diff --git a/CHANGELOG.md b/CHANGELOG.md index f840b37f152..860951fd2b2 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,6 +1,20 @@ Unreleased Changes ------------------ +* Feature - Aws::Backup - Updated the API, and documentation for AWS Backup. + +* Feature - Aws::CloudFormation - Updated the API, and documentation for AWS CloudFormation. + +* Feature - Aws::CodeBuild - Updated the API, and documentation for AWS CodeBuild. + +* Feature - Aws::EC2 - Updated the documentation for Amazon Elastic Compute Cloud. + +* Feature - Aws::ElastiCache - Updated the documentation for Amazon ElastiCache. + +* Feature - Aws::Outposts - Updated the API for AWS Outposts. + +* Feature - Aws::S3Control - Updated the API, and documentation for AWS S3 Control. + 2.11.629 (2020-11-17) ------------------ diff --git a/aws-sdk-core/apis/backup/2018-11-15/api-2.json b/aws-sdk-core/apis/backup/2018-11-15/api-2.json index 375a082a8a1..eb91d4e1469 100644 --- a/aws-sdk-core/apis/backup/2018-11-15/api-2.json +++ b/aws-sdk-core/apis/backup/2018-11-15/api-2.json @@ -202,6 +202,18 @@ ], "idempotent":true }, + "DescribeGlobalSettings":{ + "name":"DescribeGlobalSettings", + "http":{ + "method":"GET", + "requestUri":"/global-settings" + }, + "input":{"shape":"DescribeGlobalSettingsInput"}, + "output":{"shape":"DescribeGlobalSettingsOutput"}, + "errors":[ + {"shape":"ServiceUnavailableException"} + ] + }, "DescribeProtectedResource":{ "name":"DescribeProtectedResource", "http":{ @@ -626,6 +638,7 @@ {"shape":"ResourceNotFoundException"}, {"shape":"InvalidParameterValueException"}, {"shape":"MissingParameterValueException"}, + {"shape":"InvalidRequestException"}, {"shape":"ServiceUnavailableException"}, {"shape":"LimitExceededException"} ], @@ -726,6 +739,20 @@ ], "idempotent":true }, + "UpdateGlobalSettings":{ + "name":"UpdateGlobalSettings", + "http":{ + "method":"PUT", + "requestUri":"/global-settings" + }, + "input":{"shape":"UpdateGlobalSettingsInput"}, + "errors":[ + {"shape":"ServiceUnavailableException"}, + {"shape":"MissingParameterValueException"}, + {"shape":"InvalidParameterValueException"}, + {"shape":"InvalidRequestException"} + ] + }, "UpdateRecoveryPointLifecycle":{ "name":"UpdateRecoveryPointLifecycle", "http":{ @@ -1335,6 +1362,18 @@ "CopyJob":{"shape":"CopyJob"} } }, + "DescribeGlobalSettingsInput":{ + "type":"structure", + "members":{ + } + }, + "DescribeGlobalSettingsOutput":{ + "type":"structure", + "members":{ + "GlobalSettings":{"shape":"GlobalSettings"}, + "LastUpdateTime":{"shape":"timestamp"} + } + }, "DescribeProtectedResourceInput":{ "type":"structure", "required":["ResourceArn"], @@ -1379,6 +1418,7 @@ "RecoveryPointArn":{"shape":"ARN"}, "BackupVaultName":{"shape":"BackupVaultName"}, "BackupVaultArn":{"shape":"ARN"}, + "SourceBackupVaultArn":{"shape":"ARN"}, "ResourceArn":{"shape":"ARN"}, "ResourceType":{"shape":"ResourceType"}, "CreatedBy":{"shape":"RecoveryPointCreator"}, @@ -1613,6 +1653,13 @@ "ResourceTypes":{"shape":"ResourceTypes"} } }, + "GlobalSettings":{ + "type":"map", + "key":{"shape":"GlobalSettingsName"}, + "value":{"shape":"GlobalSettingsValue"} + }, + "GlobalSettingsName":{"type":"string"}, + "GlobalSettingsValue":{"type":"string"}, "IAMPolicy":{"type":"string"}, "IAMRoleArn":{"type":"string"}, "InvalidParameterValueException":{ @@ -2142,6 +2189,7 @@ "RecoveryPointArn":{"shape":"ARN"}, "BackupVaultName":{"shape":"BackupVaultName"}, "BackupVaultArn":{"shape":"ARN"}, + "SourceBackupVaultArn":{"shape":"ARN"}, "ResourceArn":{"shape":"ARN"}, "ResourceType":{"shape":"ResourceType"}, "CreatedBy":{"shape":"RecoveryPointCreator"}, @@ -2424,6 +2472,12 @@ "AdvancedBackupSettings":{"shape":"AdvancedBackupSettings"} } }, + "UpdateGlobalSettingsInput":{ + "type":"structure", + "members":{ + "GlobalSettings":{"shape":"GlobalSettings"} + } + }, "UpdateRecoveryPointLifecycleInput":{ "type":"structure", "required":[ diff --git a/aws-sdk-core/apis/backup/2018-11-15/docs-2.json b/aws-sdk-core/apis/backup/2018-11-15/docs-2.json index 374535e1342..bf3fc8406ce 100644 --- a/aws-sdk-core/apis/backup/2018-11-15/docs-2.json +++ b/aws-sdk-core/apis/backup/2018-11-15/docs-2.json @@ -14,9 +14,10 @@ "DescribeBackupJob": "
Returns backup job details for the specified BackupJobId
.
Returns metadata about a backup vault specified by its name.
