@aws-sdk/client-s3-control 3.888.0 → 3.889.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist-cjs/index.js +188 -14
- package/dist-es/models/models_0.js +16 -28
- package/dist-es/models/models_1.js +28 -0
- package/dist-es/protocols/Aws_restXml.js +163 -2
- package/dist-types/commands/CreateJobCommand.d.ts +14 -0
- package/dist-types/commands/DescribeJobCommand.d.ts +14 -0
- package/dist-types/commands/ListAccessPointsForObjectLambdaCommand.d.ts +2 -1
- package/dist-types/commands/ListCallerAccessGrantsCommand.d.ts +1 -1
- package/dist-types/models/models_0.d.ts +169 -142
- package/dist-types/models/models_1.d.ts +142 -1
- package/dist-types/ts3.4/commands/ListAccessPointsForObjectLambdaCommand.d.ts +2 -4
- package/dist-types/ts3.4/commands/ListCallerAccessGrantsCommand.d.ts +1 -1
- package/dist-types/ts3.4/models/models_0.d.ts +77 -36
- package/dist-types/ts3.4/models/models_1.d.ts +38 -0
- package/package.json +1 -1
|
@@ -1855,6 +1855,166 @@ export interface KeyNameConstraint {
|
|
|
1855
1855
|
*/
|
|
1856
1856
|
MatchAnySubstring?: string[] | undefined;
|
|
1857
1857
|
}
|
|
1858
|
+
/**
|
|
1859
|
+
* <p>A filter that returns objects that are encrypted by dual-layer server-side encryption with Amazon Web Services Key Management
|
|
1860
|
+
* Service (KMS) keys (DSSE-KMS). You can further refine your filtering by optionally providing a KMS Key ARN
|
|
1861
|
+
* to create an object list of DSSE-KMS objects with that specific KMS Key ARN.</p>
|
|
1862
|
+
* @public
|
|
1863
|
+
*/
|
|
1864
|
+
export interface DSSEKMSFilter {
|
|
1865
|
+
/**
|
|
1866
|
+
* <p>The Amazon Resource Name (ARN) of the customer managed KMS key to use for the filter
|
|
1867
|
+
* to return objects that are encrypted by the specified key. For best performance,
|
|
1868
|
+
* we recommend using the <code>KMSKeyArn</code> filter in conjunction with other object metadata filters, like <code>MatchAnyPrefix</code>, <code>CreatedAfter</code>, or
|
|
1869
|
+
* <code>MatchAnyStorageClass</code>.</p>
|
|
1870
|
+
* <note>
|
|
1871
|
+
* <p>You must provide the full KMS Key ARN. You can't use an alias name or alias ARN.
|
|
1872
|
+
* For more information, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#key-id-key-ARN">
|
|
1873
|
+
* KMS keys</a> in the <i>Amazon Web Services Key Management Service Developer Guide</i>.</p>
|
|
1874
|
+
* </note>
|
|
1875
|
+
* @public
|
|
1876
|
+
*/
|
|
1877
|
+
KmsKeyArn?: string | undefined;
|
|
1878
|
+
}
|
|
1879
|
+
/**
|
|
1880
|
+
* <p>A filter that returns objects that aren't server-side encrypted.</p>
|
|
1881
|
+
* @public
|
|
1882
|
+
*/
|
|
1883
|
+
export interface NotSSEFilter {
|
|
1884
|
+
}
|
|
1885
|
+
/**
|
|
1886
|
+
* <p>A filter that returns objects that are encrypted by server-side encryption with customer-provided keys (SSE-C).</p>
|
|
1887
|
+
* @public
|
|
1888
|
+
*/
|
|
1889
|
+
export interface SSECFilter {
|
|
1890
|
+
}
|
|
1891
|
+
/**
|
|
1892
|
+
* <p>A filter that returns objects that are encrypted by server-side encryption with Amazon Web Services KMS (SSE-KMS).</p>
|
|
1893
|
+
* @public
|
|
1894
|
+
*/
|
|
1895
|
+
export interface SSEKMSFilter {
|
|
1896
|
+
/**
|
|
1897
|
+
* <p>The Amazon Resource Name (ARN) of the customer managed KMS key to use for the filter
|
|
1898
|
+
* to return objects that are encrypted by the specified key. For best performance,
|
|
1899
|
+
* we recommend using the <code>KMSKeyArn</code> filter in conjunction with other object metadata filters, like <code>MatchAnyPrefix</code>, <code>CreatedAfter</code>, or
|
|
1900
|
+
* <code>MatchAnyStorageClass</code>.</p>
|
|
1901
|
+
* <note>
|
|
1902
|
+
* <p>You must provide the full KMS Key ARN. You can't use an alias name or alias ARN.
|
|
1903
|
+
* For more information, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#key-id-key-ARN">
|
|
1904
|
+
* KMS keys</a> in the <i>Amazon Web Services Key Management Service Developer Guide</i>.</p>
|
|
1905
|
+
* </note>
|
|
1906
|
+
* @public
|
|
1907
|
+
*/
|
|
1908
|
+
KmsKeyArn?: string | undefined;
|
|
1909
|
+
/**
|
|
1910
|
+
* <p>Specifies whether Amazon S3 should use an S3 Bucket Key for object encryption with server-side encryption
|
|
1911
|
+
* using Amazon Web Services Key Management Service (Amazon Web Services KMS) keys (SSE-KMS). If specified, will filter SSE-KMS encrypted objects by S3 Bucket Key status.
