cdk-comprehend-s3olap 2.0.196 → 2.0.198

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (51) hide show
  1. package/.jsii +3 -3
  2. package/lib/cdk-comprehend-s3olap.js +2 -2
  3. package/lib/comprehend-lambdas.js +2 -2
  4. package/lib/iam-roles.js +4 -4
  5. package/node_modules/aws-sdk/CHANGELOG.md +22 -1
  6. package/node_modules/aws-sdk/README.md +1 -1
  7. package/node_modules/aws-sdk/apis/appfabric-2023-05-19.examples.json +5 -0
  8. package/node_modules/aws-sdk/apis/appfabric-2023-05-19.min.json +1254 -0
  9. package/node_modules/aws-sdk/apis/appfabric-2023-05-19.paginators.json +28 -0
  10. package/node_modules/aws-sdk/apis/appfabric-2023-05-19.waiters2.json +5 -0
  11. package/node_modules/aws-sdk/apis/appflow-2020-08-23.min.json +3 -0
  12. package/node_modules/aws-sdk/apis/emr-serverless-2021-07-13.min.json +2 -1
  13. package/node_modules/aws-sdk/apis/internetmonitor-2021-06-03.min.json +47 -21
  14. package/node_modules/aws-sdk/apis/ivs-2020-07-14.min.json +99 -23
  15. package/node_modules/aws-sdk/apis/kinesisvideo-2017-09-30.min.json +117 -25
  16. package/node_modules/aws-sdk/apis/kinesisvideo-2017-09-30.paginators.json +6 -0
  17. package/node_modules/aws-sdk/apis/metadata.json +3 -0
  18. package/node_modules/aws-sdk/apis/privatenetworks-2021-12-03.min.json +127 -69
  19. package/node_modules/aws-sdk/apis/rds-2014-10-31.min.json +39 -1
  20. package/node_modules/aws-sdk/apis/s3-2006-03-01.examples.json +110 -110
  21. package/node_modules/aws-sdk/apis/s3-2006-03-01.min.json +55 -19
  22. package/node_modules/aws-sdk/apis/sagemaker-2017-07-24.min.json +669 -648
  23. package/node_modules/aws-sdk/apis/sagemaker-featurestore-runtime-2020-07-01.min.json +30 -10
  24. package/node_modules/aws-sdk/clients/all.d.ts +1 -0
  25. package/node_modules/aws-sdk/clients/all.js +2 -1
  26. package/node_modules/aws-sdk/clients/appfabric.d.ts +1127 -0
  27. package/node_modules/aws-sdk/clients/appfabric.js +19 -0
  28. package/node_modules/aws-sdk/clients/appflow.d.ts +4 -0
  29. package/node_modules/aws-sdk/clients/emrserverless.d.ts +10 -6
  30. package/node_modules/aws-sdk/clients/internetmonitor.d.ts +31 -0
  31. package/node_modules/aws-sdk/clients/ivs.d.ts +80 -0
  32. package/node_modules/aws-sdk/clients/kinesisanalyticsv2.d.ts +1 -1
  33. package/node_modules/aws-sdk/clients/kinesisvideo.d.ts +144 -10
  34. package/node_modules/aws-sdk/clients/lambda.d.ts +6 -6
  35. package/node_modules/aws-sdk/clients/macie2.d.ts +18 -18
  36. package/node_modules/aws-sdk/clients/omics.d.ts +1 -1
  37. package/node_modules/aws-sdk/clients/privatenetworks.d.ts +67 -5
  38. package/node_modules/aws-sdk/clients/rds.d.ts +97 -1
  39. package/node_modules/aws-sdk/clients/s3.d.ts +82 -48
  40. package/node_modules/aws-sdk/clients/sagemaker.d.ts +31 -1
  41. package/node_modules/aws-sdk/clients/sagemakerfeaturestoreruntime.d.ts +36 -2
  42. package/node_modules/aws-sdk/clients/ssm.d.ts +16 -16
  43. package/node_modules/aws-sdk/dist/aws-sdk-core-react-native.js +3 -3
  44. package/node_modules/aws-sdk/dist/aws-sdk-react-native.js +61 -17
  45. package/node_modules/aws-sdk/dist/aws-sdk.js +235 -48
  46. package/node_modules/aws-sdk/dist/aws-sdk.min.js +43 -43
  47. package/node_modules/aws-sdk/lib/config_service_placeholders.d.ts +2 -0
  48. package/node_modules/aws-sdk/lib/core.js +1 -1
  49. package/node_modules/aws-sdk/lib/region_config_data.json +12 -0
  50. package/node_modules/aws-sdk/package.json +1 -1
  51. package/package.json +3 -3
@@ -269,11 +269,11 @@ declare class Macie2 extends Service {
269
269
  */
270
270
  getCustomDataIdentifier(callback?: (err: AWSError, data: Macie2.Types.GetCustomDataIdentifierResponse) => void): Request<Macie2.Types.GetCustomDataIdentifierResponse, AWSError>;
271
271
  /**
272
- * Retrieves (queries) aggregated statistical data about findings.
272
+ * Retrieves (queries) aggregated statistical data about findings.
273
273
  */
274
274
  getFindingStatistics(params: Macie2.Types.GetFindingStatisticsRequest, callback?: (err: AWSError, data: Macie2.Types.GetFindingStatisticsResponse) => void): Request<Macie2.Types.GetFindingStatisticsResponse, AWSError>;
275
275
  /**
276
- * Retrieves (queries) aggregated statistical data about findings.
276
+ * Retrieves (queries) aggregated statistical data about findings.
277
277
  */
278
278
  getFindingStatistics(callback?: (err: AWSError, data: Macie2.Types.GetFindingStatisticsResponse) => void): Request<Macie2.Types.GetFindingStatisticsResponse, AWSError>;
279
279
  /**
@@ -1210,7 +1210,7 @@ declare namespace Macie2 {
1210
1210
  }
1211
1211
  export interface ClassificationResult {
1212
1212
  /**
1213
- * Specifies whether Amazon Macie detected additional occurrences of sensitive data in the S3 object. A finding includes location data for a maximum of 15 occurrences of sensitive data. This value can help you determine whether to investigate additional occurrences of sensitive data in an object. You can do this by referring to the corresponding sensitive data discovery result for the finding (ClassificationDetails.detailedResultsLocation).
1213
+ * Specifies whether Amazon Macie detected additional occurrences of sensitive data in the S3 object. A finding includes location data for a maximum of 15 occurrences of sensitive data. This value can help you determine whether to investigate additional occurrences of sensitive data in an object. You can do this by referring to the corresponding sensitive data discovery result for the finding (classificationDetails.detailedResultsLocation).
