diff --git a/.changes/1.35.20.json b/.changes/1.35.20.json new file mode 100644 index 0000000000..ad11cc51f9 --- /dev/null +++ b/.changes/1.35.20.json @@ -0,0 +1,32 @@ +[ + { + "category": "``bedrock``", + "description": "This feature adds cross account s3 bucket and VPC support to ModelInvocation jobs. To use a cross account bucket, pass in the accountId of the bucket to s3BucketOwner in the ModelInvocationJobInputDataConfig or ModelInvocationJobOutputDataConfig.", + "type": "api-change" + }, + { + "category": "``iot``", + "description": "This release adds additional enhancements to AWS IoT Device Management Software Package Catalog and Jobs. It also adds SBOM support in Software Package Version.", + "type": "api-change" + }, + { + "category": "``medialive``", + "description": "Removing the ON_PREMISE enum from the input settings field.", + "type": "api-change" + }, + { + "category": "``organizations``", + "description": "Doc only update for AWS Organizations that fixes several customer-reported issues", + "type": "api-change" + }, + { + "category": "``pca-connector-scep``", + "description": "This is a general availability (GA) release of Connector for SCEP, a feature of AWS Private CA. Connector for SCEP links your SCEP-enabled and mobile device management systems to AWS Private CA for digital signature installation and certificate management.", + "type": "api-change" + }, + { + "category": "``rds``", + "description": "Launching Global Cluster tagging.", + "type": "api-change" + } +] \ No newline at end of file diff --git a/CHANGELOG.rst b/CHANGELOG.rst index 9a75a3ca0c..c9d9527004 100644 --- a/CHANGELOG.rst +++ b/CHANGELOG.rst @@ -2,6 +2,17 @@ CHANGELOG ========= +1.35.20 +======= + +* api-change:``bedrock``: This feature adds cross account s3 bucket and VPC support to ModelInvocation jobs. To use a cross account bucket, pass in the accountId of the bucket to s3BucketOwner in the ModelInvocationJobInputDataConfig or ModelInvocationJobOutputDataConfig. +* api-change:``iot``: This release adds additional enhancements to AWS IoT Device Management Software Package Catalog and Jobs. It also adds SBOM support in Software Package Version. +* api-change:``medialive``: Removing the ON_PREMISE enum from the input settings field. +* api-change:``organizations``: Doc only update for AWS Organizations that fixes several customer-reported issues +* api-change:``pca-connector-scep``: This is a general availability (GA) release of Connector for SCEP, a feature of AWS Private CA. Connector for SCEP links your SCEP-enabled and mobile device management systems to AWS Private CA for digital signature installation and certificate management. +* api-change:``rds``: Launching Global Cluster tagging. + + 1.35.19 ======= diff --git a/botocore/__init__.py b/botocore/__init__.py index ac776c92a0..d053516c27 100644 --- a/botocore/__init__.py +++ b/botocore/__init__.py @@ -16,7 +16,7 @@ import os import re -__version__ = '1.35.19' +__version__ = '1.35.20' class NullHandler(logging.Handler): diff --git a/botocore/data/bedrock/2023-04-20/service-2.json b/botocore/data/bedrock/2023-04-20/service-2.json index a12b0e0fcb..2065ed74c5 100644 --- a/botocore/data/bedrock/2023-04-20/service-2.json +++ b/botocore/data/bedrock/2023-04-20/service-2.json @@ -1333,7 +1333,7 @@ }, "vpcConfig":{ "shape":"VpcConfig", - "documentation":"

VPC configuration (optional). Configuration parameters for the private Virtual Private Cloud (VPC) that contains the resources you are using for this job.

" + "documentation":"

The configuration of the Virtual Private Cloud (VPC) that contains the resources that you're using for this job. For more information, see Protect your model customization jobs using a VPC.

" } } }, @@ -1439,6 +1439,10 @@ "shape":"ModelInvocationJobOutputDataConfig", "documentation":"

Details about the location of the output of the batch inference job.

" }, + "vpcConfig":{ + "shape":"VpcConfig", + "documentation":"

The configuration of the Virtual Private Cloud (VPC) for the data in the batch inference job. For more information, see Protect batch inference jobs using a VPC.

" + }, "timeoutDurationInHours":{ "shape":"ModelInvocationJobTimeoutDurationInHours", "documentation":"

The number of hours after which to force the batch inference job to time out.

" @@ -2816,6 +2820,10 @@ "shape":"ModelInvocationJobOutputDataConfig", "documentation":"

Details about the location of the output of the batch inference job.

" }, + "vpcConfig":{ + "shape":"VpcConfig", + "documentation":"

The configuration of the Virtual Private Cloud (VPC) for the data in the batch inference job. For more information, see Protect batch inference jobs using a VPC.

" + }, "timeoutDurationInHours":{ "shape":"ModelInvocationJobTimeoutDurationInHours", "documentation":"

The number of hours after which batch inference job was set to time out.

" @@ -4997,9 +5005,13 @@ "s3Uri":{ "shape":"S3Uri", "documentation":"

The S3 location of the input data.

" + }, + "s3BucketOwner":{ + "shape":"AccountId", + "documentation":"

The ID of the Amazon Web Services account that owns the S3 bucket containing the input data.

" } }, - "documentation":"

Contains the configuration of the S3 location of the output data.

" + "documentation":"

Contains the configuration of the S3 location of the input data.

