@aws-sdk/client-s3-control 3.888.0 → 3.889.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -1855,6 +1855,166 @@ export interface KeyNameConstraint {
1855
1855
  */
1856
1856
  MatchAnySubstring?: string[] | undefined;
1857
1857
  }
1858
+ /**
1859
+ * <p>A filter that returns objects that are encrypted by dual-layer server-side encryption with Amazon Web Services Key Management
1860
+ * Service (KMS) keys (DSSE-KMS). You can further refine your filtering by optionally providing a KMS Key ARN
1861
+ * to create an object list of DSSE-KMS objects with that specific KMS Key ARN.</p>
1862
+ * @public
1863
+ */
1864
+ export interface DSSEKMSFilter {
1865
+ /**
1866
+ * <p>The Amazon Resource Name (ARN) of the customer managed KMS key to use for the filter
1867
+ * to return objects that are encrypted by the specified key. For best performance,
1868
+ * we recommend using the <code>KMSKeyArn</code> filter in conjunction with other object metadata filters, like <code>MatchAnyPrefix</code>, <code>CreatedAfter</code>, or
1869
+ * <code>MatchAnyStorageClass</code>.</p>
1870
+ * <note>
1871
+ * <p>You must provide the full KMS Key ARN. You can't use an alias name or alias ARN.
1872
+ * For more information, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#key-id-key-ARN">
1873
+ * KMS keys</a> in the <i>Amazon Web Services Key Management Service Developer Guide</i>.</p>
1874
+ * </note>
1875
+ * @public
1876
+ */
1877
+ KmsKeyArn?: string | undefined;
1878
+ }
1879
+ /**
1880
+ * <p>A filter that returns objects that aren't server-side encrypted.</p>
1881
+ * @public
1882
+ */
1883
+ export interface NotSSEFilter {
1884
+ }
1885
+ /**
1886
+ * <p>A filter that returns objects that are encrypted by server-side encryption with customer-provided keys (SSE-C).</p>
1887
+ * @public
1888
+ */
1889
+ export interface SSECFilter {
1890
+ }
1891
+ /**
1892
+ * <p>A filter that returns objects that are encrypted by server-side encryption with Amazon Web Services KMS (SSE-KMS).</p>
1893
+ * @public
1894
+ */
1895
+ export interface SSEKMSFilter {
1896
+ /**
1897
+ * <p>The Amazon Resource Name (ARN) of the customer managed KMS key to use for the filter
1898
+ * to return objects that are encrypted by the specified key. For best performance,
1899
+ * we recommend using the <code>KMSKeyArn</code> filter in conjunction with other object metadata filters, like <code>MatchAnyPrefix</code>, <code>CreatedAfter</code>, or
1900
+ * <code>MatchAnyStorageClass</code>.</p>
1901
+ * <note>
1902
+ * <p>You must provide the full KMS Key ARN. You can't use an alias name or alias ARN.
1903
+ * For more information, see <a href="https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#key-id-key-ARN">
1904
+ * KMS keys</a> in the <i>Amazon Web Services Key Management Service Developer Guide</i>.</p>
1905
+ * </note>
1906
+ * @public
1907
+ */
1908
+ KmsKeyArn?: string | undefined;
1909
+ /**
1910
+ * <p>Specifies whether Amazon S3 should use an S3 Bucket Key for object encryption with server-side encryption
1911
+ * using Amazon Web Services Key Management Service (Amazon Web Services KMS) keys (SSE-KMS). If specified, will filter SSE-KMS encrypted objects by S3 Bucket Key status.
1912
+ * For more information, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/bucket-key.html">Reducing the cost of SSE-KMS with Amazon S3 Bucket Keys</a>
1913
+ * in the <i>Amazon S3 User Guide</i>.</p>
1914
+ * @public
1915
+ */
1916
+ BucketKeyEnabled?: boolean | undefined;
1917
+ }
1918
+ /**
1919
+ * <p>A filter that returns objects that are encrypted by server-side encryption with Amazon S3 managed keys (SSE-S3).</p>
1920
+ * @public
1921
+ */
1922
+ export interface SSES3Filter {
1923
+ }
1924
+ /**
1925
+ * <p>An optional filter for the
1926
+ * <code>S3JobManifestGenerator</code> that identifies the subset of objects by encryption type.
