aws-sdk-ssm 1.229.0 → 1.230.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 5490f4f5c20062ebf8b9bec049391159e17fbe2bdc0f22b37b3c1d1bec13ca15
-  data.tar.gz: 28ff07a0ef9bf611fd0076d172fac43306e51d8773bb6bf6c73b86db8d8c65f4
+  metadata.gz: 977f629cd6a1f8110f24f283397a930dbfdfcab57a844e52c79ce07202c04ffe
+  data.tar.gz: 7c56c8bd55aa39e1216f67be7153478c830bb7a26424a8834ad934d1f46919c6
 SHA512:
-  metadata.gz: 7f0278412f29401b118169de9b08cb008dba74b50ba90066c98028a59162185c2fb092ada1882f0522e70be44a45cdcb2f510ee15c4686048ba4c3aa3d04dbd6
-  data.tar.gz: bf453f886e27cb93cbeea8ae241fa83e4a8734aa7db27ea9478939cbb459563eeae82e058cafed3a04eea1455b2df42d2dfec60b63e7b6de5018158f9534ce1d
+  metadata.gz: adb20f934cae300c243c8f16ec0d05de0d59890c8a30ed22a306bd7da92cc8071f4a806141db8bb240906c870f92dbfa2c871327bcb7f081ce44abc51dcdea6b
+  data.tar.gz: f7444e728b05a7fd2a42bd312ff11388a1fdfa63be177dfcd4a69da18960600e3c25fbaecfd3dce419df22ca0911340254f8098672b8f63146d13a20d8b8b665

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.230.0 (2026-11-06)
+------------------
+
+* Feature - AWS Systems Manager now provides two new APIs - RegisterDefaultHostManagementConfiguration and DeregisterDefaultHostManagementConfiguration - along with a new DefaultHostManagementConfiguration CloudFormation resource type.
+
 1.229.0 (2026-11-04)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.229.0
+1.230.0

data/lib/aws-sdk-ssm/client.rb

@@ -2859,6 +2859,18 @@ module Aws::SSM
     # Delete a parameter from the system. After deleting a parameter, wait
     # for at least 30 seconds to create a parameter with the same name.
     #
+    # <note markdown="1"> This operation is authorized against the `ssm:DeleteParameter` action.
+    # Denying that action alone doesn't restrict DeleteParameters, which is
+    # authorized against its own action. For more information, see
+    # [Restricting access to specific parameters and paths][1] in the
+    # *Amazon Web Services Systems Manager User Guide*.
+    #
+    #  </note>
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/ps-restrict-parameter-access.html
+    #
     # @option params [required, String] :name
     #   The name of the parameter to delete.
     #
@@ -2887,6 +2899,17 @@ module Aws::SSM
     # Delete a list of parameters. After deleting a parameter, wait for at
     # least 30 seconds to create a parameter with the same name.
     #
+    # This operation is authorized against the `ssm:DeleteParameters`
+    # action, not against `ssm:DeleteParameter`. Denying
+    # `ssm:DeleteParameter` for a parameter doesn't prevent a principal
+    # from deleting that parameter with this operation. For more
+    # information, see [Restricting access to specific parameters and
+    # paths][1] in the *Amazon Web Services Systems Manager User Guide*.
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/ps-restrict-parameter-access.html
+    #
     # @option params [required, Array<String>] :names
     #   The names of the parameters to delete. After deleting a parameter,
     #   wait for at least 30 seconds to create a parameter with the same name.
@@ -3046,6 +3069,35 @@ module Aws::SSM
       req.send_request(options)
     end
 