" }, "ModelInvocationJobS3OutputDataConfig":{ "type":"structure", @@ -5012,6 +5024,10 @@ "s3EncryptionKeyId":{ "shape":"KmsKeyId", "documentation":"

The unique identifier of the key that encrypts the S3 location of the output data.

" + }, + "s3BucketOwner":{ + "shape":"AccountId", + "documentation":"

The ID of the Amazon Web Services account that owns the S3 bucket containing the output data.

" } }, "documentation":"

Contains the configuration of the S3 location of the output data.

" @@ -5095,6 +5111,10 @@ "shape":"ModelInvocationJobOutputDataConfig", "documentation":"

Details about the location of the output of the batch inference job.

" }, + "vpcConfig":{ + "shape":"VpcConfig", + "documentation":"

The configuration of the Virtual Private Cloud (VPC) for the data in the batch inference job. For more information, see Protect batch inference jobs using a VPC.

" + }, "timeoutDurationInHours":{ "shape":"ModelInvocationJobTimeoutDurationInHours", "documentation":"

The number of hours after which the batch inference job was set to time out.

" @@ -5753,14 +5773,14 @@ "members":{ "subnetIds":{ "shape":"SubnetIds", - "documentation":"

VPC configuration subnets.

" + "documentation":"

An array of IDs for each subnet in the VPC to use.

" }, "securityGroupIds":{ "shape":"SecurityGroupIds", - "documentation":"

VPC configuration security group Ids.

" + "documentation":"

An array of IDs for each security group in the VPC to use.

" } }, - "documentation":"

VPC configuration.

" + "documentation":"

The configuration of a virtual private cloud (VPC). For more information, see Protect your data using Amazon Virtual Private Cloud and Amazon Web Services PrivateLink.

" } }, "documentation":"

Describes the API operations for creating, managing, fine-turning, and evaluating Amazon Bedrock models.