|
|
1912
|
+
* For more information, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/bucket-key.html">Reducing the cost of SSE-KMS with Amazon S3 Bucket Keys</a>
|
|
1913
|
+
* in the <i>Amazon S3 User Guide</i>.</p>
|
|
1914
|
+
* @public
|
|
1915
|
+
*/
|
|
1916
|
+
BucketKeyEnabled?: boolean | undefined;
|
|
1917
|
+
}
|
|
1918
|
+
/**
|
|
1919
|
+
* <p>A filter that returns objects that are encrypted by server-side encryption with Amazon S3 managed keys (SSE-S3).</p>
|
|
1920
|
+
* @public
|
|
1921
|
+
*/
|
|
1922
|
+
export interface SSES3Filter {
|
|
1923
|
+
}
|
|
1924
|
+
/**
|
|
1925
|
+
* <p>An optional filter for the
|
|
1926
|
+
* <code>S3JobManifestGenerator</code> that identifies the subset of objects by encryption type.
|
|
1927
|
+
* This filter is used to create an object list for S3 Batch Operations jobs. If provided, this filter will generate an object list
|
|
1928
|
+
* that only includes objects with the specified encryption type.</p>
|
|
1929
|
+
* @public
|
|
1930
|
+
*/
|
|
1931
|
+
export type ObjectEncryptionFilter = ObjectEncryptionFilter.DSSEKMSMember | ObjectEncryptionFilter.NOTSSEMember | ObjectEncryptionFilter.SSECMember | ObjectEncryptionFilter.SSEKMSMember | ObjectEncryptionFilter.SSES3Member | ObjectEncryptionFilter.$UnknownMember;
|
|
1932
|
+
/**
|
|
1933
|
+
* @public
|
|
1934
|
+
*/
|
|
1935
|
+
export declare namespace ObjectEncryptionFilter {
|
|
1936
|
+
/**
|
|
1937
|
+
* <p>Filters for objects that are encrypted by server-side encryption with Amazon S3 managed keys (SSE-S3).</p>
|
|
1938
|
+
* @public
|
|
1939
|
+
*/
|
|
1940
|
+
interface SSES3Member {
|
|
1941
|
+
SSES3: SSES3Filter;
|
|
1942
|
+
SSEKMS?: never;
|
|
1943
|
+
DSSEKMS?: never;
|
|
1944
|
+
SSEC?: never;
|
|
1945
|
+
NOTSSE?: never;
|
|
1946
|
+
$unknown?: never;
|
|
1947
|
+
}
|
|
1948
|
+
/**
|
|
1949
|
+
* <p>Filters for objects that are encrypted by server-side encryption with Amazon Web Services Key Management Service (KMS) keys (SSE-KMS).</p>
|
|
1950
|
+
* @public
|
|
1951
|
+
*/
|
|
1952
|
+
interface SSEKMSMember {
|
|
1953
|
+
SSES3?: never;
|
|
1954
|
+
SSEKMS: SSEKMSFilter;
|
|
1955
|
+
DSSEKMS?: never;
|
|
1956
|
+
SSEC?: never;
|
|
1957
|
+
NOTSSE?: never;
|
|
1958
|
+
$unknown?: never;
|
|
1959
|
+
}
|
|
1960
|
+
/**
|
|
1961
|
+
* <p>Filters for objects that are encrypted by dual-layer server-side encryption with Amazon Web Services Key Management
|
|
1962
|
+
* Service (KMS) keys (DSSE-KMS).</p>
|
|
1963
|
+
* @public
|
|
1964
|
+
*/
|
|
1965
|
+
interface DSSEKMSMember {
|
|
1966
|
+
SSES3?: never;
|
|
1967
|
+
SSEKMS?: never;
|
|
1968
|
+
DSSEKMS: DSSEKMSFilter;
|
|
1969
|
+
SSEC?: never;
|
|
1970
|
+
NOTSSE?: never;
|
|
1971
|
+
$unknown?: never;
|
|
1972
|
+
}
|
|
1973
|
+
/**
|
|
1974
|
+
* <p>Filters for objects that are encrypted by server-side encryption with customer-provided keys (SSE-C).</p>
|
|
1975
|
+
* @public
|
|
1976
|
+
*/
|
|
1977
|
+
interface SSECMember {
|
|
1978
|
+
SSES3?: never;
|
|
1979
|
+
SSEKMS?: never;
|
|
1980
|
+
DSSEKMS?: never;
|
|
1981
|
+
SSEC: SSECFilter;
|
|
1982
|
+
NOTSSE?: never;
|
|
1983
|
+
$unknown?: never;
|
|
1984
|
+
}
|
|
1985
|
+
/**
|
|
1986
|
+
* <p>Filters for objects that are not encrypted by server-side encryption. </p>
|
|
1987
|
+
* @public
|
|
1988
|
+
*/
|
|
1989
|
+
interface NOTSSEMember {
|
|
1990
|
+
SSES3?: never;
|
|
1991
|
+
SSEKMS?: never;
|
|
1992
|
+
DSSEKMS?: never;
|
|
1993
|
+
SSEC?: never;
|
|
1994
|
+
NOTSSE: NotSSEFilter;
|
|
1995
|
+
$unknown?: never;
|
|
1996
|
+
}
|
|
1997
|
+
/**
|
|
1998
|
+
* @public
|
|
1999
|
+
*/
|
|
2000
|
+
interface $UnknownMember {
|
|
2001
|
+
SSES3?: never;
|
|
2002
|
+
SSEKMS?: never;
|
|
2003
|
+
DSSEKMS?: never;
|
|
2004
|
+
SSEC?: never;
|
|
2005
|
+
NOTSSE?: never;
|
|
2006
|
+
$unknown: [string, any];
|
|
2007
|
+
}
|
|
2008
|
+
interface Visitor<T> {
|
|
2009
|
+
SSES3: (value: SSES3Filter) => T;
|
|
2010
|
+
SSEKMS: (value: SSEKMSFilter) => T;
|
|
2011
|
+
DSSEKMS: (value: DSSEKMSFilter) => T;
|
|
2012
|
+
SSEC: (value: SSECFilter) => T;
|
|
2013
|
+
NOTSSE: (value: NotSSEFilter) => T;
|
|
2014
|
+
_: (name: string, value: any) => T;
|
|
2015
|
+
}
|
|
2016
|
+
const visit: <T>(value: ObjectEncryptionFilter, visitor: Visitor<T>) => T;
|
|
2017
|
+
}
|
|
1858
2018
|
/**
|
|
1859
2019
|
* @public
|
|
1860
2020
|
* @enum
|
|
@@ -1940,6 +2100,14 @@ export interface JobManifestGeneratorFilter {
|
|
|
1940
2100
|
* @public
|
|
1941
2101
|
*/
|
|
1942
2102
|
MatchAnyStorageClass?: S3StorageClass[] | undefined;
|
|
2103
|
+
/**
|
|
2104
|
+
* <p>If provided, the generated object list includes
|
|
2105
|
+
* only source bucket objects with the indicated server-side encryption type (SSE-S3, SSE-KMS, DSSE-KMS, SSE-C, or NOT-SSE).
