mirror of https://github.com/kubernetes/kops.git
Upgrade aws-sdk-go to v1.42.11
This commit is contained in:
parent
d5edfc3479
commit
b5e4d5206c
2
go.mod
2
go.mod
|
@ -43,7 +43,7 @@ require (
|
|||
github.com/aliyun/alibaba-cloud-sdk-go v1.61.1059
|
||||
github.com/apparentlymart/go-cidr v1.1.0
|
||||
github.com/aws/amazon-ec2-instance-selector/v2 v2.0.2
|
||||
github.com/aws/aws-sdk-go v1.42.5
|
||||
github.com/aws/aws-sdk-go v1.42.11
|
||||
github.com/blang/semver/v4 v4.0.0
|
||||
github.com/denverdino/aliyungo v0.0.0-20210425065611-55bee4942cba
|
||||
github.com/digitalocean/godo v1.65.0
|
||||
|
|
4
go.sum
4
go.sum
|
@ -196,8 +196,8 @@ github.com/aws/aws-sdk-go v1.31.12/go.mod h1:5zCpMtNQVjRREroY7sYe8lOMRSxkhG6MZve
|
|||
github.com/aws/aws-sdk-go v1.34.9/go.mod h1:5zCpMtNQVjRREroY7sYe8lOMRSxkhG6MZveU8YkpAk0=
|
||||
github.com/aws/aws-sdk-go v1.38.49/go.mod h1:hcU610XS61/+aQV88ixoOzUoG7v3b31pl2zKMmprdro=
|
||||
github.com/aws/aws-sdk-go v1.40.21/go.mod h1:585smgzpB/KqRA+K3y/NL/oYRqQvpNJYvLm+LY1U59Q=
|
||||
github.com/aws/aws-sdk-go v1.42.5 h1:0xNoQrGh9InmUsT+9qzZ8QLfBEUsnev5BMeED6t6cKI=
|
||||
github.com/aws/aws-sdk-go v1.42.5/go.mod h1:585smgzpB/KqRA+K3y/NL/oYRqQvpNJYvLm+LY1U59Q=
|
||||
github.com/aws/aws-sdk-go v1.42.11 h1:5wfKuNcbch3IFZth5+j2Ud/+UOxCR0zfgLGPoiK1p4s=
|
||||
github.com/aws/aws-sdk-go v1.42.11/go.mod h1:585smgzpB/KqRA+K3y/NL/oYRqQvpNJYvLm+LY1U59Q=
|
||||
github.com/benbjohnson/clock v1.0.3/go.mod h1:bGMdMPoPVvcYyt1gHDf4J2KE153Yf9BuiUKYMaxlTDM=
|
||||
github.com/benbjohnson/clock v1.1.0/go.mod h1:J11/hYXuz8f4ySSvYwY0FKfm+ezbsZBKZxNJlLklBHA=
|
||||
github.com/beorn7/perks v0.0.0-20160804104726-4c0e84591b9a/go.mod h1:Dwedo/Wpr24TaqPxmxbtue+5NUziq4I4S80YR8gNf3Q=
|
||||
|
|
|
@ -23,7 +23,7 @@ require (
|
|||
github.com/Azure/azure-storage-blob-go v0.13.0 // indirect
|
||||
github.com/StackExchange/wmi v0.0.0-20190523213315-cbe66965904d // indirect
|
||||
github.com/apparentlymart/go-cidr v1.1.0 // indirect
|
||||
github.com/aws/aws-sdk-go v1.42.5 // indirect
|
||||
github.com/aws/aws-sdk-go v1.42.11 // indirect
|
||||
github.com/blang/semver/v4 v4.0.0 // indirect
|
||||
github.com/cenkalti/backoff/v3 v3.0.0 // indirect
|
||||
github.com/containers/image/v5 v5.9.0 // indirect
|
||||
|
|
|
@ -266,8 +266,8 @@ github.com/aws/aws-sdk-go v1.31.12/go.mod h1:5zCpMtNQVjRREroY7sYe8lOMRSxkhG6MZve
|
|||
github.com/aws/aws-sdk-go v1.34.9/go.mod h1:5zCpMtNQVjRREroY7sYe8lOMRSxkhG6MZveU8YkpAk0=
|
||||
github.com/aws/aws-sdk-go v1.38.49/go.mod h1:hcU610XS61/+aQV88ixoOzUoG7v3b31pl2zKMmprdro=
|
||||
github.com/aws/aws-sdk-go v1.40.21/go.mod h1:585smgzpB/KqRA+K3y/NL/oYRqQvpNJYvLm+LY1U59Q=
|
||||
github.com/aws/aws-sdk-go v1.42.5 h1:0xNoQrGh9InmUsT+9qzZ8QLfBEUsnev5BMeED6t6cKI=
|
||||
github.com/aws/aws-sdk-go v1.42.5/go.mod h1:585smgzpB/KqRA+K3y/NL/oYRqQvpNJYvLm+LY1U59Q=
|
||||
github.com/aws/aws-sdk-go v1.42.11 h1:5wfKuNcbch3IFZth5+j2Ud/+UOxCR0zfgLGPoiK1p4s=
|
||||
github.com/aws/aws-sdk-go v1.42.11/go.mod h1:585smgzpB/KqRA+K3y/NL/oYRqQvpNJYvLm+LY1U59Q=
|
||||
github.com/bazelbuild/buildtools v0.0.0-20190917191645-69366ca98f89/go.mod h1:5JP0TXzWDHXv8qvxRC4InIazwdyDseBDbzESUMKk1yU=
|
||||
github.com/bazelbuild/rules_go v0.22.1/go.mod h1:MC23Dc/wkXEyk3Wpq6lCqz0ZAYOZDw2DR5y3N1q2i7M=
|
||||
github.com/benbjohnson/clock v1.0.3/go.mod h1:bGMdMPoPVvcYyt1gHDf4J2KE153Yf9BuiUKYMaxlTDM=
|
||||
|
|
|
@ -1430,6 +1430,50 @@ var awsPartition = partition{
|
|||
},
|
||||
},
|
||||
},
|
||||
"api.iotwireless": service{
|
||||
Endpoints: serviceEndpoints{
|
||||
endpointKey{
|
||||
Region: "ap-northeast-1",
|
||||
}: endpoint{
|
||||
Hostname: "api.iotwireless.ap-northeast-1.amazonaws.com",
|
||||
CredentialScope: credentialScope{
|
||||
Region: "ap-northeast-1",
|
||||
},
|
||||
},
|
||||
endpointKey{
|
||||
Region: "ap-southeast-2",
|
||||
}: endpoint{
|
||||
Hostname: "api.iotwireless.ap-southeast-2.amazonaws.com",
|
||||
CredentialScope: credentialScope{
|
||||
Region: "ap-southeast-2",
|
||||
},
|
||||
},
|
||||
endpointKey{
|
||||
Region: "eu-west-1",
|
||||
}: endpoint{
|
||||
Hostname: "api.iotwireless.eu-west-1.amazonaws.com",
|
||||
CredentialScope: credentialScope{
|
||||
Region: "eu-west-1",
|
||||
},
|
||||
},
|
||||
endpointKey{
|
||||
Region: "us-east-1",
|
||||
}: endpoint{
|
||||
Hostname: "api.iotwireless.us-east-1.amazonaws.com",
|
||||
CredentialScope: credentialScope{
|
||||
Region: "us-east-1",
|
||||
},
|
||||
},
|
||||
endpointKey{
|
||||
Region: "us-west-2",
|
||||
}: endpoint{
|
||||
Hostname: "api.iotwireless.us-west-2.amazonaws.com",
|
||||
CredentialScope: credentialScope{
|
||||
Region: "us-west-2",
|
||||
},
|
||||
},
|
||||
},
|
||||
},
|
||||
"api.mediatailor": service{
|
||||
Endpoints: serviceEndpoints{
|
||||
endpointKey{
|
||||
|
@ -1702,6 +1746,73 @@ var awsPartition = partition{
|
|||
}: endpoint{},
|
||||
},
|
||||
},
|
||||
"appconfigdata": service{
|
||||
Endpoints: serviceEndpoints{
|
||||
endpointKey{
|
||||
Region: "af-south-1",
|
||||
}: endpoint{},
|
||||
endpointKey{
|
||||
Region: "ap-east-1",
|
||||
}: endpoint{},
|
||||
endpointKey{
|
||||
Region: "ap-northeast-1",
|
||||
}: endpoint{},
|
||||
endpointKey{
|
||||
Region: "ap-northeast-2",
|
||||
}: endpoint{},
|
||||
endpointKey{
|
||||
Region: "ap-northeast-3",
|
||||
}: endpoint{},
|
||||
endpointKey{
|
||||
Region: "ap-south-1",
|
||||
}: endpoint{},
|
||||
endpointKey{
|
||||
Region: "ap-southeast-1",
|
||||
}: endpoint{},
|
||||
endpointKey{
|
||||
Region: "ap-southeast-2",
|
||||
}: endpoint{},
|
||||
endpointKey{
|
||||
Region: "ca-central-1",
|
||||
}: endpoint{},
|
||||
endpointKey{
|
||||
Region: "eu-central-1",
|
||||
}: endpoint{},
|
||||
endpointKey{
|
||||
Region: "eu-north-1",
|
||||
}: endpoint{},
|
||||
endpointKey{
|
||||
Region: "eu-south-1",
|
||||
}: endpoint{},
|
||||
endpointKey{
|
||||
Region: "eu-west-1",
|
||||
}: endpoint{},
|
||||
endpointKey{
|
||||
Region: "eu-west-2",
|
||||
}: endpoint{},
|
||||
endpointKey{
|
||||
Region: "eu-west-3",
|
||||
}: endpoint{},
|
||||
endpointKey{
|
||||
Region: "me-south-1",
|
||||
}: endpoint{},
|
||||
endpointKey{
|
||||
Region: "sa-east-1",
|
||||
}: endpoint{},
|
||||
endpointKey{
|
||||
Region: "us-east-1",
|
||||
}: endpoint{},
|
||||
endpointKey{
|
||||
Region: "us-east-2",
|
||||
}: endpoint{},
|
||||
endpointKey{
|
||||
Region: "us-west-1",
|
||||
}: endpoint{},
|
||||
endpointKey{
|
||||
Region: "us-west-2",
|
||||
}: endpoint{},
|
||||
},
|
||||
},
|
||||
"appflow": service{
|
||||
Endpoints: serviceEndpoints{
|
||||
endpointKey{
|
||||
|
@ -5718,6 +5829,37 @@ var awsPartition = partition{
|
|||
},
|
||||
},
|
||||
},
|
||||
"drs": service{
|
||||
Endpoints: serviceEndpoints{
|
||||
endpointKey{
|
||||
Region: "ap-northeast-1",
|
||||
}: endpoint{},
|
||||
endpointKey{
|
||||
Region: "ap-southeast-1",
|
||||
}: endpoint{},
|
||||
endpointKey{
|
||||
Region: "ap-southeast-2",
|
||||
}: endpoint{},
|
||||
endpointKey{
|
||||
Region: "eu-central-1",
|
||||
}: endpoint{},
|
||||
endpointKey{
|
||||
Region: "eu-west-1",
|
||||
}: endpoint{},
|
||||
endpointKey{
|
||||
Region: "eu-west-2",
|
||||
}: endpoint{},
|
||||
endpointKey{
|
||||
Region: "us-east-1",
|
||||
}: endpoint{},
|
||||
endpointKey{
|
||||
Region: "us-east-2",
|
||||
}: endpoint{},
|
||||
endpointKey{
|
||||
Region: "us-west-2",
|
||||
}: endpoint{},
|
||||
},
|
||||
},
|
||||
"ds": service{
|
||||
Endpoints: serviceEndpoints{
|
||||
endpointKey{
|
||||
|
@ -11066,6 +11208,15 @@ var awsPartition = partition{
|
|||
},
|
||||
Deprecated: boxedTrue,
|
||||
},
|
||||
endpointKey{
|
||||
Region: "ap-southeast-3-fips",
|
||||
}: endpoint{
|
||||
Hostname: "kms-fips.ap-southeast-3.amazonaws.com",
|
||||
CredentialScope: credentialScope{
|
||||
Region: "ap-southeast-3",
|
||||
},
|
||||
Deprecated: boxedTrue,
|
||||
},
|
