aws-sdk-ssm 1.80.0 → 1.85.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 5c3b126e66004ec3bac9061a4e313a823bf2cd290b4dc21590622eab398089d9
-  data.tar.gz: c62d45e5951a94dcc0a4553c44afbc5a174006efc37c64a0a57c08a0aa4bfd02
+  metadata.gz: 2c52dbd9dad8d7c424f84fed75b848caf2329b22f0204eae992a3d6795caf828
+  data.tar.gz: abb5e8da3bb3993f7096b3ea02838f066fbcd7fdaa0640cb7519d8d0f4e50cf7
 SHA512:
-  metadata.gz: 840e3d2780ee8b360a89f23f20fa4264a3914ebd5c3acd43597937ddc680cd187f40401e60ffb81aec8d51197a35cae31e722c275be4e82c051fa1b88f96feb2
-  data.tar.gz: 5504ce94d8138995ecc4774f0a42c5b7a3a4a546dbae39fbf2f1f7725c8450efe0b8d88c0b11fbf81cf12529c84fbdf7bee00ef44f5d58218555725a879d2b1c
+  metadata.gz: 549ca09d68ef6d73f95f250c497e6c1f54e458e6b00c1b71621af26fbd014a3a18759fd4f4cec66a31e6c4804c9e8275b4073e09052ffb7a157bc4e6e9c38512
+  data.tar.gz: 1f07e4f7b791a7b1eb7e142bebe03601b3528c61e4ebd6d69b742536bb602aee4d7b399c678506142c147bd1e576de7f0ac77915f7e5c14090fc2c60da0df50f

data/lib/aws-sdk-ssm.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 # WARNING ABOUT GENERATED CODE
 #
 # This file is generated. See the contributing guide for more information:
@@ -45,6 +47,6 @@ require_relative 'aws-sdk-ssm/customizations'
 # @service
 module Aws::SSM
 
-  GEM_VERSION = '1.80.0'
+  GEM_VERSION = '1.85.0'
 
 end

data/lib/aws-sdk-ssm/client.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 # WARNING ABOUT GENERATED CODE
 #
 # This file is generated. See the contributing guide for more information:
@@ -24,6 +26,7 @@ require 'aws-sdk-core/plugins/jsonvalue_converter.rb'
 require 'aws-sdk-core/plugins/client_metrics_plugin.rb'
 require 'aws-sdk-core/plugins/client_metrics_send_plugin.rb'
 require 'aws-sdk-core/plugins/transfer_encoding.rb'
+require 'aws-sdk-core/plugins/http_checksum.rb'
 require 'aws-sdk-core/plugins/signature_v4.rb'
 require 'aws-sdk-core/plugins/protocols/json_rpc.rb'
 
@@ -69,6 +72,7 @@ module Aws::SSM
     add_plugin(Aws::Plugins::ClientMetricsPlugin)
     add_plugin(Aws::Plugins::ClientMetricsSendPlugin)
     add_plugin(Aws::Plugins::TransferEncoding)
+    add_plugin(Aws::Plugins::HttpChecksum)
     add_plugin(Aws::Plugins::SignatureV4)
     add_plugin(Aws::Plugins::Protocols::JsonRpc)
 
@@ -161,7 +165,7 @@ module Aws::SSM
     #   @option options [String] :endpoint
     #     The client endpoint is normally constructed from the `:region`
     #     option. You should only configure an `:endpoint` when connecting
-    #     to test endpoints. This should be a valid HTTP(S) URI.
+    #     to test or custom endpoints. This should be a valid HTTP(S) URI.
     #
     #   @option options [Integer] :endpoint_cache_max_entries (1000)
     #     Used for the maximum size limit of the LRU cache storing endpoints data
@@ -577,14 +581,19 @@ module Aws::SSM
       req.send_request(options)
     end
 
