aws-sdk 2.1366.0 → 2.1368.0

package/clients/emrcontainers.d.ts

@@ -99,6 +99,14 @@ declare class EMRcontainers extends Service {
    * Displays detailed information about a specified virtual cluster. Virtual cluster is a managed entity on Amazon EMR on EKS. You can create, describe, list and delete virtual clusters. They do not consume any additional resource in your system. A single virtual cluster maps to a single Kubernetes namespace. Given this relationship, you can model virtual clusters the same way you model Kubernetes namespaces to meet your requirements.
    */
   describeVirtualCluster(callback?: (err: AWSError, data: EMRcontainers.Types.DescribeVirtualClusterResponse) => void): Request<EMRcontainers.Types.DescribeVirtualClusterResponse, AWSError>;
+  /**
+   * Generate a session token to connect to a managed endpoint. 
+   */
+  getManagedEndpointSessionCredentials(params: EMRcontainers.Types.GetManagedEndpointSessionCredentialsRequest, callback?: (err: AWSError, data: EMRcontainers.Types.GetManagedEndpointSessionCredentialsResponse) => void): Request<EMRcontainers.Types.GetManagedEndpointSessionCredentialsResponse, AWSError>;
+  /**
+   * Generate a session token to connect to a managed endpoint. 
+   */
+  getManagedEndpointSessionCredentials(callback?: (err: AWSError, data: EMRcontainers.Types.GetManagedEndpointSessionCredentialsResponse) => void): Request<EMRcontainers.Types.GetManagedEndpointSessionCredentialsResponse, AWSError>;
   /**
    * Lists job runs based on a set of parameters. A job run is a unit of work, such as a Spark jar, PySpark script, or SparkSQL query, that you submit to Amazon EMR on EKS.
    */
@@ -383,6 +391,13 @@ declare namespace EMRcontainers {
      */
     arn?: VirtualClusterArn;
   }
+  export type CredentialType = string;
+  export interface Credentials {
+    /**
+     * The actual session token being returned.
+     */
+    token?: Token;
+  }
   export type _Date = Date;
   export interface DeleteJobTemplateRequest {
     /**
@@ -574,6 +589,50 @@ declare namespace EMRcontainers {
   export type EntryPointArguments = EntryPointArgument[];
   export type EntryPointPath = string;
   export type FailureReason = "INTERNAL_ERROR"|"USER_ERROR"|"VALIDATION_ERROR"|"CLUSTER_UNAVAILABLE"|string;
+  export interface GetManagedEndpointSessionCredentialsRequest {
+    /**
+     * The ARN of the managed endpoint for which the request is submitted. 
+     */
+    endpointIdentifier: String2048;
+    /**
+     * The ARN of the Virtual Cluster which the Managed Endpoint belongs to. 
+     */
+    virtualClusterIdentifier: String2048;
+    /**
+     * The IAM Execution Role ARN that will be used by the job run. 
+     */
+    executionRoleArn: IAMRoleArn;
+    /**
+     * Type of the token requested. Currently supported and default value of this field is “TOKEN.”
+     */
+    credentialType: CredentialType;
+    /**
+     * Duration in seconds for which the session token is valid. The default duration is 15 minutes and the maximum is 12 hours.
+     */
+    durationInSeconds?: JavaInteger;
+    /**
+     * String identifier used to separate sections of the execution logs uploaded to S3.
+     */
+    logContext?: LogContext;
+    /**
+     * The client idempotency token of the job run request.
+     */
+    clientToken?: ClientToken;
+  }
+  export interface GetManagedEndpointSessionCredentialsResponse {
+    /**
+     * The identifier of the session token returned.
+     */
+    id?: ResourceIdString;
+    /**
+     * The structure containing the session credentials.
+     */
+    credentials?: Credentials;
+    /**
+     * The date and time when the session token will expire.
+     */
+    expiresAt?: _Date;
+  }
   export type IAMRoleArn = string;
   export type JavaInteger = number;
   export type JobArn = string;
@@ -889,6 +948,7 @@ declare namespace EMRcontainers {
      */
     nextToken?: NextToken;
   }
+  export type LogContext = string;
   export type LogGroupName = string;
   export interface MonitoringConfiguration {
     /**
@@ -1097,6 +1157,7 @@ declare namespace EMRcontainers {
   export type TemplateParameterDataType = "NUMBER"|"STRING"|string;
   export type TemplateParameterInputMap = {[key: string]: String1024};
   export type TemplateParameterName = string;
+  export type Token = string;
   export interface UntagResourceRequest {
     /**
      * The ARN of resources.