1214
1214
  */
1215
1215
  additionalOccurrences?: __boolean;
1216
1216
  /**
@@ -1240,7 +1240,7 @@ declare namespace Macie2 {
1240
1240
  */
1241
1241
  code?: __string;
1242
1242
  /**
1243
- * A brief description of the status of the finding. This value is null if the status (code) of the finding is COMPLETE. Amazon Macie uses this value to notify you of any errors, warnings, or considerations that might impact your analysis of the finding and the affected S3 object. Possible values are: ARCHIVE_CONTAINS_UNPROCESSED_FILES - The object is an archive file and Macie extracted and analyzed only some or none of the files in the archive. To determine which files Macie analyzed, if any, refer to the corresponding sensitive data discovery result for the finding (ClassificationDetails.detailedResultsLocation). ARCHIVE_EXCEEDS_SIZE_LIMIT - The object is an archive file whose total storage size exceeds the size quota for this type of archive. ARCHIVE_NESTING_LEVEL_OVER_LIMIT - The object is an archive file whose nested depth exceeds the quota for the maximum number of nested levels that Macie analyzes for this type of archive. ARCHIVE_TOTAL_BYTES_EXTRACTED_OVER_LIMIT - The object is an archive file that exceeds the quota for the maximum amount of data that Macie extracts and analyzes for this type of archive. ARCHIVE_TOTAL_DOCUMENTS_PROCESSED_OVER_LIMIT - The object is an archive file that contains more than the maximum number of files that Macie extracts and analyzes for this type of archive. FILE_EXCEEDS_SIZE_LIMIT - The storage size of the object exceeds the size quota for this type of file. INVALID_ENCRYPTION - The object is encrypted using server-side encryption but Macie isn't allowed to use the key. Macie can't decrypt and analyze the object. INVALID_KMS_KEY - The object is encrypted with an KMS key that was disabled or is being deleted. Macie can't decrypt and analyze the object. INVALID_OBJECT_STATE - The object doesn't use a supported Amazon S3 storage class. JSON_NESTING_LEVEL_OVER_LIMIT - The object contains JSON data and the nested depth of the data exceeds the quota for the number of nested levels that Macie analyzes for this type of file. MALFORMED_FILE - The object is a malformed or corrupted file. An error occurred when Macie attempted to detect the file's type or extract data from the file. MALFORMED_OR_FILE_SIZE_EXCEEDS_LIMIT - The object is a Microsoft Office file that is malformed or exceeds the size quota for this type of file. If the file is malformed, an error occurred when Macie attempted to extract data from the file. NO_SUCH_BUCKET_AVAILABLE - The object was in a bucket that was deleted shortly before or when Macie attempted to analyze the object. OBJECT_VERSION_MISMATCH - The object was changed while Macie was analyzing it. OOXML_UNCOMPRESSED_RATIO_EXCEEDS_LIMIT - The object is an Office Open XML file whose compression ratio exceeds the compression quota for this type of file. OOXML_UNCOMPRESSED_SIZE_EXCEEDS_LIMIT - The object is an Office Open XML file that exceeds the size quota for this type of file. PERMISSION_DENIED - Macie isn't allowed to access the object. The object's permissions settings prevent Macie from analyzing the object. SOURCE_OBJECT_NO_LONGER_AVAILABLE - The object was deleted shortly before or when Macie attempted to analyze it. TIME_CUT_OFF_REACHED - Macie started analyzing the object but additional analysis would exceed the time quota for analyzing an object. UNABLE_TO_PARSE_FILE - The object is a file that contains structured data and an error occurred when Macie attempted to parse the data. UNSUPPORTED_FILE_TYPE_EXCEPTION - The object is a file that uses an unsupported file or storage format. For information about quotas, supported storage classes, and supported file and storage formats, see Quotas and Supported storage classes and formats in the Amazon Macie User Guide.
1243
+ * A brief description of the status of the finding. This value is null if the status (code) of the finding is COMPLETE. Amazon Macie uses this value to notify you of any errors, warnings, or considerations that might impact your analysis of the finding and the affected S3 object. Possible values are: ARCHIVE_CONTAINS_UNPROCESSED_FILES - The object is an archive file and Macie extracted and analyzed only some or none of the files in the archive. To determine which files Macie analyzed, if any, refer to the corresponding sensitive data discovery result for the finding (classificationDetails.detailedResultsLocation). ARCHIVE_EXCEEDS_SIZE_LIMIT - The object is an archive file whose total storage size exceeds the size quota for this type of archive. ARCHIVE_NESTING_LEVEL_OVER_LIMIT - The object is an archive file whose nested depth exceeds the quota for the maximum number of nested levels that Macie analyzes for this type of archive. ARCHIVE_TOTAL_BYTES_EXTRACTED_OVER_LIMIT - The object is an archive file that exceeds the quota for the maximum amount of data that Macie extracts and analyzes for this type of archive. ARCHIVE_TOTAL_DOCUMENTS_PROCESSED_OVER_LIMIT - The object is an archive file that contains more than the maximum number of files that Macie extracts and analyzes for this type of archive. FILE_EXCEEDS_SIZE_LIMIT - The storage size of the object exceeds the size quota for this type of file. INVALID_ENCRYPTION - The object is encrypted using server-side encryption but Macie isn't allowed to use the key. Macie can't decrypt and analyze the object. INVALID_KMS_KEY - The object is encrypted with an KMS key that was disabled or is being deleted. Macie can't decrypt and analyze the object. INVALID_OBJECT_STATE - The object doesn't use a supported Amazon S3 storage class. JSON_NESTING_LEVEL_OVER_LIMIT - The object contains JSON data and the nested depth of the data exceeds the quota for the number of nested levels that Macie analyzes for this type of file. MALFORMED_FILE - The object is a malformed or corrupted file. An error occurred when Macie attempted to detect the file's type or extract data from the file. MALFORMED_OR_FILE_SIZE_EXCEEDS_LIMIT - The object is a Microsoft Office file that is malformed or exceeds the size quota for this type of file. If the file is malformed, an error occurred when Macie attempted to extract data from the file. NO_SUCH_BUCKET_AVAILABLE - The object was in a bucket that was deleted shortly before or when Macie attempted to analyze the object. OBJECT_VERSION_MISMATCH - The object was changed while Macie was analyzing it. OOXML_UNCOMPRESSED_RATIO_EXCEEDS_LIMIT - The object is an Office Open XML file whose compression ratio exceeds the compression quota for this type of file. OOXML_UNCOMPRESSED_SIZE_EXCEEDS_LIMIT - The object is an Office Open XML file that exceeds the size quota for this type of file. PERMISSION_DENIED - Macie isn't allowed to access the object. The object's permissions settings prevent Macie from analyzing the object. SOURCE_OBJECT_NO_LONGER_AVAILABLE - The object was deleted shortly before or when Macie attempted to analyze it. TIME_CUT_OFF_REACHED - Macie started analyzing the object but additional analysis would exceed the time quota for analyzing an object. UNABLE_TO_PARSE_FILE - The object is a file that contains structured data and an error occurred when Macie attempted to parse the data. UNSUPPORTED_FILE_TYPE_EXCEPTION - The object is a file that uses an unsupported file or storage format. For information about quotas, supported storage classes, and supported file and storage formats, see Quotas and Supported storage classes and formats in the Amazon Macie User Guide.