-    # Associates the specified Systems Manager document with the specified
-    # instances or targets.
-    #
-    # When you associate a document with one or more instances, SSM Agent
-    # running on the instance processes the document and configures the
-    # instance as specified. If you associate a document with an instance
-    # that already has an associated document, the system returns the
-    # `AssociationAlreadyExists` exception.
+    # A State Manager association defines the state that you want to
+    # maintain on your instances. For example, an association can specify
+    # that anti-virus software must be installed and running on your
+    # instances, or that certain ports must be closed. For static targets,
+    # the association specifies a schedule for when the configuration is
+    # reapplied. For dynamic targets, such as an AWS Resource Group or an
+    # AWS Autoscaling Group, State Manager applies the configuration when
+    # new instances are added to the group. The association also specifies
+    # actions to take when applying the configuration. For example, an
+    # association for anti-virus software might run once a day. If the
+    # software is not installed, then State Manager installs it. If the
+    # software is installed, but the service is not running, then the
+    # association might instruct State Manager to start the service.
     #
     # @option params [required, String] :name
     #   The name of the SSM document that contains the configuration
@@ -1143,6 +1152,18 @@ module Aws::SSM
     #
     #   [1]: https://www.iana.org/time-zones
     #
+    # @option params [Integer] :schedule_offset
+    #   The number of days to wait after the date and time specified by a CRON
+    #   expression before running the maintenance window.
+    #
+    #   For example, the following cron expression schedules a maintenance
+    #   window to run on the third Tuesday of every month at 11:30 PM.
+    #
+    #   `cron(0 30 23 ? * TUE#3 *)`
+    #
+    #   If the schedule offset is `2`, the maintenance window won't run until
+    #   two days later.
+    #
     # @option params [required, Integer] :duration
     #   The duration of the maintenance window in hours.
     #
@@ -1198,6 +1219,7 @@ module Aws::SSM
     #     end_date: "MaintenanceWindowStringDateTime",
     #     schedule: "MaintenanceWindowSchedule", # required
     #     schedule_timezone: "MaintenanceWindowTimezone",
+    #     schedule_offset: 1,
     #     duration: 1, # required
     #     cutoff: 1, # required
     #     allow_unassociated_targets: false, # required
@@ -3678,6 +3700,7 @@ module Aws::SSM
     #   resp.window_identities[0].cutoff #=> Integer
     #   resp.window_identities[0].schedule #=> String
     #   resp.window_identities[0].schedule_timezone #=> String
+    #   resp.window_identities[0].schedule_offset #=> Integer
     #   resp.window_identities[0].end_date #=> String
     #   resp.window_identities[0].start_date #=> String
     #   resp.window_identities[0].next_execution_time #=> String
@@ -4068,6 +4091,22 @@ module Aws::SSM
     #   One or more filters. Use a filter to return a more specific list of
     #   results.
     #
+    #   For `DescribePatchGroups`,valid filter keys include the following:
+    #
+    #   * `NAME_PREFIX`\: The name of the patch group. Wildcards (*) are
+    #     accepted.
+    #
+    #   * `OPERATING_SYSTEM`\: The supported operating system type to return
+    #     results for. For valid operating system values, see
+    #     GetDefaultPatchBaselineRequest$OperatingSystem in
+    #     CreatePatchBaseline.
+    #
+    #     Examples:
+    #
+    #     * `--filters Key=NAME_PREFIX,Values=MyPatchGroup*`
+    #
+    #     * `--filters Key=OPERATING_SYSTEM,Values=AMAZON_LINUX_2`
+    #
     # @option params [String] :next_token
     #   The token for the next set of items to return. (You received this
     #   token from a previous call.)
@@ -4453,6 +4492,9 @@ module Aws::SSM
     #   If the document contains only one plugin, the name can be omitted and
     #   the details will be returned.
     #
+    #   Plugin names are also referred to as step names in Systems Manager
+    #   documents.
+    #
     # @return [Types::GetCommandInvocationResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::GetCommandInvocationResult#command_id #command_id} => String
@@ -4852,6 +4894,7 @@ module Aws::SSM
     #   * {Types::GetMaintenanceWindowResult#end_date #end_date} => String
     #   * {Types::GetMaintenanceWindowResult#schedule #schedule} => String
     #   * {Types::GetMaintenanceWindowResult#schedule_timezone #schedule_timezone} => String
+    #   * {Types::GetMaintenanceWindowResult#schedule_offset #schedule_offset} => Integer
     #   * {Types::GetMaintenanceWindowResult#next_execution_time #next_execution_time} => String
     #   * {Types::GetMaintenanceWindowResult#duration #duration} => Integer
     #   * {Types::GetMaintenanceWindowResult#cutoff #cutoff} => Integer
@@ -4875,6 +4918,7 @@ module Aws::SSM
     #   resp.end_date #=> String
     #   resp.schedule #=> String
     #   resp.schedule_timezone #=> String
+    #   resp.schedule_offset #=> Integer
     #   resp.next_execution_time #=> String
     #   resp.duration #=> Integer
     #   resp.cutoff #=> Integer
@@ -6013,6 +6057,12 @@ module Aws::SSM
     # @option params [String] :instance_id
     #   (Optional) Lists commands issued against this instance ID.
     #
+    #   <note markdown="1"> You can't specify an instance ID in the same command that you specify
+    #   `Status` = `Pending`. This is because the command has not reached the
+    #   instance yet.
+    #
+    #    </note>
+    #
     # @option params [Integer] :max_results
     #   (Optional) The maximum number of items to return for this call. The
     #   call also returns a token that you can specify in a subsequent call to
@@ -6897,15 +6947,18 @@ module Aws::SSM
     # @option params [String] :type
     #   The type of parameter that you want to add to the system.
     #
+    #   <note markdown="1"> `SecureString` is not currently supported for AWS CloudFormation
+    #   templates or in the China Regions.
+    #
+    #    </note>
+    #
     #   Items in a `StringList` must be separated by a comma (,). You can't
     #   use other punctuation or special character to escape items in the
     #   list. If you have a parameter value that requires a comma, then use
     #   the `String` data type.
     #
-    #   <note markdown="1"> `SecureString` is not currently supported for AWS CloudFormation
-    #   templates or in the China Regions.
-    #
-    #    </note>
+    #   Specifying a parameter type is not required when updating a parameter.
+    #   You must specify a parameter type when creating a parameter.
     #
     # @option params [String] :key_id
     #   The KMS Key ID that you want to use to encrypt a parameter. Either the
@@ -7671,23 +7724,37 @@ module Aws::SSM
     # Runs commands on one or more managed instances.
     #
     # @option params [Array<String>] :instance_ids
-    #   The instance IDs where the command should run. You can specify a
-    #   maximum of 50 IDs. If you prefer not to list individual instance IDs,
-    #   you can instead send commands to a fleet of instances using the
-    #   Targets parameter, which accepts EC2 tags. For more information about
-    #   how to use targets, see [Using targets and rate controls to send
-    #   commands to a fleet][1] in the *AWS Systems Manager User Guide*.
+    #   The IDs of the instances where the command should run. Specifying
+    #   instance IDs is most useful when you are targeting a limited number of
+    #   instances, though you can specify up to 50 IDs.
+    #
+    #   To target a larger number of instances, or if you prefer not to list
+    #   individual instance IDs, we recommend using the `Targets` option
+    #   instead. Using `Targets`, which accepts tag key-value pairs to
+    #   identify the instances to send commands to, you can a send command to
+    #   tens, hundreds, or thousands of instances at once.
+    #
+    #   For more information about how to use targets, see [Using targets and
+    #   rate controls to send commands to a fleet][1] in the *AWS Systems
+    #   Manager User Guide*.
     #
     #
     #
     #   [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/send-commands-multiple.html
     #
     # @option params [Array<Types::Target>] :targets
-    #   (Optional) An array of search criteria that targets instances using a
-    #   Key,Value combination that you specify. Targets is required if you
-    #   don't provide one or more instance IDs in the call. For more
-    #   information about how to use targets, see [Sending commands to a
-    #   fleet][1] in the *AWS Systems Manager User Guide*.
+    #   An array of search criteria that targets instances using a `Key,Value`
+    #   combination that you specify. Specifying targets is most useful when
+    #   you want to send a command to a large number of instances at once.
+    #   Using `Targets`, which accepts tag key-value pairs to identify
+    #   instances, you can send a command to tens, hundreds, or thousands of
+    #   instances at once.
+    #
+    #   To send a command to a smaller number of instances, you can use the
+    #   `InstanceIds` option instead.
+    #
+    #   For more information about how to use targets, see [Sending commands
+    #   to a fleet][1] in the *AWS Systems Manager User Guide*.
     #
     #
     #
@@ -8060,8 +8127,9 @@ module Aws::SSM
     # @option params [String] :document_name
     #   The name of the SSM document to define the parameters and plugin
     #   settings for the session. For example, `SSM-SessionManagerRunShell`.
-    #   If no document name is provided, a shell to the instance is launched
-    #   by default.
+    #   You can call the GetDocument API to verify the document exists before
+    #   attempting to start a session. If no document name is provided, a
+    #   shell to the instance is launched by default.
     #
     # @option params [Hash<String,Array>] :parameters
     #   Reserved for future use.
@@ -8631,6 +8699,18 @@ module Aws::SSM
     #
     #   [1]: https://www.iana.org/time-zones
     #
+    # @option params [Integer] :schedule_offset
+    #   The number of days to wait after the date and time specified by a CRON
+    #   expression before running the maintenance window.
+    #
+    #   For example, the following cron expression schedules a maintenance
+    #   window to run the third Tuesday of every month at 11:30 PM.
+    #
+    #   `cron(0 30 23 ? * TUE#3 *)`
+    #
+    #   If the schedule offset is `2`, the maintenance window won't run until
+    #   two days later.
+    #
     # @option params [Integer] :duration
     #   The duration of the maintenance window in hours.
     #
@@ -8659,6 +8739,7 @@ module Aws::SSM
     #   * {Types::UpdateMaintenanceWindowResult#end_date #end_date} => String
     #   * {Types::UpdateMaintenanceWindowResult#schedule #schedule} => String
     #   * {Types::UpdateMaintenanceWindowResult#schedule_timezone #schedule_timezone} => String
+    #   * {Types::UpdateMaintenanceWindowResult#schedule_offset #schedule_offset} => Integer
     #   * {Types::UpdateMaintenanceWindowResult#duration #duration} => Integer
     #   * {Types::UpdateMaintenanceWindowResult#cutoff #cutoff} => Integer
     #   * {Types::UpdateMaintenanceWindowResult#allow_unassociated_targets #allow_unassociated_targets} => Boolean
@@ -8674,6 +8755,7 @@ module Aws::SSM
     #     end_date: "MaintenanceWindowStringDateTime",
     #     schedule: "MaintenanceWindowSchedule",
     #     schedule_timezone: "MaintenanceWindowTimezone",
+    #     schedule_offset: 1,
     #     duration: 1,
     #     cutoff: 1,
     #     allow_unassociated_targets: false,
@@ -8690,6 +8772,7 @@ module Aws::SSM
     #   resp.end_date #=> String
     #   resp.schedule #=> String
     #   resp.schedule_timezone #=> String
+    #   resp.schedule_offset #=> Integer
     #   resp.duration #=> Integer
     #   resp.cutoff #=> Integer
     #   resp.allow_unassociated_targets #=> Boolean
@@ -9535,7 +9618,7 @@ module Aws::SSM
         params: params,
         config: config)
       context[:gem_name] = 'aws-sdk-ssm'
-      context[:gem_version] = '1.80.0'
+      context[:gem_version] = '1.85.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-ssm/client_api.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 # WARNING ABOUT GENERATED CODE
 #
 # This file is generated. See the contributing guide for more information:
@@ -614,6 +616,7 @@ module Aws::SSM
     MaintenanceWindowLambdaQualifier = Shapes::StringShape.new(name: 'MaintenanceWindowLambdaQualifier')
     MaintenanceWindowMaxResults = Shapes::IntegerShape.new(name: 'MaintenanceWindowMaxResults')
     MaintenanceWindowName = Shapes::StringShape.new(name: 'MaintenanceWindowName')
+    MaintenanceWindowOffset = Shapes::IntegerShape.new(name: 'MaintenanceWindowOffset')
     MaintenanceWindowResourceType = Shapes::StringShape.new(name: 'MaintenanceWindowResourceType')
     MaintenanceWindowRunCommandParameters = Shapes::StructureShape.new(name: 'MaintenanceWindowRunCommandParameters')
     MaintenanceWindowSchedule = Shapes::StringShape.new(name: 'MaintenanceWindowSchedule')
@@ -1533,6 +1536,7 @@ module Aws::SSM
     CreateMaintenanceWindowRequest.add_member(:end_date, Shapes::ShapeRef.new(shape: MaintenanceWindowStringDateTime, location_name: "EndDate"))
     CreateMaintenanceWindowRequest.add_member(:schedule, Shapes::ShapeRef.new(shape: MaintenanceWindowSchedule, required: true, location_name: "Schedule"))
     CreateMaintenanceWindowRequest.add_member(:schedule_timezone, Shapes::ShapeRef.new(shape: MaintenanceWindowTimezone, location_name: "ScheduleTimezone"))
+    CreateMaintenanceWindowRequest.add_member(:schedule_offset, Shapes::ShapeRef.new(shape: MaintenanceWindowOffset, location_name: "ScheduleOffset", metadata: {"box"=>true}))
     CreateMaintenanceWindowRequest.add_member(:duration, Shapes::ShapeRef.new(shape: MaintenanceWindowDurationHours, required: true, location_name: "Duration"))
     CreateMaintenanceWindowRequest.add_member(:cutoff, Shapes::ShapeRef.new(shape: MaintenanceWindowCutoff, required: true, location_name: "Cutoff"))
     CreateMaintenanceWindowRequest.add_member(:allow_unassociated_targets, Shapes::ShapeRef.new(shape: MaintenanceWindowAllowUnassociatedTargets, required: true, location_name: "AllowUnassociatedTargets"))
@@ -2287,6 +2291,7 @@ module Aws::SSM
     GetMaintenanceWindowResult.add_member(:end_date, Shapes::ShapeRef.new(shape: MaintenanceWindowStringDateTime, location_name: "EndDate"))
     GetMaintenanceWindowResult.add_member(:schedule, Shapes::ShapeRef.new(shape: MaintenanceWindowSchedule, location_name: "Schedule"))
     GetMaintenanceWindowResult.add_member(:schedule_timezone, Shapes::ShapeRef.new(shape: MaintenanceWindowTimezone, location_name: "ScheduleTimezone"))
+    GetMaintenanceWindowResult.add_member(:schedule_offset, Shapes::ShapeRef.new(shape: MaintenanceWindowOffset, location_name: "ScheduleOffset", metadata: {"box"=>true}))
     GetMaintenanceWindowResult.add_member(:next_execution_time, Shapes::ShapeRef.new(shape: MaintenanceWindowStringDateTime, location_name: "NextExecutionTime"))
     GetMaintenanceWindowResult.add_member(:duration, Shapes::ShapeRef.new(shape: MaintenanceWindowDurationHours, location_name: "Duration"))
     GetMaintenanceWindowResult.add_member(:cutoff, Shapes::ShapeRef.new(shape: MaintenanceWindowCutoff, location_name: "Cutoff"))
@@ -2965,6 +2970,7 @@ module Aws::SSM
     MaintenanceWindowIdentity.add_member(:cutoff, Shapes::ShapeRef.new(shape: MaintenanceWindowCutoff, location_name: "Cutoff"))
     MaintenanceWindowIdentity.add_member(:schedule, Shapes::ShapeRef.new(shape: MaintenanceWindowSchedule, location_name: "Schedule"))
     MaintenanceWindowIdentity.add_member(:schedule_timezone, Shapes::ShapeRef.new(shape: MaintenanceWindowTimezone, location_name: "ScheduleTimezone"))
+    MaintenanceWindowIdentity.add_member(:schedule_offset, Shapes::ShapeRef.new(shape: MaintenanceWindowOffset, location_name: "ScheduleOffset", metadata: {"box"=>true}))
     MaintenanceWindowIdentity.add_member(:end_date, Shapes::ShapeRef.new(shape: MaintenanceWindowStringDateTime, location_name: "EndDate"))
     MaintenanceWindowIdentity.add_member(:start_date, Shapes::ShapeRef.new(shape: MaintenanceWindowStringDateTime, location_name: "StartDate"))
     MaintenanceWindowIdentity.add_member(:next_execution_time, Shapes::ShapeRef.new(shape: MaintenanceWindowStringDateTime, location_name: "NextExecutionTime"))
@@ -3901,6 +3907,7 @@ module Aws::SSM
     UpdateMaintenanceWindowRequest.add_member(:end_date, Shapes::ShapeRef.new(shape: MaintenanceWindowStringDateTime, location_name: "EndDate"))
     UpdateMaintenanceWindowRequest.add_member(:schedule, Shapes::ShapeRef.new(shape: MaintenanceWindowSchedule, location_name: "Schedule"))
     UpdateMaintenanceWindowRequest.add_member(:schedule_timezone, Shapes::ShapeRef.new(shape: MaintenanceWindowTimezone, location_name: "ScheduleTimezone"))
+    UpdateMaintenanceWindowRequest.add_member(:schedule_offset, Shapes::ShapeRef.new(shape: MaintenanceWindowOffset, location_name: "ScheduleOffset", metadata: {"box"=>true}))
     UpdateMaintenanceWindowRequest.add_member(:duration, Shapes::ShapeRef.new(shape: MaintenanceWindowDurationHours, location_name: "Duration", metadata: {"box"=>true}))
     UpdateMaintenanceWindowRequest.add_member(:cutoff, Shapes::ShapeRef.new(shape: MaintenanceWindowCutoff, location_name: "Cutoff", metadata: {"box"=>true}))
     UpdateMaintenanceWindowRequest.add_member(:allow_unassociated_targets, Shapes::ShapeRef.new(shape: MaintenanceWindowAllowUnassociatedTargets, location_name: "AllowUnassociatedTargets", metadata: {"box"=>true}))
@@ -3915,6 +3922,7 @@ module Aws::SSM
     UpdateMaintenanceWindowResult.add_member(:end_date, Shapes::ShapeRef.new(shape: MaintenanceWindowStringDateTime, location_name: "EndDate"))
     UpdateMaintenanceWindowResult.add_member(:schedule, Shapes::ShapeRef.new(shape: MaintenanceWindowSchedule, location_name: "Schedule"))
     UpdateMaintenanceWindowResult.add_member(:schedule_timezone, Shapes::ShapeRef.new(shape: MaintenanceWindowTimezone, location_name: "ScheduleTimezone"))
+    UpdateMaintenanceWindowResult.add_member(:schedule_offset, Shapes::ShapeRef.new(shape: MaintenanceWindowOffset, location_name: "ScheduleOffset", metadata: {"box"=>true}))
     UpdateMaintenanceWindowResult.add_member(:duration, Shapes::ShapeRef.new(shape: MaintenanceWindowDurationHours, location_name: "Duration"))
     UpdateMaintenanceWindowResult.add_member(:cutoff, Shapes::ShapeRef.new(shape: MaintenanceWindowCutoff, location_name: "Cutoff"))
     UpdateMaintenanceWindowResult.add_member(:allow_unassociated_targets, Shapes::ShapeRef.new(shape: MaintenanceWindowAllowUnassociatedTargets, location_name: "AllowUnassociatedTargets"))

data/lib/aws-sdk-ssm/customizations.rb

@@ -1,3 +1,4 @@
+# frozen_string_literal: true
 # WARNING ABOUT GENERATED CODE
 #
 # This file is generated. See the contributing for info on making contributions:

data/lib/aws-sdk-ssm/errors.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 # WARNING ABOUT GENERATED CODE
 #
 # This file is generated. See the contributing guide for more information:

data/lib/aws-sdk-ssm/resource.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 # WARNING ABOUT GENERATED CODE
 #
 # This file is generated. See the contributing guide for more information:

data/lib/aws-sdk-ssm/types.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 # WARNING ABOUT GENERATED CODE
 #
 # This file is generated. See the contributing guide for more information:
@@ -24,6 +26,7 @@ module Aws::SSM
     class AccountSharingInfo < Struct.new(
       :account_id,
       :shared_document_version)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -89,6 +92,7 @@ module Aws::SSM
       :expired,
       :created_date,
       :tags)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -152,6 +156,7 @@ module Aws::SSM
       :resource_type,
       :resource_id,
       :tags)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -170,6 +175,7 @@ module Aws::SSM
     #
     class AlreadyExistsException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -239,6 +245,7 @@ module Aws::SSM
       :overview,
       :schedule_expression,
       :association_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -405,6 +412,7 @@ module Aws::SSM
       :compliance_severity,
       :sync_compliance,
       :apply_only_at_cron_interval)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -417,6 +425,7 @@ module Aws::SSM
     #
     class AssociationDoesNotExist < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -466,6 +475,7 @@ module Aws::SSM
       :created_time,
       :last_execution_date,
       :resource_count_by_status)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -479,6 +489,7 @@ module Aws::SSM
     #
     class AssociationExecutionDoesNotExist < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -511,6 +522,7 @@ module Aws::SSM
       :key,
       :value,
       :type)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -565,6 +577,7 @@ module Aws::SSM
       :detailed_status,
       :last_execution_date,
       :output_source)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -591,6 +604,7 @@ module Aws::SSM
     class AssociationExecutionTargetsFilter < Struct.new(
       :key,
       :value)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -617,6 +631,7 @@ module Aws::SSM
     class AssociationFilter < Struct.new(
       :key,
       :value)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -650,6 +665,7 @@ module Aws::SSM
       :status,
       :detailed_status,
       :association_status_aggregated_count)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -688,6 +704,7 @@ module Aws::SSM
       :name,
       :message,
       :additional_info)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -814,6 +831,7 @@ module Aws::SSM
       :compliance_severity,
       :sync_compliance,
       :apply_only_at_cron_interval)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -827,6 +845,7 @@ module Aws::SSM
     #
     class AssociationVersionLimitExceeded < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -861,6 +880,7 @@ module Aws::SSM
       :hash,
       :hash_type,
       :url)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -874,6 +894,7 @@ module Aws::SSM
     #
     class AttachmentInformation < Struct.new(
       :name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -936,6 +957,7 @@ module Aws::SSM
       :key,
       :values,
       :name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -948,6 +970,7 @@ module Aws::SSM
     #
     class AutomationDefinitionNotFoundException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -961,6 +984,7 @@ module Aws::SSM
     #
     class AutomationDefinitionVersionNotFoundException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1107,6 +1131,7 @@ module Aws::SSM
       :target,
       :target_locations,
       :progress_counters)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1137,6 +1162,7 @@ module Aws::SSM
     class AutomationExecutionFilter < Struct.new(
       :key,
       :values)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1150,6 +1176,7 @@ module Aws::SSM
     #
     class AutomationExecutionLimitExceededException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1280,6 +1307,7 @@ module Aws::SSM
       :max_errors,
       :target,
       :automation_type)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1293,6 +1321,7 @@ module Aws::SSM
     #
     class AutomationExecutionNotFoundException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1306,6 +1335,7 @@ module Aws::SSM
     #
     class AutomationStepNotFoundException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1332,6 +1362,7 @@ module Aws::SSM
     class CancelCommandRequest < Struct.new(
       :command_id,
       :instance_ids)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1357,6 +1388,7 @@ module Aws::SSM
     #
     class CancelMaintenanceWindowExecutionRequest < Struct.new(
       :window_execution_id)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1368,6 +1400,7 @@ module Aws::SSM
     #
     class CancelMaintenanceWindowExecutionResult < Struct.new(
       :window_execution_id)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1397,6 +1430,7 @@ module Aws::SSM
     class CloudWatchOutputConfig < Struct.new(
       :cloud_watch_log_group_name,
       :cloud_watch_output_enabled)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1603,11 +1637,17 @@ module Aws::SSM
       :notification_config,
       :cloud_watch_output_config,
       :timeout_seconds)
+      SENSITIVE = []
       include Aws::Structure
     end
 
     # Describes a command filter.
     #
+    # <note markdown="1"> An instance ID can't be specified when a command status is `Pending`
+    # because the command hasn't run on the instance yet.
+    #
+    #  </note>
+    #
     # @note When making an API call, you may pass CommandFilter
     #   data as a hash:
     #
@@ -1668,6 +1708,7 @@ module Aws::SSM
     class CommandFilter < Struct.new(
       :key,
       :value)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1823,6 +1864,7 @@ module Aws::SSM
       :service_role,
       :notification_config,
       :cloud_watch_output_config)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1976,6 +2018,7 @@ module Aws::SSM
       :output_s3_region,
       :output_s3_bucket_name,
       :output_s3_key_prefix)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2015,6 +2058,7 @@ module Aws::SSM
       :execution_time,
       :execution_id,
       :execution_type)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2083,6 +2127,7 @@ module Aws::SSM
       :severity,
       :execution_summary,
       :details)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2135,6 +2180,7 @@ module Aws::SSM
       :severity,
       :status,
       :details)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2169,6 +2215,7 @@ module Aws::SSM
       :key,
       :values,
       :type)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2193,6 +2240,7 @@ module Aws::SSM
       :compliance_type,
       :compliant_summary,
       :non_compliant_summary)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2206,6 +2254,7 @@ module Aws::SSM
     #
     class ComplianceTypeCountLimitExceededException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2225,6 +2274,7 @@ module Aws::SSM
     class CompliantSummary < Struct.new(
       :compliant_count,
       :severity_summary)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2319,6 +2369,7 @@ module Aws::SSM
       :registration_limit,
       :expiration_date,
       :tags)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2338,6 +2389,7 @@ module Aws::SSM
     class CreateActivationResult < Struct.new(
       :activation_id,
       :activation_code)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2386,6 +2438,7 @@ module Aws::SSM
     #
     class CreateAssociationBatchRequest < Struct.new(
       :entries)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2558,6 +2611,7 @@ module Aws::SSM
       :compliance_severity,
       :sync_compliance,
       :apply_only_at_cron_interval)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2574,6 +2628,7 @@ module Aws::SSM
     class CreateAssociationBatchResult < Struct.new(
       :successful,
       :failed)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2764,6 +2819,7 @@ module Aws::SSM
       :compliance_severity,
       :sync_compliance,
       :apply_only_at_cron_interval)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2775,6 +2831,7 @@ module Aws::SSM
     #
     class CreateAssociationResult < Struct.new(
       :association_description)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2922,6 +2979,7 @@ module Aws::SSM
       :document_format,
       :target_type,
       :tags)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2933,6 +2991,7 @@ module Aws::SSM
     #
     class CreateDocumentResult < Struct.new(
       :document_description)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2946,6 +3005,7 @@ module Aws::SSM
     #         end_date: "MaintenanceWindowStringDateTime",
     #         schedule: "MaintenanceWindowSchedule", # required
     #         schedule_timezone: "MaintenanceWindowTimezone",
+    #         schedule_offset: 1,
     #         duration: 1, # required
     #         cutoff: 1, # required
     #         allow_unassociated_targets: false, # required
@@ -2999,6 +3059,19 @@ module Aws::SSM
     #   [1]: https://www.iana.org/time-zones
     #   @return [String]
     #
+    # @!attribute [rw] schedule_offset
+    #   The number of days to wait after the date and time specified by a
+    #   CRON expression before running the maintenance window.
+    #
+    #   For example, the following cron expression schedules a maintenance
+    #   window to run on the third Tuesday of every month at 11:30 PM.
+    #
+    #   `cron(0 30 23 ? * TUE#3 *)`
+    #
+    #   If the schedule offset is `2`, the maintenance window won't run
+    #   until two days later.
+    #   @return [Integer]
+    #
     # @!attribute [rw] duration
     #   The duration of the maintenance window in hours.
     #   @return [Integer]
@@ -3055,11 +3128,13 @@ module Aws::SSM
       :end_date,
       :schedule,
       :schedule_timezone,
+      :schedule_offset,
       :duration,
       :cutoff,
       :allow_unassociated_targets,
       :client_token,
       :tags)
+      SENSITIVE = [:description]
       include Aws::Structure
     end
 