" diff --git a/botocore/data/endpoints.json b/botocore/data/endpoints.json index 63edba279a..14e50ff40c 100644 --- a/botocore/data/endpoints.json +++ b/botocore/data/endpoints.json @@ -7249,6 +7249,12 @@ "tags" : [ "fips" ] } ] }, + "ap-southeast-5" : { + "variants" : [ { + "hostname" : "elasticfilesystem-fips.ap-southeast-5.amazonaws.com", + "tags" : [ "fips" ] + } ] + }, "ca-central-1" : { "variants" : [ { "hostname" : "elasticfilesystem-fips.ca-central-1.amazonaws.com", @@ -7386,6 +7392,13 @@ "deprecated" : true, "hostname" : "elasticfilesystem-fips.ap-southeast-4.amazonaws.com" }, + "fips-ap-southeast-5" : { + "credentialScope" : { + "region" : "ap-southeast-5" + }, + "deprecated" : true, + "hostname" : "elasticfilesystem-fips.ap-southeast-5.amazonaws.com" + }, "fips-ca-central-1" : { "credentialScope" : { "region" : "ca-central-1" @@ -19497,9 +19510,11 @@ "ap-northeast-2" : { }, "ap-northeast-3" : { }, "ap-south-1" : { }, + "ap-south-2" : { }, "ap-southeast-1" : { }, "ap-southeast-2" : { }, "ap-southeast-3" : { }, + "ap-southeast-4" : { }, "ca-central-1" : { "variants" : [ { "hostname" : "ssm-sap-fips.ca-central-1.amazonaws.com", @@ -19507,8 +19522,10 @@ } ] }, "eu-central-1" : { }, + "eu-central-2" : { }, "eu-north-1" : { }, "eu-south-1" : { }, + "eu-south-2" : { }, "eu-west-1" : { }, "eu-west-2" : { }, "eu-west-3" : { }, @@ -19547,6 +19564,8 @@ "deprecated" : true, "hostname" : "ssm-sap-fips.us-west-2.amazonaws.com" }, + "il-central-1" : { }, + "me-central-1" : { }, "me-south-1" : { }, "sa-east-1" : { }, "us-east-1" : { @@ -20453,82 +20472,62 @@ "ap-south-1" : { }, "ap-southeast-1" : { }, "ap-southeast-2" : { }, - "ca-central-1" : { }, - "eu-central-1" : { }, - "eu-west-1" : { }, - "eu-west-2" : { }, - "sa-east-1" : { }, - "transcribestreaming-ca-central-1" : { - "credentialScope" : { - "region" : "ca-central-1" - }, - "deprecated" : true, + "ca-central-1" : { "variants" : [ { "hostname" : "transcribestreaming-fips.ca-central-1.amazonaws.com", "tags" : [ "fips" ] } ] }, - "transcribestreaming-fips-ca-central-1" : { + "eu-central-1" : { }, + "eu-west-1" : { }, + "eu-west-2" : { }, + "fips-ca-central-1" : { "credentialScope" : { "region" : "ca-central-1" }, "deprecated" : true, "hostname" : "transcribestreaming-fips.ca-central-1.amazonaws.com" }, - "transcribestreaming-fips-us-east-1" : { + "fips-us-east-1" : { "credentialScope" : { "region" : "us-east-1" }, "deprecated" : true, "hostname" : "transcribestreaming-fips.us-east-1.amazonaws.com" }, - "transcribestreaming-fips-us-east-2" : { + "fips-us-east-2" : { "credentialScope" : { "region" : "us-east-2" }, "deprecated" : true, "hostname" : "transcribestreaming-fips.us-east-2.amazonaws.com" }, - "transcribestreaming-fips-us-west-2" : { + "fips-us-west-2" : { "credentialScope" : { "region" : "us-west-2" }, "deprecated" : true, "hostname" : "transcribestreaming-fips.us-west-2.amazonaws.com" }, - "transcribestreaming-us-east-1" : { - "credentialScope" : { - "region" : "us-east-1" - }, - "deprecated" : true, + "sa-east-1" : { }, + "us-east-1" : { "variants" : [ { "hostname" : "transcribestreaming-fips.us-east-1.amazonaws.com", "tags" : [ "fips" ] } ] }, - "transcribestreaming-us-east-2" : { - "credentialScope" : { - "region" : "us-east-2" - }, - "deprecated" : true, + "us-east-2" : { "variants" : [ { "hostname" : "transcribestreaming-fips.us-east-2.amazonaws.com", "tags" : [ "fips" ] } ] }, - "transcribestreaming-us-west-2" : { - "credentialScope" : { - "region" : "us-west-2" - }, - "deprecated" : true, + "us-west-2" : { "variants" : [ { "hostname" : "transcribestreaming-fips.us-west-2.amazonaws.com", "tags" : [ "fips" ] } ] - }, - "us-east-1" : { }, - "us-east-2" : { }, - "us-west-2" : { } + } } }, "transfer" : { @@ -28673,8 +28672,32 @@ }, "transcribestreaming" : { "endpoints" : { - "us-gov-east-1" : { }, - "us-gov-west-1" : { } + "fips-us-gov-east-1" : { + "credentialScope" : { + "region" : "us-gov-east-1" + }, + "deprecated" : true, + "hostname" : "transcribestreaming-fips.us-gov-east-1.amazonaws.com" + }, + "fips-us-gov-west-1" : { + "credentialScope" : { + "region" : "us-gov-west-1" + }, + "deprecated" : true, + "hostname" : "transcribestreaming-fips.us-gov-west-1.amazonaws.com" + }, + "us-gov-east-1" : { + "variants" : [ { + "hostname" : "transcribestreaming-fips.us-gov-east-1.amazonaws.com", + "tags" : [ "fips" ] + } ] + }, + "us-gov-west-1" : { + "variants" : [ { + "hostname" : "transcribestreaming-fips.us-gov-west-1.amazonaws.com", + "tags" : [ "fips" ] + } ] + } } }, "transfer" : { diff --git a/botocore/data/iot/2015-05-28/paginators-1.json b/botocore/data/iot/2015-05-28/paginators-1.json index b6549493e7..c9301cee6b 100644 --- a/botocore/data/iot/2015-05-28/paginators-1.json +++ b/botocore/data/iot/2015-05-28/paginators-1.json @@ -355,6 +355,12 @@ "limit_key": "maxResults", "output_token": "nextToken", "result_key": "packageSummaries" + }, + "ListSbomValidationResults": { + "input_token": "nextToken", + "limit_key": "maxResults", + "output_token": "nextToken", + "result_key": "validationResultSummaries" } } } diff --git a/botocore/data/iot/2015-05-28/service-2.json b/botocore/data/iot/2015-05-28/service-2.json index dfd8d6af25..31bbd74646 100644 --- a/botocore/data/iot/2015-05-28/service-2.json +++ b/botocore/data/iot/2015-05-28/service-2.json @@ -4,11 +4,13 @@ "apiVersion":"2015-05-28", "endpointPrefix":"iot", "protocol":"rest-json", + "protocols":["rest-json"], "serviceFullName":"AWS IoT", "serviceId":"IoT", "signatureVersion":"v4", "signingName":"iot", - "uid":"iot-2015-05-28" + "uid":"iot-2015-05-28", + "auth":["aws.auth#sigv4"] }, "operations":{ "AcceptCertificateTransfer":{ @@ -61,6 +63,26 @@ ], "documentation":"

Adds a thing to a thing group.

Requires permission to access the AddThingToThingGroup action.

" }, + "AssociateSbomWithPackageVersion":{ + "name":"AssociateSbomWithPackageVersion", + "http":{ + "method":"PUT", + "requestUri":"/packages/{packageName}/versions/{versionName}/sbom", + "responseCode":200 + }, + "input":{"shape":"AssociateSbomWithPackageVersionRequest"}, + "output":{"shape":"AssociateSbomWithPackageVersionResponse"}, + "errors":[ + {"shape":"ThrottlingException"}, + {"shape":"ConflictException"}, + {"shape":"InternalServerException"}, + {"shape":"ValidationException"}, + {"shape":"ServiceQuotaExceededException"}, + {"shape":"ResourceNotFoundException"} + ], + "documentation":"

Associates a software bill of materials (SBOM) with a specific software package version.

Requires permission to access the AssociateSbomWithPackageVersion action.

", + "idempotent":true + }, "AssociateTargetsWithJob":{ "name":"AssociateTargetsWithJob", "http":{ @@ -2102,6 +2124,25 @@ ], "documentation":"

Disables the rule.

Requires permission to access the DisableTopicRule action.

" }, + "DisassociateSbomFromPackageVersion":{ + "name":"DisassociateSbomFromPackageVersion", + "http":{ + "method":"DELETE", + "requestUri":"/packages/{packageName}/versions/{versionName}/sbom", + "responseCode":200 + }, + "input":{"shape":"DisassociateSbomFromPackageVersionRequest"}, + "output":{"shape":"DisassociateSbomFromPackageVersionResponse"}, + "errors":[ + {"shape":"ThrottlingException"}, + {"shape":"ConflictException"}, + {"shape":"InternalServerException"}, + {"shape":"ValidationException"}, + {"shape":"ResourceNotFoundException"} + ], + "documentation":"

Disassociates a software bill of materials (SBOM) from a specific software package version.

