@aws-sdk/client-vpc-lattice 3.306.0 → 3.307.0

package/dist-types/VPCLattice.d.ts

@@ -144,9 +144,10 @@ export declare class VPCLattice extends VPCLatticeClient {
      *    fails, retry by deleting the association and recreating it.</p>
      *          <p>As a result of this operation, the association gets created in the service network account
      *    and the VPC owner account.</p>
-     *          <p>Once a security group is added to the VPC association it cannot be removed. You can add or
-     *    update the security groups being used for the VPC association once a security group is attached.
-     *    To remove all security groups you must reassociate the VPC.</p>
+     *          <p>If you add a security group to the service network and VPC association, the association must
+     *    continue to always have at least one security group. You can add or edit security groups at any
+     *    time. However, to remove all security groups, you must first delete the association and recreate
+     *    it without security groups.</p>
      */
     createServiceNetworkVpcAssociation(args: CreateServiceNetworkVpcAssociationCommandInput, options?: __HttpHandlerOptions): Promise<CreateServiceNetworkVpcAssociationCommandOutput>;
     createServiceNetworkVpcAssociation(args: CreateServiceNetworkVpcAssociationCommandInput, cb: (err: any, data?: CreateServiceNetworkVpcAssociationCommandOutput) => void): void;
@@ -170,7 +171,7 @@ export declare class VPCLattice extends VPCLatticeClient {
     deleteAccessLogSubscription(args: DeleteAccessLogSubscriptionCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: DeleteAccessLogSubscriptionCommandOutput) => void): void;
     /**
      * @public
-     * <p>Deletes the specified auth policy. If an auth is set to <code>Amazon Web Services_IAM</code>
+     * <p>Deletes the specified auth policy. If an auth is set to <code>AWS_IAM</code>
      *    and the auth policy is deleted, all requests will be denied by default. If you are trying to
      *    remove the auth policy completely, you must set the auth_type to <code>NONE</code>. If auth is
      *    enabled on the resource, but no auth policy is set, all requests will be denied.</p>
@@ -282,7 +283,7 @@ export declare class VPCLattice extends VPCLatticeClient {
     /**
      * @public
      * <p>Retrieves information about the resource policy. The resource policy is an IAM policy
-     *    created by AWS RAM on behalf of the resource owner when they share a resource.</p>
+     *    created on behalf of the resource owner when they share a resource.</p>
      */
     getResourcePolicy(args: GetResourcePolicyCommandInput, options?: __HttpHandlerOptions): Promise<GetResourcePolicyCommandOutput>;
     getResourcePolicy(args: GetResourcePolicyCommandInput, cb: (err: any, data?: GetResourcePolicyCommandOutput) => void): void;
@@ -416,7 +417,8 @@ export declare class VPCLattice extends VPCLatticeClient {
     listTargets(args: ListTargetsCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: ListTargetsCommandOutput) => void): void;
     /**
      * @public
-     * <p>Creates or updates the auth policy.</p>
+     * <p>Creates or updates the auth policy. The policy string in JSON must not contain newlines or
+     *    blank lines.</p>
      */
     putAuthPolicy(args: PutAuthPolicyCommandInput, options?: __HttpHandlerOptions): Promise<PutAuthPolicyCommandOutput>;
     putAuthPolicy(args: PutAuthPolicyCommandInput, cb: (err: any, data?: PutAuthPolicyCommandOutput) => void): void;
@@ -490,8 +492,10 @@ export declare class VPCLattice extends VPCLatticeClient {
     updateServiceNetwork(args: UpdateServiceNetworkCommandInput, options: __HttpHandlerOptions, cb: (err: any, data?: UpdateServiceNetworkCommandOutput) => void): void;
     /**
      * @public
-     * <p>Updates the service network and VPC association. Once you add a security group, it cannot be
-     *    removed.</p>
+     * <p>Updates the service network and VPC association. If you add a security group to the service
+     *    network and VPC association, the association must continue to always have at least one security
+     *    group. You can add or edit security groups at any time. However, to remove all security groups,
+     *    you must first delete the association and recreate it without security groups.</p>
      */
     updateServiceNetworkVpcAssociation(args: UpdateServiceNetworkVpcAssociationCommandInput, options?: __HttpHandlerOptions): Promise<UpdateServiceNetworkVpcAssociationCommandOutput>;
     updateServiceNetworkVpcAssociation(args: UpdateServiceNetworkVpcAssociationCommandInput, cb: (err: any, data?: UpdateServiceNetworkVpcAssociationCommandOutput) => void): void;

package/dist-types/commands/CreateServiceNetworkVpcAssociationCommand.d.ts

@@ -26,9 +26,10 @@ export interface CreateServiceNetworkVpcAssociationCommandOutput extends CreateS
  *    fails, retry by deleting the association and recreating it.</p>
  *          <p>As a result of this operation, the association gets created in the service network account
  *    and the VPC owner account.</p>
- *          <p>Once a security group is added to the VPC association it cannot be removed. You can add or
- *    update the security groups being used for the VPC association once a security group is attached.
- *    To remove all security groups you must reassociate the VPC.</p>
+ *          <p>If you add a security group to the service network and VPC association, the association must
+ *    continue to always have at least one security group. You can add or edit security groups at any
+ *    time. However, to remove all security groups, you must first delete the association and recreate
+ *    it without security groups.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/dist-types/commands/DeleteAuthPolicyCommand.d.ts

