aws-sdk-ssm 1.174.0 → 1.175.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f614eecfb52999436d04fb44a567fd12832d2e1c4562ef41585fa71a75e2a9d0
-  data.tar.gz: 75371fcd7d259aef8ecb9919e7484b330b887b1ce8906e5316655fcbfe9f01af
+  metadata.gz: 4c475be05cbd950c1fa254bd9ec01fd156c63a82c0865fd5e24e15501545c4b7
+  data.tar.gz: 1c5e0b65311c04427b52efd8a6a8d86d27be775b49fed71ee19a986c9c40ec4b
 SHA512:
-  metadata.gz: 63bf99534356bf313c4b952dc0d802125cf8055b93e7c2e9d1c40f917461f6a4ec103814af10b69e9378e22711ade023635649e633c2b8b098b06d77059c2c9a
-  data.tar.gz: da800deda1393c1533c7f24d2b795a5272d4cd9b90bab680f01c3b6e532dc6e5f2f79d626fe89ed408dd9492534b60ac00ec0b8edf3325e7d2902600148cb966
+  metadata.gz: 85aa05ad10912118af25fefc5e5bf19b360dd39b9913ca24d6a39f14ceb0c3d1476cd8c47651b0547e1bb6efb7f570affde5d56db61128c1720f129f2bc2c6dd
+  data.tar.gz: bcf55202f3246cddaa608089be6c12406ddcaf26fc86452944b5c49d1ae595f1715d1ccbf1b9531d987d94d50e0398c97e0512c7dac572b2c5ae309f8edbb9fc

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.175.0 (2024-08-09)
+------------------
+
+* Feature - Systems Manager doc-only updates for August 2024.
+
 1.174.0 (2024-08-02)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.174.0
+1.175.0

data/lib/aws-sdk-ssm/client.rb

@@ -2037,19 +2037,28 @@ module Aws::SSM
     #   The action for Patch Manager to take on patches included in the
     #   `RejectedPackages` list.
     #
-    #   * <b> <code>ALLOW_AS_DEPENDENCY</code> </b>: A package in the
-    #     `Rejected` patches list is installed only if it is a dependency of
-    #     another package. It is considered compliant with the patch baseline,
-    #     and its status is reported as `InstalledOther`. This is the default
-    #     action if no option is specified.
+    #   ALLOW\_AS\_DEPENDENCY
     #
-    #   * **BLOCK**: Packages in the **Rejected patches** list, and packages
+    #   : **Linux and macOS**: A package in the rejected patches list is
+    #     installed only if it is a dependency of another package. It is
+    #     considered compliant with the patch baseline, and its status is
+    #     reported as `INSTALLED_OTHER`. This is the default action if no
+    #     option is specified.
+    #
+    #     **Windows Server**: Windows Server doesn't support the concept of
+    #     package dependencies. If a package in the rejected patches list and
+    #     already installed on the node, its status is reported as
+    #     `INSTALLED_OTHER`. Any package not already installed on the node is
+    #     skipped. This is the default action if no option is specified.
+    #
+    #   BLOCK
+    #
+    #   : **All OSs**: Packages in the rejected patches list, and packages
     #     that include them as dependencies, aren't installed by Patch
     #     Manager under any circumstances. If a package was installed before
-    #     it was added to the **Rejected patches** list, or is installed
-    #     outside of Patch Manager afterward, it's considered noncompliant
-    #     with the patch baseline and its status is reported as
-    #     *InstalledRejected*.
+    #     it was added to the rejected patches list, or is installed outside
+    #     of Patch Manager afterward, it's considered noncompliant with the
+    #     patch baseline and its status is reported as `INSTALLED_REJECTED`.
     #
     # @option params [String] :description
     #   A description of the patch baseline.
@@ -3893,9 +3902,10 @@ module Aws::SSM
     # information for all your managed nodes. If you specify a node ID that
     # isn't valid or a node that you don't own, you receive an error.
     #
-    # <note markdown="1"> The `IamRole` field returned for this API operation is the Identity
-    # and Access Management (IAM) role assigned to on-premises managed
-    # nodes. This operation does not return the IAM role for EC2 instances.
+    # <note markdown="1"> The `IamRole` field returned for this API operation is the role
+    # assigned to an Amazon EC2 instance configured with a Systems Manager
+    # Quick Setup host management configuration or the role assigned to an
+    # on-premises managed node.
     #
     #  </note>
     #
@@ -5373,6 +5383,10 @@ module Aws::SSM
     #
     # : Valid properties: `PRODUCT` \| `CLASSIFICATION` \| `SEVERITY`
     #
+    # AMAZON\_LINUX\_2023
+    #
+    # : Valid properties: `PRODUCT` \| `CLASSIFICATION` \| `SEVERITY`
+    #
     # CENTOS
     #
     # : Valid properties: `PRODUCT` \| `CLASSIFICATION` \| `SEVERITY`
@@ -5796,7 +5810,12 @@ module Aws::SSM
     end
 