", "DescribeCopyJob": "Returns metadata associated with creating a copy of a resource.
", + "DescribeGlobalSettings": "The current feature settings for the AWS Account.
", "DescribeProtectedResource": "Returns information about a saved resource, including the last time it was backed up, its Amazon Resource Name (ARN), and the AWS service type of the saved resource.
", "DescribeRecoveryPoint": "Returns metadata associated with a recovery point, including ID, status, encryption, and lifecycle.
", - "DescribeRegionSettings": "Returns the current service opt-in settings for the Region. If the service has a value set to true
, AWS Backup tries to protect that service's resources in this Region, when included in an on-demand backup or scheduled backup plan. If the value is set to false
for a service, AWS Backup does not try to protect that service's resources in this Region.
Returns the current service opt-in settings for the Region. If service-opt-in is enabled for a service, AWS Backup tries to protect that service's resources in this Region, when the resource is included in an on-demand backup or scheduled backup plan. Otherwise, AWS Backup does not try to protect that service's resources in this Region, AWS Backup does not try to protect that service's resources in this Region.
", "DescribeRestoreJob": "Returns metadata associated with a restore job that is specified by a job ID.
", "ExportBackupPlanTemplate": "Returns the backup plan that is specified by the plan ID as a backup template.
", "GetBackupPlan": "Returns BackupPlan
details for the specified BackupPlanId
. Returns the body of a backup plan in JSON format, in addition to plan metadata.
Assigns a set of key-value pairs to a recovery point, backup plan, or backup vault identified by an Amazon Resource Name (ARN).
", "UntagResource": "Removes a set of key-value pairs from a recovery point, backup plan, or backup vault identified by an Amazon Resource Name (ARN)
", "UpdateBackupPlan": "Updates an existing backup plan identified by its backupPlanId
with the input document in JSON format. The new version is uniquely identified by a VersionId
.
Updates the current global settings for the AWS Account. Use the DescribeGlobalSettings
API to determine the current settings.
Sets the transition lifecycle of a recovery point.
The lifecycle defines when a protected resource is transitioned to cold storage and when it expires. AWS Backup transitions and expires backups automatically according to the lifecycle that you define.
Backups transitioned to cold storage must be stored in cold storage for a minimum of 90 days. Therefore, the “expire after days” setting must be 90 days greater than the “transition to cold after days” setting. The “transition to cold after days” setting cannot be changed after a backup has been transitioned to cold.
", - "UpdateRegionSettings": "Updates the current service opt-in settings for the Region. If the service has a value set to true
, AWS Backup tries to protect that service's resources in this Region, when included in an on-demand backup or scheduled backup plan. If the value is set to false
for a service, AWS Backup does not try to protect that service's resources in this Region.
Updates the current service opt-in settings for the Region. If service-opt-in is enabled for a service, AWS Backup tries to protect that service's resources in this Region, when the resource is included in an on-demand backup or scheduled backup plan. Otherwise, AWS Backup does not try to protect that service's resources in this Region. Use the DescribeRegionSettings
API to determine the resource types that are supported.
An Amazon Resource Name (ARN) that uniquely identifies a recovery point; for example, arn:aws:backup:us-east-1:123456789012:recovery-point:1EB3B5E7-9EB0-435A-A80B-108B488B0D45
.
An ARN that uniquely identifies a recovery point; for example, arn:aws:backup:us-east-1:123456789012:recovery-point:1EB3B5E7-9EB0-435A-A80B-108B488B0D45
.
An ARN that uniquely identifies a backup vault; for example, arn:aws:backup:us-east-1:123456789012:vault:aBackupVault
.
An Amazon Resource Name (ARN) that uniquely identifies the source vault where the resource was originally backed up in; for example, arn:aws:backup:us-east-1:123456789012:vault:BackupVault
. If the recovery is restored to the same AWS account or Region, this value will be null
.
An ARN that uniquely identifies a saved resource. The format of the ARN depends on the resource type.
", "DescribeRecoveryPointOutput$EncryptionKeyArn": "The server-side encryption key used to protect your backups; for example, arn:aws:kms:us-west-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab
.
An ARN that uniquely identifies a recovery point; for example, arn:aws:backup:us-east-1:123456789012:recovery-point:1EB3B5E7-9EB0-435A-A80B-108B488B0D45
.
The Amazon Resource Name (ARN) that specifies the topic for a backup vault’s events; for example, arn:aws:sns:us-west-2:111122223333:MyVaultTopic
.
An Amazon Resource Name (ARN) that uniquely identifies a recovery point; for example, arn:aws:backup:us-east-1:123456789012:recovery-point:1EB3B5E7-9EB0-435A-A80B-108B488B0D45
.
An ARN that uniquely identifies a backup vault; for example, arn:aws:backup:us-east-1:123456789012:vault:aBackupVault
.
The backup vault where the recovery point was originally copied from. If the recovery point is restored to the same account this value will be null
.
An ARN that uniquely identifies a resource. The format of the ARN depends on the resource type.
", "RecoveryPointByBackupVault$EncryptionKeyArn": "The server-side encryption key that is used to protect your backups; for example, arn:aws:kms:us-west-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab
.
An Amazon Resource Name (ARN) that uniquely identifies a recovery point; for example, arn:aws:backup:us-east-1:123456789012:recovery-point:1EB3B5E7-9EB0-435A-A80B-108B488B0D45
.
Specifies the backup option for a selected resource. This option is only available for Windows VSS backup jobs.
