     # @option params [Time,DateTime,Date,Integer,String] :expiration_date
     #   The date by which this activation request should expire, in timestamp
-    #   format, such as "2021-07-07T00:00:00". You can specify a date up to
+    #   format, such as "2024-07-07T00:00:00". You can specify a date up to
     #   30 days in advance. If you don't provide an expiration date, the
     #   activation code expires in 24 hours.
     #
@@ -792,10 +836,10 @@ module Aws::SSM
     # targets, the association specifies a schedule for when the
     # configuration is reapplied. For dynamic targets, such as an Amazon Web
     # Services resource group or an Amazon Web Services autoscaling group,
-    # State Manager, a capability of Amazon Web Services Systems Manager
-    # applies the configuration when new managed nodes are added to the
-    # group. The association also specifies actions to take when applying
-    # the configuration. For example, an association for anti-virus software
+    # State Manager, a tool in Amazon Web Services Systems Manager applies
+    # the configuration when new managed nodes are added to the group. The
+    # association also specifies actions to take when applying the
+    # configuration. For example, an association for anti-virus software
     # might run once a day. If the software isn't installed, then State
     # Manager installs it. If the software is installed, but the service
     # isn't running, then the association might instruct State Manager to
@@ -858,9 +902,10 @@ module Aws::SSM
     #   Amazon Web Services account, or individual managed node IDs. You can
     #   target all managed nodes in an Amazon Web Services account by
     #   specifying the `InstanceIds` key with a value of `*`. For more
-    #   information about choosing targets for an association, see [About
-    #   targets and rate controls in State Manager associations][1] in the
-    #   *Amazon Web Services Systems Manager User Guide*.
+    #   information about choosing targets for an association, see
+    #   [Understanding targets and rate controls in State Manager
+    #   associations][1] in the *Amazon Web Services Systems Manager User
+    #   Guide*.
     #
     #
     #
@@ -880,7 +925,7 @@ module Aws::SSM
     #   Choose the parameter that will define how your automation will branch
     #   out. This target is required for associations that use an Automation
     #   runbook and target resources by using rate controls. Automation is a
-    #   capability of Amazon Web Services Systems Manager.
+    #   tool in Amazon Web Services Systems Manager.
     #
     # @option params [String] :max_errors
     #   The number of errors that are allowed before the system stops sending
@@ -932,15 +977,27 @@ module Aws::SSM
     # @option params [Boolean] :apply_only_at_cron_interval
     #   By default, when you create a new association, the system runs it
     #   immediately after it is created and then according to the schedule you
-    #   specified. Specify this option if you don't want an association to
-    #   run immediately after you create it. This parameter isn't supported
-    #   for rate expressions.
+    #   specified and when target changes are detected. Specify `true` for
+    #   `ApplyOnlyAtCronInterval`if you want the association to run only
+    #   according to the schedule you specified.
+    #
+    #   For more information, see [Understanding when associations are applied
+    #   to resources][1] and [&gt;About target updates with Automation
+    #   runbooks][2] in the *Amazon Web Services Systems Manager User Guide*.
+    #
+    #   This parameter isn't supported for rate expressions.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/state-manager-about.html#state-manager-about-scheduling
+    #   [2]: https://docs.aws.amazon.com/systems-manager/latest/userguide/state-manager-about.html#runbook-target-updates
     #
     # @option params [Array<String>] :calendar_names
-    #   The names or Amazon Resource Names (ARNs) of the Change Calendar type
+    #   The names of Amazon Resource Names (ARNs) of the Change Calendar type
     #   documents you want to gate your associations under. The associations
     #   only run when that change calendar is open. For more information, see
-    #   [Amazon Web Services Systems Manager Change Calendar][1].
+    #   [Amazon Web Services Systems Manager Change Calendar][1] in the
+    #   *Amazon Web Services Systems Manager User Guide*.
     #
     #
     #
@@ -1054,6 +1111,16 @@ module Aws::SSM
     #             },
     #           ],
     #         },
+    #         include_child_organization_units: false,
+    #         exclude_accounts: ["ExcludeAccount"],
+    #         targets: [
+    #           {
+    #             key: "TargetKey",
+    #             values: ["TargetValue"],
+    #           },
+    #         ],
+    #         targets_max_concurrency: "MaxConcurrency",
+    #         targets_max_errors: "MaxErrors",
     #       },
     #     ],
     #     schedule_offset: 1,
@@ -1129,6 +1196,15 @@ module Aws::SSM
     #   resp.association_description.target_locations[0].target_location_alarm_configuration.ignore_poll_alarm_failure #=> Boolean
     #   resp.association_description.target_locations[0].target_location_alarm_configuration.alarms #=> Array
     #   resp.association_description.target_locations[0].target_location_alarm_configuration.alarms[0].name #=> String
+    #   resp.association_description.target_locations[0].include_child_organization_units #=> Boolean
+    #   resp.association_description.target_locations[0].exclude_accounts #=> Array
+    #   resp.association_description.target_locations[0].exclude_accounts[0] #=> String
+    #   resp.association_description.target_locations[0].targets #=> Array
+    #   resp.association_description.target_locations[0].targets[0].key #=> String
+    #   resp.association_description.target_locations[0].targets[0].values #=> Array
+    #   resp.association_description.target_locations[0].targets[0].values[0] #=> String
+    #   resp.association_description.target_locations[0].targets_max_concurrency #=> String
+    #   resp.association_description.target_locations[0].targets_max_errors #=> String
     #   resp.association_description.schedule_offset #=> Integer
     #   resp.association_description.duration #=> Integer
     #   resp.association_description.target_maps #=> Array
@@ -1219,6 +1295,16 @@ module Aws::SSM
     #                 },
     #               ],
     #             },
+    #             include_child_organization_units: false,
+    #             exclude_accounts: ["ExcludeAccount"],
+    #             targets: [
+    #               {
+    #                 key: "TargetKey",
+    #                 values: ["TargetValue"],
+    #               },
+    #             ],
+    #             targets_max_concurrency: "MaxConcurrency",
+    #             targets_max_errors: "MaxErrors",
     #           },
     #         ],
     #         schedule_offset: 1,
@@ -1291,6 +1377,15 @@ module Aws::SSM
     #   resp.successful[0].target_locations[0].target_location_alarm_configuration.ignore_poll_alarm_failure #=> Boolean
     #   resp.successful[0].target_locations[0].target_location_alarm_configuration.alarms #=> Array
     #   resp.successful[0].target_locations[0].target_location_alarm_configuration.alarms[0].name #=> String
+    #   resp.successful[0].target_locations[0].include_child_organization_units #=> Boolean
+    #   resp.successful[0].target_locations[0].exclude_accounts #=> Array
+    #   resp.successful[0].target_locations[0].exclude_accounts[0] #=> String
+    #   resp.successful[0].target_locations[0].targets #=> Array
+    #   resp.successful[0].target_locations[0].targets[0].key #=> String
+    #   resp.successful[0].target_locations[0].targets[0].values #=> Array
+    #   resp.successful[0].target_locations[0].targets[0].values[0] #=> String
+    #   resp.successful[0].target_locations[0].targets_max_concurrency #=> String
+    #   resp.successful[0].target_locations[0].targets_max_errors #=> String
     #   resp.successful[0].schedule_offset #=> Integer
     #   resp.successful[0].duration #=> Integer
     #   resp.successful[0].target_maps #=> Array
@@ -1338,6 +1433,15 @@ module Aws::SSM
     #   resp.failed[0].entry.target_locations[0].target_location_alarm_configuration.ignore_poll_alarm_failure #=> Boolean
     #   resp.failed[0].entry.target_locations[0].target_location_alarm_configuration.alarms #=> Array
     #   resp.failed[0].entry.target_locations[0].target_location_alarm_configuration.alarms[0].name #=> String
+    #   resp.failed[0].entry.target_locations[0].include_child_organization_units #=> Boolean
+    #   resp.failed[0].entry.target_locations[0].exclude_accounts #=> Array
+    #   resp.failed[0].entry.target_locations[0].exclude_accounts[0] #=> String
+    #   resp.failed[0].entry.target_locations[0].targets #=> Array
+    #   resp.failed[0].entry.target_locations[0].targets[0].key #=> String
+    #   resp.failed[0].entry.target_locations[0].targets[0].values #=> Array
+    #   resp.failed[0].entry.target_locations[0].targets[0].values[0] #=> String
+    #   resp.failed[0].entry.target_locations[0].targets_max_concurrency #=> String
+    #   resp.failed[0].entry.target_locations[0].targets_max_errors #=> String
     #   resp.failed[0].entry.schedule_offset #=> Integer
     #   resp.failed[0].entry.duration #=> Integer
     #   resp.failed[0].entry.target_maps #=> Array
@@ -1368,7 +1472,7 @@ module Aws::SSM
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/sysman-ssm-docs.html
+    # [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/documents.html
     #
     # @option params [required, String] :content
     #   The content for the new SSM document in JSON or YAML format. The
@@ -1506,7 +1610,7 @@ module Aws::SSM
     #     name: "DocumentName", # required
     #     display_name: "DocumentDisplayName",
     #     version_name: "DocumentVersionName",
-    #     document_type: "Command", # accepts Command, Policy, Automation, Session, Package, ApplicationConfiguration, ApplicationConfigurationSchema, DeploymentStrategy, ChangeCalendar, Automation.ChangeTemplate, ProblemAnalysis, ProblemAnalysisTemplate, CloudFormation, ConformancePackTemplate, QuickSetup
+    #     document_type: "Command", # accepts Command, Policy, Automation, Session, Package, ApplicationConfiguration, ApplicationConfigurationSchema, DeploymentStrategy, ChangeCalendar, Automation.ChangeTemplate, ProblemAnalysis, ProblemAnalysisTemplate, CloudFormation, ConformancePackTemplate, QuickSetup, ManualApprovalPolicy, AutoApprovalPolicy
     #     document_format: "YAML", # accepts YAML, JSON, TEXT
     #     target_type: "TargetType",
     #     tags: [
@@ -1538,7 +1642,7 @@ module Aws::SSM
     #   resp.document_description.parameters[0].default_value #=> String
     #   resp.document_description.platform_types #=> Array
     #   resp.document_description.platform_types[0] #=> String, one of "Windows", "Linux", "MacOS"
-    #   resp.document_description.document_type #=> String, one of "Command", "Policy", "Automation", "Session", "Package", "ApplicationConfiguration", "ApplicationConfigurationSchema", "DeploymentStrategy", "ChangeCalendar", "Automation.ChangeTemplate", "ProblemAnalysis", "ProblemAnalysisTemplate", "CloudFormation", "ConformancePackTemplate", "QuickSetup"
+    #   resp.document_description.document_type #=> String, one of "Command", "Policy", "Automation", "Session", "Package", "ApplicationConfiguration", "ApplicationConfigurationSchema", "DeploymentStrategy", "ChangeCalendar", "Automation.ChangeTemplate", "ProblemAnalysis", "ProblemAnalysisTemplate", "CloudFormation", "ConformancePackTemplate", "QuickSetup", "ManualApprovalPolicy", "AutoApprovalPolicy"
     #   resp.document_description.schema_version #=> String
     #   resp.document_description.latest_version #=> String
     #   resp.document_description.default_version #=> String
@@ -1996,6 +2100,10 @@ module Aws::SSM
     # @option params [Types::PatchFilterGroup] :global_filters
     #   A set of global filters used to include patches in the baseline.
     #
+    #   The `GlobalFilters` parameter can be configured only by using the CLI
+    #   or an Amazon Web Services SDK. It can't be configured from the Patch
+    #   Manager console, and its value isn't displayed in the console.
+    #
     # @option params [Types::PatchRuleGroup] :approval_rules
     #   A set of rules used to include patches in the baseline.
     #
@@ -2003,7 +2111,7 @@ module Aws::SSM
     #   A list of explicitly approved patches for the baseline.
     #
     #   For information about accepted formats for lists of approved patches
-    #   and rejected patches, see [About package name formats for approved and
+    #   and rejected patches, see [Package name formats for approved and
     #   rejected patch lists][1] in the *Amazon Web Services Systems Manager
     #   User Guide*.
     #
@@ -2025,7 +2133,7 @@ module Aws::SSM
     #   A list of explicitly rejected patches for the baseline.
     #
     #   For information about accepted formats for lists of approved patches
-    #   and rejected patches, see [About package name formats for approved and
+    #   and rejected patches, see [Package name formats for approved and
     #   rejected patch lists][1] in the *Amazon Web Services Systems Manager
     #   User Guide*.
     #
@@ -2037,19 +2145,28 @@ module Aws::SSM
     #   The action for Patch Manager to take on patches included in the
     #   `RejectedPackages` list.
     #
-    #   * <b> <code>ALLOW_AS_DEPENDENCY</code> </b>: A package in the
-    #     `Rejected` patches list is installed only if it is a dependency of
-    #     another package. It is considered compliant with the patch baseline,
-    #     and its status is reported as `InstalledOther`. This is the default
-    #     action if no option is specified.
