cdk-comprehend-s3olap 2.0.46 → 2.0.49

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (42) hide show
  1. package/.jsii +5 -5
  2. package/lib/cdk-comprehend-s3olap.js +2 -2
  3. package/lib/comprehend-lambdas.js +2 -2
  4. package/lib/iam-roles.js +4 -4
  5. package/node_modules/aws-sdk/CHANGELOG.md +10 -1
  6. package/node_modules/aws-sdk/README.md +1 -1
  7. package/node_modules/aws-sdk/apis/appsync-2017-07-25.min.json +34 -3
  8. package/node_modules/aws-sdk/apis/detective-2018-10-26.min.json +213 -39
  9. package/node_modules/aws-sdk/apis/detective-2018-10-26.paginators.json +5 -0
  10. package/node_modules/aws-sdk/apis/guardduty-2017-11-28.min.json +776 -162
  11. package/node_modules/aws-sdk/apis/guardduty-2017-11-28.paginators.json +6 -0
  12. package/node_modules/aws-sdk/apis/lookoutvision-2020-11-20.min.json +13 -4
  13. package/node_modules/aws-sdk/apis/macie2-2020-01-01.min.json +149 -6
  14. package/node_modules/aws-sdk/apis/macie2-2020-01-01.waiters2.json +25 -0
  15. package/node_modules/aws-sdk/apis/rekognition-2016-06-27.min.json +7 -1
  16. package/node_modules/aws-sdk/apis/transfer-2018-11-05.min.json +717 -67
  17. package/node_modules/aws-sdk/apis/transfer-2018-11-05.paginators.json +24 -0
  18. package/node_modules/aws-sdk/clients/appsync.d.ts +41 -3
  19. package/node_modules/aws-sdk/clients/autoscaling.d.ts +118 -118
  20. package/node_modules/aws-sdk/clients/detective.d.ts +176 -4
  21. package/node_modules/aws-sdk/clients/guardduty.d.ts +604 -1
  22. package/node_modules/aws-sdk/clients/lookoutvision.d.ts +14 -2
  23. package/node_modules/aws-sdk/clients/macie2.d.ts +131 -9
  24. package/node_modules/aws-sdk/clients/macie2.js +1 -0
  25. package/node_modules/aws-sdk/clients/rds.d.ts +2 -2
  26. package/node_modules/aws-sdk/clients/rekognition.d.ts +12 -4
  27. package/node_modules/aws-sdk/clients/securityhub.d.ts +3 -3
  28. package/node_modules/aws-sdk/clients/transfer.d.ts +1000 -86
  29. package/node_modules/aws-sdk/dist/aws-sdk-core-react-native.js +1 -1
  30. package/node_modules/aws-sdk/dist/aws-sdk-react-native.js +567 -560
  31. package/node_modules/aws-sdk/dist/aws-sdk.js +10 -4
  32. package/node_modules/aws-sdk/dist/aws-sdk.min.js +22 -22
  33. package/node_modules/aws-sdk/lib/core.js +1 -1
  34. package/node_modules/aws-sdk/package.json +1 -1
  35. package/node_modules/esbuild/bin/esbuild +4 -1
  36. package/node_modules/esbuild/install.js +11 -5
  37. package/node_modules/esbuild/lib/main.d.ts +2 -2
  38. package/node_modules/esbuild/lib/main.js +91 -72
  39. package/node_modules/esbuild/package.json +21 -21
  40. package/node_modules/esbuild-linux-64/bin/esbuild +0 -0
  41. package/node_modules/esbuild-linux-64/package.json +1 -1
  42. package/package.json +8 -8
@@ -125,11 +125,11 @@ declare class LookoutVision extends Service {
125
125
  */
126
126
  listModels(callback?: (err: AWSError, data: LookoutVision.Types.ListModelsResponse) => void): Request<LookoutVision.Types.ListModelsResponse, AWSError>;
127
127
  /**
128
- * Lists the Amazon Lookout for Vision projects in your AWS account. The ListProjects operation is eventually consistent. Recent calls to CreateProject and DeleteProject might take a while to appear in the response from ListProjects. This operation requires permissions to perform the lookoutvision:ListProjects operation.
128
+ * Lists the Amazon Lookout for Vision projects in your AWS account that are in the AWS Region in which you call ListProjects. The ListProjects operation is eventually consistent. Recent calls to CreateProject and DeleteProject might take a while to appear in the response from ListProjects. This operation requires permissions to perform the lookoutvision:ListProjects operation.
129
129
  */
130
130
  listProjects(params: LookoutVision.Types.ListProjectsRequest, callback?: (err: AWSError, data: LookoutVision.Types.ListProjectsResponse) => void): Request<LookoutVision.Types.ListProjectsResponse, AWSError>;
131
131
  /**
132
- * Lists the Amazon Lookout for Vision projects in your AWS account. The ListProjects operation is eventually consistent. Recent calls to CreateProject and DeleteProject might take a while to appear in the response from ListProjects. This operation requires permissions to perform the lookoutvision:ListProjects operation.