     # Returns detailed information about command execution for an invocation
-    # or plugin.
+    # or plugin. The Run Command API follows an eventual consistency model,
+    # due to the distributed nature of the system supporting the API. This
+    # means that the result of an API command you run that affects your
+    # resources might not be immediately visible to all subsequent commands
+    # you run. You should keep this in mind when you carry out an API
+    # command that immediately follows a previous API command.
     #
     # `GetCommandInvocation` only gives the execution status of a plugin in
     # a document. To get the command execution status on a specific managed
@@ -12280,19 +12299,28 @@ module Aws::SSM
     #   The action for Patch Manager to take on patches included in the
     #   `RejectedPackages` list.
     #
-    #   * <b> <code>ALLOW_AS_DEPENDENCY</code> </b>: A package in the
-    #     `Rejected` patches list is installed only if it is a dependency of
-    #     another package. It is considered compliant with the patch baseline,
-    #     and its status is reported as `InstalledOther`. This is the default
-    #     action if no option is specified.
+    #   ALLOW\_AS\_DEPENDENCY
+    #
+    #   : **Linux and macOS**: A package in the rejected patches list is
+    #     installed only if it is a dependency of another package. It is
+    #     considered compliant with the patch baseline, and its status is
+    #     reported as `INSTALLED_OTHER`. This is the default action if no
+    #     option is specified.
+    #
+    #     **Windows Server**: Windows Server doesn't support the concept of
+    #     package dependencies. If a package in the rejected patches list and
+    #     already installed on the node, its status is reported as
+    #     `INSTALLED_OTHER`. Any package not already installed on the node is
+    #     skipped. This is the default action if no option is specified.
+    #
+    #   BLOCK
     #
-    #   * **BLOCK**: Packages in the **Rejected patches** list, and packages
+    #   : **All OSs**: Packages in the rejected patches list, and packages
     #     that include them as dependencies, aren't installed by Patch
     #     Manager under any circumstances. If a package was installed before
-    #     it was added to the **Rejected patches** list, or is installed
-    #     outside of Patch Manager afterward, it's considered noncompliant
-    #     with the patch baseline and its status is reported as
-    #     *InstalledRejected*.
+    #     it was added to the rejected patches list, or is installed outside
+    #     of Patch Manager afterward, it's considered noncompliant with the
+    #     patch baseline and its status is reported as `INSTALLED_REJECTED`.
     #
     # @option params [String] :description
     #   A description of the patch baseline.
@@ -12576,7 +12604,7 @@ module Aws::SSM
         params: params,
         config: config)
       context[:gem_name] = 'aws-sdk-ssm'
-      context[:gem_version] = '1.174.0'
+      context[:gem_version] = '1.175.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-ssm/types.rb

