cdk-lambda-subminute 2.0.353 → 2.0.355

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (42) hide show
  1. package/.jsii +3 -3
  2. package/lib/cdk-lambda-subminute.js +3 -3
  3. package/node_modules/aws-sdk/README.md +1 -1
  4. package/node_modules/aws-sdk/apis/iotfleetwise-2021-06-17.min.json +15 -11
  5. package/node_modules/aws-sdk/apis/keyspaces-2022-02-10.min.json +159 -16
  6. package/node_modules/aws-sdk/apis/metadata.json +0 -8
  7. package/node_modules/aws-sdk/apis/payment-cryptography-2021-09-14.min.json +45 -11
  8. package/node_modules/aws-sdk/apis/rekognition-2016-06-27.min.json +114 -93
  9. package/node_modules/aws-sdk/clients/all.d.ts +0 -2
  10. package/node_modules/aws-sdk/clients/all.js +0 -2
  11. package/node_modules/aws-sdk/clients/dynamodb.d.ts +1 -1
  12. package/node_modules/aws-sdk/clients/iot.d.ts +1 -1
  13. package/node_modules/aws-sdk/clients/iotfleetwise.d.ts +10 -1
  14. package/node_modules/aws-sdk/clients/keyspaces.d.ts +165 -4
  15. package/node_modules/aws-sdk/clients/macie2.d.ts +13 -13
  16. package/node_modules/aws-sdk/clients/paymentcryptography.d.ts +55 -12
  17. package/node_modules/aws-sdk/clients/personalize.d.ts +6 -6
  18. package/node_modules/aws-sdk/clients/rekognition.d.ts +32 -3
  19. package/node_modules/aws-sdk/clients/securityhub.d.ts +1 -1
  20. package/node_modules/aws-sdk/dist/aws-sdk-core-react-native.js +7 -4
  21. package/node_modules/aws-sdk/dist/aws-sdk-react-native.js +122 -218
  22. package/node_modules/aws-sdk/dist/aws-sdk.js +117 -104
  23. package/node_modules/aws-sdk/dist/aws-sdk.min.js +38 -38
  24. package/node_modules/aws-sdk/dist-tools/service-collector.js +1 -1
  25. package/node_modules/aws-sdk/lib/config_service_placeholders.d.ts +0 -4
  26. package/node_modules/aws-sdk/lib/core.js +1 -1
  27. package/node_modules/aws-sdk/lib/dynamodb/document_client.d.ts +1 -1
  28. package/node_modules/aws-sdk/package.json +1 -1
  29. package/node_modules/aws-sdk/scripts/console +3 -3
  30. package/package.json +3 -3
  31. package/node_modules/aws-sdk/apis/cloudfront-keyvaluestore-2022-07-26.examples.json +0 -5
  32. package/node_modules/aws-sdk/apis/cloudfront-keyvaluestore-2022-07-26.min.json +0 -359
  33. package/node_modules/aws-sdk/apis/cloudfront-keyvaluestore-2022-07-26.paginators.json +0 -10
  34. package/node_modules/aws-sdk/apis/neptune-graph-2023-11-29.examples.json +0 -5
  35. package/node_modules/aws-sdk/apis/neptune-graph-2023-11-29.min.json +0 -1286
  36. package/node_modules/aws-sdk/apis/neptune-graph-2023-11-29.paginators.json +0 -28
  37. package/node_modules/aws-sdk/apis/neptune-graph-2023-11-29.waiters2.json +0 -168
  38. package/node_modules/aws-sdk/clients/cloudfrontkeyvaluestore.d.ts +0 -294
  39. package/node_modules/aws-sdk/clients/cloudfrontkeyvaluestore.js +0 -18
  40. package/node_modules/aws-sdk/clients/neptunegraph.d.ts +0 -1459
  41. package/node_modules/aws-sdk/clients/neptunegraph.js +0 -20
  42. package/node_modules/aws-sdk/lib/services/neptunegraph.js +0 -14
@@ -357,7 +357,6 @@ export import BedrockRuntime = require('./bedrockruntime');
357
357
  export import DataZone = require('./datazone');
358
358
  export import LaunchWizard = require('./launchwizard');
359
359
  export import TrustedAdvisor = require('./trustedadvisor');
360
- export import CloudFrontKeyValueStore = require('./cloudfrontkeyvaluestore');
361
360
  export import InspectorScan = require('./inspectorscan');
362
361
  export import BCMDataExports = require('./bcmdataexports');
363
362
  export import CostOptimizationHub = require('./costoptimizationhub');
@@ -373,6 +372,5 @@ export import QConnect = require('./qconnect');
373
372
  export import CleanRoomsML = require('./cleanroomsml');
374
373
  export import MarketplaceAgreement = require('./marketplaceagreement');
375
374
  export import MarketplaceDeployment = require('./marketplacedeployment');
376
- export import NeptuneGraph = require('./neptunegraph');
377
375
  export import NetworkMonitor = require('./networkmonitor');
378
376
  export import SupplyChain = require('./supplychain');
@@ -359,7 +359,6 @@ module.exports = {
359
359
  DataZone: require('./datazone'),
360
360
  LaunchWizard: require('./launchwizard'),
361
361
  TrustedAdvisor: require('./trustedadvisor'),
362
- CloudFrontKeyValueStore: require('./cloudfrontkeyvaluestore'),
363
362
  InspectorScan: require('./inspectorscan'),
364
363
  BCMDataExports: require('./bcmdataexports'),
365
364
  CostOptimizationHub: require('./costoptimizationhub'),
@@ -375,7 +374,6 @@ module.exports = {
375
374
  CleanRoomsML: require('./cleanroomsml'),
376
375
  MarketplaceAgreement: require('./marketplaceagreement'),
377
376
  MarketplaceDeployment: require('./marketplacedeployment'),
378
- NeptuneGraph: require('./neptunegraph'),
379
377
  NetworkMonitor: require('./networkmonitor'),
380
378
  SupplyChain: require('./supplychain')
381
379
  };
@@ -3849,7 +3849,7 @@ declare namespace DynamoDB {
3849
3849
  */
3850
3850
  GlobalSecondaryIndexUpdates?: GlobalSecondaryIndexUpdateList;
3851
3851
  /**
3852
- * Represents the DynamoDB Streams configuration for the table. You receive a ResourceInUseException if you try to enable a stream on a table that already has a stream, or if you try to disable a stream on a table that doesn't have a stream.