1927
+ * This filter is used to create an object list for S3 Batch Operations jobs. If provided, this filter will generate an object list
1928
+ * that only includes objects with the specified encryption type.</p>
1929
+ * @public
1930
+ */
1931
+ export type ObjectEncryptionFilter = ObjectEncryptionFilter.DSSEKMSMember | ObjectEncryptionFilter.NOTSSEMember | ObjectEncryptionFilter.SSECMember | ObjectEncryptionFilter.SSEKMSMember | ObjectEncryptionFilter.SSES3Member | ObjectEncryptionFilter.$UnknownMember;
1932
+ /**
1933
+ * @public
1934
+ */
1935
+ export declare namespace ObjectEncryptionFilter {
1936
+ /**
1937
+ * <p>Filters for objects that are encrypted by server-side encryption with Amazon S3 managed keys (SSE-S3).</p>
1938
+ * @public
1939
+ */
1940
+ interface SSES3Member {
1941
+ SSES3: SSES3Filter;
1942
+ SSEKMS?: never;
1943
+ DSSEKMS?: never;
1944
+ SSEC?: never;
1945
+ NOTSSE?: never;
1946
+ $unknown?: never;
1947
+ }
1948
+ /**
1949
+ * <p>Filters for objects that are encrypted by server-side encryption with Amazon Web Services Key Management Service (KMS) keys (SSE-KMS).</p>
1950
+ * @public
1951
+ */
1952
+ interface SSEKMSMember {
1953
+ SSES3?: never;
1954
+ SSEKMS: SSEKMSFilter;
1955
+ DSSEKMS?: never;
1956
+ SSEC?: never;
1957
+ NOTSSE?: never;
1958
+ $unknown?: never;
1959
+ }
1960
+ /**
1961
+ * <p>Filters for objects that are encrypted by dual-layer server-side encryption with Amazon Web Services Key Management
1962
+ * Service (KMS) keys (DSSE-KMS).</p>
1963
+ * @public
1964
+ */
1965
+ interface DSSEKMSMember {
1966
+ SSES3?: never;
1967
+ SSEKMS?: never;
1968
+ DSSEKMS: DSSEKMSFilter;
1969
+ SSEC?: never;
1970
+ NOTSSE?: never;
1971
+ $unknown?: never;
1972
+ }
1973
+ /**
1974
+ * <p>Filters for objects that are encrypted by server-side encryption with customer-provided keys (SSE-C).</p>
1975
+ * @public
1976
+ */
1977
+ interface SSECMember {
1978
+ SSES3?: never;
1979
+ SSEKMS?: never;
1980
+ DSSEKMS?: never;
1981
+ SSEC: SSECFilter;
1982
+ NOTSSE?: never;
1983
+ $unknown?: never;
1984
+ }
1985
+ /**
1986
+ * <p>Filters for objects that are not encrypted by server-side encryption. </p>
1987
+ * @public
1988
+ */
1989
+ interface NOTSSEMember {
1990
+ SSES3?: never;
1991
+ SSEKMS?: never;
1992
+ DSSEKMS?: never;
1993
+ SSEC?: never;
1994
+ NOTSSE: NotSSEFilter;
1995
+ $unknown?: never;
1996
+ }
1997
+ /**
1998
+ * @public
1999
+ */
2000
+ interface $UnknownMember {
2001
+ SSES3?: never;
2002
+ SSEKMS?: never;
2003
+ DSSEKMS?: never;
2004
+ SSEC?: never;
2005
+ NOTSSE?: never;
2006
+ $unknown: [string, any];
2007
+ }
2008
+ interface Visitor<T> {
2009
+ SSES3: (value: SSES3Filter) => T;
2010
+ SSEKMS: (value: SSEKMSFilter) => T;
2011
+ DSSEKMS: (value: DSSEKMSFilter) => T;
2012
+ SSEC: (value: SSECFilter) => T;
2013
+ NOTSSE: (value: NotSSEFilter) => T;
2014
+ _: (name: string, value: any) => T;
2015
+ }
2016
+ const visit: <T>(value: ObjectEncryptionFilter, visitor: Visitor<T>) => T;
2017
+ }
1858
2018
  /**
1859
2019
  * @public
1860
2020
  * @enum
@@ -1940,6 +2100,14 @@ export interface JobManifestGeneratorFilter {
1940
2100
  * @public
1941
2101
  */
1942
2102
  MatchAnyStorageClass?: S3StorageClass[] | undefined;
2103
+ /**
2104
+ * <p>If provided, the generated object list includes
2105
+ * only source bucket objects with the indicated server-side encryption type (SSE-S3, SSE-KMS, DSSE-KMS, SSE-C, or NOT-SSE).
