cdk-comprehend-s3olap 2.0.47 → 2.0.50

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (56) hide show
  1. package/.jsii +5 -5
  2. package/lib/cdk-comprehend-s3olap.js +2 -2
  3. package/lib/comprehend-lambdas.js +2 -2
  4. package/lib/iam-roles.js +4 -4
  5. package/node_modules/aws-sdk/CHANGELOG.md +20 -1
  6. package/node_modules/aws-sdk/README.md +1 -1
  7. package/node_modules/aws-sdk/apis/appsync-2017-07-25.min.json +34 -3
  8. package/node_modules/aws-sdk/apis/chime-2018-05-01.min.json +116 -0
  9. package/node_modules/aws-sdk/apis/config-2014-11-12.min.json +67 -20
  10. package/node_modules/aws-sdk/apis/config-2014-11-12.paginators.json +5 -0
  11. package/node_modules/aws-sdk/apis/detective-2018-10-26.min.json +213 -39
  12. package/node_modules/aws-sdk/apis/detective-2018-10-26.paginators.json +5 -0
  13. package/node_modules/aws-sdk/apis/globalaccelerator-2018-08-08.min.json +70 -53
  14. package/node_modules/aws-sdk/apis/guardduty-2017-11-28.min.json +776 -162
  15. package/node_modules/aws-sdk/apis/guardduty-2017-11-28.paginators.json +6 -0
  16. package/node_modules/aws-sdk/apis/lookoutvision-2020-11-20.min.json +13 -4
  17. package/node_modules/aws-sdk/apis/macie2-2020-01-01.min.json +149 -6
  18. package/node_modules/aws-sdk/apis/macie2-2020-01-01.waiters2.json +25 -0
  19. package/node_modules/aws-sdk/apis/marketplace-catalog-2018-09-17.min.json +3 -1
  20. package/node_modules/aws-sdk/apis/rekognition-2016-06-27.min.json +7 -1
  21. package/node_modules/aws-sdk/apis/transfer-2018-11-05.min.json +717 -67
  22. package/node_modules/aws-sdk/apis/transfer-2018-11-05.paginators.json +24 -0
  23. package/node_modules/aws-sdk/apis/workspaces-2015-04-08.min.json +104 -66
  24. package/node_modules/aws-sdk/clients/appsync.d.ts +41 -3
  25. package/node_modules/aws-sdk/clients/autoscaling.d.ts +118 -118
  26. package/node_modules/aws-sdk/clients/chime.d.ts +135 -4
  27. package/node_modules/aws-sdk/clients/configservice.d.ts +66 -0
  28. package/node_modules/aws-sdk/clients/detective.d.ts +176 -4
  29. package/node_modules/aws-sdk/clients/globalaccelerator.d.ts +109 -85
  30. package/node_modules/aws-sdk/clients/guardduty.d.ts +604 -1
  31. package/node_modules/aws-sdk/clients/lookoutvision.d.ts +14 -2
  32. package/node_modules/aws-sdk/clients/macie2.d.ts +131 -9
  33. package/node_modules/aws-sdk/clients/macie2.js +1 -0
  34. package/node_modules/aws-sdk/clients/marketplacecatalog.d.ts +1 -1
  35. package/node_modules/aws-sdk/clients/polly.d.ts +1 -1
  36. package/node_modules/aws-sdk/clients/rds.d.ts +2 -2
  37. package/node_modules/aws-sdk/clients/rekognition.d.ts +12 -4
  38. package/node_modules/aws-sdk/clients/securityhub.d.ts +3 -3
  39. package/node_modules/aws-sdk/clients/ssm.d.ts +12 -12
  40. package/node_modules/aws-sdk/clients/transfer.d.ts +1000 -86
  41. package/node_modules/aws-sdk/clients/workspaces.d.ts +65 -5
  42. package/node_modules/aws-sdk/dist/aws-sdk-core-react-native.js +1 -1
  43. package/node_modules/aws-sdk/dist/aws-sdk-react-native.js +573 -566
  44. package/node_modules/aws-sdk/dist/aws-sdk.js +82 -24
  45. package/node_modules/aws-sdk/dist/aws-sdk.min.js +72 -72
  46. package/node_modules/aws-sdk/dist-tools/service-collector.js +4 -6
  47. package/node_modules/aws-sdk/lib/core.js +1 -1
  48. package/node_modules/aws-sdk/package.json +1 -1
  49. package/node_modules/esbuild/bin/esbuild +4 -1
  50. package/node_modules/esbuild/install.js +11 -5
  51. package/node_modules/esbuild/lib/main.d.ts +2 -2
  52. package/node_modules/esbuild/lib/main.js +91 -72
  53. package/node_modules/esbuild/package.json +21 -21
  54. package/node_modules/esbuild-linux-64/bin/esbuild +0 -0
  55. package/node_modules/esbuild-linux-64/package.json +1 -1
  56. package/package.json +8 -8
@@ -125,11 +125,11 @@ declare class LookoutVision extends Service {
125
125
  */
126
126
  listModels(callback?: (err: AWSError, data: LookoutVision.Types.ListModelsResponse) => void): Request<LookoutVision.Types.ListModelsResponse, AWSError>;
127
127
  /**
128
- * Lists the Amazon Lookout for Vision projects in your AWS account. The ListProjects operation is eventually consistent. Recent calls to CreateProject and DeleteProject might take a while to appear in the response from ListProjects. This operation requires permissions to perform the lookoutvision:ListProjects operation.
128
+ * Lists the Amazon Lookout for Vision projects in your AWS account that are in the AWS Region in which you call ListProjects. The ListProjects operation is eventually consistent. Recent calls to CreateProject and DeleteProject might take a while to appear in the response from ListProjects. This operation requires permissions to perform the lookoutvision:ListProjects operation.
129
129
  */
130
130
  listProjects(params: LookoutVision.Types.ListProjectsRequest, callback?: (err: AWSError, data: LookoutVision.Types.ListProjectsResponse) => void): Request<LookoutVision.Types.ListProjectsResponse, AWSError>;
131
131
  /**
132
- * Lists the Amazon Lookout for Vision projects in your AWS account. The ListProjects operation is eventually consistent. Recent calls to CreateProject and DeleteProject might take a while to appear in the response from ListProjects. This operation requires permissions to perform the lookoutvision:ListProjects operation.
132
+ * Lists the Amazon Lookout for Vision projects in your AWS account that are in the AWS Region in which you call ListProjects. The ListProjects operation is eventually consistent. Recent calls to CreateProject and DeleteProject might take a while to appear in the response from ListProjects. This operation requires permissions to perform the lookoutvision:ListProjects operation.
133
133
  */
134
134
  listProjects(callback?: (err: AWSError, data: LookoutVision.Types.ListProjectsResponse) => void): Request<LookoutVision.Types.ListProjectsResponse, AWSError>;
135
135
  /**
@@ -759,6 +759,14 @@ declare namespace LookoutVision {
759
759
  * The identifer for the AWS Key Management Service (AWS KMS) key that was used to encrypt the model during training.
760
760
  */
761
761
  KmsKeyId?: KmsKeyId;
762
+ /**
763
+ * The minimum number of inference units used by the model. For more information, see StartModel
764
+ */
765
+ MinInferenceUnits?: InferenceUnits;
766
+ /**
767
+ * The maximum number of inference units Amazon Lookout for Vision uses to auto-scale the model. For more information, see StartModel.
768
+ */
769
+ MaxInferenceUnits?: InferenceUnits;
762
770
  }
763
771
  export type ModelDescriptionMessage = string;
764
772
  export type ModelHostingStatus = "STARTING_HOSTING"|"HOSTED"|"HOSTING_FAILED"|"STOPPING_HOSTING"|"SYSTEM_UPDATING"|string;
@@ -1030,6 +1038,10 @@ declare namespace LookoutVision {
1030
1038
  * ClientToken is an idempotency token that ensures a call to StartModel completes only once. You choose the value to pass. For example, An issue might prevent you from getting a response from StartModel. In this case, safely retry your call to StartModel by using the same ClientToken parameter value. If you don't supply a value for ClientToken, the AWS SDK you are using inserts a value for you. This prevents retries after a network error from making multiple start requests. You'll need to provide your own value for other use cases. An error occurs if the other input parameters are not the same as in the first request. Using a different value for ClientToken is considered a new call to StartModel. An idempotency token is active for 8 hours.
