aws-sdk-ssm 1.192.0 → 1.193.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 6b392c9f39b462f9232bf07b416e09ddc1f864a90813afdf24489e2c02084953
-  data.tar.gz: 86e0fcc4a634784174b93e8e9761fcd42385b9659f3565b4e49a98fa544880c7
+  metadata.gz: d67c8d163adf40a5061905786654e7ae1e867820de5cdfdb4ca932350d648a23
+  data.tar.gz: 2210b47d591cb0a59abf0415fae41adc998e8d98692928b700036741bc1ea52f
 SHA512:
-  metadata.gz: 28969f382a189fbb73c78319bb941f9b6f6f414cd3727a06796559588d220e1829fbc10f19b109a5c82d422416e83ec2f68ba0e706c2a274eb42206d57df13f5
-  data.tar.gz: 47be473f1547beadffd6487ae69ac945cbcc7c1cb596647c402177614897d47f03c2225b1a2fc88962ddb418c3f989076245c37e7b9e1f2c2d0b62a96afcb3d6
+  metadata.gz: 5ecb334953eb771f9a1f773ad30158bcde0aabe89e5e3858597c6402d31ccb1d1799f0e10065fede8110297d793cd23e01c501e46ebdd401a8c89dd93f3b0584
+  data.tar.gz: 1cb0e57e68ef91960d2e24c962eda8af4770c2fadf1d53d1962a5ec6023d87591e263e2013fa8d4bab020db0d4a9ceca7cb54f6a3b8f9d4e9ec9a04f9663198c

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.193.0 (2025-04-29)
+------------------
+
+* Feature - This release adds support for just-In-time node access in AWS Systems Manager. Just-in-time node access enables customers to move towards zero standing privileges by requiring operators to request access and obtain approval before remotely connecting to nodes managed by the SSM Agent.
+
 1.192.0 (2025-03-24)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.192.0
+1.193.0

data/lib/aws-sdk-ssm/client.rb

@@ -1611,7 +1611,7 @@ module Aws::SSM
     #     name: "DocumentName", # required
     #     display_name: "DocumentDisplayName",
     #     version_name: "DocumentVersionName",
-    #     document_type: "Command", # accepts Command, Policy, Automation, Session, Package, ApplicationConfiguration, ApplicationConfigurationSchema, DeploymentStrategy, ChangeCalendar, Automation.ChangeTemplate, ProblemAnalysis, ProblemAnalysisTemplate, CloudFormation, ConformancePackTemplate, QuickSetup
+    #     document_type: "Command", # accepts Command, Policy, Automation, Session, Package, ApplicationConfiguration, ApplicationConfigurationSchema, DeploymentStrategy, ChangeCalendar, Automation.ChangeTemplate, ProblemAnalysis, ProblemAnalysisTemplate, CloudFormation, ConformancePackTemplate, QuickSetup, ManualApprovalPolicy, AutoApprovalPolicy
     #     document_format: "YAML", # accepts YAML, JSON, TEXT
     #     target_type: "TargetType",
     #     tags: [
@@ -1643,7 +1643,7 @@ module Aws::SSM
     #   resp.document_description.parameters[0].default_value #=> String
     #   resp.document_description.platform_types #=> Array
     #   resp.document_description.platform_types[0] #=> String, one of "Windows", "Linux", "MacOS"
-    #   resp.document_description.document_type #=> String, one of "Command", "Policy", "Automation", "Session", "Package", "ApplicationConfiguration", "ApplicationConfigurationSchema", "DeploymentStrategy", "ChangeCalendar", "Automation.ChangeTemplate", "ProblemAnalysis", "ProblemAnalysisTemplate", "CloudFormation", "ConformancePackTemplate", "QuickSetup"
+    #   resp.document_description.document_type #=> String, one of "Command", "Policy", "Automation", "Session", "Package", "ApplicationConfiguration", "ApplicationConfigurationSchema", "DeploymentStrategy", "ChangeCalendar", "Automation.ChangeTemplate", "ProblemAnalysis", "ProblemAnalysisTemplate", "CloudFormation", "ConformancePackTemplate", "QuickSetup", "ManualApprovalPolicy", "AutoApprovalPolicy"
     #   resp.document_description.schema_version #=> String
     #   resp.document_description.latest_version #=> String
     #   resp.document_description.default_version #=> String
@@ -3397,7 +3397,7 @@ module Aws::SSM
     #   resp.automation_execution_metadata_list[0].triggered_alarms[0].name #=> String
     #   resp.automation_execution_metadata_list[0].triggered_alarms[0].state #=> String, one of "UNKNOWN", "ALARM"
     #   resp.automation_execution_metadata_list[0].target_locations_url #=> String
-    #   resp.automation_execution_metadata_list[0].automation_subtype #=> String, one of "ChangeRequest"
+    #   resp.automation_execution_metadata_list[0].automation_subtype #=> String, one of "ChangeRequest", "AccessRequest"
     #   resp.automation_execution_metadata_list[0].scheduled_time #=> Time
     #   resp.automation_execution_metadata_list[0].runbooks #=> Array
     #   resp.automation_execution_metadata_list[0].runbooks[0].document_name #=> String
@@ -3787,7 +3787,7 @@ module Aws::SSM
     #   resp.document.parameters[0].default_value #=> String
     #   resp.document.platform_types #=> Array
     #   resp.document.platform_types[0] #=> String, one of "Windows", "Linux", "MacOS"
-    #   resp.document.document_type #=> String, one of "Command", "Policy", "Automation", "Session", "Package", "ApplicationConfiguration", "ApplicationConfigurationSchema", "DeploymentStrategy", "ChangeCalendar", "Automation.ChangeTemplate", "ProblemAnalysis", "ProblemAnalysisTemplate", "CloudFormation", "ConformancePackTemplate", "QuickSetup"
+    #   resp.document.document_type #=> String, one of "Command", "Policy", "Automation", "Session", "Package", "ApplicationConfiguration", "ApplicationConfigurationSchema", "DeploymentStrategy", "ChangeCalendar", "Automation.ChangeTemplate", "ProblemAnalysis", "ProblemAnalysisTemplate", "CloudFormation", "ConformancePackTemplate", "QuickSetup", "ManualApprovalPolicy", "AutoApprovalPolicy"
     #   resp.document.schema_version #=> String
     #   resp.document.latest_version #=> String
     #   resp.document.default_version #=> String
@@ -5194,7 +5194,7 @@ module Aws::SSM
     #   resp = client.describe_ops_items({
     #     ops_item_filters: [
     #       {
-    #         key: "Status", # required, accepts Status, CreatedBy, Source, Priority, Title, OpsItemId, CreatedTime, LastModifiedTime, ActualStartTime, ActualEndTime, PlannedStartTime, PlannedEndTime, OperationalData, OperationalDataKey, OperationalDataValue, ResourceId, AutomationId, Category, Severity, OpsItemType, ChangeRequestByRequesterArn, ChangeRequestByRequesterName, ChangeRequestByApproverArn, ChangeRequestByApproverName, ChangeRequestByTemplate, ChangeRequestByTargetsResourceGroup, InsightByType, AccountId
+    #         key: "Status", # required, accepts Status, CreatedBy, Source, Priority, Title, OpsItemId, CreatedTime, LastModifiedTime, ActualStartTime, ActualEndTime, PlannedStartTime, PlannedEndTime, OperationalData, OperationalDataKey, OperationalDataValue, ResourceId, AutomationId, Category, Severity, OpsItemType, AccessRequestByRequesterArn, AccessRequestByRequesterId, AccessRequestByApproverArn, AccessRequestByApproverId, AccessRequestBySourceAccountId, AccessRequestBySourceOpsItemId, AccessRequestBySourceRegion, AccessRequestByIsReplica, AccessRequestByTargetResourceId, ChangeRequestByRequesterArn, ChangeRequestByRequesterName, ChangeRequestByApproverArn, ChangeRequestByApproverName, ChangeRequestByTemplate, ChangeRequestByTargetsResourceGroup, InsightByType, AccountId
     #         values: ["OpsItemFilterValue"], # required
     #         operator: "Equal", # required, accepts Equal, Contains, GreaterThan, LessThan
     #       },
@@ -5213,7 +5213,7 @@ module Aws::SSM
     #   resp.ops_item_summaries[0].last_modified_time #=> Time
     #   resp.ops_item_summaries[0].priority #=> Integer
     #   resp.ops_item_summaries[0].source #=> String
-    #   resp.ops_item_summaries[0].status #=> String, one of "Open", "InProgress", "Resolved", "Pending", "TimedOut", "Cancelling", "Cancelled", "Failed", "CompletedWithSuccess", "CompletedWithFailure", "Scheduled", "RunbookInProgress", "PendingChangeCalendarOverride", "ChangeCalendarOverrideApproved", "ChangeCalendarOverrideRejected", "PendingApproval", "Approved", "Rejected", "Closed"
+    #   resp.ops_item_summaries[0].status #=> String, one of "Open", "InProgress", "Resolved", "Pending", "TimedOut", "Cancelling", "Cancelled", "Failed", "CompletedWithSuccess", "CompletedWithFailure", "Scheduled", "RunbookInProgress", "PendingChangeCalendarOverride", "ChangeCalendarOverrideApproved", "ChangeCalendarOverrideRejected", "PendingApproval", "Approved", "Revoked", "Rejected", "Closed"
     #   resp.ops_item_summaries[0].ops_item_id #=> String
     #   resp.ops_item_summaries[0].title #=> String
     #   resp.ops_item_summaries[0].operational_data #=> Hash
@@ -5737,6 +5737,39 @@ module Aws::SSM
       req.send_request(options)
     end
 