package/clients/grafana.d.ts

@@ -289,6 +289,10 @@ declare namespace Grafana {
      * The configuration string for the workspace that you create. For more information about the format and configuration options available, see Working in your Grafana workspace.
      */
     configuration?: OverridableConfigurationJson;
+    /**
+     * Specifies the version of Grafana to support in the new workspace. Supported values are 8.4 and 9.4.
+     */
+    grafanaVersion?: GrafanaVersion;
     /**
      * Configuration for network access to your workspace. When this is configured, only listed IP addresses and VPC endpoints will be able to access your workspace. Standard Grafana authentication and authorization will still be required. If this is not configured, or is removed, then all IP addresses and VPC endpoints will be allowed. Standard Grafana authentication and authorization will still be required.
      */

package/clients/guardduty.d.ts

@@ -435,6 +435,14 @@ declare class GuardDuty extends Service {
    * Lists the ThreatIntelSets of the GuardDuty service specified by the detector ID. If you use this operation from a member account, the ThreatIntelSets associated with the administrator account are returned.
    */
   listThreatIntelSets(callback?: (err: AWSError, data: GuardDuty.Types.ListThreatIntelSetsResponse) => void): Request<GuardDuty.Types.ListThreatIntelSetsResponse, AWSError>;
+  /**
+   * Initiates the malware scan. Invoking this API will automatically create the Service-linked role  in the corresponding account.
+   */
+  startMalwareScan(params: GuardDuty.Types.StartMalwareScanRequest, callback?: (err: AWSError, data: GuardDuty.Types.StartMalwareScanResponse) => void): Request<GuardDuty.Types.StartMalwareScanResponse, AWSError>;
+  /**
+   * Initiates the malware scan. Invoking this API will automatically create the Service-linked role  in the corresponding account.
+   */
+  startMalwareScan(callback?: (err: AWSError, data: GuardDuty.Types.StartMalwareScanResponse) => void): Request<GuardDuty.Types.StartMalwareScanResponse, AWSError>;
   /**
    * Turns on GuardDuty monitoring of the specified member accounts. Use this operation to restart monitoring of accounts that you stopped monitoring with the StopMonitoringMembers operation.
    */
@@ -1227,7 +1235,7 @@ declare namespace GuardDuty {
     ThreatIntelSetId: String;
   }
   export type Criterion = {[key: string]: Condition};
-  export type CriterionKey = "EC2_INSTANCE_ARN"|"SCAN_ID"|"ACCOUNT_ID"|"GUARDDUTY_FINDING_ID"|"SCAN_START_TIME"|"SCAN_STATUS"|string;
+  export type CriterionKey = "EC2_INSTANCE_ARN"|"SCAN_ID"|"ACCOUNT_ID"|"GUARDDUTY_FINDING_ID"|"SCAN_START_TIME"|"SCAN_STATUS"|"SCAN_TYPE"|string;
   export interface DNSLogsConfigurationResult {
     /**
      * Denotes whether DNS logs is enabled as a data source.
@@ -1707,6 +1715,10 @@ declare namespace GuardDuty {
      * Contains a complete view providing malware scan result details.
      */
     ScanDetections?: ScanDetections;
+    /**
+     * Specifies the scan type that invoked the malware scan.
+     */
+    ScanType?: ScanType;
   }
   export interface EbsVolumesResult {
     /**
@@ -3625,6 +3637,7 @@ declare namespace GuardDuty {
      */
     LambdaDetails?: LambdaDetails;
   }
+  export type ResourceArn = string;
   export interface ResourceDetails {
     /**
      * InstanceArn that was scanned in the scan entry.
@@ -3829,6 +3842,10 @@ declare namespace GuardDuty {
      * List of volumes that were attached to the original instance to be scanned.
      */
     AttachedVolumes?: VolumeDetails;
+    /**
+     * Specifies the scan type that invoked the malware scan.
+     */
+    ScanType?: ScanType;
   }
   export interface ScanCondition {
     /**
@@ -3913,7 +3930,7 @@ declare namespace GuardDuty {
      */
     ScanResult?: ScanResult;
   }
-  export type ScanStatus = "RUNNING"|"COMPLETED"|"FAILED"|string;
+  export type ScanStatus = "RUNNING"|"COMPLETED"|"FAILED"|"SKIPPED"|string;
   export interface ScanThreatName {
     /**
      * The name of the identified threat.
@@ -3933,6 +3950,7 @@ declare namespace GuardDuty {
     FilePaths?: FilePaths;
   }
   export type ScanThreatNames = ScanThreatName[];
+  export type ScanType = "GUARDDUTY_INITIATED"|"ON_DEMAND"|string;
   export interface ScannedItemCount {
     /**
      * Total GB of files scanned for malware.
@@ -4045,6 +4063,18 @@ declare namespace GuardDuty {
   }
   export type SourceIps = String[];
   export type Sources = String[];
+  export interface StartMalwareScanRequest {
+    /**
+     * Amazon Resource Name (ARN) of the resource for which you invoked the API.
+     */
+    ResourceArn: ResourceArn;
+  }
+  export interface StartMalwareScanResponse {
+    /**
+     * A unique identifier that gets generated when you invoke the API without any error. Each malware scan has a corresponding scan ID. Using this scan ID, you can monitor the status of your malware scan.
+     */
+    ScanId?: NonEmptyString;
+  }
   export interface StartMonitoringMembersRequest {
     /**
      * The unique ID of the detector of the GuardDuty administrator account associated with the member accounts to monitor.