1031
1039
  */
1032
1040
  ClientToken?: ClientToken;
1041
+ /**
1042
+ * The maximum number of inference units to use for auto-scaling the model. If you don't specify a value, Amazon Lookout for Vision doesn't auto-scale the model.
1043
+ */
1044
+ MaxInferenceUnits?: InferenceUnits;
1033
1045
  }
1034
1046
  export interface StartModelResponse {
1035
1047
  /**
@@ -2,6 +2,7 @@ import {Request} from '../lib/request';
2
2
  import {Response} from '../lib/response';
3
3
  import {AWSError} from '../lib/error';
4
4
  import {Service} from '../lib/service';
5
+ import {WaiterConfiguration} from '../lib/service';
5
6
  import {ServiceConfigurationOptions} from '../lib/service';
6
7
  import {ConfigBase as Config} from '../lib/config-base';
7
8
  interface Blob {}
@@ -291,6 +292,30 @@ declare class Macie2 extends Service {
291
292
  * Retrieves information about an account that's associated with an Amazon Macie administrator account.
292
293
  */
293
294
  getMember(callback?: (err: AWSError, data: Macie2.Types.GetMemberResponse) => void): Request<Macie2.Types.GetMemberResponse, AWSError>;
295
+ /**
296
+ * Retrieves the status and configuration settings for retrieving (revealing) occurrences of sensitive data reported by findings.
297
+ */
298
+ getRevealConfiguration(params: Macie2.Types.GetRevealConfigurationRequest, callback?: (err: AWSError, data: Macie2.Types.GetRevealConfigurationResponse) => void): Request<Macie2.Types.GetRevealConfigurationResponse, AWSError>;
299
+ /**
300
+ * Retrieves the status and configuration settings for retrieving (revealing) occurrences of sensitive data reported by findings.
301
+ */
302
+ getRevealConfiguration(callback?: (err: AWSError, data: Macie2.Types.GetRevealConfigurationResponse) => void): Request<Macie2.Types.GetRevealConfigurationResponse, AWSError>;
303
+ /**
304
+ * Retrieves (reveals) occurrences of sensitive data reported by a finding.
305
+ */
306
+ getSensitiveDataOccurrences(params: Macie2.Types.GetSensitiveDataOccurrencesRequest, callback?: (err: AWSError, data: Macie2.Types.GetSensitiveDataOccurrencesResponse) => void): Request<Macie2.Types.GetSensitiveDataOccurrencesResponse, AWSError>;
307
+ /**
308
+ * Retrieves (reveals) occurrences of sensitive data reported by a finding.
309
+ */
310
+ getSensitiveDataOccurrences(callback?: (err: AWSError, data: Macie2.Types.GetSensitiveDataOccurrencesResponse) => void): Request<Macie2.Types.GetSensitiveDataOccurrencesResponse, AWSError>;
311
+ /**
312
+ * Checks whether occurrences of sensitive data can be retrieved (revealed) for a finding.
313
+ */
314
+ getSensitiveDataOccurrencesAvailability(params: Macie2.Types.GetSensitiveDataOccurrencesAvailabilityRequest, callback?: (err: AWSError, data: Macie2.Types.GetSensitiveDataOccurrencesAvailabilityResponse) => void): Request<Macie2.Types.GetSensitiveDataOccurrencesAvailabilityResponse, AWSError>;
315
+ /**
316
+ * Checks whether occurrences of sensitive data can be retrieved (revealed) for a finding.
317
+ */
318
+ getSensitiveDataOccurrencesAvailability(callback?: (err: AWSError, data: Macie2.Types.GetSensitiveDataOccurrencesAvailabilityResponse) => void): Request<Macie2.Types.GetSensitiveDataOccurrencesAvailabilityResponse, AWSError>;
294
319
  /**
295
320
  * Retrieves (queries) quotas and aggregated usage data for one or more accounts.
296
321
  */
@@ -467,6 +492,22 @@ declare class Macie2 extends Service {
467
492
  * Updates the Amazon Macie configuration settings for an organization in Organizations.
468
493
  */
469
494
  updateOrganizationConfiguration(callback?: (err: AWSError, data: Macie2.Types.UpdateOrganizationConfigurationResponse) => void): Request<Macie2.Types.UpdateOrganizationConfigurationResponse, AWSError>;
495
+ /**
496
+ * Updates the status and configuration settings for retrieving (revealing) occurrences of sensitive data reported by findings.
497
+ */
498
+ updateRevealConfiguration(params: Macie2.Types.UpdateRevealConfigurationRequest, callback?: (err: AWSError, data: Macie2.Types.UpdateRevealConfigurationResponse) => void): Request<Macie2.Types.UpdateRevealConfigurationResponse, AWSError>;
499
+ /**
500
+ * Updates the status and configuration settings for retrieving (revealing) occurrences of sensitive data reported by findings.
501
+ */
502
+ updateRevealConfiguration(callback?: (err: AWSError, data: Macie2.Types.UpdateRevealConfigurationResponse) => void): Request<Macie2.Types.UpdateRevealConfigurationResponse, AWSError>;
503
+ /**
504
+ * Waits for the findingRevealed state by periodically calling the underlying Macie2.getSensitiveDataOccurrencesoperation every 2 seconds (at most 60 times). Wait until the sensitive data occurrences are ready.
505
+ */
506
+ waitFor(state: "findingRevealed", params: Macie2.Types.GetSensitiveDataOccurrencesRequest & {$waiter?: WaiterConfiguration}, callback?: (err: AWSError, data: Macie2.Types.GetSensitiveDataOccurrencesResponse) => void): Request<Macie2.Types.GetSensitiveDataOccurrencesResponse, AWSError>;
507
+ /**
508
+ * Waits for the findingRevealed state by periodically calling the underlying Macie2.getSensitiveDataOccurrencesoperation every 2 seconds (at most 60 times). Wait until the sensitive data occurrences are ready.
509
+ */
510
+ waitFor(state: "findingRevealed", callback?: (err: AWSError, data: Macie2.Types.GetSensitiveDataOccurrencesResponse) => void): Request<Macie2.Types.GetSensitiveDataOccurrencesResponse, AWSError>;
470
511
  }
471
512
  declare namespace Macie2 {
472
513
  export interface AcceptInvitationRequest {
@@ -563,6 +604,7 @@ declare namespace Macie2 {
563
604
  */
564
605
  sessionContext?: SessionContext;
565
606
  }
607
+ export type AvailabilityCode = "AVAILABLE"|"UNAVAILABLE"|string;
566
608
  export interface AwsAccount {
567
609
  /**
568
610
  * The unique identifier for the Amazon Web Services account.
@@ -1058,11 +1100,11 @@ declare namespace Macie2 {
1058
1100
  */
1059
1101
  ignoreWords?: __listOf__string;
1060
1102
  /**
1061
- * An array that lists specific character sequences (keywords), one of which must be within proximity (maximumMatchDistance) of the regular expression to match. The array can contain as many as 50 keywords. Each keyword can contain 3-90 UTF-8 characters. Keywords aren't case sensitive.
1103
+ * An array that lists specific character sequences (keywords), one of which must precede and be within proximity (maximumMatchDistance) of the regular expression to match. The array can contain as many as 50 keywords. Each keyword can contain 3-90 UTF-8 characters. Keywords aren't case sensitive.
1062
1104
  */
1063
1105
  keywords?: __listOf__string;
1064
1106
  /**
1065
- * The maximum number of characters that can exist between text that matches the regular expression and the character sequences specified by the keywords array. Amazon Macie includes or excludes a result based on the proximity of a keyword to text that matches the regular expression. The distance can be 1-300 characters. The default value is 50.
