@aws-sdk/client-grafana 3.272.0 → 3.276.0

package/dist-cjs/endpoint/ruleset.js

@@ -1,7 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ruleSet = void 0;
-const p = "required", q = "fn", r = "argv", s = "ref";
-const a = "PartitionResult", b = "tree", c = "error", d = "endpoint", e = { [p]: false, "type": "String" }, f = { [p]: true, "default": false, "type": "Boolean" }, g = { [s]: "Endpoint" }, h = { [q]: "booleanEquals", [r]: [{ [s]: "UseFIPS" }, true] }, i = { [q]: "booleanEquals", [r]: [{ [s]: "UseDualStack" }, true] }, j = {}, k = { [q]: "booleanEquals", [r]: [true, { [q]: "getAttr", [r]: [{ [s]: a }, "supportsFIPS"] }] }, l = { [q]: "booleanEquals", [r]: [true, { [q]: "getAttr", [r]: [{ [s]: a }, "supportsDualStack"] }] }, m = [g], n = [h], o = [i];
-const _data = { version: "1.0", parameters: { Region: e, UseDualStack: f, UseFIPS: f, Endpoint: e }, rules: [{ conditions: [{ [q]: "aws.partition", [r]: [{ [s]: "Region" }], assign: a }], type: b, rules: [{ conditions: [{ [q]: "isSet", [r]: m }, { [q]: "parseURL", [r]: m, assign: "url" }], type: b, rules: [{ conditions: n, error: "Invalid Configuration: FIPS and custom endpoint are not supported", type: c }, { type: b, rules: [{ conditions: o, error: "Invalid Configuration: Dualstack and custom endpoint are not supported", type: c }, { endpoint: { url: g, properties: j, headers: j }, type: d }] }] }, { conditions: [h, i], type: b, rules: [{ conditions: [k, l], type: b, rules: [{ endpoint: { url: "https://grafana-fips.{Region}.{PartitionResult#dualStackDnsSuffix}", properties: j, headers: j }, type: d }] }, { error: "FIPS and DualStack are enabled, but this partition does not support one or both", type: c }] }, { conditions: n, type: b, rules: [{ conditions: [k], type: b, rules: [{ type: b, rules: [{ endpoint: { url: "https://grafana-fips.{Region}.{PartitionResult#dnsSuffix}", properties: j, headers: j }, type: d }] }] }, { error: "FIPS is enabled but this partition does not support FIPS", type: c }] }, { conditions: o, type: b, rules: [{ conditions: [l], type: b, rules: [{ endpoint: { url: "https://grafana.{Region}.{PartitionResult#dualStackDnsSuffix}", properties: j, headers: j }, type: d }] }, { error: "DualStack is enabled but this partition does not support DualStack", type: c }] }, { endpoint: { url: "https://grafana.{Region}.{PartitionResult#dnsSuffix}", properties: j, headers: j }, type: d }] }] };
+const s = "required", t = "fn", u = "argv", v = "ref";
+const a = "isSet", b = "tree", c = "error", d = "endpoint", e = "PartitionResult", f = "stringEquals", g = { [s]: false, "type": "String" }, h = { [s]: true, "default": false, "type": "Boolean" }, i = { [v]: "Endpoint" }, j = { [t]: "booleanEquals", [u]: [{ [v]: "UseFIPS" }, true] }, k = { [t]: "booleanEquals", [u]: [{ [v]: "UseDualStack" }, true] }, l = {}, m = { [v]: "Region" }, n = { [t]: "booleanEquals", [u]: [true, { [t]: "getAttr", [u]: [{ [v]: e }, "supportsFIPS"] }] }, o = { [t]: "booleanEquals", [u]: [true, { [t]: "getAttr", [u]: [{ [v]: e }, "supportsDualStack"] }] }, p = [j], q = [k], r = [m];
+const _data = { version: "1.0", parameters: { Region: g, UseDualStack: h, UseFIPS: h, Endpoint: g }, rules: [{ conditions: [{ [t]: a, [u]: [i] }], type: b, rules: [{ conditions: p, error: "Invalid Configuration: FIPS and custom endpoint are not supported", type: c }, { type: b, rules: [{ conditions: q, error: "Invalid Configuration: Dualstack and custom endpoint are not supported", type: c }, { endpoint: { url: i, properties: l, headers: l }, type: d }] }] }, { type: b, rules: [{ conditions: [{ [t]: a, [u]: r }], type: b, rules: [{ conditions: [{ [t]: "aws.partition", [u]: r, assign: e }], type: b, rules: [{ conditions: [j, k], type: b, rules: [{ conditions: [n, o], type: b, rules: [{ type: b, rules: [{ endpoint: { url: "https://grafana-fips.{Region}.{PartitionResult#dualStackDnsSuffix}", properties: l, headers: l }, type: d }] }] }, { error: "FIPS and DualStack are enabled, but this partition does not support one or both", type: c }] }, { conditions: p, type: b, rules: [{ conditions: [n], type: b, rules: [{ type: b, rules: [{ endpoint: { url: "https://grafana-fips.{Region}.{PartitionResult#dnsSuffix}", properties: l, headers: l }, type: d }] }] }, { error: "FIPS is enabled but this partition does not support FIPS", type: c }] }, { conditions: q, type: b, rules: [{ conditions: [o], type: b, rules: [{ type: b, rules: [{ endpoint: { url: "https://grafana.{Region}.{PartitionResult#dualStackDnsSuffix}", properties: l, headers: l }, type: d }] }] }, { error: "DualStack is enabled but this partition does not support DualStack", type: c }] }, { type: b, rules: [{ conditions: [{ [t]: f, [u]: [m, "ap-northeast-1"] }], endpoint: { url: "https://grafana.ap-northeast-1.amazonaws.com", properties: l, headers: l }, type: d }, { conditions: [{ [t]: f, [u]: [m, "ap-northeast-2"] }], endpoint: { url: "https://grafana.ap-northeast-2.amazonaws.com", properties: l, headers: l }, type: d }, { conditions: [{ [t]: f, [u]: [m, "ap-southeast-1"] }], endpoint: { url: "https://grafana.ap-southeast-1.amazonaws.com", properties: l, headers: l }, type: d }, { conditions: [{ [t]: f, [u]: [m, "ap-southeast-2"] }], endpoint: { url: "https://grafana.ap-southeast-2.amazonaws.com", properties: l, headers: l }, type: d }, { conditions: [{ [t]: f, [u]: [m, "eu-central-1"] }], endpoint: { url: "https://grafana.eu-central-1.amazonaws.com", properties: l, headers: l }, type: d }, { conditions: [{ [t]: f, [u]: [m, "eu-west-1"] }], endpoint: { url: "https://grafana.eu-west-1.amazonaws.com", properties: l, headers: l }, type: d }, { conditions: [{ [t]: f, [u]: [m, "eu-west-2"] }], endpoint: { url: "https://grafana.eu-west-2.amazonaws.com", properties: l, headers: l }, type: d }, { conditions: [{ [t]: f, [u]: [m, "us-east-1"] }], endpoint: { url: "https://grafana.us-east-1.amazonaws.com", properties: l, headers: l }, type: d }, { conditions: [{ [t]: f, [u]: [m, "us-east-2"] }], endpoint: { url: "https://grafana.us-east-2.amazonaws.com", properties: l, headers: l }, type: d }, { conditions: [{ [t]: f, [u]: [m, "us-west-2"] }], endpoint: { url: "https://grafana.us-west-2.amazonaws.com", properties: l, headers: l }, type: d }, { endpoint: { url: "https://grafana.{Region}.{PartitionResult#dnsSuffix}", properties: l, headers: l }, type: d }] }] }] }, { error: "Invalid Configuration: Missing Region", type: c }] }] };
 exports.ruleSet = _data;