Requires permission to access the DisassociateSbomWithPackageVersion action.

", + "idempotent":true + }, "EnableTopicRule":{ "name":"EnableTopicRule", "http":{ @@ -3107,6 +3148,23 @@ ], "documentation":"

Lists the role aliases registered in your account.

Requires permission to access the ListRoleAliases action.

" }, + "ListSbomValidationResults":{ + "name":"ListSbomValidationResults", + "http":{ + "method":"GET", + "requestUri":"/packages/{packageName}/versions/{versionName}/sbom-validation-results", + "responseCode":200 + }, + "input":{"shape":"ListSbomValidationResultsRequest"}, + "output":{"shape":"ListSbomValidationResultsResponse"}, + "errors":[ + {"shape":"ThrottlingException"}, + {"shape":"InternalServerException"}, + {"shape":"ValidationException"}, + {"shape":"ResourceNotFoundException"} + ], + "documentation":"

The validation results for all software bill of materials (SBOM) attached to a specific software package version.

Requires permission to access the ListSbomValidationResults action.

" + }, "ListScheduledAudits":{ "name":"ListScheduledAudits", "http":{ @@ -4277,6 +4335,7 @@ "output":{"shape":"UpdateStreamResponse"}, "errors":[ {"shape":"InvalidRequestException"}, + {"shape":"LimitExceededException"}, {"shape":"ResourceNotFoundException"}, {"shape":"ThrottlingException"}, {"shape":"UnauthorizedException"}, @@ -4858,6 +4917,54 @@ }, "documentation":"

Contains an asset property value (of a single type).

" }, + "AssociateSbomWithPackageVersionRequest":{ + "type":"structure", + "required":[ + "packageName", + "versionName", + "sbom" + ], + "members":{ + "packageName":{ + "shape":"PackageName", + "documentation":"

The name of the new software package.

", + "location":"uri", + "locationName":"packageName" + }, + "versionName":{ + "shape":"VersionName", + "documentation":"

The name of the new package version.

", + "location":"uri", + "locationName":"versionName" + }, + "sbom":{"shape":"Sbom"}, + "clientToken":{ + "shape":"ClientToken", + "documentation":"

A unique case-sensitive identifier that you can provide to ensure the idempotency of the request. Don't reuse this client token if a new idempotent request is required.

", + "idempotencyToken":true, + "location":"querystring", + "locationName":"clientToken" + } + } + }, + "AssociateSbomWithPackageVersionResponse":{ + "type":"structure", + "members":{ + "packageName":{ + "shape":"PackageName", + "documentation":"

The name of the new software package.

" + }, + "versionName":{ + "shape":"VersionName", + "documentation":"

The name of the new package version.

" + }, + "sbom":{"shape":"Sbom"}, + "sbomValidationStatus":{ + "shape":"SbomValidationStatus", + "documentation":"

The status of the initial validation for the SBOM against the Software Package Data Exchange (SPDX) and CycloneDX industry standard format.

" + } + } + }, "AssociateTargetsWithJobRequest":{ "type":"structure", "required":[ @@ -5726,6 +5833,7 @@ }, "AwsJobTimeoutInProgressTimeoutInMinutes":{"type":"long"}, "BatchMode":{"type":"boolean"}, + "BeforeSubstitutionFlag":{"type":"boolean"}, "Behavior":{ "type":"structure", "required":["name"], @@ -7558,6 +7666,14 @@ "shape":"ResourceAttributes", "documentation":"

Metadata that can be used to define a package version’s configuration. For example, the S3 file location, configuration options that are being sent to the device or fleet.

The combined size of all the attributes on a package version is limited to 3KB.

" }, + "artifact":{ + "shape":"PackageVersionArtifact", + "documentation":"

The various build components created during the build process such as libraries and configuration files that make up a software package version.

" + }, + "recipe":{ + "shape":"PackageVersionRecipe", + "documentation":"

The inline job document associated with a software package version used for a quick job deployment via IoT Jobs.

" + }, "tags":{ "shape":"TagMap", "documentation":"

Metadata that can be used to manage the package version.

" @@ -9684,6 +9800,12 @@ "documentation":"

The unique identifier you assigned to this job when it was created.

", "location":"uri", "locationName":"jobId" + }, + "beforeSubstitution":{ + "shape":"BeforeSubstitutionFlag", + "documentation":"

A flag that provides a view of the job document before and after the substitution parameters have been resolved with their exact values.

", + "location":"querystring", + "locationName":"beforeSubstitution" } } }, @@ -10664,6 +10786,39 @@ }, "documentation":"

The input for the DisableTopicRuleRequest operation.

" }, + "DisassociateSbomFromPackageVersionRequest":{ + "type":"structure", + "required":[ + "packageName", + "versionName" + ], + "members":{ + "packageName":{ + "shape":"PackageName", + "documentation":"

The name of the new software package.

", + "location":"uri", + "locationName":"packageName" + }, + "versionName":{ + "shape":"VersionName", + "documentation":"

The name of the new package version.