1107
+ * The maximum number of characters that can exist between the end of at least one complete character sequence specified by the keywords array and the end of the text that matches the regex pattern. If a complete keyword precedes all the text that matches the pattern and the keyword is within the specified distance, Amazon Macie includes the result. The distance can be 1-300 characters. The default value is 50.
1066
1108
  */
1067
1109
  maximumMatchDistance?: __integer;
1068
1110
  /**
@@ -1414,7 +1456,7 @@ declare namespace Macie2 {
1414
1456
  */
1415
1457
  lastRunErrorStatus?: LastRunErrorStatus;
1416
1458
  /**
1417
- * The date and time, in UTC and extended ISO 8601 format, when the job started. If the job is a recurring job, this value indicates when the most recent run started.
1459
+ * The date and time, in UTC and extended ISO 8601 format, when the job started. If the job is a recurring job, this value indicates when the most recent run started or, if the job hasn't run yet, when the job was created.
1418
1460
  */
1419
1461
  lastRunTime?: __timestampIso8601;
1420
1462
  /**
@@ -1466,6 +1508,12 @@ declare namespace Macie2 {
1466
1508
  */
1467
1509
  maxAccountLimitReached?: __boolean;
1468
1510
  }
1511
+ export interface DetectedDataDetails {
1512
+ /**
1513
+ * An occurrence of the specified type of sensitive data. Each occurrence can contain 1-128 characters.
1514
+ */
1515
+ value: __stringMin1Max128;
1516
+ }
1469
1517
  export interface DisableMacieRequest {
1470
1518
  }
1471
1519
  export interface DisableMacieResponse {
@@ -1803,11 +1851,11 @@ declare namespace Macie2 {
1803
1851
  */
1804
1852
  ignoreWords?: __listOf__string;
1805
1853
  /**
1806
- * An array that lists specific character sequences (keywords), one of which must be within proximity (maximumMatchDistance) of the regular expression to match. Keywords aren't case sensitive.
1854
+ * An array that lists specific character sequences (keywords), one of which must precede and be within proximity (maximumMatchDistance) of the regular expression to match. Keywords aren't case sensitive.
1807
1855
  */
1808
1856
  keywords?: __listOf__string;
1809
1857
  /**
1810
- * The maximum number of characters that can exist between text that matches the regular expression and the character sequences specified by the keywords array. Amazon Macie includes or excludes a result based on the proximity of a keyword to text that matches the regular expression.
1858
+ * The maximum number of characters that can exist between the end of at least one complete character sequence specified by the keywords array and the end of the text that matches the regex pattern. If a complete keyword precedes all the text that matches the pattern and the keyword is within the specified distance, Amazon Macie includes the result. Otherwise, Macie excludes the result.
1811
1859
  */
1812
1860
  maximumMatchDistance?: __integer;
1813
1861
  /**
@@ -1999,6 +2047,50 @@ declare namespace Macie2 {
1999
2047
  */
2000
2048
  updatedAt?: __timestampIso8601;
2001
2049
  }
2050
+ export interface GetRevealConfigurationRequest {
2051
+ }
2052
+ export interface GetRevealConfigurationResponse {
2053
+ /**
2054
+ * The current configuration settings and the status of the configuration for the account.
2055
+ */
2056
+ configuration?: RevealConfiguration;
2057
+ }
2058
+ export interface GetSensitiveDataOccurrencesAvailabilityRequest {
2059
+ /**
2060
+ * The unique identifier for the finding.
2061
+ */
2062
+ findingId: __string;
2063
+ }
2064
+ export interface GetSensitiveDataOccurrencesAvailabilityResponse {
2065
+ /**
2066
+ * Specifies whether occurrences of sensitive data can be retrieved for the finding. Possible values are: AVAILABLE, the sensitive data can be retrieved; and, UNAVAILABLE, the sensitive data can't be retrieved. If this value is UNAVAILABLE, the reasons array indicates why the data can't be retrieved.
2067
+ */
2068
+ code?: AvailabilityCode;
2069
+ /**
2070
+ * Specifies why occurrences of sensitive data can't be retrieved for the finding. Possible values are: INVALID_CLASSIFICATION_RESULT - Amazon Macie can't verify the location of the sensitive data to retrieve. There isn't a corresponding sensitive data discovery result for the finding. Or the sensitive data discovery result specified by the ClassificationDetails.detailedResultsLocation field of the finding isn't available, is malformed or corrupted, or uses an unsupported storage format. OBJECT_EXCEEDS_SIZE_QUOTA - The storage size of the affected S3 object exceeds the size quota for retrieving occurrences of sensitive data. OBJECT_UNAVAILABLE - The affected S3 object isn't available. The object might have been renamed, moved, or deleted. Or the object was changed after Amazon Macie created the finding. UNSUPPORTED_FINDING_TYPE - The specified finding isn't a sensitive data finding. UNSUPPORTED_OBJECT_TYPE - The affected S3 object uses a file or storage format that Macie doesn't support for retrieving occurrences of sensitive data. This value is null if sensitive data can be retrieved for the finding.
2071
+ */
2072
+ reasons?: __listOfUnavailabilityReasonCode;
2073
+ }
2074
+ export interface GetSensitiveDataOccurrencesRequest {
2075
+ /**
2076
+ * The unique identifier for the finding.
2077
+ */
2078
+ findingId: __string;
2079
+ }
2080
+ export interface GetSensitiveDataOccurrencesResponse {
2081
+ /**
2082
+ * If an error occurred when Amazon Macie attempted to retrieve occurrences of sensitive data reported by the finding, a description of the error that occurred. This value is null if the status (status) of the request is PROCESSING or SUCCESS.
2083
+ */
2084
+ error?: __string;
2085
+ /**
2086
+ * A map that specifies 1-100 types of sensitive data reported by the finding and, for each type, 1-10 occurrences of sensitive data.
2087
+ */
2088
+ sensitiveDataOccurrences?: SensitiveDataOccurrences;
2089
+ /**
2090
+ * The status of the request to retrieve occurrences of sensitive data reported by the finding. Possible values are: ERROR - An error occurred when Amazon Macie attempted to locate, retrieve, or encrypt the sensitive data. The error value indicates the nature of the error that occurred. PROCESSING - Macie is processing the request. SUCCESS - Macie successfully located, retrieved, and encrypted the sensitive data.
2091
+ */
2092
+ status?: RevealRequestStatus;
2093
+ }
2002
2094
  export interface GetUsageStatisticsRequest {
2003
2095
  /**
2004
2096
  * An array of objects, one for each condition to use to filter the query results. If you specify more than one condition, Amazon Macie uses an AND operator to join the conditions.
@@ -2169,7 +2261,7 @@ declare namespace Macie2 {
2169
2261
  export type JobComparator = "EQ"|"GT"|"GTE"|"LT"|"LTE"|"NE"|"CONTAINS"|"STARTS_WITH"|string;
2170
2262
  export interface JobDetails {
2171
2263
  /**
2172
- * Specifies whether any one-time or recurring jobs are configured to analyze data in the bucket. Possible values are: TRUE - The bucket is explicitly included in the bucket definition (S3BucketDefinitionForJob) for one or more jobs and at least one of those jobs has a status other than CANCELLED. Or the bucket matched the bucket criteria (S3BucketCriteriaForJob) for at least one job that previously ran. FALSE - The bucket isn't explicitly included in the bucket definition (S3BucketDefinitionForJob) for any jobs, all the jobs that explicitly include the bucket in their bucket definitions have a status of CANCELLED, or the bucket didn't match the bucket criteria (S3BucketCriteriaForJob) for any jobs that previously ran. UNKNOWN - An exception occurred when Amazon Macie attempted to retrieve job data for the bucket.
2264
+ * Specifies whether any one-time or recurring jobs are configured to analyze data in the bucket. Possible values are: TRUE - The bucket is explicitly included in the bucket definition (S3BucketDefinitionForJob) for one or more jobs and at least one of those jobs has a status other than CANCELLED. Or the bucket matched the bucket criteria (S3BucketCriteriaForJob) for at least one job that previously ran. FALSE - The bucket isn't explicitly included in the bucket definition (S3BucketDefinitionForJob) for any jobs, all the jobs that explicitly include the bucket in their bucket definitions have a status of CANCELLED, or the bucket didn't match the bucket criteria (S3BucketCriteriaForJob) for any jobs that previously ran. UNKNOWN - An exception occurred when Amazon Macie attempted to retrieve job data for the bucket.