package/dist-cjs/models/models_0.js

@@ -1,7 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ListPermissionsRequestFilterSensitiveLog = exports.ListTagsForResourceResponseFilterSensitiveLog = exports.ListTagsForResourceRequestFilterSensitiveLog = exports.DisassociateLicenseResponseFilterSensitiveLog = exports.DisassociateLicenseRequestFilterSensitiveLog = exports.UpdateWorkspaceConfigurationResponseFilterSensitiveLog = exports.UpdateWorkspaceConfigurationRequestFilterSensitiveLog = exports.DescribeWorkspaceConfigurationResponseFilterSensitiveLog = exports.DescribeWorkspaceConfigurationRequestFilterSensitiveLog = exports.UpdateWorkspaceAuthenticationResponseFilterSensitiveLog = exports.UpdateWorkspaceAuthenticationRequestFilterSensitiveLog = exports.DescribeWorkspaceAuthenticationResponseFilterSensitiveLog = exports.AuthenticationDescriptionFilterSensitiveLog = exports.SamlAuthenticationFilterSensitiveLog = exports.SamlConfigurationFilterSensitiveLog = exports.RoleValuesFilterSensitiveLog = exports.IdpMetadataFilterSensitiveLog = exports.AwsSsoAuthenticationFilterSensitiveLog = exports.DescribeWorkspaceAuthenticationRequestFilterSensitiveLog = exports.AssociateLicenseResponseFilterSensitiveLog = exports.WorkspaceDescriptionFilterSensitiveLog = exports.VpcConfigurationFilterSensitiveLog = exports.AuthenticationSummaryFilterSensitiveLog = exports.AssociateLicenseRequestFilterSensitiveLog = exports.AssertionAttributesFilterSensitiveLog = exports.DeleteWorkspaceApiKeyResponseFilterSensitiveLog = exports.DeleteWorkspaceApiKeyRequestFilterSensitiveLog = exports.ValidationExceptionFieldFilterSensitiveLog = exports.CreateWorkspaceApiKeyResponseFilterSensitiveLog = exports.CreateWorkspaceApiKeyRequestFilterSensitiveLog = exports.UpdateAction = exports.Role = exports.UserType = exports.IdpMetadata = exports.WorkspaceStatus = exports.PermissionType = exports.NotificationDestinationType = exports.DataSourceType = exports.SamlConfigurationStatus = exports.AuthenticationProviderTypes = exports.LicenseType = exports.ValidationException = exports.ValidationExceptionReason = exports.ThrottlingException = exports.ServiceQuotaExceededException = exports.ResourceNotFoundException = exports.InternalServerException = exports.ConflictException = exports.AccountAccessType = exports.AccessDeniedException = void 0;
-exports.UpdateWorkspaceResponseFilterSensitiveLog = exports.UpdateWorkspaceRequestFilterSensitiveLog = exports.ListWorkspacesResponseFilterSensitiveLog = exports.WorkspaceSummaryFilterSensitiveLog = exports.ListWorkspacesRequestFilterSensitiveLog = exports.DescribeWorkspaceResponseFilterSensitiveLog = exports.DescribeWorkspaceRequestFilterSensitiveLog = exports.DeleteWorkspaceResponseFilterSensitiveLog = exports.DeleteWorkspaceRequestFilterSensitiveLog = exports.CreateWorkspaceResponseFilterSensitiveLog = exports.CreateWorkspaceRequestFilterSensitiveLog = exports.UntagResourceResponseFilterSensitiveLog = exports.UntagResourceRequestFilterSensitiveLog = exports.TagResourceResponseFilterSensitiveLog = exports.TagResourceRequestFilterSensitiveLog = exports.UpdatePermissionsResponseFilterSensitiveLog = exports.UpdateErrorFilterSensitiveLog = exports.UpdatePermissionsRequestFilterSensitiveLog = exports.UpdateInstructionFilterSensitiveLog = exports.ListPermissionsResponseFilterSensitiveLog = exports.PermissionEntryFilterSensitiveLog = exports.UserFilterSensitiveLog = void 0;
+exports.ListTagsForResourceResponseFilterSensitiveLog = exports.ListTagsForResourceRequestFilterSensitiveLog = exports.DisassociateLicenseResponseFilterSensitiveLog = exports.DisassociateLicenseRequestFilterSensitiveLog = exports.UpdateWorkspaceConfigurationResponseFilterSensitiveLog = exports.UpdateWorkspaceConfigurationRequestFilterSensitiveLog = exports.DescribeWorkspaceConfigurationResponseFilterSensitiveLog = exports.DescribeWorkspaceConfigurationRequestFilterSensitiveLog = exports.UpdateWorkspaceAuthenticationResponseFilterSensitiveLog = exports.UpdateWorkspaceAuthenticationRequestFilterSensitiveLog = exports.DescribeWorkspaceAuthenticationResponseFilterSensitiveLog = exports.AuthenticationDescriptionFilterSensitiveLog = exports.SamlAuthenticationFilterSensitiveLog = exports.SamlConfigurationFilterSensitiveLog = exports.RoleValuesFilterSensitiveLog = exports.IdpMetadataFilterSensitiveLog = exports.AwsSsoAuthenticationFilterSensitiveLog = exports.DescribeWorkspaceAuthenticationRequestFilterSensitiveLog = exports.AssociateLicenseResponseFilterSensitiveLog = exports.WorkspaceDescriptionFilterSensitiveLog = exports.VpcConfigurationFilterSensitiveLog = exports.NetworkAccessConfigurationFilterSensitiveLog = exports.AuthenticationSummaryFilterSensitiveLog = exports.AssociateLicenseRequestFilterSensitiveLog = exports.AssertionAttributesFilterSensitiveLog = exports.DeleteWorkspaceApiKeyResponseFilterSensitiveLog = exports.DeleteWorkspaceApiKeyRequestFilterSensitiveLog = exports.ValidationExceptionFieldFilterSensitiveLog = exports.CreateWorkspaceApiKeyResponseFilterSensitiveLog = exports.CreateWorkspaceApiKeyRequestFilterSensitiveLog = exports.UpdateAction = exports.Role = exports.UserType = exports.IdpMetadata = exports.WorkspaceStatus = exports.PermissionType = exports.NotificationDestinationType = exports.DataSourceType = exports.SamlConfigurationStatus = exports.AuthenticationProviderTypes = exports.LicenseType = exports.ValidationException = exports.ValidationExceptionReason = exports.ThrottlingException = exports.ServiceQuotaExceededException = exports.ResourceNotFoundException = exports.InternalServerException = exports.ConflictException = exports.AccountAccessType = exports.AccessDeniedException = void 0;
+exports.UpdateWorkspaceResponseFilterSensitiveLog = exports.UpdateWorkspaceRequestFilterSensitiveLog = exports.ListWorkspacesResponseFilterSensitiveLog = exports.WorkspaceSummaryFilterSensitiveLog = exports.ListWorkspacesRequestFilterSensitiveLog = exports.DescribeWorkspaceResponseFilterSensitiveLog = exports.DescribeWorkspaceRequestFilterSensitiveLog = exports.DeleteWorkspaceResponseFilterSensitiveLog = exports.DeleteWorkspaceRequestFilterSensitiveLog = exports.CreateWorkspaceResponseFilterSensitiveLog = exports.CreateWorkspaceRequestFilterSensitiveLog = exports.UntagResourceResponseFilterSensitiveLog = exports.UntagResourceRequestFilterSensitiveLog = exports.TagResourceResponseFilterSensitiveLog = exports.TagResourceRequestFilterSensitiveLog = exports.UpdatePermissionsResponseFilterSensitiveLog = exports.UpdateErrorFilterSensitiveLog = exports.UpdatePermissionsRequestFilterSensitiveLog = exports.UpdateInstructionFilterSensitiveLog = exports.ListPermissionsResponseFilterSensitiveLog = exports.PermissionEntryFilterSensitiveLog = exports.UserFilterSensitiveLog = exports.ListPermissionsRequestFilterSensitiveLog = void 0;
 const smithy_client_1 = require("@aws-sdk/smithy-client");
 const GrafanaServiceException_1 = require("./GrafanaServiceException");
 class AccessDeniedException extends GrafanaServiceException_1.GrafanaServiceException {
@@ -232,6 +232,10 @@ const AuthenticationSummaryFilterSensitiveLog = (obj) => ({
     ...obj,
 });
 exports.AuthenticationSummaryFilterSensitiveLog = AuthenticationSummaryFilterSensitiveLog;
+const NetworkAccessConfigurationFilterSensitiveLog = (obj) => ({
+    ...obj,
+});
+exports.NetworkAccessConfigurationFilterSensitiveLog = NetworkAccessConfigurationFilterSensitiveLog;
 const VpcConfigurationFilterSensitiveLog = (obj) => ({
     ...obj,
 });