+    # Removes the Default Host Management Configuration (DHMC) for an Amazon
+    # Web Services account and Amazon Web Services Region. After you
+    # deregister DHMC, Amazon EC2 instances are no longer automatically
+    # managed as managed nodes by Amazon Web Services Systems Manager.
+    #
+    # To use this operation, you must have the following permissions:
+    #
+    # * You need the `ssm:GetServiceSetting` and `ssm:ResetServiceSetting`
+    #   permissions for the
+    #   `/ssm/managed-instance/default-ec2-instance-management-role` service
+    #   setting.
+    #
+    # ^
+    #
+    # If the registered role is service-managed, you also need the
+    # `iam:DeleteRole` permission so that Amazon Web Services Systems
+    # Manager can remove the role it created.
+    #
+    # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ssm-2014-11-06/DeregisterDefaultHostManagementConfiguration AWS API Documentation
+    #
+    # @overload deregister_default_host_management_configuration(params = {})
+    # @param [Hash] params ({})
+    def deregister_default_host_management_configuration(params = {}, options = {})
+      req = build_request(:deregister_default_host_management_configuration, params)
+      req.send_request(options)
+    end
+
     # Removes the server or virtual machine from the list of registered
     # servers.
     #
@@ -7442,6 +7494,15 @@ module Aws::SSM
     #
     #  </note>
     #
+    # <note markdown="1"> This operation is authorized against the `ssm:GetParameter` action.
+    # Denying that action alone doesn't restrict GetParameters,
+    # GetParameterHistory, or GetParametersByPath, each of which is
+    # authorized against its own action. For more information, see [How
+    # Parameter Store authorizes parameter retrieval][1] in the *Amazon Web
+    # Services Systems Manager User Guide*.
+    #
+    #  </note>
+    #
     # <note markdown="1"> Parameter Store throughput defines the number of API transactions per
     # second (TPS) that Systems Manager can process. This applies to
     # `GetParameter`, `GetParameters`, and `PutParameter` API calls for your
@@ -7457,13 +7518,14 @@ module Aws::SSM
     # and workloads that need concurrent access to multiple parameters. If
     # you experience `ThrottlingException: Rate exceeded` errors, enable
     # higher throughput. For more information, see [Changing Parameter Store
-    # throughput][1].
+    # throughput][2].
     #
     #  </note>
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/parameter-store-throughput.html
+    # [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/ps-retrieval-authorization.html
+    # [2]: https://docs.aws.amazon.com/systems-manager/latest/userguide/parameter-store-throughput.html
     #
     # @option params [required, String] :name
     #   The name or Amazon Resource Name (ARN) of the parameter that you want
@@ -7529,6 +7591,20 @@ module Aws::SSM
     # to reference KMS. Otherwise, `GetParameterHistory` retrieves whatever
     # the original key alias was referencing.
     #
+    # This operation is authorized against the `ssm:GetParameterHistory`
+    # action, not against `ssm:GetParameter`. Because parameter history
+    # includes every version of a parameter, including the current one, a
+    # principal who is denied `ssm:GetParameter`, `ssm:GetParameters`, and
+    # `ssm:GetParametersByPath` but allowed `ssm:GetParameterHistory` can
+    # still read the current value. To restrict access to a parameter value,
+    # deny every action that can return it. For more information, see [How
+    # Parameter Store authorizes parameter retrieval][1] in the *Amazon Web
+    # Services Systems Manager User Guide*.
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/ps-retrieval-authorization.html
+    #
     # @option params [required, String] :name
     #   The name or Amazon Resource Name (ARN) of the parameter for which you
     #   want to review history. For parameters shared with you from another
@@ -7602,6 +7678,14 @@ module Aws::SSM
     #
     #  </note>
     #
+    # This operation is authorized against the `ssm:GetParameters` action,
+    # not against `ssm:GetParameter`. Denying `ssm:GetParameter` for a
+    # parameter doesn't prevent a principal from retrieving that parameter
+    # with this operation. To restrict access to a parameter value, deny
+    # every action that can return it. For more information, see [How
+    # Parameter Store authorizes parameter retrieval][1] in the *Amazon Web
+    # Services Systems Manager User Guide*.
+    #
     # Parameter names can't contain spaces. The service removes any spaces
     # specified for the beginning or end of a parameter name. If the
     # specified name for a parameter contains spaces between characters, the
@@ -7622,13 +7706,14 @@ module Aws::SSM
     # and workloads that need concurrent access to multiple parameters. If
     # you experience `ThrottlingException: Rate exceeded` errors, enable
     # higher throughput. For more information, see [Changing Parameter Store
-    # throughput][1].
+    # throughput][2].
     #
     #  </note>
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/parameter-store-throughput.html
+    # [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/ps-retrieval-authorization.html
+    # [2]: https://docs.aws.amazon.com/systems-manager/latest/userguide/parameter-store-throughput.html
     #
     # @option params [required, Array<String>] :names
     #   The names or Amazon Resource Names (ARNs) of the parameters that you
@@ -7695,6 +7780,21 @@ module Aws::SSM
     # Retrieve information about one or more parameters under a specified
     # level in a hierarchy.
     #
+    # This operation is authorized against the `ssm:GetParametersByPath`
+    # action for the path that you specify in the request. It isn't
+    # authorized against the individual parameters that it returns, and it
+    # isn't authorized against `ssm:GetParameter`. A principal who is
+    # allowed to call this operation for the path `/a` with `Recursive` set
+    # to `true` receives every parameter under that path, including `/a/b`,
+    # even if a policy explicitly denies access to `/a/b`.
+    #
+    #  To prevent a parameter from being returned by this operation, deny
+    # the
+    # `ssm:GetParametersByPath` action on every ancestor path that could
+    # include the parameter in its results. For more information, see
+    # [Restricting access to specific parameters and paths][1] in the
+    # *Amazon Web Services Systems Manager User Guide*.
+    #
     # Request results are returned on a best-effort basis. If you specify
     # `MaxResults` in the request, the response includes information up to
     # the limit specified. The number of items returned, however, can be
@@ -7709,6 +7809,10 @@ module Aws::SSM
     # specified name for a parameter contains spaces between characters, the
     # request fails with a `ValidationException` error.
     #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/systems-manager/latest/userguide/ps-restrict-parameter-access.html
+    #
     # @option params [required, String] :path
     #   The hierarchy for the parameter. Hierarchies start with a forward
     #   slash (/). The hierarchy is the parameter name except the last part of
@@ -7720,13 +7824,6 @@ module Aws::SSM
     # @option params [Boolean] :recursive
     #   Retrieve all parameters within a hierarchy.
     #
-    #   If a user has access to a path, then the user can access all levels of
-    #   that path. For example, if a user has permission to access path `/a`,
-    #   then the user can also access `/a/b`. Even if a user has explicitly
-    #   been denied access in IAM for parameter `/a/b`, they can still call
-    #   the GetParametersByPath API operation recursively for `/a` and view
-    #   `/a/b`.
-    #
     # @option params [Array<Types::ParameterStringFilter>] :parameter_filters
     #   Filters to limit the request results.
     #
@@ -10303,6 +10400,84 @@ module Aws::SSM
       req.send_request(options)
     end
 