2173
2265
  */
2174
2266
  isDefinedInJob?: IsDefinedInJob;
2175
2267
  /**
@@ -2774,6 +2866,18 @@ declare namespace Macie2 {
2774
2866
  */
2775
2867
  s3Object?: S3Object;
2776
2868
  }
2869
+ export interface RevealConfiguration {
2870
+ /**
2871
+ * The Amazon Resource Name (ARN), ID, or alias of the KMS key to use to encrypt sensitive data that's retrieved. The key must be an existing, customer managed, symmetric encryption key that's in the same Amazon Web Services Region as the Amazon Macie account. If this value specifies an alias, it must include the following prefix: alias/. If this value specifies a key that's owned by another Amazon Web Services account, it must specify the ARN of the key or the ARN of the key's alias.
2872
+ */
2873
+ kmsKeyId?: __stringMin1Max2048;
2874
+ /**
2875
+ * The status of the configuration for the Amazon Macie account. In a request, valid values are: ENABLED, enable the configuration for the account; and, DISABLED, disable the configuration for the account. In a response, possible values are: ENABLED, the configuration is currently enabled for the account; and, DISABLED, the configuration is currently disabled for the account.
2876
+ */
2877
+ status: RevealStatus;
2878
+ }
2879
+ export type RevealRequestStatus = "SUCCESS"|"PROCESSING"|"ERROR"|string;
2880
+ export type RevealStatus = "ENABLED"|"DISABLED"|string;
2777
2881
  export interface S3Bucket {
2778
2882
  /**
2779
2883
  * Specifies whether the bucket policy for the bucket requires server-side encryption of objects when objects are uploaded to the bucket. Possible values are: FALSE - The bucket policy requires server-side encryption of new objects. PutObject requests must include the x-amz-server-side-encryption header and the value for that header must be AES256 or aws:kms. TRUE - The bucket doesn't have a bucket policy or it has a bucket policy that doesn't require server-side encryption of new objects. If a bucket policy exists, it doesn't require PutObject requests to include the x-amz-server-side-encryption header and it doesn't require the value for that header to be AES256 or aws:kms. UNKNOWN - Amazon Macie can't determine whether the bucket policy requires server-side encryption of objects.
@@ -2848,7 +2952,7 @@ declare namespace Macie2 {
2848
2952
  */
2849
2953
  keyPrefix?: __string;
2850
2954
  /**
2851
- * The Amazon Resource Name (ARN) of the KMS key to use for encryption of the results. This must be the ARN of an existing, symmetric, customer managed KMS key that's in the same Amazon Web Services Region as the bucket.
2955
+ * The Amazon Resource Name (ARN) of the customer managed KMS key to use for encryption of the results. This must be the ARN of an existing, symmetric encryption KMS key that's in the same Amazon Web Services Region as the bucket.
2852
2956
  */
2853
2957
  kmsKeyArn: __string;
2854
2958
  }
@@ -3054,6 +3158,7 @@ declare namespace Macie2 {
3054
3158
  totalCount?: __long;
3055
3159
  }
3056
3160
  export type SensitiveDataItemCategory = "FINANCIAL_INFORMATION"|"PERSONAL_INFORMATION"|"CREDENTIALS"|"CUSTOM_IDENTIFIER"|string;
3161
+ export type SensitiveDataOccurrences = {[key: string]: __listOfDetectedDataDetails};
3057
3162
  export interface ServerSideEncryption {
3058
3163
  /**
3059
3164
  * The server-side encryption algorithm that's used when storing data in the bucket or object. If default encryption is disabled for the bucket or the object isn't encrypted using server-side encryption, this value is NONE.
@@ -3261,11 +3366,11 @@ declare namespace Macie2 {
3261
3366
  */
3262
3367
  ignoreWords?: __listOf__string;
3263
3368
  /**
3264
- * An array that lists specific character sequences (keywords), one of which must be within proximity (maximumMatchDistance) of the regular expression to match. The array can contain as many as 50 keywords. Each keyword can contain 3-90 UTF-8 characters. Keywords aren't case sensitive.
3369
+ * An array that lists specific character sequences (keywords), one of which must precede and be within proximity (maximumMatchDistance) of the regular expression to match. The array can contain as many as 50 keywords. Each keyword can contain 3-90 UTF-8 characters. Keywords aren't case sensitive.
3265
3370
  */
3266
3371
  keywords?: __listOf__string;
3267
3372
  /**
3268
- * The maximum number of characters that can exist between text that matches the regular expression and the character sequences specified by the keywords array. Amazon Macie includes or excludes a result based on the proximity of a keyword to text that matches the regular expression. The distance can be 1-300 characters. The default value is 50.
3373
+ * The maximum number of characters that can exist between the end of at least one complete character sequence specified by the keywords array and the end of the text that matches the regex pattern. If a complete keyword precedes all the text that matches the pattern and the keyword is within the specified distance, Amazon Macie includes the result. The distance can be 1-300 characters. The default value is 50.
3269
3374
  */
3270
3375
  maximumMatchDistance?: __integer;
3271
3376
  /**
@@ -3285,6 +3390,7 @@ declare namespace Macie2 {
3285
3390
  }
3286
3391
  export type TimeRange = "MONTH_TO_DATE"|"PAST_30_DAYS"|string;
3287
3392
  export type Type = "NONE"|"AES256"|"aws:kms"|string;
3393
+ export type UnavailabilityReasonCode = "OBJECT_EXCEEDS_SIZE_QUOTA"|"UNSUPPORTED_OBJECT_TYPE"|"UNSUPPORTED_FINDING_TYPE"|"INVALID_CLASSIFICATION_RESULT"|"OBJECT_UNAVAILABLE"|string;
3288
3394
  export type Unit = "TERABYTES"|string;
3289
3395
  export interface UnprocessedAccount {
3290
3396
  /**
@@ -3396,6 +3502,18 @@ declare namespace Macie2 {
3396
3502
  }
3397
3503
  export interface UpdateOrganizationConfigurationResponse {
3398
3504
  }
3505
+ export interface UpdateRevealConfigurationRequest {
3506
+ /**
3507
+ * The new configuration settings and the status of the configuration for the account.
3508
+ */
3509
+ configuration: RevealConfiguration;
3510
+ }
3511
+ export interface UpdateRevealConfigurationResponse {
3512
+ /**
3513
+ * The new configuration settings and the status of the configuration for the account.
3514
+ */
3515
+ configuration?: RevealConfiguration;
3516
+ }
3399
3517
  export interface UsageByAccount {
3400
3518
  /**
3401
3519
  * The type of currency that the value for the metric (estimatedCost) is reported in.
@@ -3543,6 +3661,7 @@ declare namespace Macie2 {
3543
3661
  export type __listOfBucketMetadata = BucketMetadata[];
3544
3662
  export type __listOfCriteriaForJob = CriteriaForJob[];
3545
3663
  export type __listOfCustomDataIdentifierSummary = CustomDataIdentifierSummary[];
3664
+ export type __listOfDetectedDataDetails = DetectedDataDetails[];
3546
3665
  export type __listOfFinding = Finding[];
3547
3666
  export type __listOfFindingType = FindingType[];
3548
3667
  export type __listOfFindingsFilterListItem = FindingsFilterListItem[];
@@ -3560,6 +3679,7 @@ declare namespace Macie2 {
3560
3679
  export type __listOfSearchResourcesTagCriterionPair = SearchResourcesTagCriterionPair[];
3561
3680
  export type __listOfTagCriterionPairForJob = TagCriterionPairForJob[];
3562
3681
  export type __listOfTagValuePair = TagValuePair[];
3682
+ export type __listOfUnavailabilityReasonCode = UnavailabilityReasonCode[];
3563
3683
  export type __listOfUnprocessedAccount = UnprocessedAccount[];
3564
3684
  export type __listOfUsageByAccount = UsageByAccount[];
3565
3685
  export type __listOfUsageRecord = UsageRecord[];
@@ -3568,6 +3688,8 @@ declare namespace Macie2 {
3568
3688
  export type __listOf__string = __string[];
3569
3689
  export type __long = number;
3570
3690
  export type __string = string;
3691
+ export type __stringMin1Max128 = string;
3692
+ export type __stringMin1Max2048 = string;
3571
3693
  export type __timestampIso8601 = Date;
3572
3694
  /**
3573
3695
  * A string in YYYY-MM-DD format that represents the latest possible API version that can be used in this service. Specify 'latest' to use the latest possible version.