Valid values: Set to \"WindowsVSS”:“enabled\"
to enable WindowsVSS backup option and create a VSS Windows backup. Set to “WindowsVSS”:”disabled” to create a regular backup. The WindowsVSS option is not enabled by default.
If you specify an invalid option, you get an InvalidParameterValueException
exception.
For more information about Windows VSS backups, see Creating a VSS-Enabled Windows Backup.
", + "AdvancedBackupSetting$BackupOptions": "Specifies the backup option for a selected resource. This option is only available for Windows VSS backup jobs.
Valid values:
Set to \"WindowsVSS\":\"enabled\"
to enable the WindowsVSS backup option and create a VSS Windows backup.
Set to \"WindowsVSS\":\"disabled\"
to create a regular backup. The WindowsVSS option is not enabled by default.
If you specify an invalid option, you get an InvalidParameterValueException
exception.
For more information about Windows VSS backups, see Creating a VSS-Enabled Windows Backup.
", "BackupJob$BackupOptions": "Specifies the backup option for a selected resource. This option is only available for Windows VSS backup jobs.
Valid values: Set to \"WindowsVSS”:“enabled\"
to enable WindowsVSS backup option and create a VSS Windows backup. Set to “WindowsVSS”:”disabled” to create a regular backup. If you specify an invalid option, you get an InvalidParameterValueException
exception.
Represents the options specified as part of backup plan or on-demand backup job.
", "StartBackupJobInput$BackupOptions": "Specifies the backup option for a selected resource. This option is only available for Windows VSS backup jobs.
Valid values: Set to \"WindowsVSS”:“enabled\"
to enable WindowsVSS backup option and create a VSS Windows backup. Set to “WindowsVSS”:”disabled” to create a regular backup. The WindowsVSS option is not enabled by default.
A list of resources along with the opt-in preferences for the account.
", + "UpdateGlobalSettingsInput$GlobalSettings": "A list of resources along with the opt-in preferences for the account.
" + } + }, + "GlobalSettingsName": { + "base": null, + "refs": { + "GlobalSettings$key": null + } + }, + "GlobalSettingsValue": { + "base": null, + "refs": { + "GlobalSettings$value": null + } + }, "IAMPolicy": { "base": null, "refs": { @@ -1146,6 +1179,11 @@ "refs": { } }, + "UpdateGlobalSettingsInput": { + "base": null, + "refs": { + } + }, "UpdateRecoveryPointLifecycleInput": { "base": null, "refs": { @@ -1233,7 +1271,7 @@ "DescribeBackupJobOutput$BackupJobId": "Uniquely identifies a request to AWS Backup to back up a resource.
", "DescribeBackupJobOutput$StatusMessage": "A detailed message explaining the status of the job to back up a resource.
", "DescribeBackupJobOutput$PercentDone": "Contains an estimated percentage that is complete of a job at the time the job status was queried.
", - "DescribeBackupJobOutput$BackupType": "Represents the actual backup type selected for a backup job. For example, if a successful WindowsVSS backup was taken, BackupType
returns “WindowsVSS”. If BackupType
is empty, then it is a regular backup.
Represents the actual backup type selected for a backup job. For example, if a successful WindowsVSS backup was taken, BackupType
returns \"WindowsVSS\". If BackupType
is empty, then the backup type that was is a regular backup.
The name of a logical container where backups are stored. Backup vaults are identified by names that are unique to the account used to create them and the AWS Region where they are created. They consist of lowercase letters, numbers, and hyphens.
", "DescribeBackupVaultOutput$BackupVaultName": "The name of a logical container where backups are stored. Backup vaults are identified by names that are unique to the account used to create them and the Region where they are created. They consist of lowercase letters, numbers, and hyphens.
", "DescribeBackupVaultOutput$CreatorRequestId": "A unique string that identifies the request and allows failed requests to be retried without the risk of running the operation twice.
", @@ -1350,6 +1388,7 @@ "DescribeBackupJobOutput$ExpectedCompletionDate": "The date and time that a job to back up resources is expected to be completed, in Unix format and Coordinated Universal Time (UTC). The value of ExpectedCompletionDate
is accurate to milliseconds. For example, the value 1516925490.087 represents Friday, January 26, 2018 12:11:30.087 AM.
Specifies the time in Unix format and Coordinated Universal Time (UTC) when a backup job must be started before it is canceled. The value is calculated by adding the start window to the scheduled time. So if the scheduled time were 6:00 PM and the start window is 2 hours, the StartBy
time would be 8:00 PM on the date specified. The value of StartBy
is accurate to milliseconds. For example, the value 1516925490.087 represents Friday, January 26, 2018 12:11:30.087 AM.
The date and time that a backup vault is created, in Unix format and Coordinated Universal Time (UTC). The value of CreationDate
is accurate to milliseconds. For example, the value 1516925490.087 represents Friday, January 26, 2018 12:11:30.087 AM.
The date and time that the global settings was last updated. This update is in Unix format and Coordinated Universal Time (UTC). The value of LastUpdateTime
is accurate to milliseconds. For example, the value 1516925490.087 represents Friday, January 26, 2018 12:11:30.087 AM.
The date and time that a resource was last backed up, in Unix format and Coordinated Universal Time (UTC). The value of LastBackupTime
is accurate to milliseconds. For example, the value 1516925490.087 represents Friday, January 26, 2018 12:11:30.087 AM.
The date and time that a recovery point is created, in Unix format and Coordinated Universal Time (UTC). The value of CreationDate
is accurate to milliseconds. For example, the value 1516925490.087 represents Friday, January 26, 2018 12:11:30.087 AM.