+    #   ALLOW\_AS\_DEPENDENCY
+    #
+    #   : **Linux and macOS**: A package in the rejected patches list is
+    #     installed only if it is a dependency of another package. It is
+    #     considered compliant with the patch baseline, and its status is
+    #     reported as `INSTALLED_OTHER`. This is the default action if no
+    #     option is specified.
     #
-    #   * **BLOCK**: Packages in the **Rejected patches** list, and packages
+    #     **Windows Server**: Windows Server doesn't support the concept of
+    #     package dependencies. If a package in the rejected patches list and
+    #     already installed on the node, its status is reported as
+    #     `INSTALLED_OTHER`. Any package not already installed on the node is
+    #     skipped. This is the default action if no option is specified.
+    #
+    #   BLOCK
+    #
+    #   : **All OSs**: Packages in the rejected patches list, and packages
     #     that include them as dependencies, aren't installed by Patch
     #     Manager under any circumstances. If a package was installed before
-    #     it was added to the **Rejected patches** list, or is installed
-    #     outside of Patch Manager afterward, it's considered noncompliant
-    #     with the patch baseline and its status is reported as
-    #     *InstalledRejected*.
+    #     it was added to the rejected patches list, or is installed outside
+    #     of Patch Manager afterward, it's considered noncompliant with the
+    #     patch baseline and its status is reported as `INSTALLED_REJECTED`.
     #
     # @option params [String] :description
     #   A description of the patch baseline.
@@ -2059,6 +2176,20 @@ module Aws::SSM
     #   including target operating systems and source repositories. Applies to
     #   Linux managed nodes only.
     #
+    # @option params [String] :available_security_updates_compliance_status
+    #   Indicates the status you want to assign to security patches that are
+    #   available but not approved because they don't meet the installation
+    #   criteria specified in the patch baseline.
+    #
+    #   Example scenario: Security patches that you might want installed can
+    #   be skipped if you have specified a long period to wait after a patch
+    #   is released before installation. If an update to the patch is released
+    #   during your specified waiting period, the waiting period for
+    #   installing the patch starts over. If the waiting period is too long,
+    #   multiple versions of the patch could be released but never installed.
+    #
+    #   Supported for Windows Server managed nodes only.
+    #
     # @option params [String] :client_token
     #   User-provided idempotency token.
     #
@@ -2130,6 +2261,7 @@ module Aws::SSM
     #         configuration: "PatchSourceConfiguration", # required
     #       },
     #     ],
+    #     available_security_updates_compliance_status: "COMPLIANT", # accepts COMPLIANT, NON_COMPLIANT
     #     client_token: "ClientToken",
     #     tags: [
     #       {
@@ -2159,7 +2291,7 @@ module Aws::SSM
     # You can configure Systems Manager Inventory to use the
     # `SyncToDestination` type to synchronize Inventory data from multiple
     # Amazon Web Services Regions to a single Amazon Simple Storage Service
-    # (Amazon S3) bucket. For more information, see [Configuring resource
+    # (Amazon S3) bucket. For more information, see [Creating a resource
     # data sync for Inventory][1] in the *Amazon Web Services Systems
     # Manager User Guide*.
     #
@@ -2187,7 +2319,7 @@ module Aws::SSM
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/sysman-inventory-datasync.html
+    # [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/inventory-create-resource-data-sync.html
     # [2]: https://docs.aws.amazon.com/systems-manager/latest/userguide/Explorer-resource-data-sync.html
     #
     # @option params [required, String] :sync_name
@@ -2715,9 +2847,20 @@ module Aws::SSM
     end
 
     # Removes the server or virtual machine from the list of registered
-    # servers. You can reregister the node again at any time. If you don't
-    # plan to use Run Command on the server, we suggest uninstalling SSM
-    # Agent first.
+    # servers.
+    #
+    # If you want to reregister an on-premises server, edge device, or VM,
+    # you must use a different Activation Code and Activation ID than used
+    # to register the machine previously. The Activation Code and Activation
+    # ID must not have already been used on the maximum number of
+    # activations specified when they were created. For more information,
+    # see [Deregistering managed nodes in a hybrid and multicloud
+    # environment][1] in the *Amazon Web Services Systems Manager User
+    # Guide*.
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/fleet-manager-deregister-hybrid-nodes.html
     #
     # @option params [required, String] :instance_id
     #   The ID assigned to the managed node when you registered it using the
@@ -2995,6 +3138,15 @@ module Aws::SSM
     #   resp.association_description.target_locations[0].target_location_alarm_configuration.ignore_poll_alarm_failure #=> Boolean
     #   resp.association_description.target_locations[0].target_location_alarm_configuration.alarms #=> Array
     #   resp.association_description.target_locations[0].target_location_alarm_configuration.alarms[0].name #=> String
+    #   resp.association_description.target_locations[0].include_child_organization_units #=> Boolean
+    #   resp.association_description.target_locations[0].exclude_accounts #=> Array
+    #   resp.association_description.target_locations[0].exclude_accounts[0] #=> String
+    #   resp.association_description.target_locations[0].targets #=> Array
+    #   resp.association_description.target_locations[0].targets[0].key #=> String
+    #   resp.association_description.target_locations[0].targets[0].values #=> Array
+    #   resp.association_description.target_locations[0].targets[0].values[0] #=> String
+    #   resp.association_description.target_locations[0].targets_max_concurrency #=> String
+    #   resp.association_description.target_locations[0].targets_max_errors #=> String
     #   resp.association_description.schedule_offset #=> Integer
     #   resp.association_description.duration #=> Integer
     #   resp.association_description.target_maps #=> Array
@@ -3243,7 +3395,8 @@ module Aws::SSM
     #   resp.automation_execution_metadata_list[0].triggered_alarms #=> Array
     #   resp.automation_execution_metadata_list[0].triggered_alarms[0].name #=> String
     #   resp.automation_execution_metadata_list[0].triggered_alarms[0].state #=> String, one of "UNKNOWN", "ALARM"
-    #   resp.automation_execution_metadata_list[0].automation_subtype #=> String, one of "ChangeRequest"
+    #   resp.automation_execution_metadata_list[0].target_locations_url #=> String
+    #   resp.automation_execution_metadata_list[0].automation_subtype #=> String, one of "ChangeRequest", "AccessRequest"
     #   resp.automation_execution_metadata_list[0].scheduled_time #=> Time
     #   resp.automation_execution_metadata_list[0].runbooks #=> Array
     #   resp.automation_execution_metadata_list[0].runbooks[0].document_name #=> String
@@ -3273,6 +3426,15 @@ module Aws::SSM
     #   resp.automation_execution_metadata_list[0].runbooks[0].target_locations[0].target_location_alarm_configuration.ignore_poll_alarm_failure #=> Boolean
     #   resp.automation_execution_metadata_list[0].runbooks[0].target_locations[0].target_location_alarm_configuration.alarms #=> Array
     #   resp.automation_execution_metadata_list[0].runbooks[0].target_locations[0].target_location_alarm_configuration.alarms[0].name #=> String
+    #   resp.automation_execution_metadata_list[0].runbooks[0].target_locations[0].include_child_organization_units #=> Boolean
+    #   resp.automation_execution_metadata_list[0].runbooks[0].target_locations[0].exclude_accounts #=> Array
+    #   resp.automation_execution_metadata_list[0].runbooks[0].target_locations[0].exclude_accounts[0] #=> String
+    #   resp.automation_execution_metadata_list[0].runbooks[0].target_locations[0].targets #=> Array
+    #   resp.automation_execution_metadata_list[0].runbooks[0].target_locations[0].targets[0].key #=> String
+    #   resp.automation_execution_metadata_list[0].runbooks[0].target_locations[0].targets[0].values #=> Array
+    #   resp.automation_execution_metadata_list[0].runbooks[0].target_locations[0].targets[0].values[0] #=> String
+    #   resp.automation_execution_metadata_list[0].runbooks[0].target_locations[0].targets_max_concurrency #=> String
+    #   resp.automation_execution_metadata_list[0].runbooks[0].target_locations[0].targets_max_errors #=> String
     #   resp.automation_execution_metadata_list[0].ops_item_id #=> String
     #   resp.automation_execution_metadata_list[0].association_id #=> String
     #   resp.automation_execution_metadata_list[0].change_request_name #=> String
@@ -3380,6 +3542,15 @@ module Aws::SSM
     #   resp.step_executions[0].target_location.target_location_alarm_configuration.ignore_poll_alarm_failure #=> Boolean
     #   resp.step_executions[0].target_location.target_location_alarm_configuration.alarms #=> Array
     #   resp.step_executions[0].target_location.target_location_alarm_configuration.alarms[0].name #=> String
+    #   resp.step_executions[0].target_location.include_child_organization_units #=> Boolean
+    #   resp.step_executions[0].target_location.exclude_accounts #=> Array
+    #   resp.step_executions[0].target_location.exclude_accounts[0] #=> String
+    #   resp.step_executions[0].target_location.targets #=> Array
+    #   resp.step_executions[0].target_location.targets[0].key #=> String
+    #   resp.step_executions[0].target_location.targets[0].values #=> Array
+    #   resp.step_executions[0].target_location.targets[0].values[0] #=> String
+    #   resp.step_executions[0].target_location.targets_max_concurrency #=> String
+    #   resp.step_executions[0].target_location.targets_max_errors #=> String
     #   resp.step_executions[0].triggered_alarms #=> Array
     #   resp.step_executions[0].triggered_alarms[0].name #=> String
     #   resp.step_executions[0].triggered_alarms[0].state #=> String, one of "UNKNOWN", "ALARM"
@@ -3573,6 +3744,12 @@ module Aws::SSM
     # @option params [required, String] :name
     #   The name of the SSM document.
     #
+    #   <note markdown="1"> If you're calling a shared SSM document from a different Amazon Web
+    #   Services account, `Name` is the full Amazon Resource Name (ARN) of the
+    #   document.
+    #
+    #    </note>
+    #
     # @option params [String] :document_version
     #   The document version for which you want information. Can be a specific
     #   version or the default version.
@@ -3615,7 +3792,7 @@ module Aws::SSM
     #   resp.document.parameters[0].default_value #=> String
     #   resp.document.platform_types #=> Array
     #   resp.document.platform_types[0] #=> String, one of "Windows", "Linux", "MacOS"
-    #   resp.document.document_type #=> String, one of "Command", "Policy", "Automation", "Session", "Package", "ApplicationConfiguration", "ApplicationConfigurationSchema", "DeploymentStrategy", "ChangeCalendar", "Automation.ChangeTemplate", "ProblemAnalysis", "ProblemAnalysisTemplate", "CloudFormation", "ConformancePackTemplate", "QuickSetup"
+    #   resp.document.document_type #=> String, one of "Command", "Policy", "Automation", "Session", "Package", "ApplicationConfiguration", "ApplicationConfigurationSchema", "DeploymentStrategy", "ChangeCalendar", "Automation.ChangeTemplate", "ProblemAnalysis", "ProblemAnalysisTemplate", "CloudFormation", "ConformancePackTemplate", "QuickSetup", "ManualApprovalPolicy", "AutoApprovalPolicy"
     #   resp.document.schema_version #=> String
     #   resp.document.latest_version #=> String
     #   resp.document.default_version #=> String
@@ -3893,9 +4070,10 @@ module Aws::SSM
     # information for all your managed nodes. If you specify a node ID that
     # isn't valid or a node that you don't own, you receive an error.
     #
-    # <note markdown="1"> The `IamRole` field returned for this API operation is the Identity
-    # and Access Management (IAM) role assigned to on-premises managed
-    # nodes. This operation does not return the IAM role for EC2 instances.
+    # <note markdown="1"> The `IamRole` field returned for this API operation is the role
+    # assigned to an Amazon EC2 instance configured with a Systems Manager
+    # Quick Setup host management configuration or the role assigned to an
+    # on-premises managed node.