3852
+ * Represents the DynamoDB Streams configuration for the table. You receive a ValidationException if you try to enable a stream on a table that already has a stream, or if you try to disable a stream on a table that doesn't have a stream.
3853
3853
  */
3854
3854
  StreamSpecification?: StreamSpecification;
3855
3855
  /**
@@ -9080,7 +9080,7 @@ declare namespace Iot {
9080
9080
  }
9081
9081
  export type LogTargetConfigurations = LogTargetConfiguration[];
9082
9082
  export type LogTargetName = string;
9083
- export type LogTargetType = "DEFAULT"|"THING_GROUP"|"CLIENT_ID"|"SOURCE_IP"|"PRINCIPAL_ID"|"EVENT_TYPE"|"DEVICE_DEFENDER"|string;
9083
+ export type LogTargetType = "DEFAULT"|"THING_GROUP"|"CLIENT_ID"|"SOURCE_IP"|"PRINCIPAL_ID"|string;
9084
9084
  export interface LoggingOptionsPayload {
9085
9085
  /**
9086
9086
  * The ARN of the IAM role that grants access.
@@ -707,7 +707,7 @@ declare namespace IoTFleetWise {
707
707
  export type Compression = "OFF"|"SNAPPY"|string;
708
708
  export interface ConditionBasedCollectionScheme {
709
709
  /**
710
- * The logical expression used to recognize what data to collect. For example, $variable.Vehicle.OutsideAirTemperature >= 105.0.
710
+ * The logical expression used to recognize what data to collect. For example, $variable.`Vehicle.OutsideAirTemperature` >= 105.0.
711
711
  */
712
712
  expression: eventExpression;
713
713
  /**
@@ -1877,6 +1877,10 @@ declare namespace IoTFleetWise {
1877
1877
  * The maximum number of items to return, between 1 and 100, inclusive.
1878
1878
  */
1879
1879
  maxResults?: maxResults;
1880
+ /**
1881
+ * The type of node in the signal catalog.
1882
+ */
1883
+ signalNodeType?: SignalNodeType;
1880
1884
  }
1881
1885
  export interface ListSignalCatalogNodesResponse {
1882
1886
  /**
@@ -2386,6 +2390,7 @@ declare namespace IoTFleetWise {
2386
2390
  minimumSamplingIntervalMs?: uint32;
2387
2391
  }
2388
2392
  export type SignalInformationList = SignalInformation[];
2393
+ export type SignalNodeType = "SENSOR"|"ACTUATOR"|"ATTRIBUTE"|"BRANCH"|"CUSTOM_STRUCT"|"CUSTOM_PROPERTY"|string;
2389
2394
  export type SpoolingMode = "OFF"|"TO_DISK"|string;
2390
2395
  export type StorageCompressionFormat = "NONE"|"GZIP"|string;
2391
2396
  export type String = string;
@@ -2827,6 +2832,10 @@ declare namespace IoTFleetWise {
2827
2832
  * The time the vehicle was last updated in seconds since epoch (January 1, 1970 at midnight UTC time).
2828
2833
  */
2829
2834
  lastModificationTime: timestamp;
2835
+ /**
2836
+ * Static information about a vehicle in a key-value pair. For example: "engineType" : "1.3 L R2"
2837
+ */
2838
+ attributes?: attributesMap;
2830
2839
  }
2831
2840
  export type arn = string;
2832
2841
  export type attributeName = string;
@@ -59,6 +59,14 @@ declare class Keyspaces extends Service {
59
59
  * Returns information about the table, including the table's name and current status, the keyspace name, configuration settings, and metadata. To read table metadata using GetTable, Select action permissions for the table and system tables are required to complete the operation.
60
60
  */
61
61
  getTable(callback?: (err: AWSError, data: Keyspaces.Types.GetTableResponse) => void): Request<Keyspaces.Types.GetTableResponse, AWSError>;
62
+ /**
63
+ * Returns auto scaling related settings of the specified table in JSON format. If the table is a multi-Region table, the Amazon Web Services Region specific auto scaling settings of the table are included. Amazon Keyspaces auto scaling helps you provision throughput capacity for variable workloads efficiently by increasing and decreasing your table's read and write capacity automatically in response to application traffic. For more information, see Managing throughput capacity automatically with Amazon Keyspaces auto scaling in the Amazon Keyspaces Developer Guide.
64
+ */
65
+ getTableAutoScalingSettings(params: Keyspaces.Types.GetTableAutoScalingSettingsRequest, callback?: (err: AWSError, data: Keyspaces.Types.GetTableAutoScalingSettingsResponse) => void): Request<Keyspaces.Types.GetTableAutoScalingSettingsResponse, AWSError>;
66
+ /**
67
+ * Returns auto scaling related settings of the specified table in JSON format. If the table is a multi-Region table, the Amazon Web Services Region specific auto scaling settings of the table are included. Amazon Keyspaces auto scaling helps you provision throughput capacity for variable workloads efficiently by increasing and decreasing your table's read and write capacity automatically in response to application traffic. For more information, see Managing throughput capacity automatically with Amazon Keyspaces auto scaling in the Amazon Keyspaces Developer Guide.