+    # Returns a credentials set to be used with just-in-time node access.
+    #
+    # @option params [required, String] :access_request_id
+    #   The ID of a just-in-time node access request.
+    #
+    # @return [Types::GetAccessTokenResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::GetAccessTokenResponse#credentials #credentials} => Types::Credentials
+    #   * {Types::GetAccessTokenResponse#access_request_status #access_request_status} => String
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.get_access_token({
+    #     access_request_id: "AccessRequestId", # required
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.credentials.access_key_id #=> String
+    #   resp.credentials.secret_access_key #=> String
+    #   resp.credentials.session_token #=> String
+    #   resp.credentials.expiration_time #=> Time
+    #   resp.access_request_status #=> String, one of "Approved", "Rejected", "Revoked", "Expired", "Pending"
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ssm-2014-11-06/GetAccessToken AWS API Documentation
+    #
+    # @overload get_access_token(params = {})
+    # @param [Hash] params ({})
+    def get_access_token(params = {}, options = {})
+      req = build_request(:get_access_token, params)
+      req.send_request(options)
+    end
+
     # Get detailed information about a particular Automation execution.
     #
     # @option params [required, String] :automation_execution_id
@@ -5884,7 +5917,7 @@ module Aws::SSM
     #   resp.automation_execution.triggered_alarms[0].name #=> String
     #   resp.automation_execution.triggered_alarms[0].state #=> String, one of "UNKNOWN", "ALARM"
     #   resp.automation_execution.target_locations_url #=> String
-    #   resp.automation_execution.automation_subtype #=> String, one of "ChangeRequest"
+    #   resp.automation_execution.automation_subtype #=> String, one of "ChangeRequest", "AccessRequest"
     #   resp.automation_execution.scheduled_time #=> Time
     #   resp.automation_execution.runbooks #=> Array
     #   resp.automation_execution.runbooks[0].document_name #=> String
@@ -6323,7 +6356,7 @@ module Aws::SSM
     #   resp.status #=> String, one of "Creating", "Active", "Updating", "Deleting", "Failed"
     #   resp.status_information #=> String
     #   resp.content #=> String
-    #   resp.document_type #=> String, one of "Command", "Policy", "Automation", "Session", "Package", "ApplicationConfiguration", "ApplicationConfigurationSchema", "DeploymentStrategy", "ChangeCalendar", "Automation.ChangeTemplate", "ProblemAnalysis", "ProblemAnalysisTemplate", "CloudFormation", "ConformancePackTemplate", "QuickSetup"
+    #   resp.document_type #=> String, one of "Command", "Policy", "Automation", "Session", "Package", "ApplicationConfiguration", "ApplicationConfigurationSchema", "DeploymentStrategy", "ChangeCalendar", "Automation.ChangeTemplate", "ProblemAnalysis", "ProblemAnalysisTemplate", "CloudFormation", "ConformancePackTemplate", "QuickSetup", "ManualApprovalPolicy", "AutoApprovalPolicy"
     #   resp.document_format #=> String, one of "YAML", "JSON", "TEXT"
     #   resp.requires #=> Array
     #   resp.requires[0].name #=> String
@@ -6955,7 +6988,7 @@ module Aws::SSM
     #   resp.ops_item.priority #=> Integer
     #   resp.ops_item.related_ops_items #=> Array
     #   resp.ops_item.related_ops_items[0].ops_item_id #=> String
-    #   resp.ops_item.status #=> String, one of "Open", "InProgress", "Resolved", "Pending", "TimedOut", "Cancelling", "Cancelled", "Failed", "CompletedWithSuccess", "CompletedWithFailure", "Scheduled", "RunbookInProgress", "PendingChangeCalendarOverride", "ChangeCalendarOverrideApproved", "ChangeCalendarOverrideRejected", "PendingApproval", "Approved", "Rejected", "Closed"
+    #   resp.ops_item.status #=> String, one of "Open", "InProgress", "Resolved", "Pending", "TimedOut", "Cancelling", "Cancelled", "Failed", "CompletedWithSuccess", "CompletedWithFailure", "Scheduled", "RunbookInProgress", "PendingChangeCalendarOverride", "ChangeCalendarOverrideApproved", "ChangeCalendarOverrideRejected", "PendingApproval", "Approved", "Revoked", "Rejected", "Closed"
     #   resp.ops_item.ops_item_id #=> String
     #   resp.ops_item.version #=> String
     #   resp.ops_item.title #=> String
@@ -8450,7 +8483,7 @@ module Aws::SSM
     #   resp.document_identifiers[0].platform_types #=> Array
     #   resp.document_identifiers[0].platform_types[0] #=> String, one of "Windows", "Linux", "MacOS"
     #   resp.document_identifiers[0].document_version #=> String
-    #   resp.document_identifiers[0].document_type #=> String, one of "Command", "Policy", "Automation", "Session", "Package", "ApplicationConfiguration", "ApplicationConfigurationSchema", "DeploymentStrategy", "ChangeCalendar", "Automation.ChangeTemplate", "ProblemAnalysis", "ProblemAnalysisTemplate", "CloudFormation", "ConformancePackTemplate", "QuickSetup"
+    #   resp.document_identifiers[0].document_type #=> String, one of "Command", "Policy", "Automation", "Session", "Package", "ApplicationConfiguration", "ApplicationConfigurationSchema", "DeploymentStrategy", "ChangeCalendar", "Automation.ChangeTemplate", "ProblemAnalysis", "ProblemAnalysisTemplate", "CloudFormation", "ConformancePackTemplate", "QuickSetup", "ManualApprovalPolicy", "AutoApprovalPolicy"
     #   resp.document_identifiers[0].schema_version #=> String
     #   resp.document_identifiers[0].document_format #=> String, one of "YAML", "JSON", "TEXT"
     #   resp.document_identifiers[0].target_type #=> String
@@ -10447,7 +10480,7 @@ module Aws::SSM
     #
     #   resp = client.send_automation_signal({
     #     automation_execution_id: "AutomationExecutionId", # required
-    #     signal_type: "Approve", # required, accepts Approve, Reject, StartStep, StopStep, Resume
+    #     signal_type: "Approve", # required, accepts Approve, Reject, StartStep, StopStep, Resume, Revoke
     #     payload: {
     #       "AutomationParameterKey" => ["AutomationParameterValue"],
     #     },
@@ -10721,6 +10754,53 @@ module Aws::SSM
       req.send_request(options)
     end
 
