Update models for release

aws · Aug 21, 2024 · 1806459 · 1806459
1 parent cb1cd9f
commit 1806459
Show file tree

Hide file tree

Showing 28 changed files with 247 additions and 87 deletions.
diff --git a/.changes/3.320.5 b/.changes/3.320.5
@@ -0,0 +1,32 @@
+[
+    {
+        "type": "api-change",
+        "category": "EC2",
+        "description": "DescribeInstanceStatus now returns health information on EBS volumes attached to Nitro instances"
+    },
+    {
+        "type": "api-change",
+        "category": "Lambda",
+        "description": "Release FilterCriteria encryption for Lambda EventSourceMapping, enabling customers to encrypt their filter criteria using a customer-owned KMS key."
+    },
+    {
+        "type": "api-change",
+        "category": "SecurityHub",
+        "description": "Security Hub documentation and definition updates"
+    },
+    {
+        "type": "api-change",
+        "category": "Glue",
+        "description": "Add optional field JobRunQueuingEnabled to CreateJob and UpdateJob APIs."
+    },
+    {
+        "type": "api-change",
+        "category": "EntityResolution",
+        "description": "Increase the mapping attributes in Schema to 35."
+    },
+    {
+        "type": "api-change",
+        "category": "SES",
+        "description": "Enable email receiving customers to provide SES with access to their S3 buckets via an IAM role for \"Deliver to S3 Action\""
+    }
+]
diff --git a/.changes/nextrelease/remove-codestar.json b/.changes/nextrelease/remove-codestar.json
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,5 +1,15 @@
 # CHANGELOG
 
+## next release
+
+* `Aws\Codestar` - Removes Codestar service.
+* `Aws\EC2` - DescribeInstanceStatus now returns health information on EBS volumes attached to Nitro instances
+* `Aws\Lambda` - Release FilterCriteria encryption for Lambda EventSourceMapping, enabling customers to encrypt their filter criteria using a customer-owned KMS key.
+* `Aws\SecurityHub` - Security Hub documentation and definition updates
+* `Aws\Glue` - Add optional field JobRunQueuingEnabled to CreateJob and UpdateJob APIs.
+* `Aws\EntityResolution` - Increase the mapping attributes in Schema to 35.
+* `Aws\SES` - Enable email receiving customers to provide SES with access to their S3 buckets via an IAM role for "Deliver to S3 Action"
+
 ## 3.320.4 - 2024-08-20
 
 * `Aws\S3` - Amazon Simple Storage Service / Features : Add support for conditional writes for PutObject and CompleteMultipartUpload APIs.

diff --git a/src/data/ec2/2016-11-15/api-2.json b/src/data/ec2/2016-11-15/api-2.json
@@ -21144,6 +21144,43 @@
         "default"
       ]
     },
+    "EbsStatusDetails":{
+      "type":"structure",
+      "members":{
+        "ImpairedSince":{
+          "shape":"MillisecondDateTime",
+          "locationName":"impairedSince"
+        },
+        "Name":{
+          "shape":"StatusName",
+          "locationName":"name"
+        },
+        "Status":{
+          "shape":"StatusType",
+          "locationName":"status"
+        }
+      }
+    },
+    "EbsStatusDetailsList":{
+      "type":"list",
+      "member":{
+        "shape":"EbsStatusDetails",
+        "locationName":"item"
+      }
+    },
+    "EbsStatusSummary":{
+      "type":"structure",
+      "members":{
+        "Details":{
+          "shape":"EbsStatusDetailsList",
+          "locationName":"details"
+        },
+        "Status":{
+          "shape":"SummaryStatus",
+          "locationName":"status"
+        }
+      }
+    },
     "Ec2InstanceConnectEndpoint":{
       "type":"structure",
       "members":{
@@ -27949,6 +27986,10 @@
         "SystemStatus":{
           "shape":"InstanceStatusSummary",
           "locationName":"systemStatus"
+        },
+        "AttachedEbsStatus":{
+          "shape":"EbsStatusSummary",
+          "locationName":"attachedEbsStatus"
         }
       }
     },