132
+ * Lists the Amazon Lookout for Vision projects in your AWS account that are in the AWS Region in which you call ListProjects. The ListProjects operation is eventually consistent. Recent calls to CreateProject and DeleteProject might take a while to appear in the response from ListProjects. This operation requires permissions to perform the lookoutvision:ListProjects operation.
133
133
  */
134
134
  listProjects(callback?: (err: AWSError, data: LookoutVision.Types.ListProjectsResponse) => void): Request<LookoutVision.Types.ListProjectsResponse, AWSError>;
135
135
  /**
@@ -759,6 +759,14 @@ declare namespace LookoutVision {
759
759
  * The identifer for the AWS Key Management Service (AWS KMS) key that was used to encrypt the model during training.
760
760
  */
761
761
  KmsKeyId?: KmsKeyId;
762
+ /**
763
+ * The minimum number of inference units used by the model. For more information, see StartModel
764
+ */
765
+ MinInferenceUnits?: InferenceUnits;
766
+ /**
767
+ * The maximum number of inference units Amazon Lookout for Vision uses to auto-scale the model. For more information, see StartModel.
768
+ */
769
+ MaxInferenceUnits?: InferenceUnits;
762
770
  }
763
771
  export type ModelDescriptionMessage = string;
764
772
  export type ModelHostingStatus = "STARTING_HOSTING"|"HOSTED"|"HOSTING_FAILED"|"STOPPING_HOSTING"|"SYSTEM_UPDATING"|string;
@@ -1030,6 +1038,10 @@ declare namespace LookoutVision {
1030
1038
  * ClientToken is an idempotency token that ensures a call to StartModel completes only once. You choose the value to pass. For example, An issue might prevent you from getting a response from StartModel. In this case, safely retry your call to StartModel by using the same ClientToken parameter value. If you don't supply a value for ClientToken, the AWS SDK you are using inserts a value for you. This prevents retries after a network error from making multiple start requests. You'll need to provide your own value for other use cases. An error occurs if the other input parameters are not the same as in the first request. Using a different value for ClientToken is considered a new call to StartModel. An idempotency token is active for 8 hours.
1031
1039
  */
1032
1040
  ClientToken?: ClientToken;
1041
+ /**
1042
+ * The maximum number of inference units to use for auto-scaling the model. If you don't specify a value, Amazon Lookout for Vision doesn't auto-scale the model.
1043
+ */
1044
+ MaxInferenceUnits?: InferenceUnits;
1033
1045
  }
1034
1046
  export interface StartModelResponse {
1035
1047
  /**
@@ -2,6 +2,7 @@ import {Request} from '../lib/request';
2
2
  import {Response} from '../lib/response';
3
3
  import {AWSError} from '../lib/error';
4
4
  import {Service} from '../lib/service';
5
+ import {WaiterConfiguration} from '../lib/service';
5
6
  import {ServiceConfigurationOptions} from '../lib/service';
6
7
  import {ConfigBase as Config} from '../lib/config-base';
7
8
  interface Blob {}
@@ -291,6 +292,30 @@ declare class Macie2 extends Service {
291
292
  * Retrieves information about an account that's associated with an Amazon Macie administrator account.
292
293
  */
293
294
  getMember(callback?: (err: AWSError, data: Macie2.Types.GetMemberResponse) => void): Request<Macie2.Types.GetMemberResponse, AWSError>;
295
+ /**
296
+ * Retrieves the status and configuration settings for retrieving (revealing) occurrences of sensitive data reported by findings.
297
+ */
298
+ getRevealConfiguration(params: Macie2.Types.GetRevealConfigurationRequest, callback?: (err: AWSError, data: Macie2.Types.GetRevealConfigurationResponse) => void): Request<Macie2.Types.GetRevealConfigurationResponse, AWSError>;
299
+ /**
300
+ * Retrieves the status and configuration settings for retrieving (revealing) occurrences of sensitive data reported by findings.
301
+ */
302
+ getRevealConfiguration(callback?: (err: AWSError, data: Macie2.Types.GetRevealConfigurationResponse) => void): Request<Macie2.Types.GetRevealConfigurationResponse, AWSError>;
303
+ /**
304
+ * Retrieves (reveals) occurrences of sensitive data reported by a finding.
305
+ */
306
+ getSensitiveDataOccurrences(params: Macie2.Types.GetSensitiveDataOccurrencesRequest, callback?: (err: AWSError, data: Macie2.Types.GetSensitiveDataOccurrencesResponse) => void): Request<Macie2.Types.GetSensitiveDataOccurrencesResponse, AWSError>;
307
+ /**
308
+ * Retrieves (reveals) occurrences of sensitive data reported by a finding.
309
+ */
310
+ getSensitiveDataOccurrences(callback?: (err: AWSError, data: Macie2.Types.GetSensitiveDataOccurrencesResponse) => void): Request<Macie2.Types.GetSensitiveDataOccurrencesResponse, AWSError>;
311
+ /**
312
+ * Checks whether occurrences of sensitive data can be retrieved (revealed) for a finding.
313
+ */
314
+ getSensitiveDataOccurrencesAvailability(params: Macie2.Types.GetSensitiveDataOccurrencesAvailabilityRequest, callback?: (err: AWSError, data: Macie2.Types.GetSensitiveDataOccurrencesAvailabilityResponse) => void): Request<Macie2.Types.GetSensitiveDataOccurrencesAvailabilityResponse, AWSError>;
315
+ /**
316
+ * Checks whether occurrences of sensitive data can be retrieved (revealed) for a finding.