+    # Starts the workflow for just-in-time node access sessions.
+    #
+    # @option params [required, String] :reason
+    #   A brief description explaining why you are requesting access to the
+    #   node.
+    #
+    # @option params [required, Array<Types::Target>] :targets
+    #   The node you are requesting access to.
+    #
+    # @option params [Array<Types::Tag>] :tags
+    #   Key-value pairs of metadata you want to assign to the access request.
+    #
+    # @return [Types::StartAccessRequestResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::StartAccessRequestResponse#access_request_id #access_request_id} => String
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.start_access_request({
+    #     reason: "String1to256", # required
+    #     targets: [ # required
+    #       {
+    #         key: "TargetKey",
+    #         values: ["TargetValue"],
+    #       },
+    #     ],
+    #     tags: [
+    #       {
+    #         key: "TagKey", # required
+    #         value: "TagValue", # required
+    #       },
+    #     ],
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.access_request_id #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ssm-2014-11-06/StartAccessRequest AWS API Documentation
+    #
+    # @overload start_access_request(params = {})
+    # @param [Hash] params ({})
+    def start_access_request(params = {}, options = {})
+      req = build_request(:start_access_request, params)
+      req.send_request(options)
+    end
+
     # Runs an association immediately and only one time. This operation can
     # be helpful when troubleshooting associations.
     #
@@ -12007,7 +12087,7 @@ module Aws::SSM
     #   resp.document_description.parameters[0].default_value #=> String
     #   resp.document_description.platform_types #=> Array
     #   resp.document_description.platform_types[0] #=> String, one of "Windows", "Linux", "MacOS"
-    #   resp.document_description.document_type #=> String, one of "Command", "Policy", "Automation", "Session", "Package", "ApplicationConfiguration", "ApplicationConfigurationSchema", "DeploymentStrategy", "ChangeCalendar", "Automation.ChangeTemplate", "ProblemAnalysis", "ProblemAnalysisTemplate", "CloudFormation", "ConformancePackTemplate", "QuickSetup"
+    #   resp.document_description.document_type #=> String, one of "Command", "Policy", "Automation", "Session", "Package", "ApplicationConfiguration", "ApplicationConfigurationSchema", "DeploymentStrategy", "ChangeCalendar", "Automation.ChangeTemplate", "ProblemAnalysis", "ProblemAnalysisTemplate", "CloudFormation", "ConformancePackTemplate", "QuickSetup", "ManualApprovalPolicy", "AutoApprovalPolicy"
     #   resp.document_description.schema_version #=> String
     #   resp.document_description.latest_version #=> String
     #   resp.document_description.default_version #=> String
@@ -12916,7 +12996,7 @@ module Aws::SSM
     #         ops_item_id: "String", # required
     #       },
     #     ],
-    #     status: "Open", # accepts Open, InProgress, Resolved, Pending, TimedOut, Cancelling, Cancelled, Failed, CompletedWithSuccess, CompletedWithFailure, Scheduled, RunbookInProgress, PendingChangeCalendarOverride, ChangeCalendarOverrideApproved, ChangeCalendarOverrideRejected, PendingApproval, Approved, Rejected, Closed
+    #     status: "Open", # accepts Open, InProgress, Resolved, Pending, TimedOut, Cancelling, Cancelled, Failed, CompletedWithSuccess, CompletedWithFailure, Scheduled, RunbookInProgress, PendingChangeCalendarOverride, ChangeCalendarOverrideApproved, ChangeCalendarOverrideRejected, PendingApproval, Approved, Revoked, Rejected, Closed
     #     ops_item_id: "OpsItemId", # required
     #     title: "OpsItemTitle",
     #     category: "OpsItemCategory",
@@ -13371,7 +13451,7 @@ module Aws::SSM
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-ssm'
-      context[:gem_version] = '1.192.0'
+      context[:gem_version] = '1.193.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-ssm/client_api.rb

@@ -14,6 +14,11 @@ module Aws::SSM
 
     include Seahorse::Model
 
+    AccessDeniedException = Shapes::StructureShape.new(name: 'AccessDeniedException')
+    AccessKeyIdType = Shapes::StringShape.new(name: 'AccessKeyIdType')
+    AccessKeySecretType = Shapes::StringShape.new(name: 'AccessKeySecretType')
+    AccessRequestId = Shapes::StringShape.new(name: 'AccessRequestId')
+    AccessRequestStatus = Shapes::StringShape.new(name: 'AccessRequestStatus')
     Account = Shapes::StringShape.new(name: 'Account')
     AccountId = Shapes::StringShape.new(name: 'AccountId')
     AccountIdList = Shapes::ListShape.new(name: 'AccountIdList')
@@ -223,6 +228,7 @@ module Aws::SSM
     CreateResourceDataSyncRequest = Shapes::StructureShape.new(name: 'CreateResourceDataSyncRequest')
     CreateResourceDataSyncResult = Shapes::StructureShape.new(name: 'CreateResourceDataSyncResult')
     CreatedDate = Shapes::TimestampShape.new(name: 'CreatedDate')
+    Credentials = Shapes::StructureShape.new(name: 'Credentials')
     CustomSchemaCountLimitExceededException = Shapes::StructureShape.new(name: 'CustomSchemaCountLimitExceededException')
     DateTime = Shapes::TimestampShape.new(name: 'DateTime')
     DefaultBaseline = Shapes::BooleanShape.new(name: 'DefaultBaseline')
@@ -414,6 +420,8 @@ module Aws::SSM
     FailureDetails = Shapes::StructureShape.new(name: 'FailureDetails')
     Fault = Shapes::StringShape.new(name: 'Fault')
     FeatureNotAvailableException = Shapes::StructureShape.new(name: 'FeatureNotAvailableException')
+    GetAccessTokenRequest = Shapes::StructureShape.new(name: 'GetAccessTokenRequest')
+    GetAccessTokenResponse = Shapes::StructureShape.new(name: 'GetAccessTokenResponse')
     GetAutomationExecutionRequest = Shapes::StructureShape.new(name: 'GetAutomationExecutionRequest')
     GetAutomationExecutionResult = Shapes::StructureShape.new(name: 'GetAutomationExecutionResult')
     GetCalendarStateRequest = Shapes::StructureShape.new(name: 'GetCalendarStateRequest')
@@ -1145,6 +1153,7 @@ module Aws::SSM
     SendAutomationSignalResult = Shapes::StructureShape.new(name: 'SendAutomationSignalResult')
     SendCommandRequest = Shapes::StructureShape.new(name: 'SendCommandRequest')
     SendCommandResult = Shapes::StructureShape.new(name: 'SendCommandResult')
+    ServiceQuotaExceededException = Shapes::StructureShape.new(name: 'ServiceQuotaExceededException')
     ServiceRole = Shapes::StringShape.new(name: 'ServiceRole')
     ServiceSetting = Shapes::StructureShape.new(name: 'ServiceSetting')
     ServiceSettingId = Shapes::StringShape.new(name: 'ServiceSettingId')
@@ -1171,6 +1180,7 @@ module Aws::SSM
     SessionState = Shapes::StringShape.new(name: 'SessionState')
     SessionStatus = Shapes::StringShape.new(name: 'SessionStatus')
     SessionTarget = Shapes::StringShape.new(name: 'SessionTarget')
+    SessionTokenType = Shapes::StringShape.new(name: 'SessionTokenType')
     SeveritySummary = Shapes::StructureShape.new(name: 'SeveritySummary')
     SharedDocumentVersion = Shapes::StringShape.new(name: 'SharedDocumentVersion')
     SignalType = Shapes::StringShape.new(name: 'SignalType')
@@ -1180,6 +1190,8 @@ module Aws::SSM
     SourceType = Shapes::StringShape.new(name: 'SourceType')
     StandardErrorContent = Shapes::StringShape.new(name: 'StandardErrorContent')
     StandardOutputContent = Shapes::StringShape.new(name: 'StandardOutputContent')
+    StartAccessRequestRequest = Shapes::StructureShape.new(name: 'StartAccessRequestRequest')
+    StartAccessRequestResponse = Shapes::StructureShape.new(name: 'StartAccessRequestResponse')
     StartAssociationsOnceRequest = Shapes::StructureShape.new(name: 'StartAssociationsOnceRequest')
     StartAssociationsOnceResult = Shapes::StructureShape.new(name: 'StartAssociationsOnceResult')
     StartAutomationExecutionRequest = Shapes::StructureShape.new(name: 'StartAutomationExecutionRequest')
@@ -1208,6 +1220,7 @@ module Aws::SSM
     StopType = Shapes::StringShape.new(name: 'StopType')
     StreamUrl = Shapes::StringShape.new(name: 'StreamUrl')
     String = Shapes::StringShape.new(name: 'String')
+    String1to256 = Shapes::StringShape.new(name: 'String1to256')
     StringDateTime = Shapes::StringShape.new(name: 'StringDateTime')
     StringList = Shapes::ListShape.new(name: 'StringList')
     SubTypeCountLimitExceededException = Shapes::StructureShape.new(name: 'SubTypeCountLimitExceededException')
@@ -1237,6 +1250,7 @@ module Aws::SSM
     Targets = Shapes::ListShape.new(name: 'Targets')
     TerminateSessionRequest = Shapes::StructureShape.new(name: 'TerminateSessionRequest')
     TerminateSessionResponse = Shapes::StructureShape.new(name: 'TerminateSessionResponse')
+    ThrottlingException = Shapes::StructureShape.new(name: 'ThrottlingException')
     TimeoutSeconds = Shapes::IntegerShape.new(name: 'TimeoutSeconds')
     TokenValue = Shapes::StringShape.new(name: 'TokenValue')
     TooManyTagsError = Shapes::StructureShape.new(name: 'TooManyTagsError')
@@ -1288,6 +1302,9 @@ module Aws::SSM
     ValidationException = Shapes::StructureShape.new(name: 'ValidationException')
     Version = Shapes::StringShape.new(name: 'Version')
 