@@ -3071,6 +3146,7 @@ module Aws::SSM
     #
     class CreateMaintenanceWindowResult < Struct.new(
       :window_id)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3214,6 +3290,7 @@ module Aws::SSM
       :tags,
       :category,
       :severity)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3225,6 +3302,7 @@ module Aws::SSM
     #
     class CreateOpsItemResponse < Struct.new(
       :ops_item_id)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3405,6 +3483,7 @@ module Aws::SSM
       :sources,
       :client_token,
       :tags)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3416,6 +3495,7 @@ module Aws::SSM
     #
     class CreatePatchBaselineResult < Struct.new(
       :baseline_id)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3482,6 +3562,7 @@ module Aws::SSM
       :s3_destination,
       :sync_type,
       :sync_source)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3499,6 +3580,7 @@ module Aws::SSM
     #
     class CustomSchemaCountLimitExceededException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3517,6 +3599,7 @@ module Aws::SSM
     #
     class DeleteActivationRequest < Struct.new(
       :activation_id)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3551,6 +3634,7 @@ module Aws::SSM
       :name,
       :instance_id,
       :association_id)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3597,6 +3681,7 @@ module Aws::SSM
       :document_version,
       :version_name,
       :force)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3656,6 +3741,7 @@ module Aws::SSM
       :schema_delete_option,
       :dry_run,
       :client_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3686,6 +3772,7 @@ module Aws::SSM
       :deletion_id,
       :type_name,
       :deletion_summary)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3704,6 +3791,7 @@ module Aws::SSM
     #
     class DeleteMaintenanceWindowRequest < Struct.new(
       :window_id)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3715,6 +3803,7 @@ module Aws::SSM
     #
     class DeleteMaintenanceWindowResult < Struct.new(
       :window_id)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3733,6 +3822,7 @@ module Aws::SSM
     #
     class DeleteParameterRequest < Struct.new(
       :name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3755,6 +3845,7 @@ module Aws::SSM
     #
     class DeleteParametersRequest < Struct.new(
       :names)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3772,6 +3863,7 @@ module Aws::SSM
     class DeleteParametersResult < Struct.new(
       :deleted_parameters,
       :invalid_parameters)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3790,6 +3882,7 @@ module Aws::SSM
     #
     class DeletePatchBaselineRequest < Struct.new(
       :baseline_id)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3801,6 +3894,7 @@ module Aws::SSM
     #
     class DeletePatchBaselineResult < Struct.new(
       :baseline_id)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3825,6 +3919,7 @@ module Aws::SSM
     class DeleteResourceDataSyncRequest < Struct.new(
       :sync_name,
       :sync_type)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3848,6 +3943,7 @@ module Aws::SSM
     #
     class DeregisterManagedInstanceRequest < Struct.new(
       :instance_id)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3877,6 +3973,7 @@ module Aws::SSM
     class DeregisterPatchBaselineForPatchGroupRequest < Struct.new(
       :baseline_id,
       :patch_group)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3893,6 +3990,7 @@ module Aws::SSM
     class DeregisterPatchBaselineForPatchGroupResult < Struct.new(
       :baseline_id,
       :patch_group)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3925,6 +4023,7 @@ module Aws::SSM
       :window_id,
       :window_target_id,
       :safe)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3941,6 +4040,7 @@ module Aws::SSM
     class DeregisterTargetFromMaintenanceWindowResult < Struct.new(
       :window_id,
       :window_target_id)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3965,6 +4065,7 @@ module Aws::SSM
     class DeregisterTaskFromMaintenanceWindowRequest < Struct.new(
       :window_id,
       :window_task_id)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3981,6 +4082,7 @@ module Aws::SSM
     class DeregisterTaskFromMaintenanceWindowResult < Struct.new(
       :window_id,
       :window_task_id)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4007,6 +4109,7 @@ module Aws::SSM
     class DescribeActivationsFilter < Struct.new(
       :filter_key,
       :filter_values)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4045,6 +4148,7 @@ module Aws::SSM
       :filters,
       :max_results,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4062,6 +4166,7 @@ module Aws::SSM
     class DescribeActivationsResult < Struct.new(
       :activation_list,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4120,6 +4225,7 @@ module Aws::SSM
       :filters,
       :max_results,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4137,6 +4243,7 @@ module Aws::SSM
     class DescribeAssociationExecutionTargetsResult < Struct.new(
       :association_execution_targets,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4190,6 +4297,7 @@ module Aws::SSM
       :filters,
       :max_results,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4207,6 +4315,7 @@ module Aws::SSM
     class DescribeAssociationExecutionsResult < Struct.new(
       :association_executions,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4247,6 +4356,7 @@ module Aws::SSM
       :instance_id,
       :association_id,
       :association_version)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4258,6 +4368,7 @@ module Aws::SSM
     #
     class DescribeAssociationResult < Struct.new(
       :association_description)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4296,6 +4407,7 @@ module Aws::SSM
       :filters,
       :max_results,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4314,6 +4426,7 @@ module Aws::SSM
     class DescribeAutomationExecutionsResult < Struct.new(
       :automation_execution_metadata_list,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4367,6 +4480,7 @@ module Aws::SSM
       :next_token,
       :max_results,
       :reverse_order)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4385,6 +4499,7 @@ module Aws::SSM
     class DescribeAutomationStepExecutionsResult < Struct.new(
       :step_executions,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4421,6 +4536,7 @@ module Aws::SSM
       :filters,
       :max_results,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4438,6 +4554,7 @@ module Aws::SSM
     class DescribeAvailablePatchesResult < Struct.new(
       :patches,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4463,6 +4580,7 @@ module Aws::SSM
     class DescribeDocumentPermissionRequest < Struct.new(
       :name,
       :permission_type)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4481,6 +4599,7 @@ module Aws::SSM
     class DescribeDocumentPermissionResponse < Struct.new(
       :account_ids,
       :account_sharing_info_list)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4514,6 +4633,7 @@ module Aws::SSM
       :name,
       :document_version,
       :version_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4525,6 +4645,7 @@ module Aws::SSM
     #
     class DescribeDocumentResult < Struct.new(
       :document)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4558,6 +4679,7 @@ module Aws::SSM
       :instance_id,
       :max_results,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4575,6 +4697,7 @@ module Aws::SSM
     class DescribeEffectiveInstanceAssociationsResult < Struct.new(
       :associations,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4606,6 +4729,7 @@ module Aws::SSM
       :baseline_id,
       :max_results,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4623,6 +4747,7 @@ module Aws::SSM
     class DescribeEffectivePatchesForPatchBaselineResult < Struct.new(
       :effective_patches,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4656,6 +4781,7 @@ module Aws::SSM
       :instance_id,
       :max_results,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4673,6 +4799,7 @@ module Aws::SSM
     class DescribeInstanceAssociationsStatusResult < Struct.new(
       :instance_association_status_infos,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4733,6 +4860,7 @@ module Aws::SSM
       :filters,
       :max_results,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4750,6 +4878,7 @@ module Aws::SSM
     class DescribeInstanceInformationResult < Struct.new(
       :instance_information_list,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4800,6 +4929,7 @@ module Aws::SSM
       :filters,
       :next_token,
       :max_results)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4817,6 +4947,7 @@ module Aws::SSM
     class DescribeInstancePatchStatesForPatchGroupResult < Struct.new(
       :instance_patch_states,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4849,6 +4980,7 @@ module Aws::SSM
       :instance_ids,
       :next_token,
       :max_results)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4866,6 +4998,7 @@ module Aws::SSM
     class DescribeInstancePatchStatesResult < Struct.new(
       :instance_patch_states,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4911,6 +5044,7 @@ module Aws::SSM
       :filters,
       :next_token,
       :max_results)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4942,6 +5076,7 @@ module Aws::SSM
     class DescribeInstancePatchesResult < Struct.new(
       :patches,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4976,6 +5111,7 @@ module Aws::SSM
       :deletion_id,
       :next_token,
       :max_results)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4993,6 +5129,7 @@ module Aws::SSM
     class DescribeInventoryDeletionsResult < Struct.new(
       :inventory_deletions,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5047,6 +5184,7 @@ module Aws::SSM
       :filters,
       :max_results,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5064,6 +5202,7 @@ module Aws::SSM
     class DescribeMaintenanceWindowExecutionTaskInvocationsResult < Struct.new(
       :window_execution_task_invocation_identities,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5112,6 +5251,7 @@ module Aws::SSM
       :filters,
       :max_results,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5129,6 +5269,7 @@ module Aws::SSM
     class DescribeMaintenanceWindowExecutionTasksResult < Struct.new(
       :window_execution_task_identities,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5182,6 +5323,7 @@ module Aws::SSM
       :filters,
       :max_results,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5199,6 +5341,7 @@ module Aws::SSM
     class DescribeMaintenanceWindowExecutionsResult < Struct.new(
       :window_executions,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5263,6 +5406,7 @@ module Aws::SSM
       :filters,
       :max_results,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5281,6 +5425,7 @@ module Aws::SSM
     class DescribeMaintenanceWindowScheduleResult < Struct.new(
       :scheduled_window_executions,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5327,6 +5472,7 @@ module Aws::SSM
       :filters,
       :max_results,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5344,6 +5490,7 @@ module Aws::SSM
     class DescribeMaintenanceWindowTargetsResult < Struct.new(
       :targets,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5390,6 +5537,7 @@ module Aws::SSM
       :filters,
       :max_results,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5407,6 +5555,7 @@ module Aws::SSM
     class DescribeMaintenanceWindowTasksResult < Struct.new(
       :tasks,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5452,6 +5601,7 @@ module Aws::SSM
       :resource_type,
       :max_results,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5470,6 +5620,7 @@ module Aws::SSM
     class DescribeMaintenanceWindowsForTargetResult < Struct.new(
       :window_identities,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5510,6 +5661,7 @@ module Aws::SSM
       :filters,
       :max_results,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5527,6 +5679,7 @@ module Aws::SSM
     class DescribeMaintenanceWindowsResult < Struct.new(
       :window_identities,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5622,6 +5775,7 @@ module Aws::SSM
       :ops_item_filters,
       :max_results,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5639,6 +5793,7 @@ module Aws::SSM
     class DescribeOpsItemsResponse < Struct.new(
       :next_token,
       :ops_item_summaries)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5689,6 +5844,7 @@ module Aws::SSM
       :parameter_filters,
       :max_results,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5705,6 +5861,7 @@ module Aws::SSM
     class DescribeParametersResult < Struct.new(
       :parameters,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5746,6 +5903,7 @@ module Aws::SSM
       :filters,
       :max_results,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5763,6 +5921,7 @@ module Aws::SSM
     class DescribePatchBaselinesResult < Struct.new(
       :baseline_identities,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5782,6 +5941,7 @@ module Aws::SSM
     #
     class DescribePatchGroupStateRequest < Struct.new(
       :patch_group)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5849,6 +6009,7 @@ module Aws::SSM
       :instances_with_failed_patches,
       :instances_with_not_applicable_patches,
       :instances_with_unreported_not_applicable_patches)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5873,6 +6034,22 @@ module Aws::SSM
     # @!attribute [rw] filters
     #   One or more filters. Use a filter to return a more specific list of
     #   results.
+    #
+    #   For `DescribePatchGroups`,valid filter keys include the following:
+    #
+    #   * `NAME_PREFIX`\: The name of the patch group. Wildcards (*) are
+    #     accepted.
+    #
+    #   * `OPERATING_SYSTEM`\: The supported operating system type to return
+    #     results for. For valid operating system values, see
+    #     GetDefaultPatchBaselineRequest$OperatingSystem in
+    #     CreatePatchBaseline.
+    #
+    #     Examples:
+    #
+    #     * `--filters Key=NAME_PREFIX,Values=MyPatchGroup*`
+    #
+    #     * `--filters Key=OPERATING_SYSTEM,Values=AMAZON_LINUX_2`
     #   @return [Array<Types::PatchOrchestratorFilter>]
     #
     # @!attribute [rw] next_token
@@ -5886,6 +6063,7 @@ module Aws::SSM
       :max_results,
       :filters,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5908,6 +6086,7 @@ module Aws::SSM
     class DescribePatchGroupsResult < Struct.new(
       :mappings,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5955,6 +6134,7 @@ module Aws::SSM
       :patch_set,
       :max_results,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5973,6 +6153,7 @@ module Aws::SSM
     class DescribePatchPropertiesResult < Struct.new(
       :properties,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -6019,6 +6200,7 @@ module Aws::SSM
       :max_results,
       :next_token,
       :filters)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -6036,6 +6218,7 @@ module Aws::SSM
     class DescribeSessionsResponse < Struct.new(
       :sessions,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -6048,6 +6231,7 @@ module Aws::SSM
     #
     class DocumentAlreadyExists < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -6071,6 +6255,7 @@ module Aws::SSM
       :name,
       :default_version,
       :default_version_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -6213,6 +6398,7 @@ module Aws::SSM
       :tags,
       :attachments_information,
       :requires)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -6239,6 +6425,7 @@ module Aws::SSM
     class DocumentFilter < Struct.new(
       :key,
       :value)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -6313,6 +6500,7 @@ module Aws::SSM
       :target_type,
       :tags,
       :requires)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -6369,6 +6557,7 @@ module Aws::SSM
     class DocumentKeyValuesFilter < Struct.new(
       :key,
       :values)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -6381,6 +6570,7 @@ module Aws::SSM
     #
     class DocumentLimitExceeded < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -6413,6 +6603,7 @@ module Aws::SSM
       :type,
       :description,
       :default_value)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -6428,6 +6619,7 @@ module Aws::SSM
     #
     class DocumentPermissionLimit < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -6455,6 +6647,7 @@ module Aws::SSM
     class DocumentRequires < Struct.new(
       :name,
       :version)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -6509,6 +6702,7 @@ module Aws::SSM
       :document_format,
       :status,
       :status_information)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -6522,6 +6716,7 @@ module Aws::SSM
     #
     class DocumentVersionLimitExceeded < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -6542,6 +6737,7 @@ module Aws::SSM
     #
     class DoesNotExistException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -6555,6 +6751,7 @@ module Aws::SSM
     #
     class DuplicateDocumentContent < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -6568,6 +6765,7 @@ module Aws::SSM
     #
     class DuplicateDocumentVersionName < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -6601,6 +6799,7 @@ module Aws::SSM
     class EffectivePatch < Struct.new(
       :patch,
       :patch_status)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -6624,6 +6823,7 @@ module Aws::SSM
       :entry,
       :message,
       :fault)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -6650,6 +6850,7 @@ module Aws::SSM
       :failure_stage,
       :failure_type,
       :details)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -6663,6 +6864,7 @@ module Aws::SSM
     #
     class FeatureNotAvailableException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -6683,6 +6885,7 @@ module Aws::SSM
     #
     class GetAutomationExecutionRequest < Struct.new(
       :automation_execution_id)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -6695,6 +6898,7 @@ module Aws::SSM
     #
     class GetAutomationExecutionResult < Struct.new(
       :automation_execution)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -6727,6 +6931,7 @@ module Aws::SSM
     class GetCalendarStateRequest < Struct.new(
       :calendar_names,
       :at_time)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -6763,6 +6968,7 @@ module Aws::SSM
       :state,
       :at_time,
       :next_transition_time)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -6789,6 +6995,9 @@ module Aws::SSM
     #   (Optional) The name of the plugin for which you want detailed
     #   results. If the document contains only one plugin, the name can be
     #   omitted and the details will be returned.
+    #
+    #   Plugin names are also referred to as step names in Systems Manager
+    #   documents.
     #   @return [String]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ssm-2014-11-06/GetCommandInvocationRequest AWS API Documentation
@@ -6797,6 +7006,7 @@ module Aws::SSM
       :command_id,
       :instance_id,
       :plugin_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -6973,6 +7183,7 @@ module Aws::SSM
       :standard_error_content,
       :standard_error_url,
       :cloud_watch_output_config)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -6991,6 +7202,7 @@ module Aws::SSM
     #
     class GetConnectionStatusRequest < Struct.new(
       :target)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -7008,6 +7220,7 @@ module Aws::SSM
     class GetConnectionStatusResponse < Struct.new(
       :target,
       :status)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -7027,6 +7240,7 @@ module Aws::SSM
     #
     class GetDefaultPatchBaselineRequest < Struct.new(
       :operating_system)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -7043,6 +7257,7 @@ module Aws::SSM
     class GetDefaultPatchBaselineResult < Struct.new(
       :baseline_id,
       :operating_system)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -7068,6 +7283,7 @@ module Aws::SSM
     class GetDeployablePatchSnapshotForInstanceRequest < Struct.new(
       :instance_id,
       :snapshot_id)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -7097,6 +7313,7 @@ module Aws::SSM
       :snapshot_id,
       :snapshot_download_url,
       :product)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -7136,6 +7353,7 @@ module Aws::SSM
       :version_name,
       :document_version,
       :document_format)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -7201,6 +7419,7 @@ module Aws::SSM
       :document_format,
       :requires,
       :attachments_content)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -7280,6 +7499,7 @@ module Aws::SSM
       :result_attributes,
       :next_token,
       :max_results)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -7298,6 +7518,7 @@ module Aws::SSM
     class GetInventoryResult < Struct.new(
       :entities,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -7346,6 +7567,7 @@ module Aws::SSM
       :max_results,
       :aggregator,
       :sub_type)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -7363,6 +7585,7 @@ module Aws::SSM
     class GetInventorySchemaResult < Struct.new(
       :schemas,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -7381,6 +7604,7 @@ module Aws::SSM
     #
     class GetMaintenanceWindowExecutionRequest < Struct.new(
       :window_execution_id)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -7418,6 +7642,7 @@ module Aws::SSM
       :status_details,
       :start_time,
       :end_time)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -7450,6 +7675,7 @@ module Aws::SSM
       :window_execution_id,
       :task_id,
       :invocation_id)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -7519,6 +7745,7 @@ module Aws::SSM
       :end_time,
       :owner_information,
       :window_target_id)
+      SENSITIVE = [:parameters, :owner_information]
       include Aws::Structure
     end
 