||||
endpointKey{
|
||||
Region: "ca-central-1",
|
||||
}: endpoint{},
|
||||
|
@ -12622,6 +12773,9 @@ var awsPartition = partition{
|
|||
},
|
||||
"mgn": service{
|
||||
Endpoints: serviceEndpoints{
|
||||
endpointKey{
|
||||
Region: "af-south-1",
|
||||
}: endpoint{},
|
||||
endpointKey{
|
||||
Region: "ap-east-1",
|
||||
}: endpoint{},
|
||||
|
@ -12652,12 +12806,21 @@ var awsPartition = partition{
|
|||
endpointKey{
|
||||
Region: "eu-north-1",
|
||||
}: endpoint{},
|
||||
endpointKey{
|
||||
Region: "eu-south-1",
|
||||
}: endpoint{},
|
||||
endpointKey{
|
||||
Region: "eu-west-1",
|
||||
}: endpoint{},
|
||||
endpointKey{
|
||||
Region: "eu-west-2",
|
||||
}: endpoint{},
|
||||
endpointKey{
|
||||
Region: "eu-west-3",
|
||||
}: endpoint{},
|
||||
endpointKey{
|
||||
Region: "me-south-1",
|
||||
}: endpoint{},
|
||||
endpointKey{
|
||||
Region: "sa-east-1",
|
||||
}: endpoint{},
|
||||
|
@ -18814,12 +18977,21 @@ var awsPartition = partition{
|
|||
},
|
||||
},
|
||||
Endpoints: serviceEndpoints{
|
||||
endpointKey{
|
||||
Region: "af-south-1",
|
||||
}: endpoint{},
|
||||
endpointKey{
|
||||
Region: "ap-east-1",
|
||||
}: endpoint{},
|
||||
endpointKey{
|
||||
Region: "ap-northeast-1",
|
||||
}: endpoint{},
|
||||
endpointKey{
|
||||
Region: "ap-northeast-2",
|
||||
}: endpoint{},
|
||||
endpointKey{
|
||||
Region: "ap-northeast-3",
|
||||
}: endpoint{},
|
||||
endpointKey{
|
||||
Region: "ap-south-1",
|
||||
}: endpoint{},
|
||||
|
@ -18832,20 +19004,15 @@ var awsPartition = partition{
|
|||
endpointKey{
|
||||
Region: "ca-central-1",
|
||||
}: endpoint{},
|
||||
endpointKey{
|
||||
Region: "ca-central-1-fips",
|
||||
}: endpoint{
|
||||
Hostname: "dynamodb-fips.ca-central-1.amazonaws.com",
|
||||
CredentialScope: credentialScope{
|
||||
Region: "ca-central-1",
|
||||
},
|
||||
},
|
||||
endpointKey{
|
||||
Region: "eu-central-1",
|
||||
}: endpoint{},
|
||||
endpointKey{
|
||||
Region: "eu-north-1",
|
||||
}: endpoint{},
|
||||
endpointKey{
|
||||
Region: "eu-south-1",
|
||||
}: endpoint{},
|
||||
endpointKey{
|
||||
Region: "eu-west-1",
|
||||
}: endpoint{},
|
||||
|
@ -18873,47 +19040,15 @@ var awsPartition = partition{
|
|||
endpointKey{
|
||||
Region: "us-east-1",
|
||||
}: endpoint{},
|
||||
endpointKey{
|
||||
Region: "us-east-1-fips",
|
||||
}: endpoint{
|
||||
Hostname: "dynamodb-fips.us-east-1.amazonaws.com",
|
||||
CredentialScope: credentialScope{
|
||||
Region: "us-east-1",
|
||||
},
|
||||
},
|
||||
endpointKey{
|
||||
Region: "us-east-2",
|
||||
}: endpoint{},
|
||||
endpointKey{
|
||||
Region: "us-east-2-fips",
|
||||
}: endpoint{
|
||||
Hostname: "dynamodb-fips.us-east-2.amazonaws.com",
|
||||
CredentialScope: credentialScope{
|
||||
Region: "us-east-2",
|
||||
},
|
||||
},
|
||||
endpointKey{
|
||||
Region: "us-west-1",
|
||||
}: endpoint{},
|
||||
endpointKey{
|
||||
Region: "us-west-1-fips",
|
||||
}: endpoint{
|
||||
Hostname: "dynamodb-fips.us-west-1.amazonaws.com",
|
||||
CredentialScope: credentialScope{
|
||||
Region: "us-west-1",
|
||||
},
|
||||
},
|
||||
endpointKey{
|
||||
Region: "us-west-2",
|
||||
}: endpoint{},
|
||||
endpointKey{
|
||||
Region: "us-west-2-fips",
|
||||
}: endpoint{
|
||||
Hostname: "dynamodb-fips.us-west-2.amazonaws.com",
|
||||
CredentialScope: credentialScope{
|
||||
Region: "us-west-2",
|
||||
},
|
||||
},
|
||||
},
|
||||
},
|
||||
"sts": service{
|
||||
|
@ -20965,6 +21100,16 @@ var awscnPartition = partition{
|
|||
}: endpoint{},
|
||||
},
|
||||
},
|
||||
"appconfigdata": service{
|
||||
Endpoints: serviceEndpoints{
|
||||
endpointKey{
|
||||
Region: "cn-north-1",
|
||||
}: endpoint{},
|
||||
endpointKey{
|
||||
Region: "cn-northwest-1",
|
||||
}: endpoint{},
|
||||
},
|
||||
},
|
||||
"application-autoscaling": service{
|
||||
Defaults: endpointDefaults{
|
||||
defaultKey{}: endpoint{
|
||||
|
@ -22711,6 +22856,16 @@ var awsusgovPartition = partition{
|
|||
}: endpoint{},
|
||||
},
|
||||
},
|
||||
"appconfigdata": service{
|
||||
Endpoints: serviceEndpoints{
|
||||
endpointKey{
|
||||
Region: "us-gov-east-1",
|
||||
}: endpoint{},
|
||||
endpointKey{
|
||||
Region: "us-gov-west-1",
|
||||
}: endpoint{},
|
||||
},
|
||||
},
|
||||
"application-autoscaling": service{
|
||||
Defaults: endpointDefaults{
|
||||
defaultKey{}: endpoint{
|
||||
|
@ -26368,29 +26523,51 @@ var awsusgovPartition = partition{
|
|||
Service: "dynamodb",
|
||||
},
|
||||
},
|
||||
defaultKey{
|
||||
Variant: fipsVariant,
|
||||
}: endpoint{
|
||||
Hostname: "streams.dynamodb.{region}.{dnsSuffix}",
|
||||
CredentialScope: credentialScope{
|
||||
Service: "dynamodb",
|
||||
},
|
||||
},
|
||||
},
|
||||
Endpoints: serviceEndpoints{
|
||||
endpointKey{
|
||||
Region: "us-gov-east-1",
|
||||
}: endpoint{},
|
||||
endpointKey{
|
||||
Region: "us-gov-east-1",
|
||||
Variant: fipsVariant,
|
||||
}: endpoint{
|
||||
Hostname: "streams.dynamodb.us-gov-east-1.amazonaws.com",
|
||||
},
|
||||
endpointKey{
|
||||
Region: "us-gov-east-1-fips",
|
||||
}: endpoint{
|
||||
Hostname: "dynamodb.us-gov-east-1.amazonaws.com",
|
||||
Hostname: "streams.dynamodb.us-gov-east-1.amazonaws.com",
|
||||
CredentialScope: credentialScope{
|
||||
Region: "us-gov-east-1",
|
||||
},
|
||||
Deprecated: boxedTrue,
|
||||
},
|
||||
endpointKey{
|
||||
Region: "us-gov-west-1",
|
||||
}: endpoint{},
|
||||
endpointKey{
|
||||
Region: "us-gov-west-1",
|
||||
Variant: fipsVariant,
|
||||
}: endpoint{
|
||||
Hostname: "streams.dynamodb.us-gov-west-1.amazonaws.com",
|
||||
},
|
||||
endpointKey{
|
||||
Region: "us-gov-west-1-fips",
|
||||
}: endpoint{
|
||||
Hostname: "dynamodb.us-gov-west-1.amazonaws.com",
|
||||
Hostname: "streams.dynamodb.us-gov-west-1.amazonaws.com",
|
||||
CredentialScope: credentialScope{
|
||||
Region: "us-gov-west-1",
|
||||
},
|
||||
Deprecated: boxedTrue,
|
||||
},
|
||||
},
|
||||
},
|
||||
|
@ -27424,7 +27601,6 @@ var awsisoPartition = partition{
|
|||
"streams.dynamodb": service{
|
||||
Defaults: endpointDefaults{
|
||||
defaultKey{}: endpoint{
|
||||
Protocols: []string{"http", "https"},
|
||||
CredentialScope: credentialScope{
|
||||
Service: "dynamodb",
|
||||
},
|
||||
|
@ -27433,9 +27609,7 @@ var awsisoPartition = partition{
|
|||
Endpoints: serviceEndpoints{
|
||||
endpointKey{
|
||||
Region: "us-iso-east-1",
|
||||
}: endpoint{
|
||||
Protocols: []string{"http", "https"},
|
||||
},
|
||||
}: endpoint{},
|
||||
},
|
||||
},
|
||||
"sts": service{
|
||||
|
|
|
@ -5,4 +5,4 @@ package aws
|
|||
const SDKName = "aws-sdk-go"
|
||||
|
||||
// SDKVersion is the version of this SDK
|
||||
const SDKVersion = "1.42.5"
|
||||
const SDKVersion = "1.42.11"
|
||||
|
|
|
@ -3481,12 +3481,13 @@ func (c *CloudFormation) ImportStacksToStackSetRequest(input *ImportStacksToStac
|
|||
|
||||
// ImportStacksToStackSet API operation for AWS CloudFormation.
|
||||
//
|
||||
// Import existing stacks into a new stack sets. Use the stack import operation
|
||||
// to import up to 10 stacks into a new stack set in the same account as the
|
||||
// source stack or in a different administrator account and Region, by specifying
|
||||
// the stack ID of the stack you intend to import.
|
||||
//
|
||||
// ImportStacksToStackSet is only supported by self-managed permissions.
|
||||
// Use the stack import operations for self-managed or service-managed StackSets.
|
||||
// For self-managed StackSets, the import operation can import stacks in the
|
||||
// administrator account or in different target accounts and Amazon Web Services
|
||||
// Regions. For service-managed StackSets, the import operation can import any
|
||||
// stack in the same AWS Organizations as the management account. The import
|
||||
// operation can import up to 10 stacks using inline stack IDs or up to 10,000
|
||||
// stacks using an Amazon S3 object.