+    AccessDeniedException.add_member(:message, Shapes::ShapeRef.new(shape: String, required: true, location_name: "Message"))
+    AccessDeniedException.struct_class = Types::AccessDeniedException
+
     AccountIdList.member = Shapes::ShapeRef.new(shape: AccountId)
 
     AccountSharingInfo.add_member(:account_id, Shapes::ShapeRef.new(shape: AccountId, location_name: "AccountId"))
@@ -1959,6 +1976,12 @@ module Aws::SSM
 
     CreateResourceDataSyncResult.struct_class = Types::CreateResourceDataSyncResult
 
+    Credentials.add_member(:access_key_id, Shapes::ShapeRef.new(shape: AccessKeyIdType, required: true, location_name: "AccessKeyId"))
+    Credentials.add_member(:secret_access_key, Shapes::ShapeRef.new(shape: AccessKeySecretType, required: true, location_name: "SecretAccessKey"))
+    Credentials.add_member(:session_token, Shapes::ShapeRef.new(shape: SessionTokenType, required: true, location_name: "SessionToken"))
+    Credentials.add_member(:expiration_time, Shapes::ShapeRef.new(shape: DateTime, required: true, location_name: "ExpirationTime"))
+    Credentials.struct_class = Types::Credentials
+
     CustomSchemaCountLimitExceededException.add_member(:message, Shapes::ShapeRef.new(shape: String, location_name: "Message"))
     CustomSchemaCountLimitExceededException.struct_class = Types::CustomSchemaCountLimitExceededException
 
@@ -2593,6 +2616,13 @@ module Aws::SSM
     FeatureNotAvailableException.add_member(:message, Shapes::ShapeRef.new(shape: String, location_name: "Message"))
     FeatureNotAvailableException.struct_class = Types::FeatureNotAvailableException
 
+    GetAccessTokenRequest.add_member(:access_request_id, Shapes::ShapeRef.new(shape: AccessRequestId, required: true, location_name: "AccessRequestId"))
+    GetAccessTokenRequest.struct_class = Types::GetAccessTokenRequest
+
+    GetAccessTokenResponse.add_member(:credentials, Shapes::ShapeRef.new(shape: Credentials, location_name: "Credentials"))
+    GetAccessTokenResponse.add_member(:access_request_status, Shapes::ShapeRef.new(shape: AccessRequestStatus, location_name: "AccessRequestStatus"))
+    GetAccessTokenResponse.struct_class = Types::GetAccessTokenResponse
+
     GetAutomationExecutionRequest.add_member(:automation_execution_id, Shapes::ShapeRef.new(shape: AutomationExecutionId, required: true, location_name: "AutomationExecutionId"))
     GetAutomationExecutionRequest.struct_class = Types::GetAutomationExecutionRequest
 
@@ -4548,6 +4578,13 @@ module Aws::SSM
     SendCommandResult.add_member(:command, Shapes::ShapeRef.new(shape: Command, location_name: "Command"))
     SendCommandResult.struct_class = Types::SendCommandResult
 
+    ServiceQuotaExceededException.add_member(:message, Shapes::ShapeRef.new(shape: String, required: true, location_name: "Message"))
+    ServiceQuotaExceededException.add_member(:resource_id, Shapes::ShapeRef.new(shape: String, location_name: "ResourceId"))
+    ServiceQuotaExceededException.add_member(:resource_type, Shapes::ShapeRef.new(shape: String, location_name: "ResourceType"))
+    ServiceQuotaExceededException.add_member(:quota_code, Shapes::ShapeRef.new(shape: String, required: true, location_name: "QuotaCode"))
+    ServiceQuotaExceededException.add_member(:service_code, Shapes::ShapeRef.new(shape: String, required: true, location_name: "ServiceCode"))
+    ServiceQuotaExceededException.struct_class = Types::ServiceQuotaExceededException
+
     ServiceSetting.add_member(:setting_id, Shapes::ShapeRef.new(shape: ServiceSettingId, location_name: "SettingId"))
     ServiceSetting.add_member(:setting_value, Shapes::ShapeRef.new(shape: ServiceSettingValue, location_name: "SettingValue"))
     ServiceSetting.add_member(:last_modified_date, Shapes::ShapeRef.new(shape: DateTime, location_name: "LastModifiedDate"))
@@ -4597,6 +4634,14 @@ module Aws::SSM
     SeveritySummary.add_member(:unspecified_count, Shapes::ShapeRef.new(shape: ComplianceSummaryCount, location_name: "UnspecifiedCount"))
     SeveritySummary.struct_class = Types::SeveritySummary
 
+    StartAccessRequestRequest.add_member(:reason, Shapes::ShapeRef.new(shape: String1to256, required: true, location_name: "Reason"))
+    StartAccessRequestRequest.add_member(:targets, Shapes::ShapeRef.new(shape: Targets, required: true, location_name: "Targets"))
+    StartAccessRequestRequest.add_member(:tags, Shapes::ShapeRef.new(shape: TagList, location_name: "Tags"))
+    StartAccessRequestRequest.struct_class = Types::StartAccessRequestRequest
+
+    StartAccessRequestResponse.add_member(:access_request_id, Shapes::ShapeRef.new(shape: AccessRequestId, location_name: "AccessRequestId"))
+    StartAccessRequestResponse.struct_class = Types::StartAccessRequestResponse
+
     StartAssociationsOnceRequest.add_member(:association_ids, Shapes::ShapeRef.new(shape: AssociationIdList, required: true, location_name: "AssociationIds"))
     StartAssociationsOnceRequest.struct_class = Types::StartAssociationsOnceRequest
 
@@ -4764,6 +4809,11 @@ module Aws::SSM
     TerminateSessionResponse.add_member(:session_id, Shapes::ShapeRef.new(shape: SessionId, location_name: "SessionId"))
     TerminateSessionResponse.struct_class = Types::TerminateSessionResponse
 
+    ThrottlingException.add_member(:message, Shapes::ShapeRef.new(shape: String, required: true, location_name: "Message"))
+    ThrottlingException.add_member(:quota_code, Shapes::ShapeRef.new(shape: String, location_name: "QuotaCode"))
+    ThrottlingException.add_member(:service_code, Shapes::ShapeRef.new(shape: String, location_name: "ServiceCode"))
+    ThrottlingException.struct_class = Types::ThrottlingException
+
     TooManyTagsError.struct_class = Types::TooManyTagsError
 
     TooManyUpdates.add_member(:message, Shapes::ShapeRef.new(shape: String, location_name: "Message"))
@@ -5948,6 +5998,19 @@ module Aws::SSM
         o.errors << Shapes::ShapeRef.new(shape: OpsItemConflictException)
       end)
 
+      api.add_operation(:get_access_token, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "GetAccessToken"
+        o.http_method = "POST"
+        o.http_request_uri = "/"
+        o.input = Shapes::ShapeRef.new(shape: GetAccessTokenRequest)
+        o.output = Shapes::ShapeRef.new(shape: GetAccessTokenResponse)
+        o.errors << Shapes::ShapeRef.new(shape: InternalServerError)
+        o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
+        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
+        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
+      end)
+
       api.add_operation(:get_automation_execution, Seahorse::Model::Operation.new.tap do |o|
         o.name = "GetAutomationExecution"
         o.http_method = "POST"
@@ -6782,6 +6845,20 @@ module Aws::SSM
         o.errors << Shapes::ShapeRef.new(shape: InvalidNotificationConfig)
       end)
 