@@ -7544,6 +7771,7 @@ module Aws::SSM
     class GetMaintenanceWindowExecutionTaskRequest < Struct.new(
       :window_execution_id,
       :task_id)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -7634,6 +7862,7 @@ module Aws::SSM
       :status_details,
       :start_time,
       :end_time)
+      SENSITIVE = [:task_parameters]
       include Aws::Structure
     end
 
@@ -7653,6 +7882,7 @@ module Aws::SSM
     #
     class GetMaintenanceWindowRequest < Struct.new(
       :window_id)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -7697,6 +7927,11 @@ module Aws::SSM
     #   [1]: https://www.iana.org/time-zones
     #   @return [String]
     #
+    # @!attribute [rw] schedule_offset
+    #   The number of days to wait to run a maintenance window after the
+    #   scheduled CRON expression date and time.
+    #   @return [Integer]
+    #
     # @!attribute [rw] next_execution_time
     #   The next time the maintenance window will actually run, taking into
     #   account any specified times for the maintenance window to become
@@ -7739,6 +7974,7 @@ module Aws::SSM
       :end_date,
       :schedule,
       :schedule_timezone,
+      :schedule_offset,
       :next_execution_time,
       :duration,
       :cutoff,
@@ -7746,6 +7982,7 @@ module Aws::SSM
       :enabled,
       :created_date,
       :modified_date)
+      SENSITIVE = [:description]
       include Aws::Structure
     end
 
@@ -7770,6 +8007,7 @@ module Aws::SSM
     class GetMaintenanceWindowTaskRequest < Struct.new(
       :window_id,
       :window_task_id)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -7872,6 +8110,7 @@ module Aws::SSM
       :logging_info,
       :name,
       :description)
+      SENSITIVE = [:task_parameters, :description]
       include Aws::Structure
     end
 
@@ -7890,6 +8129,7 @@ module Aws::SSM
     #
     class GetOpsItemRequest < Struct.new(
       :ops_item_id)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -7901,6 +8141,7 @@ module Aws::SSM
     #
     class GetOpsItemResponse < Struct.new(
       :ops_item)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -7982,6 +8223,7 @@ module Aws::SSM
       :result_attributes,
       :next_token,
       :max_results)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -7999,6 +8241,7 @@ module Aws::SSM
     class GetOpsSummaryResult < Struct.new(
       :entities,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -8039,6 +8282,7 @@ module Aws::SSM
       :with_decryption,
       :max_results,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -8056,6 +8300,7 @@ module Aws::SSM
     class GetParameterHistoryResult < Struct.new(
       :parameters,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -8081,6 +8326,7 @@ module Aws::SSM
     class GetParameterRequest < Struct.new(
       :name,
       :with_decryption)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -8092,6 +8338,7 @@ module Aws::SSM
     #
     class GetParameterResult < Struct.new(
       :parameter)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -8159,6 +8406,7 @@ module Aws::SSM
       :with_decryption,
       :max_results,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -8176,6 +8424,7 @@ module Aws::SSM
     class GetParametersByPathResult < Struct.new(
       :parameters,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -8202,6 +8451,7 @@ module Aws::SSM
     class GetParametersRequest < Struct.new(
       :names,
       :with_decryption)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -8219,6 +8469,7 @@ module Aws::SSM
     class GetParametersResult < Struct.new(
       :parameters,
       :invalid_parameters)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -8245,6 +8496,7 @@ module Aws::SSM
     class GetPatchBaselineForPatchGroupRequest < Struct.new(
       :patch_group,
       :operating_system)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -8268,6 +8520,7 @@ module Aws::SSM
       :baseline_id,
       :patch_group,
       :operating_system)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -8286,6 +8539,7 @@ module Aws::SSM
     #
     class GetPatchBaselineRequest < Struct.new(
       :baseline_id)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -8375,6 +8629,7 @@ module Aws::SSM
       :modified_date,
       :description,
       :sources)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -8398,6 +8653,7 @@ module Aws::SSM
     #
     class GetServiceSettingRequest < Struct.new(
       :setting_id)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -8411,6 +8667,7 @@ module Aws::SSM
     #
     class GetServiceSettingResult < Struct.new(
       :service_setting)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -8436,6 +8693,7 @@ module Aws::SSM
     #
     class HierarchyLevelLimitExceededException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -8455,6 +8713,7 @@ module Aws::SSM
     #
     class HierarchyTypeMismatchException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -8469,6 +8728,7 @@ module Aws::SSM
     #
     class IdempotentParameterMismatch < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -8483,6 +8743,7 @@ module Aws::SSM
     #
     class IncompatiblePolicyException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -8501,6 +8762,7 @@ module Aws::SSM
     class InstanceAggregatedAssociationOverview < Struct.new(
       :detailed_status,
       :instance_association_status_aggregated_count)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -8529,6 +8791,7 @@ module Aws::SSM
       :instance_id,
       :content,
       :association_version)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -8553,6 +8816,7 @@ module Aws::SSM
     #
     class InstanceAssociationOutputLocation < Struct.new(
       :s3_location)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -8568,6 +8832,7 @@ module Aws::SSM
     #
     class InstanceAssociationOutputUrl < Struct.new(
       :s3_output_url)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -8637,6 +8902,7 @@ module Aws::SSM
       :error_code,
       :output_url,
       :association_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -8685,8 +8951,17 @@ module Aws::SSM
     #
     # @!attribute [rw] iam_role
     #   The Amazon Identity and Access Management (IAM) role assigned to the
-    #   on-premises Systems Manager managed instances. This call does not
-    #   return the IAM role for EC2 instances.
+    #   on-premises Systems Manager managed instance. This call does not
+    #   return the IAM role for EC2 instances. To retrieve the IAM role for
+    #   an EC2 instance, use the Amazon EC2 `DescribeInstances` action. For
+    #   information, see [DescribeInstances][1] in the *Amazon EC2 API
+    #   Reference* or [describe-instances][2] in the *AWS CLI Command
+    #   Reference*.
+    #
+    #
+    #
+    #   [1]: http://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeInstances.html
+    #   [2]: http://docs.aws.amazon.com/cli/latest/reference/ec2/describe-instances.html
     #   @return [String]
     #
     # @!attribute [rw] registration_date
@@ -8700,7 +8975,25 @@ module Aws::SSM
     #   @return [String]
     #
     # @!attribute [rw] name
-    #   The name of the managed instance.
+    #   The name assigned to an on-premises server or virtual machine (VM)
+    #   when it is activated as a Systems Manager managed instance. The name
+    #   is specified as the `DefaultInstanceName` property using the
+    #   CreateActivation command. It is applied to the managed instance by
+    #   specifying the Activation Code and Activation ID when you install
+    #   SSM Agent on the instance, as explained in [Install SSM Agent for a
+    #   hybrid environment (Linux)][1] and [Install SSM Agent for a hybrid
+    #   environment (Windows)][2]. To retrieve the Name tag of an EC2
+    #   instance, use the Amazon EC2 `DescribeInstances` action. For
+    #   information, see [DescribeInstances][3] in the *Amazon EC2 API
+    #   Reference* or [describe-instances][4] in the *AWS CLI Command
+    #   Reference*.
+    #
+    #
+    #
+    #   [1]: http://docs.aws.amazon.com/systems-manager/latest/userguide/sysman-install-managed-linux.html
+    #   [2]: http://docs.aws.amazon.com/systems-manager/latest/userguide/sysman-install-managed-win.html
+    #   [3]: http://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeInstances.html
+    #   [4]: http://docs.aws.amazon.com/cli/latest/reference/ec2/describe-instances.html
     #   @return [String]
     #
     # @!attribute [rw] ip_address
@@ -8749,6 +9042,7 @@ module Aws::SSM
       :last_association_execution_date,
       :last_successful_association_execution_date,
       :association_overview)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -8782,6 +9076,7 @@ module Aws::SSM
     class InstanceInformationFilter < Struct.new(
       :key,
       :value_set)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -8812,6 +9107,7 @@ module Aws::SSM
     class InstanceInformationStringFilter < Struct.new(
       :key,
       :values)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -8972,6 +9268,7 @@ module Aws::SSM
       :operation,
       :last_no_reboot_install_operation_time,
       :reboot_option)
+      SENSITIVE = [:owner_information]
       include Aws::Structure
     end
 