|
||||
//
|
||||
// Returns awserr.Error for service API and SDK errors. Use runtime type assertions
|
||||
// with awserr.Error's Code and Message methods to get detailed information about
|
||||
|
@ -8705,6 +8706,10 @@ type CreateStackSetInput struct {
|
|||
// which stack resources users and groups can include in their stack sets.
|
||||
ExecutionRoleName *string `min:"1" type:"string"`
|
||||
|
||||
// Describes whether StackSets performs non-conflicting operations concurrently
|
||||
// and queues conflicting operations.
|
||||
ManagedExecution *ManagedExecution `type:"structure"`
|
||||
|
||||
// The input parameters for the stack set template.
|
||||
Parameters []*Parameter `type:"list"`
|
||||
|
||||
|
@ -8865,6 +8870,12 @@ func (s *CreateStackSetInput) SetExecutionRoleName(v string) *CreateStackSetInpu
|
|||
return s
|
||||
}
|
||||
|
||||
// SetManagedExecution sets the ManagedExecution field's value.
|
||||
func (s *CreateStackSetInput) SetManagedExecution(v *ManagedExecution) *CreateStackSetInput {
|
||||
s.ManagedExecution = v
|
||||
return s
|
||||
}
|
||||
|
||||
// SetParameters sets the Parameters field's value.
|
||||
func (s *CreateStackSetInput) SetParameters(v []*Parameter) *CreateStackSetInput {
|
||||
s.Parameters = v
|
||||
|
@ -12980,11 +12991,20 @@ type ImportStacksToStackSetInput struct {
|
|||
// see Stack set operation options (https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/stacksets-concepts.html#stackset-ops-options).
|
||||
OperationPreferences *StackSetOperationPreferences `type:"structure"`
|
||||
|
||||
// The list of OU ID’s to which the stacks being imported has to be mapped
|
||||
// as deployment target.
|
||||
OrganizationalUnitIds []*string `type:"list"`
|
||||
|
||||
// The IDs of the stacks you are importing into a stack set. You import up to
|
||||
// 10 stacks per stack set at a time.
|
||||
//
|
||||
// StackIds is a required field
|
||||
StackIds []*string `type:"list" required:"true"`
|
||||
// Specify either StackIds or StackIdsUrl.
|
||||
StackIds []*string `type:"list"`
|
||||
|
||||
// The Amazon S3 URL which contains list of stack ids to be inputted.
|
||||
//
|
||||
// Specify either StackIds or StackIdsUrl.
|
||||
StackIdsUrl *string `min:"1" type:"string"`
|
||||
|
||||
// The name of the stack set. The name must be unique in the Region where you
|
||||
// create your stack set.
|
||||
|
@ -13017,8 +13037,8 @@ func (s *ImportStacksToStackSetInput) Validate() error {
|
|||
if s.OperationId != nil && len(*s.OperationId) < 1 {
|
||||
invalidParams.Add(request.NewErrParamMinLen("OperationId", 1))
|
||||
}
|
||||
if s.StackIds == nil {
|
||||
invalidParams.Add(request.NewErrParamRequired("StackIds"))
|
||||
if s.StackIdsUrl != nil && len(*s.StackIdsUrl) < 1 {
|
||||
invalidParams.Add(request.NewErrParamMinLen("StackIdsUrl", 1))
|
||||
}
|
||||
if s.StackSetName == nil {
|
||||
invalidParams.Add(request.NewErrParamRequired("StackSetName"))
|
||||
|
@ -13053,12 +13073,24 @@ func (s *ImportStacksToStackSetInput) SetOperationPreferences(v *StackSetOperati
|
|||
return s
|
||||
}
|
||||
|
||||
// SetOrganizationalUnitIds sets the OrganizationalUnitIds field's value.
|
||||
func (s *ImportStacksToStackSetInput) SetOrganizationalUnitIds(v []*string) *ImportStacksToStackSetInput {
|
||||
s.OrganizationalUnitIds = v
|
||||
return s
|
||||
}
|
||||
|
||||
// SetStackIds sets the StackIds field's value.
|
||||
func (s *ImportStacksToStackSetInput) SetStackIds(v []*string) *ImportStacksToStackSetInput {
|
||||
s.StackIds = v
|
||||
return s
|
||||
}
|
||||
|
||||
// SetStackIdsUrl sets the StackIdsUrl field's value.
|
||||
func (s *ImportStacksToStackSetInput) SetStackIdsUrl(v string) *ImportStacksToStackSetInput {
|
||||
s.StackIdsUrl = &v
|
||||
return s
|
||||
}
|
||||
|
||||
// SetStackSetName sets the StackSetName field's value.
|
||||
func (s *ImportStacksToStackSetInput) SetStackSetName(v string) *ImportStacksToStackSetInput {
|
||||
s.StackSetName = &v
|
||||
|
@ -14575,8 +14607,9 @@ type ListTypesInput struct {
|
|||
|
||||
// Filter criteria to use in determining which extensions to return.
|
||||
//
|
||||
// If you specify a filter, CloudFormation ignores any specified Visibility
|
||||
// value when returning the list of types.
|
||||
// Filters must be compatible with Visibility to return valid results. For example,
|
||||
// specifying AWS_TYPES for Category and PRIVATE for Visibility returns an empty
|
||||
// list of types, but specifying PUBLIC for Visibility returns the desired list.
|
||||
Filters *TypeFilters `type:"structure"`
|
||||
|
||||
// The maximum number of results to be returned with a single call. If the number
|
||||
|
@ -14826,6 +14859,50 @@ func (s *LoggingConfig) SetLogRoleArn(v string) *LoggingConfig {
|
|||
return s
|
||||
}
|
||||
|
||||
// Describes whether StackSets performs non-conflicting operations concurrently
|
||||
// and queues conflicting operations.
|
||||
type ManagedExecution struct {
|
||||
_ struct{} `type:"structure"`
|
||||
|
||||
// When true, StackSets performs non-conflicting operations concurrently and
|
||||
// queues conflicting operations. After conflicting operations finish, StackSets
|
||||
// starts queued operations in request order.
|
||||
//
|
||||
// If there are already running or queued operations, StackSets queues all incoming
|
||||
// operations even if they are non-conflicting.
|
||||
//
|
||||
// You can't modify your stack set's execution configuration while there are
|
||||
// running or queued operations for that stack set.
|
||||
//
|
||||
// When false (default), StackSets performs one operation at a time in request
|
||||
// order.
|
||||
Active *bool `type:"boolean"`
|
||||
}
|
||||
|
||||
// String returns the string representation.
|
||||
//
|
||||
// API parameter values that are decorated as "sensitive" in the API will not
|
||||
// be included in the string output. The member name will be present, but the
|
||||
// value will be replaced with "sensitive".
|
||||
func (s ManagedExecution) String() string {
|
||||
return awsutil.Prettify(s)
|
||||
}
|
||||
|
||||
// GoString returns the string representation.
|
||||
//
|
||||
// API parameter values that are decorated as "sensitive" in the API will not
|
||||
// be included in the string output. The member name will be present, but the
|
||||
// value will be replaced with "sensitive".
|
||||
func (s ManagedExecution) GoString() string {
|
||||
return s.String()
|
||||
}
|
||||
|
||||
// SetActive sets the Active field's value.
|
||||
func (s *ManagedExecution) SetActive(v bool) *ManagedExecution {
|
||||
s.Active = &v
|
||||
return s
|
||||
}
|
||||
|
||||
// Contains information about the module from which the resource was created,
|
||||
// if the resource was created from a module included in the stack template.
|
||||
//
|
||||
|
@ -14961,9 +15038,9 @@ type Parameter struct {
|
|||
// The input value associated with the parameter.
|
||||
ParameterValue *string `type:"string"`
|
||||
|
||||
// Read-only. The value that corresponds to a Systems Manager parameter key.
|
||||
// This field is returned only for SSM parameter types (https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/parameters-section-structure.html#aws-ssm-parameter-types)
|
||||
// in the template.
|
||||
// Read-only. Read-only. The value that corresponds to a SSM parameter key.
|
||||
// This field is returned only for SSM (https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/parameters-section-structure.html#aws-ssm-parameter-types)
|
||||
// parameter types in the template.
|
||||
ResolvedValue *string `type:"string"`
|
||||
|
||||
// During a stack update, use the existing parameter value that the stack is
|
||||
|
@ -15275,8 +15352,8 @@ type PublishTypeInput struct {
|
|||
// If you do not specify a version number, CloudFormation increments the version
|
||||
// number by one minor version release.
|
||||
//
|
||||
// The first time you publish a type, CloudFormation sets the version number
|
||||
// to 1.0.0, regardless of the value you specify.
|
||||
// You cannot specify a version number the first time you publish a type. CloudFormation
|
||||
// automatically sets the first version number to be 1.0.0.
|
||||
PublicVersionNumber *string `min:"5" type:"string"`
|
||||
|
||||
// The type of the extension.
|
||||
|
@ -16528,9 +16605,10 @@ type RollbackTrigger struct {
|
|||
// Arn is a required field
|
||||
Arn *string `type:"string" required:"true"`
|
||||
|
||||
// The resource type of the rollback trigger. Currently, AWS::CloudWatch::Alarm
|
||||
// The resource type of the rollback trigger. Specify either AWS::CloudWatch::Alarm
|
||||
// (https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-cw-alarm.html)
|
||||
// is the only supported resource type.
|
||||
// or AWS::CloudWatch::CompositeAlarm (https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-cloudwatch-compositealarm.html)
|
||||
// resource types.
|
||||
//
|
||||
// Type is a required field
|
||||
Type *string `type:"string" required:"true"`
|
||||
|
@ -18716,6 +18794,10 @@ type StackSet struct {
|
|||
// groups can include in their stack sets.
|
||||
ExecutionRoleName *string `min:"1" type:"string"`
|
||||
|
||||
// Describes whether StackSets performs non-conflicting operations concurrently
|
||||
// and queues conflicting operations.
|
||||
ManagedExecution *ManagedExecution `type:"structure"`
|
||||
|
||||
// [Service-managed permissions] The organization root ID or organizational
|
||||
// unit (OU) IDs that you specified for DeploymentTargets (https://docs.aws.amazon.com/AWSCloudFormation/latest/APIReference/API_DeploymentTargets.html).
|
||||
OrganizationalUnitIds []*string `type:"list"`
|
||||
|
@ -18810,6 +18892,12 @@ func (s *StackSet) SetExecutionRoleName(v string) *StackSet {
|
|||
return s
|
||||
}
|
||||
|
||||
// SetManagedExecution sets the ManagedExecution field's value.
|
||||
func (s *StackSet) SetManagedExecution(v *ManagedExecution) *StackSet {
|
||||
s.ManagedExecution = v
|
||||
return s
|
||||
}
|
||||
|
||||
// SetOrganizationalUnitIds sets the OrganizationalUnitIds field's value.
|
||||
func (s *StackSet) SetOrganizationalUnitIds(v []*string) *StackSet {
|
||||
s.OrganizationalUnitIds = v
|
||||
|
@ -19578,6 +19666,10 @@ type StackSetSummary struct {
|
|||
// detection has not yet been performed.
|
||||
LastDriftCheckTimestamp *time.Time `type:"timestamp"`
|
||||
|
||||
// Describes whether StackSets performs non-conflicting operations concurrently
|
||||
// and queues conflicting operations.