package/clients/iot.d.ts

@@ -3454,6 +3454,10 @@ declare namespace Iot {
      * Metadata which can be used to manage the domain configuration.  For URI Request parameters use format: ...key1=value1&key2=value2... For the CLI command-line parameter use format: &&tags "key1=value1&key2=value2..." For the cli-input-json file use format: "tags": "key1=value1&key2=value2..." 
      */
     tags?: TagList;
+    /**
+     * An object that specifies the TLS configuration for a domain.
+     */
+    tlsConfig?: TlsConfig;
   }
   export interface CreateDomainConfigurationResponse {
     /**
@@ -3579,7 +3583,7 @@ declare namespace Iot {
      */
     targets: JobTargets;
     /**
-     * An S3 link to the job document. Required if you don't specify a value for document.  If the job document resides in an S3 bucket, you must use a placeholder link when specifying the document. The placeholder link is of the following form:  ${aws:iot:s3-presigned-url:https://s3.amazonaws.com/bucket/key}  where bucket is your bucket name and key is the object in the bucket to which you are linking. 
+     * An S3 link, or S3 object URL, to the job document. The link is an Amazon S3 object URL and is required if you don't specify a value for document. For example, --document-source https://s3.region-code.amazonaws.com/example-firmware/device-firmware.1.0. For more information, see Methods for accessing a bucket.
      */
     documentSource?: JobDocumentSource;
     /**
@@ -4918,6 +4922,10 @@ declare namespace Iot {
      * The date and time the domain configuration's status was last changed.
      */
     lastStatusChangeDate?: DateType;
+    /**
+     * An object that specifies the TLS configuration for a domain.
+     */
+    tlsConfig?: TlsConfig;
   }
   export interface DescribeEndpointRequest {
     /**
@@ -9014,7 +9022,7 @@ declare namespace Iot {
   export type Prefix = string;
   export interface PresignedUrlConfig {
     /**
-     * The ARN of an IAM role that grants grants permission to download files from the S3 bucket where the job data/updates are stored. The role must also grant permission for IoT to download the files.  For information about addressing the confused deputy problem, see cross-service confused deputy prevention in the Amazon Web Services IoT Core developer guide. 
+     * The ARN of an IAM role that grants permission to download files from the S3 bucket where the job data/updates are stored. The role must also grant permission for IoT to download the files.  For information about addressing the confused deputy problem, see cross-service confused deputy prevention in the Amazon Web Services IoT Core developer guide. 
      */
     roleArn?: RoleArn;
     /**
@@ -9648,6 +9656,7 @@ declare namespace Iot {
   export type Seconds = number;
   export type SecurityGroupId = string;
   export type SecurityGroupList = SecurityGroupId[];
+  export type SecurityPolicy = string;
   export type SecurityProfileArn = string;
   export type SecurityProfileDescription = string;
   export interface SecurityProfileIdentifier {
@@ -10557,6 +10566,12 @@ declare namespace Iot {
   export type TimestreamTimestampUnit = string;
   export type TimestreamTimestampValue = string;
   export type TinyMaxResults = number;
+  export interface TlsConfig {
+    /**
+     * The security policy for a domain configuration. For more information, see Security policies  in the Amazon Web Services IoT Core developer guide.
+     */
+    securityPolicy?: SecurityPolicy;
+  }
   export interface TlsContext {
     /**
      * The value of the serverName key in a TLS authorization request.
@@ -11007,6 +11022,10 @@ declare namespace Iot {
      * Removes the authorization configuration from a domain.
      */
     removeAuthorizerConfig?: RemoveAuthorizerConfig;
+    /**
+     * An object that specifies the TLS configuration for a domain.
+     */
+    tlsConfig?: TlsConfig;
   }
   export interface UpdateDomainConfigurationResponse {
     /**