317
+ */
318
+ getSensitiveDataOccurrencesAvailability(callback?: (err: AWSError, data: Macie2.Types.GetSensitiveDataOccurrencesAvailabilityResponse) => void): Request<Macie2.Types.GetSensitiveDataOccurrencesAvailabilityResponse, AWSError>;
294
319
  /**
295
320
  * Retrieves (queries) quotas and aggregated usage data for one or more accounts.
296
321
  */
@@ -467,6 +492,22 @@ declare class Macie2 extends Service {
467
492
  * Updates the Amazon Macie configuration settings for an organization in Organizations.
468
493
  */
469
494
  updateOrganizationConfiguration(callback?: (err: AWSError, data: Macie2.Types.UpdateOrganizationConfigurationResponse) => void): Request<Macie2.Types.UpdateOrganizationConfigurationResponse, AWSError>;
495
+ /**
496
+ * Updates the status and configuration settings for retrieving (revealing) occurrences of sensitive data reported by findings.
497
+ */
498
+ updateRevealConfiguration(params: Macie2.Types.UpdateRevealConfigurationRequest, callback?: (err: AWSError, data: Macie2.Types.UpdateRevealConfigurationResponse) => void): Request<Macie2.Types.UpdateRevealConfigurationResponse, AWSError>;
499
+ /**
500
+ * Updates the status and configuration settings for retrieving (revealing) occurrences of sensitive data reported by findings.
501
+ */
502
+ updateRevealConfiguration(callback?: (err: AWSError, data: Macie2.Types.UpdateRevealConfigurationResponse) => void): Request<Macie2.Types.UpdateRevealConfigurationResponse, AWSError>;
503
+ /**
504
+ * Waits for the findingRevealed state by periodically calling the underlying Macie2.getSensitiveDataOccurrencesoperation every 2 seconds (at most 60 times). Wait until the sensitive data occurrences are ready.
505
+ */
506
+ waitFor(state: "findingRevealed", params: Macie2.Types.GetSensitiveDataOccurrencesRequest & {$waiter?: WaiterConfiguration}, callback?: (err: AWSError, data: Macie2.Types.GetSensitiveDataOccurrencesResponse) => void): Request<Macie2.Types.GetSensitiveDataOccurrencesResponse, AWSError>;
507
+ /**
508
+ * Waits for the findingRevealed state by periodically calling the underlying Macie2.getSensitiveDataOccurrencesoperation every 2 seconds (at most 60 times). Wait until the sensitive data occurrences are ready.
509
+ */
510
+ waitFor(state: "findingRevealed", callback?: (err: AWSError, data: Macie2.Types.GetSensitiveDataOccurrencesResponse) => void): Request<Macie2.Types.GetSensitiveDataOccurrencesResponse, AWSError>;
470
511
  }
471
512
  declare namespace Macie2 {
472
513
  export interface AcceptInvitationRequest {
@@ -563,6 +604,7 @@ declare namespace Macie2 {
563
604
  */
564
605
  sessionContext?: SessionContext;
565
606
  }
607
+ export type AvailabilityCode = "AVAILABLE"|"UNAVAILABLE"|string;
566
608
  export interface AwsAccount {
567
609
  /**
568
610
  * The unique identifier for the Amazon Web Services account.
@@ -1058,11 +1100,11 @@ declare namespace Macie2 {
1058
1100
  */
1059
1101
  ignoreWords?: __listOf__string;
1060
1102
  /**
1061
- * An array that lists specific character sequences (keywords), one of which must be within proximity (maximumMatchDistance) of the regular expression to match. The array can contain as many as 50 keywords. Each keyword can contain 3-90 UTF-8 characters. Keywords aren't case sensitive.
1103
+ * An array that lists specific character sequences (keywords), one of which must precede and be within proximity (maximumMatchDistance) of the regular expression to match. The array can contain as many as 50 keywords. Each keyword can contain 3-90 UTF-8 characters. Keywords aren't case sensitive.
1062
1104
  */
1063
1105
  keywords?: __listOf__string;
1064
1106
  /**
1065
- * The maximum number of characters that can exist between text that matches the regular expression and the character sequences specified by the keywords array. Amazon Macie includes or excludes a result based on the proximity of a keyword to text that matches the regular expression. The distance can be 1-300 characters. The default value is 50.
1107
+ * The maximum number of characters that can exist between the end of at least one complete character sequence specified by the keywords array and the end of the text that matches the regex pattern. If a complete keyword precedes all the text that matches the pattern and the keyword is within the specified distance, Amazon Macie includes the result. The distance can be 1-300 characters. The default value is 50.
1066
1108
  */
1067
1109
  maximumMatchDistance?: __integer;
1068
1110
  /**
@@ -1414,7 +1456,7 @@ declare namespace Macie2 {
1414
1456
  */
1415
1457
  lastRunErrorStatus?: LastRunErrorStatus;
1416
1458
  /**
1417
- * The date and time, in UTC and extended ISO 8601 format, when the job started. If the job is a recurring job, this value indicates when the most recent run started.