", + "location":"uri", + "locationName":"versionName" + }, + "clientToken":{ + "shape":"ClientToken", + "documentation":"

A unique case-sensitive identifier that you can provide to ensure the idempotency of the request. Don't reuse this client token if a new idempotent request is required.

", + "idempotencyToken":true, + "location":"querystring", + "locationName":"clientToken" + } + } + }, + "DisassociateSbomFromPackageVersionResponse":{ + "type":"structure", + "members":{ + } + }, "DisconnectReason":{"type":"string"}, "DocumentParameter":{ "type":"structure", @@ -11397,6 +11552,12 @@ "documentation":"

The unique identifier you assigned to this job when it was created.

", "location":"uri", "locationName":"jobId" + }, + "beforeSubstitution":{ + "shape":"BeforeSubstitutionFlag", + "documentation":"

A flag that provides a view of the job document before and after the substitution parameters have been resolved with their exact values.

", + "location":"querystring", + "locationName":"beforeSubstitution" } } }, @@ -11549,6 +11710,10 @@ "shape":"ResourceAttributes", "documentation":"

Metadata that were added to the package version that can be used to define a package version’s configuration.

" }, + "artifact":{ + "shape":"PackageVersionArtifact", + "documentation":"

The various components that make up a software package version.

" + }, "status":{ "shape":"PackageVersionStatus", "documentation":"

The status associated to the package version. For more information, see Package version lifecycle.

" @@ -11564,6 +11729,18 @@ "lastModifiedDate":{ "shape":"LastModifiedDate", "documentation":"

The date when the package version was last updated.

" + }, + "sbom":{ + "shape":"Sbom", + "documentation":"

The software bill of materials for a software package version.

" + }, + "sbomValidationStatus":{ + "shape":"SbomValidationStatus", + "documentation":"

The status of the validation for a new software bill of materials added to a software package version.

" + }, + "recipe":{ + "shape":"PackageVersionRecipe", + "documentation":"

The inline job document associated with a software package version used for a quick job deployment via IoT Jobs.

" } } }, @@ -14501,6 +14678,58 @@ } } }, + "ListSbomValidationResultsRequest":{ + "type":"structure", + "required":[ + "packageName", + "versionName" + ], + "members":{ + "packageName":{ + "shape":"PackageName", + "documentation":"

The name of the new software package.

", + "location":"uri", + "locationName":"packageName" + }, + "versionName":{ + "shape":"VersionName", + "documentation":"

The name of the new package version.

", + "location":"uri", + "locationName":"versionName" + }, + "validationResult":{ + "shape":"SbomValidationResult", + "documentation":"

The end result of the

", + "location":"querystring", + "locationName":"validationResult" + }, + "maxResults":{ + "shape":"PackageCatalogMaxResults", + "documentation":"

The maximum number of results to return at one time.

", + "location":"querystring", + "locationName":"maxResults" + }, + "nextToken":{ + "shape":"NextToken", + "documentation":"

A token that can be used to retrieve the next set of results, or null if there are no additional results.

", + "location":"querystring", + "locationName":"nextToken" + } + } + }, + "ListSbomValidationResultsResponse":{ + "type":"structure", + "members":{ + "validationResultSummaries":{ + "shape":"SbomValidationResultSummaryList", + "documentation":"

A summary of the validation results for each software bill of materials attached to a software package version.

" + }, + "nextToken":{ + "shape":"NextToken", + "documentation":"

A token that can be used to retrieve the next set of results, or null if there are no additional results.

" + } + } + }, "ListScheduledAuditsRequest":{ "type":"structure", "members":{ @@ -16224,7 +16453,19 @@ "min":1, "pattern":"^arn:[!-~]+$" }, + "PackageVersionArtifact":{ + "type":"structure", + "members":{ + "s3Location":{"shape":"S3Location"} + }, + "documentation":"

The Amazon S3 location for the artifacts associated with a software package version.

" + }, "PackageVersionErrorReason":{"type":"string"}, + "PackageVersionRecipe":{ + "type":"string", + "max":3072, + "sensitive":true + }, "PackageVersionStatus":{ "type":"string", "enum":[ @@ -17425,6 +17666,62 @@ "type":"string", "min":40 }, + "Sbom":{ + "type":"structure", + "members":{ + "s3Location":{"shape":"S3Location"} + }, + "documentation":"

The Amazon S3 location for the software bill of materials associated with a software package version.

" + }, + "SbomValidationErrorCode":{ + "type":"string", + "enum":[ + "INCOMPATIBLE_FORMAT", + "FILE_SIZE_LIMIT_EXCEEDED" + ] + }, + "SbomValidationErrorMessage":{"type":"string"}, + "SbomValidationResult":{ + "type":"string", + "enum":[ + "FAILED", + "SUCCEEDED" + ] + }, + "SbomValidationResultSummary":{ + "type":"structure", + "members":{ + "fileName":{ + "shape":"FileName", + "documentation":"

The name of the SBOM file.

" + }, + "validationResult":{ + "shape":"SbomValidationResult", + "documentation":"

The end result of the SBOM validation.

" + }, + "errorCode":{ + "shape":"SbomValidationErrorCode", + "documentation":"

The errorCode representing the validation failure error if the SBOM validation failed.

" + }, + "errorMessage":{ + "shape":"SbomValidationErrorMessage", + "documentation":"

The errorMessage representing the validation failure error if the SBOM validation failed.

" + } + }, + "documentation":"

A summary of the validation results for a specific software bill of materials (SBOM) attached to a software package version.