|
||||
ManagedExecution *ManagedExecution `type:"structure"`
|
||||
|
||||
// Describes how the IAM roles required for stack set operations are created.
|
||||
//
|
||||
// * With self-managed permissions, you must create the administrator and
|
||||
|
@ -19641,6 +19733,12 @@ func (s *StackSetSummary) SetLastDriftCheckTimestamp(v time.Time) *StackSetSumma
|
|||
return s
|
||||
}
|
||||
|
||||
// SetManagedExecution sets the ManagedExecution field's value.
|
||||
func (s *StackSetSummary) SetManagedExecution(v *ManagedExecution) *StackSetSummary {
|
||||
s.ManagedExecution = v
|
||||
return s
|
||||
}
|
||||
|
||||
// SetPermissionModel sets the PermissionModel field's value.
|
||||
func (s *StackSetSummary) SetPermissionModel(v string) *StackSetSummary {
|
||||
s.PermissionModel = &v
|
||||
|
@ -20398,16 +20496,16 @@ type TypeFilters struct {
|
|||
// * ACTIVATED: Public extensions that have been activated for this account
|
||||
// and region.
|
||||
//
|
||||
// * THIRD-PARTY: Extensions available for use from publishers other than
|
||||
// * THIRD_PARTY: Extensions available for use from publishers other than
|
||||
// Amazon. This includes: Private extensions registered in the account. Public
|
||||
// extensions from publishers other than Amazon, whether activated or not.
|
||||
//
|
||||
// * AWS-TYPES: Extensions available for use from Amazon.
|
||||
// * AWS_TYPES: Extensions available for use from Amazon.
|
||||
Category *string `type:"string" enum:"Category"`
|
||||
|
||||
// The id of the publisher of the extension.
|
||||
//
|
||||
// Extensions published by Amazon are not assigned a publisher ID. Use the AWS-TYPES
|
||||
// Extensions published by Amazon are not assigned a publisher ID. Use the AWS_TYPE
|
||||
// category to specify a list of types published by Amazon.
|
||||
PublisherId *string `min:"1" type:"string"`
|
||||
|
||||
|
@ -21510,6 +21608,10 @@ type UpdateStackSetInput struct {
|
|||
// so long as you have permissions to perform operations on the stack set.
|
||||
ExecutionRoleName *string `min:"1" type:"string"`
|
||||
|
||||
// Describes whether StackSets performs non-conflicting operations concurrently
|
||||
// and queues conflicting operations.
|
||||
ManagedExecution *ManagedExecution `type:"structure"`
|
||||
|
||||
// The unique ID for this stack set operation.
|
||||
//
|
||||
// The operation ID also functions as an idempotency token, to ensure that CloudFormation
|
||||
|
@ -21736,6 +21838,12 @@ func (s *UpdateStackSetInput) SetExecutionRoleName(v string) *UpdateStackSetInpu
|
|||
return s
|
||||
}
|
||||
|
||||
// SetManagedExecution sets the ManagedExecution field's value.
|
||||
func (s *UpdateStackSetInput) SetManagedExecution(v *ManagedExecution) *UpdateStackSetInput {
|
||||
s.ManagedExecution = v
|
||||
return s
|
||||
}
|
||||
|
||||
// SetOperationId sets the OperationId field's value.
|
||||
func (s *UpdateStackSetInput) SetOperationId(v string) *UpdateStackSetInput {
|
||||
s.OperationId = &v
|
||||
|
|
File diff suppressed because it is too large
Load Diff
|
@ -1937,6 +1937,10 @@ type EC2API interface {
|
|||
ModifyNetworkInterfaceAttributeWithContext(aws.Context, *ec2.ModifyNetworkInterfaceAttributeInput, ...request.Option) (*ec2.ModifyNetworkInterfaceAttributeOutput, error)
|
||||
ModifyNetworkInterfaceAttributeRequest(*ec2.ModifyNetworkInterfaceAttributeInput) (*request.Request, *ec2.ModifyNetworkInterfaceAttributeOutput)
|
||||
|
||||
ModifyPrivateDnsNameOptions(*ec2.ModifyPrivateDnsNameOptionsInput) (*ec2.ModifyPrivateDnsNameOptionsOutput, error)
|
||||
ModifyPrivateDnsNameOptionsWithContext(aws.Context, *ec2.ModifyPrivateDnsNameOptionsInput, ...request.Option) (*ec2.ModifyPrivateDnsNameOptionsOutput, error)
|
||||
ModifyPrivateDnsNameOptionsRequest(*ec2.ModifyPrivateDnsNameOptionsInput) (*request.Request, *ec2.ModifyPrivateDnsNameOptionsOutput)
|
||||
|
||||
ModifyReservedInstances(*ec2.ModifyReservedInstancesInput) (*ec2.ModifyReservedInstancesOutput, error)
|
||||
ModifyReservedInstancesWithContext(aws.Context, *ec2.ModifyReservedInstancesInput, ...request.Option) (*ec2.ModifyReservedInstancesOutput, error)
|
||||
ModifyReservedInstancesRequest(*ec2.ModifyReservedInstancesInput) (*request.Request, *ec2.ModifyReservedInstancesOutput)
|
||||
|
|
|
@ -4442,7 +4442,7 @@ type CreateLoadBalancerInput struct {
|
|||
|
||||
// The type of IP addresses used by the subnets for your load balancer. The
|
||||
// possible values are ipv4 (for IPv4 addresses) and dualstack (for IPv4 and
|
||||
// IPv6 addresses). Internal load balancers must use ipv4.
|
||||
// IPv6 addresses).
|
||||
IpAddressType *string `type:"string" enum:"IpAddressType"`
|
||||
|
||||
// The name of the load balancer.
|
||||
|
@ -7251,6 +7251,11 @@ type LoadBalancerAttribute struct {
|
|||
// * access_logs.s3.prefix - The prefix for the location in the S3 bucket
|
||||
// for the access logs.
|
||||
//
|
||||
// * ipv6.deny-all-igw-traffic - Blocks internet gateway (IGW) access to
|
||||
// the load balancer. It is set to false for internet-facing load balancers
|
||||
// and true for internal load balancers, preventing unintended access to
|
||||
// your internal load balancer through an internet gateway.
|
||||
//
|
||||
// The following attributes are supported by only Application Load Balancers:
|
||||
//
|
||||
// * idle_timeout.timeout_seconds - The idle timeout value, in seconds. The
|
||||
|
@ -8864,9 +8869,8 @@ type SetIpAddressTypeInput struct {
|
|||
_ struct{} `type:"structure"`
|
||||
|
||||
// The IP address type. The possible values are ipv4 (for IPv4 addresses) and
|
||||
// dualstack (for IPv4 and IPv6 addresses). Internal load balancers must use
|
||||
// ipv4. You can’t specify dualstack for a load balancer with a UDP or TCP_UDP
|
||||
// listener.
|
||||
// dualstack (for IPv4 and IPv6 addresses). You can’t specify dualstack for
|
||||
// a load balancer with a UDP or TCP_UDP listener.
|
||||
//
|
||||
// IpAddressType is a required field
|
||||
IpAddressType *string `type:"string" required:"true" enum:"IpAddressType"`
|
||||
|
@ -9138,8 +9142,7 @@ type SetSubnetsInput struct {
|
|||
// [Network Load Balancers] The type of IP addresses used by the subnets for
|
||||
// your load balancer. The possible values are ipv4 (for IPv4 addresses) and
|
||||
// dualstack (for IPv4 and IPv6 addresses). You can’t specify dualstack for
|
||||
// a load balancer with a UDP or TCP_UDP listener. Internal load balancers must
|
||||
// use ipv4.
|
||||
// a load balancer with a UDP or TCP_UDP listener. .
|
||||
IpAddressType *string `type:"string" enum:"IpAddressType"`
|
||||
|
||||
// The Amazon Resource Name (ARN) of the load balancer.
|
||||
|
|
|
@ -196,6 +196,10 @@ func (c *S3) CompleteMultipartUploadRequest(input *CompleteMultipartUploadInput)
|
|||
// to retry the failed requests. For more information, see Amazon S3 Error Best
|
||||
// Practices (https://docs.aws.amazon.com/AmazonS3/latest/dev/ErrorBestPractices.html).
|
||||
//
|
||||
// You cannot use Content-Type: application/x-www-form-urlencoded with Complete
|
||||
// Multipart Upload requests. Also, if you do not provide a Content-Type header,
|
||||
// CompleteMultipartUpload returns a 200 OK response.
|
||||
//
|
||||
// For more information about multipart uploads, see Uploading Objects Using
|
||||
// Multipart Upload (https://docs.aws.amazon.com/AmazonS3/latest/dev/uploadobjusingmpu.html).
|
||||
//
|
||||
|
@ -4586,8 +4590,9 @@ func (c *S3) GetObjectRequest(input *GetObjectInput) (req *request.Request, outp
|
|||
// By default, the GET action returns the current version of an object. To return
|
||||
// a different version, use the versionId subresource.
|
||||
//
|
||||
// * You need the s3:GetObjectVersion permission to access a specific version
|
||||
// of an object.
|
||||
// * If you supply a versionId, you need the s3:GetObjectVersion permission
|
||||
// to access a specific version of an object. If you request a specific version,
|
||||
// you do not need to have the s3:GetObject permission.
|
||||
//
|
||||
// * If the current version of the object is a delete marker, Amazon S3 behaves
|
||||
// as if the object was deleted and includes x-amz-delete-marker: true in
|
||||
|
@ -12687,6 +12692,9 @@ type CompletedMultipartUpload struct {
|
|||
_ struct{} `type:"structure"`
|
||||
|
||||
// Array of CompletedPart data types.
|
||||
//
|
||||
// If you do not supply a valid Part with your request, the service sends back
|
||||
// an HTTP 400 response.
|
||||
Parts []*CompletedPart `locationName:"Part" type:"list" flattened:"true"`
|
||||
}
|
||||
|
||||
|
@ -24692,6 +24700,12 @@ func (s *LifecycleRule) SetTransitions(v []*Transition) *LifecycleRule {
|
|||
type LifecycleRuleAndOperator struct {
|
||||
_ struct{} `type:"structure"`
|
||||
|
||||
// Minimum object size to which the rule applies.
|
||||
ObjectSizeGreaterThan *int64 `type:"long"`
|
||||
|
||||
// Maximum object size to which the rule applies.
|
||||
ObjectSizeLessThan *int64 `type:"long"`
|
||||
|
||||
// Prefix identifying one or more objects to which the rule applies.
|
||||
Prefix *string `type:"string"`
|
||||
|
||||
|
@ -24738,6 +24752,18 @@ func (s *LifecycleRuleAndOperator) Validate() error {
|
|||
return nil
|
||||
}
|
||||
|
||||
// SetObjectSizeGreaterThan sets the ObjectSizeGreaterThan field's value.
|
||||
func (s *LifecycleRuleAndOperator) SetObjectSizeGreaterThan(v int64) *LifecycleRuleAndOperator {
|
||||
s.ObjectSizeGreaterThan = &v
|
||||
return s
|
||||
}
|
||||
|
||||
// SetObjectSizeLessThan sets the ObjectSizeLessThan field's value.
|
||||
func (s *LifecycleRuleAndOperator) SetObjectSizeLessThan(v int64) *LifecycleRuleAndOperator {
|
||||
s.ObjectSizeLessThan = &v
|
||||
return s
|
||||
}
|
||||
|
||||
// SetPrefix sets the Prefix field's value.