package/dist-cjs/protocols/Aws_restJson1.js

@@ -39,6 +39,9 @@ const serializeAws_restJson1CreateWorkspaceCommand = async (input, context) => {
         }),
         clientToken: input.clientToken ?? (0, uuid_1.v4)(),
         ...(input.configuration != null && { configuration: smithy_client_1.LazyJsonString.fromObject(input.configuration) }),
+        ...(input.networkAccessControl != null && {
+            networkAccessControl: serializeAws_restJson1NetworkAccessConfiguration(input.networkAccessControl, context),
+        }),
         ...(input.organizationRoleName != null && { organizationRoleName: input.organizationRoleName }),
         ...(input.permissionType != null && { permissionType: input.permissionType }),
         ...(input.stackSetName != null && { stackSetName: input.stackSetName }),
@@ -343,8 +346,14 @@ const serializeAws_restJson1UpdateWorkspaceCommand = async (input, context) => {
     let body;
     body = JSON.stringify({
         ...(input.accountAccessType != null && { accountAccessType: input.accountAccessType }),
+        ...(input.networkAccessControl != null && {
+            networkAccessControl: serializeAws_restJson1NetworkAccessConfiguration(input.networkAccessControl, context),
+        }),
         ...(input.organizationRoleName != null && { organizationRoleName: input.organizationRoleName }),
         ...(input.permissionType != null && { permissionType: input.permissionType }),
+        ...(input.removeNetworkAccessConfiguration != null && {
+            removeNetworkAccessConfiguration: input.removeNetworkAccessConfiguration,
+        }),
         ...(input.removeVpcConfiguration != null && { removeVpcConfiguration: input.removeVpcConfiguration }),
         ...(input.stackSetName != null && { stackSetName: input.stackSetName }),
         ...(input.vpcConfiguration != null && {
@@ -1441,6 +1450,14 @@ const serializeAws_restJson1IdpMetadata = (input, context) => {
         _: (name, value) => ({ name: value }),
     });
 };
+const serializeAws_restJson1NetworkAccessConfiguration = (input, context) => {
+    return {
+        ...(input.prefixListIds != null && {
+            prefixListIds: serializeAws_restJson1PrefixListIds(input.prefixListIds, context),
+        }),
+        ...(input.vpceIds != null && { vpceIds: serializeAws_restJson1VpceIds(input.vpceIds, context) }),
+    };
+};
 const serializeAws_restJson1NotificationDestinationsList = (input, context) => {
     return input
         .filter((e) => e != null)
@@ -1455,6 +1472,13 @@ const serializeAws_restJson1OrganizationalUnitList = (input, context) => {
         return entry;
     });
 };
+const serializeAws_restJson1PrefixListIds = (input, context) => {
+    return input
+        .filter((e) => e != null)
+        .map((entry) => {
+        return entry;
+    });
+};
 const serializeAws_restJson1RoleValueList = (input, context) => {
     return input
         .filter((e) => e != null)
@@ -1539,6 +1563,13 @@ const serializeAws_restJson1VpcConfiguration = (input, context) => {
         ...(input.subnetIds != null && { subnetIds: serializeAws_restJson1SubnetIds(input.subnetIds, context) }),
     };
 };
+const serializeAws_restJson1VpceIds = (input, context) => {
+    return input
+        .filter((e) => e != null)
+        .map((entry) => {
+        return entry;
+    });
+};
 const deserializeAws_restJson1AllowedOrganizations = (output, context) => {
     const retVal = (output || [])
         .filter((e) => e != null)
@@ -1609,6 +1640,12 @@ const deserializeAws_restJson1IdpMetadata = (output, context) => {
     }
     return { $unknown: Object.entries(output)[0] };
 };
+const deserializeAws_restJson1NetworkAccessConfiguration = (output, context) => {
+    return {
+        prefixListIds: output.prefixListIds != null ? deserializeAws_restJson1PrefixListIds(output.prefixListIds, context) : undefined,
+        vpceIds: output.vpceIds != null ? deserializeAws_restJson1VpceIds(output.vpceIds, context) : undefined,
+    };
+};
 const deserializeAws_restJson1NotificationDestinationsList = (output, context) => {
     const retVal = (output || [])
         .filter((e) => e != null)
@@ -1648,6 +1685,17 @@ const deserializeAws_restJson1PermissionEntryList = (output, context) => {
     });
     return retVal;
 };
+const deserializeAws_restJson1PrefixListIds = (output, context) => {
+    const retVal = (output || [])
+        .filter((e) => e != null)
+        .map((entry) => {
+        if (entry === null) {
+            return null;
+        }
+        return (0, smithy_client_1.expectString)(entry);
+    });
+    return retVal;
+};
 const deserializeAws_restJson1RoleValueList = (output, context) => {
     const retVal = (output || [])
         .filter((e) => e != null)
@@ -1786,6 +1834,17 @@ const deserializeAws_restJson1VpcConfiguration = (output, context) => {
         subnetIds: output.subnetIds != null ? deserializeAws_restJson1SubnetIds(output.subnetIds, context) : undefined,
     };
 };
+const deserializeAws_restJson1VpceIds = (output, context) => {
+    const retVal = (output || [])
+        .filter((e) => e != null)
+        .map((entry) => {
+        if (entry === null) {
+            return null;
+        }
+        return (0, smithy_client_1.expectString)(entry);
+    });
+    return retVal;
+};
 const deserializeAws_restJson1WorkspaceDescription = (output, context) => {
     return {
         accountAccessType: (0, smithy_client_1.expectString)(output.accountAccessType),
@@ -1808,6 +1867,9 @@ const deserializeAws_restJson1WorkspaceDescription = (output, context) => {
         licenseType: (0, smithy_client_1.expectString)(output.licenseType),
         modified: output.modified != null ? (0, smithy_client_1.expectNonNull)((0, smithy_client_1.parseEpochTimestamp)((0, smithy_client_1.expectNumber)(output.modified))) : undefined,
         name: (0, smithy_client_1.expectString)(output.name),
+        networkAccessControl: output.networkAccessControl != null
+            ? deserializeAws_restJson1NetworkAccessConfiguration(output.networkAccessControl, context)
+            : undefined,
         notificationDestinations: output.notificationDestinations != null
             ? deserializeAws_restJson1NotificationDestinationsList(output.notificationDestinations, context)
             : undefined,

