Release v1.40.54 (2021-10-01) (#4119)

Release v1.40.54 (2021-10-01)
===

### Service Client Updates
* `service/apprunner`: Updates service API and documentation
* `service/ssm`: Updates service API and documentation
  * When "AutoApprovable" is true for a Change Template, then specifying --auto-approve (boolean) in Start-Change-Request-Execution will create a change request that bypasses approver review. (except for change calendar restrictions)
* `service/synthetics`: Updates service API and documentation

CHANGELOG.md

@@ -1,3 +1,12 @@
+Release v1.40.54 (2021-10-01)
+===
+
+### Service Client Updates
+* `service/apprunner`: Updates service API and documentation
+* `service/ssm`: Updates service API and documentation
+ * When "AutoApprovable" is true for a Change Template, then specifying --auto-approve (boolean) in Start-Change-Request-Execution will create a change request that bypasses approver review. (except for change calendar restrictions)
+* `service/synthetics`: Updates service API and documentation
+
 Release v1.40.53 (2021-09-30)
 ===
 

aws/version.go

@@ -5,4 +5,4 @@ package aws
 const SDKName = "aws-sdk-go"
 
 // SDKVersion is the version of this SDK
-const SDKVersion = "1.40.53"
+const SDKVersion = "1.40.54"

models/apis/apprunner/2020-05-15/api-2.json

@@ -769,7 +769,7 @@
  "type":"structure",
  "members":{
  "Protocol":{"shape":"HealthCheckProtocol"},
- "Path":{"shape":"String"},
+ "Path":{"shape":"HealthCheckPath"},
  "Interval":{"shape":"HealthCheckInterval"},
  "Timeout":{"shape":"HealthCheckTimeout"},
  "HealthyThreshold":{"shape":"HealthCheckHealthyThreshold"},
@@ -786,6 +786,10 @@
  "max":20,
  "min":1
  },
+ "HealthCheckPath":{
+ "type":"string",
+ "min":1
+ },
  "HealthCheckProtocol":{
  "type":"string",
  "enum":[
@@ -815,7 +819,7 @@
  "type":"string",
  "max":1024,
  "min":1,
- "pattern":"([0-9]{12}.dkr.ecr.[a-z\\-]+-[0-9]{1}.amazonaws.com\\/.*)|(^public\\.ecr\\.aws\\/.+\\/.+)"
+ "pattern":"([0-9]{12}.dkr.ecr.[a-z\\-]+-[0-9]{1}.amazonaws.com\\/((?:[a-z0-9]+(?:[._-][a-z0-9]+)*\\/)*[a-z0-9]+(?:[._-][a-z0-9]+)*)(:([\\w\\d+\\-=._:\\/@])+|@([\\w\\d\\:]+))?)|(^public\\.ecr\\.aws\\/.+\\/((?:[a-z0-9]+(?:[._-][a-z0-9]+)*\\/)*[a-z0-9]+(?:[._-][a-z0-9]+)*)(:([\\w\\d+\\-=._:\\/@])+|@([\\w\\d\\:]+))?)"
  },
  "ImageRepository":{
  "type":"structure",
@@ -1054,9 +1058,9 @@
  },
  "RoleArn":{
  "type":"string",
- "max":102,
+ "max":1024,
  "min":29,
- "pattern":"arn:(aws|aws-us-gov|aws-cn|aws-iso|aws-iso-b):iam::[0-9]{12}:role/[\\w+=,.@-]{1,64}"
+ "pattern":"arn:(aws|aws-us-gov|aws-cn|aws-iso|aws-iso-b):iam::[0-9]{12}:(role|role\\/service-role)\\/[\\w+=,.@\\-/]{1,1000}"
  },
  "Runtime":{
  "type":"string",

models/apis/ssm/2014-11-06/api-2.json

@@ -9589,6 +9589,7 @@
  "Parameters":{"shape":"AutomationParameterMap"},
  "ChangeRequestName":{"shape":"ChangeRequestName"},
  "ClientToken":{"shape":"IdempotencyToken"},
+ "AutoApprove":{"shape":"Boolean"},
  "Runbooks":{"shape":"Runbooks"},
  "Tags":{"shape":"TagList"},
  "ScheduledEndTime":{"shape":"DateTime"},