|
||||
func (s *LifecycleRuleAndOperator) SetPrefix(v string) *LifecycleRuleAndOperator {
|
||||
s.Prefix = &v
|
||||
|
@ -24760,6 +24786,12 @@ type LifecycleRuleFilter struct {
|
|||
// of the predicates configured inside the And operator.
|
||||
And *LifecycleRuleAndOperator `type:"structure"`
|
||||
|
||||
// Minimum object size to which the rule applies.
|
||||
ObjectSizeGreaterThan *int64 `type:"long"`
|
||||
|
||||
// Maximum object size to which the rule applies.
|
||||
ObjectSizeLessThan *int64 `type:"long"`
|
||||
|
||||
// Prefix identifying one or more objects to which the rule applies.
|
||||
//
|
||||
// Replacement must be made for object keys containing special characters (such
|
||||
|
@ -24815,6 +24847,18 @@ func (s *LifecycleRuleFilter) SetAnd(v *LifecycleRuleAndOperator) *LifecycleRule
|
|||
return s
|
||||
}
|
||||
|
||||
// SetObjectSizeGreaterThan sets the ObjectSizeGreaterThan field's value.
|
||||
func (s *LifecycleRuleFilter) SetObjectSizeGreaterThan(v int64) *LifecycleRuleFilter {
|
||||
s.ObjectSizeGreaterThan = &v
|
||||
return s
|
||||
}
|
||||
|
||||
// SetObjectSizeLessThan sets the ObjectSizeLessThan field's value.
|
||||
func (s *LifecycleRuleFilter) SetObjectSizeLessThan(v int64) *LifecycleRuleFilter {
|
||||
s.ObjectSizeLessThan = &v
|
||||
return s
|
||||
}
|
||||
|
||||
// SetPrefix sets the Prefix field's value.
|
||||
func (s *LifecycleRuleFilter) SetPrefix(v string) *LifecycleRuleFilter {
|
||||
s.Prefix = &v
|
||||
|
@ -27890,6 +27934,13 @@ func (s *MultipartUpload) SetUploadId(v string) *MultipartUpload {
|
|||
type NoncurrentVersionExpiration struct {
|
||||
_ struct{} `type:"structure"`
|
||||
|
||||
// Specifies how many noncurrent versions Amazon S3 will retain. If there are
|
||||
// this many more recent noncurrent versions, Amazon S3 will take the associated
|
||||
// action. For more information about noncurrent versions, see Lifecycle configuration
|
||||
// elements (https://docs.aws.amazon.com/AmazonS3/latest/userguide/intro-lifecycle-rules.html)
|
||||
// in the Amazon S3 User Guide.
|
||||
NewerNoncurrentVersions *int64 `type:"integer"`
|
||||
|
||||
// Specifies the number of days an object is noncurrent before Amazon S3 can
|
||||
// perform the associated action. For information about the noncurrent days
|
||||
// calculations, see How Amazon S3 Calculates When an Object Became Noncurrent
|
||||
|
@ -27916,6 +27967,12 @@ func (s NoncurrentVersionExpiration) GoString() string {
|
|||
return s.String()
|
||||
}
|
||||
|
||||
// SetNewerNoncurrentVersions sets the NewerNoncurrentVersions field's value.
|
||||
func (s *NoncurrentVersionExpiration) SetNewerNoncurrentVersions(v int64) *NoncurrentVersionExpiration {
|
||||
s.NewerNoncurrentVersions = &v
|
||||
return s
|
||||
}
|
||||
|
||||
// SetNoncurrentDays sets the NoncurrentDays field's value.
|
||||
func (s *NoncurrentVersionExpiration) SetNoncurrentDays(v int64) *NoncurrentVersionExpiration {
|
||||
s.NoncurrentDays = &v
|
||||
|
@ -27932,6 +27989,13 @@ func (s *NoncurrentVersionExpiration) SetNoncurrentDays(v int64) *NoncurrentVers
|
|||
type NoncurrentVersionTransition struct {
|
||||
_ struct{} `type:"structure"`
|
||||
|
||||
// Specifies how many noncurrent versions Amazon S3 will retain. If there are
|
||||
// this many more recent noncurrent versions, Amazon S3 will take the associated
|
||||
// action. For more information about noncurrent versions, see Lifecycle configuration
|
||||
// elements (https://docs.aws.amazon.com/AmazonS3/latest/userguide/intro-lifecycle-rules.html)
|
||||
// in the Amazon S3 User Guide.
|
||||
NewerNoncurrentVersions *int64 `type:"integer"`
|
||||
|
||||
// Specifies the number of days an object is noncurrent before Amazon S3 can
|
||||
// perform the associated action. For information about the noncurrent days
|
||||
// calculations, see How Amazon S3 Calculates How Long an Object Has Been Noncurrent
|
||||
|
@ -27961,6 +28025,12 @@ func (s NoncurrentVersionTransition) GoString() string {
|
|||
return s.String()
|
||||
}
|
||||
|
||||
// SetNewerNoncurrentVersions sets the NewerNoncurrentVersions field's value.
|
||||
func (s *NoncurrentVersionTransition) SetNewerNoncurrentVersions(v int64) *NoncurrentVersionTransition {
|
||||
s.NewerNoncurrentVersions = &v
|
||||
return s
|
||||
}
|
||||
|
||||
// SetNoncurrentDays sets the NoncurrentDays field's value.
|
||||
func (s *NoncurrentVersionTransition) SetNoncurrentDays(v int64) *NoncurrentVersionTransition {
|
||||
s.NoncurrentDays = &v
|
||||
|
|
|
@ -2129,9 +2129,10 @@ func (c *SQS) UntagQueueWithContext(ctx aws.Context, input *UntagQueueInput, opt
|
|||
type AddPermissionInput struct {
|
||||
_ struct{} `type:"structure"`
|
||||
|
||||
// The account numbers of the principals (https://docs.aws.amazon.com/general/latest/gr/glos-chap.html#P)
|
||||
// who are to receive permission. For information about locating the account
|
||||
// identification, see Your Amazon Web Services Identifiers (https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-making-api-requests.html#sqs-api-request-authentication)
|
||||
// The Amazon Web Services account numbers of the principals (https://docs.aws.amazon.com/general/latest/gr/glos-chap.html#P)
|
||||
// who are to receive permission. For information about locating the Amazon
|
||||
// Web Services account identification, see Your Amazon Web Services Identifiers
|
||||
// (https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-making-api-requests.html#sqs-api-request-authentication)
|
||||
// in the Amazon SQS Developer Guide.
|
||||
//
|
||||
// AWSAccountIds is a required field
|
||||
|
@ -2687,43 +2688,26 @@ type CreateQueueInput struct {
|
|||
// which a ReceiveMessage action waits for a message to arrive. Valid values:
|
||||
// An integer from 0 to 20 (seconds). Default: 0.
|
||||
//
|
||||
// * RedrivePolicy – The string that includes the parameters for the dead-letter
|
||||
// queue functionality of the source queue as a JSON object. For more information
|
||||
// about the redrive policy and dead-letter queues, see Using Amazon SQS
|
||||
// Dead-Letter Queues (https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-dead-letter-queues.html)
|
||||
// in the Amazon SQS Developer Guide. deadLetterTargetArn – The Amazon
|
||||
// Resource Name (ARN) of the dead-letter queue to which Amazon SQS moves
|
||||
// messages after the value of maxReceiveCount is exceeded. maxReceiveCount
|
||||
// – The number of times a message is delivered to the source queue before
|
||||
// being moved to the dead-letter queue. When the ReceiveCount for a message
|
||||
// exceeds the maxReceiveCount for a queue, Amazon SQS moves the message
|
||||
// to the dead-letter-queue. The dead-letter queue of a FIFO queue must also
|
||||
// be a FIFO queue. Similarly, the dead-letter queue of a standard queue
|
||||
// must also be a standard queue.
|
||||
//
|
||||
// * VisibilityTimeout – The visibility timeout for the queue, in seconds.
|
||||
// Valid values: An integer from 0 to 43,200 (12 hours). Default: 30. For
|
||||
// more information about the visibility timeout, see Visibility Timeout
|
||||
// (https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-visibility-timeout.html)
|
||||
// in the Amazon SQS Developer Guide.
|
||||
//
|
||||
// The following attributes apply only to dead-letter queues: (https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-dead-letter-queues.html)
|
||||
//
|
||||
// * RedrivePolicy – The string that includes the parameters for the dead-letter
|
||||
// queue functionality of the source queue as a JSON object. The parameters
|
||||
// are as follows: deadLetterTargetArn – The Amazon Resource Name (ARN)
|
||||
// of the dead-letter queue to which Amazon SQS moves messages after the
|
||||
// value of maxReceiveCount is exceeded. maxReceiveCount – The number of
|
||||
// times a message is delivered to the source queue before being moved to
|
||||
// the dead-letter queue. When the ReceiveCount for a message exceeds the
|
||||
// maxReceiveCount for a queue, Amazon SQS moves the message to the dead-letter-queue.
|
||||
//
|
||||
// * RedriveAllowPolicy – The string that includes the parameters for the
|
||||
// permissions for the dead-letter queue redrive permission and which source
|
||||
// queues can specify dead-letter queues as a JSON object. The parameters
|
||||
// are as follows: redrivePermission – The permission type that defines
|
||||
// which source queues can specify the current queue as the dead-letter queue.
|
||||
// Valid values are: allowAll – (Default) Any source queues in this Amazon
|
||||
// Web Services account in the same Region can specify this queue as the
|
||||
// dead-letter queue. denyAll – No source queues can specify this queue
|
||||
// as the dead-letter queue. byQueue – Only queues specified by the sourceQueueArns
|
||||
// parameter can specify this queue as the dead-letter queue. sourceQueueArns
|
||||
// – The Amazon Resource Names (ARN)s of the source queues that can specify
|
||||
// this queue as the dead-letter queue and redrive messages. You can specify
|
||||
// this parameter only when the redrivePermission parameter is set to byQueue.
|
||||
// You can specify up to 10 source queue ARNs. To allow more than 10 source
|
||||
// queues to specify dead-letter queues, set the redrivePermission parameter
|
||||
// to allowAll.
|
||||
//
|
||||
// The dead-letter queue of a FIFO queue must also be a FIFO queue. Similarly,
|
||||
// the dead-letter queue of a standard queue must also be a standard queue.
|
||||
//
|
||||
// The following attributes apply only to server-side-encryption (https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-server-side-encryption.html):
|
||||
//
|
||||
// * KmsMasterKeyId – The ID of an Amazon Web Services managed customer
|
||||
|
@ -2743,6 +2727,11 @@ type CreateQueueInput struct {
|
|||
// Tier. For more information, see How Does the Data Key Reuse Period Work?
|
||||
// (https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-server-side-encryption.html#sqs-how-does-the-data-key-reuse-period-work).
|
||||
//
|
||||
// * SqsManagedSseEnabled – Enables server-side queue encryption using
|
||||
// SQS owned encryption keys. Only one server-side encryption option is supported
|
||||
// per queue (e.g. SSE-KMS (https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-configure-sse-existing-queue.html)
|
||||
// or SSE-SQS (https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-configure-sqs-sse-queue.html)).