     #
     #  </note>
     #
@@ -4033,6 +4211,7 @@ module Aws::SSM
     #   resp.instance_patch_states[0].failed_count #=> Integer
     #   resp.instance_patch_states[0].unreported_not_applicable_count #=> Integer
     #   resp.instance_patch_states[0].not_applicable_count #=> Integer
+    #   resp.instance_patch_states[0].available_security_update_count #=> Integer
     #   resp.instance_patch_states[0].operation_start_time #=> Time
     #   resp.instance_patch_states[0].operation_end_time #=> Time
     #   resp.instance_patch_states[0].operation #=> String, one of "Scan", "Install"
@@ -4114,6 +4293,7 @@ module Aws::SSM
     #   resp.instance_patch_states[0].failed_count #=> Integer
     #   resp.instance_patch_states[0].unreported_not_applicable_count #=> Integer
     #   resp.instance_patch_states[0].not_applicable_count #=> Integer
+    #   resp.instance_patch_states[0].available_security_update_count #=> Integer
     #   resp.instance_patch_states[0].operation_start_time #=> Time
     #   resp.instance_patch_states[0].operation_end_time #=> Time
     #   resp.instance_patch_states[0].operation #=> String, one of "Scan", "Install"
@@ -4163,9 +4343,8 @@ module Aws::SSM
     #     Sample values: `Installed` \| `InstalledOther` \|
     #     `InstalledPendingReboot`
     #
-    #     For lists of all `State` values, see [Understanding patch compliance
-    #     state values][1] in the *Amazon Web Services Systems Manager User
-    #     Guide*.
+    #     For lists of all `State` values, see [Patch compliance state
+    #     values][1] in the *Amazon Web Services Systems Manager User Guide*.
     #
     #
     #
@@ -4206,7 +4385,7 @@ module Aws::SSM
     #   resp.patches[0].kb_id #=> String
     #   resp.patches[0].classification #=> String
     #   resp.patches[0].severity #=> String
-    #   resp.patches[0].state #=> String, one of "INSTALLED", "INSTALLED_OTHER", "INSTALLED_PENDING_REBOOT", "INSTALLED_REJECTED", "MISSING", "NOT_APPLICABLE", "FAILED"
+    #   resp.patches[0].state #=> String, one of "INSTALLED", "INSTALLED_OTHER", "INSTALLED_PENDING_REBOOT", "INSTALLED_REJECTED", "MISSING", "NOT_APPLICABLE", "FAILED", "AVAILABLE_SECURITY_UPDATE"
     #   resp.patches[0].installed_time #=> Time
     #   resp.patches[0].cve_ids #=> String
     #   resp.next_token #=> String
@@ -4523,7 +4702,7 @@ module Aws::SSM
     #
     #   * Values. An array of strings, each between 1 and 256 characters.
     #     Supported values are date/time strings in a valid ISO 8601 date/time
-    #     format, such as `2021-11-04T05:00:00Z`.
+    #     format, such as `2024-11-04T05:00:00Z`.
     #
     # @option params [Integer] :max_results
     #   The maximum number of items to return for this call. The call also
@@ -4997,7 +5176,7 @@ module Aws::SSM
     #
     #   **If you filter the response by using the OperationalData operator,
     #   specify a key-value pair by using the following JSON format:
-    #   \\\{"key":"key\_name","value":"a\_value"\\}
+    #   \{"key":"key\_name","value":"a\_value"}
     #
     # @option params [Integer] :max_results
     #   The maximum number of items to return for this call. The call also
@@ -5020,7 +5199,7 @@ module Aws::SSM
     #   resp = client.describe_ops_items({
     #     ops_item_filters: [
     #       {
-    #         key: "Status", # required, accepts Status, CreatedBy, Source, Priority, Title, OpsItemId, CreatedTime, LastModifiedTime, ActualStartTime, ActualEndTime, PlannedStartTime, PlannedEndTime, OperationalData, OperationalDataKey, OperationalDataValue, ResourceId, AutomationId, Category, Severity, OpsItemType, ChangeRequestByRequesterArn, ChangeRequestByRequesterName, ChangeRequestByApproverArn, ChangeRequestByApproverName, ChangeRequestByTemplate, ChangeRequestByTargetsResourceGroup, InsightByType, AccountId
+    #         key: "Status", # required, accepts Status, CreatedBy, Source, Priority, Title, OpsItemId, CreatedTime, LastModifiedTime, ActualStartTime, ActualEndTime, PlannedStartTime, PlannedEndTime, OperationalData, OperationalDataKey, OperationalDataValue, ResourceId, AutomationId, Category, Severity, OpsItemType, AccessRequestByRequesterArn, AccessRequestByRequesterId, AccessRequestByApproverArn, AccessRequestByApproverId, AccessRequestBySourceAccountId, AccessRequestBySourceOpsItemId, AccessRequestBySourceRegion, AccessRequestByIsReplica, AccessRequestByTargetResourceId, ChangeRequestByRequesterArn, ChangeRequestByRequesterName, ChangeRequestByApproverArn, ChangeRequestByApproverName, ChangeRequestByTemplate, ChangeRequestByTargetsResourceGroup, InsightByType, AccountId
     #         values: ["OpsItemFilterValue"], # required
     #         operator: "Equal", # required, accepts Equal, Contains, GreaterThan, LessThan
     #       },
@@ -5039,7 +5218,7 @@ module Aws::SSM
     #   resp.ops_item_summaries[0].last_modified_time #=> Time
     #   resp.ops_item_summaries[0].priority #=> Integer
     #   resp.ops_item_summaries[0].source #=> String
-    #   resp.ops_item_summaries[0].status #=> String, one of "Open", "InProgress", "Resolved", "Pending", "TimedOut", "Cancelling", "Cancelled", "Failed", "CompletedWithSuccess", "CompletedWithFailure", "Scheduled", "RunbookInProgress", "PendingChangeCalendarOverride", "ChangeCalendarOverrideApproved", "ChangeCalendarOverrideRejected", "PendingApproval", "Approved", "Rejected", "Closed"
+    #   resp.ops_item_summaries[0].status #=> String, one of "Open", "InProgress", "Resolved", "Pending", "TimedOut", "Cancelling", "Cancelled", "Failed", "CompletedWithSuccess", "CompletedWithFailure", "Scheduled", "RunbookInProgress", "PendingChangeCalendarOverride", "ChangeCalendarOverrideApproved", "ChangeCalendarOverrideRejected", "PendingApproval", "Approved", "Revoked", "Rejected", "Closed"
     #   resp.ops_item_summaries[0].ops_item_id #=> String
     #   resp.ops_item_summaries[0].title #=> String
     #   resp.ops_item_summaries[0].operational_data #=> Hash
@@ -5262,6 +5441,7 @@ module Aws::SSM
     #   * {Types::DescribePatchGroupStateResult#instances_with_critical_non_compliant_patches #instances_with_critical_non_compliant_patches} => Integer
     #   * {Types::DescribePatchGroupStateResult#instances_with_security_non_compliant_patches #instances_with_security_non_compliant_patches} => Integer
     #   * {Types::DescribePatchGroupStateResult#instances_with_other_non_compliant_patches #instances_with_other_non_compliant_patches} => Integer
+    #   * {Types::DescribePatchGroupStateResult#instances_with_available_security_updates #instances_with_available_security_updates} => Integer
     #
     # @example Request syntax with placeholder values
     #
@@ -5283,6 +5463,7 @@ module Aws::SSM
     #   resp.instances_with_critical_non_compliant_patches #=> Integer
     #   resp.instances_with_security_non_compliant_patches #=> Integer
     #   resp.instances_with_other_non_compliant_patches #=> Integer
+    #   resp.instances_with_available_security_updates #=> Integer
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ssm-2014-11-06/DescribePatchGroupState AWS API Documentation
     #
@@ -5373,6 +5554,10 @@ module Aws::SSM
     #
     # : Valid properties: `PRODUCT` \| `CLASSIFICATION` \| `SEVERITY`
     #
+    # AMAZON\_LINUX\_2023
+    #
+    # : Valid properties: `PRODUCT` \| `CLASSIFICATION` \| `SEVERITY`
+    #
     # CENTOS
     #
     # : Valid properties: `PRODUCT` \| `CLASSIFICATION` \| `SEVERITY`
@@ -5494,7 +5679,7 @@ module Aws::SSM
     #     next_token: "NextToken",
     #     filters: [
     #       {
-    #         key: "InvokedAfter", # required, accepts InvokedAfter, InvokedBefore, Target, Owner, Status, SessionId
+    #         key: "InvokedAfter", # required, accepts InvokedAfter, InvokedBefore, Target, Owner, Status, SessionId, AccessType
     #         value: "SessionFilterValue", # required
     #       },
     #     ],
@@ -5515,6 +5700,7 @@ module Aws::SSM
     #   resp.sessions[0].output_url.s3_output_url #=> String
     #   resp.sessions[0].output_url.cloud_watch_output_url #=> String
     #   resp.sessions[0].max_session_duration #=> String
+    #   resp.sessions[0].access_type #=> String, one of "Standard", "JustInTime"
     #   resp.next_token #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ssm-2014-11-06/DescribeSessions AWS API Documentation
@@ -5528,8 +5714,8 @@ module Aws::SSM
 
     # Deletes the association between an OpsItem and a related item. For
     # example, this API operation can delete an Incident Manager incident
-    # from an OpsItem. Incident Manager is a capability of Amazon Web
-    # Services Systems Manager.
+    # from an OpsItem. Incident Manager is a tool in Amazon Web Services
+    # Systems Manager.
     #
     # @option params [required, String] :ops_item_id
     #   The ID of the OpsItem for which you want to delete an association
@@ -5557,6 +5743,39 @@ module Aws::SSM
       req.send_request(options)
     end
 
+    # Returns a credentials set to be used with just-in-time node access.
+    #
+    # @option params [required, String] :access_request_id
+    #   The ID of a just-in-time node access request.
+    #
+    # @return [Types::GetAccessTokenResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::GetAccessTokenResponse#credentials #credentials} => Types::Credentials
+    #   * {Types::GetAccessTokenResponse#access_request_status #access_request_status} => String
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.get_access_token({
+    #     access_request_id: "AccessRequestId", # required
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.credentials.access_key_id #=> String
+    #   resp.credentials.secret_access_key #=> String
+    #   resp.credentials.session_token #=> String
+    #   resp.credentials.expiration_time #=> Time
+    #   resp.access_request_status #=> String, one of "Approved", "Rejected", "Revoked", "Expired", "Pending"
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ssm-2014-11-06/GetAccessToken AWS API Documentation
+    #
+    # @overload get_access_token(params = {})
+    # @param [Hash] params ({})
+    def get_access_token(params = {}, options = {})
+      req = build_request(:get_access_token, params)
+      req.send_request(options)