models/apis/ssm/2014-11-06/docs-2.json

@@ -912,6 +912,7 @@
  "PatchRule$EnableNonSecurity": "<p>For instances identified by the approval rule filters, enables a patch baseline to apply non-security updates available in the specified repository. The default value is <code>false</code>. Applies to Linux instances only.</p>",
  "PutParameterRequest$Overwrite": "<p>Overwrite an existing parameter. The default value is <code>false</code>.</p>",
  "ResolvedTargets$Truncated": "<p>A boolean value indicating whether the resolved target list is truncated.</p>",
+ "StartChangeRequestExecutionRequest$AutoApprove": "<p>Indicates whether the change request can be approved automatically without the need for manual approvals.</p> <p>If <code>AutoApprovable</code> is enabled in a change template, then setting <code>AutoApprove</code> to <code>true</code> in <code>StartChangeRequestExecution</code> creates a change request that bypasses approver review.</p> <note> <p>Change Calendar restrictions are not bypassed in this scenario. If the state of an associated calendar is <code>CLOSED</code>, change freeze approvers must still grant permission for this change request to run. If they don't, the change won't be processed until the calendar state is again <code>OPEN</code>. </p> </note>",
  "StepExecution$IsEnd": "<p>The flag which can be used to end automation no matter whether the step succeeds or fails.</p>",
  "StepExecution$IsCritical": "<p>The flag which can be used to help decide whether the failure of current step leads to the Automation failure.</p>",
  "UpdateMaintenanceWindowRequest$Replace": "<p>If <code>True</code>, then all fields that are required by the <a>CreateMaintenanceWindow</a> operation are also required for this API request. Optional fields that aren't specified are set to null. </p>",
@@ -6917,7 +6918,7 @@
  "Command$OutputS3Region": "<p>(Deprecated) You can no longer specify this parameter. The system ignores it. Instead, Systems Manager automatically determines the Amazon Web Services Region of the S3 bucket.</p>",
  "CommandPlugin$OutputS3Region": "<p>(Deprecated) You can no longer specify this parameter. The system ignores it. Instead, Amazon Web Services Systems Manager automatically determines the S3 bucket region.</p>",
  "LoggingInfo$S3Region": "<p>The Amazon Web Services Region where the S3 bucket is located.</p>",
- "S3OutputLocation$OutputS3Region": "<p>(Deprecated) You can no longer specify this parameter. The system ignores it. Instead, Amazon Web Services Systems Manager automatically determines the Region of the S3 bucket.</p>",
+ "S3OutputLocation$OutputS3Region": "<p>The Amazon Web Services Region of the S3 bucket.</p>",
  "SendCommandRequest$OutputS3Region": "<p>(Deprecated) You can no longer specify this parameter. The system ignores it. Instead, Systems Manager automatically determines the Amazon Web Services Region of the S3 bucket.</p>"
  }
  },
@@ -7674,14 +7675,14 @@
  "Targets": {
  "base": null,
  "refs": {
- "Association$Targets": "<p>The instances targeted by the request to create an association. </p>",
+ "Association$Targets": "<p>The instances targeted by the request to create an association. You can target all instances in an Amazon Web Services account by specifying the <code>InstanceIds</code> key with a value of <code>*</code>.</p>",
  "AssociationDescription$Targets": "<p>The instances targeted by the request. </p>",
  "AssociationVersionInfo$Targets": "<p>The targets specified for the association when the association version was created. </p>",
  "AutomationExecution$Targets": "<p>The specified targets.</p>",
  "AutomationExecutionMetadata$Targets": "<p>The targets defined by the user when starting the automation.</p>",
  "Command$Targets": "<p>An array of search criteria that targets instances using a Key,Value combination that you specify. Targets is required if you don't provide one or more instance IDs in the call.</p>",
  "CreateAssociationBatchRequestEntry$Targets": "<p>The instances targeted by the request.</p>",
- "CreateAssociationRequest$Targets": "<p>The targets for the association. You can target instances by using tags, Amazon Web Services resource groups, all instances in an Amazon Web Services account, or individual instance IDs. For more information about choosing targets for an association, see <a href=\"https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-state-manager-targets-and-rate-controls.html\">Using targets and rate controls with State Manager associations</a> in the <i>Amazon Web Services Systems Manager User Guide</i>.</p>",
+ "CreateAssociationRequest$Targets": "<p>The targets for the association. You can target instances by using tags, Amazon Web Services resource groups, all instances in an Amazon Web Services account, or individual instance IDs. You can target all instances in an Amazon Web Services account by specifying the <code>InstanceIds</code> key with a value of <code>*</code>. For more information about choosing targets for an association, see <a href=\"https://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-state-manager-targets-and-rate-controls.html\">Using targets and rate controls with State Manager associations</a> in the <i>Amazon Web Services Systems Manager User Guide</i>.</p>",
  "DescribeMaintenanceWindowScheduleRequest$Targets": "<p>The instance ID or key-value pair to retrieve information about.</p>",
  "DescribeMaintenanceWindowsForTargetRequest$Targets": "<p>The instance ID or key-value pair to retrieve information about.</p>",
  "GetMaintenanceWindowTaskResult$Targets": "<p>The targets where the task should run.</p>",