|
||||
//
|
||||
// The following attributes apply only to FIFO (first-in-first-out) queues (https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/FIFO-queues.html):
|
||||
//
|
||||
// * FifoQueue – Designates a queue as FIFO. Valid values are true and
|
||||
|
@ -3349,42 +3338,23 @@ type GetQueueAttributesInput struct {
|
|||
// * ReceiveMessageWaitTimeSeconds – Returns the length of time, in seconds,
|
||||
// for which the ReceiveMessage action waits for a message to arrive.
|
||||
//
|
||||
// * RedrivePolicy – The string that includes the parameters for the dead-letter
|
||||
// queue functionality of the source queue as a JSON object. For more information
|
||||
// about the redrive policy and dead-letter queues, see Using Amazon SQS
|
||||
// Dead-Letter Queues (https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-dead-letter-queues.html)
|
||||
// in the Amazon SQS Developer Guide. deadLetterTargetArn – The Amazon
|
||||
// Resource Name (ARN) of the dead-letter queue to which Amazon SQS moves
|
||||
// messages after the value of maxReceiveCount is exceeded. maxReceiveCount
|
||||
// – The number of times a message is delivered to the source queue before
|
||||
// being moved to the dead-letter queue. When the ReceiveCount for a message
|
||||
// exceeds the maxReceiveCount for a queue, Amazon SQS moves the message
|
||||
// to the dead-letter-queue.
|
||||
//
|
||||
// * VisibilityTimeout – Returns the visibility timeout for the queue.
|
||||
// For more information about the visibility timeout, see Visibility Timeout
|
||||
// (https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-visibility-timeout.html)
|
||||
// in the Amazon SQS Developer Guide.
|
||||
//
|
||||
// The following attributes apply only to dead-letter queues: (https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-dead-letter-queues.html)
|
||||
//
|
||||
// * RedrivePolicy – The string that includes the parameters for the dead-letter
|
||||
// queue functionality of the source queue as a JSON object. The parameters
|
||||
// are as follows: deadLetterTargetArn – The Amazon Resource Name (ARN)
|
||||
// of the dead-letter queue to which Amazon SQS moves messages after the
|
||||
// value of maxReceiveCount is exceeded. maxReceiveCount – The number of
|
||||
// times a message is delivered to the source queue before being moved to
|
||||
// the dead-letter queue. When the ReceiveCount for a message exceeds the
|
||||
// maxReceiveCount for a queue, Amazon SQS moves the message to the dead-letter-queue.
|
||||
//
|
||||
// * RedriveAllowPolicy – The string that includes the parameters for the
|
||||
// permissions for the dead-letter queue redrive permission and which source
|
||||
// queues can specify dead-letter queues as a JSON object. The parameters
|
||||
// are as follows: redrivePermission – The permission type that defines
|
||||
// which source queues can specify the current queue as the dead-letter queue.
|
||||
// Valid values are: allowAll – (Default) Any source queues in this Amazon
|
||||
// Web Services account in the same Region can specify this queue as the
|
||||
// dead-letter queue. denyAll – No source queues can specify this queue
|
||||
// as the dead-letter queue. byQueue – Only queues specified by the sourceQueueArns
|
||||
// parameter can specify this queue as the dead-letter queue. sourceQueueArns
|
||||
// – The Amazon Resource Names (ARN)s of the source queues that can specify
|
||||
// this queue as the dead-letter queue and redrive messages. You can specify
|
||||
// this parameter only when the redrivePermission parameter is set to byQueue.
|
||||
// You can specify up to 10 source queue ARNs. To allow more than 10 source
|
||||
// queues to specify dead-letter queues, set the redrivePermission parameter
|
||||
// to allowAll.
|
||||
//
|
||||
// The dead-letter queue of a FIFO queue must also be a FIFO queue. Similarly,
|
||||
// the dead-letter queue of a standard queue must also be a standard queue.
|
||||
//
|
||||
// The following attributes apply only to server-side-encryption (https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-server-side-encryption.html):
|
||||
//
|
||||
// * KmsMasterKeyId – Returns the ID of an Amazon Web Services managed
|
||||
|
@ -3396,6 +3366,11 @@ type GetQueueAttributesInput struct {
|
|||
// before calling KMS again. For more information, see How Does the Data
|
||||
// Key Reuse Period Work? (https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-server-side-encryption.html#sqs-how-does-the-data-key-reuse-period-work).
|
||||
//
|
||||
// * SqsManagedSseEnabled – Returns information about whether the queue
|
||||
// is using SSE-SQS encryption using SQS owned encryption keys. Only one
|
||||
// server-side encryption option is supported per queue (e.g. SSE-KMS (https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-configure-sse-existing-queue.html)
|
||||
// or SSE-SQS (https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-configure-sqs-sse-queue.html)).
|
||||
//
|
||||
// The following attributes apply only to FIFO (first-in-first-out) queues (https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/FIFO-queues.html):
|
||||
//
|
||||
// * FifoQueue – Returns information about whether the queue is FIFO. For
|
||||
|
@ -3528,7 +3503,7 @@ type GetQueueUrlInput struct {
|
|||
// QueueName is a required field
|
||||
QueueName *string `type:"string" required:"true"`
|
||||
|
||||
// The account ID of the account that created the queue.
|
||||
// The Amazon Web Services account ID of the account that created the queue.
|
||||
QueueOwnerAWSAccountId *string `type:"string"`
|
||||
}
|
||||
|
||||
|
@ -3939,7 +3914,7 @@ type Message struct {
|
|||
MessageAttributes map[string]*MessageAttributeValue `locationName:"MessageAttribute" locationNameKey:"Name" locationNameValue:"Value" type:"map" flattened:"true"`
|
||||
|
||||
// A unique identifier for the message. A MessageIdis considered unique across
|
||||
// all accounts for an extended period of time.
|
||||
// all Amazon Web Services accounts for an extended period of time.
|
||||
MessageId *string `type:"string"`
|
||||
|
||||
// An identifier associated with the act of receiving the message. A new receipt
|
||||
|
@ -4293,6 +4268,11 @@ type ReceiveMessageInput struct {
|
|||
// * SentTimestamp – Returns the time the message was sent to the queue
|
||||
// (epoch time (http://en.wikipedia.org/wiki/Unix_time) in milliseconds).
|
||||
//
|
||||
// * SqsManagedSseEnabled – Enables server-side queue encryption using
|
||||
// SQS owned encryption keys. Only one server-side encryption option is supported
|
||||
// per queue (e.g. SSE-KMS (https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-configure-sse-existing-queue.html)
|
||||
// or SSE-SQS (https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-configure-sqs-sse-queue.html)).
|
||||
//
|
||||
// * MessageDeduplicationId – Returns the value provided by the producer
|
||||
// that calls the SendMessage action.
|
||||
//
|
||||
|
@ -5357,43 +5337,26 @@ type SetQueueAttributesInput struct {
|
|||
// which a ReceiveMessage action waits for a message to arrive. Valid values:
|
||||
// An integer from 0 to 20 (seconds). Default: 0.
|
||||
//
|
||||
// * RedrivePolicy – The string that includes the parameters for the dead-letter
|
||||
// queue functionality of the source queue as a JSON object. For more information
|
||||
// about the redrive policy and dead-letter queues, see Using Amazon SQS
|
||||
// Dead-Letter Queues (https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-dead-letter-queues.html)
|
||||
// in the Amazon SQS Developer Guide. deadLetterTargetArn – The Amazon
|
||||
// Resource Name (ARN) of the dead-letter queue to which Amazon SQS moves
|
||||
// messages after the value of maxReceiveCount is exceeded. maxReceiveCount
|
||||
// – The number of times a message is delivered to the source queue before
|
||||
// being moved to the dead-letter queue. When the ReceiveCount for a message
|
||||
// exceeds the maxReceiveCount for a queue, Amazon SQS moves the message
|
||||
// to the dead-letter-queue. The dead-letter queue of a FIFO queue must also
|
||||
// be a FIFO queue. Similarly, the dead-letter queue of a standard queue
|
||||
// must also be a standard queue.
|
||||
//
|
||||
// * VisibilityTimeout – The visibility timeout for the queue, in seconds.
|
||||
// Valid values: An integer from 0 to 43,200 (12 hours). Default: 30. For
|
||||
// more information about the visibility timeout, see Visibility Timeout
|
||||
// (https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-visibility-timeout.html)
|
||||
// in the Amazon SQS Developer Guide.
|
||||
//
|
||||
// The following attributes apply only to dead-letter queues: (https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-dead-letter-queues.html)
|
||||
//
|
||||
// * RedrivePolicy – The string that includes the parameters for the dead-letter
|
||||
// queue functionality of the source queue as a JSON object. The parameters
|
||||
// are as follows: deadLetterTargetArn – The Amazon Resource Name (ARN)
|
||||
// of the dead-letter queue to which Amazon SQS moves messages after the
|
||||
// value of maxReceiveCount is exceeded. maxReceiveCount – The number of
|
||||
// times a message is delivered to the source queue before being moved to
|
||||
// the dead-letter queue. When the ReceiveCount for a message exceeds the
|
||||
// maxReceiveCount for a queue, Amazon SQS moves the message to the dead-letter-queue.
|
||||
//
|
||||
// * RedriveAllowPolicy – The string that includes the parameters for the
|
||||
// permissions for the dead-letter queue redrive permission and which source
|
||||
// queues can specify dead-letter queues as a JSON object. The parameters
|
||||
// are as follows: redrivePermission – The permission type that defines
|
||||
// which source queues can specify the current queue as the dead-letter queue.
|
||||
// Valid values are: allowAll – (Default) Any source queues in this Amazon
|
||||
// Web Services account in the same Region can specify this queue as the
|
||||
// dead-letter queue. denyAll – No source queues can specify this queue
|
||||
// as the dead-letter queue. byQueue – Only queues specified by the sourceQueueArns
|
||||
// parameter can specify this queue as the dead-letter queue. sourceQueueArns
|
||||
// – The Amazon Resource Names (ARN)s of the source queues that can specify
|
||||
// this queue as the dead-letter queue and redrive messages. You can specify
|
||||
// this parameter only when the redrivePermission parameter is set to byQueue.
|
||||
// You can specify up to 10 source queue ARNs. To allow more than 10 source
|
||||
// queues to specify dead-letter queues, set the redrivePermission parameter
|
||||
// to allowAll.
|
||||
//
|
||||
// The dead-letter queue of a FIFO queue must also be a FIFO queue. Similarly,
|
||||
// the dead-letter queue of a standard queue must also be a standard queue.
|
||||
//
|
||||
// The following attributes apply only to server-side-encryption (https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-server-side-encryption.html):
|
||||
//
|
||||
// * KmsMasterKeyId – The ID of an Amazon Web Services managed customer
|
||||
|
@ -5413,6 +5376,11 @@ type SetQueueAttributesInput struct {
|
|||
// Tier. For more information, see How Does the Data Key Reuse Period Work?
|
||||
// (https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-server-side-encryption.html#sqs-how-does-the-data-key-reuse-period-work).
|
||||
//
|
||||
// * SqsManagedSseEnabled – Enables server-side queue encryption using
|
||||
// SQS owned encryption keys. Only one server-side encryption option is supported
|
||||
// per queue (e.g. SSE-KMS (https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-configure-sse-existing-queue.html)
|
||||
// or SSE-SQS (https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-configure-sqs-sse-queue.html)).