|
|
2106
|
+
* If you select SSE-KMS or DSSE-KMS, you can optionally further filter your results by specifying a specific KMS Key ARN.
|
|
2107
|
+
* If you select SSE-KMS, you can also optionally further filter your results by Bucket Key enabled status.</p>
|
|
2108
|
+
* @public
|
|
2109
|
+
*/
|
|
2110
|
+
MatchAnyObjectEncryption?: ObjectEncryptionFilter[] | undefined;
|
|
1943
2111
|
}
|
|
1944
2112
|
/**
|
|
1945
2113
|
* <p>Configuration for the use of SSE-KMS to encrypt generated manifest objects.</p>
|
|
@@ -4880,7 +5048,7 @@ export interface LifecycleRule {
|
|
|
4880
5048
|
*/
|
|
4881
5049
|
Transitions?: Transition[] | undefined;
|
|
4882
5050
|
/**
|
|
4883
|
-
* <p> Specifies the transition rule for the lifecycle rule that describes when
|
|
5051
|
+
* <p> Specifies the transition rule for the lifecycle rule that describes when non-current
|
|
4884
5052
|
* objects transition to a specific storage class. If your bucket is versioning-enabled (or
|
|
4885
5053
|
* versioning is suspended), you can set this action to request that Amazon S3 transition
|
|
4886
5054
|
* noncurrent object versions to a specific storage class at a set period in the object's
|
|
@@ -6782,147 +6950,6 @@ export interface ObjectLambdaAccessPoint {
|
|
|
6782
6950
|
*/
|
|
6783
6951
|
Alias?: ObjectLambdaAccessPointAlias | undefined;
|
|
6784
6952
|
}
|
|
6785
|
-
/**
|
|
6786
|
-
* @public
|
|
6787
|
-
*/
|
|
6788
|
-
export interface ListAccessPointsForObjectLambdaResult {
|
|
6789
|
-
/**
|
|
6790
|
-
* <p>Returns list of Object Lambda Access Points.</p>
|
|
6791
|
-
* @public
|
|
6792
|
-
*/
|
|
6793
|
-
ObjectLambdaAccessPointList?: ObjectLambdaAccessPoint[] | undefined;
|
|
6794
|
-
/**
|
|
6795
|
-
* <p>If the list has more access points than can be returned in one call to this API, this field
|
|
6796
|
-
* contains a continuation token that you can provide in subsequent calls to this API to
|
|
6797
|
-
* retrieve additional access points.</p>
|
|
6798
|
-
* @public
|
|
6799
|
-
*/
|
|
6800
|
-
NextToken?: string | undefined;
|
|
6801
|
-
}
|
|
6802
|
-
/**
|
|
6803
|
-
* @public
|
|
6804
|
-
*/
|
|
6805
|
-
export interface ListCallerAccessGrantsRequest {
|
|
6806
|
-
/**
|
|
6807
|
-
* <p>The Amazon Web Services account ID of the S3 Access Grants instance.</p>
|
|
6808
|
-
* @public
|
|
6809
|
-
*/
|
|
6810
|
-
AccountId?: string | undefined;
|
|
6811
|
-
/**
|
|
6812
|
-
* <p>The S3 path of the data that you would like to access. Must start with
|
|
6813
|
-
* <code>s3://</code>. You can optionally pass only the beginning characters of a path, and
|
|
6814
|
-
* S3 Access Grants will search for all applicable grants for the path fragment. </p>
|
|
6815
|
-
* @public
|
|
6816
|
-
*/
|
|
6817
|
-
GrantScope?: string | undefined;
|
|
6818
|
-
/**
|
|
6819
|
-
* <p>A pagination token to request the next page of results. Pass this value into a
|
|
6820
|
-
* subsequent <code>List Caller Access Grants</code> request in order to retrieve the next
|
|
6821
|
-
* page of results.</p>
|
|
6822
|
-
* @public
|
|
6823
|
-
*/
|
|
6824
|
-
NextToken?: string | undefined;
|
|
6825
|
-
/**
|
|
6826
|
-
* <p>The maximum number of access grants that you would like returned in the <code>List
|
|
6827
|
-
* Caller Access Grants</code> response. If the results include the pagination token
|
|
6828
|
-
* <code>NextToken</code>, make another call using the <code>NextToken</code> to determine
|
|
6829
|
-
* if there are more results.</p>
|
|
6830
|
-
* @public
|
|
6831
|
-
*/
|
|
6832
|
-
MaxResults?: number | undefined;
|
|
6833
|
-
/**
|
|
6834
|
-
* <p>If this optional parameter is passed in the request, a filter is applied to the results.