package/dist-es/endpoint/ruleset.js

@@ -1,4 +1,4 @@
-const p = "required", q = "fn", r = "argv", s = "ref";
-const a = "PartitionResult", b = "tree", c = "error", d = "endpoint", e = { [p]: false, "type": "String" }, f = { [p]: true, "default": false, "type": "Boolean" }, g = { [s]: "Endpoint" }, h = { [q]: "booleanEquals", [r]: [{ [s]: "UseFIPS" }, true] }, i = { [q]: "booleanEquals", [r]: [{ [s]: "UseDualStack" }, true] }, j = {}, k = { [q]: "booleanEquals", [r]: [true, { [q]: "getAttr", [r]: [{ [s]: a }, "supportsFIPS"] }] }, l = { [q]: "booleanEquals", [r]: [true, { [q]: "getAttr", [r]: [{ [s]: a }, "supportsDualStack"] }] }, m = [g], n = [h], o = [i];
-const _data = { version: "1.0", parameters: { Region: e, UseDualStack: f, UseFIPS: f, Endpoint: e }, rules: [{ conditions: [{ [q]: "aws.partition", [r]: [{ [s]: "Region" }], assign: a }], type: b, rules: [{ conditions: [{ [q]: "isSet", [r]: m }, { [q]: "parseURL", [r]: m, assign: "url" }], type: b, rules: [{ conditions: n, error: "Invalid Configuration: FIPS and custom endpoint are not supported", type: c }, { type: b, rules: [{ conditions: o, error: "Invalid Configuration: Dualstack and custom endpoint are not supported", type: c }, { endpoint: { url: g, properties: j, headers: j }, type: d }] }] }, { conditions: [h, i], type: b, rules: [{ conditions: [k, l], type: b, rules: [{ endpoint: { url: "https://grafana-fips.{Region}.{PartitionResult#dualStackDnsSuffix}", properties: j, headers: j }, type: d }] }, { error: "FIPS and DualStack are enabled, but this partition does not support one or both", type: c }] }, { conditions: n, type: b, rules: [{ conditions: [k], type: b, rules: [{ type: b, rules: [{ endpoint: { url: "https://grafana-fips.{Region}.{PartitionResult#dnsSuffix}", properties: j, headers: j }, type: d }] }] }, { error: "FIPS is enabled but this partition does not support FIPS", type: c }] }, { conditions: o, type: b, rules: [{ conditions: [l], type: b, rules: [{ endpoint: { url: "https://grafana.{Region}.{PartitionResult#dualStackDnsSuffix}", properties: j, headers: j }, type: d }] }, { error: "DualStack is enabled but this partition does not support DualStack", type: c }] }, { endpoint: { url: "https://grafana.{Region}.{PartitionResult#dnsSuffix}", properties: j, headers: j }, type: d }] }] };
+const s = "required", t = "fn", u = "argv", v = "ref";
+const a = "isSet", b = "tree", c = "error", d = "endpoint", e = "PartitionResult", f = "stringEquals", g = { [s]: false, "type": "String" }, h = { [s]: true, "default": false, "type": "Boolean" }, i = { [v]: "Endpoint" }, j = { [t]: "booleanEquals", [u]: [{ [v]: "UseFIPS" }, true] }, k = { [t]: "booleanEquals", [u]: [{ [v]: "UseDualStack" }, true] }, l = {}, m = { [v]: "Region" }, n = { [t]: "booleanEquals", [u]: [true, { [t]: "getAttr", [u]: [{ [v]: e }, "supportsFIPS"] }] }, o = { [t]: "booleanEquals", [u]: [true, { [t]: "getAttr", [u]: [{ [v]: e }, "supportsDualStack"] }] }, p = [j], q = [k], r = [m];
+const _data = { version: "1.0", parameters: { Region: g, UseDualStack: h, UseFIPS: h, Endpoint: g }, rules: [{ conditions: [{ [t]: a, [u]: [i] }], type: b, rules: [{ conditions: p, error: "Invalid Configuration: FIPS and custom endpoint are not supported", type: c }, { type: b, rules: [{ conditions: q, error: "Invalid Configuration: Dualstack and custom endpoint are not supported", type: c }, { endpoint: { url: i, properties: l, headers: l }, type: d }] }] }, { type: b, rules: [{ conditions: [{ [t]: a, [u]: r }], type: b, rules: [{ conditions: [{ [t]: "aws.partition", [u]: r, assign: e }], type: b, rules: [{ conditions: [j, k], type: b, rules: [{ conditions: [n, o], type: b, rules: [{ type: b, rules: [{ endpoint: { url: "https://grafana-fips.{Region}.{PartitionResult#dualStackDnsSuffix}", properties: l, headers: l }, type: d }] }] }, { error: "FIPS and DualStack are enabled, but this partition does not support one or both", type: c }] }, { conditions: p, type: b, rules: [{ conditions: [n], type: b, rules: [{ type: b, rules: [{ endpoint: { url: "https://grafana-fips.{Region}.{PartitionResult#dnsSuffix}", properties: l, headers: l }, type: d }] }] }, { error: "FIPS is enabled but this partition does not support FIPS", type: c }] }, { conditions: q, type: b, rules: [{ conditions: [o], type: b, rules: [{ type: b, rules: [{ endpoint: { url: "https://grafana.{Region}.{PartitionResult#dualStackDnsSuffix}", properties: l, headers: l }, type: d }] }] }, { error: "DualStack is enabled but this partition does not support DualStack", type: c }] }, { type: b, rules: [{ conditions: [{ [t]: f, [u]: [m, "ap-northeast-1"] }], endpoint: { url: "https://grafana.ap-northeast-1.amazonaws.com", properties: l, headers: l }, type: d }, { conditions: [{ [t]: f, [u]: [m, "ap-northeast-2"] }], endpoint: { url: "https://grafana.ap-northeast-2.amazonaws.com", properties: l, headers: l }, type: d }, { conditions: [{ [t]: f, [u]: [m, "ap-southeast-1"] }], endpoint: { url: "https://grafana.ap-southeast-1.amazonaws.com", properties: l, headers: l }, type: d }, { conditions: [{ [t]: f, [u]: [m, "ap-southeast-2"] }], endpoint: { url: "https://grafana.ap-southeast-2.amazonaws.com", properties: l, headers: l }, type: d }, { conditions: [{ [t]: f, [u]: [m, "eu-central-1"] }], endpoint: { url: "https://grafana.eu-central-1.amazonaws.com", properties: l, headers: l }, type: d }, { conditions: [{ [t]: f, [u]: [m, "eu-west-1"] }], endpoint: { url: "https://grafana.eu-west-1.amazonaws.com", properties: l, headers: l }, type: d }, { conditions: [{ [t]: f, [u]: [m, "eu-west-2"] }], endpoint: { url: "https://grafana.eu-west-2.amazonaws.com", properties: l, headers: l }, type: d }, { conditions: [{ [t]: f, [u]: [m, "us-east-1"] }], endpoint: { url: "https://grafana.us-east-1.amazonaws.com", properties: l, headers: l }, type: d }, { conditions: [{ [t]: f, [u]: [m, "us-east-2"] }], endpoint: { url: "https://grafana.us-east-2.amazonaws.com", properties: l, headers: l }, type: d }, { conditions: [{ [t]: f, [u]: [m, "us-west-2"] }], endpoint: { url: "https://grafana.us-west-2.amazonaws.com", properties: l, headers: l }, type: d }, { endpoint: { url: "https://grafana.{Region}.{PartitionResult#dnsSuffix}", properties: l, headers: l }, type: d }] }] }] }, { error: "Invalid Configuration: Missing Region", type: c }] }] };
 export const ruleSet = _data;