+    end
+
     # Get detailed information about a particular Automation execution.
     #
     # @option params [required, String] :automation_execution_id
@@ -5627,6 +5846,15 @@ module Aws::SSM
     #   resp.automation_execution.step_executions[0].target_location.target_location_alarm_configuration.ignore_poll_alarm_failure #=> Boolean
     #   resp.automation_execution.step_executions[0].target_location.target_location_alarm_configuration.alarms #=> Array
     #   resp.automation_execution.step_executions[0].target_location.target_location_alarm_configuration.alarms[0].name #=> String
+    #   resp.automation_execution.step_executions[0].target_location.include_child_organization_units #=> Boolean
+    #   resp.automation_execution.step_executions[0].target_location.exclude_accounts #=> Array
+    #   resp.automation_execution.step_executions[0].target_location.exclude_accounts[0] #=> String
+    #   resp.automation_execution.step_executions[0].target_location.targets #=> Array
+    #   resp.automation_execution.step_executions[0].target_location.targets[0].key #=> String
+    #   resp.automation_execution.step_executions[0].target_location.targets[0].values #=> Array
+    #   resp.automation_execution.step_executions[0].target_location.targets[0].values[0] #=> String
+    #   resp.automation_execution.step_executions[0].target_location.targets_max_concurrency #=> String
+    #   resp.automation_execution.step_executions[0].target_location.targets_max_errors #=> String
     #   resp.automation_execution.step_executions[0].triggered_alarms #=> Array
     #   resp.automation_execution.step_executions[0].triggered_alarms[0].name #=> String
     #   resp.automation_execution.step_executions[0].triggered_alarms[0].state #=> String, one of "UNKNOWN", "ALARM"
@@ -5674,6 +5902,15 @@ module Aws::SSM
     #   resp.automation_execution.target_locations[0].target_location_alarm_configuration.ignore_poll_alarm_failure #=> Boolean
     #   resp.automation_execution.target_locations[0].target_location_alarm_configuration.alarms #=> Array
     #   resp.automation_execution.target_locations[0].target_location_alarm_configuration.alarms[0].name #=> String
+    #   resp.automation_execution.target_locations[0].include_child_organization_units #=> Boolean
+    #   resp.automation_execution.target_locations[0].exclude_accounts #=> Array
+    #   resp.automation_execution.target_locations[0].exclude_accounts[0] #=> String
+    #   resp.automation_execution.target_locations[0].targets #=> Array
+    #   resp.automation_execution.target_locations[0].targets[0].key #=> String
+    #   resp.automation_execution.target_locations[0].targets[0].values #=> Array
+    #   resp.automation_execution.target_locations[0].targets[0].values[0] #=> String
+    #   resp.automation_execution.target_locations[0].targets_max_concurrency #=> String
+    #   resp.automation_execution.target_locations[0].targets_max_errors #=> String
     #   resp.automation_execution.progress_counters.total_steps #=> Integer
     #   resp.automation_execution.progress_counters.success_steps #=> Integer
     #   resp.automation_execution.progress_counters.failed_steps #=> Integer
@@ -5685,7 +5922,8 @@ module Aws::SSM
     #   resp.automation_execution.triggered_alarms #=> Array
     #   resp.automation_execution.triggered_alarms[0].name #=> String
     #   resp.automation_execution.triggered_alarms[0].state #=> String, one of "UNKNOWN", "ALARM"
-    #   resp.automation_execution.automation_subtype #=> String, one of "ChangeRequest"
+    #   resp.automation_execution.target_locations_url #=> String
+    #   resp.automation_execution.automation_subtype #=> String, one of "ChangeRequest", "AccessRequest"
     #   resp.automation_execution.scheduled_time #=> Time
     #   resp.automation_execution.runbooks #=> Array
     #   resp.automation_execution.runbooks[0].document_name #=> String
@@ -5715,6 +5953,15 @@ module Aws::SSM
     #   resp.automation_execution.runbooks[0].target_locations[0].target_location_alarm_configuration.ignore_poll_alarm_failure #=> Boolean
     #   resp.automation_execution.runbooks[0].target_locations[0].target_location_alarm_configuration.alarms #=> Array
     #   resp.automation_execution.runbooks[0].target_locations[0].target_location_alarm_configuration.alarms[0].name #=> String
+    #   resp.automation_execution.runbooks[0].target_locations[0].include_child_organization_units #=> Boolean
+    #   resp.automation_execution.runbooks[0].target_locations[0].exclude_accounts #=> Array
+    #   resp.automation_execution.runbooks[0].target_locations[0].exclude_accounts[0] #=> String
+    #   resp.automation_execution.runbooks[0].target_locations[0].targets #=> Array
+    #   resp.automation_execution.runbooks[0].target_locations[0].targets[0].key #=> String
+    #   resp.automation_execution.runbooks[0].target_locations[0].targets[0].values #=> Array
+    #   resp.automation_execution.runbooks[0].target_locations[0].targets[0].values[0] #=> String
+    #   resp.automation_execution.runbooks[0].target_locations[0].targets_max_concurrency #=> String
+    #   resp.automation_execution.runbooks[0].target_locations[0].targets_max_errors #=> String
     #   resp.automation_execution.ops_item_id #=> String
     #   resp.automation_execution.association_id #=> String
     #   resp.automation_execution.change_request_name #=> String
@@ -5744,7 +5991,7 @@ module Aws::SSM
     # open. If one or more calendars in the request are closed, the status
     # returned is `CLOSED`.
     #
-    # For more information about Change Calendar, a capability of Amazon Web
+    # For more information about Change Calendar, a tool in Amazon Web
     # Services Systems Manager, see [Amazon Web Services Systems Manager
     # Change Calendar][1] in the *Amazon Web Services Systems Manager User
     # Guide*.
@@ -5754,7 +6001,7 @@ module Aws::SSM
     # [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-change-calendar.html
     #
     # @option params [required, Array<String>] :calendar_names
-    #   The names or Amazon Resource Names (ARNs) of the Systems Manager
+    #   The names of Amazon Resource Names (ARNs) of the Systems Manager
     #   documents (SSM documents) that represent the calendar entries for
     #   which you want to get the state.
     #
@@ -5796,7 +6043,12 @@ module Aws::SSM
     end
 
     # Returns detailed information about command execution for an invocation
-    # or plugin.
+    # or plugin. The Run Command API follows an eventual consistency model,
+    # due to the distributed nature of the system supporting the API. This
+    # means that the result of an API command you run that affects your
+    # resources might not be immediately visible to all subsequent commands
+    # you run. You should keep this in mind when you carry out an API
+    # command that immediately follows a previous API command.
     #
     # `GetCommandInvocation` only gives the execution status of a plugin in
     # a document. To get the command execution status on a specific managed
@@ -5966,8 +6218,8 @@ module Aws::SSM
     # Interface (CLI), the system attempts to use your local Amazon Web
     # Services credentials and the operation fails. To avoid this, you can
     # run the command in the Amazon Web Services Systems Manager console.
-    # Use Run Command, a capability of Amazon Web Services Systems Manager,
-    # with an SSM document that enables you to target a managed node with a
+    # Use Run Command, a tool in Amazon Web Services Systems Manager, with
+    # an SSM document that enables you to target a managed node with a
     # script or command. For example, run the command using the
     # `AWS-RunShellScript` document or the `AWS-RunPowerShellScript`
     # document.
@@ -6037,6 +6289,7 @@ module Aws::SSM
     #           configuration: "PatchSourceConfiguration", # required
     #         },
     #       ],
+    #       available_security_updates_compliance_status: "COMPLIANT", # accepts COMPLIANT, NON_COMPLIANT
     #     },
     #   })
     #
@@ -6109,7 +6362,7 @@ module Aws::SSM
     #   resp.status #=> String, one of "Creating", "Active", "Updating", "Deleting", "Failed"
     #   resp.status_information #=> String
     #   resp.content #=> String
-    #   resp.document_type #=> String, one of "Command", "Policy", "Automation", "Session", "Package", "ApplicationConfiguration", "ApplicationConfigurationSchema", "DeploymentStrategy", "ChangeCalendar", "Automation.ChangeTemplate", "ProblemAnalysis", "ProblemAnalysisTemplate", "CloudFormation", "ConformancePackTemplate", "QuickSetup"
+    #   resp.document_type #=> String, one of "Command", "Policy", "Automation", "Session", "Package", "ApplicationConfiguration", "ApplicationConfigurationSchema", "DeploymentStrategy", "ChangeCalendar", "Automation.ChangeTemplate", "ProblemAnalysis", "ProblemAnalysisTemplate", "CloudFormation", "ConformancePackTemplate", "QuickSetup", "ManualApprovalPolicy", "AutoApprovalPolicy"
     #   resp.document_format #=> String, one of "YAML", "JSON", "TEXT"
     #   resp.requires #=> Array
     #   resp.requires[0].name #=> String
@@ -6133,6 +6386,78 @@ module Aws::SSM
       req.send_request(options)
     end
 
+    # Initiates the process of retrieving an existing preview that shows the
+    # effects that running a specified Automation runbook would have on the
+    # targeted resources.
+    #
+    # @option params [required, String] :execution_preview_id
+    #   The ID of the existing execution preview.
+    #
+    # @return [Types::GetExecutionPreviewResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::GetExecutionPreviewResponse#execution_preview_id #execution_preview_id} => String
+    #   * {Types::GetExecutionPreviewResponse#ended_at #ended_at} => Time
+    #   * {Types::GetExecutionPreviewResponse#status #status} => String
+    #   * {Types::GetExecutionPreviewResponse#status_message #status_message} => String
+    #   * {Types::GetExecutionPreviewResponse#execution_preview #execution_preview} => Types::ExecutionPreview
+    #
+    #
+    # @example Example: GetExecutionPreview
+    #
+    #   # This example illustrates one usage of GetExecutionPreview
+    #
+    #   resp = client.get_execution_preview({
+    #     execution_preview_id: "2f27d6e5-9676-4708-b8bd-aef0ab47bb26", 
+    #   })
+    #
+    #   resp.to_h outputs the following:
+    #   {
+    #     ended_at: Time.parse("2024-11-13T01:50:39.424000+00:00"), 
+    #     execution_preview: {
+    #       automation: {
+    #         regions: [
+    #           "us-east-2", 
+    #         ], 
+    #         step_previews: {
+    #           "Undetermined" => 1, 
+    #         }, 
+    #         total_accounts: 1, 
+    #       }, 
+    #     }, 
+    #     execution_preview_id: "2f27d6e5-9676-4708-b8bd-aef0ab47bb26", 
+    #     status: "Success", 
+    #   }
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.get_execution_preview({
+    #     execution_preview_id: "ExecutionPreviewId", # required
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.execution_preview_id #=> String
+    #   resp.ended_at #=> Time
+    #   resp.status #=> String, one of "Pending", "InProgress", "Success", "Failed"
+    #   resp.status_message #=> String
+    #   resp.execution_preview.automation.step_previews #=> Hash
+    #   resp.execution_preview.automation.step_previews["ImpactType"] #=> Integer
+    #   resp.execution_preview.automation.regions #=> Array
+    #   resp.execution_preview.automation.regions[0] #=> String
+    #   resp.execution_preview.automation.target_previews #=> Array
+    #   resp.execution_preview.automation.target_previews[0].count #=> Integer
+    #   resp.execution_preview.automation.target_previews[0].target_type #=> String
+    #   resp.execution_preview.automation.total_accounts #=> Integer
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ssm-2014-11-06/GetExecutionPreview AWS API Documentation
+    #
+    # @overload get_execution_preview(params = {})
+    # @param [Hash] params ({})
+    def get_execution_preview(params = {}, options = {})
+      req = build_request(:get_execution_preview, params)
+      req.send_request(options)
+    end
+
     # Query inventory information. This includes managed node status, such
     # as `Stopped` or `Terminated`.
     #
@@ -6669,7 +6994,7 @@ module Aws::SSM
     #   resp.ops_item.priority #=> Integer
     #   resp.ops_item.related_ops_items #=> Array
     #   resp.ops_item.related_ops_items[0].ops_item_id #=> String
-    #   resp.ops_item.status #=> String, one of "Open", "InProgress", "Resolved", "Pending", "TimedOut", "Cancelling", "Cancelled", "Failed", "CompletedWithSuccess", "CompletedWithFailure", "Scheduled", "RunbookInProgress", "PendingChangeCalendarOverride", "ChangeCalendarOverrideApproved", "ChangeCalendarOverrideRejected", "PendingApproval", "Approved", "Rejected", "Closed"
+    #   resp.ops_item.status #=> String, one of "Open", "InProgress", "Resolved", "Pending", "TimedOut", "Cancelling", "Cancelled", "Failed", "CompletedWithSuccess", "CompletedWithFailure", "Scheduled", "RunbookInProgress", "PendingChangeCalendarOverride", "ChangeCalendarOverrideApproved", "ChangeCalendarOverrideRejected", "PendingApproval", "Approved", "Revoked", "Rejected", "Closed"
     #   resp.ops_item.ops_item_id #=> String
     #   resp.ops_item.version #=> String
     #   resp.ops_item.title #=> String
@@ -6857,7 +7182,7 @@ module Aws::SSM
     #
     #
     #
-    #   [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/sharing.html
+    #   [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/parameter-store-shared-parameters.html
     #
     # @option params [Boolean] :with_decryption
     #   Return decrypted values for secure string parameters. This flag is
@@ -7037,8 +7362,8 @@ module Aws::SSM
       req.send_request(options)
     end
 
-    # Retrieve information about one or more parameters in a specific
-    # hierarchy.
+    # Retrieve information about one or more parameters under a specified
+    # level in a hierarchy.