68
+ */
69
+ getTableAutoScalingSettings(callback?: (err: AWSError, data: Keyspaces.Types.GetTableAutoScalingSettingsResponse) => void): Request<Keyspaces.Types.GetTableAutoScalingSettingsResponse, AWSError>;
62
70
  /**
63
71
  * Returns a list of keyspaces.
64
72
  */
@@ -84,11 +92,11 @@ declare class Keyspaces extends Service {
84
92
  */
85
93
  listTagsForResource(callback?: (err: AWSError, data: Keyspaces.Types.ListTagsForResourceResponse) => void): Request<Keyspaces.Types.ListTagsForResourceResponse, AWSError>;
86
94
  /**
87
- * Restores the specified table to the specified point in time within the earliest_restorable_timestamp and the current time. For more information about restore points, see Time window for PITR continuous backups in the Amazon Keyspaces Developer Guide. Any number of users can execute up to 4 concurrent restores (any type of restore) in a given account. When you restore using point in time recovery, Amazon Keyspaces restores your source table's schema and data to the state based on the selected timestamp (day:hour:minute:second) to a new table. The Time to Live (TTL) settings are also restored to the state based on the selected timestamp. In addition to the table's schema, data, and TTL settings, RestoreTable restores the capacity mode, encryption, and point-in-time recovery settings from the source table. Unlike the table's schema data and TTL settings, which are restored based on the selected timestamp, these settings are always restored based on the table's settings as of the current time or when the table was deleted. You can also overwrite these settings during restore: Read/write capacity mode Provisioned throughput capacity settings Point-in-time (PITR) settings Tags For more information, see PITR restore settings in the Amazon Keyspaces Developer Guide. Note that the following settings are not restored, and you must configure them manually for the new table: Automatic scaling policies (for tables that use provisioned capacity mode) Identity and Access Management (IAM) policies Amazon CloudWatch metrics and alarms
95
+ * Restores the table to the specified point in time within the earliest_restorable_timestamp and the current time. For more information about restore points, see Time window for PITR continuous backups in the Amazon Keyspaces Developer Guide. Any number of users can execute up to 4 concurrent restores (any type of restore) in a given account. When you restore using point in time recovery, Amazon Keyspaces restores your source table's schema and data to the state based on the selected timestamp (day:hour:minute:second) to a new table. The Time to Live (TTL) settings are also restored to the state based on the selected timestamp. In addition to the table's schema, data, and TTL settings, RestoreTable restores the capacity mode, auto scaling settings, encryption settings, and point-in-time recovery settings from the source table. Unlike the table's schema data and TTL settings, which are restored based on the selected timestamp, these settings are always restored based on the table's settings as of the current time or when the table was deleted. You can also overwrite these settings during restore: Read/write capacity mode Provisioned throughput capacity units Auto scaling settings Point-in-time (PITR) settings Tags For more information, see PITR restore settings in the Amazon Keyspaces Developer Guide. Note that the following settings are not restored, and you must configure them manually for the new table: Identity and Access Management (IAM) policies Amazon CloudWatch metrics and alarms
88
96
  */
89
97
  restoreTable(params: Keyspaces.Types.RestoreTableRequest, callback?: (err: AWSError, data: Keyspaces.Types.RestoreTableResponse) => void): Request<Keyspaces.Types.RestoreTableResponse, AWSError>;
90
98
  /**
91
- * Restores the specified table to the specified point in time within the earliest_restorable_timestamp and the current time. For more information about restore points, see Time window for PITR continuous backups in the Amazon Keyspaces Developer Guide. Any number of users can execute up to 4 concurrent restores (any type of restore) in a given account. When you restore using point in time recovery, Amazon Keyspaces restores your source table's schema and data to the state based on the selected timestamp (day:hour:minute:second) to a new table. The Time to Live (TTL) settings are also restored to the state based on the selected timestamp. In addition to the table's schema, data, and TTL settings, RestoreTable restores the capacity mode, encryption, and point-in-time recovery settings from the source table. Unlike the table's schema data and TTL settings, which are restored based on the selected timestamp, these settings are always restored based on the table's settings as of the current time or when the table was deleted. You can also overwrite these settings during restore: Read/write capacity mode Provisioned throughput capacity settings Point-in-time (PITR) settings Tags For more information, see PITR restore settings in the Amazon Keyspaces Developer Guide. Note that the following settings are not restored, and you must configure them manually for the new table: Automatic scaling policies (for tables that use provisioned capacity mode) Identity and Access Management (IAM) policies Amazon CloudWatch metrics and alarms
99
+ * Restores the table to the specified point in time within the earliest_restorable_timestamp and the current time. For more information about restore points, see Time window for PITR continuous backups in the Amazon Keyspaces Developer Guide. Any number of users can execute up to 4 concurrent restores (any type of restore) in a given account. When you restore using point in time recovery, Amazon Keyspaces restores your source table's schema and data to the state based on the selected timestamp (day:hour:minute:second) to a new table. The Time to Live (TTL) settings are also restored to the state based on the selected timestamp. In addition to the table's schema, data, and TTL settings, RestoreTable restores the capacity mode, auto scaling settings, encryption settings, and point-in-time recovery settings from the source table. Unlike the table's schema data and TTL settings, which are restored based on the selected timestamp, these settings are always restored based on the table's settings as of the current time or when the table was deleted. You can also overwrite these settings during restore: Read/write capacity mode Provisioned throughput capacity units Auto scaling settings Point-in-time (PITR) settings Tags For more information, see PITR restore settings in the Amazon Keyspaces Developer Guide. Note that the following settings are not restored, and you must configure them manually for the new table: Identity and Access Management (IAM) policies Amazon CloudWatch metrics and alarms
92
100
  */
93
101
  restoreTable(callback?: (err: AWSError, data: Keyspaces.Types.RestoreTableResponse) => void): Request<Keyspaces.Types.RestoreTableResponse, AWSError>;
94
102
  /**
@@ -108,16 +116,51 @@ declare class Keyspaces extends Service {
108
116
  */
109
117
  untagResource(callback?: (err: AWSError, data: Keyspaces.Types.UntagResourceResponse) => void): Request<Keyspaces.Types.UntagResourceResponse, AWSError>;
110
118
  /**
111
- * Adds new columns to the table or updates one of the table's settings, for example capacity mode, encryption, point-in-time recovery, or ttl settings. Note that you can only update one specific table setting per update operation.