The date and time that a job to create a recovery point is completed, in Unix format and Coordinated Universal Time (UTC). The value of CompletionDate
is accurate to milliseconds. For example, the value 1516925490.087 represents Friday, January 26, 2018 12:11:30.087 AM.
Cancels an update on the specified stack. If the call completes successfully, the stack rolls back the update and reverts to the previous stack configuration.
You can cancel only stacks that are in the UPDATE_IN_PROGRESS state.
For a specified stack that is in the UPDATE_ROLLBACK_FAILED
state, continues rolling it back to the UPDATE_ROLLBACK_COMPLETE
state. Depending on the cause of the failure, you can manually fix the error and continue the rollback. By continuing the rollback, you can return your stack to a working state (the UPDATE_ROLLBACK_COMPLETE
state), and then try to update the stack again.
A stack goes into the UPDATE_ROLLBACK_FAILED
state when AWS CloudFormation cannot roll back all changes after a failed stack update. For example, you might have a stack that is rolling back to an old database instance that was deleted outside of AWS CloudFormation. Because AWS CloudFormation doesn't know the database was deleted, it assumes that the database instance still exists and attempts to roll back to it, causing the update rollback to fail.
Creates a list of changes that will be applied to a stack so that you can review the changes before executing them. You can create a change set for a stack that doesn't exist or an existing stack. If you create a change set for a stack that doesn't exist, the change set shows all of the resources that AWS CloudFormation will create. If you create a change set for an existing stack, AWS CloudFormation compares the stack's information with the information that you submit in the change set and lists the differences. Use change sets to understand which resources AWS CloudFormation will create or change, and how it will change resources in an existing stack, before you create or update a stack.
To create a change set for a stack that doesn't exist, for the ChangeSetType
parameter, specify CREATE
. To create a change set for an existing stack, specify UPDATE
for the ChangeSetType
parameter. To create a change set for an import operation, specify IMPORT
for the ChangeSetType
parameter. After the CreateChangeSet
call successfully completes, AWS CloudFormation starts creating the change set. To check the status of the change set or to review it, use the DescribeChangeSet action.
When you are satisfied with the changes the change set will make, execute the change set by using the ExecuteChangeSet action. AWS CloudFormation doesn't make changes until you execute the change set.
", + "CreateChangeSet": "Creates a list of changes that will be applied to a stack so that you can review the changes before executing them. You can create a change set for a stack that doesn't exist or an existing stack. If you create a change set for a stack that doesn't exist, the change set shows all of the resources that AWS CloudFormation will create. If you create a change set for an existing stack, AWS CloudFormation compares the stack's information with the information that you submit in the change set and lists the differences. Use change sets to understand which resources AWS CloudFormation will create or change, and how it will change resources in an existing stack, before you create or update a stack.
To create a change set for a stack that doesn't exist, for the ChangeSetType
parameter, specify CREATE
. To create a change set for an existing stack, specify UPDATE
for the ChangeSetType
parameter. To create a change set for an import operation, specify IMPORT
for the ChangeSetType
parameter. After the CreateChangeSet
call successfully completes, AWS CloudFormation starts creating the change set. To check the status of the change set or to review it, use the DescribeChangeSet action.
When you are satisfied with the changes the change set will make, execute the change set by using the ExecuteChangeSet action. AWS CloudFormation doesn't make changes until you execute the change set.
To create a change set for the entire stack hierachy, set IncludeNestedStacks
to True
.
Creates a stack as specified in the template. After the call completes successfully, the stack creation starts. You can check the status of the stack via the DescribeStacks API.
", "CreateStackInstances": "Creates stack instances for the specified accounts, within the specified Regions. A stack instance refers to a stack in a specific account and Region. You must specify at least one value for either Accounts
or DeploymentTargets
, and you must specify at least one value for Regions
.
Creates a stack set.
", - "DeleteChangeSet": "Deletes the specified change set. Deleting change sets ensures that no one executes the wrong change set.
If the call successfully completes, AWS CloudFormation successfully deleted the change set.
", + "DeleteChangeSet": "Deletes the specified change set. Deleting change sets ensures that no one executes the wrong change set.
If the call successfully completes, AWS CloudFormation successfully deleted the change set.
If IncludeNestedStacks
specifies True
during the creation of the nested change set, then DeleteChangeSet
will delete all change sets that belong to the stacks hierarchy and will also delete all change sets for nested stacks with the status of REVIEW_IN_PROGRESS
.
Deletes a specified stack. Once the call completes successfully, stack deletion starts. Deleted stacks do not show up in the DescribeStacks API if the deletion has been completed successfully.
", "DeleteStackInstances": "Deletes stack instances for the specified accounts, in the specified Regions.
", "DeleteStackSet": "Deletes a stack set. Before you can delete a stack set, all of its member stack instances must be deleted. For more information about how to do this, see DeleteStackInstances.
", @@ -30,7 +30,7 @@ "DetectStackResourceDrift": "Returns information about whether a resource's actual configuration differs, or has drifted, from it's expected configuration, as defined in the stack template and any values specified as template parameters. This information includes actual and expected property values for resources in which AWS CloudFormation detects drift. Only resource properties explicitly defined in the stack template are checked for drift. For more information about stack and resource drift, see Detecting Unregulated Configuration Changes to Stacks and Resources.
Use DetectStackResourceDrift
to detect drift on individual resources, or DetectStackDrift to detect drift on all resources in a given stack that support drift detection.
Resources that do not currently support drift detection cannot be checked. For a list of resources that support drift detection, see Resources that Support Drift Detection.