@@ -3884,19 +3884,28 @@ module Aws::SSM
     #   The action for Patch Manager to take on patches included in the
     #   `RejectedPackages` list.
     #
-    #   * <b> <code>ALLOW_AS_DEPENDENCY</code> </b>: A package in the
-    #     `Rejected` patches list is installed only if it is a dependency of
-    #     another package. It is considered compliant with the patch
-    #     baseline, and its status is reported as `InstalledOther`. This is
-    #     the default action if no option is specified.
+    #   ALLOW\_AS\_DEPENDENCY
     #
-    #   * **BLOCK**: Packages in the **Rejected patches** list, and packages
+    #   : **Linux and macOS**: A package in the rejected patches list is
+    #     installed only if it is a dependency of another package. It is
+    #     considered compliant with the patch baseline, and its status is
+    #     reported as `INSTALLED_OTHER`. This is the default action if no
+    #     option is specified.
+    #
+    #     **Windows Server**: Windows Server doesn't support the concept of
+    #     package dependencies. If a package in the rejected patches list
+    #     and already installed on the node, its status is reported as
+    #     `INSTALLED_OTHER`. Any package not already installed on the node
+    #     is skipped. This is the default action if no option is specified.
+    #
+    #   BLOCK
+    #
+    #   : **All OSs**: Packages in the rejected patches list, and packages
     #     that include them as dependencies, aren't installed by Patch
     #     Manager under any circumstances. If a package was installed before
-    #     it was added to the **Rejected patches** list, or is installed
-    #     outside of Patch Manager afterward, it's considered noncompliant
-    #     with the patch baseline and its status is reported as
-    #     *InstalledRejected*.
+    #     it was added to the rejected patches list, or is installed outside
+    #     of Patch Manager afterward, it's considered noncompliant with the
+    #     patch baseline and its status is reported as `INSTALLED_REJECTED`.
     #   @return [String]
     #
     # @!attribute [rw] description
@@ -8407,10 +8416,24 @@ module Aws::SSM
     #   @return [String]
     #
     # @!attribute [rw] service_role_arn
-    #   The Amazon Resource Name (ARN) of the Identity and Access Management
-    #   (IAM) service role to use to publish Amazon Simple Notification
-    #   Service (Amazon SNS) notifications for maintenance window Run
-    #   Command tasks.
+    #   The Amazon Resource Name (ARN) of the IAM service role for Amazon
+    #   Web Services Systems Manager to assume when running a maintenance
+    #   window task. If you do not specify a service role ARN, Systems
+    #   Manager uses a service-linked role in your account. If no
+    #   appropriate service-linked role for Systems Manager exists in your
+    #   account, it is created when you run
+    #   `RegisterTaskWithMaintenanceWindow`.
+    #
+    #   However, for an improved security posture, we strongly recommend
+    #   creating a custom policy and custom service role for running your
+    #   maintenance window tasks. The policy can be crafted to provide only
+    #   the permissions needed for your particular maintenance window tasks.
+    #   For more information, see [Setting up maintenance windows][1] in the
+    #   in the *Amazon Web Services Systems Manager User Guide*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/sysman-maintenance-permissions.html
     #   @return [String]
     #
     # @!attribute [rw] task_type
@@ -9450,11 +9473,14 @@ module Aws::SSM
     #   @return [String]
     #
     # @!attribute [rw] iam_role
-    #   The Identity and Access Management (IAM) role assigned to the
-    #   on-premises Systems Manager managed node. This call doesn't return
-    #   the IAM role for Amazon Elastic Compute Cloud (Amazon EC2)
-    #   instances. To retrieve the IAM role for an EC2 instance, use the
-    #   Amazon EC2 `DescribeInstances` operation. For information, see
+    #   The role assigned to an Amazon EC2 instance configured with a
+    #   Systems Manager Quick Setup host management configuration or the
+    #   role assigned to an on-premises managed node.
+    #
+    #   This call doesn't return the IAM role for *unmanaged* Amazon EC2
+    #   instances (instances not configured for Systems Manager). To
+    #   retrieve the role for an unmanaged instance, use the Amazon EC2
+    #   `DescribeInstances` operation. For information, see
     #   [DescribeInstances][1] in the *Amazon EC2 API Reference* or
     #   [describe-instances][2] in the *Amazon Web Services CLI Command
     #   Reference*.
@@ -9899,7 +9925,7 @@ module Aws::SSM