package/dist-es/models/models_0.js

@@ -213,6 +213,9 @@ export const AssociateLicenseRequestFilterSensitiveLog = (obj) => ({
 export const AuthenticationSummaryFilterSensitiveLog = (obj) => ({
     ...obj,
 });
+export const NetworkAccessConfigurationFilterSensitiveLog = (obj) => ({
+    ...obj,
+});
 export const VpcConfigurationFilterSensitiveLog = (obj) => ({
     ...obj,
 });

package/dist-es/protocols/Aws_restJson1.js

@@ -35,6 +35,9 @@ export const serializeAws_restJson1CreateWorkspaceCommand = async (input, contex
         }),
         clientToken: input.clientToken ?? generateIdempotencyToken(),
         ...(input.configuration != null && { configuration: __LazyJsonString.fromObject(input.configuration) }),
+        ...(input.networkAccessControl != null && {
+            networkAccessControl: serializeAws_restJson1NetworkAccessConfiguration(input.networkAccessControl, context),
+        }),
         ...(input.organizationRoleName != null && { organizationRoleName: input.organizationRoleName }),
         ...(input.permissionType != null && { permissionType: input.permissionType }),
         ...(input.stackSetName != null && { stackSetName: input.stackSetName }),
@@ -325,8 +328,14 @@ export const serializeAws_restJson1UpdateWorkspaceCommand = async (input, contex
     let body;
     body = JSON.stringify({
         ...(input.accountAccessType != null && { accountAccessType: input.accountAccessType }),
+        ...(input.networkAccessControl != null && {
+            networkAccessControl: serializeAws_restJson1NetworkAccessConfiguration(input.networkAccessControl, context),
+        }),
         ...(input.organizationRoleName != null && { organizationRoleName: input.organizationRoleName }),
         ...(input.permissionType != null && { permissionType: input.permissionType }),
+        ...(input.removeNetworkAccessConfiguration != null && {
+            removeNetworkAccessConfiguration: input.removeNetworkAccessConfiguration,
+        }),
         ...(input.removeVpcConfiguration != null && { removeVpcConfiguration: input.removeVpcConfiguration }),
         ...(input.stackSetName != null && { stackSetName: input.stackSetName }),
         ...(input.vpcConfiguration != null && {
@@ -1402,6 +1411,14 @@ const serializeAws_restJson1IdpMetadata = (input, context) => {
         _: (name, value) => ({ name: value }),
     });
 };
+const serializeAws_restJson1NetworkAccessConfiguration = (input, context) => {
+    return {
+        ...(input.prefixListIds != null && {
+            prefixListIds: serializeAws_restJson1PrefixListIds(input.prefixListIds, context),
+        }),
+        ...(input.vpceIds != null && { vpceIds: serializeAws_restJson1VpceIds(input.vpceIds, context) }),
+    };
+};
 const serializeAws_restJson1NotificationDestinationsList = (input, context) => {
     return input
         .filter((e) => e != null)
@@ -1416,6 +1433,13 @@ const serializeAws_restJson1OrganizationalUnitList = (input, context) => {
         return entry;
     });
 };
+const serializeAws_restJson1PrefixListIds = (input, context) => {
+    return input
+        .filter((e) => e != null)
+        .map((entry) => {
+        return entry;
+    });
+};
 const serializeAws_restJson1RoleValueList = (input, context) => {
     return input
         .filter((e) => e != null)
@@ -1500,6 +1524,13 @@ const serializeAws_restJson1VpcConfiguration = (input, context) => {
         ...(input.subnetIds != null && { subnetIds: serializeAws_restJson1SubnetIds(input.subnetIds, context) }),
     };
 };
+const serializeAws_restJson1VpceIds = (input, context) => {
+    return input
+        .filter((e) => e != null)
+        .map((entry) => {
+        return entry;
+    });
+};
 const deserializeAws_restJson1AllowedOrganizations = (output, context) => {
     const retVal = (output || [])
         .filter((e) => e != null)
@@ -1570,6 +1601,12 @@ const deserializeAws_restJson1IdpMetadata = (output, context) => {
     }
     return { $unknown: Object.entries(output)[0] };
 };
+const deserializeAws_restJson1NetworkAccessConfiguration = (output, context) => {
+    return {
+        prefixListIds: output.prefixListIds != null ? deserializeAws_restJson1PrefixListIds(output.prefixListIds, context) : undefined,
+        vpceIds: output.vpceIds != null ? deserializeAws_restJson1VpceIds(output.vpceIds, context) : undefined,
+    };
+};
 const deserializeAws_restJson1NotificationDestinationsList = (output, context) => {
     const retVal = (output || [])
         .filter((e) => e != null)
@@ -1609,6 +1646,17 @@ const deserializeAws_restJson1PermissionEntryList = (output, context) => {
     });
     return retVal;
 };
+const deserializeAws_restJson1PrefixListIds = (output, context) => {
+    const retVal = (output || [])
+        .filter((e) => e != null)
+        .map((entry) => {
+        if (entry === null) {
+            return null;
+        }
+        return __expectString(entry);
+    });
+    return retVal;
+};
 const deserializeAws_restJson1RoleValueList = (output, context) => {
     const retVal = (output || [])
         .filter((e) => e != null)
@@ -1747,6 +1795,17 @@ const deserializeAws_restJson1VpcConfiguration = (output, context) => {
         subnetIds: output.subnetIds != null ? deserializeAws_restJson1SubnetIds(output.subnetIds, context) : undefined,
     };
 };
+const deserializeAws_restJson1VpceIds = (output, context) => {
+    const retVal = (output || [])
+        .filter((e) => e != null)
+        .map((entry) => {
+        if (entry === null) {
+            return null;
+        }
+        return __expectString(entry);
+    });
+    return retVal;
+};
 const deserializeAws_restJson1WorkspaceDescription = (output, context) => {
     return {
         accountAccessType: __expectString(output.accountAccessType),
@@ -1769,6 +1828,9 @@ const deserializeAws_restJson1WorkspaceDescription = (output, context) => {
         licenseType: __expectString(output.licenseType),
         modified: output.modified != null ? __expectNonNull(__parseEpochTimestamp(__expectNumber(output.modified))) : undefined,
         name: __expectString(output.name),
+        networkAccessControl: output.networkAccessControl != null
+            ? deserializeAws_restJson1NetworkAccessConfiguration(output.networkAccessControl, context)
+            : undefined,
         notificationDestinations: output.notificationDestinations != null
             ? deserializeAws_restJson1NotificationDestinationsList(output.notificationDestinations, context)
             : undefined,