package/clients/iotdeviceadvisor.d.ts

@@ -126,6 +126,7 @@ declare class IotDeviceAdvisor extends Service {
 }
 declare namespace IotDeviceAdvisor {
   export type AmazonResourceName = string;
+  export type AuthenticationMethod = "X509ClientCertificate"|"SignatureVersion4"|string;
   export interface CreateSuiteDefinitionRequest {
     /**
      * Creates a Device Advisor test suite with suite definition configuration.
@@ -164,13 +165,17 @@ declare namespace IotDeviceAdvisor {
   }
   export interface DeviceUnderTest {
     /**
-     * Lists devices thing ARN.
+     * Lists device's thing ARN.
      */
     thingArn?: AmazonResourceName;
     /**
-     * Lists devices certificate ARN.
+     * Lists device's certificate ARN.
      */
     certificateArn?: AmazonResourceName;
+    /**
+     * Lists device's role ARN.
+     */
+    deviceRoleArn?: AmazonResourceName;
   }
   export type DeviceUnderTestList = DeviceUnderTest[];
   export type Endpoint = string;
@@ -185,6 +190,14 @@ declare namespace IotDeviceAdvisor {
      * The certificate ARN of the device. This is an optional parameter.
      */
     certificateArn?: AmazonResourceName;
+    /**
+     * The device role ARN of the device. This is an optional parameter.
+     */
+    deviceRoleArn?: AmazonResourceName;
+    /**
+     * The authentication method used during the device connection.
+     */
+    authenticationMethod?: AuthenticationMethod;
   }
   export interface GetEndpointResponse {
     /**
@@ -389,7 +402,7 @@ declare namespace IotDeviceAdvisor {
   export type LogUrl = string;
   export type MaxResults = number;
   export type ParallelRun = boolean;
-  export type Protocol = "MqttV3_1_1"|"MqttV5"|string;
+  export type Protocol = "MqttV3_1_1"|"MqttV5"|"MqttV3_1_1_OverWebSocket"|"MqttV5_OverWebSocket"|string;
   export type QualificationReportDownloadUrl = string;
   export type RootGroup = string;
   export type SelectedTestList = UUID[];