+      api.add_operation(:start_access_request, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "StartAccessRequest"
+        o.http_method = "POST"
+        o.http_request_uri = "/"
+        o.input = Shapes::ShapeRef.new(shape: StartAccessRequestRequest)
+        o.output = Shapes::ShapeRef.new(shape: StartAccessRequestResponse)
+        o.errors << Shapes::ShapeRef.new(shape: InternalServerError)
+        o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
+        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: ServiceQuotaExceededException)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
+        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
+      end)
+
       api.add_operation(:start_associations_once, Seahorse::Model::Operation.new.tap do |o|
         o.name = "StartAssociationsOnce"
         o.http_method = "POST"

data/lib/aws-sdk-ssm/errors.rb

@@ -27,6 +27,7 @@ module Aws::SSM
   # See {Seahorse::Client::RequestContext} for more information.
   #
   # ## Error Classes
+  # * {AccessDeniedException}
   # * {AlreadyExistsException}
   # * {AssociatedInstances}
   # * {AssociationAlreadyExists}
@@ -145,11 +146,13 @@ module Aws::SSM
   # * {ResourcePolicyInvalidParameterException}
   # * {ResourcePolicyLimitExceededException}
   # * {ResourcePolicyNotFoundException}
+  # * {ServiceQuotaExceededException}
   # * {ServiceSettingNotFound}
   # * {StatusUnchanged}
   # * {SubTypeCountLimitExceededException}
   # * {TargetInUseException}
   # * {TargetNotConnected}
+  # * {ThrottlingException}
   # * {TooManyTagsError}
   # * {TooManyUpdates}
   # * {TotalSizeLimitExceededException}
@@ -169,6 +172,21 @@ module Aws::SSM
 
     extend Aws::Errors::DynamicErrors
 
+    class AccessDeniedException < ServiceError
+
+      # @param [Seahorse::Client::RequestContext] context
+      # @param [String] message
+      # @param [Aws::SSM::Types::AccessDeniedException] data
+      def initialize(context, message, data = Aws::EmptyStructure.new)
+        super(context, message, data)
+      end
+
+      # @return [String]
+      def message
+        @message || @data[:message]
+      end
+    end
+
     class AlreadyExistsException < ServiceError
 
       # @param [Seahorse::Client::RequestContext] context
@@ -1954,6 +1972,41 @@ module Aws::SSM
       end
     end
 
+    class ServiceQuotaExceededException < ServiceError
+
+      # @param [Seahorse::Client::RequestContext] context
+      # @param [String] message
+      # @param [Aws::SSM::Types::ServiceQuotaExceededException] data
+      def initialize(context, message, data = Aws::EmptyStructure.new)
+        super(context, message, data)
+      end
+
+      # @return [String]
+      def message
+        @message || @data[:message]
+      end
+
+      # @return [String]
+      def resource_id
+        @data[:resource_id]
+      end
+
+      # @return [String]
+      def resource_type
+        @data[:resource_type]
+      end
+
+      # @return [String]
+      def quota_code
+        @data[:quota_code]
+      end
+
+      # @return [String]
+      def service_code
+        @data[:service_code]
+      end
+    end
+
     class ServiceSettingNotFound < ServiceError
 
       # @param [Seahorse::Client::RequestContext] context
@@ -2024,6 +2077,31 @@ module Aws::SSM
       end
     end
 
+    class ThrottlingException < ServiceError
+
+      # @param [Seahorse::Client::RequestContext] context
+      # @param [String] message
+      # @param [Aws::SSM::Types::ThrottlingException] data
+      def initialize(context, message, data = Aws::EmptyStructure.new)
+        super(context, message, data)
+      end
+
+      # @return [String]
+      def message
+        @message || @data[:message]
+      end
+
+      # @return [String]
+      def quota_code
+        @data[:quota_code]
+      end
+
+      # @return [String]
+      def service_code
+        @data[:service_code]
+      end
+    end
+
     class TooManyTagsError < ServiceError
 
       # @param [Seahorse::Client::RequestContext] context

data/lib/aws-sdk-ssm/types.rb

@@ -10,6 +10,20 @@
 module Aws::SSM
   module Types
 
+    # The requester doesn't have permissions to perform the requested
+    # operation.
+    #
+    # @!attribute [rw] message
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ssm-2014-11-06/AccessDeniedException AWS API Documentation
+    #
+    class AccessDeniedException < Struct.new(
+      :message)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Information includes the Amazon Web Services account ID where the
     # current document is shared and the version shared with that account.
     #
@@ -4185,6 +4199,38 @@ module Aws::SSM
     #
     class CreateResourceDataSyncResult < Aws::EmptyStructure; end
 
+    # The temporary security credentials, which include an access key ID, a
+    # secret access key, and a security (or session) token.
+    #
+    # @!attribute [rw] access_key_id
+    #   The access key ID that identifies the temporary security
+    #   credentials.
+    #   @return [String]
+    #
+    # @!attribute [rw] secret_access_key
+    #   The secret access key that can be used to sign requests.
+    #   @return [String]
+    #
+    # @!attribute [rw] session_token
+    #   The token that users must pass to the service API to use the
+    #   temporary credentials.
+    #   @return [String]
+    #
+    # @!attribute [rw] expiration_time
+    #   The datetime on which the current credentials expire.
+    #   @return [Time]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ssm-2014-11-06/Credentials AWS API Documentation
+    #
+    class Credentials < Struct.new(
+      :access_key_id,
+      :secret_access_key,
+      :session_token,
+      :expiration_time)
+      SENSITIVE = [:secret_access_key, :session_token]
+      include Aws::Structure
+    end
+
     # You have exceeded the limit for custom schemas. Delete one or more
     # custom schemas and try again.
     #
@@ -7568,6 +7614,36 @@ module Aws::SSM
       include Aws::Structure
     end
 
+    # @!attribute [rw] access_request_id
+    #   The ID of a just-in-time node access request.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ssm-2014-11-06/GetAccessTokenRequest AWS API Documentation
+    #
+    class GetAccessTokenRequest < Struct.new(
+      :access_request_id)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] credentials
+    #   The temporary security credentials which can be used to start
+    #   just-in-time node access sessions.
+    #   @return [Types::Credentials]
+    #
+    # @!attribute [rw] access_request_status
+    #   The status of the access request.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ssm-2014-11-06/GetAccessTokenResponse AWS API Documentation
+    #
+    class GetAccessTokenResponse < Struct.new(
+      :credentials,
+      :access_request_status)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] automation_execution_id
     #   The unique identifier for an existing automation execution to
     #   examine. The execution ID is returned by StartAutomationExecution
@@ -17783,6 +17859,42 @@ module Aws::SSM
       include Aws::Structure
     end
 
+    # The request exceeds the service quota. Service quotas, also referred
+    # to as limits, are the maximum number of service resources or
+    # operations for your Amazon Web Services account.
+    #
+    # @!attribute [rw] message
+    #   @return [String]
+    #
+    # @!attribute [rw] resource_id
+    #   The unique ID of the resource referenced in the failed request.
+    #   @return [String]
+    #
+    # @!attribute [rw] resource_type
+    #   The resource type of the resource referenced in the failed request.
+    #   @return [String]
+    #
+    # @!attribute [rw] quota_code
+    #   The quota code recognized by the Amazon Web Services Service Quotas
+    #   service.
+    #   @return [String]
+    #
+    # @!attribute [rw] service_code
+    #   The code for the Amazon Web Services service that owns the quota.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ssm-2014-11-06/ServiceQuotaExceededException AWS API Documentation
+    #
+    class ServiceQuotaExceededException < Struct.new(
+      :message,
+      :resource_id,
+      :resource_type,
+      :quota_code,
+      :service_code)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # The service setting data structure.
     #
     # `ServiceSetting` is an account-level setting for an Amazon Web
@@ -18056,6 +18168,42 @@ module Aws::SSM
       include Aws::Structure
     end
 
+    # @!attribute [rw] reason
+    #   A brief description explaining why you are requesting access to the
+    #   node.
+    #   @return [String]
+    #
+    # @!attribute [rw] targets
+    #   The node you are requesting access to.
+    #   @return [Array<Types::Target>]
+    #
+    # @!attribute [rw] tags
+    #   Key-value pairs of metadata you want to assign to the access
+    #   request.
+    #   @return [Array<Types::Tag>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ssm-2014-11-06/StartAccessRequestRequest AWS API Documentation
+    #
+    class StartAccessRequestRequest < Struct.new(
+      :reason,
+      :targets,
+      :tags)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] access_request_id
+    #   The ID of the access request.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ssm-2014-11-06/StartAccessRequestResponse AWS API Documentation
+    #
+    class StartAccessRequestResponse < Struct.new(
+      :access_request_id)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] association_ids
     #   The association IDs that you want to run immediately and only one
     #   time.
@@ -18976,6 +19124,31 @@ module Aws::SSM
       include Aws::Structure
     end
 
+    # The request or operation couldn't be performed because the service is
+    # throttling requests.
+    #
+    # @!attribute [rw] message
+    #   @return [String]
+    #
+    # @!attribute [rw] quota_code
+    #   The quota code recognized by the Amazon Web Services Service Quotas
+    #   service.
+    #   @return [String]
+    #
+    # @!attribute [rw] service_code
+    #   The code for the Amazon Web Services service that owns the quota.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ssm-2014-11-06/ThrottlingException AWS API Documentation
+    #
+    class ThrottlingException < Struct.new(
+      :message,
+      :quota_code,
+      :service_code)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # The `Targets` parameter includes too many tags. Remove one or more
     # tags and try the command again.
     #

data/lib/aws-sdk-ssm.rb

@@ -55,7 +55,7 @@ module Aws::SSM
   autoload :EndpointProvider, 'aws-sdk-ssm/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-ssm/endpoints'
 
