From 076c64e81bbd91009af9fae4a4d1d8e16aac49db Mon Sep 17 00:00:00 2001 From: awstools Date: Tue, 21 May 2024 18:14:08 +0000 Subject: [PATCH] feat(client-storage-gateway): Added new SMBSecurityStrategy enum named MandatoryEncryptionNoAes128, new mode enforces encryption and disables AES 128-bit algorithums. --- .../commands/DescribeSMBSettingsCommand.ts | 2 +- .../UpdateSMBSecurityStrategyCommand.ts | 2 +- .../src/models/models_0.ts | 52 +++++++++++++------ .../aws-models/storage-gateway.json | 18 ++++--- 4 files changed, 50 insertions(+), 24 deletions(-) diff --git a/clients/client-storage-gateway/src/commands/DescribeSMBSettingsCommand.ts b/clients/client-storage-gateway/src/commands/DescribeSMBSettingsCommand.ts index 02ea2069cb81..fcff9268c63f 100644 --- a/clients/client-storage-gateway/src/commands/DescribeSMBSettingsCommand.ts +++ b/clients/client-storage-gateway/src/commands/DescribeSMBSettingsCommand.ts @@ -45,7 +45,7 @@ export interface DescribeSMBSettingsCommandOutput extends DescribeSMBSettingsOut * // DomainName: "STRING_VALUE", * // ActiveDirectoryStatus: "ACCESS_DENIED" || "DETACHED" || "JOINED" || "JOINING" || "NETWORK_ERROR" || "TIMEOUT" || "UNKNOWN_ERROR", * // SMBGuestPasswordSet: true || false, - * // SMBSecurityStrategy: "ClientSpecified" || "MandatorySigning" || "MandatoryEncryption", + * // SMBSecurityStrategy: "ClientSpecified" || "MandatorySigning" || "MandatoryEncryption" || "MandatoryEncryptionNoAes128", * // FileSharesVisible: true || false, * // SMBLocalGroups: { // SMBLocalGroups * // GatewayAdmins: [ // UserList diff --git a/clients/client-storage-gateway/src/commands/UpdateSMBSecurityStrategyCommand.ts b/clients/client-storage-gateway/src/commands/UpdateSMBSecurityStrategyCommand.ts index eb5c36819f89..102dec15d304 100644 --- a/clients/client-storage-gateway/src/commands/UpdateSMBSecurityStrategyCommand.ts +++ b/clients/client-storage-gateway/src/commands/UpdateSMBSecurityStrategyCommand.ts @@ -41,7 +41,7 @@ export interface UpdateSMBSecurityStrategyCommandOutput extends UpdateSMBSecurit * const client = new StorageGatewayClient(config); * const input = { // UpdateSMBSecurityStrategyInput * GatewayARN: "STRING_VALUE", // required - * SMBSecurityStrategy: "ClientSpecified" || "MandatorySigning" || "MandatoryEncryption", // required + * SMBSecurityStrategy: "ClientSpecified" || "MandatorySigning" || "MandatoryEncryption" || "MandatoryEncryptionNoAes128", // required * }; * const command = new UpdateSMBSecurityStrategyCommand(input); * const response = await client.send(command); diff --git a/clients/client-storage-gateway/src/models/models_0.ts b/clients/client-storage-gateway/src/models/models_0.ts index 2a582825900f..7950e0beb1ff 100644 --- a/clients/client-storage-gateway/src/models/models_0.ts +++ b/clients/client-storage-gateway/src/models/models_0.ts @@ -87,10 +87,10 @@ export interface ActivateGatewayInput { /** *

A value that indicates the time zone you want to set for the gateway. The time zone is - * of the format "GMT-hr:mm" or "GMT+hr:mm". For example, GMT-4:00 indicates the time is 4 - * hours behind GMT. GMT+2:00 indicates the time is 2 hours ahead of GMT. The time zone is - * used, for example, for scheduling snapshots and your gateway's maintenance - * schedule.

+ * of the format "GMT", "GMT-hr:mm", or "GMT+hr:mm". For example, GMT indicates Greenwich Mean + * Time without any offset. GMT-4:00 indicates the time is 4 hours behind GMT. GMT+2:00 + * indicates the time is 2 hours ahead of GMT. The time zone is used, for example, for + * scheduling snapshots and your gateway's maintenance schedule.

* @public */ GatewayTimezone: string | undefined; @@ -115,8 +115,9 @@ export interface ActivateGatewayInput { *

A value that defines the type of gateway to activate. The type specified is critical to * all later functions of the gateway and cannot be changed after activation. The default * value is CACHED.

- *

Valid Values: STORED | CACHED | VTL | - * VTL_SNOW | FILE_S3 | FILE_FSX_SMB + *

Valid Values: STORED | CACHED | VTL + * | FILE_S3 | + * FILE_FSX_SMB *

* @public */ @@ -3309,6 +3310,9 @@ export interface DescribeGatewayInformationOutput { /** *

The type of hardware or software platform on which the gateway is running.

+ * + *

Tape Gateway is no longer available on Snow Family devices.

+ *
* @public */ HostEnvironment?: HostEnvironment; @@ -4102,6 +4106,7 @@ export interface SMBLocalGroups { export const SMBSecurityStrategy = { ClientSpecified: "ClientSpecified", MandatoryEncryption: "MandatoryEncryption", + MandatoryEncryptionNoAes128: "MandatoryEncryptionNoAes128", MandatorySigning: "MandatorySigning", } as const; @@ -4184,23 +4189,33 @@ export interface DescribeSMBSettingsOutput { * * @public @@ -5421,6 +5436,9 @@ export interface GatewayInfo { /** *

The type of hardware or software platform on which the gateway is running.