|
||||
//
|
||||
// The following attribute applies only to FIFO (first-in-first-out) queues
|
||||
// (https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/FIFO-queues.html):
|
||||
//
|
||||
|
@ -5816,6 +5784,9 @@ const (
|
|||
|
||||
// QueueAttributeNameRedriveAllowPolicy is a QueueAttributeName enum value
|
||||
QueueAttributeNameRedriveAllowPolicy = "RedriveAllowPolicy"
|
||||
|
||||
// QueueAttributeNameSqsManagedSseEnabled is a QueueAttributeName enum value
|
||||
QueueAttributeNameSqsManagedSseEnabled = "SqsManagedSseEnabled"
|
||||
)
|
||||
|
||||
// QueueAttributeName_Values returns all elements of the QueueAttributeName enum
|
||||
|
@ -5842,5 +5813,6 @@ func QueueAttributeName_Values() []string {
|
|||
QueueAttributeNameDeduplicationScope,
|
||||
QueueAttributeNameFifoThroughputLimit,
|
||||
QueueAttributeNameRedriveAllowPolicy,
|
||||
QueueAttributeNameSqsManagedSseEnabled,
|
||||
}
|
||||
}
|
||||
|
|
|
@ -63,14 +63,15 @@ func (c *STS) AssumeRoleRequest(input *AssumeRoleInput) (req *request.Request, o
|
|||
// or for cross-account access. For a comparison of AssumeRole with other API
|
||||
// operations that produce temporary credentials, see Requesting Temporary Security
|
||||
// Credentials (https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html)
|
||||
// and Comparing the STS API operations (https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html#stsapi_comparison)
|
||||
// and Comparing the Amazon Web Services STS API operations (https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html#stsapi_comparison)
|
||||
// in the IAM User Guide.
|
||||
//
|
||||
// Permissions
|
||||
//
|
||||
// The temporary security credentials created by AssumeRole can be used to make
|
||||
// API calls to any Amazon Web Services service with the following exception:
|
||||
// You cannot call the STS GetFederationToken or GetSessionToken API operations.
|
||||
// You cannot call the Amazon Web Services STS GetFederationToken or GetSessionToken
|
||||
// API operations.
|
||||
//
|
||||
// (Optional) You can pass inline or managed session policies (https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html#policies_session)
|
||||
// to this operation. You can pass a single JSON policy document to use as an
|
||||
|
@ -86,26 +87,33 @@ func (c *STS) AssumeRoleRequest(input *AssumeRoleInput) (req *request.Request, o
|
|||
// For more information, see Session Policies (https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html#policies_session)
|
||||
// in the IAM User Guide.
|
||||
//
|
||||
// To assume a role from a different account, your account must be trusted by
|
||||
// the role. The trust relationship is defined in the role's trust policy when
|
||||
// the role is created. That trust policy states which accounts are allowed
|
||||
// to delegate that access to users in the account.
|
||||
// When you create a role, you create two policies: A role trust policy that
|
||||
// specifies who can assume the role and a permissions policy that specifies
|
||||
// what can be done with the role. You specify the trusted principal who is
|
||||
// allowed to assume the role in the role trust policy.
|
||||
//
|
||||
// To assume a role from a different account, your Amazon Web Services account
|
||||
// must be trusted by the role. The trust relationship is defined in the role's
|
||||
// trust policy when the role is created. That trust policy states which accounts
|
||||
// are allowed to delegate that access to users in the account.
|
||||
//
|
||||
// A user who wants to access a role in a different account must also have permissions
|
||||
// that are delegated from the user account administrator. The administrator
|
||||
// must attach a policy that allows the user to call AssumeRole for the ARN
|
||||
// of the role in the other account. If the user is in the same account as the
|
||||
// role, then you can do either of the following:
|
||||
// of the role in the other account.
|
||||
//
|
||||
// * Attach a policy to the user (identical to the previous user in a different
|
||||
// account).
|
||||
// To allow a user to assume a role in the same account, you can do either of
|
||||
// the following:
|
||||
//
|
||||
// * Attach a policy to the user that allows the user to call AssumeRole
|
||||
// (as long as the role's trust policy trusts the account).
|
||||
//
|
||||
// * Add the user as a principal directly in the role's trust policy.
|
||||
//
|
||||
// In this case, the trust policy acts as an IAM resource-based policy. Users
|
||||
// in the same account as the role do not need explicit permission to assume
|
||||
// the role. For more information about trust policies and resource-based policies,
|
||||
// see IAM Policies (https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html)
|
||||
// You can do either because the role’s trust policy acts as an IAM resource-based
|
||||
// policy. When a resource-based policy grants access to a principal in the
|
||||
// same account, no additional identity-based policy is required. For more information
|
||||
// about trust policies and resource-based policies, see IAM Policies (https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html)
|
||||
// in the IAM User Guide.
|
||||
//
|
||||
// Tags
|
||||
|
@ -170,7 +178,7 @@ func (c *STS) AssumeRoleRequest(input *AssumeRoleInput) (req *request.Request, o
|
|||
//
|
||||
// You could receive this error even though you meet other defined session policy
|
||||
// and session tag limits. For more information, see IAM and STS Entity Character
|
||||
// Limits (https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_enable-regions.html)
|
||||
// Limits (https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html#reference_iam-limits-entity-length)
|
||||
// in the IAM User Guide.
|
||||
//
|
||||
// * ErrCodeRegionDisabledException "RegionDisabledException"
|
||||
|
@ -258,7 +266,7 @@ func (c *STS) AssumeRoleWithSAMLRequest(input *AssumeRoleWithSAMLInput) (req *re
|
|||
// Services access without user-specific credentials or configuration. For a
|
||||
// comparison of AssumeRoleWithSAML with the other API operations that produce
|
||||
// temporary credentials, see Requesting Temporary Security Credentials (https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html)
|
||||
// and Comparing the STS API operations (https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html#stsapi_comparison)
|
||||
// and Comparing the Amazon Web Services STS API operations (https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html#stsapi_comparison)
|
||||
// in the IAM User Guide.
|
||||
//
|
||||
// The temporary security credentials returned by this operation consist of
|
||||
|
@ -403,7 +411,7 @@ func (c *STS) AssumeRoleWithSAMLRequest(input *AssumeRoleWithSAMLInput) (req *re
|
|||
//
|
||||
// You could receive this error even though you meet other defined session policy
|
||||
// and session tag limits. For more information, see IAM and STS Entity Character
|
||||
// Limits (https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_enable-regions.html)
|
||||
// Limits (https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html#reference_iam-limits-entity-length)
|
||||
// in the IAM User Guide.
|
||||
//
|
||||
// * ErrCodeIDPRejectedClaimException "IDPRejectedClaim"
|
||||
|
@ -523,7 +531,7 @@ func (c *STS) AssumeRoleWithWebIdentityRequest(input *AssumeRoleWithWebIdentityI
|
|||
// by using a token from the web identity provider. For a comparison of AssumeRoleWithWebIdentity
|
||||
// with the other API operations that produce temporary credentials, see Requesting
|
||||
// Temporary Security Credentials (https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html)
|
||||
// and Comparing the STS API operations (https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html#stsapi_comparison)
|
||||
// and Comparing the Amazon Web Services STS API operations (https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html#stsapi_comparison)
|
||||
// in the IAM User Guide.
|
||||
//
|
||||
// The temporary security credentials returned by this API consist of an access
|
||||
|
@ -661,7 +669,7 @@ func (c *STS) AssumeRoleWithWebIdentityRequest(input *AssumeRoleWithWebIdentityI
|
|||
//
|
||||
// You could receive this error even though you meet other defined session policy
|
||||
// and session tag limits. For more information, see IAM and STS Entity Character
|
||||
// Limits (https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_enable-regions.html)
|
||||
// Limits (https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html#reference_iam-limits-entity-length)
|
||||
// in the IAM User Guide.
|
||||
//
|
||||
// * ErrCodeIDPRejectedClaimException "IDPRejectedClaim"
|
||||
|
@ -776,10 +784,11 @@ func (c *STS) DecodeAuthorizationMessageRequest(input *DecodeAuthorizationMessag
|
|||
// code.
|
||||
//
|
||||
// The message is encoded because the details of the authorization status can
|
||||
// constitute privileged information that the user who requested the operation
|
||||
// contain privileged information that the user who requested the operation
|
||||
// should not see. To decode an authorization status message, a user must be
|
||||
// granted permissions via an IAM policy to request the DecodeAuthorizationMessage
|
||||
// (sts:DecodeAuthorizationMessage) action.
|
||||
// granted permissions through an IAM policy (https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html)
|
||||
// to request the DecodeAuthorizationMessage (sts:DecodeAuthorizationMessage)
|
||||
// action.
|
||||
//
|
||||
// The decoded message includes the following type of information:
|
||||
//
|
||||
|
@ -1065,7 +1074,7 @@ func (c *STS) GetFederationTokenRequest(input *GetFederationTokenInput) (req *re
|
|||
// For a comparison of GetFederationToken with the other API operations that
|
||||
// produce temporary credentials, see Requesting Temporary Security Credentials
|
||||
// (https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html)
|
||||
// and Comparing the STS API operations (https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html#stsapi_comparison)
|
||||
// and Comparing the Amazon Web Services STS API operations (https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html#stsapi_comparison)
|
||||
// in the IAM User Guide.
|
||||
//
|
||||
// You can create a mobile-based or browser-based app that can authenticate
|
||||
|
@ -1088,9 +1097,9 @@ func (c *STS) GetFederationTokenRequest(input *GetFederationTokenInput) (req *re
|
|||
//
|
||||
// The temporary credentials are valid for the specified duration, from 900
|
||||
// seconds (15 minutes) up to a maximum of 129,600 seconds (36 hours). The default
|
||||
// session duration is 43,200 seconds (12 hours). Temporary credentials that
|
||||
// are obtained by using Amazon Web Services account root user credentials have
|
||||
// a maximum duration of 3,600 seconds (1 hour).
|
||||
// session duration is 43,200 seconds (12 hours). Temporary credentials obtained
|
||||
// by using the Amazon Web Services account root user credentials have a maximum
|
||||
// duration of 3,600 seconds (1 hour).
|
||||
//
|
||||
// Permissions
|
||||
//
|
||||
|
@ -1141,63 +1150,6 @@ func (c *STS) GetFederationTokenRequest(input *GetFederationTokenInput) (req *re
|
|||
// (https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html#api_assumerolewithwebidentity)
|
||||
// in the IAM User Guide.
|
||||
//
|
||||
// You can also call GetFederationToken using the security credentials of an
|
||||
// Amazon Web Services account root user, but we do not recommend it. Instead,
|
||||
// we recommend that you create an IAM user for the purpose of the proxy application.
|
||||
// Then attach a policy to the IAM user that limits federated users to only
|
||||
// the actions and resources that they need to access. For more information,
|
||||
// see IAM Best Practices (https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html)
|
||||
// in the IAM User Guide.
|
||||
//
|
||||
// Session duration
|
||||
//
|
||||
// The temporary credentials are valid for the specified duration, from 900
|
||||
// seconds (15 minutes) up to a maximum of 129,600 seconds (36 hours). The default
|
||||
// session duration is 43,200 seconds (12 hours). Temporary credentials that
|
||||
// are obtained by using Amazon Web Services account root user credentials have
|
||||
// a maximum duration of 3,600 seconds (1 hour).
|
||||
//
|
||||
// Permissions
|
||||
//
|
||||
// You can use the temporary credentials created by GetFederationToken in any
|
||||
// Amazon Web Services service except the following:
|
||||
//
|
||||
// * You cannot call any IAM operations using the CLI or the Amazon Web Services
|
||||
// API.