@@ -9,6 +9,7 @@ Object.defineProperty(apiLoader.services['macie2'], '2020-01-01', {
9
9
  get: function get() {
10
10
  var model = require('../apis/macie2-2020-01-01.min.json');
11
11
  model.paginators = require('../apis/macie2-2020-01-01.paginators.json').pagination;
12
+ model.waiters = require('../apis/macie2-2020-01-01.waiters2.json').waiters;
12
13
  return model;
13
14
  },
14
15
  enumerable: true,
@@ -233,7 +233,7 @@ declare namespace MarketplaceCatalog {
233
233
  */
234
234
  EntityIdentifier?: Identifier;
235
235
  /**
236
- * The ARN associated to the unique identifier for the change set referenced in this request.
236
+ * The ARN associated to the unique identifier for the entity referenced in this request.
237
237
  */
238
238
  EntityArn?: ARN;
239
239
  /**
@@ -488,7 +488,7 @@ declare namespace Polly {
488
488
  */
489
489
  SupportedEngines?: EngineList;
490
490
  }
491
- export type VoiceId = "Aditi"|"Amy"|"Astrid"|"Bianca"|"Brian"|"Camila"|"Carla"|"Carmen"|"Celine"|"Chantal"|"Conchita"|"Cristiano"|"Dora"|"Emma"|"Enrique"|"Ewa"|"Filiz"|"Gabrielle"|"Geraint"|"Giorgio"|"Gwyneth"|"Hans"|"Ines"|"Ivy"|"Jacek"|"Jan"|"Joanna"|"Joey"|"Justin"|"Karl"|"Kendra"|"Kevin"|"Kimberly"|"Lea"|"Liv"|"Lotte"|"Lucia"|"Lupe"|"Mads"|"Maja"|"Marlene"|"Mathieu"|"Matthew"|"Maxim"|"Mia"|"Miguel"|"Mizuki"|"Naja"|"Nicole"|"Olivia"|"Penelope"|"Raveena"|"Ricardo"|"Ruben"|"Russell"|"Salli"|"Seoyeon"|"Takumi"|"Tatyana"|"Vicki"|"Vitoria"|"Zeina"|"Zhiyu"|"Aria"|"Ayanda"|"Arlet"|"Hannah"|"Arthur"|"Daniel"|"Liam"|"Pedro"|string;
491
+ export type VoiceId = "Aditi"|"Amy"|"Astrid"|"Bianca"|"Brian"|"Camila"|"Carla"|"Carmen"|"Celine"|"Chantal"|"Conchita"|"Cristiano"|"Dora"|"Emma"|"Enrique"|"Ewa"|"Filiz"|"Gabrielle"|"Geraint"|"Giorgio"|"Gwyneth"|"Hans"|"Ines"|"Ivy"|"Jacek"|"Jan"|"Joanna"|"Joey"|"Justin"|"Karl"|"Kendra"|"Kevin"|"Kimberly"|"Lea"|"Liv"|"Lotte"|"Lucia"|"Lupe"|"Mads"|"Maja"|"Marlene"|"Mathieu"|"Matthew"|"Maxim"|"Mia"|"Miguel"|"Mizuki"|"Naja"|"Nicole"|"Olivia"|"Penelope"|"Raveena"|"Ricardo"|"Ruben"|"Russell"|"Salli"|"Seoyeon"|"Takumi"|"Tatyana"|"Vicki"|"Vitoria"|"Zeina"|"Zhiyu"|"Aria"|"Ayanda"|"Arlet"|"Hannah"|"Arthur"|"Daniel"|"Liam"|"Pedro"|"Kajal"|string;
492
492
  export type VoiceList = Voice[];
493
493
  export type VoiceName = string;
494
494
  /**
@@ -2282,7 +2282,7 @@ declare namespace RDS {
2282
2282
  */
2283
2283
  DBProxyName: String;
2284
2284
  /**
2285
- * The kinds of databases that the proxy can connect to. This value determines which database network protocol the proxy recognizes when it interprets network traffic to and from the database. For Aurora MySQL and RDS for MySQL databases, specify MYSQL. For Aurora PostgreSQL and RDS for PostgreSQL databases, specify POSTGRESQL.
2285
+ * The kinds of databases that the proxy can connect to. This value determines which database network protocol the proxy recognizes when it interprets network traffic to and from the database. For Aurora MySQL, RDS for MariaDB, and RDS for MySQL databases, specify MYSQL. For Aurora PostgreSQL and RDS for PostgreSQL databases, specify POSTGRESQL.
2286
2286
  */
2287
2287
  EngineFamily: EngineFamily;
2288
2288
  /**
@@ -3726,7 +3726,7 @@ declare namespace RDS {
3726
3726
  */
3727
3727
  Status?: DBProxyStatus;
3728
3728
  /**
3729
- * The kinds of databases that the proxy can connect to. This value determines which database network protocol the proxy recognizes when it interprets network traffic to and from the database. MYSQL supports Aurora MySQL and RDS for MySQL databases. POSTGRESQL supports Aurora PostgreSQL and RDS for PostgreSQL databases.
3729
+ * The kinds of databases that the proxy can connect to. This value determines which database network protocol the proxy recognizes when it interprets network traffic to and from the database. MYSQL supports Aurora MySQL, RDS for MariaDB, and RDS for MySQL databases. POSTGRESQL supports Aurora PostgreSQL and RDS for PostgreSQL databases.
3730
3730
  */
3731
3731
  EngineFamily?: String;
3732
3732
  /**
@@ -405,11 +405,11 @@ declare class Rekognition extends Service {
405
405
  */
406
406
  startPersonTracking(callback?: (err: AWSError, data: Rekognition.Types.StartPersonTrackingResponse) => void): Request<Rekognition.Types.StartPersonTrackingResponse, AWSError>;
407
407
  /**
408
- * Starts the running of the version of a model. Starting a model takes a while to complete. To check the current state of the model, use DescribeProjectVersions. Once the model is running, you can detect custom labels in new images by calling DetectCustomLabels. You are charged for the amount of time that the model is running. To stop a running model, call StopProjectVersion. This operation requires permissions to perform the rekognition:StartProjectVersion action.
408
+ * Starts the running of the version of a model. Starting a model takes a while to complete. To check the current state of the model, use DescribeProjectVersions. Once the model is running, you can detect custom labels in new images by calling DetectCustomLabels. You are charged for the amount of time that the model is running. To stop a running model, call StopProjectVersion. For more information, see Running a trained Amazon Rekognition Custom Labels model in the Amazon Rekognition Custom Labels Guide. This operation requires permissions to perform the rekognition:StartProjectVersion action.
409
409
  */
410
410
  startProjectVersion(params: Rekognition.Types.StartProjectVersionRequest, callback?: (err: AWSError, data: Rekognition.Types.StartProjectVersionResponse) => void): Request<Rekognition.Types.StartProjectVersionResponse, AWSError>;
411
411
  /**
412
- * Starts the running of the version of a model. Starting a model takes a while to complete. To check the current state of the model, use DescribeProjectVersions. Once the model is running, you can detect custom labels in new images by calling DetectCustomLabels. You are charged for the amount of time that the model is running. To stop a running model, call StopProjectVersion. This operation requires permissions to perform the rekognition:StartProjectVersion action.