+ * + *

Tape Gateway is no longer available on Snow Family devices.

+ *
* @public */ HostEnvironment?: HostEnvironment; @@ -6353,6 +6371,8 @@ export interface RefreshCacheInput { *

A comma-separated list of the paths of folders to refresh in the cache. The default is * ["/"]. The default refreshes objects and folders at the root of the Amazon S3 bucket. If Recursive is set to true, the entire S3 * bucket that the file share has access to is refreshed.

+ *

Do not include / when specifying folder names. For example, you would + * specify samplefolder rather than samplefolder/.

* @public */ FolderList?: string[]; diff --git a/codegen/sdk-codegen/aws-models/storage-gateway.json b/codegen/sdk-codegen/aws-models/storage-gateway.json index 90da4d2da8b8..880a57aec552 100644 --- a/codegen/sdk-codegen/aws-models/storage-gateway.json +++ b/codegen/sdk-codegen/aws-models/storage-gateway.json @@ -87,7 +87,7 @@ "GatewayTimezone": { "target": "com.amazonaws.storagegateway#GatewayTimezone", "traits": { - "smithy.api#documentation": "

A value that indicates the time zone you want to set for the gateway. The time zone is\n of the format \"GMT-hr:mm\" or \"GMT+hr:mm\". For example, GMT-4:00 indicates the time is 4\n hours behind GMT. GMT+2:00 indicates the time is 2 hours ahead of GMT. The time zone is\n used, for example, for scheduling snapshots and your gateway's maintenance\n schedule.

", + "smithy.api#documentation": "

A value that indicates the time zone you want to set for the gateway. The time zone is\n of the format \"GMT\", \"GMT-hr:mm\", or \"GMT+hr:mm\". For example, GMT indicates Greenwich Mean\n Time without any offset. GMT-4:00 indicates the time is 4 hours behind GMT. GMT+2:00\n indicates the time is 2 hours ahead of GMT. The time zone is used, for example, for\n scheduling snapshots and your gateway's maintenance schedule.

", "smithy.api#required": {} } }, @@ -101,7 +101,7 @@ "GatewayType": { "target": "com.amazonaws.storagegateway#GatewayType", "traits": { - "smithy.api#documentation": "

A value that defines the type of gateway to activate. The type specified is critical to\n all later functions of the gateway and cannot be changed after activation. The default\n value is CACHED.

\n

Valid Values: STORED | CACHED | VTL |\n VTL_SNOW | FILE_S3 | FILE_FSX_SMB\n

" + "smithy.api#documentation": "

A value that defines the type of gateway to activate. The type specified is critical to\n all later functions of the gateway and cannot be changed after activation. The default\n value is CACHED.

\n

Valid Values: STORED | CACHED | VTL\n | FILE_S3 |\n FILE_FSX_SMB\n

" } }, "TapeDriveType": { @@ -3707,7 +3707,7 @@ "HostEnvironment": { "target": "com.amazonaws.storagegateway#HostEnvironment", "traits": { - "smithy.api#documentation": "

The type of hardware or software platform on which the gateway is running.

" + "smithy.api#documentation": "

The type of hardware or software platform on which the gateway is running.

\n \n

Tape Gateway is no longer available on Snow Family devices.

\n
" } }, "EndpointType": { @@ -4014,7 +4014,7 @@ "SMBSecurityStrategy": { "target": "com.amazonaws.storagegateway#SMBSecurityStrategy", "traits": { - "smithy.api#documentation": "

The type of security strategy that was specified for file gateway.

\n " + "smithy.api#documentation": "

The type of security strategy that was specified for file gateway.

\n " } }, "FileSharesVisible": { @@ -5946,7 +5946,7 @@ "HostEnvironment": { "target": "com.amazonaws.storagegateway#HostEnvironment", "traits": { - "smithy.api#documentation": "

The type of hardware or software platform on which the gateway is running.

" + "smithy.api#documentation": "

The type of hardware or software platform on which the gateway is running.

\n \n

Tape Gateway is no longer available on Snow Family devices.

\n
" } }, "HostEnvironmentId": { @@ -7726,7 +7726,7 @@ "FolderList": { "target": "com.amazonaws.storagegateway#FolderList", "traits": { - "smithy.api#documentation": "

A comma-separated list of the paths of folders to refresh in the cache. The default is\n [\"/\"]. The default refreshes objects and folders at the root of the Amazon S3 bucket. If Recursive is set to true, the entire S3\n bucket that the file share has access to is refreshed.

" + "smithy.api#documentation": "

A comma-separated list of the paths of folders to refresh in the cache. The default is\n [\"/\"]. The default refreshes objects and folders at the root of the Amazon S3 bucket. If Recursive is set to true, the entire S3\n bucket that the file share has access to is refreshed.

\n

Do not include / when specifying folder names. For example, you would\n specify samplefolder rather than samplefolder/.

" } }, "Recursive": { @@ -8293,6 +8293,12 @@ "traits": { "smithy.api#enumValue": "MandatoryEncryption" } + }, + "MandatoryEncryptionNoAes128": { + "target": "smithy.api#Unit", + "traits": { + "smithy.api#enumValue": "MandatoryEncryptionNoAes128" + } } } },