2106
+ * If you select SSE-KMS or DSSE-KMS, you can optionally further filter your results by specifying a specific KMS Key ARN.
2107
+ * If you select SSE-KMS, you can also optionally further filter your results by Bucket Key enabled status.</p>
2108
+ * @public
2109
+ */
2110
+ MatchAnyObjectEncryption?: ObjectEncryptionFilter[] | undefined;
1943
2111
  }
1944
2112
  /**
1945
2113
  * <p>Configuration for the use of SSE-KMS to encrypt generated manifest objects.</p>
@@ -4880,7 +5048,7 @@ export interface LifecycleRule {
4880
5048
  */
4881
5049
  Transitions?: Transition[] | undefined;
4882
5050
  /**
4883
- * <p> Specifies the transition rule for the lifecycle rule that describes when noncurrent
5051
+ * <p> Specifies the transition rule for the lifecycle rule that describes when non-current
4884
5052
  * objects transition to a specific storage class. If your bucket is versioning-enabled (or
4885
5053
  * versioning is suspended), you can set this action to request that Amazon S3 transition
4886
5054
  * noncurrent object versions to a specific storage class at a set period in the object's
@@ -6782,147 +6950,6 @@ export interface ObjectLambdaAccessPoint {
6782
6950
  */
6783
6951
  Alias?: ObjectLambdaAccessPointAlias | undefined;
6784
6952
  }
6785
- /**
6786
- * @public
6787
- */
6788
- export interface ListAccessPointsForObjectLambdaResult {
6789
- /**
6790
- * <p>Returns list of Object Lambda Access Points.</p>
6791
- * @public
6792
- */
6793
- ObjectLambdaAccessPointList?: ObjectLambdaAccessPoint[] | undefined;
6794
- /**
6795
- * <p>If the list has more access points than can be returned in one call to this API, this field
6796
- * contains a continuation token that you can provide in subsequent calls to this API to
6797
- * retrieve additional access points.</p>
6798
- * @public
6799
- */
6800
- NextToken?: string | undefined;
6801
- }
6802
- /**
6803
- * @public
6804
- */
6805
- export interface ListCallerAccessGrantsRequest {
6806
- /**
6807
- * <p>The Amazon Web Services account ID of the S3 Access Grants instance.</p>
6808
- * @public
6809
- */
6810
- AccountId?: string | undefined;
6811
- /**
6812
- * <p>The S3 path of the data that you would like to access. Must start with
6813
- * <code>s3://</code>. You can optionally pass only the beginning characters of a path, and
6814
- * S3 Access Grants will search for all applicable grants for the path fragment. </p>
6815
- * @public
6816
- */
6817
- GrantScope?: string | undefined;
6818
- /**
6819
- * <p>A pagination token to request the next page of results. Pass this value into a
6820
- * subsequent <code>List Caller Access Grants</code> request in order to retrieve the next
6821
- * page of results.</p>
6822
- * @public
6823
- */
6824
- NextToken?: string | undefined;
6825
- /**
6826
- * <p>The maximum number of access grants that you would like returned in the <code>List
6827
- * Caller Access Grants</code> response. If the results include the pagination token
6828
- * <code>NextToken</code>, make another call using the <code>NextToken</code> to determine
6829
- * if there are more results.</p>
6830
- * @public
6831
- */
6832
- MaxResults?: number | undefined;
6833
- /**
6834
- * <p>If this optional parameter is passed in the request, a filter is applied to the results.