+    # Enables Default Host Management Configuration (DHMC) for the current
+    # Amazon Web Services account and Amazon Web Services Region. With DHMC
+    # enabled, you don't need to configure additional resources, such as an
+    # instance profile, to use your Amazon EC2 instances as managed nodes in
+    # Amazon Web Services Systems Manager.
+    #
+    # To use this operation, you must have the following permissions:
+    #
+    # * You need the `ssm:GetServiceSetting` and `ssm:UpdateServiceSetting`
+    #   permissions for the
+    #   `/ssm/managed-instance/default-ec2-instance-management-role` service
+    #   setting.
+    #
+    # * You need the `iam:GetRole` and `iam:PassRole` permissions for the
+    #   role used for Default Host Management Configuration.
+    #
+    # If `PermissionModel` is `SERVICE_MANAGED`, you also need the
+    # `iam:CreateRole` and `iam:AttachRolePolicy` permissions so that Amazon
+    # Web Services Systems Manager can create and configure the role on your
+    # behalf.
+    #
+    # @option params [required, String] :permission_model
+    #   The permission model that determines how the IAM role for Default Host
+    #   Management Configuration is provided.
+    #
+    #   The permission model can be one of the following values:
+    #
+    #   SERVICE\_MANAGED
+    #
+    #   : Amazon Web Services Systems Manager creates and manages the role on
+    #     your behalf.
+    #
+    #   SELF\_MANAGED
+    #
+    #   : You provide the role to register in `RoleArn`.
+    #
+    # @option params [String] :role_arn
+    #   The Amazon Resource Name (ARN) of the self-managed IAM role that you
+    #   register for Default Host Management Configuration. The requirement
+    #   for this value depends on the permission model:
+    #
+    #   * If `PermissionModel` is `SELF_MANAGED`, this value is required.
+    #
+    #   * If `PermissionModel` is `SERVICE_MANAGED`, this value must not be
+    #     set.
+    #
+    # @option params [Boolean] :overwrite
+    #   Specifies whether to override the role that is currently registered
+    #   for Default Host Management Configuration. The default is `false`,
+    #   which acts as a guardrail against accidentally replacing an existing
+    #   configuration. Set this to `true` to replace the currently registered
+    #   role.
+    #
+    # @return [Types::RegisterDefaultHostManagementConfigurationResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::RegisterDefaultHostManagementConfigurationResult#role_arn #role_arn} => String
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.register_default_host_management_configuration({
+    #     permission_model: "SERVICE_MANAGED", # required, accepts SERVICE_MANAGED, SELF_MANAGED
+    #     role_arn: "DHMCRoleArn",
+    #     overwrite: false,
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.role_arn #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ssm-2014-11-06/RegisterDefaultHostManagementConfiguration AWS API Documentation
+    #
+    # @overload register_default_host_management_configuration(params = {})
+    # @param [Hash] params ({})
+    def register_default_host_management_configuration(params = {}, options = {})
+      req = build_request(:register_default_host_management_configuration, params)
+      req.send_request(options)
+    end
+
     # Defines the default patch baseline for the relevant operating system.
     #
     # To reset the Amazon Web Services-predefined patch baseline as the
@@ -14084,7 +14259,7 @@ module Aws::SSM
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-ssm'
-      context[:gem_version] = '1.229.0'
+      context[:gem_version] = '1.230.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-ssm/client_api.rb