1244
1244
  */
1245
1245
  reason?: __string;
1246
1246
  }
@@ -1319,7 +1319,7 @@ declare namespace Macie2 {
1319
1319
  */
1320
1320
  managedDataIdentifierIds?: __listOf__string;
1321
1321
  /**
1322
- * The selection type to apply when determining which managed data identifiers the job uses to analyze data. Valid values are: ALL - Use all the managed data identifiers that Amazon Macie provides. If you specify this value, don't specify any values for the managedDataIdentifierIds property. EXCLUDE - Use all the managed data identifiers that Macie provides except the managed data identifiers specified by the managedDataIdentifierIds property. INCLUDE - Use only the managed data identifiers specified by the managedDataIdentifierIds property. NONE - Don't use any managed data identifiers. If you specify this value, specify at least one custom data identifier for the job (customDataIdentifierIds) and don't specify any values for the managedDataIdentifierIds property. If you don't specify a value for this property, the job uses all managed data identifiers. If you don't specify a value for this property or you specify ALL or EXCLUDE for a recurring job, the job also uses new managed data identifiers as they are released.
1322
+ * The selection type to apply when determining which managed data identifiers the job uses to analyze data. Valid values are: ALL (default) - Use all managed data identifiers. If you specify this value, don't specify any values for the managedDataIdentifierIds property. EXCLUDE - Use all managed data identifiers except the ones specified by the managedDataIdentifierIds property. INCLUDE - Use only the managed data identifiers specified by the managedDataIdentifierIds property. NONE - Don't use any managed data identifiers. If you specify this value, specify at least one custom data identifier for the job (customDataIdentifierIds) and don't specify any values for the managedDataIdentifierIds property. RECOMMENDED - Use only the set of managed data identifiers that Amazon Web Services recommends for jobs. If you specify this value, don't specify any values for the managedDataIdentifierIds property. If you don't specify a value for this property, the job uses all managed data identifiers. If the job is a recurring job and you don't specify a value for this property or you specify ALL or EXCLUDE, each job run automatically uses new managed data identifiers that are released. If you specify RECOMMENDED for a recurring job, each job run automatically uses all the managed data identifiers that are in the recommended set when the job starts to run. For information about individual managed data identifiers or to determine which ones are in the recommended set, see Using managed data identifiers and Recommended managed data identifiers in the Amazon Macie User Guide.
1323
1323
  */
1324
1324
  managedDataIdentifierSelector?: ManagedDataIdentifierSelector;
1325
1325
  /**
@@ -1383,7 +1383,7 @@ declare namespace Macie2 {
1383
1383
  */
1384
1384
  regex: __string;
1385
1385
  /**
1386
- * The severity to assign to findings that the custom data identifier produces, based on the number of occurrences of text that matches the custom data identifier's detection criteria. You can specify as many as three SeverityLevel objects in this array, one for each severity: LOW, MEDIUM, or HIGH. If you specify more than one, the occurrences thresholds must be in ascending order by severity, moving from LOW to HIGH. For example, 1 for LOW, 50 for MEDIUM, and 100 for HIGH. If an S3 object contains fewer occurrences than the lowest specified threshold, Amazon Macie doesn't create a finding. If you don't specify any values for this array, Macie creates findings for S3 objects that contain at least one occurrence of text that matches the detection criteria, and Macie assigns the MEDIUM severity to those findings.
1386
+ * The severity to assign to findings that the custom data identifier produces, based on the number of occurrences of text that match the custom data identifier's detection criteria. You can specify as many as three SeverityLevel objects in this array, one for each severity: LOW, MEDIUM, or HIGH. If you specify more than one, the occurrences thresholds must be in ascending order by severity, moving from LOW to HIGH. For example, 1 for LOW, 50 for MEDIUM, and 100 for HIGH. If an S3 object contains fewer occurrences than the lowest specified threshold, Amazon Macie doesn't create a finding. If you don't specify any values for this array, Macie creates findings for S3 objects that contain at least one occurrence of text that matches the detection criteria, and Macie assigns the MEDIUM severity to those findings.
1387
1387
  */
1388
1388
  severityLevels?: SeverityLevelList;
1389
1389
  /**
@@ -1744,11 +1744,11 @@ declare namespace Macie2 {
1744
1744
  */
1745
1745
  lastRunTime?: __timestampIso8601;
1746
1746
  /**
1747
- * An array of unique identifiers, one for each managed data identifier that the job is explicitly configured to include (use) or exclude (not use) when it analyzes data. Inclusion or exclusion depends on the managed data identifier selection type specified for the job (managedDataIdentifierSelector). This value is null if the job's managed data identifier selection type is ALL or the job uses only custom data identifiers (customDataIdentifierIds) to analyze data.
1747
+ * An array of unique identifiers, one for each managed data identifier that the job is explicitly configured to include (use) or exclude (not use) when it analyzes data. Inclusion or exclusion depends on the managed data identifier selection type specified for the job (managedDataIdentifierSelector).This value is null if the job's managed data identifier selection type is ALL, NONE, or RECOMMENDED.
1748
1748
  */
1749
1749
  managedDataIdentifierIds?: __listOf__string;
1750
1750
  /**
1751
- * The selection type that determines which managed data identifiers the job uses to analyze data. Possible values are: ALL - Use all the managed data identifiers that Amazon Macie provides. EXCLUDE - Use all the managed data identifiers that Macie provides except the managed data identifiers specified by the managedDataIdentifierIds property. INCLUDE - Use only the managed data identifiers specified by the managedDataIdentifierIds property. NONE - Don't use any managed data identifiers. If this value is null, the job uses all managed data identifiers. If this value is null, ALL, or EXCLUDE for a recurring job, the job also uses new managed data identifiers as they are released.