", "DetectStackSetDrift": "Detect drift on a stack set. When CloudFormation performs drift detection on a stack set, it performs drift detection on the stack associated with each stack instance in the stack set. For more information, see How CloudFormation Performs Drift Detection on a Stack Set.
DetectStackSetDrift
returns the OperationId
of the stack set drift detection operation. Use this operation id with DescribeStackSetOperation
to monitor the progress of the drift detection operation. The drift detection operation may take some time, depending on the number of stack instances included in the stack set, as well as the number of resources included in each stack.
Once the operation has completed, use the following actions to return drift information:
Use DescribeStackSet
to return detailed informaiton about the stack set, including detailed information about the last completed drift operation performed on the stack set. (Information about drift operations that are in progress is not included.)
Use ListStackInstances
to return a list of stack instances belonging to the stack set, including the drift status and last drift time checked of each instance.
Use DescribeStackInstance
to return detailed information about a specific stack instance, including its drift status and last drift time checked.
For more information on performing a drift detection operation on a stack set, see Detecting Unmanaged Changes in Stack Sets.
You can only run a single drift detection operation on a given stack set at one time.
To stop a drift detection stack set operation, use StopStackSetOperation
.
Returns the estimated monthly cost of a template. The return value is an AWS Simple Monthly Calculator URL with a query string that describes the resources required to run the template.
", - "ExecuteChangeSet": "Updates a stack using the input information that was provided when the specified change set was created. After the call successfully completes, AWS CloudFormation starts updating the stack. Use the DescribeStacks action to view the status of the update.
When you execute a change set, AWS CloudFormation deletes all other change sets associated with the stack because they aren't valid for the updated stack.
If a stack policy is associated with the stack, AWS CloudFormation enforces the policy during the update. You can't specify a temporary stack policy that overrides the current policy.
", + "ExecuteChangeSet": "Updates a stack using the input information that was provided when the specified change set was created. After the call successfully completes, AWS CloudFormation starts updating the stack. Use the DescribeStacks action to view the status of the update.
When you execute a change set, AWS CloudFormation deletes all other change sets associated with the stack because they aren't valid for the updated stack.
If a stack policy is associated with the stack, AWS CloudFormation enforces the policy during the update. You can't specify a temporary stack policy that overrides the current policy.
To create a change set for the entire stack hierachy, IncludeNestedStacks
must have been set to True
.
Returns the stack policy for a specified stack. If a stack doesn't have a policy, a null value is returned.
", "GetTemplate": "Returns the template body for a specified stack. You can get the template for running or deleted stacks.
For deleted stacks, GetTemplate returns the template for up to 90 days after the stack has been deleted.
If the template does not exist, a ValidationError
is returned.
Returns information about a new or existing template. The GetTemplateSummary
action is useful for viewing parameter information, such as default parameter values and parameter types, before you create or update a stack or stack set.
You can use the GetTemplateSummary
action when you submit a template, or you can get template information for a stack set, or a running or deleted stack.
For deleted stacks, GetTemplateSummary
returns the template information for up to 90 days after the stack has been deleted. If the template does not exist, a ValidationError
is returned.
In some cases, you must explicitly acknowledge that your stack template contains certain capabilities in order for AWS CloudFormation to create the stack.
CAPABILITY_IAM
and CAPABILITY_NAMED_IAM
Some stack templates might include resources that can affect permissions in your AWS account; for example, by creating new AWS Identity and Access Management (IAM) users. For those stacks, you must explicitly acknowledge this by specifying one of these capabilities.
The following IAM resources require you to specify either the CAPABILITY_IAM
or CAPABILITY_NAMED_IAM
capability.
If you have IAM resources, you can specify either capability.
If you have IAM resources with custom names, you must specify CAPABILITY_NAMED_IAM
.
If you don't specify either of these capabilities, AWS CloudFormation returns an InsufficientCapabilities
error.
If your stack template contains these resources, we recommend that you review all permissions associated with them and edit their permissions if necessary.
For more information, see Acknowledging IAM Resources in AWS CloudFormation Templates.
CAPABILITY_AUTO_EXPAND
Some template contain macros. Macros perform custom processing on templates; this can include simple actions like find-and-replace operations, all the way to extensive transformations of entire templates. Because of this, users typically create a change set from the processed template, so that they can review the changes resulting from the macros before actually creating the stack. If your stack template contains one or more macros, and you choose to create a stack directly from the processed template, without first reviewing the resulting changes in a change set, you must acknowledge this capability. This includes the AWS::Include and AWS::Serverless transforms, which are macros hosted by AWS CloudFormation.
This capacity does not apply to creating change sets, and specifying it when creating change sets has no effect.
Also, change sets do not currently support nested stacks. If you want to create a stack from a stack template that contains macros and nested stacks, you must create or update the stack directly from the template using the CreateStack or UpdateStack action, and specifying this capability.
For more information on macros, see Using AWS CloudFormation Macros to Perform Custom Processing on Templates.
In some cases, you must explicitly acknowledge that your stack template contains certain capabilities in order for AWS CloudFormation to create the stack.
CAPABILITY_IAM
and CAPABILITY_NAMED_IAM
Some stack templates might include resources that can affect permissions in your AWS account; for example, by creating new AWS Identity and Access Management (IAM) users. For those stacks, you must explicitly acknowledge this by specifying one of these capabilities.
The following IAM resources require you to specify either the CAPABILITY_IAM
or CAPABILITY_NAMED_IAM
capability.
If you have IAM resources, you can specify either capability.
If you have IAM resources with custom names, you must specify CAPABILITY_NAMED_IAM
.