@@ -262,6 +262,8 @@ module Aws::SSM
     CreatedDate = Shapes::TimestampShape.new(name: 'CreatedDate')
     Credentials = Shapes::StructureShape.new(name: 'Credentials')
     CustomSchemaCountLimitExceededException = Shapes::StructureShape.new(name: 'CustomSchemaCountLimitExceededException')
+    DHMCPermissionModel = Shapes::StringShape.new(name: 'DHMCPermissionModel')
+    DHMCRoleArn = Shapes::StringShape.new(name: 'DHMCRoleArn')
     DateTime = Shapes::TimestampShape.new(name: 'DateTime')
     DefaultBaseline = Shapes::BooleanShape.new(name: 'DefaultBaseline')
     DefaultInstanceName = Shapes::StringShape.new(name: 'DefaultInstanceName')
@@ -293,6 +295,8 @@ module Aws::SSM
     DeleteResourcePolicyResponse = Shapes::StructureShape.new(name: 'DeleteResourcePolicyResponse')
     DeletionMode = Shapes::StringShape.new(name: 'DeletionMode')
     DeliveryTimedOutCount = Shapes::IntegerShape.new(name: 'DeliveryTimedOutCount')
+    DeregisterDefaultHostManagementConfigurationRequest = Shapes::StructureShape.new(name: 'DeregisterDefaultHostManagementConfigurationRequest')
+    DeregisterDefaultHostManagementConfigurationResult = Shapes::StructureShape.new(name: 'DeregisterDefaultHostManagementConfigurationResult')
     DeregisterManagedInstanceRequest = Shapes::StructureShape.new(name: 'DeregisterManagedInstanceRequest')
     DeregisterManagedInstanceResult = Shapes::StructureShape.new(name: 'DeregisterManagedInstanceResult')
     DeregisterPatchBaselineForPatchGroupRequest = Shapes::StructureShape.new(name: 'DeregisterPatchBaselineForPatchGroupRequest')
@@ -1099,6 +1103,8 @@ module Aws::SSM
     Region = Shapes::StringShape.new(name: 'Region')
     RegionList = Shapes::ListShape.new(name: 'RegionList')
     Regions = Shapes::ListShape.new(name: 'Regions')
+    RegisterDefaultHostManagementConfigurationRequest = Shapes::StructureShape.new(name: 'RegisterDefaultHostManagementConfigurationRequest')
+    RegisterDefaultHostManagementConfigurationResult = Shapes::StructureShape.new(name: 'RegisterDefaultHostManagementConfigurationResult')
     RegisterDefaultPatchBaselineRequest = Shapes::StructureShape.new(name: 'RegisterDefaultPatchBaselineRequest')
     RegisterDefaultPatchBaselineResult = Shapes::StructureShape.new(name: 'RegisterDefaultPatchBaselineResult')
     RegisterPatchBaselineForPatchGroupRequest = Shapes::StructureShape.new(name: 'RegisterPatchBaselineForPatchGroupRequest')
@@ -2189,6 +2195,10 @@ module Aws::SSM
 