diff --git a/src/data/ec2/2016-11-15/api-2.json.php b/src/data/ec2/2016-11-15/api-2.json.php
diff --git a/src/data/ec2/2016-11-15/docs-2.json b/src/data/ec2/2016-11-15/docs-2.json
diff --git a/src/data/ec2/2016-11-15/docs-2.json.php b/src/data/ec2/2016-11-15/docs-2.json.php
diff --git a/src/data/email/2010-12-01/api-2.json b/src/data/email/2010-12-01/api-2.json
@@ -1918,6 +1918,12 @@
     "HeaderName":{"type":"string"},
     "HeaderValue":{"type":"string"},
     "HtmlPart":{"type":"string"},
+    "IAMRoleARN":{
+      "type":"string",
+      "max":2048,
+      "min":20,
+      "pattern":"arn:[\\w-]+:iam::[0-9]+:role/[\\w-]+"
+    },
     "Identity":{"type":"string"},
     "IdentityDkimAttributes":{
       "type":"structure",
@@ -2600,7 +2606,8 @@
         "TopicArn":{"shape":"AmazonResourceName"},
         "BucketName":{"shape":"S3BucketName"},
         "ObjectKeyPrefix":{"shape":"S3KeyPrefix"},
-        "KmsKeyArn":{"shape":"AmazonResourceName"}
+        "KmsKeyArn":{"shape":"AmazonResourceName"},
+        "IamRoleArn":{"shape":"IAMRoleARN"}
       }
     },
     "S3BucketName":{"type":"string"},
@@ -2654,6 +2661,7 @@
       "required":[
         "Source",
         "Template",
+        "DefaultTemplateData",
         "Destinations"
       ],
       "members":{