|
|
6835
|
-
* The results will include only the access grants for the caller's Identity Center
|
|
6836
|
-
* application or for any other applications (<code>ALL</code>).</p>
|
|
6837
|
-
* @public
|
|
6838
|
-
*/
|
|
6839
|
-
AllowedByApplication?: boolean | undefined;
|
|
6840
|
-
}
|
|
6841
|
-
/**
|
|
6842
|
-
* <p>Part of <code>ListCallerAccessGrantsResult</code>. Each entry includes the permission
|
|
6843
|
-
* level (READ, WRITE, or READWRITE) and the grant scope of the access grant. If the grant
|
|
6844
|
-
* also includes an application ARN, the grantee can only access the S3 data through this
|
|
6845
|
-
* application.</p>
|
|
6846
|
-
* @public
|
|
6847
|
-
*/
|
|
6848
|
-
export interface ListCallerAccessGrantsEntry {
|
|
6849
|
-
/**
|
|
6850
|
-
* <p>The type of permission granted, which can be one of the following values:</p>
|
|
6851
|
-
* <ul>
|
|
6852
|
-
* <li>
|
|
6853
|
-
* <p>
|
|
6854
|
-
* <code>READ</code> - Grants read-only access to the S3 data.</p>
|
|
6855
|
-
* </li>
|
|
6856
|
-
* <li>
|
|
6857
|
-
* <p>
|
|
6858
|
-
* <code>WRITE</code> - Grants write-only access to the S3 data.</p>
|
|
6859
|
-
* </li>
|
|
6860
|
-
* <li>
|
|
6861
|
-
* <p>
|
|
6862
|
-
* <code>READWRITE</code> - Grants both read and write access to the S3 data.</p>
|
|
6863
|
-
* </li>
|
|
6864
|
-
* </ul>
|
|
6865
|
-
* @public
|
|
6866
|
-
*/
|
|
6867
|
-
Permission?: Permission | undefined;
|
|
6868
|
-
/**
|
|
6869
|
-
* <p>The S3 path of the data to which you have been granted access. </p>
|
|
6870
|
-
* @public
|
|
6871
|
-
*/
|
|
6872
|
-
GrantScope?: string | undefined;
|
|
6873
|
-
/**
|
|
6874
|
-
* <p>The Amazon Resource Name (ARN) of an Amazon Web Services IAM Identity Center application associated
|
|
6875
|
-
* with your Identity Center instance. If the grant includes an application ARN, the grantee
|
|
6876
|
-
* can only access the S3 data through this application. </p>
|
|
6877
|
-
* @public
|
|
6878
|
-
*/
|
|
6879
|
-
ApplicationArn?: string | undefined;
|
|
6880
|
-
}
|
|
6881
|
-
/**
|
|
6882
|
-
* @public
|
|
6883
|
-
*/
|
|
6884
|
-
export interface ListCallerAccessGrantsResult {
|
|
6885
|
-
/**
|
|
6886
|
-
* <p>A pagination token that you can use to request the next page of results. Pass this value
|
|
6887
|
-
* into a subsequent <code>List Caller Access Grants</code> request in order to retrieve the
|
|
6888
|
-
* next page of results.</p>
|
|
6889
|
-
* @public
|
|
6890
|
-
*/
|
|
6891
|
-
NextToken?: string | undefined;
|
|
6892
|
-
/**
|
|
6893
|
-
* <p>A list of the caller's access grants that were created using S3 Access Grants and that grant the
|
|
6894
|
-
* caller access to the S3 data of the Amazon Web Services account ID that was specified in the request.