package/dist-types/Grafana.d.ts

@@ -40,7 +40,7 @@ export declare class Grafana extends GrafanaClient {
      * <p>Creates a <i>workspace</i>. In a workspace, you can create Grafana
      *             dashboards and visualizations to analyze your metrics, logs, and traces. You don't have to
      *             build, package, or deploy any hardware to run the Grafana server.</p>
-     *         <p>Don't use <code>CreateWorkspace</code> to modify an existing workspace. Instead,
+     *          <p>Don't use <code>CreateWorkspace</code> to modify an existing workspace. Instead,
      *             use <a href="https://docs.aws.amazon.com/grafana/latest/APIReference/API_UpdateWorkspace.html">UpdateWorkspace</a>.</p>
      */
     createWorkspace(args: CreateWorkspaceCommandInput, options?: __HttpHandlerOptions): Promise<CreateWorkspaceCommandOutput>;
@@ -121,7 +121,7 @@ export declare class Grafana extends GrafanaClient {
     /**
      * <p>The <code>TagResource</code> operation associates tags with an Amazon Managed Grafana resource.
      *             Currently, the only resource that can be tagged is workspaces. </p>
-     *         <p>If you specify a new tag key for the resource, this tag is appended to the list of tags associated
+     *          <p>If you specify a new tag key for the resource, this tag is appended to the list of tags associated
      *             with the resource.  If you specify a tag key that is already associated with the resource, the new tag
      *             value that you specify replaces the previous value for that tag.</p>
      */
@@ -144,9 +144,9 @@ export declare class Grafana extends GrafanaClient {
     /**
      * <p>Modifies an existing Amazon Managed Grafana workspace. If you use this operation and omit any
      *             optional parameters, the existing values of those parameters are not changed.</p>
-     *         <p>To modify the user authentication methods that the workspace uses, such as SAML or IAM Identity Center,
+     *          <p>To modify the user authentication methods that the workspace uses, such as SAML or IAM Identity Center,
      *             use <a href="https://docs.aws.amazon.com/grafana/latest/APIReference/API_UpdateWorkspaceAuthentication.html">UpdateWorkspaceAuthentication</a>.</p>
-     *         <p>To modify which users in the workspace have the <code>Admin</code> and <code>Editor</code> Grafana roles,
+     *          <p>To modify which users in the workspace have the <code>Admin</code> and <code>Editor</code> Grafana roles,
      *             use <a href="https://docs.aws.amazon.com/grafana/latest/APIReference/API_UpdatePermissions.html">UpdatePermissions</a>.</p>
      */
     updateWorkspace(args: UpdateWorkspaceCommandInput, options?: __HttpHandlerOptions): Promise<UpdateWorkspaceCommandOutput>;

package/dist-types/commands/CreateWorkspaceCommand.d.ts

@@ -11,7 +11,7 @@ export interface CreateWorkspaceCommandOutput extends CreateWorkspaceResponse, _
  * <p>Creates a <i>workspace</i>. In a workspace, you can create Grafana
  *             dashboards and visualizations to analyze your metrics, logs, and traces. You don't have to
  *             build, package, or deploy any hardware to run the Grafana server.</p>
- *         <p>Don't use <code>CreateWorkspace</code> to modify an existing workspace. Instead,
+ *          <p>Don't use <code>CreateWorkspace</code> to modify an existing workspace. Instead,
  *             use <a href="https://docs.aws.amazon.com/grafana/latest/APIReference/API_UpdateWorkspace.html">UpdateWorkspace</a>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.

package/dist-types/commands/TagResourceCommand.d.ts

@@ -10,7 +10,7 @@ export interface TagResourceCommandOutput extends TagResourceResponse, __Metadat
 /**
  * <p>The <code>TagResource</code> operation associates tags with an Amazon Managed Grafana resource.
  *             Currently, the only resource that can be tagged is workspaces. </p>
- *         <p>If you specify a new tag key for the resource, this tag is appended to the list of tags associated
+ *          <p>If you specify a new tag key for the resource, this tag is appended to the list of tags associated
  *             with the resource.  If you specify a tag key that is already associated with the resource, the new tag
  *             value that you specify replaces the previous value for that tag.</p>
  * @example

package/dist-types/commands/UpdateWorkspaceCommand.d.ts

@@ -10,9 +10,9 @@ export interface UpdateWorkspaceCommandOutput extends UpdateWorkspaceResponse, _
 /**
  * <p>Modifies an existing Amazon Managed Grafana workspace. If you use this operation and omit any
  *             optional parameters, the existing values of those parameters are not changed.</p>
- *         <p>To modify the user authentication methods that the workspace uses, such as SAML or IAM Identity Center,
+ *          <p>To modify the user authentication methods that the workspace uses, such as SAML or IAM Identity Center,
  *             use <a href="https://docs.aws.amazon.com/grafana/latest/APIReference/API_UpdateWorkspaceAuthentication.html">UpdateWorkspaceAuthentication</a>.</p>
- *         <p>To modify which users in the workspace have the <code>Admin</code> and <code>Editor</code> Grafana roles,
+ *          <p>To modify which users in the workspace have the <code>Admin</code> and <code>Editor</code> Grafana roles,
  *             use <a href="https://docs.aws.amazon.com/grafana/latest/APIReference/API_UpdatePermissions.html">UpdatePermissions</a>.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.