     #
     # Request results are returned on a best-effort basis. If you specify
     # `MaxResults` in the request, the response includes information up to
@@ -7168,6 +7493,7 @@ module Aws::SSM
     #   * {Types::GetPatchBaselineResult#modified_date #modified_date} => Time
     #   * {Types::GetPatchBaselineResult#description #description} => String
     #   * {Types::GetPatchBaselineResult#sources #sources} => Array&lt;Types::PatchSource&gt;
+    #   * {Types::GetPatchBaselineResult#available_security_updates_compliance_status #available_security_updates_compliance_status} => String
     #
     # @example Request syntax with placeholder values
     #
@@ -7210,6 +7536,7 @@ module Aws::SSM
     #   resp.sources[0].products #=> Array
     #   resp.sources[0].products[0] #=> String
     #   resp.sources[0].configuration #=> String
+    #   resp.available_security_updates_compliance_status #=> String, one of "COMPLIANT", "NON_COMPLIANT"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ssm-2014-11-06/GetPatchBaseline AWS API Documentation
     #
@@ -7329,16 +7656,20 @@ module Aws::SSM
     #   The ID of the service setting to get. The setting ID can be one of the
     #   following.
     #
-    #   * `/ssm/managed-instance/default-ec2-instance-management-role`
+    #   * `/ssm/appmanager/appmanager-enabled`
     #
     #   * `/ssm/automation/customer-script-log-destination`
     #
     #   * `/ssm/automation/customer-script-log-group-name`
     #
+    #   * /ssm/automation/enable-adaptive-concurrency
+    #
     #   * `/ssm/documents/console/public-sharing-permission`
     #
     #   * `/ssm/managed-instance/activation-tier`
     #
+    #   * `/ssm/managed-instance/default-ec2-instance-management-role`
+    #
     #   * `/ssm/opsinsights/opscenter`
     #
     #   * `/ssm/parameter-store/default-parameter-tier`
@@ -7517,6 +7848,15 @@ module Aws::SSM
     #   resp.association_versions[0].target_locations[0].target_location_alarm_configuration.ignore_poll_alarm_failure #=> Boolean
     #   resp.association_versions[0].target_locations[0].target_location_alarm_configuration.alarms #=> Array
     #   resp.association_versions[0].target_locations[0].target_location_alarm_configuration.alarms[0].name #=> String
+    #   resp.association_versions[0].target_locations[0].include_child_organization_units #=> Boolean
+    #   resp.association_versions[0].target_locations[0].exclude_accounts #=> Array
+    #   resp.association_versions[0].target_locations[0].exclude_accounts[0] #=> String
+    #   resp.association_versions[0].target_locations[0].targets #=> Array
+    #   resp.association_versions[0].target_locations[0].targets[0].key #=> String
+    #   resp.association_versions[0].target_locations[0].targets[0].values #=> Array
+    #   resp.association_versions[0].target_locations[0].targets[0].values[0] #=> String
+    #   resp.association_versions[0].target_locations[0].targets_max_concurrency #=> String
+    #   resp.association_versions[0].target_locations[0].targets_max_errors #=> String
     #   resp.association_versions[0].schedule_offset #=> Integer
     #   resp.association_versions[0].duration #=> Integer
     #   resp.association_versions[0].target_maps #=> Array
@@ -7537,8 +7877,8 @@ module Aws::SSM
     # Returns all State Manager associations in the current Amazon Web
     # Services account and Amazon Web Services Region. You can limit the
     # results to a specific State Manager association document or managed
-    # node by specifying a filter. State Manager is a capability of Amazon
-    # Web Services Systems Manager.
+    # node by specifying a filter. State Manager is a tool in Amazon Web
+    # Services Systems Manager.
     #
     # @option params [Array<Types::AssociationFilter>] :association_filter_list
     #   One or more filters. Use a filter to return a more specific list of
@@ -8149,7 +8489,7 @@ module Aws::SSM
     #   resp.document_identifiers[0].platform_types #=> Array
     #   resp.document_identifiers[0].platform_types[0] #=> String, one of "Windows", "Linux", "MacOS"
     #   resp.document_identifiers[0].document_version #=> String
-    #   resp.document_identifiers[0].document_type #=> String, one of "Command", "Policy", "Automation", "Session", "Package", "ApplicationConfiguration", "ApplicationConfigurationSchema", "DeploymentStrategy", "ChangeCalendar", "Automation.ChangeTemplate", "ProblemAnalysis", "ProblemAnalysisTemplate", "CloudFormation", "ConformancePackTemplate", "QuickSetup"
+    #   resp.document_identifiers[0].document_type #=> String, one of "Command", "Policy", "Automation", "Session", "Package", "ApplicationConfiguration", "ApplicationConfigurationSchema", "DeploymentStrategy", "ChangeCalendar", "Automation.ChangeTemplate", "ProblemAnalysis", "ProblemAnalysisTemplate", "CloudFormation", "ConformancePackTemplate", "QuickSetup", "ManualApprovalPolicy", "AutoApprovalPolicy"
     #   resp.document_identifiers[0].schema_version #=> String
     #   resp.document_identifiers[0].document_format #=> String, one of "YAML", "JSON", "TEXT"
     #   resp.document_identifiers[0].target_type #=> String
@@ -8240,6 +8580,258 @@ module Aws::SSM
       req.send_request(options)
     end
 
+    # Takes in filters and returns a list of managed nodes matching the
+    # filter criteria.
+    #
+    # @option params [String] :sync_name
+    #   The name of the Amazon Web Services managed resource data sync to
+    #   retrieve information about.
+    #
+    #   For cross-account/cross-Region configurations, this parameter is
+    #   required, and the name of the supported resource data sync is
+    #   `AWS-QuickSetup-ManagedNode`.
+    #
+    #   For single account/single-Region configurations, the parameter is not
+    #   required.
+    #
+    # @option params [Array<Types::NodeFilter>] :filters
+    #   One or more filters. Use a filter to return a more specific list of
+    #   managed nodes.
+    #
+    # @option params [String] :next_token
+    #   The token for the next set of items to return. (You received this
+    #   token from a previous call.)
+    #
+    # @option params [Integer] :max_results
+    #   The maximum number of items to return for this call. The call also
+    #   returns a token that you can specify in a subsequent call to get the
+    #   next set of results.
+    #
+    # @return [Types::ListNodesResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::ListNodesResult#nodes #nodes} => Array&lt;Types::Node&gt;
+    #   * {Types::ListNodesResult#next_token #next_token} => String
+    #
+    # The returned {Seahorse::Client::Response response} is a pageable response and is Enumerable. For details on usage see {Aws::PageableResponse PageableResponse}.
+    #
+    #
+    # @example Example: ListNodes
+    #
+    #   # This example illustrates one usage of ListNodes
+    #
+    #   resp = client.list_nodes({
+    #     filters: [
+    #       {
+    #         key: "Region", 
+    #         type: "Equal", 
+    #         values: [
+    #           "us-east-2", 
+    #         ], 
+    #       }, 
+    #     ], 
+    #     max_results: 1, 
+    #     sync_name: "AWS-QuickSetup-ManagedNode", 
+    #   })
+    #
+    #   resp.to_h outputs the following:
+    #   {
+    #     next_token: "A9lT8CAxj9aDFRi+MNAoFq08IEXAMPLE", 
+    #     nodes: [
+    #       {
+    #         capture_time: Time.parse("2024-11-19T22:01:18"), 
+    #         id: "i-02573cafcfEXAMPLE", 
+    #         node_type: {
+    #           instance: {
+    #             agent_type: "amazon-ssm-agent", 
+    #             agent_version: "3.3.859.0", 
+    #             computer_name: "ip-192.0.2.0.ec2.internal", 
+    #             instance_status: "Active", 
+    #             ip_address: "192.0.2.0", 
+    #             managed_status: "Managed", 
+    #             platform_name: "Amazon Linux", 
+    #             platform_type: "Linux", 
+    #             platform_version: "2023", 
+    #             resource_type: "EC2Instance", 
+    #           }, 
+    #         }, 
+    #         owner: {
+    #           account_id: "111122223333", 
+    #           organizational_unit_id: "ou-b8dn-sasv9tfp", 
+    #           organizational_unit_path: "r-b8dn/ou-b8dn-sasv9tfp", 
+    #         }, 
+    #         region: "us-east-2", 
+    #       }, 
+    #     ], 
+    #   }
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.list_nodes({
+    #     sync_name: "ResourceDataSyncName",
+    #     filters: [
+    #       {
+    #         key: "AgentType", # required, accepts AgentType, AgentVersion, ComputerName, InstanceId, InstanceStatus, IpAddress, ManagedStatus, PlatformName, PlatformType, PlatformVersion, ResourceType, OrganizationalUnitId, OrganizationalUnitPath, Region, AccountId
+    #         values: ["NodeFilterValue"], # required
+    #         type: "Equal", # accepts Equal, NotEqual, BeginWith
+    #       },
+    #     ],
+    #     next_token: "NextToken",
+    #     max_results: 1,
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.nodes #=> Array
+    #   resp.nodes[0].capture_time #=> Time
+    #   resp.nodes[0].id #=> String
+    #   resp.nodes[0].owner.account_id #=> String
+    #   resp.nodes[0].owner.organizational_unit_id #=> String
+    #   resp.nodes[0].owner.organizational_unit_path #=> String
+    #   resp.nodes[0].region #=> String
+    #   resp.nodes[0].node_type.instance.agent_type #=> String
+    #   resp.nodes[0].node_type.instance.agent_version #=> String
+    #   resp.nodes[0].node_type.instance.computer_name #=> String
+    #   resp.nodes[0].node_type.instance.instance_status #=> String
+    #   resp.nodes[0].node_type.instance.ip_address #=> String
+    #   resp.nodes[0].node_type.instance.managed_status #=> String, one of "All", "Managed", "Unmanaged"
+    #   resp.nodes[0].node_type.instance.platform_type #=> String, one of "Windows", "Linux", "MacOS"
+    #   resp.nodes[0].node_type.instance.platform_name #=> String
+    #   resp.nodes[0].node_type.instance.platform_version #=> String
+    #   resp.nodes[0].node_type.instance.resource_type #=> String, one of "ManagedInstance", "EC2Instance"
+    #   resp.next_token #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ssm-2014-11-06/ListNodes AWS API Documentation
+    #
+    # @overload list_nodes(params = {})
+    # @param [Hash] params ({})
+    def list_nodes(params = {}, options = {})
+      req = build_request(:list_nodes, params)
+      req.send_request(options)
+    end
+
+    # Generates a summary of managed instance/node metadata based on the
+    # filters and aggregators you specify. Results are grouped by the input
+    # aggregator you specify.
+    #
+    # @option params [String] :sync_name
+    #   The name of the Amazon Web Services managed resource data sync to
+    #   retrieve information about.
+    #
+    #   For cross-account/cross-Region configurations, this parameter is
+    #   required, and the name of the supported resource data sync is
+    #   `AWS-QuickSetup-ManagedNode`.
+    #
+    #   For single account/single-Region configurations, the parameter is not
+    #   required.
+    #
+    # @option params [Array<Types::NodeFilter>] :filters
+    #   One or more filters. Use a filter to generate a summary that matches
+    #   your specified filter criteria.
+    #
+    # @option params [required, Array<Types::NodeAggregator>] :aggregators
+    #   Specify one or more aggregators to return a count of managed nodes
+    #   that match that expression. For example, a count of managed nodes by
+    #   operating system.
+    #
+    # @option params [String] :next_token
+    #   The token for the next set of items to return. (You received this
+    #   token from a previous call.) The call also returns a token that you
+    #   can specify in a subsequent call to get the next set of results.
+    #
+    # @option params [Integer] :max_results
+    #   The maximum number of items to return for this call. The call also
+    #   returns a token that you can specify in a subsequent call to get the
+    #   next set of results.
+    #
+    # @return [Types::ListNodesSummaryResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::ListNodesSummaryResult#summary #summary} => Array&lt;Hash&lt;String,String&gt;&gt;
+    #   * {Types::ListNodesSummaryResult#next_token #next_token} => String
+    #
+    # The returned {Seahorse::Client::Response response} is a pageable response and is Enumerable. For details on usage see {Aws::PageableResponse PageableResponse}.
+    #
+    #
+    # @example Example: ListNodesSummary
+    #
+    #   # This example illustrates one usage of ListNodesSummary
+    #
+    #   resp = client.list_nodes_summary({
+    #     aggregators: [
+    #       {
+    #         aggregator_type: "Count", 
+    #         attribute_name: "Region", 
+    #         type_name: "Instance", 
+    #       }, 
+    #     ], 
+    #     filters: [
+    #       {
+    #         key: "InstanceStatus", 
+    #         type: "Equal", 
+    #         values: [
+    #           "Active", 
+    #         ], 
+    #       }, 
+    #     ], 
+    #     max_results: 2, 
+    #     next_token: "A9lT8CAxj9aDFRi+MNAoFq08I---EXAMPLE", 
+    #     sync_name: "AWS-QuickSetup-ManagedNode", 
+    #   })
+    #
+    #   resp.to_h outputs the following:
+    #   {
+    #     summary: [
+    #       {
+    #         "Count" => "26", 
+    #         "Region" => "us-east-1", 
+    #       }, 
+    #       {
+    #         "Count" => "7", 
+    #         "Region" => "us-east-2", 
+    #       }, 
+    #     ], 
+    #   }
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.list_nodes_summary({
+    #     sync_name: "ResourceDataSyncName",
+    #     filters: [
+    #       {
+    #         key: "AgentType", # required, accepts AgentType, AgentVersion, ComputerName, InstanceId, InstanceStatus, IpAddress, ManagedStatus, PlatformName, PlatformType, PlatformVersion, ResourceType, OrganizationalUnitId, OrganizationalUnitPath, Region, AccountId
+    #         values: ["NodeFilterValue"], # required
+    #         type: "Equal", # accepts Equal, NotEqual, BeginWith
+    #       },
+    #     ],
+    #     aggregators: [ # required
+    #       {
+    #         aggregator_type: "Count", # required, accepts Count
+    #         type_name: "Instance", # required, accepts Instance
+    #         attribute_name: "AgentVersion", # required, accepts AgentVersion, PlatformName, PlatformType, PlatformVersion, Region, ResourceType
+    #         aggregators: {
+    #           # recursive NodeAggregatorList
+    #         },
+    #       },
+    #     ],
+    #     next_token: "NextToken",
+    #     max_results: 1,
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.summary #=> Array
+    #   resp.summary[0] #=> Hash
+    #   resp.summary[0]["AttributeName"] #=> <Hash,Array,String,Numeric,Boolean,IO,Set,nil>
+    #   resp.next_token #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ssm-2014-11-06/ListNodesSummary AWS API Documentation
+    #
+    # @overload list_nodes_summary(params = {})
+    # @param [Hash] params ({})
+    def list_nodes_summary(params = {}, options = {})
+      req = build_request(:list_nodes_summary, params)
+      req.send_request(options)
+    end
+
     # Returns a list of all OpsItem events in the current Amazon Web
     # Services Region and Amazon Web Services account. You can limit the
     # results to events associated with specific OpsItems by specifying a
@@ -8301,8 +8893,8 @@ module Aws::SSM
     end
 
     # Lists all related-item resources associated with a Systems Manager
-    # OpsCenter OpsItem. OpsCenter is a capability of Amazon Web Services
-    # Systems Manager.