-  GEM_VERSION = '1.192.0'
+  GEM_VERSION = '1.193.0'
 
 end
 

data/sig/client.rbs

@@ -340,7 +340,7 @@ module Aws
                              name: ::String,
                              ?display_name: ::String,
                              ?version_name: ::String,
-                             ?document_type: ("Command" | "Policy" | "Automation" | "Session" | "Package" | "ApplicationConfiguration" | "ApplicationConfigurationSchema" | "DeploymentStrategy" | "ChangeCalendar" | "Automation.ChangeTemplate" | "ProblemAnalysis" | "ProblemAnalysisTemplate" | "CloudFormation" | "ConformancePackTemplate" | "QuickSetup"),
+                             ?document_type: ("Command" | "Policy" | "Automation" | "Session" | "Package" | "ApplicationConfiguration" | "ApplicationConfigurationSchema" | "DeploymentStrategy" | "ChangeCalendar" | "Automation.ChangeTemplate" | "ProblemAnalysis" | "ProblemAnalysisTemplate" | "CloudFormation" | "ConformancePackTemplate" | "QuickSetup" | "ManualApprovalPolicy" | "AutoApprovalPolicy"),
                              ?document_format: ("YAML" | "JSON" | "TEXT"),
                              ?target_type: ::String,
                              ?tags: Array[
@@ -1178,7 +1178,7 @@ module Aws
       def describe_ops_items: (
                                 ?ops_item_filters: Array[
                                   {
-                                    key: ("Status" | "CreatedBy" | "Source" | "Priority" | "Title" | "OpsItemId" | "CreatedTime" | "LastModifiedTime" | "ActualStartTime" | "ActualEndTime" | "PlannedStartTime" | "PlannedEndTime" | "OperationalData" | "OperationalDataKey" | "OperationalDataValue" | "ResourceId" | "AutomationId" | "Category" | "Severity" | "OpsItemType" | "ChangeRequestByRequesterArn" | "ChangeRequestByRequesterName" | "ChangeRequestByApproverArn" | "ChangeRequestByApproverName" | "ChangeRequestByTemplate" | "ChangeRequestByTargetsResourceGroup" | "InsightByType" | "AccountId"),
+                                    key: ("Status" | "CreatedBy" | "Source" | "Priority" | "Title" | "OpsItemId" | "CreatedTime" | "LastModifiedTime" | "ActualStartTime" | "ActualEndTime" | "PlannedStartTime" | "PlannedEndTime" | "OperationalData" | "OperationalDataKey" | "OperationalDataValue" | "ResourceId" | "AutomationId" | "Category" | "Severity" | "OpsItemType" | "AccessRequestByRequesterArn" | "AccessRequestByRequesterId" | "AccessRequestByApproverArn" | "AccessRequestByApproverId" | "AccessRequestBySourceAccountId" | "AccessRequestBySourceOpsItemId" | "AccessRequestBySourceRegion" | "AccessRequestByIsReplica" | "AccessRequestByTargetResourceId" | "ChangeRequestByRequesterArn" | "ChangeRequestByRequesterName" | "ChangeRequestByApproverArn" | "ChangeRequestByApproverName" | "ChangeRequestByTemplate" | "ChangeRequestByTargetsResourceGroup" | "InsightByType" | "AccountId"),
                                     values: Array[::String],
                                     operator: ("Equal" | "Contains" | "GreaterThan" | "LessThan")
                                   },
@@ -1316,6 +1316,17 @@ module Aws
                                               ) -> _DisassociateOpsItemRelatedItemResponseSuccess
                                             | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _DisassociateOpsItemRelatedItemResponseSuccess
 
+      interface _GetAccessTokenResponseSuccess
+        include ::Seahorse::Client::_ResponseSuccess[Types::GetAccessTokenResponse]
+        def credentials: () -> Types::Credentials
+        def access_request_status: () -> ("Approved" | "Rejected" | "Revoked" | "Expired" | "Pending")
+      end
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/SSM/Client.html#get_access_token-instance_method
+      def get_access_token: (
+                              access_request_id: ::String
+                            ) -> _GetAccessTokenResponseSuccess
+                          | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _GetAccessTokenResponseSuccess
+
       interface _GetAutomationExecutionResponseSuccess
         include ::Seahorse::Client::_ResponseSuccess[Types::GetAutomationExecutionResult]
         def automation_execution: () -> Types::AutomationExecution
@@ -1455,7 +1466,7 @@ module Aws
         def status: () -> ("Creating" | "Active" | "Updating" | "Deleting" | "Failed")
         def status_information: () -> ::String
         def content: () -> ::String
-        def document_type: () -> ("Command" | "Policy" | "Automation" | "Session" | "Package" | "ApplicationConfiguration" | "ApplicationConfigurationSchema" | "DeploymentStrategy" | "ChangeCalendar" | "Automation.ChangeTemplate" | "ProblemAnalysis" | "ProblemAnalysisTemplate" | "CloudFormation" | "ConformancePackTemplate" | "QuickSetup")
+        def document_type: () -> ("Command" | "Policy" | "Automation" | "Session" | "Package" | "ApplicationConfiguration" | "ApplicationConfigurationSchema" | "DeploymentStrategy" | "ChangeCalendar" | "Automation.ChangeTemplate" | "ProblemAnalysis" | "ProblemAnalysisTemplate" | "CloudFormation" | "ConformancePackTemplate" | "QuickSetup" | "ManualApprovalPolicy" | "AutoApprovalPolicy")
         def document_format: () -> ("YAML" | "JSON" | "TEXT")
         def requires: () -> ::Array[Types::DocumentRequires]
         def attachments_content: () -> ::Array[Types::AttachmentContent]
@@ -2454,7 +2465,7 @@ module Aws
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/SSM/Client.html#send_automation_signal-instance_method
       def send_automation_signal: (
                                     automation_execution_id: ::String,
-                                    signal_type: ("Approve" | "Reject" | "StartStep" | "StopStep" | "Resume"),
+                                    signal_type: ("Approve" | "Reject" | "StartStep" | "StopStep" | "Resume" | "Revoke"),
                                     ?payload: Hash[::String, Array[::String]]
                                   ) -> _SendAutomationSignalResponseSuccess
                                 | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _SendAutomationSignalResponseSuccess
@@ -2505,6 +2516,28 @@ module Aws
                         ) -> _SendCommandResponseSuccess
                       | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _SendCommandResponseSuccess
 
+      interface _StartAccessRequestResponseSuccess
+        include ::Seahorse::Client::_ResponseSuccess[Types::StartAccessRequestResponse]
+        def access_request_id: () -> ::String
+      end
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/SSM/Client.html#start_access_request-instance_method
+      def start_access_request: (
+                                  reason: ::String,
+                                  targets: Array[
+                                    {
+                                      key: ::String?,
+                                      values: Array[::String]?
+                                    },
+                                  ],
+                                  ?tags: Array[
+                                    {
+                                      key: ::String,
+                                      value: ::String
+                                    },
+                                  ]
+                                ) -> _StartAccessRequestResponseSuccess
+                              | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _StartAccessRequestResponseSuccess
+
       interface _StartAssociationsOnceResponseSuccess
         include ::Seahorse::Client::_ResponseSuccess[Types::StartAssociationsOnceResult]
       end
@@ -3082,7 +3115,7 @@ module Aws
                                  ops_item_id: ::String
                                },
                              ],
-                             ?status: ("Open" | "InProgress" | "Resolved" | "Pending" | "TimedOut" | "Cancelling" | "Cancelled" | "Failed" | "CompletedWithSuccess" | "CompletedWithFailure" | "Scheduled" | "RunbookInProgress" | "PendingChangeCalendarOverride" | "ChangeCalendarOverrideApproved" | "ChangeCalendarOverrideRejected" | "PendingApproval" | "Approved" | "Rejected" | "Closed"),
+                             ?status: ("Open" | "InProgress" | "Resolved" | "Pending" | "TimedOut" | "Cancelling" | "Cancelled" | "Failed" | "CompletedWithSuccess" | "CompletedWithFailure" | "Scheduled" | "RunbookInProgress" | "PendingChangeCalendarOverride" | "ChangeCalendarOverrideApproved" | "ChangeCalendarOverrideRejected" | "PendingApproval" | "Approved" | "Revoked" | "Rejected" | "Closed"),
                              ops_item_id: ::String,
                              ?title: ::String,
                              ?category: ::String,

data/sig/errors.rbs

@@ -11,6 +11,9 @@ module Aws
       class ServiceError < ::Aws::Errors::ServiceError
       end
 