models/apis/synthetics/2017-10-11/api-2.json

@@ -196,6 +196,18 @@
  }
  },
  "shapes":{
+ "ArtifactConfigInput":{
+ "type":"structure",
+ "members":{
+ "S3Encryption":{"shape":"S3EncryptionConfig"}
+ }
+ },
+ "ArtifactConfigOutput":{
+ "type":"structure",
+ "members":{
+ "S3Encryption":{"shape":"S3EncryptionConfig"}
+ }
+ },
  "BaseScreenshot":{
  "type":"structure",
  "required":["ScreenshotName"],
@@ -249,7 +261,8 @@
  "RuntimeVersion":{"shape":"String"},
  "VpcConfig":{"shape":"VpcConfigOutput"},
  "VisualReference":{"shape":"VisualReferenceOutput"},
- "Tags":{"shape":"TagMap"}
+ "Tags":{"shape":"TagMap"},
+ "ArtifactConfig":{"shape":"ArtifactConfigOutput"}
  }
  },
  "CanaryArn":{
@@ -429,7 +442,8 @@
  "FailureRetentionPeriodInDays":{"shape":"MaxSize1024"},
  "RuntimeVersion":{"shape":"String"},
  "VpcConfig":{"shape":"VpcConfigInput"},
- "Tags":{"shape":"TagMap"}
+ "Tags":{"shape":"TagMap"},
+ "ArtifactConfig":{"shape":"ArtifactConfigInput"}
  }
  },
  "CreateCanaryResponse":{
@@ -496,6 +510,13 @@
  "NextToken":{"shape":"Token"}
  }
  },
+ "EncryptionMode":{
+ "type":"string",
+ "enum":[
+ "SSE_S3",
+ "SSE_KMS"
+ ]
+ },
  "EnvironmentVariableName":{
  "type":"string",
  "pattern":"[a-zA-Z]([a-zA-Z0-9_])+"
@@ -558,6 +579,12 @@
  "error":{"httpStatusCode":500},
  "exception":true
  },
+ "KmsKeyArn":{
+ "type":"string",
+ "max":2048,
+ "min":1,
+ "pattern":"arn:(aws[a-zA-Z-]*)?:kms:[a-z]{2}((-gov)|(-iso(b?)))?-[a-z]+-\\d{1}:\\d{12}:key/[\\w\\-\\/]+"
+ },
  "ListTagsForResourceRequest":{
  "type":"structure",
  "required":["ResourceArn"],
@@ -633,6 +660,13 @@
  "type":"list",
  "member":{"shape":"RuntimeVersion"}
  },
+ "S3EncryptionConfig":{
+ "type":"structure",
+ "members":{
+ "EncryptionMode":{"shape":"EncryptionMode"},
+ "KmsKeyArn":{"shape":"KmsKeyArn"}
+ }
+ },
  "SecurityGroupId":{"type":"string"},
  "SecurityGroupIds":{
  "type":"list",
@@ -778,7 +812,9 @@
  "SuccessRetentionPeriodInDays":{"shape":"MaxSize1024"},
  "FailureRetentionPeriodInDays":{"shape":"MaxSize1024"},
  "VpcConfig":{"shape":"VpcConfigInput"},
- "VisualReference":{"shape":"VisualReferenceInput"}
+ "VisualReference":{"shape":"VisualReferenceInput"},
+ "ArtifactS3Location":{"shape":"String"},
+ "ArtifactConfig":{"shape":"ArtifactConfigInput"}
  }
  },
  "UpdateCanaryResponse":{