6835
- * The results will include only the access grants for the caller's Identity Center
6836
- * application or for any other applications (<code>ALL</code>).</p>
6837
- * @public
6838
- */
6839
- AllowedByApplication?: boolean | undefined;
6840
- }
6841
- /**
6842
- * <p>Part of <code>ListCallerAccessGrantsResult</code>. Each entry includes the permission
6843
- * level (READ, WRITE, or READWRITE) and the grant scope of the access grant. If the grant
6844
- * also includes an application ARN, the grantee can only access the S3 data through this
6845
- * application.</p>
6846
- * @public
6847
- */
6848
- export interface ListCallerAccessGrantsEntry {
6849
- /**
6850
- * <p>The type of permission granted, which can be one of the following values:</p>
6851
- * <ul>
6852
- * <li>
6853
- * <p>
6854
- * <code>READ</code> - Grants read-only access to the S3 data.</p>
6855
- * </li>
6856
- * <li>
6857
- * <p>
6858
- * <code>WRITE</code> - Grants write-only access to the S3 data.</p>
6859
- * </li>
6860
- * <li>
6861
- * <p>
6862
- * <code>READWRITE</code> - Grants both read and write access to the S3 data.</p>
6863
- * </li>
6864
- * </ul>
6865
- * @public
6866
- */
6867
- Permission?: Permission | undefined;
6868
- /**
6869
- * <p>The S3 path of the data to which you have been granted access. </p>
6870
- * @public
6871
- */
6872
- GrantScope?: string | undefined;
6873
- /**
6874
- * <p>The Amazon Resource Name (ARN) of an Amazon Web Services IAM Identity Center application associated
6875
- * with your Identity Center instance. If the grant includes an application ARN, the grantee
6876
- * can only access the S3 data through this application. </p>
6877
- * @public
6878
- */
6879
- ApplicationArn?: string | undefined;
6880
- }
6881
- /**
6882
- * @public
6883
- */
6884
- export interface ListCallerAccessGrantsResult {
6885
- /**
6886
- * <p>A pagination token that you can use to request the next page of results. Pass this value
6887
- * into a subsequent <code>List Caller Access Grants</code> request in order to retrieve the
6888
- * next page of results.</p>
6889
- * @public
6890
- */
6891
- NextToken?: string | undefined;
6892
- /**
6893
- * <p>A list of the caller's access grants that were created using S3 Access Grants and that grant the
6894
- * caller access to the S3 data of the Amazon Web Services account ID that was specified in the request.
6895
- * </p>
6896
- * @public
6897
- */
6898
- CallerAccessGrantsList?: ListCallerAccessGrantsEntry[] | undefined;
6899
- }
6900
- /**
6901
- * <p></p>
6902
- * @public
6903
- */
6904
- export declare class InvalidNextTokenException extends __BaseException {
6905
- readonly name: "InvalidNextTokenException";
6906
- readonly $fault: "client";
6907
- Message?: string | undefined;
6908
- /**
6909
- * @internal
6910
- */
6911
- constructor(opts: __ExceptionOptionType<InvalidNextTokenException, __BaseException>);
6912
- }
6913
- /**
6914
- * <p></p>
6915
- * @public
6916
- */
6917
- export declare class InvalidRequestException extends __BaseException {
6918
- readonly name: "InvalidRequestException";
6919
- readonly $fault: "client";