" + }, + "SbomValidationResultSummaryList":{ + "type":"list", + "member":{"shape":"SbomValidationResultSummary"} + }, + "SbomValidationStatus":{ + "type":"string", + "enum":[ + "IN_PROGRESS", + "FAILED", + "SUCCEEDED" + ] + }, "ScheduledAuditArn":{"type":"string"}, "ScheduledAuditMetadata":{ "type":"structure", @@ -17639,7 +17936,7 @@ "members":{ "enableOCSPCheck":{ "shape":"EnableOCSPCheck", - "documentation":"

A Boolean value that indicates whether Online Certificate Status Protocol (OCSP) server certificate check is enabled or not.

For more information, see Configuring OCSP server-certificate stapling in domain configuration from Amazon Web Services IoT Core Developer Guide.

" + "documentation":"

A Boolean value that indicates whether Online Certificate Status Protocol (OCSP) server certificate check is enabled or not.

For more information, see Configuring OCSP server-certificate stapling in domain configuration from Amazon Web Services IoT Core Developer Guide.

" } }, "documentation":"

The server certificate configuration.

" @@ -20148,10 +20445,18 @@ "shape":"ResourceAttributes", "documentation":"

Metadata that can be used to define a package version’s configuration. For example, the Amazon S3 file location, configuration options that are being sent to the device or fleet.

Note: Attributes can be updated only when the package version is in a draft state.

The combined size of all the attributes on a package version is limited to 3KB.

" }, + "artifact":{ + "shape":"PackageVersionArtifact", + "documentation":"

The various components that make up a software package version.

" + }, "action":{ "shape":"PackageVersionAction", "documentation":"

The status that the package version should be assigned. For more information, see Package version lifecycle.

" }, + "recipe":{ + "shape":"PackageVersionRecipe", + "documentation":"

The inline job document associated with a software package version used for a quick job deployment via IoT Jobs.

" + }, "clientToken":{ "shape":"ClientToken", "documentation":"

A unique case-sensitive identifier that you can provide to ensure the idempotency of the request. Don't reuse this client token if a new idempotent request is required.

", diff --git a/botocore/data/medialive/2017-10-14/service-2.json b/botocore/data/medialive/2017-10-14/service-2.json index 34f865e256..d95f989ded 100644 --- a/botocore/data/medialive/2017-10-14/service-2.json +++ b/botocore/data/medialive/2017-10-14/service-2.json @@ -26658,7 +26658,6 @@ "documentation": "With the introduction of MediaLive OnPrem, a MediaLive input can now exist in two different places: AWS or\ninside an on-premise datacenter. By default all inputs will continue to be AWS inputs.", "enum": [ "AWS", - "ON_PREMISE", "ON_PREMISES" ] }, diff --git a/botocore/data/organizations/2016-11-28/service-2.json b/botocore/data/organizations/2016-11-28/service-2.json index c51aeb4466..a89d4096d1 100644 --- a/botocore/data/organizations/2016-11-28/service-2.json +++ b/botocore/data/organizations/2016-11-28/service-2.json @@ -102,7 +102,7 @@ {"shape":"TooManyRequestsException"}, {"shape":"UnsupportedAPIEndpointException"} ], - "documentation":"

Closes an Amazon Web Services member account within an organization. You can close an account when all features are enabled . You can't close the management account with this API. This is an asynchronous request that Amazon Web Services performs in the background. Because CloseAccount operates asynchronously, it can return a successful completion message even though account closure might still be in progress. You need to wait a few minutes before the account is fully closed. To check the status of the request, do one of the following:

" + "documentation":"

Closes an Amazon Web Services member account within an organization. You can close an account when all features are enabled . You can't close the management account with this API. This is an asynchronous request that Amazon Web Services performs in the background. Because CloseAccount operates asynchronously, it can return a successful completion message even though account closure might still be in progress. You need to wait a few minutes before the account is fully closed. To check the status of the request, do one of the following:

" }, "CreateAccount":{ "name":"CreateAccount", @@ -123,7 +123,7 @@ {"shape":"TooManyRequestsException"}, {"shape":"UnsupportedAPIEndpointException"} ], - "documentation":"

Creates an Amazon Web Services account that is automatically a member of the organization whose credentials made the request. This is an asynchronous request that Amazon Web Services performs in the background. Because CreateAccount operates asynchronously, it can return a successful completion message even though account initialization might still be in progress. You might need to wait a few minutes before you can successfully access the account. To check the status of the request, do one of the following:

The user who calls the API to create an account must have the organizations:CreateAccount permission. If you enabled all features in the organization, Organizations creates the required service-linked role named AWSServiceRoleForOrganizations. For more information, see Organizations and service-linked roles in the Organizations User Guide.

If the request includes tags, then the requester must have the organizations:TagResource permission.

Organizations preconfigures the new member account with a role (named OrganizationAccountAccessRole by default) that grants users in the management account administrator permissions in the new member account. Principals in the management account can assume the role. Organizations clones the company name and address information for the new account from the organization's management account.

This operation can be called only from the organization's management account.

For more information about creating accounts, see Creating a member account in your organization in the Organizations User Guide.

When you create a member account with this operation, you can choose whether to create the account with the IAM User and Role Access to Billing Information switch enabled. If you enable it, IAM users and roles that have appropriate permissions can view billing information for the account. If you disable it, only the account root user can access billing information. For information about how to disable this switch for an account, see Granting access to your billing information and tools.