diff --git a/src/data/email/2010-12-01/api-2.json.php b/src/data/email/2010-12-01/api-2.json.php
diff --git a/src/data/email/2010-12-01/docs-2.json b/src/data/email/2010-12-01/docs-2.json
@@ -137,7 +137,7 @@
         "LambdaAction$TopicArn": "<p>The Amazon Resource Name (ARN) of the Amazon SNS topic to notify when the Lambda action is executed. You can find the ARN of a topic by using the <a href=\"https://docs.aws.amazon.com/sns/latest/api/API_ListTopics.html\">ListTopics</a> operation in Amazon SNS.</p> <p>For more information about Amazon SNS topics, see the <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\">Amazon SNS Developer Guide</a>.</p>",
         "LambdaAction$FunctionArn": "<p>The Amazon Resource Name (ARN) of the Amazon Web Services Lambda function. An example of an Amazon Web Services Lambda function ARN is <code>arn:aws:lambda:us-west-2:account-id:function:MyFunction</code>. For more information about Amazon Web Services Lambda, see the <a href=\"https://docs.aws.amazon.com/lambda/latest/dg/welcome.html\">Amazon Web Services Lambda Developer Guide</a>.</p>",
         "S3Action$TopicArn": "<p>The ARN of the Amazon SNS topic to notify when the message is saved to the Amazon S3 bucket. You can find the ARN of a topic by using the <a href=\"https://docs.aws.amazon.com/sns/latest/api/API_ListTopics.html\">ListTopics</a> operation in Amazon SNS.</p> <p>For more information about Amazon SNS topics, see the <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\">Amazon SNS Developer Guide</a>.</p>",
-        "S3Action$KmsKeyArn": "<p>The customer master key that Amazon SES should use to encrypt your emails before saving them to the Amazon S3 bucket. You can use the default master key or a custom master key that you created in Amazon Web Services KMS as follows:</p> <ul> <li> <p>To use the default master key, provide an ARN in the form of <code>arn:aws:kms:REGION:ACCOUNT-ID-WITHOUT-HYPHENS:alias/aws/ses</code>. For example, if your Amazon Web Services account ID is 123456789012 and you want to use the default master key in the US West (Oregon) Region, the ARN of the default master key would be <code>arn:aws:kms:us-west-2:123456789012:alias/aws/ses</code>. If you use the default master key, you don't need to perform any extra steps to give Amazon SES permission to use the key.</p> </li> <li> <p>To use a custom master key that you created in Amazon Web Services KMS, provide the ARN of the master key and ensure that you add a statement to your key's policy to give Amazon SES permission to use it. For more information about giving permissions, see the <a href=\"https://docs.aws.amazon.com/ses/latest/dg/receiving-email-permissions.html\">Amazon SES Developer Guide</a>.</p> </li> </ul> <p>For more information about key policies, see the <a href=\"https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html\">Amazon Web Services KMS Developer Guide</a>. If you do not specify a master key, Amazon SES does not encrypt your emails.</p> <important> <p>Your mail is encrypted by Amazon SES using the Amazon S3 encryption client before the mail is submitted to Amazon S3 for storage. It is not encrypted using Amazon S3 server-side encryption. This means that you must use the Amazon S3 encryption client to decrypt the email after retrieving it from Amazon S3, as the service has no access to use your Amazon Web Services KMS keys for decryption. This encryption client is currently available with the <a href=\"http://aws.amazon.com/sdk-for-java/\">Amazon Web Services SDK for Java</a> and <a href=\"http://aws.amazon.com/sdk-for-ruby/\">Amazon Web Services SDK for Ruby</a> only. For more information about client-side encryption using Amazon Web Services KMS master keys, see the <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/UsingClientSideEncryption.html\">Amazon S3 Developer Guide</a>.</p> </important>",
+        "S3Action$KmsKeyArn": "<p>The customer managed key that Amazon SES should use to encrypt your emails before saving them to the Amazon S3 bucket. You can use the default managed key or a custom managed key that you created in Amazon Web Services KMS as follows:</p> <ul> <li> <p>To use the default managed key, provide an ARN in the form of <code>arn:aws:kms:REGION:ACCOUNT-ID-WITHOUT-HYPHENS:alias/aws/ses</code>. For example, if your Amazon Web Services account ID is 123456789012 and you want to use the default managed key in the US West (Oregon) Region, the ARN of the default master key would be <code>arn:aws:kms:us-west-2:123456789012:alias/aws/ses</code>. If you use the default managed key, you don't need to perform any extra steps to give Amazon SES permission to use the key.</p> </li> <li> <p>To use a custom managed key that you created in Amazon Web Services KMS, provide the ARN of the managed key and ensure that you add a statement to your key's policy to give Amazon SES permission to use it. For more information about giving permissions, see the <a href=\"https://docs.aws.amazon.com/ses/latest/dg/receiving-email-permissions.html\">Amazon SES Developer Guide</a>.</p> </li> </ul> <p>For more information about key policies, see the <a href=\"https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html\">Amazon Web Services KMS Developer Guide</a>. If you do not specify a managed key, Amazon SES does not encrypt your emails.</p> <important> <p>Your mail is encrypted by Amazon SES using the Amazon S3 encryption client before the mail is submitted to Amazon S3 for storage. It is not encrypted using Amazon S3 server-side encryption. This means that you must use the Amazon S3 encryption client to decrypt the email after retrieving it from Amazon S3, as the service has no access to use your Amazon Web Services KMS keys for decryption. This encryption client is currently available with the <a href=\"http://aws.amazon.com/sdk-for-java/\">Amazon Web Services SDK for Java</a> and <a href=\"http://aws.amazon.com/sdk-for-ruby/\">Amazon Web Services SDK for Ruby</a> only. For more information about client-side encryption using Amazon Web Services KMS managed keys, see the <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/UsingClientSideEncryption.html\">Amazon S3 Developer Guide</a>.</p> </important>",
         "SNSAction$TopicArn": "<p>The Amazon Resource Name (ARN) of the Amazon SNS topic to notify. You can find the ARN of a topic by using the <a href=\"https://docs.aws.amazon.com/sns/latest/api/API_ListTopics.html\">ListTopics</a> operation in Amazon SNS.</p> <p>For more information about Amazon SNS topics, see the <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\">Amazon SNS Developer Guide</a>.</p>",
         "SNSDestination$TopicARN": "<p>The ARN of the Amazon SNS topic for email sending events. You can find the ARN of a topic by using the <a href=\"https://docs.aws.amazon.com/sns/latest/api/API_ListTopics.html\">ListTopics</a> Amazon SNS operation.</p> <p>For more information about Amazon SNS topics, see the <a href=\"https://docs.aws.amazon.com/sns/latest/dg/CreateTopic.html\">Amazon SNS Developer Guide</a>.</p>",
         "SendBounceRequest$BounceSenderArn": "<p>This parameter is used only for sending authorization. It is the ARN of the identity that is associated with the sending authorization policy that permits you to use the address in the \"From\" header of the bounce. For more information about sending authorization, see the <a href=\"https://docs.aws.amazon.com/ses/latest/dg/sending-authorization.html\">Amazon SES Developer Guide</a>.</p>",
@@ -935,6 +935,12 @@
         "Template$HtmlPart": "<p>The HTML body of the email.</p>"
       }
     },
+    "IAMRoleARN": {
+      "base": null,
+      "refs": {
+        "S3Action$IamRoleArn": "<p> The ARN of the IAM role to be used by Amazon Simple Email Service while writing to the Amazon S3 bucket, optionally encrypting your mail via the provided customer managed key, and publishing to the Amazon SNS topic. This role should have access to the following APIs: </p> <ul> <li> <p> <code>s3:PutObject</code>, <code>kms:Encrypt</code> and <code>kms:GenerateDataKey</code> for the given Amazon S3 bucket.</p> </li> <li> <p> <code>kms:GenerateDataKey</code> for the given Amazon Web Services KMS customer managed key. </p> </li> <li> <p> <code>sns:Publish</code> for the given Amazon SNS topic.</p> </li> </ul> <note> <p>If an IAM role ARN is provided, the role (and only the role) is used to access all the given resources (Amazon S3 bucket, Amazon Web Services KMS customer managed key and Amazon SNS topic). Therefore, setting up individual resource access permissions is not required.</p> </note>"
+      }
+    },
     "Identity": {
       "base": null,
       "refs": {