|
||||
//
|
||||
// * You cannot call any STS operations except GetCallerIdentity.
|
||||
//
|
||||
// You must pass an inline or managed session policy (https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html#policies_session)
|
||||
// to this operation. You can pass a single JSON policy document to use as an
|
||||
// inline session policy. You can also specify up to 10 managed policies to
|
||||
// use as managed session policies. The plain text that you use for both inline
|
||||
// and managed session policies can't exceed 2,048 characters.
|
||||
//
|
||||
// Though the session policy parameters are optional, if you do not pass a policy,
|
||||
// then the resulting federated user session has no permissions. When you pass
|
||||
// session policies, the session permissions are the intersection of the IAM
|
||||
// user policies and the session policies that you pass. This gives you a way
|
||||
// to further restrict the permissions for a federated user. You cannot use
|
||||
// session policies to grant more permissions than those that are defined in
|
||||
// the permissions policy of the IAM user. For more information, see Session
|
||||
// Policies (https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html#policies_session)
|
||||
// in the IAM User Guide. For information about using GetFederationToken to
|
||||
// create temporary security credentials, see GetFederationToken—Federation
|
||||
// Through a Custom Identity Broker (https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html#api_getfederationtoken).
|
||||
//
|
||||
// You can use the credentials to access a resource that has a resource-based
|
||||
// policy. If that policy specifically references the federated user session
|
||||
// in the Principal element of the policy, the session has the permissions allowed
|
||||
// by the policy. These permissions are granted in addition to the permissions
|
||||
// granted by the session policies.
|
||||
//
|
||||
// Tags
|
||||
//
|
||||
// (Optional) You can pass tag key-value pairs to your session. These are called
|
||||
// session tags. For more information about session tags, see Passing Session
|
||||
// Tags in STS (https://docs.aws.amazon.com/IAM/latest/UserGuide/id_session-tags.html)
|
||||
// in the IAM User Guide.
|
||||
//
|
||||
// An administrator must grant you the permissions necessary to pass session
|
||||
// tags. The administrator can also create granular permissions to allow you
|
||||
// to pass only specific session tags. For more information, see Tutorial: Using
|
||||
|
@ -1234,7 +1186,7 @@ func (c *STS) GetFederationTokenRequest(input *GetFederationTokenInput) (req *re
|
|||
//
|
||||
// You could receive this error even though you meet other defined session policy
|
||||
// and session tag limits. For more information, see IAM and STS Entity Character
|
||||
// Limits (https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_enable-regions.html)
|
||||
// Limits (https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html#reference_iam-limits-entity-length)
|
||||
// in the IAM User Guide.
|
||||
//
|
||||
// * ErrCodeRegionDisabledException "RegionDisabledException"
|
||||
|
@ -1323,7 +1275,7 @@ func (c *STS) GetSessionTokenRequest(input *GetSessionTokenInput) (req *request.
|
|||
// then the API returns an access denied error. For a comparison of GetSessionToken
|
||||
// with the other API operations that produce temporary credentials, see Requesting
|
||||
// Temporary Security Credentials (https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html)
|
||||
// and Comparing the STS API operations (https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html#stsapi_comparison)
|
||||
// and Comparing the Amazon Web Services STS API operations (https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_request.html#stsapi_comparison)
|
||||
// in the IAM User Guide.
|
||||
//
|
||||
// Session Duration
|
||||
|
@ -1404,15 +1356,23 @@ func (c *STS) GetSessionTokenWithContext(ctx aws.Context, input *GetSessionToken
|
|||
type AssumeRoleInput struct {
|
||||
_ struct{} `type:"structure"`
|
||||
|
||||
// The duration, in seconds, of the role session. The value specified can can
|
||||
// range from 900 seconds (15 minutes) up to the maximum session duration that
|
||||
// is set for the role. The maximum session duration setting can have a value
|
||||
// from 1 hour to 12 hours. If you specify a value higher than this setting
|
||||
// or the administrator setting (whichever is lower), the operation fails. For
|
||||
// example, if you specify a session duration of 12 hours, but your administrator
|
||||
// set the maximum session duration to 6 hours, your operation fails. To learn
|
||||
// how to view the maximum value for your role, see View the Maximum Session
|
||||
// Duration Setting for a Role (https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use.html#id_roles_use_view-role-max-session)
|
||||
// The duration, in seconds, of the role session. The value specified can range
|
||||
// from 900 seconds (15 minutes) up to the maximum session duration set for
|
||||
// the role. The maximum session duration setting can have a value from 1 hour
|
||||
// to 12 hours. If you specify a value higher than this setting or the administrator
|
||||
// setting (whichever is lower), the operation fails. For example, if you specify
|
||||
// a session duration of 12 hours, but your administrator set the maximum session
|
||||
// duration to 6 hours, your operation fails.
|
||||
//
|
||||
// Role chaining limits your Amazon Web Services CLI or Amazon Web Services
|
||||
// API role session to a maximum of one hour. When you use the AssumeRole API
|
||||
// operation to assume a role, you can specify the duration of your role session
|
||||
// with the DurationSeconds parameter. You can specify a parameter value of
|
||||
// up to 43200 seconds (12 hours), depending on the maximum session duration
|
||||
// setting for your role. However, if you assume a role using role chaining
|
||||
// and provide a DurationSeconds parameter value greater than one hour, the
|
||||
// operation fails. To learn how to view the maximum value for your role, see
|
||||
// View the Maximum Session Duration Setting for a Role (https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use.html#id_roles_use_view-role-max-session)
|
||||
// in the IAM User Guide.
|
||||
//
|
||||
// By default, the value is set to 3600 seconds.
|
||||
|
@ -1422,7 +1382,7 @@ type AssumeRoleInput struct {
|
|||
// to the federation endpoint for a console sign-in token takes a SessionDuration
|
||||
// parameter that specifies the maximum length of the console session. For more
|
||||
// information, see Creating a URL that Enables Federated Users to Access the
|
||||
// Management Console (https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_enable-console-custom-url.html)
|
||||
// Amazon Web Services Management Console (https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_enable-console-custom-url.html)
|
||||
// in the IAM User Guide.
|
||||
DurationSeconds *int64 `min:"900" type:"integer"`
|
||||
|
||||
|
@ -1548,7 +1508,7 @@ type AssumeRoleInput struct {
|
|||
|
||||
// A list of session tags that you want to pass. Each session tag consists of
|
||||
// a key name and an associated value. For more information about session tags,
|
||||
// see Tagging STS Sessions (https://docs.aws.amazon.com/IAM/latest/UserGuide/id_session-tags.html)
|
||||
// see Tagging Amazon Web Services STS Sessions (https://docs.aws.amazon.com/IAM/latest/UserGuide/id_session-tags.html)
|
||||
// in the IAM User Guide.
|
||||
//
|
||||
// This parameter is optional. You can pass up to 50 session tags. The plaintext
|
||||
|
@ -1858,7 +1818,7 @@ type AssumeRoleWithSAMLInput struct {
|
|||
// to the federation endpoint for a console sign-in token takes a SessionDuration
|
||||
// parameter that specifies the maximum length of the console session. For more
|
||||
// information, see Creating a URL that Enables Federated Users to Access the
|
||||
// Management Console (https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_enable-console-custom-url.html)
|
||||
// Amazon Web Services Management Console (https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_enable-console-custom-url.html)
|
||||
// in the IAM User Guide.
|
||||
DurationSeconds *int64 `min:"900" type:"integer"`
|
||||
|
||||
|
@ -2205,7 +2165,7 @@ type AssumeRoleWithWebIdentityInput struct {
|
|||
// to the federation endpoint for a console sign-in token takes a SessionDuration
|
||||
// parameter that specifies the maximum length of the console session. For more
|
||||
// information, see Creating a URL that Enables Federated Users to Access the
|
||||
// Management Console (https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_enable-console-custom-url.html)
|
||||
// Amazon Web Services Management Console (https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_enable-console-custom-url.html)
|
||||
// in the IAM User Guide.
|
||||
DurationSeconds *int64 `min:"900" type:"integer"`
|
||||
|
||||
|
@ -2705,7 +2665,7 @@ func (s *DecodeAuthorizationMessageInput) SetEncodedMessage(v string) *DecodeAut
|
|||
type DecodeAuthorizationMessageOutput struct {
|
||||
_ struct{} `type:"structure"`
|
||||
|
||||
// An XML document that contains the decoded message.
|
||||
// The API returns a response with the decoded message.
|
||||
DecodedMessage *string `type:"string"`
|
||||
}
|
||||
|
||||
|
@ -3237,8 +3197,8 @@ type GetSessionTokenInput struct {
|
|||
// user has a policy that requires MFA authentication. The value is either the
|
||||
// serial number for a hardware device (such as GAHT12345678) or an Amazon Resource
|
||||
// Name (ARN) for a virtual device (such as arn:aws:iam::123456789012:mfa/user).
|
||||
// You can find the device for an IAM user by going to the Management Console
|
||||
// and viewing the user's security credentials.
|
||||
// You can find the device for an IAM user by going to the Amazon Web Services
|
||||
// Management Console and viewing the user's security credentials.
|
||||
//
|
||||
// The regex used to validate this parameter is a string of characters consisting
|
||||
// of upper- and lower-case alphanumeric characters with no spaces. You can
|
||||
|
@ -3400,9 +3360,9 @@ func (s *PolicyDescriptorType) SetArn(v string) *PolicyDescriptorType {
|
|||
|
||||
// You can pass custom key-value pair attributes when you assume a role or federate
|
||||
// a user. These are called session tags. You can then use the session tags
|
||||
// to control access to resources. For more information, see Tagging STS Sessions
|
||||
// (https://docs.aws.amazon.com/IAM/latest/UserGuide/id_session-tags.html) in
|
||||
// the IAM User Guide.
|
||||
// to control access to resources. For more information, see Tagging Amazon
|
||||
// Web Services STS Sessions (https://docs.aws.amazon.com/IAM/latest/UserGuide/id_session-tags.html)
|
||||
// in the IAM User Guide.
|
||||
type Tag struct {
|
||||
_ struct{} `type:"structure"`
|
||||
|
||||
|
|
|
@ -67,7 +67,7 @@ const (
|
|||
//
|
||||
// You could receive this error even though you meet other defined session policy
|
||||
// and session tag limits. For more information, see IAM and STS Entity Character
|
||||
// Limits (https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_enable-regions.html)
|
||||
// Limits (https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-quotas.html#reference_iam-limits-entity-length)
|
||||
// in the IAM User Guide.
|
||||
ErrCodePackedPolicyTooLargeException = "PackedPolicyTooLarge"
|
||||
|
||||
|
|
|
@ -107,7 +107,7 @@ github.com/aws/amazon-ec2-instance-selector/v2/pkg/bytequantity
|
|||
github.com/aws/amazon-ec2-instance-selector/v2/pkg/cli
|
||||
github.com/aws/amazon-ec2-instance-selector/v2/pkg/selector
|
||||
github.com/aws/amazon-ec2-instance-selector/v2/pkg/selector/outputs
|
||||
# github.com/aws/aws-sdk-go v1.42.5
|
||||
# github.com/aws/aws-sdk-go v1.42.11
|
||||
## explicit; go 1.11
|
||||
github.com/aws/aws-sdk-go/aws
|
||||
github.com/aws/aws-sdk-go/aws/arn
|
||||
|
|
Loading…
Reference in New Issue