|
|
6895
|
-
* </p>
|
|
6896
|
-
* @public
|
|
6897
|
-
*/
|
|
6898
|
-
CallerAccessGrantsList?: ListCallerAccessGrantsEntry[] | undefined;
|
|
6899
|
-
}
|
|
6900
|
-
/**
|
|
6901
|
-
* <p></p>
|
|
6902
|
-
* @public
|
|
6903
|
-
*/
|
|
6904
|
-
export declare class InvalidNextTokenException extends __BaseException {
|
|
6905
|
-
readonly name: "InvalidNextTokenException";
|
|
6906
|
-
readonly $fault: "client";
|
|
6907
|
-
Message?: string | undefined;
|
|
6908
|
-
/**
|
|
6909
|
-
* @internal
|
|
6910
|
-
*/
|
|
6911
|
-
constructor(opts: __ExceptionOptionType<InvalidNextTokenException, __BaseException>);
|
|
6912
|
-
}
|
|
6913
|
-
/**
|
|
6914
|
-
* <p></p>
|
|
6915
|
-
* @public
|
|
6916
|
-
*/
|
|
6917
|
-
export declare class InvalidRequestException extends __BaseException {
|
|
6918
|
-
readonly name: "InvalidRequestException";
|
|
6919
|
-
readonly $fault: "client";
|
|
6920
|
-
Message?: string | undefined;
|
|
6921
|
-
/**
|
|
6922
|
-
* @internal
|
|
6923
|
-
*/
|
|
6924
|
-
constructor(opts: __ExceptionOptionType<InvalidRequestException, __BaseException>);
|
|
6925
|
-
}
|
|
6926
6953
|
/**
|
|
6927
6954
|
* @internal
|
|
6928
6955
|
*/
|
|
@@ -1,6 +1,147 @@
|
|
|
1
1
|
import { ExceptionOptionType as __ExceptionOptionType } from "@smithy/smithy-client";
|
|
2
|
-
import { BucketVersioningStatus, JobProgressSummary, JobStatus, LifecycleRule, MultiRegionAccessPointReport, MultiRegionAccessPointRoute, ObjectLambdaConfiguration, PublicAccessBlockConfiguration, PutMultiRegionAccessPointPolicyInput, ReplicationConfiguration, S3Tag, Scope, StorageLensConfiguration, StorageLensGroup, StorageLensTag, Tag } from "./models_0";
|
|
2
|
+
import { BucketVersioningStatus, JobProgressSummary, JobStatus, LifecycleRule, MultiRegionAccessPointReport, MultiRegionAccessPointRoute, ObjectLambdaAccessPoint, ObjectLambdaConfiguration, Permission, PublicAccessBlockConfiguration, PutMultiRegionAccessPointPolicyInput, ReplicationConfiguration, S3Tag, Scope, StorageLensConfiguration, StorageLensGroup, StorageLensTag, Tag } from "./models_0";
|
|
3
3
|
import { S3ControlServiceException as __BaseException } from "./S3ControlServiceException";
|
|
4
|
+
/**
|
|
5
|
+
* @public
|
|
6
|
+
*/
|
|
7
|
+
export interface ListAccessPointsForObjectLambdaResult {
|
|
8
|
+
/**
|
|
9
|
+
* <p>Returns list of Object Lambda Access Points.</p>
|
|
10
|
+
* @public
|
|
11
|
+
*/
|
|
12
|
+
ObjectLambdaAccessPointList?: ObjectLambdaAccessPoint[] | undefined;
|
|
13
|
+
/**
|
|
14
|
+
* <p>If the list has more access points than can be returned in one call to this API, this field
|
|
15
|
+
* contains a continuation token that you can provide in subsequent calls to this API to
|
|
16
|
+
* retrieve additional access points.</p>
|
|
17
|
+
* @public
|
|
18
|
+
*/
|
|
19
|
+
NextToken?: string | undefined;
|
|
20
|
+
}
|
|
21
|
+
/**
|
|
22
|
+
* @public
|
|
23
|
+
*/
|
|
24
|
+
export interface ListCallerAccessGrantsRequest {
|
|
25
|
+
/**
|
|
26
|
+
* <p>The Amazon Web Services account ID of the S3 Access Grants instance.</p>
|
|
27
|
+
* @public
|
|
28
|
+
*/
|
|
29
|
+
AccountId?: string | undefined;
|
|
30
|
+
/**
|
|
31
|
+
* <p>The S3 path of the data that you would like to access. Must start with
|
|
32
|
+
* <code>s3://</code>. You can optionally pass only the beginning characters of a path, and
|
|
33
|
+
* S3 Access Grants will search for all applicable grants for the path fragment. </p>
|
|
34
|
+
* @public
|
|
35
|
+
*/
|
|
36
|
+
GrantScope?: string | undefined;
|
|
37
|
+
/**
|
|
38
|
+
* <p>A pagination token to request the next page of results. Pass this value into a
|
|
39
|
+
* subsequent <code>List Caller Access Grants</code> request in order to retrieve the next
|
|
40
|
+
* page of results.</p>
|
|
41
|
+
* @public
|
|
42
|
+
*/
|
|
43
|
+
NextToken?: string | undefined;
|
|
44
|
+
/**
|
|
45
|
+
* <p>The maximum number of access grants that you would like returned in the <code>List
|
|
46
|
+
* Caller Access Grants</code> response. If the results include the pagination token
|
|
47
|
+
* <code>NextToken</code>, make another call using the <code>NextToken</code> to determine
|
|
48
|
+
* if there are more results.</p>
|
|
49
|
+
* @public
|
|
50
|
+
*/
|
|
51
|
+
MaxResults?: number | undefined;
|
|
52
|
+
/**
|
|
53
|
+
* <p>If this optional parameter is passed in the request, a filter is applied to the results.