If you don't specify either of these capabilities, AWS CloudFormation returns an InsufficientCapabilities
error.
If your stack template contains these resources, we recommend that you review all permissions associated with them and edit their permissions if necessary.
For more information, see Acknowledging IAM Resources in AWS CloudFormation Templates.
CAPABILITY_AUTO_EXPAND
Some template contain macros. Macros perform custom processing on templates; this can include simple actions like find-and-replace operations, all the way to extensive transformations of entire templates. Because of this, users typically create a change set from the processed template, so that they can review the changes resulting from the macros before actually creating the stack. If your stack template contains one or more macros, and you choose to create a stack directly from the processed template, without first reviewing the resulting changes in a change set, you must acknowledge this capability. This includes the AWS::Include and AWS::Serverless transforms, which are macros hosted by AWS CloudFormation.
Change sets do not currently support nested stacks. If you want to create a stack from a stack template that contains macros and nested stacks, you must create the stack directly from the template using this capability.
You should only create stacks directly from a stack template that contains macros if you know what processing the macro performs.
Each macro relies on an underlying Lambda service function for processing stack templates. Be aware that the Lambda function owner can update the function operation without AWS CloudFormation being notified.
For more information, see Using AWS CloudFormation Macros to Perform Custom Processing on Templates.
In some cases, you must explicitly acknowledge that your stack template contains certain capabilities in order for AWS CloudFormation to create the stack.
CAPABILITY_IAM
and CAPABILITY_NAMED_IAM
Some stack templates might include resources that can affect permissions in your AWS account; for example, by creating new AWS Identity and Access Management (IAM) users. For those stacks, you must explicitly acknowledge this by specifying one of these capabilities.
The following IAM resources require you to specify either the CAPABILITY_IAM
or CAPABILITY_NAMED_IAM
capability.
If you have IAM resources, you can specify either capability.
If you have IAM resources with custom names, you must specify CAPABILITY_NAMED_IAM
.
If you don't specify either of these capabilities, AWS CloudFormation returns an InsufficientCapabilities
error.
If your stack template contains these resources, we recommend that you review all permissions associated with them and edit their permissions if necessary.
For more information, see Acknowledging IAM Resources in AWS CloudFormation Templates.
CAPABILITY_AUTO_EXPAND
Some template contain macros. Macros perform custom processing on templates; this can include simple actions like find-and-replace operations, all the way to extensive transformations of entire templates. Because of this, users typically create a change set from the processed template, so that they can review the changes resulting from the macros before actually creating the stack. If your stack template contains one or more macros, and you choose to create a stack directly from the processed template, without first reviewing the resulting changes in a change set, you must acknowledge this capability. This includes the AWS::Include and AWS::Serverless transforms, which are macros hosted by AWS CloudFormation.
This capacity does not apply to creating change sets, and specifying it when creating change sets has no effect.
If you want to create a stack from a stack template that contains macros and nested stacks, you must create or update the stack directly from the template using the CreateStack or UpdateStack action, and specifying this capability.
For more information on macros, see Using AWS CloudFormation Macros to Perform Custom Processing on Templates.
In some cases, you must explicitly acknowledge that your stack template contains certain capabilities in order for AWS CloudFormation to create the stack.
CAPABILITY_IAM
and CAPABILITY_NAMED_IAM
Some stack templates might include resources that can affect permissions in your AWS account; for example, by creating new AWS Identity and Access Management (IAM) users. For those stacks, you must explicitly acknowledge this by specifying one of these capabilities.
The following IAM resources require you to specify either the CAPABILITY_IAM
or CAPABILITY_NAMED_IAM
capability.
If you have IAM resources, you can specify either capability.
If you have IAM resources with custom names, you must specify CAPABILITY_NAMED_IAM
.
If you don't specify either of these capabilities, AWS CloudFormation returns an InsufficientCapabilities
error.
If your stack template contains these resources, we recommend that you review all permissions associated with them and edit their permissions if necessary.
For more information, see Acknowledging IAM Resources in AWS CloudFormation Templates.
CAPABILITY_AUTO_EXPAND
Some template contain macros. Macros perform custom processing on templates; this can include simple actions like find-and-replace operations, all the way to extensive transformations of entire templates. Because of this, users typically create a change set from the processed template, so that they can review the changes resulting from the macros before actually creating the stack. If your stack template contains one or more macros, and you choose to create a stack directly from the processed template, without first reviewing the resulting changes in a change set, you must acknowledge this capability. This includes the AWS::Include and AWS::Serverless transforms, which are macros hosted by AWS CloudFormation.
If you want to create a stack from a stack template that contains macros and nested stacks, you must create the stack directly from the template using this capability.
You should only create stacks directly from a stack template that contains macros if you know what processing the macro performs.
Each macro relies on an underlying Lambda service function for processing stack templates. Be aware that the Lambda function owner can update the function operation without AWS CloudFormation being notified.
For more information, see Using AWS CloudFormation Macros to Perform Custom Processing on Templates.
In some cases, you must explicitly acknowledge that your stack set template contains certain capabilities in order for AWS CloudFormation to create the stack set and related stack instances.
CAPABILITY_IAM
and CAPABILITY_NAMED_IAM
Some stack templates might include resources that can affect permissions in your AWS account; for example, by creating new AWS Identity and Access Management (IAM) users. For those stack sets, you must explicitly acknowledge this by specifying one of these capabilities.
The following IAM resources require you to specify either the CAPABILITY_IAM
or CAPABILITY_NAMED_IAM
capability.