diff --git a/src/data/email/2010-12-01/docs-2.json.php b/src/data/email/2010-12-01/docs-2.json.php
diff --git a/src/data/endpoints.json b/src/data/endpoints.json
@@ -4103,23 +4103,6 @@
           }
         }
       },
-      "codestar" : {
-        "endpoints" : {
-          "ap-northeast-1" : { },
-          "ap-northeast-2" : { },
-          "ap-southeast-1" : { },
-          "ap-southeast-2" : { },
-          "ca-central-1" : { },
-          "eu-central-1" : { },
-          "eu-north-1" : { },
-          "eu-west-1" : { },
-          "eu-west-2" : { },
-          "us-east-1" : { },
-          "us-east-2" : { },
-          "us-west-1" : { },
-          "us-west-2" : { }
-        }
-      },
       "codestar-connections" : {
         "endpoints" : {
           "ap-northeast-1" : { },

diff --git a/src/data/endpoints.json.php b/src/data/endpoints.json.php
diff --git a/src/data/entityresolution/2018-05-10/api-2.json b/src/data/entityresolution/2018-05-10/api-2.json
@@ -2374,7 +2374,7 @@
     "SchemaInputAttributes":{
       "type":"list",
       "member":{"shape":"SchemaInputAttribute"},
-      "max":25,
+      "max":35,
       "min":2
     },
     "SchemaList":{

diff --git a/src/data/entityresolution/2018-05-10/api-2.json.php b/src/data/entityresolution/2018-05-10/api-2.json.php
diff --git a/src/data/glue/2017-03-31/api-2.json b/src/data/glue/2017-03-31/api-2.json
@@ -5710,6 +5710,7 @@
       "members":{
         "Name":{"shape":"NameString"},
         "JobMode":{"shape":"JobMode"},
+        "JobRunQueuingEnabled":{"shape":"NullableBoolean"},
         "Description":{"shape":"DescriptionString"},
         "LogUri":{"shape":"UriString"},
         "Role":{"shape":"RoleString"},
@@ -9451,6 +9452,7 @@
       "members":{
         "Name":{"shape":"NameString"},
         "JobMode":{"shape":"JobMode"},
+        "JobRunQueuingEnabled":{"shape":"NullableBoolean"},
         "Description":{"shape":"DescriptionString"},
         "LogUri":{"shape":"UriString"},
         "Role":{"shape":"RoleString"},
@@ -9548,6 +9550,7 @@
         "TriggerName":{"shape":"NameString"},
         "JobName":{"shape":"NameString"},
         "JobMode":{"shape":"JobMode"},
+        "JobRunQueuingEnabled":{"shape":"NullableBoolean"},
         "StartedOn":{"shape":"TimestampValue"},
         "LastModifiedOn":{"shape":"TimestampValue"},
         "CompletedOn":{"shape":"TimestampValue"},
@@ -9572,7 +9575,8 @@
         "DPUSeconds":{"shape":"NullableDouble"},
         "ExecutionClass":{"shape":"ExecutionClass"},
         "MaintenanceWindow":{"shape":"MaintenanceWindow"},
-        "ProfileName":{"shape":"NameString"}
+        "ProfileName":{"shape":"NameString"},
+        "StateDetail":{"shape":"OrchestrationMessageString"}
       }
     },
     "JobRunList":{
@@ -9598,6 +9602,7 @@
       "type":"structure",
       "members":{
         "JobMode":{"shape":"JobMode"},
+        "JobRunQueuingEnabled":{"shape":"NullableBoolean"},
         "Description":{"shape":"DescriptionString"},
         "LogUri":{"shape":"UriString"},
         "Role":{"shape":"RoleString"},
@@ -10767,6 +10772,10 @@
       "min":1,
       "pattern":"arn:aws[^:]*:iam::[0-9]*:role/.+"
     },
+    "OrchestrationMessageString":{
+      "type":"string",
+      "max":400000
+    },
     "OrchestrationNameString":{
       "type":"string",
       "max":128,
@@ -12695,6 +12704,7 @@
       "required":["JobName"],
       "members":{
         "JobName":{"shape":"NameString"},
+        "JobRunQueuingEnabled":{"shape":"NullableBoolean"},
         "JobRunId":{"shape":"IdString"},
         "Arguments":{"shape":"GenericMap"},
         "AllocatedCapacity":{

diff --git a/src/data/glue/2017-03-31/api-2.json.php b/src/data/glue/2017-03-31/api-2.json.php