1751
+ * The selection type that determines which managed data identifiers the job uses when it analyzes data. Possible values are: ALL (default) - Use all managed data identifiers. EXCLUDE - Use all managed data identifiers except the ones specified by the managedDataIdentifierIds property. INCLUDE - Use only the managed data identifiers specified by the managedDataIdentifierIds property. NONE - Don't use any managed data identifiers. Use only custom data identifiers (customDataIdentifierIds). RECOMMENDED - Use only the set of managed data identifiers that Amazon Web Services recommends for jobs. If this value is null, the job uses all managed data identifiers. If the job is a recurring job and this value is null, ALL, or EXCLUDE, each job run automatically uses new managed data identifiers that are released after the job was created or the preceding run ended. If this value is RECOMMENDED for a recurring job, each job run uses all the managed data identifiers that are in the recommended set when the run starts. For information about individual managed data identifiers or to determine which ones are in the recommended set, see Using managed data identifiers and Recommended managed data identifiers in the Amazon Macie User Guide.
1752
1752
  */
1753
1753
  managedDataIdentifierSelector?: ManagedDataIdentifierSelector;
1754
1754
  /**
@@ -2273,7 +2273,7 @@ declare namespace Macie2 {
2273
2273
  */
2274
2274
  regex?: __string;
2275
2275
  /**
2276
- * Specifies the severity that's assigned to findings that the custom data identifier produces, based on the number of occurrences of text that matches the custom data identifier's detection criteria. By default, Amazon Macie creates findings for S3 objects that contain at least one occurrence of text that matches the detection criteria, and Macie assigns the MEDIUM severity to those findings.
2276
+ * Specifies the severity that's assigned to findings that the custom data identifier produces, based on the number of occurrences of text that match the custom data identifier's detection criteria. By default, Amazon Macie creates findings for S3 objects that contain at least one occurrence of text that matches the detection criteria, and Macie assigns the MEDIUM severity to those findings.
2277
2277
  */
2278
2278
  severityLevels?: SeverityLevelList;
2279
2279
  /**
@@ -2497,7 +2497,7 @@ declare namespace Macie2 {
2497
2497
  */
2498
2498
  code?: AvailabilityCode;
2499
2499
  /**
2500
- * Specifies why occurrences of sensitive data can't be retrieved for the finding. Possible values are: INVALID_CLASSIFICATION_RESULT - Amazon Macie can't verify the location of the sensitive data to retrieve. There isn't a corresponding sensitive data discovery result for the finding. Or the sensitive data discovery result specified by the ClassificationDetails.detailedResultsLocation field of the finding isn't available, is malformed or corrupted, or uses an unsupported storage format. OBJECT_EXCEEDS_SIZE_QUOTA - The storage size of the affected S3 object exceeds the size quota for retrieving occurrences of sensitive data. OBJECT_UNAVAILABLE - The affected S3 object isn't available. The object might have been renamed, moved, or deleted. Or the object was changed after Macie created the finding. UNSUPPORTED_FINDING_TYPE - The specified finding isn't a sensitive data finding. UNSUPPORTED_OBJECT_TYPE - The affected S3 object uses a file or storage format that Macie doesn't support for retrieving occurrences of sensitive data. This value is null if sensitive data can be retrieved for the finding.
2500
+ * Specifies why occurrences of sensitive data can't be retrieved for the finding. Possible values are: INVALID_CLASSIFICATION_RESULT - Amazon Macie can't verify the location of the sensitive data to retrieve. There isn't a corresponding sensitive data discovery result for the finding. Or the sensitive data discovery result specified by the classificationDetails.detailedResultsLocation field of the finding isn't available, is malformed or corrupted, or uses an unsupported storage format. OBJECT_EXCEEDS_SIZE_QUOTA - The storage size of the affected S3 object exceeds the size quota for retrieving occurrences of sensitive data. OBJECT_UNAVAILABLE - The affected S3 object isn't available. The object might have been renamed, moved, or deleted. Or the object was changed after Macie created the finding. UNSUPPORTED_FINDING_TYPE - The specified finding isn't a sensitive data finding. UNSUPPORTED_OBJECT_TYPE - The affected S3 object uses a file or storage format that Macie doesn't support for retrieving occurrences of sensitive data. This value is null if sensitive data can be retrieved for the finding.
2501
2501
  */
2502
2502
  reasons?: __listOfUnavailabilityReasonCode;
2503
2503
  }
@@ -3152,7 +3152,7 @@ declare namespace Macie2 {
3152
3152
  tags?: TagMap;
3153
3153
  }
3154
3154
  export type MacieStatus = "PAUSED"|"ENABLED"|string;
3155
- export type ManagedDataIdentifierSelector = "ALL"|"EXCLUDE"|"INCLUDE"|"NONE"|string;
3155
+ export type ManagedDataIdentifierSelector = "ALL"|"EXCLUDE"|"INCLUDE"|"NONE"|"RECOMMENDED"|string;
3156
3156
  export interface ManagedDataIdentifierSummary {
3157
3157
  /**
3158
3158
  * The category of sensitive data that the managed data identifier detects: CREDENTIALS, for credentials data such as private keys or Amazon Web Services secret access keys; FINANCIAL_INFORMATION, for financial data such as credit card numbers; or, PERSONAL_INFORMATION, for personal health information, such as health insurance identification numbers, or personally identifiable information, such as passport numbers.
@@ -3463,19 +3463,19 @@ declare namespace Macie2 {
3463
3463
  */
3464
3464
  totalItemsSensitive?: __long;
3465
3465
  /**
3466
- * The total number of objects that Amazon Macie hasn't analyzed in the bucket due to an error or issue. For example, the object is a malformed file. This value includes objects that Macie hasn't analyzed for reasons reported by other statistics in the ResourceStatistics object.
3466
+ * The total number of objects that Amazon Macie wasn't able to analyze in the bucket due to an object-level issue or error. For example, the object is a malformed file. This value includes objects that Macie wasn't able to analyze for reasons reported by other statistics in the ResourceStatistics object.
3467
3467
  */
3468
3468
  totalItemsSkipped?: __long;
3469
3469
  /**
3470
- * The total number of objects that Amazon Macie hasn't analyzed in the bucket because the objects are encrypted with a key that Macie isn't allowed to use.
3470
+ * The total number of objects that Amazon Macie wasn't able to analyze in the bucket because the objects are encrypted with a key that Macie can't access. The objects use server-side encryption with customer-provided keys (SSE-C).
3471
3471
  */
3472
3472
  totalItemsSkippedInvalidEncryption?: __long;
3473
3473
  /**
3474
- * The total number of objects that Amazon Macie hasn't analyzed in the bucket because the objects are encrypted with an KMS key that was disabled or deleted.