     DeleteResourcePolicyResponse.struct_class = Types::DeleteResourcePolicyResponse
 
+    DeregisterDefaultHostManagementConfigurationRequest.struct_class = Types::DeregisterDefaultHostManagementConfigurationRequest
+
+    DeregisterDefaultHostManagementConfigurationResult.struct_class = Types::DeregisterDefaultHostManagementConfigurationResult
+
     DeregisterManagedInstanceRequest.add_member(:instance_id, Shapes::ShapeRef.new(shape: ManagedInstanceId, required: true, location_name: "InstanceId"))
     DeregisterManagedInstanceRequest.struct_class = Types::DeregisterManagedInstanceRequest
 
@@ -4480,6 +4490,14 @@ module Aws::SSM
 
     Regions.member = Shapes::ShapeRef.new(shape: Region)
 
+    RegisterDefaultHostManagementConfigurationRequest.add_member(:permission_model, Shapes::ShapeRef.new(shape: DHMCPermissionModel, required: true, location_name: "PermissionModel"))
+    RegisterDefaultHostManagementConfigurationRequest.add_member(:role_arn, Shapes::ShapeRef.new(shape: DHMCRoleArn, location_name: "RoleArn"))
+    RegisterDefaultHostManagementConfigurationRequest.add_member(:overwrite, Shapes::ShapeRef.new(shape: Boolean, location_name: "Overwrite"))
+    RegisterDefaultHostManagementConfigurationRequest.struct_class = Types::RegisterDefaultHostManagementConfigurationRequest
+
+    RegisterDefaultHostManagementConfigurationResult.add_member(:role_arn, Shapes::ShapeRef.new(shape: DHMCRoleArn, location_name: "RoleArn"))
+    RegisterDefaultHostManagementConfigurationResult.struct_class = Types::RegisterDefaultHostManagementConfigurationResult
+
     RegisterDefaultPatchBaselineRequest.add_member(:baseline_id, Shapes::ShapeRef.new(shape: BaselineId, required: true, location_name: "BaselineId"))
     RegisterDefaultPatchBaselineRequest.struct_class = Types::RegisterDefaultPatchBaselineRequest
 
@@ -5632,6 +5650,15 @@ module Aws::SSM
         o.errors << Shapes::ShapeRef.new(shape: ResourcePolicyNotFoundException)
       end)
 
+      api.add_operation(:deregister_default_host_management_configuration, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "DeregisterDefaultHostManagementConfiguration"
+        o.http_method = "POST"
+        o.http_request_uri = "/"
+        o.input = Shapes::ShapeRef.new(shape: DeregisterDefaultHostManagementConfigurationRequest)
+        o.output = Shapes::ShapeRef.new(shape: DeregisterDefaultHostManagementConfigurationResult)
+        o.errors << Shapes::ShapeRef.new(shape: InternalServerError)
+      end)
+
       api.add_operation(:deregister_managed_instance, Seahorse::Model::Operation.new.tap do |o|
         o.name = "DeregisterManagedInstance"
         o.http_method = "POST"
@@ -6977,6 +7004,15 @@ module Aws::SSM
         o.errors << Shapes::ShapeRef.new(shape: ResourcePolicyNotFoundException)
       end)
 