|
|
54
|
+
* The results will include only the access grants for the caller's Identity Center
|
|
55
|
+
* application or for any other applications (<code>ALL</code>).</p>
|
|
56
|
+
* @public
|
|
57
|
+
*/
|
|
58
|
+
AllowedByApplication?: boolean | undefined;
|
|
59
|
+
}
|
|
60
|
+
/**
|
|
61
|
+
* <p>Part of <code>ListCallerAccessGrantsResult</code>. Each entry includes the permission
|
|
62
|
+
* level (READ, WRITE, or READWRITE) and the grant scope of the access grant. If the grant
|
|
63
|
+
* also includes an application ARN, the grantee can only access the S3 data through this
|
|
64
|
+
* application.</p>
|
|
65
|
+
* @public
|
|
66
|
+
*/
|
|
67
|
+
export interface ListCallerAccessGrantsEntry {
|
|
68
|
+
/**
|
|
69
|
+
* <p>The type of permission granted, which can be one of the following values:</p>
|
|
70
|
+
* <ul>
|
|
71
|
+
* <li>
|
|
72
|
+
* <p>
|
|
73
|
+
* <code>READ</code> - Grants read-only access to the S3 data.</p>
|
|
74
|
+
* </li>
|
|
75
|
+
* <li>
|
|
76
|
+
* <p>
|
|
77
|
+
* <code>WRITE</code> - Grants write-only access to the S3 data.</p>
|
|
78
|
+
* </li>
|
|
79
|
+
* <li>
|
|
80
|
+
* <p>
|
|
81
|
+
* <code>READWRITE</code> - Grants both read and write access to the S3 data.</p>
|
|
82
|
+
* </li>
|
|
83
|
+
* </ul>
|
|
84
|
+
* @public
|
|
85
|
+
*/
|
|
86
|
+
Permission?: Permission | undefined;
|
|
87
|
+
/**
|
|
88
|
+
* <p>The S3 path of the data to which you have been granted access. </p>
|
|
89
|
+
* @public
|
|
90
|
+
*/
|
|
91
|
+
GrantScope?: string | undefined;
|
|
92
|
+
/**
|
|
93
|
+
* <p>The Amazon Resource Name (ARN) of an Amazon Web Services IAM Identity Center application associated
|
|
94
|
+
* with your Identity Center instance. If the grant includes an application ARN, the grantee
|
|
95
|
+
* can only access the S3 data through this application. </p>
|
|
96
|
+
* @public
|
|
97
|
+
*/
|
|
98
|
+
ApplicationArn?: string | undefined;
|
|
99
|
+
}
|
|
100
|
+
/**
|
|
101
|
+
* @public
|
|
102
|
+
*/
|
|
103
|
+
export interface ListCallerAccessGrantsResult {
|
|
104
|
+
/**
|
|
105
|
+
* <p>A pagination token that you can use to request the next page of results. Pass this value
|
|
106
|
+
* into a subsequent <code>List Caller Access Grants</code> request in order to retrieve the
|
|
107
|
+
* next page of results.</p>
|
|
108
|
+
* @public
|
|
109
|
+
*/
|
|
110
|
+
NextToken?: string | undefined;
|
|
111
|
+
/**
|
|
112
|
+
* <p>A list of the caller's access grants that were created using S3 Access Grants and that grant the
|
|
113
|
+
* caller access to the S3 data of the Amazon Web Services account ID that was specified in the request.
|
|
114
|
+
* </p>
|
|
115
|
+
* @public
|
|
116
|
+
*/
|
|
117
|
+
CallerAccessGrantsList?: ListCallerAccessGrantsEntry[] | undefined;
|
|
118
|
+
}
|
|
119
|
+
/**
|
|
120
|
+
* <p></p>
|
|
121
|
+
* @public
|
|
122
|
+
*/
|
|
123
|
+
export declare class InvalidNextTokenException extends __BaseException {
|
|
124
|
+
readonly name: "InvalidNextTokenException";
|
|
125
|
+
readonly $fault: "client";
|
|
126
|
+
Message?: string | undefined;
|
|
127
|
+
/**
|
|
128
|
+
* @internal
|
|
129
|
+
*/
|
|
130
|
+
constructor(opts: __ExceptionOptionType<InvalidNextTokenException, __BaseException>);
|
|
131
|
+
}
|
|
132
|
+
/**
|
|
133
|
+
* <p></p>
|
|
134
|
+
* @public
|
|
135
|
+
*/
|
|
136
|
+
export declare class InvalidRequestException extends __BaseException {
|
|
137
|
+
readonly name: "InvalidRequestException";
|
|
138
|
+
readonly $fault: "client";
|
|
139
|
+
Message?: string | undefined;
|
|
140
|
+
/**
|
|
141
|
+
* @internal
|
|
142
|
+
*/
|
|
143
|
+
constructor(opts: __ExceptionOptionType<InvalidRequestException, __BaseException>);
|
|
144
|
+
}
|
|
4
145
|
/**
|
|
5
146
|
* @public
|
|
6
147
|
*/
|
|
@@ -1,9 +1,7 @@
|
|
|
1
1
|
import { Command as $Command } from "@smithy/smithy-client";
|
|
2
2
|
import { MetadataBearer as __MetadataBearer } from "@smithy/types";
|
|
3
|
-
import {
|
|
4
|
-
|
|
5
|
-
ListAccessPointsForObjectLambdaResult,
|
|
6
|
-
} from "../models/models_0";
|
|
3
|
+
import { ListAccessPointsForObjectLambdaRequest } from "../models/models_0";
|
|
4
|