If you have IAM resources, you can specify either capability.
If you have IAM resources with custom names, you must specify CAPABILITY_NAMED_IAM
.
If you don't specify either of these capabilities, AWS CloudFormation returns an InsufficientCapabilities
error.
If your stack template contains these resources, we recommend that you review all permissions associated with them and edit their permissions if necessary.
For more information, see Acknowledging IAM Resources in AWS CloudFormation Templates.
CAPABILITY_AUTO_EXPAND
Some templates contain macros. If your stack template contains one or more macros, and you choose to create a stack directly from the processed template, without first reviewing the resulting changes in a change set, you must acknowledge this capability. For more information, see Using AWS CloudFormation Macros to Perform Custom Processing on Templates.
Stack sets do not currently support macros in stack templates. (This includes the AWS::Include and AWS::Serverless transforms, which are macros hosted by AWS CloudFormation.) Even if you specify this capability, if you include a macro in your template the stack set operation will fail.
If you execute the change set, the list of capabilities that were explicitly acknowledged when the change set was created.
", "GetTemplateSummaryOutput$Capabilities": "The capabilities found within the template. If your template contains IAM resources, you must specify the CAPABILITY_IAM or CAPABILITY_NAMED_IAM value for this parameter when you use the CreateStack or UpdateStack actions with your template; otherwise, those actions return an InsufficientCapabilities error.
For more information, see Acknowledging IAM Resources in AWS CloudFormation Templates.
", "Stack$Capabilities": "The capabilities allowed in the stack.
", "StackSet$Capabilities": "The capabilities that are allowed in the stack set. Some stack set templates might include resources that can affect permissions in your AWS account—for example, by creating new AWS Identity and Access Management (IAM) users. For more information, see Acknowledging IAM Resources in AWS CloudFormation Templates.
", - "UpdateStackInput$Capabilities": "In some cases, you must explicitly acknowledge that your stack template contains certain capabilities in order for AWS CloudFormation to update the stack.
CAPABILITY_IAM
and CAPABILITY_NAMED_IAM
Some stack templates might include resources that can affect permissions in your AWS account; for example, by creating new AWS Identity and Access Management (IAM) users. For those stacks, you must explicitly acknowledge this by specifying one of these capabilities.
The following IAM resources require you to specify either the CAPABILITY_IAM
or CAPABILITY_NAMED_IAM
capability.
If you have IAM resources, you can specify either capability.
If you have IAM resources with custom names, you must specify CAPABILITY_NAMED_IAM
.
If you don't specify either of these capabilities, AWS CloudFormation returns an InsufficientCapabilities
error.
If your stack template contains these resources, we recommend that you review all permissions associated with them and edit their permissions if necessary.
For more information, see Acknowledging IAM Resources in AWS CloudFormation Templates.
CAPABILITY_AUTO_EXPAND
Some template contain macros. Macros perform custom processing on templates; this can include simple actions like find-and-replace operations, all the way to extensive transformations of entire templates. Because of this, users typically create a change set from the processed template, so that they can review the changes resulting from the macros before actually updating the stack. If your stack template contains one or more macros, and you choose to update a stack directly from the processed template, without first reviewing the resulting changes in a change set, you must acknowledge this capability. This includes the AWS::Include and AWS::Serverless transforms, which are macros hosted by AWS CloudFormation.
Change sets do not currently support nested stacks. If you want to update a stack from a stack template that contains macros and nested stacks, you must update the stack directly from the template using this capability.
You should only update stacks directly from a stack template that contains macros if you know what processing the macro performs.
Each macro relies on an underlying Lambda service function for processing stack templates. Be aware that the Lambda function owner can update the function operation without AWS CloudFormation being notified.
For more information, see Using AWS CloudFormation Macros to Perform Custom Processing on Templates.
In some cases, you must explicitly acknowledge that your stack template contains certain capabilities in order for AWS CloudFormation to update the stack.
CAPABILITY_IAM
and CAPABILITY_NAMED_IAM
Some stack templates might include resources that can affect permissions in your AWS account; for example, by creating new AWS Identity and Access Management (IAM) users. For those stacks, you must explicitly acknowledge this by specifying one of these capabilities.
The following IAM resources require you to specify either the CAPABILITY_IAM
or CAPABILITY_NAMED_IAM
capability.
If you have IAM resources, you can specify either capability.
If you have IAM resources with custom names, you must specify CAPABILITY_NAMED_IAM
.
If you don't specify either of these capabilities, AWS CloudFormation returns an InsufficientCapabilities
error.
If your stack template contains these resources, we recommend that you review all permissions associated with them and edit their permissions if necessary.
For more information, see Acknowledging IAM Resources in AWS CloudFormation Templates.
CAPABILITY_AUTO_EXPAND
Some template contain macros. Macros perform custom processing on templates; this can include simple actions like find-and-replace operations, all the way to extensive transformations of entire templates. Because of this, users typically create a change set from the processed template, so that they can review the changes resulting from the macros before actually updating the stack. If your stack template contains one or more macros, and you choose to update a stack directly from the processed template, without first reviewing the resulting changes in a change set, you must acknowledge this capability. This includes the AWS::Include and AWS::Serverless transforms, which are macros hosted by AWS CloudFormation.
If you want to update a stack from a stack template that contains macros and nested stacks, you must update the stack directly from the template using this capability.
You should only update stacks directly from a stack template that contains macros if you know what processing the macro performs.
Each macro relies on an underlying Lambda service function for processing stack templates. Be aware that the Lambda function owner can update the function operation without AWS CloudFormation being notified.