412
+ * Starts the running of the version of a model. Starting a model takes a while to complete. To check the current state of the model, use DescribeProjectVersions. Once the model is running, you can detect custom labels in new images by calling DetectCustomLabels. You are charged for the amount of time that the model is running. To stop a running model, call StopProjectVersion. For more information, see Running a trained Amazon Rekognition Custom Labels model in the Amazon Rekognition Custom Labels Guide. This operation requires permissions to perform the rekognition:StartProjectVersion action.
413
413
  */
414
414
  startProjectVersion(callback?: (err: AWSError, data: Rekognition.Types.StartProjectVersionResponse) => void): Request<Rekognition.Types.StartProjectVersionResponse, AWSError>;
415
415
  /**
@@ -911,7 +911,7 @@ declare namespace Rekognition {
911
911
  */
912
912
  KmsKeyId?: KmsKeyId;
913
913
  /**
914
- * Specifies locations in the frames where Amazon Rekognition checks for objects or people. You can specify up to 10 regions of interest. This is an optional parameter for label detection stream processors and should not be used to create a face search stream processor.
914
+ * Specifies locations in the frames where Amazon Rekognition checks for objects or people. You can specify up to 10 regions of interest, and each region has either a polygon or a bounding box. This is an optional parameter for label detection stream processors and should not be used to create a face search stream processor.
915
915
  */
916
916
  RegionsOfInterest?: RegionsOfInterest;
917
917
  /**
@@ -2590,6 +2590,10 @@ declare namespace Rekognition {
2590
2590
  * The identifer for the AWS Key Management Service key (AWS KMS key) that was used to encrypt the model during training.
2591
2591
  */
2592
2592
  KmsKeyId?: KmsKeyId;
2593
+ /**
2594
+ * The maximum number of inference units Amazon Rekognition Custom Labels uses to auto-scale the model. For more information, see StartProjectVersion.
2595
+ */
2596
+ MaxInferenceUnits?: InferenceUnits;
2593
2597
  }
2594
2598
  export type ProjectVersionDescriptions = ProjectVersionDescription[];
2595
2599
  export type ProjectVersionStatus = "TRAINING_IN_PROGRESS"|"TRAINING_COMPLETED"|"TRAINING_FAILED"|"STARTING"|"RUNNING"|"FAILED"|"STOPPING"|"STOPPED"|"DELETING"|string;
@@ -3049,9 +3053,13 @@ declare namespace Rekognition {
3049
3053
  */
3050
3054
  ProjectVersionArn: ProjectVersionArn;
3051
3055
  /**
3052
- * The minimum number of inference units to use. A single inference unit represents 1 hour of processing and can support up to 5 Transaction Pers Second (TPS). Use a higher number to increase the TPS throughput of your model. You are charged for the number of inference units that you use.
3056
+ * The minimum number of inference units to use. A single inference unit represents 1 hour of processing. For information about the number of transactions per second (TPS) that an inference unit can support, see Running a trained Amazon Rekognition Custom Labels model in the Amazon Rekognition Custom Labels Guide. Use a higher number to increase the TPS throughput of your model. You are charged for the number of inference units that you use.
3053
3057
  */
3054
3058
  MinInferenceUnits: InferenceUnits;
3059
+ /**
3060
+ * The maximum number of inference units to use for auto-scaling the model. If you don't specify a value, Amazon Rekognition Custom Labels doesn't auto-scale the model.
3061
+ */
3062
+ MaxInferenceUnits?: InferenceUnits;
3055
3063
  }
3056
3064
  export interface StartProjectVersionResponse {
3057
3065
  /**
@@ -8713,7 +8713,7 @@ declare namespace SecurityHub {
8713
8713
  }
8714
8714
  export interface AwsWafRegionalWebAclRulesListDetails {
8715
8715
  /**
8716
- * The action that AWS WAF takes when a web request matches all conditions in the rule, such as allow, block, or count the request.
8716
+ * The action that WAF takes when a web request matches all conditions in the rule, such as allow, block, or count the request.
8717
8717
  */
8718
8718
  Action?: AwsWafRegionalWebAclRulesListActionDetails;
8719
8719
  /**
@@ -8974,11 +8974,11 @@ declare namespace SecurityHub {
8974
8974
  */
8975
8975
  FindingIdentifier: AwsSecurityFindingIdentifier;
8976
8976
  /**
8977
- * The code associated with the error.
8977
+ * The code associated with the error. Possible values are: ConcurrentUpdateError - Another process or request attempted to update the finding while this request was being processed DuplicatedFindingIdentifier - The request included two or more findings with the same FindingIdentifier FindingNotFound - The FindingIdentifier included in the request did not match an existing finding FindingSizeExceeded - The finding size was greater than the permissible value of 240 KB InternalFailure - An internal service failure occurred when updating the finding InvalidInput - The finding update contained an invalid value that did not satisfy the Amazon Web Services Security Finding Format syntax
8978
8978
  */
8979
8979
  ErrorCode: NonEmptyString;
8980
8980
  /**
8981
- * The message associated with the error.
8981
+ * The message associated with the error. Possible values are: Concurrent finding updates detected Finding Identifier is duplicated Finding Not Found Finding size exceeded 240 KB Internal service failure Invalid Input
8982
8982
  */
8983
8983
  ErrorMessage: NonEmptyString;
8984
8984
  }
@@ -829,11 +829,11 @@ declare class SSM extends Service {
829
829
  */
830
830
  modifyDocumentPermission(callback?: (err: AWSError, data: SSM.Types.ModifyDocumentPermissionResponse) => void): Request<SSM.Types.ModifyDocumentPermissionResponse, AWSError>;
831
831
  /**
832
- * Registers a compliance type and other compliance details on a designated resource. This operation lets you register custom compliance details with a resource. This call overwrites existing compliance information on the resource, so you must provide a full list of compliance items each time that you send the request. ComplianceType can be one of the following: ExecutionId: The execution ID when the patch, association, or custom compliance item was applied. ExecutionType: Specify patch, association, or Custom:string. ExecutionTime. The time the patch, association, or custom compliance item was applied to the managed node. Id: The patch, association, or custom compliance ID. Title: A title. Status: The status of the compliance item. For example, approved for patches, or Failed for associations. Severity: A patch severity. For example, critical. DocumentName: An SSM document name. For example, AWS-RunPatchBaseline. DocumentVersion: An SSM document version number. For example, 4. Classification: A patch classification. For example, security updates. PatchBaselineId: A patch baseline ID. PatchSeverity: A patch severity. For example, Critical. PatchState: A patch state. For example, InstancesWithFailedPatches. PatchGroup: The name of a patch group. InstalledTime: The time the association, patch, or custom compliance item was applied to the resource. Specify the time by using the following format: yyyy-MM-dd'T'HH:mm:ss'Z'
832
+ * Registers a compliance type and other compliance details on a designated resource. This operation lets you register custom compliance details with a resource. This call overwrites existing compliance information on the resource, so you must provide a full list of compliance items each time that you send the request. ComplianceType can be one of the following: ExecutionId: The execution ID when the patch, association, or custom compliance item was applied. ExecutionType: Specify patch, association, or Custom:string. ExecutionTime. The time the patch, association, or custom compliance item was applied to the managed node. Id: The patch, association, or custom compliance ID. Title: A title. Status: The status of the compliance item. For example, approved for patches, or Failed for associations. Severity: A patch severity. For example, Critical. DocumentName: An SSM document name. For example, AWS-RunPatchBaseline. DocumentVersion: An SSM document version number. For example, 4. Classification: A patch classification. For example, security updates. PatchBaselineId: A patch baseline ID. PatchSeverity: A patch severity. For example, Critical. PatchState: A patch state. For example, InstancesWithFailedPatches. PatchGroup: The name of a patch group. InstalledTime: The time the association, patch, or custom compliance item was applied to the resource. Specify the time by using the following format: yyyy-MM-dd'T'HH:mm:ss'Z'
833
833
  */
834
834
  putComplianceItems(params: SSM.Types.PutComplianceItemsRequest, callback?: (err: AWSError, data: SSM.Types.PutComplianceItemsResult) => void): Request<SSM.Types.PutComplianceItemsResult, AWSError>;
835
835
  /**
836