6920
- Message?: string | undefined;
6921
- /**
6922
- * @internal
6923
- */
6924
- constructor(opts: __ExceptionOptionType<InvalidRequestException, __BaseException>);
6925
- }
6926
6953
  /**
6927
6954
  * @internal
6928
6955
  */
@@ -1,6 +1,147 @@
1
1
  import { ExceptionOptionType as __ExceptionOptionType } from "@smithy/smithy-client";
2
- import { BucketVersioningStatus, JobProgressSummary, JobStatus, LifecycleRule, MultiRegionAccessPointReport, MultiRegionAccessPointRoute, ObjectLambdaConfiguration, PublicAccessBlockConfiguration, PutMultiRegionAccessPointPolicyInput, ReplicationConfiguration, S3Tag, Scope, StorageLensConfiguration, StorageLensGroup, StorageLensTag, Tag } from "./models_0";
2
+ import { BucketVersioningStatus, JobProgressSummary, JobStatus, LifecycleRule, MultiRegionAccessPointReport, MultiRegionAccessPointRoute, ObjectLambdaAccessPoint, ObjectLambdaConfiguration, Permission, PublicAccessBlockConfiguration, PutMultiRegionAccessPointPolicyInput, ReplicationConfiguration, S3Tag, Scope, StorageLensConfiguration, StorageLensGroup, StorageLensTag, Tag } from "./models_0";
3
3
  import { S3ControlServiceException as __BaseException } from "./S3ControlServiceException";
4
+ /**
5
+ * @public
6
+ */
7
+ export interface ListAccessPointsForObjectLambdaResult {
8
+ /**
9
+ * <p>Returns list of Object Lambda Access Points.</p>
10
+ * @public
11
+ */
12
+ ObjectLambdaAccessPointList?: ObjectLambdaAccessPoint[] | undefined;
13
+ /**
14
+ * <p>If the list has more access points than can be returned in one call to this API, this field
15
+ * contains a continuation token that you can provide in subsequent calls to this API to
16
+ * retrieve additional access points.</p>
17
+ * @public
18
+ */
19
+ NextToken?: string | undefined;
20
+ }
21
+ /**
22
+ * @public
23
+ */
24
+ export interface ListCallerAccessGrantsRequest {
25
+ /**
26
+ * <p>The Amazon Web Services account ID of the S3 Access Grants instance.</p>
27
+ * @public
28
+ */
29
+ AccountId?: string | undefined;
30
+ /**
31
+ * <p>The S3 path of the data that you would like to access. Must start with
32
+ * <code>s3://</code>. You can optionally pass only the beginning characters of a path, and
33
+ * S3 Access Grants will search for all applicable grants for the path fragment. </p>
34
+ * @public
35
+ */
36
+ GrantScope?: string | undefined;
37
+ /**
38
+ * <p>A pagination token to request the next page of results. Pass this value into a
39
+ * subsequent <code>List Caller Access Grants</code> request in order to retrieve the next
40
+ * page of results.</p>
41
+ * @public
42
+ */
43
+ NextToken?: string | undefined;
44
+ /**
45
+ * <p>The maximum number of access grants that you would like returned in the <code>List
46
+ * Caller Access Grants</code> response. If the results include the pagination token
47
+ * <code>NextToken</code>, make another call using the <code>NextToken</code> to determine
48
+ * if there are more results.</p>
49
+ * @public
50
+ */
51
+ MaxResults?: number | undefined;
52
+ /**
53
+ * <p>If this optional parameter is passed in the request, a filter is applied to the results.