1459
+ * The date and time, in UTC and extended ISO 8601 format, when the job started. If the job is a recurring job, this value indicates when the most recent run started or, if the job hasn't run yet, when the job was created.
1418
1460
  */
1419
1461
  lastRunTime?: __timestampIso8601;
1420
1462
  /**
@@ -1466,6 +1508,12 @@ declare namespace Macie2 {
1466
1508
  */
1467
1509
  maxAccountLimitReached?: __boolean;
1468
1510
  }
1511
+ export interface DetectedDataDetails {
1512
+ /**
1513
+ * An occurrence of the specified type of sensitive data. Each occurrence can contain 1-128 characters.
1514
+ */
1515
+ value: __stringMin1Max128;
1516
+ }
1469
1517
  export interface DisableMacieRequest {
1470
1518
  }
1471
1519
  export interface DisableMacieResponse {
@@ -1803,11 +1851,11 @@ declare namespace Macie2 {
1803
1851
  */
1804
1852
  ignoreWords?: __listOf__string;
1805
1853
  /**
1806
- * An array that lists specific character sequences (keywords), one of which must be within proximity (maximumMatchDistance) of the regular expression to match. Keywords aren't case sensitive.
1854
+ * An array that lists specific character sequences (keywords), one of which must precede and be within proximity (maximumMatchDistance) of the regular expression to match. Keywords aren't case sensitive.
1807
1855
  */
1808
1856
  keywords?: __listOf__string;
1809
1857
  /**
1810
- * The maximum number of characters that can exist between text that matches the regular expression and the character sequences specified by the keywords array. Amazon Macie includes or excludes a result based on the proximity of a keyword to text that matches the regular expression.
1858
+ * The maximum number of characters that can exist between the end of at least one complete character sequence specified by the keywords array and the end of the text that matches the regex pattern. If a complete keyword precedes all the text that matches the pattern and the keyword is within the specified distance, Amazon Macie includes the result. Otherwise, Macie excludes the result.
1811
1859
  */
1812
1860
  maximumMatchDistance?: __integer;
1813
1861
  /**
@@ -1999,6 +2047,50 @@ declare namespace Macie2 {
1999
2047
  */
2000
2048
  updatedAt?: __timestampIso8601;
2001
2049
  }
2050
+ export interface GetRevealConfigurationRequest {
2051
+ }
2052
+ export interface GetRevealConfigurationResponse {
2053
+ /**
2054
+ * The current configuration settings and the status of the configuration for the account.
2055
+ */
2056
+ configuration?: RevealConfiguration;
2057
+ }
2058
+ export interface GetSensitiveDataOccurrencesAvailabilityRequest {
2059
+ /**
2060
+ * The unique identifier for the finding.
2061
+ */
2062
+ findingId: __string;
2063
+ }
2064
+ export interface GetSensitiveDataOccurrencesAvailabilityResponse {
2065
+ /**
2066
+ * Specifies whether occurrences of sensitive data can be retrieved for the finding. Possible values are: AVAILABLE, the sensitive data can be retrieved; and, UNAVAILABLE, the sensitive data can't be retrieved. If this value is UNAVAILABLE, the reasons array indicates why the data can't be retrieved.
2067
+ */
2068
+ code?: AvailabilityCode;
2069
+ /**
2070
+ * Specifies why occurrences of sensitive data can't be retrieved for the finding. Possible values are: INVALID_CLASSIFICATION_RESULT - Amazon Macie can't verify the location of the sensitive data to retrieve. There isn't a corresponding sensitive data discovery result for the finding. Or the sensitive data discovery result specified by the ClassificationDetails.detailedResultsLocation field of the finding isn't available, is malformed or corrupted, or uses an unsupported storage format. OBJECT_EXCEEDS_SIZE_QUOTA - The storage size of the affected S3 object exceeds the size quota for retrieving occurrences of sensitive data. OBJECT_UNAVAILABLE - The affected S3 object isn't available. The object might have been renamed, moved, or deleted. Or the object was changed after Amazon Macie created the finding. UNSUPPORTED_FINDING_TYPE - The specified finding isn't a sensitive data finding. UNSUPPORTED_OBJECT_TYPE - The affected S3 object uses a file or storage format that Macie doesn't support for retrieving occurrences of sensitive data. This value is null if sensitive data can be retrieved for the finding.
2071
+ */
2072
+ reasons?: __listOfUnavailabilityReasonCode;
2073
+ }
2074
+ export interface GetSensitiveDataOccurrencesRequest {
2075
+ /**
2076
+ * The unique identifier for the finding.
2077
+ */
2078
+ findingId: __string;
2079
+ }
2080
+ export interface GetSensitiveDataOccurrencesResponse {
2081
+ /**
2082
+ * If an error occurred when Amazon Macie attempted to retrieve occurrences of sensitive data reported by the finding, a description of the error that occurred. This value is null if the status (status) of the request is PROCESSING or SUCCESS.
2083
+ */
2084
+ error?: __string;
2085
+ /**
2086
+ * A map that specifies 1-100 types of sensitive data reported by the finding and, for each type, 1-10 occurrences of sensitive data.