- * Registers a compliance type and other compliance details on a designated resource. This operation lets you register custom compliance details with a resource. This call overwrites existing compliance information on the resource, so you must provide a full list of compliance items each time that you send the request. ComplianceType can be one of the following: ExecutionId: The execution ID when the patch, association, or custom compliance item was applied. ExecutionType: Specify patch, association, or Custom:string. ExecutionTime. The time the patch, association, or custom compliance item was applied to the managed node. Id: The patch, association, or custom compliance ID. Title: A title. Status: The status of the compliance item. For example, approved for patches, or Failed for associations. Severity: A patch severity. For example, critical. DocumentName: An SSM document name. For example, AWS-RunPatchBaseline. DocumentVersion: An SSM document version number. For example, 4. Classification: A patch classification. For example, security updates. PatchBaselineId: A patch baseline ID. PatchSeverity: A patch severity. For example, Critical. PatchState: A patch state. For example, InstancesWithFailedPatches. PatchGroup: The name of a patch group. InstalledTime: The time the association, patch, or custom compliance item was applied to the resource. Specify the time by using the following format: yyyy-MM-dd'T'HH:mm:ss'Z'
836
+ * Registers a compliance type and other compliance details on a designated resource. This operation lets you register custom compliance details with a resource. This call overwrites existing compliance information on the resource, so you must provide a full list of compliance items each time that you send the request. ComplianceType can be one of the following: ExecutionId: The execution ID when the patch, association, or custom compliance item was applied. ExecutionType: Specify patch, association, or Custom:string. ExecutionTime. The time the patch, association, or custom compliance item was applied to the managed node. Id: The patch, association, or custom compliance ID. Title: A title. Status: The status of the compliance item. For example, approved for patches, or Failed for associations. Severity: A patch severity. For example, Critical. DocumentName: An SSM document name. For example, AWS-RunPatchBaseline. DocumentVersion: An SSM document version number. For example, 4. Classification: A patch classification. For example, security updates. PatchBaselineId: A patch baseline ID. PatchSeverity: A patch severity. For example, Critical. PatchState: A patch state. For example, InstancesWithFailedPatches. PatchGroup: The name of a patch group. InstalledTime: The time the association, patch, or custom compliance item was applied to the resource. Specify the time by using the following format: yyyy-MM-dd'T'HH:mm:ss'Z'
837
837
  */
838
838
  putComplianceItems(callback?: (err: AWSError, data: SSM.Types.PutComplianceItemsResult) => void): Request<SSM.Types.PutComplianceItemsResult, AWSError>;
839
839
  /**
@@ -2026,7 +2026,7 @@ declare namespace SSM {
2026
2026
  */
2027
2027
  Comment?: Comment;
2028
2028
  /**
2029
- * If this time is reached and the command hasn't already started running, it won't run. Calculated based on the ExpiresAfter user input provided as part of the SendCommand API operation.
2029
+ * If a command expires, it changes status to DeliveryTimedOut for all invocations that have the status InProgress, Pending, or Delayed. ExpiresAfter is calculated based on the total timeout for the overall command. For more information, see Understanding command timeout values in the Amazon Web Services Systems Manager User Guide.
2030
2030
  */
2031
2031
  ExpiresAfter?: DateTime;
2032
2032
  /**
@@ -2050,7 +2050,7 @@ declare namespace SSM {
2050
2050
  */
2051
2051
  Status?: CommandStatus;
2052
2052
  /**
2053
- * A detailed status of the command execution. StatusDetails includes more information than Status because it includes states resulting from error and concurrency control parameters. StatusDetails can show different results than Status. For more information about these statuses, see Understanding command statuses in the Amazon Web Services Systems Manager User Guide. StatusDetails can be one of the following values: Pending: The command hasn't been sent to any managed nodes. In Progress: The command has been sent to at least one managed node but hasn't reached a final state on all managed nodes. Success: The command successfully ran on all invocations. This is a terminal state. Delivery Timed Out: The value of MaxErrors or more command invocations shows a status of Delivery Timed Out. This is a terminal state. Execution Timed Out: The value of MaxErrors or more command invocations shows a status of Execution Timed Out. This is a terminal state. Failed: The value of MaxErrors or more command invocations shows a status of Failed. This is a terminal state. Incomplete: The command was attempted on all managed nodes and one or more invocations doesn't have a value of Success but not enough invocations failed for the status to be Failed. This is a terminal state. Cancelled: The command was terminated before it was completed. This is a terminal state. Rate Exceeded: The number of managed nodes targeted by the command exceeded the account limit for pending invocations. The system has canceled the command before running it on any managed node. This is a terminal state.
2053
+ * A detailed status of the command execution. StatusDetails includes more information than Status because it includes states resulting from error and concurrency control parameters. StatusDetails can show different results than Status. For more information about these statuses, see Understanding command statuses in the Amazon Web Services Systems Manager User Guide. StatusDetails can be one of the following values: Pending: The command hasn't been sent to any managed nodes. In Progress: The command has been sent to at least one managed node but hasn't reached a final state on all managed nodes. Success: The command successfully ran on all invocations. This is a terminal state. Delivery Timed Out: The value of MaxErrors or more command invocations shows a status of Delivery Timed Out. This is a terminal state. Execution Timed Out: The value of MaxErrors or more command invocations shows a status of Execution Timed Out. This is a terminal state. Failed: The value of MaxErrors or more command invocations shows a status of Failed. This is a terminal state. Incomplete: The command was attempted on all managed nodes and one or more invocations doesn't have a value of Success but not enough invocations failed for the status to be Failed. This is a terminal state. Cancelled: The command was terminated before it was completed. This is a terminal state. Rate Exceeded: The number of managed nodes targeted by the command exceeded the account limit for pending invocations. The system has canceled the command before running it on any managed node. This is a terminal state. Delayed: The system attempted to send the command to the managed node but wasn't successful. The system retries again.
2054
2054
  */
2055
2055
  StatusDetails?: StatusDetails;
2056
2056
  /**
@@ -2154,7 +2154,7 @@ declare namespace SSM {
2154
2154
  */
2155
2155
  Status?: CommandInvocationStatus;
2156
2156
  /**
2157
- * A detailed status of the command execution for each invocation (each managed node targeted by the command). StatusDetails includes more information than Status because it includes states resulting from error and concurrency control parameters. StatusDetails can show different results than Status. For more information about these statuses, see Understanding command statuses in the Amazon Web Services Systems Manager User Guide. StatusDetails can be one of the following values: Pending: The command hasn't been sent to the managed node. In Progress: The command has been sent to the managed node but hasn't reached a terminal state. Success: The execution of the command or plugin was successfully completed. This is a terminal state. Delivery Timed Out: The command wasn't delivered to the managed node before the delivery timeout expired. Delivery timeouts don't count against the parent command's MaxErrors limit, but they do contribute to whether the parent command status is Success or Incomplete. This is a terminal state. Execution Timed Out: Command execution started on the managed node, but the execution wasn't complete before the execution timeout expired. Execution timeouts count against the MaxErrors limit of the parent command. This is a terminal state. Failed: The command wasn't successful on the managed node. For a plugin, this indicates that the result code wasn't zero. For a command invocation, this indicates that the result code for one or more plugins wasn't zero. Invocation failures count against the MaxErrors limit of the parent command. This is a terminal state. Cancelled: The command was terminated before it was completed. This is a terminal state. Undeliverable: The command can't be delivered to the managed node. The managed node might not exist or might not be responding. Undeliverable invocations don't count against the parent command's MaxErrors limit and don't contribute to whether the parent command status is Success or Incomplete. This is a terminal state. Terminated: The parent command exceeded its MaxErrors limit and subsequent command invocations were canceled by the system. This is a terminal state.