54
+ * The results will include only the access grants for the caller's Identity Center
55
+ * application or for any other applications (<code>ALL</code>).</p>
56
+ * @public
57
+ */
58
+ AllowedByApplication?: boolean | undefined;
59
+ }
60
+ /**
61
+ * <p>Part of <code>ListCallerAccessGrantsResult</code>. Each entry includes the permission
62
+ * level (READ, WRITE, or READWRITE) and the grant scope of the access grant. If the grant
63
+ * also includes an application ARN, the grantee can only access the S3 data through this
64
+ * application.</p>
65
+ * @public
66
+ */
67
+ export interface ListCallerAccessGrantsEntry {
68
+ /**
69
+ * <p>The type of permission granted, which can be one of the following values:</p>
70
+ * <ul>
71
+ * <li>
72
+ * <p>
73
+ * <code>READ</code> - Grants read-only access to the S3 data.</p>
74
+ * </li>
75
+ * <li>
76
+ * <p>
77
+ * <code>WRITE</code> - Grants write-only access to the S3 data.</p>
78
+ * </li>
79
+ * <li>
80
+ * <p>
81
+ * <code>READWRITE</code> - Grants both read and write access to the S3 data.</p>
82
+ * </li>
83
+ * </ul>
84
+ * @public
85
+ */
86
+ Permission?: Permission | undefined;
87
+ /**
88
+ * <p>The S3 path of the data to which you have been granted access. </p>
89
+ * @public
90
+ */
91
+ GrantScope?: string | undefined;
92
+ /**
93
+ * <p>The Amazon Resource Name (ARN) of an Amazon Web Services IAM Identity Center application associated
94
+ * with your Identity Center instance. If the grant includes an application ARN, the grantee
95
+ * can only access the S3 data through this application. </p>
96
+ * @public
97
+ */
98
+ ApplicationArn?: string | undefined;
99
+ }
100
+ /**
101
+ * @public
102
+ */
103
+ export interface ListCallerAccessGrantsResult {
104
+ /**
105
+ * <p>A pagination token that you can use to request the next page of results. Pass this value
106
+ * into a subsequent <code>List Caller Access Grants</code> request in order to retrieve the
107
+ * next page of results.</p>
108
+ * @public
109
+ */
110
+ NextToken?: string | undefined;
111
+ /**
112
+ * <p>A list of the caller's access grants that were created using S3 Access Grants and that grant the
113
+ * caller access to the S3 data of the Amazon Web Services account ID that was specified in the request.
114
+ * </p>
115
+ * @public
116
+ */
117
+ CallerAccessGrantsList?: ListCallerAccessGrantsEntry[] | undefined;
118
+ }
119
+ /**
120
+ * <p></p>
121
+ * @public
122
+ */
123
+ export declare class InvalidNextTokenException extends __BaseException {
124
+ readonly name: "InvalidNextTokenException";
125
+ readonly $fault: "client";
126
+ Message?: string | undefined;
127
+ /**
128
+ * @internal
129
+ */
130
+ constructor(opts: __ExceptionOptionType<InvalidNextTokenException, __BaseException>);
131
+ }
132
+ /**
133
+ * <p></p>
134
+ * @public
135
+ */
136
+ export declare class InvalidRequestException extends __BaseException {
137
+ readonly name: "InvalidRequestException";
138
+ readonly $fault: "client";
139
+ Message?: string | undefined;
140
+ /**
141
+ * @internal
142
+ */
143
+ constructor(opts: __ExceptionOptionType<InvalidRequestException, __BaseException>);
144
+ }
4
145
  /**
5
146
  * @public
6
147
  */
@@ -1,9 +1,7 @@
1
1
  import { Command as $Command } from "@smithy/smithy-client";
2
2
  import { MetadataBearer as __MetadataBearer } from "@smithy/types";
3
- import {
4
- ListAccessPointsForObjectLambdaRequest,
5
- ListAccessPointsForObjectLambdaResult,
6
- } from "../models/models_0";
3
+ import { ListAccessPointsForObjectLambdaRequest } from "../models/models_0";
4