119
+ * Adds new columns to the table or updates one of the table's settings, for example capacity mode, auto scaling, encryption, point-in-time recovery, or ttl settings. Note that you can only update one specific table setting per update operation.
112
120
  */
113
121
  updateTable(params: Keyspaces.Types.UpdateTableRequest, callback?: (err: AWSError, data: Keyspaces.Types.UpdateTableResponse) => void): Request<Keyspaces.Types.UpdateTableResponse, AWSError>;
114
122
  /**
115
- * Adds new columns to the table or updates one of the table's settings, for example capacity mode, encryption, point-in-time recovery, or ttl settings. Note that you can only update one specific table setting per update operation.
123
+ * Adds new columns to the table or updates one of the table's settings, for example capacity mode, auto scaling, encryption, point-in-time recovery, or ttl settings. Note that you can only update one specific table setting per update operation.
116
124
  */
117
125
  updateTable(callback?: (err: AWSError, data: Keyspaces.Types.UpdateTableResponse) => void): Request<Keyspaces.Types.UpdateTableResponse, AWSError>;
118
126
  }
119
127
  declare namespace Keyspaces {
120
128
  export type ARN = string;
129
+ export interface AutoScalingPolicy {
130
+ /**
131
+ * Auto scaling scales up capacity automatically when traffic exceeds this target utilization rate, and then back down when it falls below the target. A double between 20 and 90.
132
+ */
133
+ targetTrackingScalingPolicyConfiguration?: TargetTrackingScalingPolicyConfiguration;
134
+ }
135
+ export interface AutoScalingSettings {
136
+ /**
137
+ * This optional parameter enables auto scaling for the table if set to false.
138
+ */
139
+ autoScalingDisabled?: BooleanObject;
140
+ /**
141
+ * The minimum level of throughput the table should always be ready to support. The value must be between 1 and the max throughput per second quota for your account (40,000 by default).
142
+ */
143
+ minimumUnits?: CapacityUnits;
144
+ /**
145
+ * Manage costs by specifying the maximum amount of throughput to provision. The value must be between 1 and the max throughput per second quota for your account (40,000 by default).
146
+ */
147
+ maximumUnits?: CapacityUnits;
148
+ /**
149
+ * Amazon Keyspaces supports the target tracking auto scaling policy. With this policy, Amazon Keyspaces auto scaling ensures that the table's ratio of consumed to provisioned capacity stays at or near the target value that you specify. You define the target value as a percentage between 20 and 90.
150
+ */
151
+ scalingPolicy?: AutoScalingPolicy;
152
+ }
153
+ export interface AutoScalingSpecification {
154
+ /**
155
+ * The auto scaling settings for the table's write capacity.
156
+ */
157
+ writeCapacityAutoScaling?: AutoScalingSettings;
158
+ /**
159
+ * The auto scaling settings for the table's read capacity.
160
+ */
161
+ readCapacityAutoScaling?: AutoScalingSettings;
162
+ }
163
+ export type BooleanObject = boolean;
121
164
  export interface CapacitySpecification {
122
165
  /**
123
166
  * The read/write throughput capacity mode for a table. The options are: throughputMode:PAY_PER_REQUEST and throughputMode:PROVISIONED - Provisioned capacity mode requires readCapacityUnits and writeCapacityUnits as input. The default is throughput_mode:PAY_PER_REQUEST. For more information, see Read/write capacity modes in the Amazon Keyspaces Developer Guide.
@@ -251,6 +294,14 @@ declare namespace Keyspaces {
251
294
  * Enables client-side timestamps for the table. By default, the setting is disabled. You can enable client-side timestamps with the following option: status: "enabled" Once client-side timestamps are enabled for a table, this setting cannot be disabled.
252
295
  */
253
296
  clientSideTimestamps?: ClientSideTimestamps;
297
+ /**
298
+ * The optional auto scaling settings for a table in provisioned capacity mode. Specifies if the service can manage throughput capacity automatically on your behalf. Auto scaling helps you provision throughput capacity for variable workloads efficiently by increasing and decreasing your table's read and write capacity automatically in response to application traffic. For more information, see Managing throughput capacity automatically with Amazon Keyspaces auto scaling in the Amazon Keyspaces Developer Guide. By default, auto scaling is disabled for a table.
299
+ */
300
+ autoScalingSpecification?: AutoScalingSpecification;
301
+ /**
302
+ * The optional Amazon Web Services Region specific settings of a multi-Region table. These settings overwrite the general settings of the table for the specified Region. For a multi-Region table in provisioned capacity mode, you can configure the table's read capacity differently for each Region's replica. The write capacity, however, remains synchronized between all replicas to ensure that there's enough capacity to replicate writes across all Regions. To define the read capacity for a table replica in a specific Region, you can do so by configuring the following parameters. region: The Region where these settings are applied. (Required) readCapacityUnits: The provisioned read capacity units. (Optional) readCapacityAutoScaling: The read capacity auto scaling settings for the table. (Optional)
303
+ */
304
+ replicaSpecifications?: ReplicaSpecificationList;
254
305
  }
255
306
  export interface CreateTableResponse {
256
307
  /**
@@ -279,6 +330,7 @@ declare namespace Keyspaces {
279
330
  }
280
331
  export interface DeleteTableResponse {
281
332
  }
333
+ export type DoubleObject = number;
282
334
  export interface EncryptionSpecification {
283
335
  /**
284
336
  * The encryption option specified for the table. You can choose one of the following KMS keys (KMS keys): type:AWS_OWNED_KMS_KEY - This key is owned by Amazon Keyspaces. type:CUSTOMER_MANAGED_KMS_KEY - This key is stored in your account and is created, owned, and managed by you. This option requires the kms_key_identifier of the KMS key in Amazon Resource Name (ARN) format as input. The default is type:AWS_OWNED_KMS_KEY. For more information, see Encryption at rest in the Amazon Keyspaces Developer Guide.