+      api.add_operation(:register_default_host_management_configuration, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "RegisterDefaultHostManagementConfiguration"
+        o.http_method = "POST"
+        o.http_request_uri = "/"
+        o.input = Shapes::ShapeRef.new(shape: RegisterDefaultHostManagementConfigurationRequest)
+        o.output = Shapes::ShapeRef.new(shape: RegisterDefaultHostManagementConfigurationResult)
+        o.errors << Shapes::ShapeRef.new(shape: InternalServerError)
+      end)
+
       api.add_operation(:register_default_patch_baseline, Seahorse::Model::Operation.new.tap do |o|
         o.name = "RegisterDefaultPatchBaseline"
         o.http_method = "POST"

data/lib/aws-sdk-ssm/types.rb

@@ -4999,6 +4999,16 @@ module Aws::SSM
     #
     class DeleteResourcePolicyResponse < Aws::EmptyStructure; end
 
+    # @api private
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ssm-2014-11-06/DeregisterDefaultHostManagementConfigurationRequest AWS API Documentation
+    #
+    class DeregisterDefaultHostManagementConfigurationRequest < Aws::EmptyStructure; end
+
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ssm-2014-11-06/DeregisterDefaultHostManagementConfigurationResult AWS API Documentation
+    #
+    class DeregisterDefaultHostManagementConfigurationResult < Aws::EmptyStructure; end
+
     # @!attribute [rw] instance_id
     #   The ID assigned to the managed node when you registered it using the
     #   activation process.
@@ -9614,13 +9624,6 @@ module Aws::SSM
     #
     # @!attribute [rw] recursive
     #   Retrieve all parameters within a hierarchy.
-    #
-    #   If a user has access to a path, then the user can access all levels
-    #   of that path. For example, if a user has permission to access path
-    #   `/a`, then the user can also access `/a/b`. Even if a user has
-    #   explicitly been denied access in IAM for parameter `/a/b`, they can
-    #   still call the GetParametersByPath API operation recursively for
-    #   `/a` and view `/a/b`.
     #   @return [Boolean]
     #
     # @!attribute [rw] parameter_filters
@@ -16933,6 +16936,74 @@ module Aws::SSM
       include Aws::Structure
     end
 
+    # @!attribute [rw] permission_model
+    #   The permission model that determines how the IAM role for Default
+    #   Host Management Configuration is provided.
+    #
+    #   The permission model can be one of the following values:
+    #
+    #   SERVICE\_MANAGED
+    #
+    #   : Amazon Web Services Systems Manager creates and manages the role
+    #     on your behalf.
+    #
+    #   SELF\_MANAGED
+    #
+    #   : You provide the role to register in `RoleArn`.
+    #   @return [String]
+    #
+    # @!attribute [rw] role_arn
+    #   The Amazon Resource Name (ARN) of the self-managed IAM role that you
+    #   register for Default Host Management Configuration. The requirement
+    #   for this value depends on the permission model:
+    #
+    #   * If `PermissionModel` is `SELF_MANAGED`, this value is required.
+    #
+    #   * If `PermissionModel` is `SERVICE_MANAGED`, this value must not be
+    #     set.
+    #   @return [String]
+    #
+    # @!attribute [rw] overwrite
+    #   Specifies whether to override the role that is currently registered
+    #   for Default Host Management Configuration. The default is `false`,
+    #   which acts as a guardrail against accidentally replacing an existing
+    #   configuration. Set this to `true` to replace the currently
+    #   registered role.
+    #   @return [Boolean]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ssm-2014-11-06/RegisterDefaultHostManagementConfigurationRequest AWS API Documentation
+    #
+    class RegisterDefaultHostManagementConfigurationRequest < Struct.new(
+      :permission_model,
+      :role_arn,
+      :overwrite)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] role_arn
+    #   The Amazon Resource Name (ARN) of the IAM role registered for
+    #   Default Host Management Configuration. The value depends on the
+    #   permission model:
+    #
+    #   SERVICE\_MANAGED
+    #
+    #   : The ARN of the role that Amazon Web Services Systems Manager
+    #     created in the IAM reserved path.
+    #
+    #   SELF\_MANAGED
+    #
+    #   : The `RoleArn` that you provided.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ssm-2014-11-06/RegisterDefaultHostManagementConfigurationResult AWS API Documentation
+    #
+    class RegisterDefaultHostManagementConfigurationResult < Struct.new(
+      :role_arn)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] baseline_id
     #   The ID of the patch baseline that should be the default patch
     #   baseline.