+
import { ListAccessPointsForObjectLambdaResult } from "../models/models_1";
|
|
7
5
|
import {
|
|
8
6
|
S3ControlClientResolvedConfig,
|
|
9
7
|
ServiceInputTypes,
|
|
@@ -3,7 +3,7 @@ import { MetadataBearer as __MetadataBearer } from "@smithy/types";
|
|
|
3
3
|
import {
|
|
4
4
|
ListCallerAccessGrantsRequest,
|
|
5
5
|
ListCallerAccessGrantsResult,
|
|
6
|
-
} from "../models/
|
|
6
|
+
} from "../models/models_1";
|
|
7
7
|
import {
|
|
8
8
|
S3ControlClientResolvedConfig,
|
|
9
9
|
ServiceInputTypes,
|
|
@@ -450,6 +450,82 @@ export interface KeyNameConstraint {
|
|
|
450
450
|
MatchAnySuffix?: string[] | undefined;
|
|
451
451
|
MatchAnySubstring?: string[] | undefined;
|
|
452
452
|
}
|
|
453
|
+
export interface DSSEKMSFilter {
|
|
454
|
+
KmsKeyArn?: string | undefined;
|
|
455
|
+
}
|
|
456
|
+
export interface NotSSEFilter {}
|
|
457
|
+
export interface SSECFilter {}
|
|
458
|
+
export interface SSEKMSFilter {
|
|
459
|
+
KmsKeyArn?: string | undefined;
|
|
460
|
+
BucketKeyEnabled?: boolean | undefined;
|
|
461
|
+
}
|
|
462
|
+
export interface SSES3Filter {}
|
|
463
|
+
export type ObjectEncryptionFilter =
|
|
464
|
+
| ObjectEncryptionFilter.DSSEKMSMember
|
|
465
|
+
| ObjectEncryptionFilter.NOTSSEMember
|
|
466
|
+
| ObjectEncryptionFilter.SSECMember
|
|
467
|
+
| ObjectEncryptionFilter.SSEKMSMember
|
|
468
|
+
| ObjectEncryptionFilter.SSES3Member
|
|
469
|
+
| ObjectEncryptionFilter.$UnknownMember;
|
|
470
|
+
export declare namespace ObjectEncryptionFilter {
|
|
471
|
+
interface SSES3Member {
|
|
472
|
+
SSES3: SSES3Filter;
|
|
473
|
+
SSEKMS?: never;
|
|
474
|
+
DSSEKMS?: never;
|
|
475
|
+
SSEC?: never;
|
|
476
|
+
NOTSSE?: never;
|
|
477
|
+
$unknown?: never;
|
|
478
|
+
}
|
|
479
|
+
interface SSEKMSMember {
|
|
480
|
+
SSES3?: never;
|
|
481
|
+
SSEKMS: SSEKMSFilter;
|
|
482
|
+
DSSEKMS?: never;
|
|
483
|
+
SSEC?: never;
|
|
484
|
+
NOTSSE?: never;
|
|
485
|
+
$unknown?: never;
|
|
486
|
+
}
|
|
487
|
+
interface DSSEKMSMember {
|
|
488
|
+
SSES3?: never;
|
|
489
|
+
SSEKMS?: never;
|
|
490
|
+
DSSEKMS: DSSEKMSFilter;
|
|
491
|
+
SSEC?: never;
|
|
492
|
+
NOTSSE?: never;
|
|
493
|
+
$unknown?: never;
|
|
494
|
+
}
|
|
495
|
+
interface SSECMember {
|
|
496
|
+
SSES3?: never;
|
|
497
|
+
SSEKMS?: never;
|
|
498
|
+
DSSEKMS?: never;
|
|
499
|
+
SSEC: SSECFilter;
|
|
500
|
+
NOTSSE?: never;
|
|
501
|
+
$unknown?: never;
|
|
502
|
+
}
|
|
503
|
+
interface NOTSSEMember {
|
|
504
|
+
SSES3?: never;
|
|
505
|
+
SSEKMS?: never;
|
|
506
|
+
DSSEKMS?: never;
|
|
507
|
+
SSEC?: never;
|
|
508
|
+
NOTSSE: NotSSEFilter;
|
|
509
|
+
$unknown?: never;
|
|
510
|
+
}
|
|
511
|
+
interface $UnknownMember {
|
|
512
|
+
SSES3?: never;
|
|
513
|
+
SSEKMS?: never;
|
|
514
|
+
DSSEKMS?: never;
|
|
515
|
+
SSEC?: never;
|
|
516
|
+
NOTSSE?: never;
|
|
517
|
+
$unknown: [string, any];
|
|
518
|
+
}
|
|
519
|
+
interface Visitor<T> {
|
|
520
|
+
SSES3: (value: SSES3Filter) => T;
|
|
521
|
+
SSEKMS: (value: SSEKMSFilter) => T;
|
|
522
|
+
DSSEKMS: (value: DSSEKMSFilter) => T;
|
|
523
|
+
SSEC: (value: SSECFilter) => T;
|
|
524
|
+
NOTSSE: (value: NotSSEFilter) => T;
|
|
525
|
+
_: (name: string, value: any) => T;
|
|
526
|
+
}
|
|
527
|
+
const visit: <T>(value: ObjectEncryptionFilter, visitor: Visitor<T>) => T;
|
|
528
|
+
}
|
|
453
529
|
export declare const S3StorageClass: {
|
|
454
530
|
readonly DEEP_ARCHIVE: "DEEP_ARCHIVE";
|
|
455
531
|
readonly GLACIER: "GLACIER";
|
|
@@ -478,6 +554,7 @@ export interface JobManifestGeneratorFilter {
|
|
|
478
554
|
ObjectSizeGreaterThanBytes?: number | undefined;
|
|
479
555
|
ObjectSizeLessThanBytes?: number | undefined;
|
|
480
556
|
MatchAnyStorageClass?: S3StorageClass[] | undefined;
|
|
557
|
+
MatchAnyObjectEncryption?: ObjectEncryptionFilter[] | undefined;
|
|
481
558
|
}
|
|
482
559
|
export interface SSEKMSEncryption {
|
|
483
560
|
KeyId: string | undefined;
|
|
@@ -1602,42 +1679,6 @@ export interface ObjectLambdaAccessPoint {
|
|
|
1602
1679
|
ObjectLambdaAccessPointArn?: string | undefined;
|
|
1603
1680
|
Alias?: ObjectLambdaAccessPointAlias | undefined;
|
|
1604
1681
|
}
|
|
1605
|
-
export interface ListAccessPointsForObjectLambdaResult {