@@ -9009,6 +9306,7 @@ module Aws::SSM
       :key,
       :values,
       :type)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -9021,6 +9319,7 @@ module Aws::SSM
     #
     class InternalServerError < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -9034,6 +9333,7 @@ module Aws::SSM
     #
     class InvalidActivation < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -9047,6 +9347,7 @@ module Aws::SSM
     #
     class InvalidActivationId < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -9061,6 +9362,7 @@ module Aws::SSM
     #
     class InvalidAggregatorException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -9074,6 +9376,7 @@ module Aws::SSM
     #
     class InvalidAllowedPatternException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -9086,6 +9389,7 @@ module Aws::SSM
     #
     class InvalidAssociation < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -9101,6 +9405,7 @@ module Aws::SSM
     #
     class InvalidAssociationVersion < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -9115,6 +9420,7 @@ module Aws::SSM
     #
     class InvalidAutomationExecutionParametersException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -9127,6 +9433,7 @@ module Aws::SSM
     #
     class InvalidAutomationSignalException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -9139,6 +9446,7 @@ module Aws::SSM
     #
     class InvalidAutomationStatusUpdateException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -9156,6 +9464,7 @@ module Aws::SSM
     #
     class InvalidDeleteInventoryParametersException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -9169,6 +9478,7 @@ module Aws::SSM
     #
     class InvalidDeletionIdException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -9186,6 +9496,7 @@ module Aws::SSM
     #
     class InvalidDocument < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -9199,6 +9510,7 @@ module Aws::SSM
     #
     class InvalidDocumentContent < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -9212,6 +9524,7 @@ module Aws::SSM
     #
     class InvalidDocumentOperation < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -9224,6 +9537,7 @@ module Aws::SSM
     #
     class InvalidDocumentSchemaVersion < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -9237,6 +9551,7 @@ module Aws::SSM
     #
     class InvalidDocumentType < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -9249,6 +9564,7 @@ module Aws::SSM
     #
     class InvalidDocumentVersion < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -9262,6 +9578,7 @@ module Aws::SSM
     #
     class InvalidFilter < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -9284,6 +9601,7 @@ module Aws::SSM
     #
     class InvalidFilterOption < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -9296,6 +9614,7 @@ module Aws::SSM
     #
     class InvalidFilterValue < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -9319,6 +9638,7 @@ module Aws::SSM
     #
     class InvalidInstanceId < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -9331,6 +9651,7 @@ module Aws::SSM
     #
     class InvalidInstanceInformationFilterValue < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -9343,6 +9664,7 @@ module Aws::SSM
     #
     class InvalidInventoryGroupException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -9356,6 +9678,7 @@ module Aws::SSM
     #
     class InvalidInventoryItemContextException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -9368,6 +9691,7 @@ module Aws::SSM
     #
     class InvalidInventoryRequestException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -9384,6 +9708,7 @@ module Aws::SSM
     class InvalidItemContentException < Struct.new(
       :type_name,
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -9396,6 +9721,7 @@ module Aws::SSM
     #
     class InvalidKeyId < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -9408,6 +9734,7 @@ module Aws::SSM
     #
     class InvalidNextToken < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -9421,6 +9748,7 @@ module Aws::SSM
     #
     class InvalidNotificationConfig < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -9434,6 +9762,7 @@ module Aws::SSM
     #
     class InvalidOptionException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -9460,6 +9789,7 @@ module Aws::SSM
     #
     class InvalidParameters < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -9473,6 +9803,7 @@ module Aws::SSM
     #
     class InvalidPermissionType < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -9491,6 +9822,7 @@ module Aws::SSM
     #
     class InvalidPolicyAttributeException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -9505,6 +9837,7 @@ module Aws::SSM
     #
     class InvalidPolicyTypeException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -9531,6 +9864,7 @@ module Aws::SSM
     #
     class InvalidResultAttributeException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -9551,6 +9885,7 @@ module Aws::SSM
     #
     class InvalidRole < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -9564,6 +9899,7 @@ module Aws::SSM
     #
     class InvalidSchedule < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -9578,6 +9914,7 @@ module Aws::SSM
     #
     class InvalidTarget < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -9590,6 +9927,7 @@ module Aws::SSM
     #
     class InvalidTypeNameException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -9602,6 +9940,7 @@ module Aws::SSM
     #
     class InvalidUpdate < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -9668,6 +10007,7 @@ module Aws::SSM
       :expression,
       :aggregators,
       :groups)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -9718,6 +10058,7 @@ module Aws::SSM
       :last_status_message,
       :deletion_summary,
       :last_status_update_time)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -9742,6 +10083,7 @@ module Aws::SSM
       :total_count,
       :remaining_count,
       :summary_items)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -9766,6 +10108,7 @@ module Aws::SSM
       :version,
       :count,
       :remaining_count)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -9812,6 +10155,7 @@ module Aws::SSM
       :key,
       :values,
       :type)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -9849,6 +10193,7 @@ module Aws::SSM
     class InventoryGroup < Struct.new(
       :name,
       :filters)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -9916,6 +10261,7 @@ module Aws::SSM
       :content_hash,
       :content,
       :context)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -9935,6 +10281,7 @@ module Aws::SSM
     class InventoryItemAttribute < Struct.new(
       :name,
       :data_type)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -9970,6 +10317,7 @@ module Aws::SSM
       :version,
       :attributes,
       :display_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -9990,6 +10338,7 @@ module Aws::SSM
     class InventoryResultEntity < Struct.new(
       :id,
       :data)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -10027,6 +10376,7 @@ module Aws::SSM
       :capture_time,
       :content_hash,
       :content)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -10050,6 +10400,7 @@ module Aws::SSM
     class ItemContentMismatchException < Struct.new(
       :type_name,
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -10066,6 +10417,7 @@ module Aws::SSM
     class ItemSizeLimitExceededException < Struct.new(
       :type_name,
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -10098,6 +10450,7 @@ module Aws::SSM
       :name,
       :parameter_version,
       :labels)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -10120,6 +10473,7 @@ module Aws::SSM
     class LabelParameterVersionResult < Struct.new(
       :invalid_labels,
       :parameter_version)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -10153,6 +10507,7 @@ module Aws::SSM
       :association_id,
       :max_results,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -10171,6 +10526,7 @@ module Aws::SSM
     class ListAssociationVersionsResult < Struct.new(
       :association_versions,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -10210,6 +10566,7 @@ module Aws::SSM
       :association_filter_list,
       :max_results,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -10227,6 +10584,7 @@ module Aws::SSM
     class ListAssociationsResult < Struct.new(
       :associations,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -10285,6 +10643,7 @@ module Aws::SSM
       :next_token,
       :filters,
       :details)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -10302,6 +10661,7 @@ module Aws::SSM
     class ListCommandInvocationsResult < Struct.new(
       :command_invocations,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -10327,6 +10687,12 @@ module Aws::SSM
     #
     # @!attribute [rw] instance_id
     #   (Optional) Lists commands issued against this instance ID.
+    #
+    #   <note markdown="1"> You can't specify an instance ID in the same command that you
+    #   specify `Status` = `Pending`. This is because the command has not
+    #   reached the instance yet.
+    #
+    #    </note>
     #   @return [String]
     #
     # @!attribute [rw] max_results
@@ -10353,6 +10719,7 @@ module Aws::SSM
       :max_results,
       :next_token,
       :filters)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -10370,6 +10737,7 @@ module Aws::SSM
     class ListCommandsResult < Struct.new(
       :commands,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -10424,6 +10792,7 @@ module Aws::SSM
       :resource_types,
       :next_token,
       :max_results)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -10441,6 +10810,7 @@ module Aws::SSM
     class ListComplianceItemsResult < Struct.new(
       :compliance_items,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -10481,6 +10851,7 @@ module Aws::SSM
       :filters,
       :next_token,
       :max_results)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -10501,6 +10872,7 @@ module Aws::SSM
     class ListComplianceSummariesResult < Struct.new(
       :compliance_summary_items,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -10535,6 +10907,7 @@ module Aws::SSM
       :name,
       :max_results,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -10552,6 +10925,7 @@ module Aws::SSM
     class ListDocumentVersionsResult < Struct.new(
       :document_versions,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -10607,6 +10981,7 @@ module Aws::SSM
       :filters,
       :max_results,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -10624,6 +10999,7 @@ module Aws::SSM
     class ListDocumentsResult < Struct.new(
       :document_identifiers,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -10676,6 +11052,7 @@ module Aws::SSM
       :filters,
       :next_token,
       :max_results)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -10715,6 +11092,7 @@ module Aws::SSM
       :capture_time,
       :entries,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -10755,6 +11133,7 @@ module Aws::SSM
       :filters,
       :next_token,
       :max_results)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -10775,6 +11154,7 @@ module Aws::SSM
     class ListResourceComplianceSummariesResult < Struct.new(
       :resource_compliance_summary_items,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -10812,6 +11192,7 @@ module Aws::SSM
       :sync_type,
       :next_token,
       :max_results)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -10830,6 +11211,7 @@ module Aws::SSM
     class ListResourceDataSyncResult < Struct.new(
       :resource_data_sync_items,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -10854,6 +11236,7 @@ module Aws::SSM
     class ListTagsForResourceRequest < Struct.new(
       :resource_type,
       :resource_id)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -10865,6 +11248,7 @@ module Aws::SSM
     #
     class ListTagsForResourceResult < Struct.new(
       :tag_list)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -10906,6 +11290,7 @@ module Aws::SSM
       :s3_bucket_name,
       :s3_key_prefix,
       :s3_region)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -10955,6 +11340,7 @@ module Aws::SSM
     class MaintenanceWindowAutomationParameters < Struct.new(
       :document_version,
       :parameters)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -10994,6 +11380,7 @@ module Aws::SSM
       :status_details,
       :start_time,
       :end_time)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -11045,6 +11432,7 @@ module Aws::SSM
       :end_time,
       :task_arn,
       :task_type)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -11123,6 +11511,7 @@ module Aws::SSM
       :end_time,
       :owner_information,
       :window_target_id)
+      SENSITIVE = [:parameters, :owner_information]
       include Aws::Structure
     end
 
@@ -11150,6 +11539,7 @@ module Aws::SSM
     class MaintenanceWindowFilter < Struct.new(
       :key,
       :values)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -11190,6 +11580,11 @@ module Aws::SSM
     #   based on, in Internet Assigned Numbers Authority (IANA) format.
     #   @return [String]
     #
+    # @!attribute [rw] schedule_offset
+    #   The number of days to wait to run a maintenance window after the
+    #   scheduled CRON expression date and time.
+    #   @return [Integer]
+    #
     # @!attribute [rw] end_date
     #   The date and time, in ISO-8601 Extended format, for when the
     #   maintenance window is scheduled to become inactive.
@@ -11217,9 +11612,11 @@ module Aws::SSM
       :cutoff,
       :schedule,
       :schedule_timezone,
+      :schedule_offset,
       :end_date,
       :start_date,
       :next_execution_time)
+      SENSITIVE = [:description]
       include Aws::Structure
     end
 
@@ -11238,6 +11635,7 @@ module Aws::SSM
     class MaintenanceWindowIdentityForTarget < Struct.new(
       :window_id,
       :name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -11297,6 +11695,7 @@ module Aws::SSM
       :client_context,
       :qualifier,
       :payload)
+      SENSITIVE = [:payload]
       include Aws::Structure
     end
 
@@ -11423,6 +11822,7 @@ module Aws::SSM
       :parameters,
       :service_role_arn,
       :timeout_seconds)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -11470,6 +11870,7 @@ module Aws::SSM
     class MaintenanceWindowStepFunctionsParameters < Struct.new(
       :input,
       :name)
+      SENSITIVE = [:input]
       include Aws::Structure
     end
 
@@ -11524,6 +11925,7 @@ module Aws::SSM
       :owner_information,
       :name,
       :description)
+      SENSITIVE = [:owner_information, :description]
       include Aws::Structure
     end
 
@@ -11626,6 +12028,7 @@ module Aws::SSM
       :max_errors,
       :name,
       :description)
+      SENSITIVE = [:task_parameters, :description]
       include Aws::Structure
     end
 
@@ -11697,6 +12100,7 @@ module Aws::SSM
       :automation,
       :step_functions,
       :lambda)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -11718,6 +12122,7 @@ module Aws::SSM
     #
     class MaintenanceWindowTaskParameterValueExpression < Struct.new(
       :values)
+      SENSITIVE = [:values]
       include Aws::Structure
     end
 