@@ -315,6 +367,38 @@ declare namespace Keyspaces {
315
367
  */
316
368
  replicationRegions?: RegionList;
317
369
  }
370
+ export interface GetTableAutoScalingSettingsRequest {
371
+ /**
372
+ * The name of the keyspace.
373
+ */
374
+ keyspaceName: KeyspaceName;
375
+ /**
376
+ * The name of the table.
377
+ */
378
+ tableName: TableName;
379
+ }
380
+ export interface GetTableAutoScalingSettingsResponse {
381
+ /**
382
+ * The name of the keyspace.
383
+ */
384
+ keyspaceName: KeyspaceName;
385
+ /**
386
+ * The name of the table.
387
+ */
388
+ tableName: TableName;
389
+ /**
390
+ * The Amazon Resource Name (ARN) of the table.
391
+ */
392
+ resourceArn: ARN;
393
+ /**
394
+ * The auto scaling settings of the table.
395
+ */
396
+ autoScalingSpecification?: AutoScalingSpecification;
397
+ /**
398
+ * The Amazon Web Services Region specific settings of a multi-Region table. Returns the settings for all Regions the table is replicated in.
399
+ */
400
+ replicaSpecifications?: ReplicaAutoScalingSpecificationList;
401
+ }
318
402
  export interface GetTableRequest {
319
403
  /**
320
404
  * The name of the keyspace that the table is stored in.
@@ -378,7 +462,12 @@ declare namespace Keyspaces {
378
462
  * The client-side timestamps setting of the table.
379
463
  */
380
464
  clientSideTimestamps?: ClientSideTimestamps;
465
+ /**
466
+ * Returns the Amazon Web Services Region specific settings of all Regions a multi-Region table is replicated in.
467
+ */
468
+ replicaSpecifications?: ReplicaSpecificationSummaryList;
381
469
  }
470
+ export type IntegerObject = number;
382
471
  export type KeyspaceName = string;
383
472
  export interface KeyspaceSummary {
384
473
  /**
@@ -494,6 +583,44 @@ declare namespace Keyspaces {
494
583
  earliestRestorableTimestamp?: Timestamp;
495
584
  }
496
585
  export type RegionList = region[];
586
+ export interface ReplicaAutoScalingSpecification {
587
+ /**
588
+ * The Amazon Web Services Region.
589
+ */
590
+ region?: region;
591
+ /**
592
+ * The auto scaling settings for a multi-Region table in the specified Amazon Web Services Region.
593
+ */
594
+ autoScalingSpecification?: AutoScalingSpecification;
595
+ }
596
+ export type ReplicaAutoScalingSpecificationList = ReplicaAutoScalingSpecification[];
597
+ export interface ReplicaSpecification {
598
+ /**
599
+ * The Amazon Web Services Region.
600
+ */
601
+ region: region;
602
+ /**
603
+ * The provisioned read capacity units for the multi-Region table in the specified Amazon Web Services Region.
604
+ */
605
+ readCapacityUnits?: CapacityUnits;
606
+ /**
607
+ * The read capacity auto scaling settings for the multi-Region table in the specified Amazon Web Services Region.
608
+ */
609
+ readCapacityAutoScaling?: AutoScalingSettings;
610
+ }
611
+ export type ReplicaSpecificationList = ReplicaSpecification[];
612
+ export interface ReplicaSpecificationSummary {
613
+ /**
614
+ * The Amazon Web Services Region.
615
+ */
616
+ region?: region;
617
+ /**
618
+ * The status of the multi-Region table in the specified Amazon Web Services Region.
619
+ */
620
+ status?: TableStatus;
621
+ capacitySpecification?: CapacitySpecificationSummary;
622
+ }
623
+ export type ReplicaSpecificationSummaryList = ReplicaSpecificationSummary[];
497
624
  export interface ReplicationSpecification {
498
625
  /**
499
626
  * The replicationStrategy of a keyspace, the required value is SINGLE_REGION or MULTI_REGION.
@@ -541,6 +668,14 @@ declare namespace Keyspaces {
541
668
  * A list of key-value pair tags to be attached to the restored table. For more information, see Adding tags and labels to Amazon Keyspaces resources in the Amazon Keyspaces Developer Guide.
542
669
  */
543
670
  tagsOverride?: TagList;
671
+ /**
672
+ * The optional auto scaling settings for the restored table in provisioned capacity mode. Specifies if the service can manage throughput capacity of a provisioned table automatically on your behalf. Amazon Keyspaces auto scaling helps you provision throughput capacity for variable workloads efficiently by increasing and decreasing your table's read and write capacity automatically in response to application traffic. For more information, see Managing throughput capacity automatically with Amazon Keyspaces auto scaling in the Amazon Keyspaces Developer Guide.
673
+ */
674
+ autoScalingSpecification?: AutoScalingSpecification;
675
+ /**
676
+ * The optional Region specific settings of a multi-Regional table.