|
|
1606
|
-
ObjectLambdaAccessPointList?: ObjectLambdaAccessPoint[] | undefined;
|
|
1607
|
-
NextToken?: string | undefined;
|
|
1608
|
-
}
|
|
1609
|
-
export interface ListCallerAccessGrantsRequest {
|
|
1610
|
-
AccountId?: string | undefined;
|
|
1611
|
-
GrantScope?: string | undefined;
|
|
1612
|
-
NextToken?: string | undefined;
|
|
1613
|
-
MaxResults?: number | undefined;
|
|
1614
|
-
AllowedByApplication?: boolean | undefined;
|
|
1615
|
-
}
|
|
1616
|
-
export interface ListCallerAccessGrantsEntry {
|
|
1617
|
-
Permission?: Permission | undefined;
|
|
1618
|
-
GrantScope?: string | undefined;
|
|
1619
|
-
ApplicationArn?: string | undefined;
|
|
1620
|
-
}
|
|
1621
|
-
export interface ListCallerAccessGrantsResult {
|
|
1622
|
-
NextToken?: string | undefined;
|
|
1623
|
-
CallerAccessGrantsList?: ListCallerAccessGrantsEntry[] | undefined;
|
|
1624
|
-
}
|
|
1625
|
-
export declare class InvalidNextTokenException extends __BaseException {
|
|
1626
|
-
readonly name: "InvalidNextTokenException";
|
|
1627
|
-
readonly $fault: "client";
|
|
1628
|
-
Message?: string | undefined;
|
|
1629
|
-
constructor(
|
|
1630
|
-
opts: __ExceptionOptionType<InvalidNextTokenException, __BaseException>
|
|
1631
|
-
);
|
|
1632
|
-
}
|
|
1633
|
-
export declare class InvalidRequestException extends __BaseException {
|
|
1634
|
-
readonly name: "InvalidRequestException";
|
|
1635
|
-
readonly $fault: "client";
|
|
1636
|
-
Message?: string | undefined;
|
|
1637
|
-
constructor(
|
|
1638
|
-
opts: __ExceptionOptionType<InvalidRequestException, __BaseException>
|
|
1639
|
-
);
|
|
1640
|
-
}
|
|
1641
1682
|
export declare const CredentialsFilterSensitiveLog: (obj: Credentials) => any;
|
|
1642
1683
|
export declare const GetDataAccessResultFilterSensitiveLog: (
|
|
1643
1684
|
obj: GetDataAccessResult
|
|
@@ -6,7 +6,9 @@ import {
|
|
|
6
6
|
LifecycleRule,
|
|
7
7
|
MultiRegionAccessPointReport,
|
|
8
8
|
MultiRegionAccessPointRoute,
|
|
9
|
+
ObjectLambdaAccessPoint,
|
|
9
10
|
ObjectLambdaConfiguration,
|
|
11
|
+
Permission,
|
|
10
12
|
PublicAccessBlockConfiguration,
|
|
11
13
|
PutMultiRegionAccessPointPolicyInput,
|
|
12
14
|
ReplicationConfiguration,
|
|
@@ -18,6 +20,42 @@ import {
|
|
|
18
20
|
Tag,
|
|
19
21
|
} from "./models_0";
|
|
20
22
|
import { S3ControlServiceException as __BaseException } from "./S3ControlServiceException";
|
|
23
|
+
export interface ListAccessPointsForObjectLambdaResult {
|
|
24
|
+
ObjectLambdaAccessPointList?: ObjectLambdaAccessPoint[] | undefined;
|
|
25
|
+
NextToken?: string | undefined;
|
|
26
|
+
}
|
|
27
|
+
export interface ListCallerAccessGrantsRequest {
|
|
28
|
+
AccountId?: string | undefined;
|
|
29
|
+
GrantScope?: string | undefined;
|
|
30
|
+
NextToken?: string | undefined;
|
|
31
|
+
MaxResults?: number | undefined;
|
|
32
|
+
AllowedByApplication?: boolean | undefined;
|
|
33
|
+
}
|
|
34
|
+
export interface ListCallerAccessGrantsEntry {
|
|
35
|
+
Permission?: Permission | undefined;
|
|
36
|
+
GrantScope?: string | undefined;
|
|
37
|
+
ApplicationArn?: string | undefined;
|
|
38
|
+
}
|
|
39
|
+
export interface ListCallerAccessGrantsResult {
|
|
40
|
+
NextToken?: string | undefined;
|
|
41
|
+
CallerAccessGrantsList?: ListCallerAccessGrantsEntry[] | undefined;
|
|
42
|
+
}
|
|
43
|
+
export declare class InvalidNextTokenException extends __BaseException {
|
|
44
|
+
readonly name: "InvalidNextTokenException";
|
|
45
|
+
readonly $fault: "client";
|
|
46
|
+
Message?: string | undefined;
|
|
47
|
+
constructor(
|
|
48
|
+
opts: __ExceptionOptionType<InvalidNextTokenException, __BaseException>
|
|
49
|
+
);
|
|
50
|
+
}
|
|
51
|
+
export declare class InvalidRequestException extends __BaseException {
|
|
52
|
+
readonly name: "InvalidRequestException";
|
|
53
|
+
readonly $fault: "client";
|
|
54
|
+
Message?: string | undefined;
|
|
55
|
+
constructor(
|
|
56
|
+
opts: __ExceptionOptionType<InvalidRequestException, __BaseException>
|
|
57
|
+
);
|
|
58
|
+
}
|
|
21
59
|
export interface ListJobsRequest {
|
|
22
60
|
AccountId?: string | undefined;
|
|
23
61
|
JobStatuses?: JobStatus[] | undefined;
|