     #   @return [String]
     #
     # @!attribute [rw] architecture
-    #   The CPU architecture of the node. For example, x86\_64.
+    #   The CPU architecture of the node. For example, `x86_64`.
     #   @return [String]
     #
     # @!attribute [rw] ip_address
@@ -12539,10 +12565,24 @@ module Aws::SSM
     #   @return [Hash<String,Array<String>>]
     #
     # @!attribute [rw] service_role_arn
-    #   The Amazon Resource Name (ARN) of the Identity and Access Management
-    #   (IAM) service role to use to publish Amazon Simple Notification
-    #   Service (Amazon SNS) notifications for maintenance window Run
-    #   Command tasks.
+    #   The Amazon Resource Name (ARN) of the IAM service role for Amazon
+    #   Web Services Systems Manager to assume when running a maintenance
+    #   window task. If you do not specify a service role ARN, Systems
+    #   Manager uses a service-linked role in your account. If no
+    #   appropriate service-linked role for Systems Manager exists in your
+    #   account, it is created when you run
+    #   `RegisterTaskWithMaintenanceWindow`.
+    #
+    #   However, for an improved security posture, we strongly recommend
+    #   creating a custom policy and custom service role for running your
+    #   maintenance window tasks. The policy can be crafted to provide only
+    #   the permissions needed for your particular maintenance window tasks.
+    #   For more information, see [Setting up maintenance windows][1] in the
+    #   in the *Amazon Web Services Systems Manager User Guide*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/sysman-maintenance-permissions.html
     #   @return [String]
     #
     # @!attribute [rw] timeout_seconds
@@ -12726,10 +12766,24 @@ module Aws::SSM
     #   @return [Types::LoggingInfo]
     #
     # @!attribute [rw] service_role_arn
-    #   The Amazon Resource Name (ARN) of the Identity and Access Management
-    #   (IAM) service role to use to publish Amazon Simple Notification
-    #   Service (Amazon SNS) notifications for maintenance window Run
-    #   Command tasks.
+    #   The Amazon Resource Name (ARN) of the IAM service role for Amazon
+    #   Web Services Systems Manager to assume when running a maintenance
+    #   window task. If you do not specify a service role ARN, Systems
+    #   Manager uses a service-linked role in your account. If no
+    #   appropriate service-linked role for Systems Manager exists in your
+    #   account, it is created when you run
+    #   `RegisterTaskWithMaintenanceWindow`.
+    #
+    #   However, for an improved security posture, we strongly recommend
+    #   creating a custom policy and custom service role for running your
+    #   maintenance window tasks. The policy can be crafted to provide only
+    #   the permissions needed for your particular maintenance window tasks.
+    #   For more information, see [Setting up maintenance windows][1] in the
+    #   in the *Amazon Web Services Systems Manager User Guide*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/sysman-maintenance-permissions.html
     #   @return [String]
     #
     # @!attribute [rw] max_concurrency
@@ -14637,10 +14691,10 @@ module Aws::SSM
     #   @return [String]
     #
     # @!attribute [rw] default_baseline
-    #   Whether this is the default baseline. Amazon Web Services Systems
-    #   Manager supports creating multiple default patch baselines. For
-    #   example, you can create a default patch baseline for each operating
-    #   system.
+    #   Indicates whether this is the default baseline. Amazon Web Services
+    #   Systems Manager supports creating multiple default patch baselines.
+    #   For example, you can create a default patch baseline for each
+    #   operating system.
     #   @return [Boolean]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ssm-2014-11-06/PatchBaselineIdentity AWS API Documentation
@@ -14840,16 +14894,28 @@ module Aws::SSM
     #   The number of days after the release date of each patch matched by
     #   the rule that the patch is marked as approved in the patch baseline.
     #   For example, a value of `7` means that patches are approved seven
-    #   days after they are released. Not supported on Debian Server or
-    #   Ubuntu Server.
+    #   days after they are released.
+    #
+    #   <note markdown="1"> This parameter is marked as not required, but your request must
+    #   include a value for either `ApproveAfterDays` or `ApproveUntilDate`.
+    #
+    #    </note>
+    #
+    #   Not supported for Debian Server or Ubuntu Server.
     #   @return [Integer]
     #
     # @!attribute [rw] approve_until_date
     #   The cutoff date for auto approval of released patches. Any patches