+    # OpsCenter OpsItem. OpsCenter is a tool in Amazon Web Services Systems
+    # Manager.
     #
     # @option params [String] :ops_item_id
     #   The ID of the OpsItem for which you want to list all related-item
@@ -8628,14 +9220,17 @@ module Aws::SSM
     #
     # @option params [Array<String>] :account_ids_to_add
     #   The Amazon Web Services users that should have access to the document.
-    #   The account IDs can either be a group of account IDs or *All*.
+    #   The account IDs can either be a group of account IDs or *All*. You
+    #   must specify a value for this parameter or the `AccountIdsToRemove`
+    #   parameter.
     #
     # @option params [Array<String>] :account_ids_to_remove
     #   The Amazon Web Services users that should no longer have access to the
     #   document. The Amazon Web Services user can either be a group of
     #   account IDs or *All*. This action has a higher priority than
     #   `AccountIdsToAdd`. If you specify an ID to add and the same ID to
-    #   remove, the system removes access to the document.
+    #   remove, the system removes access to the document. You must specify a
+    #   value for this parameter or the `AccountIdsToAdd` parameter.
     #
     # @option params [String] :shared_document_version
     #   (Optional) The version of the document to share. If it isn't
@@ -8837,11 +9432,11 @@ module Aws::SSM
       req.send_request(options)
     end
 
-    # Add a parameter to the system.
+    # Create or update a parameter in Parameter Store.
     #
     # @option params [required, String] :name
-    #   The fully qualified name of the parameter that you want to add to the
-    #   system.
+    #   The fully qualified name of the parameter that you want to create or
+    #   update.
     #
     #   <note markdown="1"> You can't enter the Amazon Resource Name (ARN) for a parameter, only
     #   the parameter name itself.
@@ -8878,11 +9473,16 @@ module Aws::SSM
     #   [Creating Systems Manager parameters][1] in the *Amazon Web Services
     #   Systems Manager User Guide*.
     #
-    #   <note markdown="1"> The maximum length constraint of 2048 characters listed below includes
-    #   1037 characters reserved for internal use by Systems Manager. The
-    #   maximum length for a parameter name that you create is 1011
-    #   characters. This includes the characters in the ARN that precede the
-    #   name you specify, such as
+    #   <note markdown="1"> The reported maximum length of 2048 characters for a parameter name
+    #   includes 1037 characters that are reserved for internal use by Systems
+    #   Manager. The maximum length for a parameter name that you specify is
+    #   1011 characters.
+    #
+    #    This count of 1011 characters includes the characters in the ARN that
+    #   precede the name you specify. This ARN length will vary depending on
+    #   your partition and Region. For example, the following 45 characters
+    #   count toward the 1011 character maximum for a parameter created in the
+    #   US East (Ohio) Region:
     #   `arn:aws:ssm:us-east-2:111122223333:parameter/`.
     #
     #    </note>
@@ -8903,13 +9503,13 @@ module Aws::SSM
     #   value limit of 8 KB.
     #
     #   <note markdown="1"> Parameters can't be referenced or nested in the values of other
-    #   parameters. You can't include `\{\{\}\}` or
-    #   `\{\{ssm:parameter-name\}\}` in a parameter value.
+    #   parameters. You can't include values wrapped in double brackets
+    #   `{{}}` or `{{ssm:parameter-name}}` in a parameter value.
     #
     #    </note>
     #
     # @option params [String] :type
-    #   The type of parameter that you want to add to the system.
+    #   The type of parameter that you want to create.
     #
     #   <note markdown="1"> `SecureString` isn't currently supported for CloudFormation
     #   templates.
@@ -8930,7 +9530,7 @@ module Aws::SSM
     #   parameters that use the `SecureString` data type.
     #
     #   If you don't specify a key ID, the system uses the default key
-    #   associated with your Amazon Web Services account which is not as
+    #   associated with your Amazon Web Services account, which is not as
     #   secure as using a custom key.
     #
     #   * To use a custom KMS key, choose the `SecureString` data type with
@@ -9044,8 +9644,8 @@ module Aws::SSM
     #
     # @option params [String] :policies
     #   One or more policies to apply to a parameter. This operation takes a
-    #   JSON array. Parameter Store, a capability of Amazon Web Services
-    #   Systems Manager supports the following policy types:
+    #   JSON array. Parameter Store, a tool in Amazon Web Services Systems
+    #   Manager supports the following policy types:
     #
     #   Expiration: This policy deletes the parameter after it expires. When
     #   you create the policy, you specify the expiration date. You can update
@@ -9463,7 +10063,7 @@ module Aws::SSM
     #   creating a custom policy and custom service role for running your
     #   maintenance window tasks. The policy can be crafted to provide only
     #   the permissions needed for your particular maintenance window tasks.
-    #   For more information, see [Setting up maintenance windows][1] in the
+    #   For more information, see [Setting up Maintenance Windows][1] in the
     #   in the *Amazon Web Services Systems Manager User Guide*.
     #
     #
@@ -9576,7 +10176,6 @@ module Aws::SSM
     #       command associated with the task. However, there is no guarantee
     #       that the command will be terminated and the underlying process
     #       stopped.
-    #
     #     The status for tasks that are not completed is `TIMED_OUT`.
     #
     # @option params [Types::AlarmConfiguration] :alarm_configuration
@@ -9764,16 +10363,20 @@ module Aws::SSM
     #   The Amazon Resource Name (ARN) of the service setting to reset. The
     #   setting ID can be one of the following.
     #
-    #   * `/ssm/managed-instance/default-ec2-instance-management-role`
+    #   * `/ssm/appmanager/appmanager-enabled`
     #
     #   * `/ssm/automation/customer-script-log-destination`
     #
     #   * `/ssm/automation/customer-script-log-group-name`
     #
+    #   * /ssm/automation/enable-adaptive-concurrency
+    #
     #   * `/ssm/documents/console/public-sharing-permission`
     #
     #   * `/ssm/managed-instance/activation-tier`
     #
+    #   * `/ssm/managed-instance/default-ec2-instance-management-role`
+    #
     #   * `/ssm/opsinsights/opscenter`
     #
     #   * `/ssm/parameter-store/default-parameter-tier`
@@ -9883,7 +10486,7 @@ module Aws::SSM
     #
     #   resp = client.send_automation_signal({
     #     automation_execution_id: "AutomationExecutionId", # required
-    #     signal_type: "Approve", # required, accepts Approve, Reject, StartStep, StopStep, Resume
+    #     signal_type: "Approve", # required, accepts Approve, Reject, StartStep, StopStep, Resume, Revoke
     #     payload: {
     #       "AutomationParameterKey" => ["AutomationParameterValue"],
     #     },
@@ -10051,7 +10654,7 @@ module Aws::SSM
     #
     # @option params [Types::CloudWatchOutputConfig] :cloud_watch_output_config
     #   Enables Amazon Web Services Systems Manager to send Run Command output
-    #   to Amazon CloudWatch Logs. Run Command is a capability of Amazon Web
+    #   to Amazon CloudWatch Logs. Run Command is a tool in Amazon Web
     #   Services Systems Manager.
     #
     # @option params [Types::AlarmConfiguration] :alarm_configuration
@@ -10157,6 +10760,53 @@ module Aws::SSM
       req.send_request(options)
     end
 
+    # Starts the workflow for just-in-time node access sessions.
+    #
+    # @option params [required, String] :reason
+    #   A brief description explaining why you are requesting access to the
+    #   node.
+    #
+    # @option params [required, Array<Types::Target>] :targets
+    #   The node you are requesting access to.
+    #
+    # @option params [Array<Types::Tag>] :tags
+    #   Key-value pairs of metadata you want to assign to the access request.
+    #
+    # @return [Types::StartAccessRequestResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::StartAccessRequestResponse#access_request_id #access_request_id} => String
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.start_access_request({
+    #     reason: "String1to256", # required
+    #     targets: [ # required
+    #       {
+    #         key: "TargetKey",
+    #         values: ["TargetValue"],
+    #       },
+    #     ],
+    #     tags: [
+    #       {
+    #         key: "TagKey", # required
+    #         value: "TagValue", # required
+    #       },
+    #     ],
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.access_request_id #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ssm-2014-11-06/StartAccessRequest AWS API Documentation
+    #
+    # @overload start_access_request(params = {})
+    # @param [Hash] params ({})
+    def start_access_request(params = {}, options = {})
+      req = build_request(:start_access_request, params)
+      req.send_request(options)
+    end
+
     # Runs an association immediately and only one time. This operation can
     # be helpful when troubleshooting associations.
     #
@@ -10217,6 +10867,9 @@ module Aws::SSM
     #   A key-value mapping to target resources. Required if you specify
     #   TargetParameterName.
     #
+    #   If both this parameter and the `TargetLocation:Targets` parameter are
+    #   supplied, `TargetLocation:Targets` takes precedence.
+    #
     # @option params [Array<Hash>] :target_maps
     #   A key-value mapping of document parameters to target resources. Both
     #   Targets and TargetMaps can't be specified together.
@@ -10226,6 +10879,9 @@ module Aws::SSM
     #   You can specify a number, such as 10, or a percentage, such as 10%.
     #   The default value is `10`.
     #
+    #   If both this parameter and the `TargetLocation:TargetsMaxConcurrency`
+    #   are supplied, `TargetLocation:TargetsMaxConcurrency` takes precedence.
+    #
     # @option params [String] :max_errors
     #   The number of errors that are allowed before the system stops running
     #   the automation on additional targets. You can specify either an
@@ -10244,14 +10900,17 @@ module Aws::SSM
     #   max-errors failed executions, set max-concurrency to 1 so the
     #   executions proceed one at a time.
     #
+    #   If this parameter and the `TargetLocation:TargetsMaxErrors` parameter
+    #   are both supplied, `TargetLocation:TargetsMaxErrors` takes precedence.
+    #
     # @option params [Array<Types::TargetLocation>] :target_locations
     #   A location is a combination of Amazon Web Services Regions and/or
     #   Amazon Web Services accounts where you want to run the automation. Use
     #   this operation to start an automation in multiple Amazon Web Services
     #   Regions and multiple Amazon Web Services accounts. For more
-    #   information, see [Running Automation workflows in multiple Amazon Web
-    #   Services Regions and Amazon Web Services accounts][1] in the *Amazon
-    #   Web Services Systems Manager User Guide*.
+    #   information, see [Running automations in multiple Amazon Web Services
+    #   Regions and accounts][1] in the *Amazon Web Services Systems Manager
+    #   User Guide*.
     #
     #
     #
@@ -10269,14 +10928,22 @@ module Aws::SSM
     #
     #   * `Key=OS,Value=Windows`
     #
-    #   <note markdown="1"> To add tags to an existing automation, use the AddTagsToResource
-    #   operation.
+    #   <note markdown="1"> The `Array Members` maximum value is reported as 1000. This number
+    #   includes capacity reserved for internal operations. When calling the
+    #   `StartAutomationExecution` action, you can specify a maximum of 5
+    #   tags. You can, however, use the AddTagsToResource action to add up to
+    #   a total of 50 tags to an existing automation configuration.
     #
     #    </note>
     #
     # @option params [Types::AlarmConfiguration] :alarm_configuration
     #   The CloudWatch alarm you want to apply to your automation.
     #
+    # @option params [String] :target_locations_url
+    #   Specify a publicly accessible URL for a file that contains the
+    #   `TargetLocations` body. Currently, only files in presigned Amazon S3
+    #   buckets are supported.