+      class AccessDeniedException < ::Aws::Errors::ServiceError
+        def message: () -> ::String
+      end
       class AlreadyExistsException < ::Aws::Errors::ServiceError
         def message: () -> ::String
       end
@@ -368,6 +371,13 @@ module Aws
       class ResourcePolicyNotFoundException < ::Aws::Errors::ServiceError
         def message: () -> ::String
       end
+      class ServiceQuotaExceededException < ::Aws::Errors::ServiceError
+        def message: () -> ::String
+        def resource_id: () -> ::String
+        def resource_type: () -> ::String
+        def quota_code: () -> ::String
+        def service_code: () -> ::String
+      end
       class ServiceSettingNotFound < ::Aws::Errors::ServiceError
         def message: () -> ::String
       end
@@ -382,6 +392,11 @@ module Aws
       class TargetNotConnected < ::Aws::Errors::ServiceError
         def message: () -> ::String
       end
+      class ThrottlingException < ::Aws::Errors::ServiceError
+        def message: () -> ::String
+        def quota_code: () -> ::String
+        def service_code: () -> ::String
+      end
       class TooManyTagsError < ::Aws::Errors::ServiceError
       end
       class TooManyUpdates < ::Aws::Errors::ServiceError

data/sig/types.rbs

@@ -8,6 +8,11 @@
 module Aws::SSM
   module Types
 
+    class AccessDeniedException
+      attr_accessor message: ::String
+      SENSITIVE: []
+    end
+
     class AccountSharingInfo
       attr_accessor account_id: ::String
       attr_accessor shared_document_version: ::String
@@ -297,7 +302,7 @@ module Aws::SSM
       attr_accessor alarm_configuration: Types::AlarmConfiguration
       attr_accessor triggered_alarms: ::Array[Types::AlarmStateInformation]
       attr_accessor target_locations_url: ::String
-      attr_accessor automation_subtype: ("ChangeRequest")
+      attr_accessor automation_subtype: ("ChangeRequest" | "AccessRequest")
       attr_accessor scheduled_time: ::Time
       attr_accessor runbooks: ::Array[Types::Runbook]
       attr_accessor ops_item_id: ::String
@@ -354,7 +359,7 @@ module Aws::SSM
       attr_accessor alarm_configuration: Types::AlarmConfiguration
       attr_accessor triggered_alarms: ::Array[Types::AlarmStateInformation]
       attr_accessor target_locations_url: ::String
-      attr_accessor automation_subtype: ("ChangeRequest")
+      attr_accessor automation_subtype: ("ChangeRequest" | "AccessRequest")
       attr_accessor scheduled_time: ::Time
       attr_accessor runbooks: ::Array[Types::Runbook]
       attr_accessor ops_item_id: ::String
@@ -635,7 +640,7 @@ module Aws::SSM
       attr_accessor name: ::String
       attr_accessor display_name: ::String
       attr_accessor version_name: ::String
-      attr_accessor document_type: ("Command" | "Policy" | "Automation" | "Session" | "Package" | "ApplicationConfiguration" | "ApplicationConfigurationSchema" | "DeploymentStrategy" | "ChangeCalendar" | "Automation.ChangeTemplate" | "ProblemAnalysis" | "ProblemAnalysisTemplate" | "CloudFormation" | "ConformancePackTemplate" | "QuickSetup")
+      attr_accessor document_type: ("Command" | "Policy" | "Automation" | "Session" | "Package" | "ApplicationConfiguration" | "ApplicationConfigurationSchema" | "DeploymentStrategy" | "ChangeCalendar" | "Automation.ChangeTemplate" | "ProblemAnalysis" | "ProblemAnalysisTemplate" | "CloudFormation" | "ConformancePackTemplate" | "QuickSetup" | "ManualApprovalPolicy" | "AutoApprovalPolicy")
       attr_accessor document_format: ("YAML" | "JSON" | "TEXT")
       attr_accessor target_type: ::String
       attr_accessor tags: ::Array[Types::Tag]
@@ -740,6 +745,14 @@ module Aws::SSM
     class CreateResourceDataSyncResult < Aws::EmptyStructure
     end
 
+    class Credentials
+      attr_accessor access_key_id: ::String
+      attr_accessor secret_access_key: ::String
+      attr_accessor session_token: ::String
+      attr_accessor expiration_time: ::Time
+      SENSITIVE: [:secret_access_key, :session_token]
+    end
+
     class CustomSchemaCountLimitExceededException
       attr_accessor message: ::String
       SENSITIVE: []
@@ -1413,7 +1426,7 @@ module Aws::SSM
       attr_accessor description: ::String
       attr_accessor parameters: ::Array[Types::DocumentParameter]
       attr_accessor platform_types: ::Array[("Windows" | "Linux" | "MacOS")]
-      attr_accessor document_type: ("Command" | "Policy" | "Automation" | "Session" | "Package" | "ApplicationConfiguration" | "ApplicationConfigurationSchema" | "DeploymentStrategy" | "ChangeCalendar" | "Automation.ChangeTemplate" | "ProblemAnalysis" | "ProblemAnalysisTemplate" | "CloudFormation" | "ConformancePackTemplate" | "QuickSetup")
+      attr_accessor document_type: ("Command" | "Policy" | "Automation" | "Session" | "Package" | "ApplicationConfiguration" | "ApplicationConfigurationSchema" | "DeploymentStrategy" | "ChangeCalendar" | "Automation.ChangeTemplate" | "ProblemAnalysis" | "ProblemAnalysisTemplate" | "CloudFormation" | "ConformancePackTemplate" | "QuickSetup" | "ManualApprovalPolicy" | "AutoApprovalPolicy")
       attr_accessor schema_version: ::String
       attr_accessor latest_version: ::String
       attr_accessor default_version: ::String
@@ -1446,7 +1459,7 @@ module Aws::SSM
       attr_accessor version_name: ::String
       attr_accessor platform_types: ::Array[("Windows" | "Linux" | "MacOS")]
       attr_accessor document_version: ::String
-      attr_accessor document_type: ("Command" | "Policy" | "Automation" | "Session" | "Package" | "ApplicationConfiguration" | "ApplicationConfigurationSchema" | "DeploymentStrategy" | "ChangeCalendar" | "Automation.ChangeTemplate" | "ProblemAnalysis" | "ProblemAnalysisTemplate" | "CloudFormation" | "ConformancePackTemplate" | "QuickSetup")
+      attr_accessor document_type: ("Command" | "Policy" | "Automation" | "Session" | "Package" | "ApplicationConfiguration" | "ApplicationConfigurationSchema" | "DeploymentStrategy" | "ChangeCalendar" | "Automation.ChangeTemplate" | "ProblemAnalysis" | "ProblemAnalysisTemplate" | "CloudFormation" | "ConformancePackTemplate" | "QuickSetup" | "ManualApprovalPolicy" | "AutoApprovalPolicy")
       attr_accessor schema_version: ::String
       attr_accessor document_format: ("YAML" | "JSON" | "TEXT")
       attr_accessor target_type: ::String
@@ -1599,6 +1612,17 @@ module Aws::SSM
       SENSITIVE: []
     end
 