@@ -11730,6 +12135,7 @@ module Aws::SSM
     #
     class MaxDocumentSizeExceeded < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -11779,6 +12185,7 @@ module Aws::SSM
       :account_ids_to_add,
       :account_ids_to_remove,
       :shared_document_version)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -11802,6 +12209,7 @@ module Aws::SSM
     class NonCompliantSummary < Struct.new(
       :non_compliant_count,
       :severity_summary)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -11847,6 +12255,7 @@ module Aws::SSM
       :notification_arn,
       :notification_events,
       :notification_type)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -11927,6 +12336,7 @@ module Aws::SSM
       :values,
       :filters,
       :aggregators)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -11945,6 +12355,7 @@ module Aws::SSM
     class OpsEntity < Struct.new(
       :id,
       :data)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -11963,6 +12374,7 @@ module Aws::SSM
     class OpsEntityItem < Struct.new(
       :capture_time,
       :content)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -11995,6 +12407,7 @@ module Aws::SSM
       :key,
       :values,
       :type)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -12132,6 +12545,7 @@ module Aws::SSM
       :operational_data,
       :category,
       :severity)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -12148,6 +12562,7 @@ module Aws::SSM
     class OpsItemAlreadyExistsException < Struct.new(
       :message,
       :ops_item_id)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -12176,6 +12591,7 @@ module Aws::SSM
     class OpsItemDataValue < Struct.new(
       :value,
       :type)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -12208,6 +12624,7 @@ module Aws::SSM
       :key,
       :values,
       :operator)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -12225,6 +12642,7 @@ module Aws::SSM
     class OpsItemInvalidParameterException < Struct.new(
       :parameter_names,
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -12255,6 +12673,7 @@ module Aws::SSM
       :limit,
       :limit_type,
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -12267,6 +12686,7 @@ module Aws::SSM
     #
     class OpsItemNotFoundException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -12288,6 +12708,7 @@ module Aws::SSM
     #
     class OpsItemNotification < Struct.new(
       :arn)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -12362,6 +12783,7 @@ module Aws::SSM
       :operational_data,
       :category,
       :severity)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -12384,6 +12806,7 @@ module Aws::SSM
     #
     class OpsResultAttribute < Struct.new(
       :type_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -12404,6 +12827,7 @@ module Aws::SSM
     class OutputSource < Struct.new(
       :output_source_id,
       :output_source_type)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -12468,6 +12892,7 @@ module Aws::SSM
       :last_modified_date,
       :arn,
       :data_type)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -12480,6 +12905,7 @@ module Aws::SSM
     #
     class ParameterAlreadyExists < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -12564,6 +12990,7 @@ module Aws::SSM
       :tier,
       :policies,
       :data_type)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -12591,6 +13018,7 @@ module Aws::SSM
       :policy_text,
       :policy_type,
       :policy_status)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -12604,6 +13032,7 @@ module Aws::SSM
     #
     class ParameterLimitExceeded < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -12616,6 +13045,7 @@ module Aws::SSM
     #
     class ParameterMaxVersionLimitExceeded < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -12685,6 +13115,7 @@ module Aws::SSM
       :tier,
       :policies,
       :data_type)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -12697,6 +13128,7 @@ module Aws::SSM
     #
     class ParameterNotFound < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -12710,6 +13142,7 @@ module Aws::SSM
     #
     class ParameterPatternMismatchException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -12769,6 +13202,7 @@ module Aws::SSM
       :key,
       :option,
       :values)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -12781,6 +13215,7 @@ module Aws::SSM
     #
     class ParameterVersionLabelLimitExceeded < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -12794,6 +13229,7 @@ module Aws::SSM
     #
     class ParameterVersionNotFound < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -12820,6 +13256,7 @@ module Aws::SSM
     class ParametersFilter < Struct.new(
       :key,
       :values)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -12898,6 +13335,7 @@ module Aws::SSM
       :kb_number,
       :msrc_number,
       :language)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -12934,6 +13372,7 @@ module Aws::SSM
       :operating_system,
       :baseline_description,
       :default_baseline)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -12983,6 +13422,7 @@ module Aws::SSM
       :severity,
       :state,
       :installed_time)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -13031,6 +13471,7 @@ module Aws::SSM
     class PatchFilter < Struct.new(
       :key,
       :values)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -13056,6 +13497,7 @@ module Aws::SSM
     #
     class PatchFilterGroup < Struct.new(
       :patch_filters)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -13075,6 +13517,7 @@ module Aws::SSM
     class PatchGroupPatchBaselineMapping < Struct.new(
       :patch_group,
       :baseline_identity)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -13101,6 +13544,7 @@ module Aws::SSM
     class PatchOrchestratorFilter < Struct.new(
       :key,
       :values)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -13163,6 +13607,7 @@ module Aws::SSM
       :approve_after_days,
       :approve_until_date,
       :enable_non_security)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -13198,6 +13643,7 @@ module Aws::SSM
     #
     class PatchRuleGroup < Struct.new(
       :patch_rules)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -13243,6 +13689,7 @@ module Aws::SSM
       :name,
       :products,
       :configuration)
+      SENSITIVE = [:configuration]
       include Aws::Structure
     end
 
@@ -13268,6 +13715,7 @@ module Aws::SSM
       :deployment_status,
       :compliance_level,
       :approval_date)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -13281,6 +13729,7 @@ module Aws::SSM
     #
     class PoliciesLimitExceededException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -13321,6 +13770,7 @@ module Aws::SSM
       :failed_steps,
       :cancelled_steps,
       :timed_out_steps)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -13412,6 +13862,7 @@ module Aws::SSM
       :items,
       :item_content_hash,
       :upload_type)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -13455,6 +13906,7 @@ module Aws::SSM
     class PutInventoryRequest < Struct.new(
       :instance_id,
       :items)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -13466,6 +13918,7 @@ module Aws::SSM
     #
     class PutInventoryResult < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -13551,15 +14004,19 @@ module Aws::SSM
     # @!attribute [rw] type
     #   The type of parameter that you want to add to the system.
     #
+    #   <note markdown="1"> `SecureString` is not currently supported for AWS CloudFormation
+    #   templates or in the China Regions.
+    #
+    #    </note>
+    #
     #   Items in a `StringList` must be separated by a comma (,). You can't
     #   use other punctuation or special character to escape items in the
     #   list. If you have a parameter value that requires a comma, then use
     #   the `String` data type.
     #
-    #   <note markdown="1"> `SecureString` is not currently supported for AWS CloudFormation
-    #   templates or in the China Regions.
-    #
-    #    </note>
+    #   Specifying a parameter type is not required when updating a
+    #   parameter. You must specify a parameter type when creating a
+    #   parameter.
     #   @return [String]
     #
     # @!attribute [rw] key_id
@@ -13755,6 +14212,7 @@ module Aws::SSM
       :tier,
       :policies,
       :data_type)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -13777,6 +14235,7 @@ module Aws::SSM
     class PutParameterResult < Struct.new(
       :version,
       :tier)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -13796,6 +14255,7 @@ module Aws::SSM
     #
     class RegisterDefaultPatchBaselineRequest < Struct.new(
       :baseline_id)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -13807,6 +14267,7 @@ module Aws::SSM
     #
     class RegisterDefaultPatchBaselineResult < Struct.new(
       :baseline_id)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -13832,6 +14293,7 @@ module Aws::SSM
     class RegisterPatchBaselineForPatchGroupRequest < Struct.new(
       :baseline_id,
       :patch_group)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -13848,6 +14310,7 @@ module Aws::SSM
     class RegisterPatchBaselineForPatchGroupResult < Struct.new(
       :baseline_id,
       :patch_group)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -13954,6 +14417,7 @@ module Aws::SSM
       :name,
       :description,
       :client_token)
+      SENSITIVE = [:owner_information, :description]
       include Aws::Structure
     end
 
@@ -13965,6 +14429,7 @@ module Aws::SSM
     #
     class RegisterTargetWithMaintenanceWindowResult < Struct.new(
       :window_target_id)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -14165,6 +14630,7 @@ module Aws::SSM
       :name,
       :description,
       :client_token)
+      SENSITIVE = [:task_parameters, :description]
       include Aws::Structure
     end
 