2087
+ */
2088
+ sensitiveDataOccurrences?: SensitiveDataOccurrences;
2089
+ /**
2090
+ * The status of the request to retrieve occurrences of sensitive data reported by the finding. Possible values are: ERROR - An error occurred when Amazon Macie attempted to locate, retrieve, or encrypt the sensitive data. The error value indicates the nature of the error that occurred. PROCESSING - Macie is processing the request. SUCCESS - Macie successfully located, retrieved, and encrypted the sensitive data.
2091
+ */
2092
+ status?: RevealRequestStatus;
2093
+ }
2002
2094
  export interface GetUsageStatisticsRequest {
2003
2095
  /**
2004
2096
  * An array of objects, one for each condition to use to filter the query results. If you specify more than one condition, Amazon Macie uses an AND operator to join the conditions.
@@ -2169,7 +2261,7 @@ declare namespace Macie2 {
2169
2261
  export type JobComparator = "EQ"|"GT"|"GTE"|"LT"|"LTE"|"NE"|"CONTAINS"|"STARTS_WITH"|string;
2170
2262
  export interface JobDetails {
2171
2263
  /**
2172
- * Specifies whether any one-time or recurring jobs are configured to analyze data in the bucket. Possible values are: TRUE - The bucket is explicitly included in the bucket definition (S3BucketDefinitionForJob) for one or more jobs and at least one of those jobs has a status other than CANCELLED. Or the bucket matched the bucket criteria (S3BucketCriteriaForJob) for at least one job that previously ran. FALSE - The bucket isn't explicitly included in the bucket definition (S3BucketDefinitionForJob) for any jobs, all the jobs that explicitly include the bucket in their bucket definitions have a status of CANCELLED, or the bucket didn't match the bucket criteria (S3BucketCriteriaForJob) for any jobs that previously ran. UNKNOWN - An exception occurred when Amazon Macie attempted to retrieve job data for the bucket.
2264
+ * Specifies whether any one-time or recurring jobs are configured to analyze data in the bucket. Possible values are: TRUE - The bucket is explicitly included in the bucket definition (S3BucketDefinitionForJob) for one or more jobs and at least one of those jobs has a status other than CANCELLED. Or the bucket matched the bucket criteria (S3BucketCriteriaForJob) for at least one job that previously ran. FALSE - The bucket isn't explicitly included in the bucket definition (S3BucketDefinitionForJob) for any jobs, all the jobs that explicitly include the bucket in their bucket definitions have a status of CANCELLED, or the bucket didn't match the bucket criteria (S3BucketCriteriaForJob) for any jobs that previously ran. UNKNOWN - An exception occurred when Amazon Macie attempted to retrieve job data for the bucket.
2173
2265
  */
2174
2266
  isDefinedInJob?: IsDefinedInJob;
2175
2267
  /**
@@ -2774,6 +2866,18 @@ declare namespace Macie2 {
2774
2866
  */
2775
2867
  s3Object?: S3Object;
2776
2868
  }
2869
+ export interface RevealConfiguration {
2870
+ /**
2871
+ * The Amazon Resource Name (ARN), ID, or alias of the KMS key to use to encrypt sensitive data that's retrieved. The key must be an existing, customer managed, symmetric encryption key that's in the same Amazon Web Services Region as the Amazon Macie account. If this value specifies an alias, it must include the following prefix: alias/. If this value specifies a key that's owned by another Amazon Web Services account, it must specify the ARN of the key or the ARN of the key's alias.
2872
+ */
2873
+ kmsKeyId?: __stringMin1Max2048;
2874
+ /**
2875
+ * The status of the configuration for the Amazon Macie account. In a request, valid values are: ENABLED, enable the configuration for the account; and, DISABLED, disable the configuration for the account. In a response, possible values are: ENABLED, the configuration is currently enabled for the account; and, DISABLED, the configuration is currently disabled for the account.
2876
+ */
2877
+ status: RevealStatus;
2878
+ }
2879
+ export type RevealRequestStatus = "SUCCESS"|"PROCESSING"|"ERROR"|string;
2880
+ export type RevealStatus = "ENABLED"|"DISABLED"|string;
2777
2881
  export interface S3Bucket {
2778
2882
  /**
2779
2883
  * Specifies whether the bucket policy for the bucket requires server-side encryption of objects when objects are uploaded to the bucket. Possible values are: FALSE - The bucket policy requires server-side encryption of new objects. PutObject requests must include the x-amz-server-side-encryption header and the value for that header must be AES256 or aws:kms. TRUE - The bucket doesn't have a bucket policy or it has a bucket policy that doesn't require server-side encryption of new objects. If a bucket policy exists, it doesn't require PutObject requests to include the x-amz-server-side-encryption header and it doesn't require the value for that header to be AES256 or aws:kms. UNKNOWN - Amazon Macie can't determine whether the bucket policy requires server-side encryption of objects.
@@ -2848,7 +2952,7 @@ declare namespace Macie2 {
2848
2952
  */
2849
2953
  keyPrefix?: __string;
2850
2954
  /**
2851
- * The Amazon Resource Name (ARN) of the KMS key to use for encryption of the results. This must be the ARN of an existing, symmetric, customer managed KMS key that's in the same Amazon Web Services Region as the bucket.