677
+ */
678
+ replicaSpecifications?: ReplicaSpecificationList;
544
679
  }
545
680
  export interface RestoreTableResponse {
546
681
  /**
@@ -617,6 +752,24 @@ declare namespace Keyspaces {
617
752
  export interface TagResourceResponse {
618
753
  }
619
754
  export type TagValue = string;
755
+ export interface TargetTrackingScalingPolicyConfiguration {
756
+ /**
757
+ * Specifies if scale-in is enabled. When auto scaling automatically decreases capacity for a table, the table scales in. When scaling policies are set, they can't scale in the table lower than its minimum capacity.
758
+ */
759
+ disableScaleIn?: BooleanObject;
760
+ /**
761
+ * Specifies a scale-in cool down period. A cooldown period in seconds between scaling activities that lets the table stabilize before another scaling activity starts.
762
+ */
763
+ scaleInCooldown?: IntegerObject;
764
+ /**
765
+ * Specifies a scale out cool down period. A cooldown period in seconds between scaling activities that lets the table stabilize before another scaling activity starts.
766
+ */
767
+ scaleOutCooldown?: IntegerObject;
768
+ /**
769
+ * Specifies the target value for the target tracking auto scaling policy. Amazon Keyspaces auto scaling scales up capacity automatically when traffic exceeds this target utilization rate, and then back down when it falls below the target. This ensures that the ratio of consumed capacity to provisioned capacity stays at or near this value. You define targetValue as a percentage. A double between 20 and 90.
770
+ */
771
+ targetValue: DoubleObject;
772
+ }
620
773
  export type ThroughputMode = "PAY_PER_REQUEST"|"PROVISIONED"|string;
621
774
  export interface TimeToLive {
622
775
  /**
@@ -675,6 +828,14 @@ declare namespace Keyspaces {
675
828
  * Enables client-side timestamps for the table. By default, the setting is disabled. You can enable client-side timestamps with the following option: status: "enabled" Once client-side timestamps are enabled for a table, this setting cannot be disabled.
676
829
  */
677
830
  clientSideTimestamps?: ClientSideTimestamps;
831
+ /**
832
+ * The optional auto scaling settings to update for a table in provisioned capacity mode. Specifies if the service can manage throughput capacity of a provisioned table automatically on your behalf. Amazon Keyspaces auto scaling helps you provision throughput capacity for variable workloads efficiently by increasing and decreasing your table's read and write capacity automatically in response to application traffic. If auto scaling is already enabled for the table, you can use UpdateTable to update the minimum and maximum values or the auto scaling policy settings independently. For more information, see Managing throughput capacity automatically with Amazon Keyspaces auto scaling in the Amazon Keyspaces Developer Guide.
833
+ */
834
+ autoScalingSpecification?: AutoScalingSpecification;
835
+ /**
836
+ * The Region specific settings of a multi-Regional table.
837
+ */
838
+ replicaSpecifications?: ReplicaSpecificationList;
678
839
  }
679
840
  export interface UpdateTableResponse {
680
841
  /**
@@ -893,7 +893,7 @@ declare namespace Macie2 {
893
893
  }
894
894
  export interface BucketCountByEncryptionType {
895
895
  /**
896
- * The total number of buckets whose default encryption settings are configured to encrypt new objects with an Amazon Web Services managed KMS key or a customer managed KMS key. By default, these buckets encrypt new objects automatically using SSE-KMS encryption.
896
+ * The total number of buckets whose default encryption settings are configured to encrypt new objects with an KMS key, either an Amazon Web Services managed key or a customer managed key. By default, these buckets encrypt new objects automatically using DSSE-KMS or SSE-KMS encryption.
897
897
  */
898
898
  kmsManaged?: __long;
899
899
  /**
@@ -1129,7 +1129,7 @@ declare namespace Macie2 {
1129
1129
  */
1130
1130
  kmsMasterKeyId?: __string;
1131
1131
  /**
1132
- * The server-side encryption algorithm that's used by default to encrypt objects that are added to the bucket. Possible values are: AES256 - New objects are encrypted with an Amazon S3 managed key. They use SSE-S3 encryption. aws:kms - New objects are encrypted with an KMS key (kmsMasterKeyId), either an Amazon Web Services managed key or a customer managed key. They use SSE-KMS encryption. NONE - The bucket's default encryption settings don't specify server-side encryption behavior for new objects.
1132
+ * The server-side encryption algorithm that's used by default to encrypt objects that are added to the bucket. Possible values are: AES256 - New objects use SSE-S3 encryption. They're encrypted with an Amazon S3 managed key. aws:kms - New objects use SSE-KMS encryption. They're encrypted with an KMS key (kmsMasterKeyId), either an Amazon Web Services managed key or a customer managed key. aws:kms:dsse - New objects use DSSE-KMS encryption. They're encrypted with an KMS key (kmsMasterKeyId), either an Amazon Web Services managed key or a customer managed key. NONE - The bucket's default encryption settings don't specify server-side encryption behavior for new objects.