@@ -19,7 +19,7 @@ export interface DeleteAuthPolicyCommandOutput extends DeleteAuthPolicyResponse,
 }
 /**
  * @public
- * <p>Deletes the specified auth policy. If an auth is set to <code>Amazon Web Services_IAM</code>
+ * <p>Deletes the specified auth policy. If an auth is set to <code>AWS_IAM</code>
  *    and the auth policy is deleted, all requests will be denied by default. If you are trying to
  *    remove the auth policy completely, you must set the auth_type to <code>NONE</code>. If auth is
  *    enabled on the resource, but no auth policy is set, all requests will be denied.</p>

package/dist-types/commands/GetResourcePolicyCommand.d.ts

@@ -20,7 +20,7 @@ export interface GetResourcePolicyCommandOutput extends GetResourcePolicyRespons
 /**
  * @public
  * <p>Retrieves information about the resource policy. The resource policy is an IAM policy
- *    created by AWS RAM on behalf of the resource owner when they share a resource.</p>
+ *    created on behalf of the resource owner when they share a resource.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/dist-types/commands/PutAuthPolicyCommand.d.ts

@@ -19,7 +19,8 @@ export interface PutAuthPolicyCommandOutput extends PutAuthPolicyResponse, __Met
 }
 /**
  * @public
- * <p>Creates or updates the auth policy.</p>
+ * <p>Creates or updates the auth policy. The policy string in JSON must not contain newlines or
+ *    blank lines.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/dist-types/commands/UpdateServiceNetworkVpcAssociationCommand.d.ts

@@ -19,8 +19,10 @@ export interface UpdateServiceNetworkVpcAssociationCommandOutput extends UpdateS
 }
 /**
  * @public
- * <p>Updates the service network and VPC association. Once you add a security group, it cannot be
- *    removed.</p>
+ * <p>Updates the service network and VPC association. If you add a security group to the service
+ *    network and VPC association, the association must continue to always have at least one security
+ *    group. You can add or edit security groups at any time. However, to remove all security groups,
+ *    you must first delete the association and recreate it without security groups.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/dist-types/models/models_0.d.ts

@@ -1904,7 +1904,7 @@ export interface GetAuthPolicyResponse {
     policy?: string;
     /**
      * <p>The state of the auth policy. The auth policy is only active when the auth type is set to
-     *      <code>Amazon Web Services_IAM</code>. If you provide a policy, then authentication and
+     *      <code>AWS_IAM</code>. If you provide a policy, then authentication and
      *    authorization decisions are made based on this policy and the client's IAM policy. If the auth
      *    type is <code>NONE</code>, then any auth policy you provide will remain inactive. For more
      *    information, see <a href="https://docs.aws.amazon.com/vpc-lattice/latest/ug/service-networks.html#create-service-network">Create a service
@@ -1984,7 +1984,7 @@ export interface GetListenerResponse {
  */
 export interface GetResourcePolicyRequest {
     /**
-     * <p>An IAM policy.</p>
+     * <p>The Amazon Resource Name (ARN) of the service network or service.</p>
      */
     resourceArn: string | undefined;
 }
@@ -1993,7 +1993,7 @@ export interface GetResourcePolicyRequest {
  */
 export interface GetResourcePolicyResponse {
     /**
-     * <p>The Amazon Resource Name (ARN) of the service network or service.</p>
+     * <p>An IAM policy.</p>
      */
     policy?: string;
 }
@@ -3090,7 +3090,7 @@ export interface PutAuthPolicyRequest {
      */
     resourceIdentifier: string | undefined;
     /**
-     * <p>The auth policy.</p>
+     * <p>The auth policy. The policy string in JSON must not contain newlines or blank lines.</p>
      */
     policy: string | undefined;
 }
@@ -3099,12 +3099,12 @@ export interface PutAuthPolicyRequest {
  */
 export interface PutAuthPolicyResponse {
     /**
-     * <p>The auth policy.</p>
+     * <p>The auth policy. The policy string in JSON must not contain newlines or blank lines.</p>
      */
     policy?: string;
     /**
      * <p>The state of the auth policy. The auth policy is only active when the auth type is set to
-     *      <code>Amazon Web Services_IAM</code>. If you provide a policy, then authentication and
+     *      <code>AWS_IAM</code>. If you provide a policy, then authentication and
      *    authorization decisions are made based on this policy and the client's IAM policy. If the Auth
      *    type is <code>NONE</code>, then, any auth policy you provide will remain inactive. For more
      *    information, see <a href="https://docs.aws.amazon.com/vpc-lattice/latest/ug/service-networks.html#create-service-network">Create a service
@@ -3122,7 +3122,8 @@ export interface PutResourcePolicyRequest {
      */
     resourceArn: string | undefined;
     /**
-     * <p>An IAM policy.</p>
+     * <p>An IAM policy. The policy string in JSON must not contain newlines or
+     *    blank lines.</p>
      */
     policy: string | undefined;
 }
@@ -3302,7 +3303,7 @@ export interface UpdateServiceNetworkVpcAssociationRequest {
      */
     serviceNetworkVpcAssociationIdentifier: string | undefined;
     /**
-     * <p>The IDs of the security groups. Once you add a security group, it cannot be removed.</p>
+     * <p>The IDs of the security groups. </p>
      */
     securityGroupIds: string[] | undefined;
 }

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@aws-sdk/client-vpc-lattice",
   "description": "AWS SDK for JavaScript Vpc Lattice Client for Node.js, Browser and React Native",
-  "version": "3.306.0",
+  "version": "3.307.0",
   "scripts": {
     "build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
     "build:cjs": "tsc -p tsconfig.cjs.json",