2955
+ * The Amazon Resource Name (ARN) of the customer managed KMS key to use for encryption of the results. This must be the ARN of an existing, symmetric encryption KMS key that's in the same Amazon Web Services Region as the bucket.
2852
2956
  */
2853
2957
  kmsKeyArn: __string;
2854
2958
  }
@@ -3054,6 +3158,7 @@ declare namespace Macie2 {
3054
3158
  totalCount?: __long;
3055
3159
  }
3056
3160
  export type SensitiveDataItemCategory = "FINANCIAL_INFORMATION"|"PERSONAL_INFORMATION"|"CREDENTIALS"|"CUSTOM_IDENTIFIER"|string;
3161
+ export type SensitiveDataOccurrences = {[key: string]: __listOfDetectedDataDetails};
3057
3162
  export interface ServerSideEncryption {
3058
3163
  /**
3059
3164
  * The server-side encryption algorithm that's used when storing data in the bucket or object. If default encryption is disabled for the bucket or the object isn't encrypted using server-side encryption, this value is NONE.
@@ -3261,11 +3366,11 @@ declare namespace Macie2 {
3261
3366
  */
3262
3367
  ignoreWords?: __listOf__string;
3263
3368
  /**
3264
- * An array that lists specific character sequences (keywords), one of which must be within proximity (maximumMatchDistance) of the regular expression to match. The array can contain as many as 50 keywords. Each keyword can contain 3-90 UTF-8 characters. Keywords aren't case sensitive.
3369
+ * An array that lists specific character sequences (keywords), one of which must precede and be within proximity (maximumMatchDistance) of the regular expression to match. The array can contain as many as 50 keywords. Each keyword can contain 3-90 UTF-8 characters. Keywords aren't case sensitive.
3265
3370
  */
3266
3371
  keywords?: __listOf__string;
3267
3372
  /**
3268
- * The maximum number of characters that can exist between text that matches the regular expression and the character sequences specified by the keywords array. Amazon Macie includes or excludes a result based on the proximity of a keyword to text that matches the regular expression. The distance can be 1-300 characters. The default value is 50.
3373
+ * The maximum number of characters that can exist between the end of at least one complete character sequence specified by the keywords array and the end of the text that matches the regex pattern. If a complete keyword precedes all the text that matches the pattern and the keyword is within the specified distance, Amazon Macie includes the result. The distance can be 1-300 characters. The default value is 50.
3269
3374
  */
3270
3375
  maximumMatchDistance?: __integer;
3271
3376
  /**
@@ -3285,6 +3390,7 @@ declare namespace Macie2 {
3285
3390
  }
3286
3391
  export type TimeRange = "MONTH_TO_DATE"|"PAST_30_DAYS"|string;
3287
3392
  export type Type = "NONE"|"AES256"|"aws:kms"|string;
3393
+ export type UnavailabilityReasonCode = "OBJECT_EXCEEDS_SIZE_QUOTA"|"UNSUPPORTED_OBJECT_TYPE"|"UNSUPPORTED_FINDING_TYPE"|"INVALID_CLASSIFICATION_RESULT"|"OBJECT_UNAVAILABLE"|string;
3288
3394
  export type Unit = "TERABYTES"|string;
3289
3395
  export interface UnprocessedAccount {
3290
3396
  /**
@@ -3396,6 +3502,18 @@ declare namespace Macie2 {
3396
3502
  }
3397
3503
  export interface UpdateOrganizationConfigurationResponse {
3398
3504
  }
3505
+ export interface UpdateRevealConfigurationRequest {
3506
+ /**
3507
+ * The new configuration settings and the status of the configuration for the account.
3508
+ */
3509
+ configuration: RevealConfiguration;
3510
+ }
3511
+ export interface UpdateRevealConfigurationResponse {
3512
+ /**
3513
+ * The new configuration settings and the status of the configuration for the account.
3514
+ */
3515
+ configuration?: RevealConfiguration;
3516
+ }
3399
3517
  export interface UsageByAccount {
3400
3518
  /**
3401
3519
  * The type of currency that the value for the metric (estimatedCost) is reported in.
@@ -3543,6 +3661,7 @@ declare namespace Macie2 {
3543
3661
  export type __listOfBucketMetadata = BucketMetadata[];
3544
3662
  export type __listOfCriteriaForJob = CriteriaForJob[];
3545
3663
  export type __listOfCustomDataIdentifierSummary = CustomDataIdentifierSummary[];
3664
+ export type __listOfDetectedDataDetails = DetectedDataDetails[];
3546
3665
  export type __listOfFinding = Finding[];
3547
3666
  export type __listOfFindingType = FindingType[];
3548
3667
  export type __listOfFindingsFilterListItem = FindingsFilterListItem[];
@@ -3560,6 +3679,7 @@ declare namespace Macie2 {
3560
3679
  export type __listOfSearchResourcesTagCriterionPair = SearchResourcesTagCriterionPair[];
3561
3680
  export type __listOfTagCriterionPairForJob = TagCriterionPairForJob[];
3562
3681
  export type __listOfTagValuePair = TagValuePair[];
3682
+ export type __listOfUnavailabilityReasonCode = UnavailabilityReasonCode[];
3563
3683
  export type __listOfUnprocessedAccount = UnprocessedAccount[];
3564
3684
  export type __listOfUsageByAccount = UsageByAccount[];
3565
3685
  export type __listOfUsageRecord = UsageRecord[];
@@ -3568,6 +3688,8 @@ declare namespace Macie2 {
3568
3688
  export type __listOf__string = __string[];
3569
3689
  export type __long = number;
3570
3690
  export type __string = string;
3691
+ export type __stringMin1Max128 = string;
3692
+ export type __stringMin1Max2048 = string;
3571
3693
  export type __timestampIso8601 = Date;
3572
3694
  /**
3573
3695
  * A string in YYYY-MM-DD format that represents the latest possible API version that can be used in this service. Specify 'latest' to use the latest possible version.