1133
1133
  */
1134
1134
  type?: Type;
1135
1135
  }
@@ -1887,7 +1887,7 @@ declare namespace Macie2 {
1887
1887
  }
1888
1888
  export interface EnableOrganizationAdminAccountResponse {
1889
1889
  }
1890
- export type EncryptionType = "NONE"|"AES256"|"aws:kms"|"UNKNOWN"|string;
1890
+ export type EncryptionType = "NONE"|"AES256"|"aws:kms"|"UNKNOWN"|"aws:kms:dsse"|string;
1891
1891
  export type ErrorCode = "ClientError"|"InternalError"|string;
1892
1892
  export interface FederatedUser {
1893
1893
  /**
@@ -2501,7 +2501,7 @@ declare namespace Macie2 {
2501
2501
  */
2502
2502
  code?: AvailabilityCode;
2503
2503
  /**
2504
- * Specifies why occurrences of sensitive data can't be retrieved for the finding. Possible values are: ACCOUNT_NOT_IN_ORGANIZATION - The affected account isn't currently part of your organization. Or the account is part of your organization but Macie isn't currently enabled for the account. You're not allowed to access the affected S3 object by using Macie. INVALID_CLASSIFICATION_RESULT - There isn't a corresponding sensitive data discovery result for the finding. Or the corresponding sensitive data discovery result isn't available, is malformed or corrupted, or uses an unsupported storage format. Macie can't verify the location of the sensitive data to retrieve. INVALID_RESULT_SIGNATURE - The corresponding sensitive data discovery result is stored in an S3 object that wasn't signed by Macie. Macie can't verify the integrity and authenticity of the sensitive data discovery result. Therefore, Macie can't verify the location of the sensitive data to retrieve. MEMBER_ROLE_TOO_PERMISSIVE - The affected member account is configured to retrieve occurrences of sensitive data by using an IAM role whose trust or permissions policy doesn't meet Macie requirements for restricting access to the role. Or the role's trust policy doesn't specify the correct external ID. Macie can't assume the role to retrieve the sensitive data. MISSING_GET_MEMBER_PERMISSION - You're not allowed to retrieve information about the association between your account and the affected account. Macie can't determine whether you’re allowed to access the affected S3 object as the delegated Macie administrator for the affected account. OBJECT_EXCEEDS_SIZE_QUOTA - The storage size of the affected S3 object exceeds the size quota for retrieving occurrences of sensitive data from this type of file. OBJECT_UNAVAILABLE - The affected S3 object isn't available. The object was renamed, moved, or deleted. Or the object was changed after Macie created the finding. RESULT_NOT_SIGNED - The corresponding sensitive data discovery result is stored in an S3 object that hasn't been signed. Macie can't verify the integrity and authenticity of the sensitive data discovery result. Therefore, Macie can't verify the location of the sensitive data to retrieve. ROLE_TOO_PERMISSIVE - Your account is configured to retrieve occurrences of sensitive data by using an IAM role whose trust or permissions policy doesn't meet Macie requirements for restricting access to the role. Macie can’t assume the role to retrieve the sensitive data. UNSUPPORTED_FINDING_TYPE - The specified finding isn't a sensitive data finding. UNSUPPORTED_OBJECT_TYPE - The affected S3 object uses a file or storage format that Macie doesn't support for retrieving occurrences of sensitive data. This value is null if sensitive data can be retrieved for the finding.
2504
+ * Specifies why occurrences of sensitive data can't be retrieved for the finding. Possible values are: ACCOUNT_NOT_IN_ORGANIZATION - The affected account isn't currently part of your organization. Or the account is part of your organization but Macie isn't currently enabled for the account. You're not allowed to access the affected S3 object by using Macie. INVALID_CLASSIFICATION_RESULT - There isn't a corresponding sensitive data discovery result for the finding. Or the corresponding sensitive data discovery result isn't available in the current Amazon Web Services Region, is malformed or corrupted, or uses an unsupported storage format. Macie can't verify the location of the sensitive data to retrieve. INVALID_RESULT_SIGNATURE - The corresponding sensitive data discovery result is stored in an S3 object that wasn't signed by Macie. Macie can't verify the integrity and authenticity of the sensitive data discovery result. Therefore, Macie can't verify the location of the sensitive data to retrieve. MEMBER_ROLE_TOO_PERMISSIVE - The trust or permissions policy for the IAM role in the affected member account doesn't meet Macie requirements for restricting access to the role. Or the role's trust policy doesn't specify the correct external ID for your organization. Macie can't assume the role to retrieve the sensitive data. MISSING_GET_MEMBER_PERMISSION - You're not allowed to retrieve information about the association between your account and the affected account. Macie can't determine whether you’re allowed to access the affected S3 object as the delegated Macie administrator for the affected account. OBJECT_EXCEEDS_SIZE_QUOTA - The storage size of the affected S3 object exceeds the size quota for retrieving occurrences of sensitive data from this type of file. OBJECT_UNAVAILABLE - The affected S3 object isn't available. The object was renamed, moved, deleted, or changed after Macie created the finding. Or the object is encrypted with an KMS key that's currently disabled. RESULT_NOT_SIGNED - The corresponding sensitive data discovery result is stored in an S3 object that hasn't been signed. Macie can't verify the integrity and authenticity of the sensitive data discovery result. Therefore, Macie can't verify the location of the sensitive data to retrieve. ROLE_TOO_PERMISSIVE - Your account is configured to retrieve occurrences of sensitive data by using an IAM role whose trust or permissions policy doesn't meet Macie requirements for restricting access to the role. Macie can’t assume the role to retrieve the sensitive data. UNSUPPORTED_FINDING_TYPE - The specified finding isn't a sensitive data finding. UNSUPPORTED_OBJECT_TYPE - The affected S3 object uses a file or storage format that Macie doesn't support for retrieving occurrences of sensitive data. This value is null if sensitive data can be retrieved for the finding.
2505
2505
  */
2506
2506
  reasons?: __listOfUnavailabilityReasonCode;
2507
2507
  }
@@ -3283,15 +3283,15 @@ declare namespace Macie2 {
3283
3283
  export type NextToken = string;
3284
3284
  export interface ObjectCountByEncryptionType {
3285
3285
  /**
3286
- * The total number of objects that are encrypted with a customer-provided key. The objects use customer-provided server-side encryption (SSE-C).
3286
+ * The total number of objects that are encrypted with customer-provided keys. The objects use server-side encryption with customer-provided keys (SSE-C).
3287
3287
  */
3288
3288
  customerManaged?: __long;
3289
3289
  /**
3290
- * The total number of objects that are encrypted with an KMS key, either an Amazon Web Services managed key or a customer managed key. The objects use KMS encryption (SSE-KMS).