+ import { ListAccessPointsForObjectLambdaResult } from "../models/models_1";
7
5
  import {
8
6
  S3ControlClientResolvedConfig,
9
7
  ServiceInputTypes,
@@ -3,7 +3,7 @@ import { MetadataBearer as __MetadataBearer } from "@smithy/types";
3
3
  import {
4
4
  ListCallerAccessGrantsRequest,
5
5
  ListCallerAccessGrantsResult,
6
- } from "../models/models_0";
6
+ } from "../models/models_1";
7
7
  import {
8
8
  S3ControlClientResolvedConfig,
9
9
  ServiceInputTypes,
@@ -450,6 +450,82 @@ export interface KeyNameConstraint {
450
450
  MatchAnySuffix?: string[] | undefined;
451
451
  MatchAnySubstring?: string[] | undefined;
452
452
  }
453
+ export interface DSSEKMSFilter {
454
+ KmsKeyArn?: string | undefined;
455
+ }
456
+ export interface NotSSEFilter {}
457
+ export interface SSECFilter {}
458
+ export interface SSEKMSFilter {
459
+ KmsKeyArn?: string | undefined;
460
+ BucketKeyEnabled?: boolean | undefined;
461
+ }
462
+ export interface SSES3Filter {}
463
+ export type ObjectEncryptionFilter =
464
+ | ObjectEncryptionFilter.DSSEKMSMember
465
+ | ObjectEncryptionFilter.NOTSSEMember
466
+ | ObjectEncryptionFilter.SSECMember
467
+ | ObjectEncryptionFilter.SSEKMSMember
468
+ | ObjectEncryptionFilter.SSES3Member
469
+ | ObjectEncryptionFilter.$UnknownMember;
470
+ export declare namespace ObjectEncryptionFilter {
471
+ interface SSES3Member {
472
+ SSES3: SSES3Filter;
473
+ SSEKMS?: never;
474
+ DSSEKMS?: never;
475
+ SSEC?: never;
476
+ NOTSSE?: never;
477
+ $unknown?: never;
478
+ }
479
+ interface SSEKMSMember {
480
+ SSES3?: never;
481
+ SSEKMS: SSEKMSFilter;
482
+ DSSEKMS?: never;
483
+ SSEC?: never;
484
+ NOTSSE?: never;
485
+ $unknown?: never;
486
+ }
487
+ interface DSSEKMSMember {
488
+ SSES3?: never;
489
+ SSEKMS?: never;
490
+ DSSEKMS: DSSEKMSFilter;
491
+ SSEC?: never;
492
+ NOTSSE?: never;
493
+ $unknown?: never;
494
+ }
495
+ interface SSECMember {
496
+ SSES3?: never;
497
+ SSEKMS?: never;
498
+ DSSEKMS?: never;
499
+ SSEC: SSECFilter;
500
+ NOTSSE?: never;
501
+ $unknown?: never;
502
+ }
503
+ interface NOTSSEMember {
504
+ SSES3?: never;
505
+ SSEKMS?: never;
506
+ DSSEKMS?: never;
507
+ SSEC?: never;
508
+ NOTSSE: NotSSEFilter;
509
+ $unknown?: never;
510
+ }
511
+ interface $UnknownMember {
512
+ SSES3?: never;
513
+ SSEKMS?: never;
514
+ DSSEKMS?: never;
515
+ SSEC?: never;
516
+ NOTSSE?: never;
517
+ $unknown: [string, any];
518
+ }
519
+ interface Visitor<T> {
520
+ SSES3: (value: SSES3Filter) => T;
521
+ SSEKMS: (value: SSEKMSFilter) => T;
522
+ DSSEKMS: (value: DSSEKMSFilter) => T;
523
+ SSEC: (value: SSECFilter) => T;
524
+ NOTSSE: (value: NotSSEFilter) => T;
525
+ _: (name: string, value: any) => T;
526
+ }
527
+ const visit: <T>(value: ObjectEncryptionFilter, visitor: Visitor<T>) => T;
528
+ }
453
529
  export declare const S3StorageClass: {
454
530
  readonly DEEP_ARCHIVE: "DEEP_ARCHIVE";
455
531
  readonly GLACIER: "GLACIER";
@@ -478,6 +554,7 @@ export interface JobManifestGeneratorFilter {
478
554
  ObjectSizeGreaterThanBytes?: number | undefined;
479
555
  ObjectSizeLessThanBytes?: number | undefined;
480
556
  MatchAnyStorageClass?: S3StorageClass[] | undefined;
557
+ MatchAnyObjectEncryption?: ObjectEncryptionFilter[] | undefined;
481
558
  }
482
559
  export interface SSEKMSEncryption {
483
560
  KeyId: string | undefined;
@@ -1602,42 +1679,6 @@ export interface ObjectLambdaAccessPoint {
1602
1679
  ObjectLambdaAccessPointArn?: string | undefined;
1603
1680
  Alias?: ObjectLambdaAccessPointAlias | undefined;
1604
1681
  }
1605
- export interface ListAccessPointsForObjectLambdaResult {
1606