models/apis/synthetics/2017-10-11/docs-2.json

@@ -17,6 +17,19 @@
  "UpdateCanary": "<p>Use this operation to change the settings of a canary that has already been created.</p> <p>You can't use this operation to update the tags of an existing canary. To change the tags of an existing canary, use <a href=\"https://docs.aws.amazon.com/AmazonSynthetics/latest/APIReference/API_TagResource.html\">TagResource</a>.</p>"
  },
  "shapes": {
+ "ArtifactConfigInput": {
+ "base": "<p>A structure that contains the configuration for canary artifacts, including the encryption-at-rest settings for artifacts that the canary uploads to Amazon S3.</p>",
+ "refs": {
+ "CreateCanaryRequest$ArtifactConfig": "<p>A structure that contains the configuration for canary artifacts, including the encryption-at-rest settings for artifacts that the canary uploads to Amazon S3.</p>",
+ "UpdateCanaryRequest$ArtifactConfig": "<p>A structure that contains the configuration for canary artifacts, including the encryption-at-rest settings for artifacts that the canary uploads to Amazon S3.</p>"
+ }
+ },
+ "ArtifactConfigOutput": {
+ "base": "<p>A structure that contains the configuration for canary artifacts, including the encryption-at-rest settings for artifacts that the canary uploads to Amazon S3.</p>",
+ "refs": {
+ "Canary$ArtifactConfig": "<p>A structure that contains the configuration for canary artifacts, including the encryption-at-rest settings for artifacts that the canary uploads to Amazon S3.</p>"
+ }
+ },
  "BaseScreenshot": {
  "base": "<p>A structure representing a screenshot that is used as a baseline during visual monitoring comparisons made by the canary.</p>",
  "refs": {
@@ -252,6 +265,12 @@
  "refs": {
  }
  },
+ "EncryptionMode": {
+ "base": null,
+ "refs": {
+ "S3EncryptionConfig$EncryptionMode": "<p> The encryption method to use for artifacts created by this canary. Specify <code>SSE_S3</code> to use server-side encryption (SSE) with an Amazon S3-managed key. Specify <code>SSE-KMS</code> to use server-side encryption with a customer-managed KMS key.</p> <p>If you omit this parameter, an Amazon Web Services-managed KMS key is used. </p>"
+ }
+ },
  "EnvironmentVariableName": {
  "base": null,
  "refs": {
@@ -310,6 +329,12 @@
  "refs": {
  }
  },
+ "KmsKeyArn": {
+ "base": null,
+ "refs": {
+ "S3EncryptionConfig$KmsKeyArn": "<p>The ARN of the customer-managed KMS key to use, if you specify <code>SSE-KMS</code> for <code>EncryptionMode</code> </p>"
+ }
+ },
  "ListTagsForResourceRequest": {
  "base": null,
  "refs": {
@@ -398,6 +423,13 @@
  "DescribeRuntimeVersionsResponse$RuntimeVersions": "<p>An array of objects that display the details about each Synthetics canary runtime version.</p>"
  }
  },
+ "S3EncryptionConfig": {
+ "base": "<p>A structure that contains the configuration of encryption-at-rest settings for canary artifacts that the canary uploads to Amazon S3. </p> <p>For more information, see <a href=\"https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch_Synthetics_artifact_encryption.html\">Encrypting canary artifacts</a> </p>",
+ "refs": {
+ "ArtifactConfigInput$S3Encryption": "<p>A structure that contains the configuration of the encryption-at-rest settings for artifacts that the canary uploads to Amazon S3. Artifact encryption functionality is available only for canaries that use Synthetics runtime version syn-nodejs-puppeteer-3.3 or later. For more information, see <a href=\"https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch_Synthetics_artifact_encryption.html\">Encrypting canary artifacts</a> </p>",
+ "ArtifactConfigOutput$S3Encryption": "<p>A structure that contains the configuration of encryption settings for canary artifacts that are stored in Amazon S3. </p>"
+ }
+ },
  "SecurityGroupId": {
  "base": null,
  "refs": {
@@ -453,6 +485,7 @@
  "RuntimeVersion$VersionName": "<p>The name of the runtime version. For a list of valid runtime versions, see <a href=\"https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch_Synthetics_Canaries_Library.html\"> Canary Runtime Versions</a>.</p>",
  "RuntimeVersion$Description": "<p>A description of the runtime version, created by Amazon.</p>",
  "UpdateCanaryRequest$RuntimeVersion": "<p>Specifies the runtime version to use for the canary. For a list of valid runtime versions and for more information about runtime versions, see <a href=\"https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch_Synthetics_Canaries_Library.html\"> Canary Runtime Versions</a>.</p>",
+ "UpdateCanaryRequest$ArtifactS3Location": "<p>The location in Amazon S3 where Synthetics stores artifacts from the test runs of this canary. Artifacts include the log file, screenshots, and HAR files. The name of the S3 bucket can't include a period (.).</p>",
  "VisualReferenceInput$BaseCanaryRunId": "<p>Specifies which canary run to use the screenshots from as the baseline for future visual monitoring with this canary. Valid values are <code>nextrun</code> to use the screenshots from the next run after this update is made, <code>lastrun</code> to use the screenshots from the most recent run before this update was made, or the value of <code>Id</code> in the <a href=\"https://docs.aws.amazon.com/AmazonSynthetics/latest/APIReference/API_CanaryRun.html\"> CanaryRun</a> from any past run of this canary.</p>",
  "VisualReferenceOutput$BaseCanaryRunId": "<p>The ID of the canary run that produced the screenshots that are used as the baseline for visual monitoring comparisons during future runs of this canary.</p>"
  }