2157
+ * A detailed status of the command execution for each invocation (each managed node targeted by the command). StatusDetails includes more information than Status because it includes states resulting from error and concurrency control parameters. StatusDetails can show different results than Status. For more information about these statuses, see Understanding command statuses in the Amazon Web Services Systems Manager User Guide. StatusDetails can be one of the following values: Pending: The command hasn't been sent to the managed node. In Progress: The command has been sent to the managed node but hasn't reached a terminal state. Success: The execution of the command or plugin was successfully completed. This is a terminal state. Delivery Timed Out: The command wasn't delivered to the managed node before the delivery timeout expired. Delivery timeouts don't count against the parent command's MaxErrors limit, but they do contribute to whether the parent command status is Success or Incomplete. This is a terminal state. Execution Timed Out: Command execution started on the managed node, but the execution wasn't complete before the execution timeout expired. Execution timeouts count against the MaxErrors limit of the parent command. This is a terminal state. Failed: The command wasn't successful on the managed node. For a plugin, this indicates that the result code wasn't zero. For a command invocation, this indicates that the result code for one or more plugins wasn't zero. Invocation failures count against the MaxErrors limit of the parent command. This is a terminal state. Cancelled: The command was terminated before it was completed. This is a terminal state. Undeliverable: The command can't be delivered to the managed node. The managed node might not exist or might not be responding. Undeliverable invocations don't count against the parent command's MaxErrors limit and don't contribute to whether the parent command status is Success or Incomplete. This is a terminal state. Terminated: The parent command exceeded its MaxErrors limit and subsequent command invocations were canceled by the system. This is a terminal state. Delayed: The system attempted to send the command to the managed node but wasn't successful. The system retries again.
2158
2158
  */
2159
2159
  StatusDetails?: StatusDetails;
2160
2160
  /**
@@ -2618,7 +2618,7 @@ declare namespace SSM {
2618
2618
  */
2619
2619
  DisplayName?: DocumentDisplayName;
2620
2620
  /**
2621
- * An optional field specifying the version of the artifact you are creating with the document. For example, "Release 12, Update 6". This value is unique across all versions of a document, and can't be changed.
2621
+ * An optional field specifying the version of the artifact you are creating with the document. For example, Release12.1. This value is unique across all versions of a document, and can't be changed.
2622
2622
  */
2623
2623
  VersionName?: DocumentVersionName;
2624
2624
  /**
@@ -5322,7 +5322,7 @@ declare namespace SSM {
5322
5322
  }
5323
5323
  export interface GetServiceSettingRequest {
5324
5324
  /**
5325
- * The ID of the service setting to get. The setting ID can be one of the following. /ssm/automation/customer-script-log-destination /ssm/automation/customer-script-log-group-name /ssm/documents/console/public-sharing-permission /ssm/parameter-store/default-parameter-tier /ssm/parameter-store/high-throughput-enabled /ssm/managed-instance/activation-tier
5325
+ * The ID of the service setting to get. The setting ID can be one of the following. /ssm/automation/customer-script-log-destination /ssm/automation/customer-script-log-group-name /ssm/documents/console/public-sharing-permission /ssm/managed-instance/activation-tier /ssm/opsinsights/opscenter /ssm/parameter-store/default-parameter-tier /ssm/parameter-store/high-throughput-enabled
5326
5326
  */
5327
5327
  SettingId: ServiceSettingId;
5328
5328
  }
@@ -8155,7 +8155,7 @@ declare namespace SSM {
8155
8155
  }
8156
8156
  export interface ResetServiceSettingRequest {
8157
8157
  /**
8158
- * The Amazon Resource Name (ARN) of the service setting to reset. The setting ID can be one of the following. /ssm/automation/customer-script-log-destination /ssm/automation/customer-script-log-group-name /ssm/documents/console/public-sharing-permission /ssm/parameter-store/default-parameter-tier /ssm/parameter-store/high-throughput-enabled /ssm/managed-instance/activation-tier
8158
+ * The Amazon Resource Name (ARN) of the service setting to reset. The setting ID can be one of the following. /ssm/automation/customer-script-log-destination /ssm/automation/customer-script-log-group-name /ssm/documents/console/public-sharing-permission /ssm/managed-instance/activation-tier /ssm/opsinsights/opscenter /ssm/parameter-store/default-parameter-tier /ssm/parameter-store/high-throughput-enabled
8159
8159
  */
8160
8160
  SettingId: ServiceSettingId;
8161
8161
  }
@@ -8704,7 +8704,7 @@ declare namespace SSM {
8704
8704
  export type SessionTarget = string;
8705
8705
  export interface SeveritySummary {
8706
8706
  /**
8707
- * The total number of resources or compliance items that have a severity level of critical. Critical severity is determined by the organization that published the compliance items.
8707
+ * The total number of resources or compliance items that have a severity level of Critical. Critical severity is determined by the organization that published the compliance items.
8708
8708
  */
8709
8709
  CriticalCount?: ComplianceSummaryCount;
8710
8710
  /**
@@ -8858,7 +8858,7 @@ declare namespace SSM {
8858
8858
  */
8859
8859
  Target: SessionTarget;
8860
8860
  /**
8861
- * The name of the SSM document to define the parameters and plugin settings for the session. For example, SSM-SessionManagerRunShell. You can call the GetDocument API to verify the document exists before attempting to start a session. If no document name is provided, a shell to the managed node is launched by default.
8861
+ * The name of the SSM document you want to use to define the type of session, input parameters, or preferences for the session. For example, SSM-SessionManagerRunShell. You can call the GetDocument API to verify the document exists before attempting to start a session. If no document name is provided, a shell to the managed node is launched by default. For more information, see Start a session in the Amazon Web Services Systems Manager User Guide.
8862
8862
  */
8863
8863
  DocumentName?: DocumentARN;
8864
8864
  /**
@@ -9786,11 +9786,11 @@ declare namespace SSM {
9786
9786
  }
9787
9787
  export interface UpdateServiceSettingRequest {
9788
9788
  /**
9789
- * The Amazon Resource Name (ARN) of the service setting to reset. For example, arn:aws:ssm:us-east-1:111122223333:servicesetting/ssm/parameter-store/high-throughput-enabled. The setting ID can be one of the following. /ssm/automation/customer-script-log-destination /ssm/automation/customer-script-log-group-name /ssm/documents/console/public-sharing-permission /ssm/parameter-store/default-parameter-tier /ssm/parameter-store/high-throughput-enabled /ssm/managed-instance/activation-tier
9789
+ * The Amazon Resource Name (ARN) of the service setting to reset. For example, arn:aws:ssm:us-east-1:111122223333:servicesetting/ssm/parameter-store/high-throughput-enabled. The setting ID can be one of the following. /ssm/automation/customer-script-log-destination /ssm/automation/customer-script-log-group-name /ssm/documents/console/public-sharing-permission /ssm/managed-instance/activation-tier /ssm/opsinsights/opscenter /ssm/parameter-store/default-parameter-tier /ssm/parameter-store/high-throughput-enabled
9790
9790
  */
9791
9791
  SettingId: ServiceSettingId;
9792
9792
  /**
9793
- * The new value to specify for the service setting. The following list specifies the available values for each setting. /ssm/parameter-store/default-parameter-tier: Standard, Advanced, Intelligent-Tiering /ssm/parameter-store/high-throughput-enabled: true or false /ssm/managed-instance/activation-tier: true or false /ssm/automation/customer-script-log-destination: CloudWatch /ssm/automation/customer-script-log-group-name: the name of an Amazon CloudWatch Logs log group /ssm/documents/console/public-sharing-permission: Enable or Disable /ssm/managed-instance/activation-tier: standard or advanced
9793
+ * The new value to specify for the service setting. The following list specifies the available values for each setting. /ssm/automation/customer-script-log-destination: CloudWatch /ssm/automation/customer-script-log-group-name: the name of an Amazon CloudWatch Logs log group /ssm/documents/console/public-sharing-permission: Enable or Disable /ssm/managed-instance/activation-tier: standard or advanced /ssm/opsinsights/opscenter: Enabled or Disabled /ssm/parameter-store/default-parameter-tier: Standard, Advanced, Intelligent-Tiering /ssm/parameter-store/high-throughput-enabled: true or false
9794
9794
  */
9795
9795
  SettingValue: ServiceSettingValue;
9796
9796
  }