3474
+ * The total number of objects that Amazon Macie wasn't able to analyze in the bucket because the objects are encrypted with KMS keys that were disabled, are scheduled for deletion, or were deleted.
3475
3475
  */
3476
3476
  totalItemsSkippedInvalidKms?: __long;
3477
3477
  /**
3478
- * The total number of objects that Amazon Macie hasn't analyzed in the bucket because Macie isn't allowed to access the objects.
3478
+ * The total number of objects that Amazon Macie wasn't able to analyze in the bucket due to the permissions settings for the objects or the permissions settings for the keys that were used to encrypt the objects.
3479
3479
  */
3480
3480
  totalItemsSkippedPermissionDenied?: __long;
3481
3481
  }
@@ -3636,7 +3636,7 @@ declare namespace Macie2 {
3636
3636
  */
3637
3637
  extension?: __string;
3638
3638
  /**
3639
- * The full key (name) that's assigned to the object.
3639
+ * The full name (key) of the object, including the object's prefix if applicable.
3640
3640
  */
3641
3641
  key?: __string;
3642
3642
  /**
@@ -3644,7 +3644,7 @@ declare namespace Macie2 {
3644
3644
  */
3645
3645
  lastModified?: __timestampIso8601;
3646
3646
  /**
3647
- * The path to the object, including the full key (name).
3647
+ * The full path to the affected object, including the name of the affected bucket and the object's name (key).
3648
3648
  */
3649
3649
  path?: __string;
3650
3650
  /**
@@ -3990,7 +3990,7 @@ declare namespace Macie2 {
3990
3990
  }
3991
3991
  export interface SortCriteria {
3992
3992
  /**
3993
- * The name of the property to sort the results by. This value can be the name of any property that Amazon Macie defines for a finding.
3993
+ * The name of the property to sort the results by. Valid values are: count, createdAt, policyDetails.action.apiCallDetails.firstSeen, policyDetails.action.apiCallDetails.lastSeen, resourcesAffected, severity.score, type, and updatedAt.
3994
3994
  */
3995
3995
  attributeName?: __string;
3996
3996
  /**
@@ -4584,7 +4584,7 @@ declare namespace Omics {
4584
4584
  export type WorkflowDefinition = string;
4585
4585
  export type WorkflowDescription = string;
4586
4586
  export type WorkflowDigest = string;
4587
- export type WorkflowEngine = "WDL"|"NEXTFLOW"|string;
4587
+ export type WorkflowEngine = "WDL"|"NEXTFLOW"|"CWL"|string;
4588
4588
  export type WorkflowExport = "DEFINITION"|string;
4589
4589
  export type WorkflowExportList = WorkflowExport[];
4590
4590
  export type WorkflowId = string;
@@ -176,11 +176,11 @@ declare class PrivateNetworks extends Service {
176
176
  */
177
177
  ping(callback?: (err: AWSError, data: PrivateNetworks.Types.PingResponse) => void): Request<PrivateNetworks.Types.PingResponse, AWSError>;
178
178
  /**
179
- * Starts an update of the specified network resource. After you submit a request to replace or return a network resource, the status of the network resource is CREATING_SHIPPING_LABEL. The shipping label is available when the status of the network resource is PENDING_RETURN. After the network resource is successfully returned, its status is DELETED. For more information, see Return a radio unit.
179
+ * Use this action to do the following tasks: Update the duration and renewal status of the commitment period for a radio unit. The update goes into effect immediately. Request a replacement for a network resource. Request that you return a network resource. After you submit a request to replace or return a network resource, the status of the network resource changes to CREATING_SHIPPING_LABEL. The shipping label is available when the status of the network resource is PENDING_RETURN. After the network resource is successfully returned, its status changes to DELETED. For more information, see Return a radio unit.
180
180
  */
181
181
  startNetworkResourceUpdate(params: PrivateNetworks.Types.StartNetworkResourceUpdateRequest, callback?: (err: AWSError, data: PrivateNetworks.Types.StartNetworkResourceUpdateResponse) => void): Request<PrivateNetworks.Types.StartNetworkResourceUpdateResponse, AWSError>;
182
182
  /**
183
- * Starts an update of the specified network resource. After you submit a request to replace or return a network resource, the status of the network resource is CREATING_SHIPPING_LABEL. The shipping label is available when the status of the network resource is PENDING_RETURN. After the network resource is successfully returned, its status is DELETED. For more information, see Return a radio unit.
183
+ * Use this action to do the following tasks: Update the duration and renewal status of the commitment period for a radio unit. The update goes into effect immediately. Request a replacement for a network resource. Request that you return a network resource. After you submit a request to replace or return a network resource, the status of the network resource changes to CREATING_SHIPPING_LABEL. The shipping label is available when the status of the network resource is PENDING_RETURN. After the network resource is successfully returned, its status changes to DELETED. For more information, see Return a radio unit.
184
184
  */
185
185
  startNetworkResourceUpdate(callback?: (err: AWSError, data: PrivateNetworks.Types.StartNetworkResourceUpdateResponse) => void): Request<PrivateNetworks.Types.StartNetworkResourceUpdateResponse, AWSError>;
186
186
  /**
@@ -255,6 +255,10 @@ declare namespace PrivateNetworks {
255
255
  * Unique, case-sensitive identifier that you provide to ensure the idempotency of the request. For more information, see How to ensure idempotency.
256
256
  */
257
257
  clientToken?: ClientToken;
258
+ /**
259
+ * Determines the duration and renewal status of the commitment period for all pending radio units. If you include commitmentConfiguration in the ActivateNetworkSiteRequest action, you must specify the following: The commitment period for the radio unit. You can choose a 60-day, 1-year, or 3-year period. Whether you want your commitment period to automatically renew for one more year after your current commitment period expires. For pricing, see Amazon Web Services Private 5G Pricing. If you do not include commitmentConfiguration in the ActivateNetworkSiteRequest action, the commitment period is set to 60-days.
260
+ */
261
+ commitmentConfiguration?: CommitmentConfiguration;
258
262
  /**
259
263
  * The Amazon Resource Name (ARN) of the network site.
260
264
  */
@@ -283,12 +287,16 @@ declare namespace PrivateNetworks {
283
287
  * The country for this address.
284
288
  */
285
289
  country: AddressContent;
290
+ /**
291
+ * The recipient's email address.
292
+ */
293
+ emailAddress?: AddressContent;
286
294
  /**
287
295
  * The recipient's name for this address.