package/dist-types/models/models_0.d.ts

@@ -47,7 +47,7 @@ export interface CreateWorkspaceApiKeyRequest {
     keyName: string | undefined;
     /**
      * <p>Specifies the permission level of the key.</p>
-     *         <p> Valid values: <code>VIEWER</code>|<code>EDITOR</code>|<code>ADMIN</code>
+     *          <p> Valid values: <code>VIEWER</code>|<code>EDITOR</code>|<code>ADMIN</code>
      *          </p>
      */
     keyRole: string | undefined;
@@ -343,6 +343,47 @@ export declare enum DataSourceType {
      */
     XRAY = "XRAY"
 }
+/**
+ * <p>The configuration settings for in-bound network access to your workspace.</p>
+ *          <p>When this is configured, only listed IP addresses and VPC endpoints will be able to
+ *             access your workspace. Standard Grafana authentication and authorization will still be
+ *             required.</p>
+ *          <p>If this is not configured, or is removed, then all IP addresses and VPC endpoints will
+ *             be allowed. Standard Grafana authentication and authorization will still be
+ *             required.</p>
+ */
+export interface NetworkAccessConfiguration {
+    /**
+     * <p>An array of prefix list IDs. A prefix list is a list of CIDR ranges of IP addresses.
+     *             The IP addresses specified are allowed to access your workspace. If the list is not
+     *             included in the configuration then no IP addresses will be allowed to access the
+     *             workspace. You create a prefix list using the Amazon VPC console.</p>
+     *          <p>Prefix list IDs have the format <code>pl-<i>1a2b3c4d</i>
+     *             </code>.</p>
+     *          <p>For more information about prefix lists, see <a href="https://docs.aws.amazon.com/vpc/latest/userguide/managed-prefix-lists.html">Group CIDR blocks using managed
+     *                 prefix lists</a>in the <i>Amazon Virtual Private Cloud User
+     *             Guide</i>.</p>
+     */
+    prefixListIds: string[] | undefined;
+    /**
+     * <p>An array of Amazon VPC endpoint IDs for the workspace. You can create VPC
+     *             endpoints to your Amazon Managed Grafana workspace for access from within a VPC. If a
+     *             <code>NetworkAccessConfiguration</code> is specified then only VPC endpoints
+     *             specified here will be allowed to access the workspace.</p>
+     *          <p>VPC endpoint IDs have the format <code>vpce-<i>1a2b3c4d</i>
+     *             </code>.</p>
+     *          <p>For more information about creating an interface VPC endpoint, see
+     *             <a href="https://docs.aws.amazon.com/grafana/latest/userguide/VPC-endpoints">Interface VPC endpoints</a> in the <i>Amazon Managed Grafana
+     *                 User Guide</i>.</p>
+     *          <note>
+     *             <p>The only VPC endpoints that can be specified here are interface VPC endpoints for
+     *                 Grafana workspaces (using the
+     *                 <code>com.amazonaws.[region].grafana-workspace</code> service endpoint). Other VPC
+     *                 endpoints will be ignored.</p>
+     *          </note>
+     */
+    vpceIds: string[] | undefined;
+}
 export declare enum NotificationDestinationType {
     /**
      * AWS Simple Notification Service
@@ -408,16 +449,20 @@ export declare enum WorkspaceStatus {
 /**
  * <p>The configuration settings for an Amazon VPC that contains data sources
  *             for your Grafana workspace to connect to.</p>
+ *          <note>
+ *             <p>Provided <code>securityGroupIds</code> and <code>subnetIds</code>
+ *             must be part of the same VPC.</p>
+ *          </note>
  */
 export interface VpcConfiguration {
     /**
      * <p>The list of Amazon EC2 security group IDs attached to the Amazon VPC
-     *             for your Grafana workspace to connect.</p>
+     *             for your Grafana workspace to connect. Duplicates not allowed.</p>
      */
     securityGroupIds: string[] | undefined;
     /**
      * <p>The list of Amazon EC2 subnet IDs created in the Amazon VPC for
-     *             your Grafana workspace to connect.</p>
+     *             your Grafana workspace to connect. Duplicates not allowed.</p>
      */
     subnetIds: string[] | undefined;
 }
@@ -482,14 +527,14 @@ export interface WorkspaceDescription {
      */
     organizationalUnits?: string[];
     /**
-     * <p>If this is <code>Service Managed</code>, Amazon Managed Grafana automatically creates the IAM roles
+     * <p>If this is <code>SERVICE_MANAGED</code>, Amazon Managed Grafana automatically creates the IAM roles
      *             and provisions the permissions that the workspace needs to use Amazon Web Services data sources and notification channels.</p>
-     *         <p>If this is <code>CUSTOMER_MANAGED</code>, you manage those roles and permissions
+     *          <p>If this is <code>CUSTOMER_MANAGED</code>, you manage those roles and permissions
      *             yourself. If you are creating this workspace in a member account of an organization and that account is not a
      *             delegated administrator account, and
      *             you want the workspace to access data sources in other Amazon Web Services accounts in the
      *             organization, you must choose <code>CUSTOMER_MANAGED</code>.</p>
-     *         <p>For more information, see <a href="https://docs.aws.amazon.com/grafana/latest/userguide/AMG-manage-permissions.html">Amazon Managed Grafana permissions and policies for
+     *          <p>For more information, see <a href="https://docs.aws.amazon.com/grafana/latest/userguide/AMG-manage-permissions.html">Amazon Managed Grafana permissions and policies for
      *             Amazon Web Services data sources and notification channels</a>
      *          </p>
      */
@@ -540,6 +585,10 @@ export interface WorkspaceDescription {
      *             (Amazon Virtual Private Cloud).</p>
      */
     vpcConfiguration?: VpcConfiguration;
+    /**
+     * <p>The configuration settings for network access to your workspace.</p>
+     */
+    networkAccessControl?: NetworkAccessConfiguration;
 }
 export interface AssociateLicenseResponse {
     /**
@@ -833,7 +882,7 @@ export declare enum Role {
 export interface User {
     /**
      * <p>The ID of the user or group.</p>
-     *         <p>Pattern: <code>^([0-9a-fA-F]{10}-|)[A-Fa-f0-9]{8}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{12}$</code>
+     *          <p>Pattern: <code>^([0-9a-fA-F]{10}-|)[A-Fa-f0-9]{8}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{12}$</code>
      *          </p>
      */
     id: string | undefined;
@@ -978,11 +1027,11 @@ export interface CreateWorkspaceRequest {
      *             Amazon Web Services data sources and notification channels. In the CLI mode, the permissionType <code>SERVICE_MANAGED</code> will not create the IAM role
      *             for you. The ability for the Amazon Managed Grafana to create the IAM role on behalf of the user is supported only in the
      *             Amazon Managed Grafana AWS console. Use only the <code>CUSTOMER_MANAGED</code> permission type when creating a workspace in the CLI. </p>
-     *         <p>If you specify <code>CUSTOMER_MANAGED</code>, you will manage those roles and
+     *          <p>If you specify <code>CUSTOMER_MANAGED</code>, you will manage those roles and
      *             permissions yourself. If you are creating this workspace in a member account of an
      *             organization that is not a delegated administrator account, and you want the workspace to access data sources in other Amazon Web Services
      *             accounts in the organization, you must choose <code>CUSTOMER_MANAGED</code>.</p>
-     *         <p>For more information, see <a href="https://docs.aws.amazon.com/grafana/latest/userguide/AMG-manage-permissions.html">Amazon Managed Grafana permissions and policies for
+     *          <p>For more information, see <a href="https://docs.aws.amazon.com/grafana/latest/userguide/AMG-manage-permissions.html">Amazon Managed Grafana permissions and policies for
      *             Amazon Web Services data sources and notification channels</a>.</p>
      */
     permissionType: PermissionType | string | undefined;
@@ -996,14 +1045,14 @@ export interface CreateWorkspaceRequest {
      *             workspace. Specifying these data sources here enables Amazon Managed Grafana to create IAM roles and permissions that allow Amazon Managed Grafana to read data from these
      *             sources. You must still add them as data sources in the Grafana console in the
      *             workspace.</p>
-     *         <p>If you don't specify a data source here, you can still add it as a data source in the
+     *          <p>If you don't specify a data source here, you can still add it as a data source in the
      *             workspace console later. However, you will then have to manually configure permissions for
      *             it.</p>
      */
     workspaceDataSources?: (DataSourceType | string)[];
     /**
      * <p>A description for the workspace. This is used only to help you identify this workspace.</p>
-     *         <p>Pattern: <code>^[\\p{L}\\p{Z}\\p{N}\\p{P}]{0,2048}$</code>
+     *          <p>Pattern: <code>^[\\p{L}\\p{Z}\\p{N}\\p{P}]{0,2048}$</code>
      *          </p>
      */
     workspaceDescription?: string;
@@ -1048,6 +1097,16 @@ export interface CreateWorkspaceRequest {
      *             about the format and configuration options available, see <a href="https://docs.aws.amazon.com/grafana/latest/userguide/AMG-configure-workspace.html">Working in your Grafana workspace</a>.</p>
      */
     configuration?: __LazyJsonString | string;
+    /**
+     * <p>Configuration for network access to your workspace.</p>
+     *          <p>When this is configured, only listed IP addresses and VPC endpoints will be able to
+     *             access your workspace. Standard Grafana authentication and authorization will still be
+     *             required.</p>
+     *          <p>If this is not configured, or is removed, then all IP addresses and VPC endpoints will
+     *             be allowed. Standard Grafana authentication and authorization will still be
+     *             required.</p>
+     */
+    networkAccessControl?: NetworkAccessConfiguration;
 }
 export interface CreateWorkspaceResponse {
     /**
@@ -1165,14 +1224,14 @@ export interface UpdateWorkspaceRequest {
      */
     organizationRoleName?: string;
     /**
-     * <p>If you specify <code>Service Managed</code>, Amazon Managed Grafana automatically creates
+     * <p>If you specify <code>SERVICE_MANAGED</code>, Amazon Managed Grafana automatically creates
      *             the IAM roles and provisions the permissions that the workspace needs to use
      *             Amazon Web Services data sources and notification channels.</p>
-     *         <p>If you specify <code>CUSTOMER_MANAGED</code>, you will manage those roles and
+     *          <p>If you specify <code>CUSTOMER_MANAGED</code>, you will manage those roles and
      *             permissions yourself. If you are creating this workspace in a member account of an
      *             organization and that account is not a delegated administrator account, and you want the workspace to access data sources in other Amazon Web Services
      *             accounts in the organization, you must choose <code>CUSTOMER_MANAGED</code>.</p>
-     *         <p>For more information, see <a href="https://docs.aws.amazon.com/grafana/latest/userguide/AMG-manage-permissions.html">Amazon Managed Grafana permissions and policies for
+     *          <p>For more information, see <a href="https://docs.aws.amazon.com/grafana/latest/userguide/AMG-manage-permissions.html">Amazon Managed Grafana permissions and policies for
      *             Amazon Web Services data sources and notification channels</a>
      *          </p>
      */
@@ -1187,7 +1246,7 @@ export interface UpdateWorkspaceRequest {
      *             workspace. Specifying these data sources here enables Amazon Managed Grafana to create IAM roles and permissions that allow Amazon Managed Grafana to read data from these
      *             sources. You must still add them as data sources in the Grafana console in the
      *             workspace.</p>
-     *         <p>If you don't specify a data source here, you can still add it as a data source later in
+     *          <p>If you don't specify a data source here, you can still add it as a data source later in
      *             the workspace console. However, you will then have to manually configure permissions for
      *             it.</p>
      */
@@ -1230,10 +1289,29 @@ export interface UpdateWorkspaceRequest {
     vpcConfiguration?: VpcConfiguration;
     /**
      * <p>Whether to remove the VPC configuration from the workspace.</p>
-     *         <p>Setting this to <code>true</code> and providing a <code>vpcConfiguration</code> to set
+     *          <p>Setting this to <code>true</code> and providing a <code>vpcConfiguration</code> to set
      *             will return an error.</p>
      */
     removeVpcConfiguration?: boolean;
+    /**
+     * <p>The configuration settings for network access to your workspace.</p>
+     *          <p>When this is configured, only listed IP addresses and VPC endpoints will be able to
+     *             access your workspace. Standard Grafana authentication and authorization will still be
+     *             required.</p>
+     *          <p>If this is not configured, or is removed, then all IP addresses and VPC endpoints will
+     *             be allowed. Standard Grafana authentication and authorization will still be
+     *             required.</p>
+     */
+    networkAccessControl?: NetworkAccessConfiguration;
+    /**
+     * <p>Whether to remove the network access configuration from the workspace.</p>
+     *          <p>Setting this to <code>true</code> and providing a <code>networkAccessControl</code>
+     *             to set will return an error.</p>
+     *          <p>If you remove this configuration by setting this to <code>true</code>, then all IP
+     *             addresses and VPC endpoints will be allowed. Standard Grafana authentication and
+     *             authorization will still be required.</p>
+     */
+    removeNetworkAccessConfiguration?: boolean;
 }
 export interface UpdateWorkspaceResponse {
     /**
@@ -1273,6 +1351,10 @@ export declare const AssociateLicenseRequestFilterSensitiveLog: (obj: AssociateL
  * @internal
  */
 export declare const AuthenticationSummaryFilterSensitiveLog: (obj: AuthenticationSummary) => any;
+/**
+ * @internal
+ */
+export declare const NetworkAccessConfigurationFilterSensitiveLog: (obj: NetworkAccessConfiguration) => any;
 /**
  * @internal
  */