" + "documentation":"

Creates an Amazon Web Services account that is automatically a member of the organization whose credentials made the request. This is an asynchronous request that Amazon Web Services performs in the background. Because CreateAccount operates asynchronously, it can return a successful completion message even though account initialization might still be in progress. You might need to wait a few minutes before you can successfully access the account. To check the status of the request, do one of the following:

The user who calls the API to create an account must have the organizations:CreateAccount permission. If you enabled all features in the organization, Organizations creates the required service-linked role named AWSServiceRoleForOrganizations. For more information, see Organizations and service-linked roles in the Organizations User Guide.

If the request includes tags, then the requester must have the organizations:TagResource permission.

Organizations preconfigures the new member account with a role (named OrganizationAccountAccessRole by default) that grants users in the management account administrator permissions in the new member account. Principals in the management account can assume the role. Organizations clones the company name and address information for the new account from the organization's management account.

This operation can be called only from the organization's management account.

For more information about creating accounts, see Creating a member account in your organization in the Organizations User Guide.

When you create a member account with this operation, you can choose whether to create the account with the IAM User and Role Access to Billing Information switch enabled. If you enable it, IAM users and roles that have appropriate permissions can view billing information for the account. If you disable it, only the account root user can access billing information. For information about how to disable this switch for an account, see Granting access to your billing information and tools.

" }, "CreateGovCloudAccount":{ "name":"CreateGovCloudAccount", @@ -554,7 +554,7 @@ {"shape":"TooManyRequestsException"}, {"shape":"UnsupportedAPIEndpointException"} ], - "documentation":"

Enables the integration of an Amazon Web Services service (the service that is specified by ServicePrincipal) with Organizations. When you enable integration, you allow the specified service to create a service-linked role in all the accounts in your organization. This allows the service to perform operations on your behalf in your organization and its accounts.

We recommend that you enable integration between Organizations and the specified Amazon Web Services service by using the console or commands that are provided by the specified service. Doing so ensures that the service is aware that it can create the resources that are required for the integration. How the service creates those resources in the organization's accounts depends on that service. For more information, see the documentation for the other Amazon Web Services service.

For more information about enabling services to integrate with Organizations, see Using Organizations with other Amazon Web Services services in the Organizations User Guide.

You can only call this operation from the organization's management account and only if the organization has enabled all features.

" + "documentation":"

Provides an Amazon Web Services service (the service that is specified by ServicePrincipal) with permissions to view the structure of an organization, create a service-linked role in all the accounts in the organization, and allow the service to perform operations on behalf of the organization and its accounts. Establishing these permissions can be a first step in enabling the integration of an Amazon Web Services service with Organizations.

We recommend that you enable integration between Organizations and the specified Amazon Web Services service by using the console or commands that are provided by the specified service. Doing so ensures that the service is aware that it can create the resources that are required for the integration. How the service creates those resources in the organization's accounts depends on that service. For more information, see the documentation for the other Amazon Web Services service.

For more information about enabling services to integrate with Organizations, see Using Organizations with other Amazon Web Services services in the Organizations User Guide.

You can only call this operation from the organization's management account and only if the organization has enabled all features.

" }, "EnableAllFeatures":{ "name":"EnableAllFeatures", @@ -639,7 +639,7 @@ {"shape":"ServiceException"}, {"shape":"TooManyRequestsException"} ], - "documentation":"

Removes a member account from its parent organization. This version of the operation is performed by the account that wants to leave. To remove a member account as a user in the management account, use RemoveAccountFromOrganization instead.

This operation can be called only from a member account in the organization.

" + "documentation":"

Removes a member account from its parent organization. This version of the operation is performed by the account that wants to leave. To remove a member account as a user in the management account, use RemoveAccountFromOrganization instead.

This operation can be called only from a member account in the organization.

" }, "ListAWSServiceAccessForOrganization":{ "name":"ListAWSServiceAccessForOrganization", @@ -1380,7 +1380,7 @@ "Message":{"shape":"ExceptionMessage"}, "Reason":{"shape":"ConstraintViolationExceptionReason"} }, - "documentation":"

Performing this operation violates a minimum or maximum value limit. For example, attempting to remove the last service control policy (SCP) from an OU or root, inviting or creating too many accounts to the organization, or attaching too many policies to an account, OU, or root. This exception includes a reason that contains additional information about the violated limit:

Some of the reasons in the following list might not be applicable to this specific API or operation.

 ", + "documentation":"

Performing this operation violates a minimum or maximum value limit. For example, attempting to remove the last service control policy (SCP) from an OU or root, inviting or creating too many accounts to the organization, or attaching too many policies to an account, OU, or root. This exception includes a reason that contains additional information about the violated limit:

Some of the reasons in the following list might not be applicable to this specific API or operation.

 ", "exception":true }, "ConstraintViolationExceptionReason":{ @@ -1879,7 +1879,7 @@ "members":{ "Organization":{ "shape":"Organization", - "documentation":"

A structure that contains information about the organization.

The AvailablePolicyTypes part of the response is deprecated, and you shouldn't use it in your apps. It doesn't include any policy type supported by Organizations other than SCPs. To determine which policy types are enabled in your organization, use the ListRoots operation.

" + "documentation":"

A structure that contains information about the organization.

The AvailablePolicyTypes part of the response is deprecated, and you shouldn't use it in your apps. It doesn't include any policy type supported by Organizations other than SCPs. In the China (Ningxia) Region, no policy type is included. To determine which policy types are enabled in your organization, use the ListRoots operation.