288
296
  */
289
297
  name: AddressContent;
290
298
  /**
291
- * The phone number for this address.
299
+ * The recipient's phone number.
292
300
  */
293
301
  phoneNumber?: AddressContent;
294
302
  /**
@@ -314,7 +322,33 @@ declare namespace PrivateNetworks {
314
322
  }
315
323
  export type AddressContent = string;
316
324
  export type Arn = string;
325
+ export type Boolean = boolean;
317
326
  export type ClientToken = string;
327
+ export interface CommitmentConfiguration {
328
+ /**
329
+ * Determines whether the commitment period for a radio unit is set to automatically renew for an additional 1 year after your current commitment period expires. Set to True, if you want your commitment period to automatically renew. Set to False if you do not want your commitment to automatically renew. You can do the following: Set a 1-year commitment to automatically renew for an additional 1 year. The hourly rate for the additional year will continue to be the same as your existing 1-year rate. Set a 3-year commitment to automatically renew for an additional 1 year. The hourly rate for the additional year will continue to be the same as your existing 3-year rate. Turn off a previously-enabled automatic renewal on a 1-year or 3-year commitment. You cannot use the automatic-renewal option for a 60-day commitment.
330
+ */
331
+ automaticRenewal: Boolean;
332
+ /**
333
+ * The duration of the commitment period for the radio unit. You can choose a 60-day, 1-year, or 3-year period.
334
+ */
335
+ commitmentLength: CommitmentLength;
336
+ }
337
+ export interface CommitmentInformation {
338
+ /**
339
+ * The duration and renewal status of the commitment period for the radio unit.
340
+ */
341
+ commitmentConfiguration: CommitmentConfiguration;
342
+ /**
343
+ * The date and time that the commitment period ends. If you do not cancel or renew the commitment before the expiration date, you will be billed at the 60-day-commitment rate.
344
+ */
345
+ expiresOn?: Timestamp;
346
+ /**
347
+ * The date and time that the commitment period started.
348
+ */
349
+ startAt?: Timestamp;
350
+ }
351
+ export type CommitmentLength = "SIXTY_DAYS"|"ONE_YEAR"|"THREE_YEARS"|string;
318
352
  export interface ConfigureAccessPointRequest {
319
353
  /**
320
354
  * The Amazon Resource Name (ARN) of the network resource.
@@ -800,6 +834,10 @@ declare namespace PrivateNetworks {
800
834
  * The attributes of the network resource.
801
835
  */
802
836
  attributes?: NameValuePairs;
837
+ /**
838
+ * Information about the commitment period for the radio unit. Shows the duration, the date and time that the contract started and ends, and the renewal status of the commitment period.
839
+ */
840
+ commitmentInformation?: CommitmentInformation;
803
841
  /**
804
842
  * The creation time of the network resource.
805
843
  */
@@ -958,6 +996,10 @@ declare namespace PrivateNetworks {
958
996
  * The Amazon Resource Name (ARN) of the order.
959
997
  */
960
998
  orderArn?: Arn;
999
+ /**
1000
+ * A list of the network resources placed in the order.
1001
+ */
1002
+ orderedResources?: OrderedResourceDefinitions;
961
1003
  /**
962
1004
  * The shipping address of the order.
963
1005
  */
@@ -971,6 +1013,22 @@ declare namespace PrivateNetworks {
971
1013
  export type OrderFilterValues = String[];
972
1014
  export type OrderFilters = {[key: string]: OrderFilterValues};
973
1015
  export type OrderList = Order[];
1016
+ export interface OrderedResourceDefinition {
1017
+ /**
1018
+ * The duration and renewal status of the commitment period for each radio unit in the order. Does not show details if the resource type is DEVICE_IDENTIFIER.
1019
+ */
1020
+ commitmentConfiguration?: CommitmentConfiguration;
1021
+ /**
1022
+ * The number of network resources in the order.
1023
+ */
1024
+ count: OrderedResourceDefinitionCountInteger;
1025
+ /**
1026
+ * The type of network resource in the order.
1027
+ */
1028
+ type: NetworkResourceDefinitionType;
1029
+ }
1030
+ export type OrderedResourceDefinitionCountInteger = number;
1031
+ export type OrderedResourceDefinitions = OrderedResourceDefinition[];
974
1032
  export type PaginationToken = string;
975
1033
  export interface PingResponse {
976
1034
  /**
@@ -1029,6 +1087,10 @@ declare namespace PrivateNetworks {
1029
1087
  resourceDefinitions?: NetworkResourceDefinitions;
1030
1088
  }
1031
1089
  export interface StartNetworkResourceUpdateRequest {
1090
+ /**
1091
+ * Use this action to extend and automatically renew the commitment period for the radio unit. You can do the following: Change a 60-day commitment to a 1-year or 3-year commitment. The change is immediate and the hourly rate decreases to the rate for the new commitment period. Change a 1-year commitment to a 3-year commitment. The change is immediate and the hourly rate decreases to the rate for the 3-year commitment period. Set a 1-year commitment to automatically renew for an additional 1 year. The hourly rate for the additional year will continue to be the same as your existing 1-year rate. Set a 3-year commitment to automatically renew for an additional 1 year. The hourly rate for the additional year will continue to be the same as your existing 3-year rate. Turn off a previously-enabled automatic renewal on a 1-year or 3-year commitment. You cannot use the automatic-renewal option for a 60-day commitment. For pricing, see Amazon Web Services Private 5G Pricing.
1092
+ */
1093
+ commitmentConfiguration?: CommitmentConfiguration;
1032
1094
  /**
1033
1095
  * The Amazon Resource Name (ARN) of the network resource.
1034
1096
  */
@@ -1042,7 +1104,7 @@ declare namespace PrivateNetworks {
1042
1104
  */
1043
1105
  shippingAddress?: Address;
1044
1106
  /**
1045
- * The update type. REPLACE - Submits a request to replace a defective radio unit. We provide a shipping label that you can use for the return process and we ship a replacement radio unit to you. RETURN - Submits a request to replace a radio unit that you no longer need. We provide a shipping label that you can use for the return process.
1107
+ * The update type. REPLACE - Submits a request to replace a defective radio unit. We provide a shipping label that you can use for the return process and we ship a replacement radio unit to you. RETURN - Submits a request to return a radio unit that you no longer need. We provide a shipping label that you can use for the return process. COMMITMENT - Submits a request to change or renew the commitment period. If you choose this value, then you must set commitmentConfiguration .