3290
+ * The total number of objects that are encrypted with KMS keys, either Amazon Web Services managed keys or customer managed keys. The objects use dual-layer server-side encryption or server-side encryption with KMS keys (DSSE-KMS or SSE-KMS).
3291
3291
  */
3292
3292
  kmsManaged?: __long;
3293
3293
  /**
3294
- * The total number of objects that are encrypted with an Amazon S3 managed key. The objects use Amazon S3 managed encryption (SSE-S3).
3294
+ * The total number of objects that are encrypted with Amazon S3 managed keys. The objects use server-side encryption with Amazon S3 managed keys (SSE-S3).
3295
3295
  */
3296
3296
  s3Managed?: __long;
3297
3297
  /**
@@ -3495,11 +3495,11 @@ declare namespace Macie2 {
3495
3495
  }
3496
3496
  export interface RetrievalConfiguration {
3497
3497
  /**
3498
- * The external ID to specify in the trust policy for the IAM role to assume when retrieving sensitive data from affected S3 objects (roleName). The trust policy must include an sts:ExternalId condition that requires this ID. This ID is a unique alphanumeric string that Amazon Macie generates automatically after you configure it to assume a role. This value is null if the value for retrievalMode is CALLER_CREDENTIALS.
3498
+ * The external ID to specify in the trust policy for the IAM role to assume when retrieving sensitive data from affected S3 objects (roleName). This value is null if the value for retrievalMode is CALLER_CREDENTIALS. This ID is a unique alphanumeric string that Amazon Macie generates automatically after you configure it to assume an IAM role. For a Macie administrator to retrieve sensitive data from an affected S3 object for a member account, the trust policy for the role in the member account must include an sts:ExternalId condition that requires this ID.
3499
3499
  */
3500
3500
  externalId?: __string;
3501
3501
  /**
3502
- * The access method that's used when retrieving sensitive data from affected S3 objects. Valid values are: ASSUME_ROLE, assume an IAM role that is in the affected Amazon Web Services account and delegates access to Amazon Macie (roleName); and, CALLER_CREDENTIALS, use the credentials of the IAM user who requests the sensitive data.
3502
+ * The access method that's used to retrieve sensitive data from affected S3 objects. Valid values are: ASSUME_ROLE, assume an IAM role that is in the affected Amazon Web Services account and delegates access to Amazon Macie (roleName); and, CALLER_CREDENTIALS, use the credentials of the IAM user who requests the sensitive data.
3503
3503
  */
3504
3504
  retrievalMode: RetrievalMode;
3505
3505
  /**
@@ -3514,7 +3514,7 @@ declare namespace Macie2 {
3514
3514
  */
3515
3515
  kmsKeyId?: __stringMin1Max2048;
3516
3516
  /**
3517
- * The status of the configuration for the Amazon Macie account. In a request, valid values are: ENABLED, enable the configuration for the account; and, DISABLED, disable the configuration for the account. In a response, possible values are: ENABLED, the configuration is currently enabled for the account; and, DISABLED, the configuration is currently disabled for the account.
3517
+ * The status of the configuration for the Amazon Macie account. In a response, possible values are: ENABLED, the configuration is currently enabled for the account; and, DISABLED, the configuration is currently disabled for the account. In a request, valid values are: ENABLED, enable the configuration for the account; and, DISABLED, disable the configuration for the account. If you disable the configuration, you also permanently delete current settings that specify how to access affected S3 objects. If your current access method is ASSUME_ROLE, Macie also deletes the external ID and role name currently specified for the configuration. These settings can't be recovered after they're deleted.
3518
3518
  */
3519
3519
  status: RevealStatus;
3520
3520
  }
@@ -4130,7 +4130,7 @@ declare namespace Macie2 {
4130
4130
  }
4131
4131
  export type TimeRange = "MONTH_TO_DATE"|"PAST_30_DAYS"|string;
4132
4132
  export type Timestamp = Date;
4133
- export type Type = "NONE"|"AES256"|"aws:kms"|string;
4133
+ export type Type = "NONE"|"AES256"|"aws:kms"|"aws:kms:dsse"|string;
4134
4134
  export type UnavailabilityReasonCode = "OBJECT_EXCEEDS_SIZE_QUOTA"|"UNSUPPORTED_OBJECT_TYPE"|"UNSUPPORTED_FINDING_TYPE"|"INVALID_CLASSIFICATION_RESULT"|"OBJECT_UNAVAILABLE"|"ACCOUNT_NOT_IN_ORGANIZATION"|"MISSING_GET_MEMBER_PERMISSION"|"ROLE_TOO_PERMISSIVE"|"MEMBER_ROLE_TOO_PERMISSIVE"|"INVALID_RESULT_SIGNATURE"|"RESULT_NOT_SIGNED"|string;
4135
4135
  export type Unit = "TERABYTES"|string;
4136
4136
  export interface UnprocessedAccount {
@@ -4331,7 +4331,7 @@ declare namespace Macie2 {
4331
4331
  */
4332
4332
  configuration: RevealConfiguration;
4333
4333
  /**
4334
- * The access method and settings to use to retrieve the sensitive data.
4334
+ * The access method and settings to use when retrieving the sensitive data.
4335
4335
  */
4336
4336
  retrievalConfiguration?: UpdateRetrievalConfiguration;
4337
4337
  }
@@ -4341,7 +4341,7 @@ declare namespace Macie2 {
4341
4341
  */
4342
4342
  configuration?: RevealConfiguration;
4343
4343
  /**
4344
- * The access method and settings to use to retrieve the sensitive data.
4344
+ * The access method and settings to use when retrieving the sensitive data.
4345
4345
  */
4346
4346
  retrievalConfiguration?: RetrievalConfiguration;
4347
4347
  }