" } } }, diff --git a/botocore/data/pca-connector-scep/2018-05-10/service-2.json b/botocore/data/pca-connector-scep/2018-05-10/service-2.json index 5939610584..7771c1133b 100644 --- a/botocore/data/pca-connector-scep/2018-05-10/service-2.json +++ b/botocore/data/pca-connector-scep/2018-05-10/service-2.json @@ -2,6 +2,7 @@ "version":"2.0", "metadata":{ "apiVersion":"2018-05-10", + "auth":["aws.auth#sigv4"], "endpointPrefix":"pca-connector-scep", "protocol":"rest-json", "protocols":["rest-json"], @@ -977,5 +978,5 @@ ] } }, - "documentation":"

Connector for SCEP (Preview) is in preview release for Amazon Web Services Private Certificate Authority and is subject to change.

Connector for SCEP (Preview) creates a connector between Amazon Web Services Private CA and your SCEP-enabled clients and devices. For more information, see Connector for SCEP in the Amazon Web Services Private CA User Guide.

" + "documentation":"

Connector for SCEP creates a connector between Amazon Web Services Private CA and your SCEP-enabled clients and devices. For more information, see Connector for SCEP in the Amazon Web Services Private CA User Guide.

" } diff --git a/botocore/data/rds/2014-10-31/service-2.json b/botocore/data/rds/2014-10-31/service-2.json index e21f1c0a86..a3ae53f176 100644 --- a/botocore/data/rds/2014-10-31/service-2.json +++ b/botocore/data/rds/2014-10-31/service-2.json @@ -1874,7 +1874,7 @@ {"shape":"TenantDatabaseNotFoundFault"}, {"shape":"DBSnapshotTenantDatabaseNotFoundFault"} ], - "documentation":"

Lists all tags on an Amazon RDS resource.

For an overview on tagging an Amazon RDS resource, see Tagging Amazon RDS Resources in the Amazon RDS User Guide.

" + "documentation":"

Lists all tags on an Amazon RDS resource.

For an overview on tagging an Amazon RDS resource, see Tagging Amazon RDS Resources in the Amazon RDS User Guide or Tagging Amazon Aurora and Amazon RDS Resources in the Amazon Aurora User Guide.

" }, "ModifyActivityStream":{ "name":"ModifyActivityStream", @@ -2528,7 +2528,7 @@ {"shape":"TenantDatabaseNotFoundFault"}, {"shape":"DBSnapshotTenantDatabaseNotFoundFault"} ], - "documentation":"

Removes metadata tags from an Amazon RDS resource.

For an overview on tagging an Amazon RDS resource, see Tagging Amazon RDS Resources in the Amazon RDS User Guide.

" + "documentation":"

Removes metadata tags from an Amazon RDS resource.

For an overview on tagging an Amazon RDS resource, see Tagging Amazon RDS Resources in the Amazon RDS User Guide or Tagging Amazon Aurora and Amazon RDS Resources in the Amazon Aurora User Guide.

" }, "ResetDBClusterParameterGroup":{ "name":"ResetDBClusterParameterGroup", @@ -3208,7 +3208,7 @@ }, "ApplyAction":{ "shape":"String", - "documentation":"

The pending maintenance action to apply to this resource.

Valid Values:

For more information about these actions, see Maintenance actions for Amazon Aurora or Maintenance actions for Amazon RDS.

" + "documentation":"

The pending maintenance action to apply to this resource.

Valid Values: system-update, db-upgrade, hardware-maintenance, ca-certificate-rotation

" }, "OptInType":{ "shape":"String", @@ -5184,6 +5184,10 @@ "StorageEncrypted":{ "shape":"BooleanOptional", "documentation":"

Specifies whether to enable storage encryption for the new global database cluster.

Constraints:

" + }, + "Tags":{ + "shape":"TagList", + "documentation":"

Tags to assign to the global cluster.

" } } }, @@ -11103,7 +11107,8 @@ "FailoverState":{ "shape":"FailoverState", "documentation":"

A data object containing all properties for the current state of an in-process or pending switchover or failover process for this global cluster (Aurora global database). This object is empty unless the SwitchoverGlobalCluster or FailoverGlobalCluster operation was called on this global cluster.

" - } + }, + "TagList":{"shape":"TagList"} }, "documentation":"

A data type representing an Aurora global database.

", "wrapper":true @@ -13805,7 +13810,7 @@ "members":{ "Action":{ "shape":"String", - "documentation":"

The type of pending maintenance action that is available for the resource.

For more information about maintenance actions, see Maintaining a DB instance.

Valid Values:

For more information about these actions, see Maintenance actions for Amazon Aurora or Maintenance actions for Amazon RDS.

" + "documentation":"

The type of pending maintenance action that is available for the resource.

For more information about maintenance actions, see Maintaining a DB instance.

Valid Values: system-update | db-upgrade | hardware-maintenance | ca-certificate-rotation

" }, "AutoAppliedAfterDate":{ "shape":"TStamp", diff --git a/docs/source/conf.py b/docs/source/conf.py index ad80b6d950..245870f5e8 100644 --- a/docs/source/conf.py +++ b/docs/source/conf.py @@ -59,7 +59,7 @@ # The short X.Y version. version = '1.35.' # The full version, including alpha/beta/rc tags. -release = '1.35.19' +release = '1.35.20' # The language for content autogenerated by Sphinx. Refer to documentation # for a list of supported languages.