+    class GetAccessTokenRequest
+      attr_accessor access_request_id: ::String
+      SENSITIVE: []
+    end
+
+    class GetAccessTokenResponse
+      attr_accessor credentials: Types::Credentials
+      attr_accessor access_request_status: ("Approved" | "Rejected" | "Revoked" | "Expired" | "Pending")
+      SENSITIVE: []
+    end
+
     class GetAutomationExecutionRequest
       attr_accessor automation_execution_id: ::String
       SENSITIVE: []
@@ -1704,7 +1728,7 @@ module Aws::SSM
       attr_accessor status: ("Creating" | "Active" | "Updating" | "Deleting" | "Failed")
       attr_accessor status_information: ::String
       attr_accessor content: ::String
-      attr_accessor document_type: ("Command" | "Policy" | "Automation" | "Session" | "Package" | "ApplicationConfiguration" | "ApplicationConfigurationSchema" | "DeploymentStrategy" | "ChangeCalendar" | "Automation.ChangeTemplate" | "ProblemAnalysis" | "ProblemAnalysisTemplate" | "CloudFormation" | "ConformancePackTemplate" | "QuickSetup")
+      attr_accessor document_type: ("Command" | "Policy" | "Automation" | "Session" | "Package" | "ApplicationConfiguration" | "ApplicationConfigurationSchema" | "DeploymentStrategy" | "ChangeCalendar" | "Automation.ChangeTemplate" | "ProblemAnalysis" | "ProblemAnalysisTemplate" | "CloudFormation" | "ConformancePackTemplate" | "QuickSetup" | "ManualApprovalPolicy" | "AutoApprovalPolicy")
       attr_accessor document_format: ("YAML" | "JSON" | "TEXT")
       attr_accessor requires: ::Array[Types::DocumentRequires]
       attr_accessor attachments_content: ::Array[Types::AttachmentContent]
@@ -3101,7 +3125,7 @@ module Aws::SSM
       attr_accessor notifications: ::Array[Types::OpsItemNotification]
       attr_accessor priority: ::Integer
       attr_accessor related_ops_items: ::Array[Types::RelatedOpsItem]
-      attr_accessor status: ("Open" | "InProgress" | "Resolved" | "Pending" | "TimedOut" | "Cancelling" | "Cancelled" | "Failed" | "CompletedWithSuccess" | "CompletedWithFailure" | "Scheduled" | "RunbookInProgress" | "PendingChangeCalendarOverride" | "ChangeCalendarOverrideApproved" | "ChangeCalendarOverrideRejected" | "PendingApproval" | "Approved" | "Rejected" | "Closed")
+      attr_accessor status: ("Open" | "InProgress" | "Resolved" | "Pending" | "TimedOut" | "Cancelling" | "Cancelled" | "Failed" | "CompletedWithSuccess" | "CompletedWithFailure" | "Scheduled" | "RunbookInProgress" | "PendingChangeCalendarOverride" | "ChangeCalendarOverrideApproved" | "ChangeCalendarOverrideRejected" | "PendingApproval" | "Approved" | "Revoked" | "Rejected" | "Closed")
       attr_accessor ops_item_id: ::String
       attr_accessor version: ::String
       attr_accessor title: ::String
@@ -3158,7 +3182,7 @@ module Aws::SSM
     end
 
     class OpsItemFilter
-      attr_accessor key: ("Status" | "CreatedBy" | "Source" | "Priority" | "Title" | "OpsItemId" | "CreatedTime" | "LastModifiedTime" | "ActualStartTime" | "ActualEndTime" | "PlannedStartTime" | "PlannedEndTime" | "OperationalData" | "OperationalDataKey" | "OperationalDataValue" | "ResourceId" | "AutomationId" | "Category" | "Severity" | "OpsItemType" | "ChangeRequestByRequesterArn" | "ChangeRequestByRequesterName" | "ChangeRequestByApproverArn" | "ChangeRequestByApproverName" | "ChangeRequestByTemplate" | "ChangeRequestByTargetsResourceGroup" | "InsightByType" | "AccountId")
+      attr_accessor key: ("Status" | "CreatedBy" | "Source" | "Priority" | "Title" | "OpsItemId" | "CreatedTime" | "LastModifiedTime" | "ActualStartTime" | "ActualEndTime" | "PlannedStartTime" | "PlannedEndTime" | "OperationalData" | "OperationalDataKey" | "OperationalDataValue" | "ResourceId" | "AutomationId" | "Category" | "Severity" | "OpsItemType" | "AccessRequestByRequesterArn" | "AccessRequestByRequesterId" | "AccessRequestByApproverArn" | "AccessRequestByApproverId" | "AccessRequestBySourceAccountId" | "AccessRequestBySourceOpsItemId" | "AccessRequestBySourceRegion" | "AccessRequestByIsReplica" | "AccessRequestByTargetResourceId" | "ChangeRequestByRequesterArn" | "ChangeRequestByRequesterName" | "ChangeRequestByApproverArn" | "ChangeRequestByApproverName" | "ChangeRequestByTemplate" | "ChangeRequestByTargetsResourceGroup" | "InsightByType" | "AccountId")
       attr_accessor values: ::Array[::String]
       attr_accessor operator: ("Equal" | "Contains" | "GreaterThan" | "LessThan")
       SENSITIVE: []
@@ -3232,7 +3256,7 @@ module Aws::SSM
       attr_accessor last_modified_time: ::Time
       attr_accessor priority: ::Integer
       attr_accessor source: ::String
-      attr_accessor status: ("Open" | "InProgress" | "Resolved" | "Pending" | "TimedOut" | "Cancelling" | "Cancelled" | "Failed" | "CompletedWithSuccess" | "CompletedWithFailure" | "Scheduled" | "RunbookInProgress" | "PendingChangeCalendarOverride" | "ChangeCalendarOverrideApproved" | "ChangeCalendarOverrideRejected" | "PendingApproval" | "Approved" | "Rejected" | "Closed")
+      attr_accessor status: ("Open" | "InProgress" | "Resolved" | "Pending" | "TimedOut" | "Cancelling" | "Cancelled" | "Failed" | "CompletedWithSuccess" | "CompletedWithFailure" | "Scheduled" | "RunbookInProgress" | "PendingChangeCalendarOverride" | "ChangeCalendarOverrideApproved" | "ChangeCalendarOverrideRejected" | "PendingApproval" | "Approved" | "Revoked" | "Rejected" | "Closed")
       attr_accessor ops_item_id: ::String
       attr_accessor title: ::String
       attr_accessor operational_data: ::Hash[::String, Types::OpsItemDataValue]
@@ -3878,7 +3902,7 @@ module Aws::SSM
 
     class SendAutomationSignalRequest
       attr_accessor automation_execution_id: ::String
-      attr_accessor signal_type: ("Approve" | "Reject" | "StartStep" | "StopStep" | "Resume")
+      attr_accessor signal_type: ("Approve" | "Reject" | "StartStep" | "StopStep" | "Resume" | "Revoke")
       attr_accessor payload: ::Hash[::String, ::Array[::String]]
       SENSITIVE: []
     end
@@ -3913,6 +3937,15 @@ module Aws::SSM
       SENSITIVE: []
     end
 
+    class ServiceQuotaExceededException
+      attr_accessor message: ::String
+      attr_accessor resource_id: ::String
+      attr_accessor resource_type: ::String
+      attr_accessor quota_code: ::String
+      attr_accessor service_code: ::String
+      SENSITIVE: []
+    end
+
     class ServiceSetting
       attr_accessor setting_id: ::String
       attr_accessor setting_value: ::String
@@ -3965,6 +3998,18 @@ module Aws::SSM
       SENSITIVE: []
     end
 
+    class StartAccessRequestRequest
+      attr_accessor reason: ::String
+      attr_accessor targets: ::Array[Types::Target]
+      attr_accessor tags: ::Array[Types::Tag]
+      SENSITIVE: []
+    end
+
+    class StartAccessRequestResponse
+      attr_accessor access_request_id: ::String
+      SENSITIVE: []
+    end
+
     class StartAssociationsOnceRequest
       attr_accessor association_ids: ::Array[::String]
       SENSITIVE: []
@@ -4147,6 +4192,13 @@ module Aws::SSM
       SENSITIVE: []
     end
 
+    class ThrottlingException
+      attr_accessor message: ::String
+      attr_accessor quota_code: ::String
+      attr_accessor service_code: ::String
+      SENSITIVE: []
+    end
+
     class TooManyTagsError < Aws::EmptyStructure
     end
 
@@ -4403,7 +4455,7 @@ module Aws::SSM
       attr_accessor notifications: ::Array[Types::OpsItemNotification]
       attr_accessor priority: ::Integer
       attr_accessor related_ops_items: ::Array[Types::RelatedOpsItem]
-      attr_accessor status: ("Open" | "InProgress" | "Resolved" | "Pending" | "TimedOut" | "Cancelling" | "Cancelled" | "Failed" | "CompletedWithSuccess" | "CompletedWithFailure" | "Scheduled" | "RunbookInProgress" | "PendingChangeCalendarOverride" | "ChangeCalendarOverrideApproved" | "ChangeCalendarOverrideRejected" | "PendingApproval" | "Approved" | "Rejected" | "Closed")
+      attr_accessor status: ("Open" | "InProgress" | "Resolved" | "Pending" | "TimedOut" | "Cancelling" | "Cancelled" | "Failed" | "CompletedWithSuccess" | "CompletedWithFailure" | "Scheduled" | "RunbookInProgress" | "PendingChangeCalendarOverride" | "ChangeCalendarOverrideApproved" | "ChangeCalendarOverrideRejected" | "PendingApproval" | "Approved" | "Revoked" | "Rejected" | "Closed")
       attr_accessor ops_item_id: ::String
       attr_accessor title: ::String
       attr_accessor category: ::String

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-ssm
 version: !ruby/object:Gem::Version
-  version: 1.192.0
+  version: 1.193.0
 platform: ruby
 authors:
 - Amazon Web Services
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2025-03-24 00:00:00.000000000 Z
+date: 2025-04-29 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-core