-    #   released on or before this date are installed automatically. Not
-    #   supported on Debian Server or Ubuntu Server.
+    #   released on or before this date are installed automatically.
     #
     #   Enter dates in the format `YYYY-MM-DD`. For example, `2021-12-31`.
+    #
+    #   <note markdown="1"> This parameter is marked as not required, but your request must
+    #   include a value for either `ApproveUntilDate` or `ApproveAfterDays`.
+    #
+    #    </note>
+    #
+    #   Not supported for Debian Server or Ubuntu Server.
     #   @return [String]
     #
     # @!attribute [rw] enable_non_security
@@ -19256,10 +19322,24 @@ module Aws::SSM
     #   @return [String]
     #
     # @!attribute [rw] service_role_arn
-    #   The Amazon Resource Name (ARN) of the Identity and Access Management
-    #   (IAM) service role to use to publish Amazon Simple Notification
-    #   Service (Amazon SNS) notifications for maintenance window Run
-    #   Command tasks.
+    #   The Amazon Resource Name (ARN) of the IAM service role for Amazon
+    #   Web Services Systems Manager to assume when running a maintenance
+    #   window task. If you do not specify a service role ARN, Systems
+    #   Manager uses a service-linked role in your account. If no
+    #   appropriate service-linked role for Systems Manager exists in your
+    #   account, it is created when you run
+    #   `RegisterTaskWithMaintenanceWindow`.
+    #
+    #   However, for an improved security posture, we strongly recommend
+    #   creating a custom policy and custom service role for running your
+    #   maintenance window tasks. The policy can be crafted to provide only
+    #   the permissions needed for your particular maintenance window tasks.
+    #   For more information, see [Setting up maintenance windows][1] in the
+    #   in the *Amazon Web Services Systems Manager User Guide*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/sysman-maintenance-permissions.html
     #   @return [String]
     #
     # @!attribute [rw] task_parameters
@@ -19612,19 +19692,28 @@ module Aws::SSM
     #   The action for Patch Manager to take on patches included in the
     #   `RejectedPackages` list.
     #
-    #   * <b> <code>ALLOW_AS_DEPENDENCY</code> </b>: A package in the
-    #     `Rejected` patches list is installed only if it is a dependency of
-    #     another package. It is considered compliant with the patch
-    #     baseline, and its status is reported as `InstalledOther`. This is
-    #     the default action if no option is specified.
+    #   ALLOW\_AS\_DEPENDENCY
+    #
+    #   : **Linux and macOS**: A package in the rejected patches list is
+    #     installed only if it is a dependency of another package. It is
+    #     considered compliant with the patch baseline, and its status is
+    #     reported as `INSTALLED_OTHER`. This is the default action if no
+    #     option is specified.
+    #
+    #     **Windows Server**: Windows Server doesn't support the concept of
+    #     package dependencies. If a package in the rejected patches list
+    #     and already installed on the node, its status is reported as
+    #     `INSTALLED_OTHER`. Any package not already installed on the node
+    #     is skipped. This is the default action if no option is specified.
+    #
+    #   BLOCK
     #
-    #   * **BLOCK**: Packages in the **Rejected patches** list, and packages
+    #   : **All OSs**: Packages in the rejected patches list, and packages
     #     that include them as dependencies, aren't installed by Patch
     #     Manager under any circumstances. If a package was installed before
-    #     it was added to the **Rejected patches** list, or is installed
-    #     outside of Patch Manager afterward, it's considered noncompliant
-    #     with the patch baseline and its status is reported as
-    #     *InstalledRejected*.
+    #     it was added to the rejected patches list, or is installed outside
+    #     of Patch Manager afterward, it's considered noncompliant with the
+    #     patch baseline and its status is reported as `INSTALLED_REJECTED`.
     #   @return [String]
     #
     # @!attribute [rw] description

data/lib/aws-sdk-ssm.rb

@@ -53,6 +53,6 @@ require_relative 'aws-sdk-ssm/customizations'
 # @!group service
 module Aws::SSM
 
-  GEM_VERSION = '1.174.0'
+  GEM_VERSION = '1.175.0'
 
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-ssm
 version: !ruby/object:Gem::Version
-  version: 1.174.0
+  version: 1.175.0
 platform: ruby
 authors:
 - Amazon Web Services
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2024-08-02 00:00:00.000000000 Z
+date: 2024-08-09 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-core