+    #
     # @return [Types::StartAutomationExecutionResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::StartAutomationExecutionResult#automation_execution_id #automation_execution_id} => String
@@ -10320,6 +10987,16 @@ module Aws::SSM
     #             },
     #           ],
     #         },
+    #         include_child_organization_units: false,
+    #         exclude_accounts: ["ExcludeAccount"],
+    #         targets: [
+    #           {
+    #             key: "TargetKey",
+    #             values: ["TargetValue"],
+    #           },
+    #         ],
+    #         targets_max_concurrency: "MaxConcurrency",
+    #         targets_max_errors: "MaxErrors",
     #       },
     #     ],
     #     tags: [
@@ -10336,6 +11013,7 @@ module Aws::SSM
     #         },
     #       ],
     #     },
+    #     target_locations_url: "TargetLocationsURL",
     #   })
     #
     # @example Response structure
@@ -10423,6 +11101,14 @@ module Aws::SSM
     #
     #   * `Key=Region,Value=us-east-2`
     #
+    #   <note markdown="1"> The `Array Members` maximum value is reported as 1000. This number
+    #   includes capacity reserved for internal operations. When calling the
+    #   `StartChangeRequestExecution` action, you can specify a maximum of 5
+    #   tags. You can, however, use the AddTagsToResource action to add up to
+    #   a total of 50 tags to an existing change request configuration.
+    #
+    #    </note>
+    #
     # @option params [Time,DateTime,Date,Integer,String] :scheduled_end_time
     #   The time that the requester expects the runbook workflow related to
     #   the change request to complete. The time is an estimate only that the
@@ -10485,6 +11171,16 @@ module Aws::SSM
     #                 },
     #               ],
     #             },
+    #             include_child_organization_units: false,
+    #             exclude_accounts: ["ExcludeAccount"],
+    #             targets: [
+    #               {
+    #                 key: "TargetKey",
+    #                 values: ["TargetValue"],
+    #               },
+    #             ],
+    #             targets_max_concurrency: "MaxConcurrency",
+    #             targets_max_errors: "MaxErrors",
     #           },
     #         ],
     #       },
@@ -10512,6 +11208,107 @@ module Aws::SSM
       req.send_request(options)
     end
 
+    # Initiates the process of creating a preview showing the effects that
+    # running a specified Automation runbook would have on the targeted
+    # resources.
+    #
+    # @option params [required, String] :document_name
+    #   The name of the Automation runbook to run. The result of the execution
+    #   preview indicates what the impact would be of running this runbook.
+    #
+    # @option params [String] :document_version
+    #   The version of the Automation runbook to run. The default value is
+    #   `$DEFAULT`.
+    #
+    # @option params [Types::ExecutionInputs] :execution_inputs
+    #   Information about the inputs that can be specified for the preview
+    #   operation.
+    #
+    # @return [Types::StartExecutionPreviewResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::StartExecutionPreviewResponse#execution_preview_id #execution_preview_id} => String
+    #
+    #
+    # @example Example: StartExecutionPreview
+    #
+    #   # This example illustrates one usage of StartExecutionPreview
+    #
+    #   resp = client.start_execution_preview({
+    #     document_name: "AWS-StartEC2Instance", 
+    #   })
+    #
+    #   resp.to_h outputs the following:
+    #   {
+    #     execution_preview_id: "2f27d6e5-9676-4708-b8bd-aef0ab47bb26", 
+    #   }
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.start_execution_preview({
+    #     document_name: "DocumentName", # required
+    #     document_version: "DocumentVersion",
+    #     execution_inputs: {
+    #       automation: {
+    #         parameters: {
+    #           "AutomationParameterKey" => ["AutomationParameterValue"],
+    #         },
+    #         target_parameter_name: "AutomationParameterKey",
+    #         targets: [
+    #           {
+    #             key: "TargetKey",
+    #             values: ["TargetValue"],
+    #           },
+    #         ],
+    #         target_maps: [
+    #           {
+    #             "TargetMapKey" => ["TargetMapValue"],
+    #           },
+    #         ],
+    #         target_locations: [
+    #           {
+    #             accounts: ["Account"],
+    #             regions: ["Region"],
+    #             target_location_max_concurrency: "MaxConcurrency",
+    #             target_location_max_errors: "MaxErrors",
+    #             execution_role_name: "ExecutionRoleName",
+    #             target_location_alarm_configuration: {
+    #               ignore_poll_alarm_failure: false,
+    #               alarms: [ # required
+    #                 {
+    #                   name: "AlarmName", # required
+    #                 },
+    #               ],
+    #             },
+    #             include_child_organization_units: false,
+    #             exclude_accounts: ["ExcludeAccount"],
+    #             targets: [
+    #               {
+    #                 key: "TargetKey",
+    #                 values: ["TargetValue"],
+    #               },
+    #             ],
+    #             targets_max_concurrency: "MaxConcurrency",
+    #             targets_max_errors: "MaxErrors",
+    #           },
+    #         ],
+    #         target_locations_url: "TargetLocationsURL",
+    #       },
+    #     },
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.execution_preview_id #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ssm-2014-11-06/StartExecutionPreview AWS API Documentation
+    #
+    # @overload start_execution_preview(params = {})
+    # @param [Hash] params ({})
+    def start_execution_preview(params = {}, options = {})
+      req = build_request(:start_execution_preview, params)
+      req.send_request(options)
+    end
+
     # Initiates a connection to a target (for example, a managed node) for a
     # Session Manager session. Returns a URL and token that can be used to
     # open a WebSocket connection for sending input and receiving outputs.
@@ -10555,7 +11352,13 @@ module Aws::SSM
     #
     # @option params [Hash<String,Array>] :parameters
     #   The values you want to specify for the parameters defined in the
-    #   Session document.
+    #   Session document. For more information about these parameters, see
+    #   [Create a Session Manager preferences document][1] in the *Amazon Web
+    #   Services Systems Manager User Guide*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/getting-started-create-preferences-cli.html
     #
     # @return [Types::StartSessionResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
@@ -10722,9 +11525,9 @@ module Aws::SSM
     #
     # @option params [Hash<String,Array>] :parameters
     #   The parameters you want to update for the association. If you create a
-    #   parameter using Parameter Store, a capability of Amazon Web Services
-    #   Systems Manager, you can reference the parameter using
-    #   `\{\{ssm:parameter-name\}\}`.
+    #   parameter using Parameter Store, a tool in Amazon Web Services Systems
+    #   Manager, you can reference the parameter using
+    #   `{{ssm:parameter-name}}`.
     #
     # @option params [String] :document_version
     #   The document version you want update for the association.
@@ -10782,7 +11585,7 @@ module Aws::SSM
     #   Choose the parameter that will define how your automation will branch
     #   out. This target is required for associations that use an Automation
     #   runbook and target resources by using rate controls. Automation is a
-    #   capability of Amazon Web Services Systems Manager.
+    #   tool in Amazon Web Services Systems Manager.
     #
     # @option params [String] :max_errors
     #   The number of errors that are allowed before the system stops sending
@@ -10826,8 +11629,8 @@ module Aws::SSM
     #
     #   In `MANUAL` mode, you must specify the `AssociationId` as a parameter
     #   for the PutComplianceItems API operation. In this case, compliance
-    #   data isn't managed by State Manager, a capability of Amazon Web
-    #   Services Systems Manager. It is managed by your direct call to the
+    #   data isn't managed by State Manager, a tool in Amazon Web Services
+    #   Systems Manager. It is managed by your direct call to the
     #   PutComplianceItems API operation.
     #
     #   By default, all associations use `AUTO` mode.
@@ -10835,32 +11638,43 @@ module Aws::SSM
     # @option params [Boolean] :apply_only_at_cron_interval
     #   By default, when you update an association, the system runs it
     #   immediately after it is updated and then according to the schedule you
-    #   specified. Specify this option if you don't want an association to
-    #   run immediately after you update it. This parameter isn't supported
-    #   for rate expressions.
+    #   specified. Specify `true` for `ApplyOnlyAtCronInterval` if you want
+    #   the association to run only according to the schedule you specified.
     #
     #   If you chose this option when you created an association and later you
-    #   edit that association or you make changes to the SSM document on which
-    #   that association is based (by using the Documents page in the
-    #   console), State Manager applies the association at the next specified
-    #   cron interval. For example, if you chose the `Latest` version of an
-    #   SSM document when you created an association and you edit the
-    #   association by choosing a different document version on the Documents
-    #   page, State Manager applies the association at the next specified cron
-    #   interval if you previously selected this option. If this option
-    #   wasn't selected, State Manager immediately runs the association.
-    #
-    #   You can reset this option. To do so, specify the
+    #   edit that association or you make changes to the Automation runbook or
+    #   SSM document on which that association is based, State Manager applies
+    #   the association at the next specified cron interval. For example, if
+    #   you chose the `Latest` version of an SSM document when you created an
+    #   association and you edit the association by choosing a different
+    #   document version on the Documents page, State Manager applies the
+    #   association at the next specified cron interval if you previously set
+    #   `ApplyOnlyAtCronInterval` to `true`. If this option wasn't selected,
+    #   State Manager immediately runs the association.
+    #
+    #   For more information, see [Understanding when associations are applied
+    #   to resources][1] and [About target updates with Automation
+    #   runbooks][2] in the *Amazon Web Services Systems Manager User Guide*.
+    #
+    #   This parameter isn't supported for rate expressions.
+    #
+    #   You can reset this parameter. To do so, specify the
     #   `no-apply-only-at-cron-interval` parameter when you update the
     #   association from the command line. This parameter forces the
     #   association to run immediately after updating it and according to the
     #   interval specified.
     #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/state-manager-about.html#state-manager-about-scheduling
+    #   [2]: https://docs.aws.amazon.com/systems-manager/latest/userguide/state-manager-about.html#runbook-target-updates
+    #
     # @option params [Array<String>] :calendar_names
     #   The names or Amazon Resource Names (ARNs) of the Change Calendar type
     #   documents you want to gate your associations under. The associations
     #   only run when that change calendar is open. For more information, see
-    #   [Amazon Web Services Systems Manager Change Calendar][1].
+    #   [Amazon Web Services Systems Manager Change Calendar][1] in the
+    #   *Amazon Web Services Systems Manager User Guide*.
     #
     #
     #
@@ -10968,6 +11782,16 @@ module Aws::SSM
     #             },
     #           ],
     #         },
+    #         include_child_organization_units: false,
+    #         exclude_accounts: ["ExcludeAccount"],
+    #         targets: [
+    #           {
+    #             key: "TargetKey",
+    #             values: ["TargetValue"],
+    #           },
+    #         ],
+    #         targets_max_concurrency: "MaxConcurrency",
+    #         targets_max_errors: "MaxErrors",
     #       },
     #     ],
     #     schedule_offset: 1,
@@ -11037,6 +11861,15 @@ module Aws::SSM
     #   resp.association_description.target_locations[0].target_location_alarm_configuration.ignore_poll_alarm_failure #=> Boolean
     #   resp.association_description.target_locations[0].target_location_alarm_configuration.alarms #=> Array
     #   resp.association_description.target_locations[0].target_location_alarm_configuration.alarms[0].name #=> String
+    #   resp.association_description.target_locations[0].include_child_organization_units #=> Boolean
+    #   resp.association_description.target_locations[0].exclude_accounts #=> Array
+    #   resp.association_description.target_locations[0].exclude_accounts[0] #=> String
+    #   resp.association_description.target_locations[0].targets #=> Array
+    #   resp.association_description.target_locations[0].targets[0].key #=> String
+    #   resp.association_description.target_locations[0].targets[0].values #=> Array
+    #   resp.association_description.target_locations[0].targets[0].values[0] #=> String
+    #   resp.association_description.target_locations[0].targets_max_concurrency #=> String
+    #   resp.association_description.target_locations[0].targets_max_errors #=> String
     #   resp.association_description.schedule_offset #=> Integer
     #   resp.association_description.duration #=> Integer
     #   resp.association_description.target_maps #=> Array
@@ -11143,6 +11976,15 @@ module Aws::SSM
     #   resp.association_description.target_locations[0].target_location_alarm_configuration.ignore_poll_alarm_failure #=> Boolean
     #   resp.association_description.target_locations[0].target_location_alarm_configuration.alarms #=> Array
     #   resp.association_description.target_locations[0].target_location_alarm_configuration.alarms[0].name #=> String
+    #   resp.association_description.target_locations[0].include_child_organization_units #=> Boolean
+    #   resp.association_description.target_locations[0].exclude_accounts #=> Array
+    #   resp.association_description.target_locations[0].exclude_accounts[0] #=> String
+    #   resp.association_description.target_locations[0].targets #=> Array
+    #   resp.association_description.target_locations[0].targets[0].key #=> String
+    #   resp.association_description.target_locations[0].targets[0].values #=> Array
+    #   resp.association_description.target_locations[0].targets[0].values[0] #=> String
+    #   resp.association_description.target_locations[0].targets_max_concurrency #=> String
+    #   resp.association_description.target_locations[0].targets_max_errors #=> String
     #   resp.association_description.schedule_offset #=> Integer
     #   resp.association_description.duration #=> Integer
     #   resp.association_description.target_maps #=> Array
@@ -11251,7 +12093,7 @@ module Aws::SSM
     #   resp.document_description.parameters[0].default_value #=> String
     #   resp.document_description.platform_types #=> Array
     #   resp.document_description.platform_types[0] #=> String, one of "Windows", "Linux", "MacOS"
-    #   resp.document_description.document_type #=> String, one of "Command", "Policy", "Automation", "Session", "Package", "ApplicationConfiguration", "ApplicationConfigurationSchema", "DeploymentStrategy", "ChangeCalendar", "Automation.ChangeTemplate", "ProblemAnalysis", "ProblemAnalysisTemplate", "CloudFormation", "ConformancePackTemplate", "QuickSetup"
+    #   resp.document_description.document_type #=> String, one of "Command", "Policy", "Automation", "Session", "Package", "ApplicationConfiguration", "ApplicationConfigurationSchema", "DeploymentStrategy", "ChangeCalendar", "Automation.ChangeTemplate", "ProblemAnalysis", "ProblemAnalysisTemplate", "CloudFormation", "ConformancePackTemplate", "QuickSetup", "ManualApprovalPolicy", "AutoApprovalPolicy"