@@ -9,6 +9,7 @@ Object.defineProperty(apiLoader.services['macie2'], '2020-01-01', {
9
9
  get: function get() {
10
10
  var model = require('../apis/macie2-2020-01-01.min.json');
11
11
  model.paginators = require('../apis/macie2-2020-01-01.paginators.json').pagination;
12
+ model.waiters = require('../apis/macie2-2020-01-01.waiters2.json').waiters;
12
13
  return model;
13
14
  },
14
15
  enumerable: true,
@@ -2282,7 +2282,7 @@ declare namespace RDS {
2282
2282
  */
2283
2283
  DBProxyName: String;
2284
2284
  /**
2285
- * The kinds of databases that the proxy can connect to. This value determines which database network protocol the proxy recognizes when it interprets network traffic to and from the database. For Aurora MySQL and RDS for MySQL databases, specify MYSQL. For Aurora PostgreSQL and RDS for PostgreSQL databases, specify POSTGRESQL.
2285
+ * The kinds of databases that the proxy can connect to. This value determines which database network protocol the proxy recognizes when it interprets network traffic to and from the database. For Aurora MySQL, RDS for MariaDB, and RDS for MySQL databases, specify MYSQL. For Aurora PostgreSQL and RDS for PostgreSQL databases, specify POSTGRESQL.
2286
2286
  */
2287
2287
  EngineFamily: EngineFamily;
2288
2288
  /**
@@ -3726,7 +3726,7 @@ declare namespace RDS {
3726
3726
  */
3727
3727
  Status?: DBProxyStatus;
3728
3728
  /**
3729
- * The kinds of databases that the proxy can connect to. This value determines which database network protocol the proxy recognizes when it interprets network traffic to and from the database. MYSQL supports Aurora MySQL and RDS for MySQL databases. POSTGRESQL supports Aurora PostgreSQL and RDS for PostgreSQL databases.
3729
+ * The kinds of databases that the proxy can connect to. This value determines which database network protocol the proxy recognizes when it interprets network traffic to and from the database. MYSQL supports Aurora MySQL, RDS for MariaDB, and RDS for MySQL databases. POSTGRESQL supports Aurora PostgreSQL and RDS for PostgreSQL databases.
3730
3730
  */
3731
3731
  EngineFamily?: String;
3732
3732
  /**
@@ -405,11 +405,11 @@ declare class Rekognition extends Service {
405
405
  */
406
406
  startPersonTracking(callback?: (err: AWSError, data: Rekognition.Types.StartPersonTrackingResponse) => void): Request<Rekognition.Types.StartPersonTrackingResponse, AWSError>;
407
407
  /**
408
- * Starts the running of the version of a model. Starting a model takes a while to complete. To check the current state of the model, use DescribeProjectVersions. Once the model is running, you can detect custom labels in new images by calling DetectCustomLabels. You are charged for the amount of time that the model is running. To stop a running model, call StopProjectVersion. This operation requires permissions to perform the rekognition:StartProjectVersion action.
408
+ * Starts the running of the version of a model. Starting a model takes a while to complete. To check the current state of the model, use DescribeProjectVersions. Once the model is running, you can detect custom labels in new images by calling DetectCustomLabels. You are charged for the amount of time that the model is running. To stop a running model, call StopProjectVersion. For more information, see Running a trained Amazon Rekognition Custom Labels model in the Amazon Rekognition Custom Labels Guide. This operation requires permissions to perform the rekognition:StartProjectVersion action.
409
409
  */
410
410
  startProjectVersion(params: Rekognition.Types.StartProjectVersionRequest, callback?: (err: AWSError, data: Rekognition.Types.StartProjectVersionResponse) => void): Request<Rekognition.Types.StartProjectVersionResponse, AWSError>;
411
411
  /**
412
- * Starts the running of the version of a model. Starting a model takes a while to complete. To check the current state of the model, use DescribeProjectVersions. Once the model is running, you can detect custom labels in new images by calling DetectCustomLabels. You are charged for the amount of time that the model is running. To stop a running model, call StopProjectVersion. This operation requires permissions to perform the rekognition:StartProjectVersion action.