data/lib/aws-sdk-ssm.rb

@@ -55,7 +55,7 @@ module Aws::SSM
   autoload :EndpointProvider, 'aws-sdk-ssm/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-ssm/endpoints'
 
-  GEM_VERSION = '1.229.0'
+  GEM_VERSION = '1.230.0'
 
 end
 

data/sig/client.rbs

@@ -614,6 +614,14 @@ module Aws
                                   ) -> _DeleteResourcePolicyResponseSuccess
                                 | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _DeleteResourcePolicyResponseSuccess
 
+      interface _DeregisterDefaultHostManagementConfigurationResponseSuccess
+        include ::Seahorse::Client::_ResponseSuccess[Types::DeregisterDefaultHostManagementConfigurationResult]
+      end
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/SSM/Client.html#deregister_default_host_management_configuration-instance_method
+      def deregister_default_host_management_configuration: (
+                                                            ) -> _DeregisterDefaultHostManagementConfigurationResponseSuccess
+                                                          | (?Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _DeregisterDefaultHostManagementConfigurationResponseSuccess
+
       interface _DeregisterManagedInstanceResponseSuccess
         include ::Seahorse::Client::_ResponseSuccess[Types::DeregisterManagedInstanceResult]
       end
@@ -2254,6 +2262,18 @@ module Aws
                                ) -> _PutResourcePolicyResponseSuccess
                              | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _PutResourcePolicyResponseSuccess
 
+      interface _RegisterDefaultHostManagementConfigurationResponseSuccess
+        include ::Seahorse::Client::_ResponseSuccess[Types::RegisterDefaultHostManagementConfigurationResult]
+        def role_arn: () -> ::String
+      end
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/SSM/Client.html#register_default_host_management_configuration-instance_method
+      def register_default_host_management_configuration: (
+                                                            permission_model: ("SERVICE_MANAGED" | "SELF_MANAGED"),
+                                                            ?role_arn: ::String,
+                                                            ?overwrite: bool
+                                                          ) -> _RegisterDefaultHostManagementConfigurationResponseSuccess
+                                                        | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _RegisterDefaultHostManagementConfigurationResponseSuccess
+
       interface _RegisterDefaultPatchBaselineResponseSuccess
         include ::Seahorse::Client::_ResponseSuccess[Types::RegisterDefaultPatchBaselineResult]
         def baseline_id: () -> ::String

data/sig/types.rbs

@@ -966,6 +966,12 @@ module Aws::SSM
     class DeleteResourcePolicyResponse < Aws::EmptyStructure
     end
 
+    class DeregisterDefaultHostManagementConfigurationRequest < Aws::EmptyStructure
+    end
+
+    class DeregisterDefaultHostManagementConfigurationResult < Aws::EmptyStructure
+    end
+
     class DeregisterManagedInstanceRequest
       attr_accessor instance_id: ::String
       SENSITIVE: []
@@ -3743,6 +3749,18 @@ module Aws::SSM
       SENSITIVE: []
     end
 
+    class RegisterDefaultHostManagementConfigurationRequest
+      attr_accessor permission_model: ("SERVICE_MANAGED" | "SELF_MANAGED")
+      attr_accessor role_arn: ::String
+      attr_accessor overwrite: bool
+      SENSITIVE: []
+    end
+
+    class RegisterDefaultHostManagementConfigurationResult
+      attr_accessor role_arn: ::String
+      SENSITIVE: []
+    end
+
     class RegisterDefaultPatchBaselineRequest
       attr_accessor baseline_id: ::String
       SENSITIVE: []

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-ssm
 version: !ruby/object:Gem::Version
-  version: 1.229.0
+  version: 1.230.0
 platform: ruby
 authors:
 - Amazon Web Services
@@ -18,7 +18,7 @@ dependencies:
         version: '3'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.264.0
+        version: 3.265.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -28,7 +28,7 @@ dependencies:
         version: '3'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.264.0
+        version: 3.265.0
 - !ruby/object:Gem::Dependency
   name: aws-sigv4
   requirement: !ruby/object:Gem::Requirement