     #   resp.document_description.schema_version #=> String
     #   resp.document_description.latest_version #=> String
     #   resp.document_description.default_version #=> String
@@ -11691,7 +12533,7 @@ module Aws::SSM
     #   creating a custom policy and custom service role for running your
     #   maintenance window tasks. The policy can be crafted to provide only
     #   the permissions needed for your particular maintenance window tasks.
-    #   For more information, see [Setting up maintenance windows][1] in the
+    #   For more information, see [Setting up Maintenance Windows][1] in the
     #   in the *Amazon Web Services Systems Manager User Guide*.
     #
     #
@@ -11817,7 +12659,6 @@ module Aws::SSM
     #       command associated with the task. However, there is no guarantee
     #       that the command will be terminated and the underlying process
     #       stopped.
-    #
     #     The status for tasks that are not completed is `TIMED_OUT`.
     #
     # @option params [Types::AlarmConfiguration] :alarm_configuration
@@ -11995,9 +12836,9 @@ module Aws::SSM
     #   want to assign to the managed node. This IAM role must provide
     #   AssumeRole permissions for the Amazon Web Services Systems Manager
     #   service principal `ssm.amazonaws.com`. For more information, see
-    #   [Create an IAM service role for a hybrid and multicloud
-    #   environment][1] in the *Amazon Web Services Systems Manager User
-    #   Guide*.
+    #   [Create the IAM service role required for Systems Manager in hybrid
+    #   and multicloud environments][1] in the *Amazon Web Services Systems
+    #   Manager User Guide*.
     #
     #   <note markdown="1"> You can't specify an IAM service-linked role for this parameter. You
     #   must create a unique role.
@@ -12006,7 +12847,7 @@ module Aws::SSM
     #
     #
     #
-    #   [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/sysman-service-role.html
+    #   [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/hybrid-multicloud-service-role.html
     #
     # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
     #
@@ -12097,9 +12938,8 @@ module Aws::SSM
     #   impacted resource.
     #
     # @option params [String] :status
-    #   The OpsItem status. Status can be `Open`, `In Progress`, or
-    #   `Resolved`. For more information, see [Editing OpsItem details][1] in
-    #   the *Amazon Web Services Systems Manager User Guide*.
+    #   The OpsItem status. For more information, see [Editing OpsItem
+    #   details][1] in the *Amazon Web Services Systems Manager User Guide*.
     #
     #
     #
@@ -12162,7 +13002,7 @@ module Aws::SSM
     #         ops_item_id: "String", # required
     #       },
     #     ],
-    #     status: "Open", # accepts Open, InProgress, Resolved, Pending, TimedOut, Cancelling, Cancelled, Failed, CompletedWithSuccess, CompletedWithFailure, Scheduled, RunbookInProgress, PendingChangeCalendarOverride, ChangeCalendarOverrideApproved, ChangeCalendarOverrideRejected, PendingApproval, Approved, Rejected, Closed
+    #     status: "Open", # accepts Open, InProgress, Resolved, Pending, TimedOut, Cancelling, Cancelled, Failed, CompletedWithSuccess, CompletedWithFailure, Scheduled, RunbookInProgress, PendingChangeCalendarOverride, ChangeCalendarOverrideApproved, ChangeCalendarOverrideRejected, PendingApproval, Approved, Revoked, Rejected, Closed
     #     ops_item_id: "OpsItemId", # required
     #     title: "OpsItemTitle",
     #     category: "OpsItemCategory",
@@ -12241,6 +13081,10 @@ module Aws::SSM
     # @option params [Types::PatchFilterGroup] :global_filters
     #   A set of global filters used to include patches in the baseline.
     #
+    #   The `GlobalFilters` parameter can be configured only by using the CLI
+    #   or an Amazon Web Services SDK. It can't be configured from the Patch
+    #   Manager console, and its value isn't displayed in the console.
+    #
     # @option params [Types::PatchRuleGroup] :approval_rules
     #   A set of rules used to include patches in the baseline.
     #
@@ -12248,7 +13092,7 @@ module Aws::SSM
     #   A list of explicitly approved patches for the baseline.
     #
     #   For information about accepted formats for lists of approved patches
-    #   and rejected patches, see [About package name formats for approved and
+    #   and rejected patches, see [Package name formats for approved and
     #   rejected patch lists][1] in the *Amazon Web Services Systems Manager
     #   User Guide*.
     #
@@ -12268,7 +13112,7 @@ module Aws::SSM
     #   A list of explicitly rejected patches for the baseline.
     #
     #   For information about accepted formats for lists of approved patches
-    #   and rejected patches, see [About package name formats for approved and
+    #   and rejected patches, see [Package name formats for approved and
     #   rejected patch lists][1] in the *Amazon Web Services Systems Manager
     #   User Guide*.
     #
@@ -12280,19 +13124,28 @@ module Aws::SSM
     #   The action for Patch Manager to take on patches included in the
     #   `RejectedPackages` list.
     #
-    #   * <b> <code>ALLOW_AS_DEPENDENCY</code> </b>: A package in the
-    #     `Rejected` patches list is installed only if it is a dependency of
-    #     another package. It is considered compliant with the patch baseline,
-    #     and its status is reported as `InstalledOther`. This is the default
-    #     action if no option is specified.
+    #   ALLOW\_AS\_DEPENDENCY
+    #
+    #   : **Linux and macOS**: A package in the rejected patches list is
+    #     installed only if it is a dependency of another package. It is
+    #     considered compliant with the patch baseline, and its status is
+    #     reported as `INSTALLED_OTHER`. This is the default action if no
+    #     option is specified.
+    #
+    #     **Windows Server**: Windows Server doesn't support the concept of
+    #     package dependencies. If a package in the rejected patches list and
+    #     already installed on the node, its status is reported as
+    #     `INSTALLED_OTHER`. Any package not already installed on the node is
+    #     skipped. This is the default action if no option is specified.
     #
-    #   * **BLOCK**: Packages in the **Rejected patches** list, and packages
+    #   BLOCK
+    #
+    #   : **All OSs**: Packages in the rejected patches list, and packages
     #     that include them as dependencies, aren't installed by Patch
     #     Manager under any circumstances. If a package was installed before
-    #     it was added to the **Rejected patches** list, or is installed
-    #     outside of Patch Manager afterward, it's considered noncompliant
-    #     with the patch baseline and its status is reported as
-    #     *InstalledRejected*.
+    #     it was added to the rejected patches list, or is installed outside
+    #     of Patch Manager afterward, it's considered noncompliant with the
+    #     patch baseline and its status is reported as `INSTALLED_REJECTED`.
     #
     # @option params [String] :description
     #   A description of the patch baseline.
@@ -12302,6 +13155,20 @@ module Aws::SSM
     #   including target operating systems and source repositories. Applies to
     #   Linux managed nodes only.
     #
+    # @option params [String] :available_security_updates_compliance_status
+    #   Indicates the status to be assigned to security patches that are
+    #   available but not approved because they don't meet the installation
+    #   criteria specified in the patch baseline.
+    #
+    #   Example scenario: Security patches that you might want installed can
+    #   be skipped if you have specified a long period to wait after a patch
+    #   is released before installation. If an update to the patch is released
+    #   during your specified waiting period, the waiting period for
+    #   installing the patch starts over. If the waiting period is too long,
+    #   multiple versions of the patch could be released but never installed.
+    #
+    #   Supported for Windows Server managed nodes only.
+    #
     # @option params [Boolean] :replace
     #   If True, then all fields that are required by the CreatePatchBaseline
     #   operation are also required for this API request. Optional fields that
@@ -12323,6 +13190,7 @@ module Aws::SSM
     #   * {Types::UpdatePatchBaselineResult#modified_date #modified_date} => Time
     #   * {Types::UpdatePatchBaselineResult#description #description} => String
     #   * {Types::UpdatePatchBaselineResult#sources #sources} => Array&lt;Types::PatchSource&gt;
+    #   * {Types::UpdatePatchBaselineResult#available_security_updates_compliance_status #available_security_updates_compliance_status} => String
     #
     # @example Request syntax with placeholder values
     #
@@ -12368,6 +13236,7 @@ module Aws::SSM
     #         configuration: "PatchSourceConfiguration", # required
     #       },
     #     ],
+    #     available_security_updates_compliance_status: "COMPLIANT", # accepts COMPLIANT, NON_COMPLIANT
     #     replace: false,
     #   })
     #
@@ -12404,6 +13273,7 @@ module Aws::SSM
     #   resp.sources[0].products #=> Array
     #   resp.sources[0].products[0] #=> String
     #   resp.sources[0].configuration #=> String
+    #   resp.available_security_updates_compliance_status #=> String, one of "COMPLIANT", "NON_COMPLIANT"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ssm-2014-11-06/UpdatePatchBaseline AWS API Documentation
     #
@@ -12494,16 +13364,20 @@ module Aws::SSM
     #   `arn:aws:ssm:us-east-1:111122223333:servicesetting/ssm/parameter-store/high-throughput-enabled`.
     #   The setting ID can be one of the following.
     #
-    #   * `/ssm/managed-instance/default-ec2-instance-management-role`
+    #   * `/ssm/appmanager/appmanager-enabled`
     #
     #   * `/ssm/automation/customer-script-log-destination`
     #
     #   * `/ssm/automation/customer-script-log-group-name`
     #
+    #   * /ssm/automation/enable-adaptive-concurrency
+    #
     #   * `/ssm/documents/console/public-sharing-permission`
     #
     #   * `/ssm/managed-instance/activation-tier`
     #
+    #   * `/ssm/managed-instance/default-ec2-instance-management-role`
+    #
     #   * `/ssm/opsinsights/opscenter`
     #
     #   * `/ssm/parameter-store/default-parameter-tier`
@@ -12522,8 +13396,7 @@ module Aws::SSM
     #   The new value to specify for the service setting. The following list
     #   specifies the available values for each setting.
     #
-    #   * For `/ssm/managed-instance/default-ec2-instance-management-role`,
-    #     enter the name of an IAM role.
+    #   * For `/ssm/appmanager/appmanager-enabled`, enter `True` or `False`.
     #
     #   * For `/ssm/automation/customer-script-log-destination`, enter
     #     `CloudWatch`.
@@ -12537,6 +13410,9 @@ module Aws::SSM
     #   * For `/ssm/managed-instance/activation-tier`, enter `standard` or
     #     `advanced`.
     #
+    #   * For `/ssm/managed-instance/default-ec2-instance-management-role`,
+    #     enter the name of an IAM role.
+    #
     #   * For `/ssm/opsinsights/opscenter`, enter `Enabled` or `Disabled`.
     #
     #   * For `/ssm/parameter-store/default-parameter-tier`, enter `Standard`,
@@ -12569,14 +13445,19 @@ module Aws::SSM
     # @api private
     def build_request(operation_name, params = {})
       handlers = @handlers.for(operation_name)
+      tracer = config.telemetry_provider.tracer_provider.tracer(
+        Aws::Telemetry.module_to_tracer_name('Aws::SSM')
+      )
       context = Seahorse::Client::RequestContext.new(
         operation_name: operation_name,
         operation: config.api.operation(operation_name),
         client: self,
         params: params,
-        config: config)
+        config: config,
+        tracer: tracer
+      )
       context[:gem_name] = 'aws-sdk-ssm'
-      context[:gem_version] = '1.173.0'
+      context[:gem_version] = '1.197.0'
       Seahorse::Client::Request.new(handlers, context)
     end