1046
1108
  */
1047
1109
  updateType: UpdateType;
1048
1110
  }
@@ -1128,7 +1190,7 @@ declare namespace PrivateNetworks {
1128
1190
  */
1129
1191
  tags?: TagMap;
1130
1192
  }
1131
- export type UpdateType = "REPLACE"|"RETURN"|string;
1193
+ export type UpdateType = "REPLACE"|"RETURN"|"COMMITMENT"|string;
1132
1194
  /**
1133
1195
  * A string in YYYY-MM-DD format that represents the latest possible API version that can be used in this service. Specify 'latest' to use the latest possible version.
1134
1196
  */
@@ -2190,6 +2190,22 @@ declare namespace RDS {
2190
2190
  * The Active Directory directory ID to create the DB instance in. Currently, only Microsoft SQL Server, MySQL, Oracle, and PostgreSQL DB instances can be created in an Active Directory Domain. For more information, see Kerberos Authentication in the Amazon RDS User Guide. This setting doesn't apply to the following DB instances: Amazon Aurora (The domain is managed by the DB cluster.) RDS Custom
2191
2191
  */
2192
2192
  Domain?: String;
2193
+ /**
2194
+ * Specifies the fully qualified domain name of an Active Directory domain. Constraints: Cannot be greater than 64 characters. Example: mymanagedADtest.mymanagedAD.mydomain
2195
+ */
2196
+ DomainFqdn?: String;
2197
+ /**
2198
+ * The Active Directory organizational unit for your DB instance to join. Constraints: Must be in the distinguished name format. Cannot be greater than 64 characters. Example: OU=mymanagedADtestOU,DC=mymanagedADtest,DC=mymanagedAD,DC=mydomain
2199
+ */
2200
+ DomainOu?: String;
2201
+ /**
2202
+ * The ARN for the Secrets Manager secret that contains the credentials for the user performing the domain join. Example: arn:aws:secretsmanager:region:account-number:secret:myselfmanagedADtestsecret-123456
2203
+ */
2204
+ DomainAuthSecretArn?: String;
2205
+ /**
2206
+ * The IPv4 DNS IP addresses of your primary and secondary Active Directory domain controllers. Constraints: Two IP addresses must be provided. If there isn't a secondary domain controller, use the IP address of the primary domain controller for both entries in the list. Example: 123.124.125.126,234.235.236.237
2207
+ */
2208
+ DomainDnsIps?: StringList;
2193
2209
  /**
2194
2210
  * Spcifies whether to copy tags from the DB instance to snapshots of the DB instance. By default, tags are not copied. This setting doesn't apply to Amazon Aurora DB instances. Copying tags to snapshots is managed by the DB cluster. Setting this value for an Aurora DB instance has no effect on the DB cluster setting.
2195
2211
  */
@@ -2397,6 +2413,22 @@ declare namespace RDS {
2397
2413
  * The name of the IAM role to be used when making API calls to the Directory Service. This setting doesn't apply to RDS Custom.
2398
2414
  */
2399
2415
  DomainIAMRoleName?: String;
2416
+ /**
2417
+ * Specifies the fully qualified domain name of an Active Directory domain. Constraints: Cannot be greater than 64 characters. Example: mymanagedADtest.mymanagedAD.mydomain
2418
+ */
2419
+ DomainFqdn?: String;
2420
+ /**
2421
+ * The Active Directory organizational unit for your DB instance to join. Constraints: Must be in the distinguished name format. Cannot be greater than 64 characters. Example: OU=mymanagedADtestOU,DC=mymanagedADtest,DC=mymanagedAD,DC=mydomain
2422
+ */
2423
+ DomainOu?: String;
2424
+ /**
2425
+ * The ARN for the Secrets Manager secret that contains the credentials for the user performing the domain join. Example: arn:aws:secretsmanager:region:account-number:secret:myselfmanagedADtestsecret-123456
2426
+ */
2427
+ DomainAuthSecretArn?: String;
2428
+ /**
2429
+ * The IPv4 DNS IP addresses of your primary and secondary Active Directory domain controllers. Constraints: Two IP addresses must be provided. If there isn't a secondary domain controller, use the IP address of the primary domain controller for both entries in the list. Example: 123.124.125.126,234.235.236.237
2430
+ */
2431
+ DomainDnsIps?: StringList;
2400
2432
  /**
2401
2433
  * The open mode of the replica database: mounted or read-only. This parameter is only supported for Oracle DB instances. Mounted DB replicas are included in Oracle Database Enterprise Edition. The main use case for mounted replicas is cross-Region disaster recovery. The primary database doesn't use Active Data Guard to transmit information to the mounted replica. Because it doesn't accept user connections, a mounted replica can't serve a read-only workload. You can create a combination of mounted and read-only DB replicas for the same primary DB instance. For more information, see Working with Oracle Read Replicas for Amazon RDS in the Amazon RDS User Guide. For RDS Custom, you must specify this parameter and set it to mounted. The value won't be set by default. After replica creation, you can manage the open mode manually.
2402
2434
  */
@@ -5598,13 +5630,25 @@ declare namespace RDS {
5598
5630
  */
5599
5631
  Status?: String;
5600
5632
  /**
5601
- * The fully qualified domain name of the Active Directory Domain.
5633
+ * The fully qualified domain name (FQDN) of the Active Directory Domain.
5602
5634
  */
5603
5635
  FQDN?: String;
5604
5636
  /**
5605
5637
  * The name of the IAM role to be used when making API calls to the Directory Service.
5606
5638
  */
5607
5639
  IAMRoleName?: String;
5640
+ /**
5641
+ * The Active Directory organizational unit for your DB instance to join.
5642
+ */
5643
+ OU?: String;
5644
+ /**
5645
+ * The ARN for the Secrets Manager secret that contains the credentials for the user performing the domain join.
5646
+ */
5647
+ AuthSecretArn?: String;
5648
+ /**
5649
+ * The IPv4 DNS IP addresses of your primary and secondary Active Directory domain controllers.
5650
+ */
5651
+ DnsIps?: StringList;
5608
5652
  }
5609
5653
  export type DomainMembershipList = DomainMembership[];
5610
5654
  export type Double = number;
@@ -6474,6 +6518,22 @@ declare namespace RDS {
6474
6518
  * The Active Directory directory ID to move the DB instance to. Specify none to remove the instance from its current domain. You must create the domain before this operation. Currently, you can create only MySQL, Microsoft SQL Server, Oracle, and PostgreSQL DB instances in an Active Directory Domain. For more information, see Kerberos Authentication in the Amazon RDS User Guide. This setting doesn't apply to RDS Custom DB instances.