@@ -14176,6 +14642,7 @@ module Aws::SSM
     #
     class RegisterTaskWithMaintenanceWindowResult < Struct.new(
       :window_task_id)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -14198,6 +14665,7 @@ module Aws::SSM
     #
     class RelatedOpsItem < Struct.new(
       :ops_item_id)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -14249,6 +14717,7 @@ module Aws::SSM
       :resource_type,
       :resource_id,
       :tag_keys)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -14277,6 +14746,7 @@ module Aws::SSM
     #
     class ResetServiceSettingRequest < Struct.new(
       :setting_id)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -14291,6 +14761,7 @@ module Aws::SSM
     #
     class ResetServiceSettingResult < Struct.new(
       :service_setting)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -14312,6 +14783,7 @@ module Aws::SSM
     class ResolvedTargets < Struct.new(
       :parameter_values,
       :truncated)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -14361,6 +14833,7 @@ module Aws::SSM
       :execution_summary,
       :compliant_summary,
       :non_compliant_summary)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -14373,6 +14846,7 @@ module Aws::SSM
     #
     class ResourceDataSyncAlreadyExistsException < Struct.new(
       :sync_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -14410,6 +14884,7 @@ module Aws::SSM
     class ResourceDataSyncAwsOrganizationsSource < Struct.new(
       :organization_source_type,
       :organizational_units)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -14423,6 +14898,7 @@ module Aws::SSM
     #
     class ResourceDataSyncConflictException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -14435,6 +14911,7 @@ module Aws::SSM
     #
     class ResourceDataSyncCountExceededException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -14458,6 +14935,7 @@ module Aws::SSM
     #
     class ResourceDataSyncDestinationDataSharing < Struct.new(
       :destination_data_sharing_type)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -14470,6 +14948,7 @@ module Aws::SSM
     #
     class ResourceDataSyncInvalidConfigurationException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -14534,6 +15013,7 @@ module Aws::SSM
       :last_status,
       :sync_created_time,
       :last_sync_status_message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -14554,6 +15034,7 @@ module Aws::SSM
       :sync_name,
       :sync_type,
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -14574,6 +15055,7 @@ module Aws::SSM
     #
     class ResourceDataSyncOrganizationalUnit < Struct.new(
       :organizational_unit_id)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -14629,6 +15111,7 @@ module Aws::SSM
       :region,
       :awskms_key_arn,
       :destination_data_sharing)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -14680,6 +15163,7 @@ module Aws::SSM
       :aws_organizations_source,
       :source_regions,
       :include_future_regions)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -14743,6 +15227,7 @@ module Aws::SSM
       :source_regions,
       :include_future_regions,
       :state)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -14756,6 +15241,7 @@ module Aws::SSM
     #
     class ResourceInUseException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -14777,6 +15263,7 @@ module Aws::SSM
     #
     class ResourceLimitExceededException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -14798,6 +15285,7 @@ module Aws::SSM
     #
     class ResultAttribute < Struct.new(
       :type_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -14816,6 +15304,7 @@ module Aws::SSM
     #
     class ResumeSessionRequest < Struct.new(
       :session_id)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -14854,6 +15343,7 @@ module Aws::SSM
       :session_id,
       :token_value,
       :stream_url)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -14888,6 +15378,7 @@ module Aws::SSM
       :output_s3_region,
       :output_s3_bucket_name,
       :output_s3_key_prefix)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -14903,6 +15394,7 @@ module Aws::SSM
     #
     class S3OutputUrl < Struct.new(
       :output_url)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -14927,6 +15419,7 @@ module Aws::SSM
       :window_id,
       :name,
       :execution_time)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -14976,6 +15469,7 @@ module Aws::SSM
       :automation_execution_id,
       :signal_type,
       :payload)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -15021,13 +15515,19 @@ module Aws::SSM
     #       }
     #
     # @!attribute [rw] instance_ids
-    #   The instance IDs where the command should run. You can specify a
-    #   maximum of 50 IDs. If you prefer not to list individual instance
-    #   IDs, you can instead send commands to a fleet of instances using the
-    #   Targets parameter, which accepts EC2 tags. For more information
-    #   about how to use targets, see [Using targets and rate controls to
-    #   send commands to a fleet][1] in the *AWS Systems Manager User
-    #   Guide*.
+    #   The IDs of the instances where the command should run. Specifying
+    #   instance IDs is most useful when you are targeting a limited number
+    #   of instances, though you can specify up to 50 IDs.
+    #
+    #   To target a larger number of instances, or if you prefer not to list
+    #   individual instance IDs, we recommend using the `Targets` option
+    #   instead. Using `Targets`, which accepts tag key-value pairs to
+    #   identify the instances to send commands to, you can a send command
+    #   to tens, hundreds, or thousands of instances at once.
+    #
+    #   For more information about how to use targets, see [Using targets
+    #   and rate controls to send commands to a fleet][1] in the *AWS
+    #   Systems Manager User Guide*.
     #
     #
     #
@@ -15035,11 +15535,18 @@ module Aws::SSM
     #   @return [Array<String>]
     #
     # @!attribute [rw] targets
-    #   (Optional) An array of search criteria that targets instances using
-    #   a Key,Value combination that you specify. Targets is required if you
-    #   don't provide one or more instance IDs in the call. For more
-    #   information about how to use targets, see [Sending commands to a
-    #   fleet][1] in the *AWS Systems Manager User Guide*.
+    #   An array of search criteria that targets instances using a
+    #   `Key,Value` combination that you specify. Specifying targets is most
+    #   useful when you want to send a command to a large number of
+    #   instances at once. Using `Targets`, which accepts tag key-value
+    #   pairs to identify instances, you can send a command to tens,
+    #   hundreds, or thousands of instances at once.
+    #
+    #   To send a command to a smaller number of instances, you can use the
+    #   `InstanceIds` option instead.
+    #
+    #   For more information about how to use targets, see [Sending commands
+    #   to a fleet][1] in the *AWS Systems Manager User Guide*.
     #
     #
     #
@@ -15173,6 +15680,7 @@ module Aws::SSM
       :service_role_arn,
       :notification_config,
       :cloud_watch_output_config)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -15185,6 +15693,7 @@ module Aws::SSM
     #
     class SendCommandResult < Struct.new(
       :command)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -15250,6 +15759,7 @@ module Aws::SSM
       :last_modified_user,
       :arn,
       :status)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -15263,6 +15773,7 @@ module Aws::SSM
     #
     class ServiceSettingNotFound < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -15321,6 +15832,7 @@ module Aws::SSM
       :owner,
       :details,
       :output_url)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -15376,6 +15888,7 @@ module Aws::SSM
     class SessionFilter < Struct.new(
       :key,
       :value)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -15394,6 +15907,7 @@ module Aws::SSM
     class SessionManagerOutputUrl < Struct.new(
       :s3_output_url,
       :cloud_watch_output_url)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -15445,6 +15959,7 @@ module Aws::SSM
       :low_count,
       :informational_count,
       :unspecified_count)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -15464,6 +15979,7 @@ module Aws::SSM
     #
     class StartAssociationsOnceRequest < Struct.new(
       :association_ids)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -15621,6 +16137,7 @@ module Aws::SSM
       :max_errors,
       :target_locations,
       :tags)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -15632,6 +16149,7 @@ module Aws::SSM
     #
     class StartAutomationExecutionResult < Struct.new(
       :automation_execution_id)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -15653,8 +16171,9 @@ module Aws::SSM
     # @!attribute [rw] document_name
     #   The name of the SSM document to define the parameters and plugin
     #   settings for the session. For example, `SSM-SessionManagerRunShell`.
-    #   If no document name is provided, a shell to the instance is launched
-    #   by default.
+    #   You can call the GetDocument API to verify the document exists
+    #   before attempting to start a session. If no document name is
+    #   provided, a shell to the instance is launched by default.
     #   @return [String]
     #
     # @!attribute [rw] parameters
@@ -15667,6 +16186,7 @@ module Aws::SSM
       :target,
       :document_name,
       :parameters)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -15705,6 +16225,7 @@ module Aws::SSM
       :session_id,
       :token_value,
       :stream_url)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -15843,6 +16364,7 @@ module Aws::SSM
       :valid_next_steps,
       :targets,
       :target_location)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -15872,6 +16394,7 @@ module Aws::SSM
     class StepExecutionFilter < Struct.new(
       :key,
       :values)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -15897,6 +16420,7 @@ module Aws::SSM
     class StopAutomationExecutionRequest < Struct.new(
       :automation_execution_id,
       :type)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -15913,6 +16437,7 @@ module Aws::SSM
     #
     class SubTypeCountLimitExceededException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -15943,6 +16468,7 @@ module Aws::SSM
     class Tag < Struct.new(
       :key,
       :value)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -15957,13 +16483,16 @@ module Aws::SSM
     #
     # * `Key=tag-key,Values=my-tag-key-1,my-tag-key-2 `
     #
-    # * (Maintenance window targets only)
+    # * **Run Command and Maintenance window targets only**\:
     #   `Key=resource-groups:Name,Values=resource-group-name `
     #
-    # * (Maintenance window targets only)
+    # * **Maintenance window targets only**\:
     #   `Key=resource-groups:ResourceTypeFilters,Values=resource-type-1,resource-type-2
     #   `
     #
+    # * **Automation targets only**\:
+    #   `Key=ResourceGroup;Values=resource-group-name `
+    #
     # For example:
     #
     # * `Key=InstanceIds,Values=i-02573cafcfEXAMPLE,i-0471e04240EXAMPLE,i-07782c72faEXAMPLE`
@@ -15972,28 +16501,32 @@ module Aws::SSM
     #
     # * `Key=tag-key,Values=Name,Instance-Type,CostCenter`
     #
-    # * (Maintenance window targets only)
+    # * **Run Command and Maintenance window targets only**\:
     #   `Key=resource-groups:Name,Values=ProductionResourceGroup`
     #
     #   This example demonstrates how to target all resources in the
     #   resource group **ProductionResourceGroup** in your maintenance
     #   window.
     #
-    # * (Maintenance window targets only)
+    # * **Maintenance window targets only**\:
     #   `Key=resource-groups:ResourceTypeFilters,Values=AWS::EC2::INSTANCE,AWS::EC2::VPC
     #   `
     #
     #   This example demonstrates how to target only EC2 instances and VPCs
     #   in your maintenance window.
     #
-    # * (State Manager association targets only) `Key=InstanceIds,Values=* `
+    # * **Automation targets only**\:
+    #   `Key=ResourceGroup,Values=MyResourceGroup`
+    #
+    # * **State Manager association targets only**\:
+    #   `Key=InstanceIds,Values=* `
     #
     #   This example demonstrates how to target all managed instances in the
     #   AWS Region where the association was created.
     #
-    # For information about how to send commands that target instances using
-    # `Key,Value` parameters, see [Targeting multiple instances][1] in the
-    # *AWS Systems Manager User Guide*.
+    # For more information about how to send commands that target instances
+    # using `Key,Value` parameters, see [Targeting multiple instances][1] in
+    # the *AWS Systems Manager User Guide*.
     #
     #
     #
@@ -16024,6 +16557,7 @@ module Aws::SSM
     class Target < Struct.new(
       :key,
       :values)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -16038,6 +16572,7 @@ module Aws::SSM
     #
     class TargetInUseException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -16087,6 +16622,7 @@ module Aws::SSM
       :target_location_max_concurrency,
       :target_location_max_errors,
       :execution_role_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -16106,6 +16642,7 @@ module Aws::SSM
     #
     class TargetNotConnected < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -16124,6 +16661,7 @@ module Aws::SSM
     #
     class TerminateSessionRequest < Struct.new(
       :session_id)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -16135,6 +16673,7 @@ module Aws::SSM
     #
     class TerminateSessionResponse < Struct.new(
       :session_id)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -16155,6 +16694,7 @@ module Aws::SSM
     #
     class TooManyUpdates < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -16168,6 +16708,7 @@ module Aws::SSM
     #
     class TotalSizeLimitExceededException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -16181,6 +16722,7 @@ module Aws::SSM
     #
     class UnsupportedCalendarException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -16201,6 +16743,7 @@ module Aws::SSM
     #
     class UnsupportedFeatureRequiredException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -16219,6 +16762,7 @@ module Aws::SSM
     class UnsupportedInventoryItemContextException < Struct.new(
       :type_name,
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -16233,6 +16777,7 @@ module Aws::SSM
     #
     class UnsupportedInventorySchemaVersionException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -16247,6 +16792,7 @@ module Aws::SSM
     #
     class UnsupportedOperatingSystem < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -16259,6 +16805,7 @@ module Aws::SSM
     #
     class UnsupportedParameterType < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -16273,6 +16820,7 @@ module Aws::SSM
     #
     class UnsupportedPlatformType < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -16460,6 +17008,7 @@ module Aws::SSM
       :compliance_severity,
       :sync_compliance,
       :apply_only_at_cron_interval)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -16471,6 +17020,7 @@ module Aws::SSM
     #
     class UpdateAssociationResult < Struct.new(
       :association_description)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -16506,6 +17056,7 @@ module Aws::SSM
       :name,
       :instance_id,
       :association_status)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -16517,6 +17068,7 @@ module Aws::SSM
     #
     class UpdateAssociationStatusResult < Struct.new(
       :association_description)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -16543,6 +17095,7 @@ module Aws::SSM
     class UpdateDocumentDefaultVersionRequest < Struct.new(
       :name,
       :document_version)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -16555,6 +17108,7 @@ module Aws::SSM
     #
     class UpdateDocumentDefaultVersionResult < Struct.new(
       :description)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -16624,6 +17178,7 @@ module Aws::SSM
       :document_version,
       :document_format,
       :target_type)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -16635,6 +17190,7 @@ module Aws::SSM
     #
     class UpdateDocumentResult < Struct.new(
       :document_description)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -16649,6 +17205,7 @@ module Aws::SSM
     #         end_date: "MaintenanceWindowStringDateTime",
     #         schedule: "MaintenanceWindowSchedule",
     #         schedule_timezone: "MaintenanceWindowTimezone",
+    #         schedule_offset: 1,
     #         duration: 1,
     #         cutoff: 1,
     #         allow_unassociated_targets: false,
@@ -16704,6 +17261,19 @@ module Aws::SSM
     #   [1]: https://www.iana.org/time-zones
     #   @return [String]
     #
+    # @!attribute [rw] schedule_offset
+    #   The number of days to wait after the date and time specified by a
+    #   CRON expression before running the maintenance window.
+    #
+    #   For example, the following cron expression schedules a maintenance
+    #   window to run the third Tuesday of every month at 11:30 PM.
+    #
+    #   `cron(0 30 23 ? * TUE#3 *)`
+    #
+    #   If the schedule offset is `2`, the maintenance window won't run
+    #   until two days later.
+    #   @return [Integer]
+    #
     # @!attribute [rw] duration
     #   The duration of the maintenance window in hours.
     #   @return [Integer]
@@ -16738,11 +17308,13 @@ module Aws::SSM
       :end_date,
       :schedule,
       :schedule_timezone,
+      :schedule_offset,
       :duration,
       :cutoff,
       :allow_unassociated_targets,
       :enabled,
       :replace)
+      SENSITIVE = [:description]
       include Aws::Structure
     end
 
@@ -16787,6 +17359,11 @@ module Aws::SSM
     #   [1]: https://www.iana.org/time-zones
     #   @return [String]
     #
+    # @!attribute [rw] schedule_offset
+    #   The number of days to wait to run a maintenance window after the
+    #   scheduled CRON expression date and time.
+    #   @return [Integer]
+    #
     # @!attribute [rw] duration
     #   The duration of the maintenance window in hours.
     #   @return [Integer]
@@ -16815,10 +17392,12 @@ module Aws::SSM
       :end_date,
       :schedule,
       :schedule_timezone,
+      :schedule_offset,
       :duration,
       :cutoff,
       :allow_unassociated_targets,
       :enabled)
+      SENSITIVE = [:description]
       include Aws::Structure
     end
 
@@ -16883,6 +17462,7 @@ module Aws::SSM
       :name,
       :description,
       :replace)
+      SENSITIVE = [:owner_information, :description]
       include Aws::Structure
     end
 
@@ -16919,6 +17499,7 @@ module Aws::SSM
       :owner_information,
       :name,
       :description)
+      SENSITIVE = [:owner_information, :description]
       include Aws::Structure
     end
 
@@ -17120,6 +17701,7 @@ module Aws::SSM
       :name,
       :description,
       :replace)
+      SENSITIVE = [:task_parameters, :description]
       include Aws::Structure
     end
 
@@ -17210,6 +17792,7 @@ module Aws::SSM
       :logging_info,
       :name,
       :description)
+      SENSITIVE = [:task_parameters, :description]
       include Aws::Structure
     end
 
@@ -17234,6 +17817,7 @@ module Aws::SSM
     class UpdateManagedInstanceRoleRequest < Struct.new(
       :instance_id,
       :iam_role)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -17372,6 +17956,7 @@ module Aws::SSM
       :title,
       :category,
       :severity)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -17528,6 +18113,7 @@ module Aws::SSM
       :description,
       :sources,
       :replace)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -17612,6 +18198,7 @@ module Aws::SSM
       :modified_date,
       :description,
       :sources)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -17655,6 +18242,7 @@ module Aws::SSM
       :sync_name,
       :sync_type,
       :sync_source)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -17706,6 +18294,7 @@ module Aws::SSM
     class UpdateServiceSettingRequest < Struct.new(
       :setting_id,
       :setting_value)
+      SENSITIVE = []
       include Aws::Structure
     end