package/dist-types/ts3.4/models/models_0.d.ts

@@ -138,6 +138,10 @@ export declare enum DataSourceType {
   TWINMAKER = "TWINMAKER",
   XRAY = "XRAY",
 }
+export interface NetworkAccessConfiguration {
+  prefixListIds: string[] | undefined;
+  vpceIds: string[] | undefined;
+}
 export declare enum NotificationDestinationType {
   SNS = "SNS",
 }
@@ -186,6 +190,7 @@ export interface WorkspaceDescription {
   authentication: AuthenticationSummary | undefined;
   tags?: Record<string, string>;
   vpcConfiguration?: VpcConfiguration;
+  networkAccessControl?: NetworkAccessConfiguration;
 }
 export interface AssociateLicenseResponse {
   workspace: WorkspaceDescription | undefined;
@@ -354,6 +359,7 @@ export interface CreateWorkspaceRequest {
   tags?: Record<string, string>;
   vpcConfiguration?: VpcConfiguration;
   configuration?: __LazyJsonString | string;
+  networkAccessControl?: NetworkAccessConfiguration;
 }
 export interface CreateWorkspaceResponse {
   workspace: WorkspaceDescription | undefined;
@@ -405,6 +411,8 @@ export interface UpdateWorkspaceRequest {
   workspaceRoleArn?: string;
   vpcConfiguration?: VpcConfiguration;
   removeVpcConfiguration?: boolean;
+  networkAccessControl?: NetworkAccessConfiguration;
+  removeNetworkAccessConfiguration?: boolean;
 }
 export interface UpdateWorkspaceResponse {
   workspace: WorkspaceDescription | undefined;
@@ -433,6 +441,9 @@ export declare const AssociateLicenseRequestFilterSensitiveLog: (
 export declare const AuthenticationSummaryFilterSensitiveLog: (
   obj: AuthenticationSummary
 ) => any;
+export declare const NetworkAccessConfigurationFilterSensitiveLog: (
+  obj: NetworkAccessConfiguration
+) => any;
 export declare const VpcConfigurationFilterSensitiveLog: (
   obj: VpcConfiguration
 ) => any;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@aws-sdk/client-grafana",
   "description": "AWS SDK for JavaScript Grafana Client for Node.js, Browser and React Native",
-  "version": "3.272.0",
+  "version": "3.276.0",
   "scripts": {
     "build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
     "build:cjs": "tsc -p tsconfig.cjs.json",
@@ -20,7 +20,7 @@
   "dependencies": {
     "@aws-crypto/sha256-browser": "3.0.0",
     "@aws-crypto/sha256-js": "3.0.0",
-    "@aws-sdk/client-sts": "3.272.0",
+    "@aws-sdk/client-sts": "3.276.0",
     "@aws-sdk/config-resolver": "3.272.0",
     "@aws-sdk/credential-provider-node": "3.272.0",
     "@aws-sdk/fetch-http-handler": "3.272.0",