models/endpoints/endpoints.json

@@ -1132,7 +1132,7 @@
  "us-west-2" : { }
  }
  },
- "cloudcontrol" : {
+ "cloudcontrolapi" : {
  "endpoints" : {
  "af-south-1" : { },
  "ap-east-1" : { },
@@ -3875,6 +3875,7 @@
  "endpoints" : {
  "ap-northeast-1" : { },
  "ap-northeast-2" : { },
+ "ap-south-1" : { },
  "ap-southeast-1" : { },
  "ap-southeast-2" : { },
  "eu-central-1" : { },
@@ -3899,6 +3900,12 @@
  },
  "hostname" : "data.iotevents.ap-northeast-2.amazonaws.com"
  },
+ "ap-south-1" : {
+ "credentialScope" : {
+ "region" : "ap-south-1"
+ },
+ "hostname" : "data.iotevents.ap-south-1.amazonaws.com"
+ },
  "ap-southeast-1" : {
  "credentialScope" : {
  "region" : "ap-southeast-1"
@@ -9038,7 +9045,7 @@
  "us-gov-west-1" : { }
  }
  },
- "cloudcontrol" : {
+ "cloudcontrolapi" : {
  "endpoints" : {
  "fips-us-gov-east-1" : {
  "credentialScope" : {