6475
6519
  */
6476
6520
  Domain?: String;
6521
+ /**
6522
+ * Specifies the fully qualified domain name of an Active Directory domain. Constraints: Cannot be greater than 64 characters. Example: mymanagedADtest.mymanagedAD.mydomain
6523
+ */
6524
+ DomainFqdn?: String;
6525
+ /**
6526
+ * The Active Directory organizational unit for your DB instance to join. Constraints: Must be in the distinguished name format. Cannot be greater than 64 characters. Example: OU=mymanagedADtestOU,DC=mymanagedADtest,DC=mymanagedAD,DC=mydomain
6527
+ */
6528
+ DomainOu?: String;
6529
+ /**
6530
+ * The ARN for the Secrets Manager secret that contains the credentials for the user performing the domain join. Example: arn:aws:secretsmanager:region:account-number:secret:myselfmanagedADtestsecret-123456
6531
+ */
6532
+ DomainAuthSecretArn?: String;
6533
+ /**
6534
+ * The IPv4 DNS IP addresses of your primary and secondary Active Directory domain controllers. Constraints: Two IP addresses must be provided. If there isn't a secondary domain controller, use the IP address of the primary domain controller for both entries in the list. Example: 123.124.125.126,234.235.236.237
6535
+ */
6536
+ DomainDnsIps?: StringList;
6477
6537
  /**
6478
6538
  * Specifies whether to copy all tags from the DB instance to snapshots of the DB instance. By default, tags aren't copied. This setting doesn't apply to Amazon Aurora DB instances. Copying tags to snapshots is managed by the DB cluster. Setting this value for an Aurora DB instance has no effect on the DB cluster setting. For more information, see ModifyDBCluster.
6479
6539
  */
@@ -6498,6 +6558,10 @@ declare namespace RDS {
6498
6558
  * The name of the IAM role to use when making API calls to the Directory Service. This setting doesn't apply to RDS Custom DB instances.
6499
6559
  */
6500
6560
  DomainIAMRoleName?: String;
6561
+ /**
6562
+ * Boolean. If present, removes the instance from the Active Directory domain.
6563
+ */
6564
+ DisableDomain?: BooleanOptional;
6501
6565
  /**
6502
6566
  * The order of priority in which an Aurora Replica is promoted to the primary instance after a failure of the existing primary instance. For more information, see Fault Tolerance for an Aurora DB Cluster in the Amazon Aurora User Guide. This setting doesn't apply to RDS Custom DB instances. Default: 1 Valid Values: 0 - 15
6503
6567
  */
@@ -8250,6 +8314,22 @@ declare namespace RDS {
8250
8314
  * Specify the Active Directory directory ID to restore the DB instance in. The domain/ must be created prior to this operation. Currently, you can create only MySQL, Microsoft SQL Server, Oracle, and PostgreSQL DB instances in an Active Directory Domain. For more information, see Kerberos Authentication in the Amazon RDS User Guide. This setting doesn't apply to RDS Custom.
8251
8315
  */
8252
8316
  Domain?: String;
8317
+ /**
8318
+ * Specifies the fully qualified domain name of an Active Directory domain. Constraints: Cannot be greater than 64 characters. Example: mymanagedADtest.mymanagedAD.mydomain
8319
+ */
8320
+ DomainFqdn?: String;
8321
+ /**
8322
+ * The Active Directory organizational unit for your DB instance to join. Constraints: Must be in the distinguished name format. Cannot be greater than 64 characters. Example: OU=mymanagedADtestOU,DC=mymanagedADtest,DC=mymanagedAD,DC=mydomain
8323
+ */
8324
+ DomainOu?: String;
8325
+ /**
8326
+ * The ARN for the Secrets Manager secret that contains the credentials for the user performing the domain join. Constraints: Example: arn:aws:secretsmanager:region:account-number:secret:myselfmanagedADtestsecret-123456
8327
+ */
8328
+ DomainAuthSecretArn?: String;
8329
+ /**
8330
+ * The IPv4 DNS IP addresses of your primary and secondary Active Directory domain controllers. Constraints: Two IP addresses must be provided. If there isn't a secondary domain controller, use the IP address of the primary domain controller for both entries in the list. Example: 123.124.125.126,234.235.236.237
8331
+ */
8332
+ DomainDnsIps?: StringList;
8253
8333
  /**
8254
8334
  * A value that indicates whether to copy all tags from the restored DB instance to snapshots of the DB instance. In most cases, tags aren't copied by default. However, when you restore a DB instance from a DB snapshot, RDS checks whether you specify new tags. If yes, the new tags are added to the restored DB instance. If there are no new tags, RDS looks for the tags from the source DB instance for the DB snapshot, and then adds those tags to the restored DB instance. For more information, see Copying tags to DB instance snapshots in the Amazon RDS User Guide.
8255
8335
  */
@@ -8605,6 +8685,22 @@ declare namespace RDS {
8605
8685
  * Specify the name of the IAM role to be used when making API calls to the Directory Service. This setting doesn't apply to RDS Custom.
8606
8686
  */
8607
8687
  DomainIAMRoleName?: String;
8688
+ /**
8689
+ * Specifies the fully qualified domain name of an Active Directory domain. Constraints: Cannot be greater than 64 characters. Example: mymanagedADtest.mymanagedAD.mydomain
8690
+ */
8691
+ DomainFqdn?: String;
8692
+ /**
8693
+ * The Active Directory organizational unit for your DB instance to join. Constraints: Must be in the distinguished name format. Cannot be greater than 64 characters. Example: OU=mymanagedADtestOU,DC=mymanagedADtest,DC=mymanagedAD,DC=mydomain
8694
+ */
8695
+ DomainOu?: String;
8696
+ /**
8697
+ * The ARN for the Secrets Manager secret that contains the credentials for the user performing the domain join. Constraints: Cannot be greater than 64 characters. Example: arn:aws:secretsmanager:region:account-number:secret:myselfmanagedADtestsecret-123456
8698
+ */
8699
+ DomainAuthSecretArn?: String;
8700
+ /**
8701
+ * The IPv4 DNS IP addresses of your primary and secondary Active Directory domain controllers. Constraints: Two IP addresses must be provided. If there isn't a secondary domain controller, use the IP address of the primary domain controller for both entries in the list. Example: 123.124.125.126,234.235.236.237
8702
+ */
8703
+ DomainDnsIps?: StringList;
8608
8704
  /**
8609
8705
  * A value that indicates whether to enable mapping of Amazon Web Services Identity and Access Management (IAM) accounts to database accounts. By default, mapping isn't enabled. This setting doesn't apply to RDS Custom. For more information about IAM database authentication, see IAM Database Authentication for MySQL and PostgreSQL in the Amazon RDS User Guide.
8610
8706
  */