- ObjectLambdaAccessPointList?: ObjectLambdaAccessPoint[] | undefined;
1607
- NextToken?: string | undefined;
1608
- }
1609
- export interface ListCallerAccessGrantsRequest {
1610
- AccountId?: string | undefined;
1611
- GrantScope?: string | undefined;
1612
- NextToken?: string | undefined;
1613
- MaxResults?: number | undefined;
1614
- AllowedByApplication?: boolean | undefined;
1615
- }
1616
- export interface ListCallerAccessGrantsEntry {
1617
- Permission?: Permission | undefined;
1618
- GrantScope?: string | undefined;
1619
- ApplicationArn?: string | undefined;
1620
- }
1621
- export interface ListCallerAccessGrantsResult {
1622
- NextToken?: string | undefined;
1623
- CallerAccessGrantsList?: ListCallerAccessGrantsEntry[] | undefined;
1624
- }
1625
- export declare class InvalidNextTokenException extends __BaseException {
1626
- readonly name: "InvalidNextTokenException";
1627
- readonly $fault: "client";
1628
- Message?: string | undefined;
1629
- constructor(
1630
- opts: __ExceptionOptionType<InvalidNextTokenException, __BaseException>
1631
- );
1632
- }
1633
- export declare class InvalidRequestException extends __BaseException {
1634
- readonly name: "InvalidRequestException";
1635
- readonly $fault: "client";
1636
- Message?: string | undefined;
1637
- constructor(
1638
- opts: __ExceptionOptionType<InvalidRequestException, __BaseException>
1639
- );
1640
- }
1641
1682
  export declare const CredentialsFilterSensitiveLog: (obj: Credentials) => any;
1642
1683
  export declare const GetDataAccessResultFilterSensitiveLog: (
1643
1684
  obj: GetDataAccessResult
@@ -6,7 +6,9 @@ import {
6
6
  LifecycleRule,
7
7
  MultiRegionAccessPointReport,
8
8
  MultiRegionAccessPointRoute,
9
+ ObjectLambdaAccessPoint,
9
10
  ObjectLambdaConfiguration,
11
+ Permission,
10
12
  PublicAccessBlockConfiguration,
11
13
  PutMultiRegionAccessPointPolicyInput,
12
14
  ReplicationConfiguration,
@@ -18,6 +20,42 @@ import {
18
20
  Tag,
19
21
  } from "./models_0";
20
22
  import { S3ControlServiceException as __BaseException } from "./S3ControlServiceException";
23
+ export interface ListAccessPointsForObjectLambdaResult {
24
+ ObjectLambdaAccessPointList?: ObjectLambdaAccessPoint[] | undefined;
25
+ NextToken?: string | undefined;
26
+ }
27
+ export interface ListCallerAccessGrantsRequest {
28
+ AccountId?: string | undefined;
29
+ GrantScope?: string | undefined;
30
+ NextToken?: string | undefined;
31
+ MaxResults?: number | undefined;
32
+ AllowedByApplication?: boolean | undefined;
33
+ }
34
+ export interface ListCallerAccessGrantsEntry {
35
+ Permission?: Permission | undefined;
36
+ GrantScope?: string | undefined;
37
+ ApplicationArn?: string | undefined;
38
+ }
39
+ export interface ListCallerAccessGrantsResult {
40
+ NextToken?: string | undefined;
41
+ CallerAccessGrantsList?: ListCallerAccessGrantsEntry[] | undefined;
42
+ }
43
+ export declare class InvalidNextTokenException extends __BaseException {
44
+ readonly name: "InvalidNextTokenException";
45
+ readonly $fault: "client";
46
+ Message?: string | undefined;
47
+ constructor(
48
+ opts: __ExceptionOptionType<InvalidNextTokenException, __BaseException>
49
+ );
50
+ }
51
+ export declare class InvalidRequestException extends __BaseException {
52
+ readonly name: "InvalidRequestException";
53
+ readonly $fault: "client";
54
+ Message?: string | undefined;
55
+ constructor(
56
+ opts: __ExceptionOptionType<InvalidRequestException, __BaseException>
57
+ );
58
+ }
21
59
  export interface ListJobsRequest {
22
60
  AccountId?: string | undefined;
23
61
  JobStatuses?: JobStatus[] | undefined;