412
+ * Starts the running of the version of a model. Starting a model takes a while to complete. To check the current state of the model, use DescribeProjectVersions. Once the model is running, you can detect custom labels in new images by calling DetectCustomLabels. You are charged for the amount of time that the model is running. To stop a running model, call StopProjectVersion. For more information, see Running a trained Amazon Rekognition Custom Labels model in the Amazon Rekognition Custom Labels Guide. This operation requires permissions to perform the rekognition:StartProjectVersion action.
413
413
  */
414
414
  startProjectVersion(callback?: (err: AWSError, data: Rekognition.Types.StartProjectVersionResponse) => void): Request<Rekognition.Types.StartProjectVersionResponse, AWSError>;
415
415
  /**
@@ -911,7 +911,7 @@ declare namespace Rekognition {
911
911
  */
912
912
  KmsKeyId?: KmsKeyId;
913
913
  /**
914
- * Specifies locations in the frames where Amazon Rekognition checks for objects or people. You can specify up to 10 regions of interest. This is an optional parameter for label detection stream processors and should not be used to create a face search stream processor.
914
+ * Specifies locations in the frames where Amazon Rekognition checks for objects or people. You can specify up to 10 regions of interest, and each region has either a polygon or a bounding box. This is an optional parameter for label detection stream processors and should not be used to create a face search stream processor.
915
915
  */
916
916
  RegionsOfInterest?: RegionsOfInterest;
917
917
  /**
@@ -2590,6 +2590,10 @@ declare namespace Rekognition {
2590
2590
  * The identifer for the AWS Key Management Service key (AWS KMS key) that was used to encrypt the model during training.
2591
2591
  */
2592
2592
  KmsKeyId?: KmsKeyId;
2593
+ /**
2594
+ * The maximum number of inference units Amazon Rekognition Custom Labels uses to auto-scale the model. For more information, see StartProjectVersion.
2595
+ */
2596
+ MaxInferenceUnits?: InferenceUnits;
2593
2597
  }
2594
2598
  export type ProjectVersionDescriptions = ProjectVersionDescription[];
2595
2599
  export type ProjectVersionStatus = "TRAINING_IN_PROGRESS"|"TRAINING_COMPLETED"|"TRAINING_FAILED"|"STARTING"|"RUNNING"|"FAILED"|"STOPPING"|"STOPPED"|"DELETING"|string;
@@ -3049,9 +3053,13 @@ declare namespace Rekognition {
3049
3053
  */
3050
3054
  ProjectVersionArn: ProjectVersionArn;
3051
3055
  /**
3052
- * The minimum number of inference units to use. A single inference unit represents 1 hour of processing and can support up to 5 Transaction Pers Second (TPS). Use a higher number to increase the TPS throughput of your model. You are charged for the number of inference units that you use.
3056
+ * The minimum number of inference units to use. A single inference unit represents 1 hour of processing. For information about the number of transactions per second (TPS) that an inference unit can support, see Running a trained Amazon Rekognition Custom Labels model in the Amazon Rekognition Custom Labels Guide. Use a higher number to increase the TPS throughput of your model. You are charged for the number of inference units that you use.
3053
3057
  */
3054
3058
  MinInferenceUnits: InferenceUnits;
3059
+ /**
3060
+ * The maximum number of inference units to use for auto-scaling the model. If you don't specify a value, Amazon Rekognition Custom Labels doesn't auto-scale the model.
3061
+ */
3062
+ MaxInferenceUnits?: InferenceUnits;
3055
3063
  }
3056
3064
  export interface StartProjectVersionResponse {
3057
3065
  /**
@@ -8713,7 +8713,7 @@ declare namespace SecurityHub {
8713
8713
  }
8714
8714
  export interface AwsWafRegionalWebAclRulesListDetails {
8715
8715
  /**
8716
- * The action that AWS WAF takes when a web request matches all conditions in the rule, such as allow, block, or count the request.
8716
+ * The action that WAF takes when a web request matches all conditions in the rule, such as allow, block, or count the request.
8717
8717
  */
8718
8718
  Action?: AwsWafRegionalWebAclRulesListActionDetails;
8719
8719
  /**
@@ -8974,11 +8974,11 @@ declare namespace SecurityHub {
8974
8974
  */
8975
8975
  FindingIdentifier: AwsSecurityFindingIdentifier;
8976
8976
  /**
8977
- * The code associated with the error.
8977
+ * The code associated with the error. Possible values are: ConcurrentUpdateError - Another process or request attempted to update the finding while this request was being processed DuplicatedFindingIdentifier - The request included two or more findings with the same FindingIdentifier FindingNotFound - The FindingIdentifier included in the request did not match an existing finding FindingSizeExceeded - The finding size was greater than the permissible value of 240 KB InternalFailure - An internal service failure occurred when updating the finding InvalidInput - The finding update contained an invalid value that did not satisfy the Amazon Web Services Security Finding Format syntax
8978
8978
  */
8979
8979
  ErrorCode: NonEmptyString;
8980
8980
  /**
8981
- * The message associated with the error.
8981
+ * The message associated with the error. Possible values are: Concurrent finding updates detected Finding Identifier is duplicated Finding Not Found Finding size exceeded 240 KB Internal service failure Invalid Input
8982
8982
  */
8983
8983
  ErrorMessage: NonEmptyString;
8984
8984
  }