For more information, see Using AWS CloudFormation Macros to Perform Custom Processing on Templates.
In some cases, you must explicitly acknowledge that your stack template contains certain capabilities in order for AWS CloudFormation to update the stack set and its associated stack instances.
CAPABILITY_IAM
and CAPABILITY_NAMED_IAM
Some stack templates might include resources that can affect permissions in your AWS account; for example, by creating new AWS Identity and Access Management (IAM) users. For those stacks sets, you must explicitly acknowledge this by specifying one of these capabilities.
The following IAM resources require you to specify either the CAPABILITY_IAM
or CAPABILITY_NAMED_IAM
capability.
If you have IAM resources, you can specify either capability.
If you have IAM resources with custom names, you must specify CAPABILITY_NAMED_IAM
.
If you don't specify either of these capabilities, AWS CloudFormation returns an InsufficientCapabilities
error.
If your stack template contains these resources, we recommend that you review all permissions associated with them and edit their permissions if necessary.
For more information, see Acknowledging IAM Resources in AWS CloudFormation Templates.
CAPABILITY_AUTO_EXPAND
Some templates contain macros. If your stack template contains one or more macros, and you choose to update a stack directly from the processed template, without first reviewing the resulting changes in a change set, you must acknowledge this capability. For more information, see Using AWS CloudFormation Macros to Perform Custom Processing on Templates.
Stack sets do not currently support macros in stack templates. (This includes the AWS::Include and AWS::Serverless transforms, which are macros hosted by AWS CloudFormation.) Even if you specify this capability, if you include a macro in your template the stack set operation will fail.
The capabilities found within the template. If your template contains IAM resources, you must specify the CAPABILITY_IAM or CAPABILITY_NAMED_IAM value for this parameter when you use the CreateStack or UpdateStack actions with your template; otherwise, those actions return an InsufficientCapabilities error.
For more information, see Acknowledging IAM Resources in AWS CloudFormation Templates.
" } @@ -213,15 +213,20 @@ "ChangeAction": { "base": null, "refs": { - "ResourceChange$Action": "The action that AWS CloudFormation takes on the resource, such as Add
(adds a new resource), Modify
(changes a resource), or Remove
(deletes a resource).
The action that AWS CloudFormation takes on the resource, such as Add
(adds a new resource), Modify
(changes a resource), Remove
(deletes a resource), Import
(imports a resource), or Dynamic
(exact action for the resource cannot be determined).
The ID of the change set.
", + "ChangeSetSummary$ParentChangeSetId": "The parent change set ID.
", + "ChangeSetSummary$RootChangeSetId": "The root change set ID.
", "CreateChangeSetOutput$Id": "The Amazon Resource Name (ARN) of the change set.
", "DescribeChangeSetOutput$ChangeSetId": "The ARN of the change set.
", + "DescribeChangeSetOutput$ParentChangeSetId": "Specifies the change set ID of the parent change set in the current nested change set hierarchy.
", + "DescribeChangeSetOutput$RootChangeSetId": "Specifies the change set ID of the root change set in the current nested change set hierarchy.
", + "ResourceChange$ChangeSetId": "The change set ID of the nested change set.
", "Stack$ChangeSetId": "The unique ID of the change set.
" } }, @@ -830,6 +835,14 @@ "StackSetDriftDetectionDetails$InSyncStackInstancesCount": "The number of stack instances which match the expected template and parameter configuration of the stack set.
" } }, + "IncludeNestedStacks": { + "base": null, + "refs": { + "ChangeSetSummary$IncludeNestedStacks": "Specifies the current setting of IncludeNestedStacks
for the change set.
Creates a change set for the all nested stacks specified in the template. The default behavior of this action is set to False
. To include nested sets in a change set, specify True
.
Verifies if IncludeNestedStacks
is set to True
.
The template contains resources with capabilities that weren't specified in the Capabilities parameter.
", "refs": { @@ -1710,7 +1723,7 @@ "S3Url": { "base": null, "refs": { - "RegisterTypeInput$SchemaHandlerPackage": "A url to the S3 bucket containing the schema handler package that contains the schema, event handlers, and associated files for the type you want to register.
For information on generating a schema handler package for the type you want to register, see submit in the CloudFormation CLI User Guide.
As part of registering a resource provider type, CloudFormation must be able to access the S3 bucket which contains the schema handler package for that resource provider. For more information, see IAM Permissions for Registering a Resource Provider in the AWS CloudFormation User Guide.
A url to the S3 bucket containing the schema handler package that contains the schema, event handlers, and associated files for the type you want to register.
For information on generating a schema handler package for the type you want to register, see submit in the CloudFormation CLI User Guide.
The user registering the resource provider type must be able to access the the schema handler package in the S3 bucket. That is, the user needs to have GetObject permissions for the schema handler package. For more information, see Actions, Resources, and Condition Keys for Amazon S3 in the AWS Identity and Access Management User Guide.
Returns a list of SourceCredentialsInfo
objects.
Stores a resource policy for the ARN of a Project
or ReportGroup
object.
Restarts a build.
", - "RetryBuildBatch": "Restarts a batch build.
", + "RetryBuildBatch": "Restarts a failed batch build. Only batch builds that have failed can be retried.
", "StartBuild": "Starts running a build.
", "StartBuildBatch": "Starts a batch build for a project.
", "StopBuild": "Attempts to stop running a build.
", @@ -880,7 +880,7 @@ "Project$encryptionKey": "The AWS Key Management Service (AWS KMS) customer master key (CMK) to be used for encrypting the build output artifacts.
You can use a cross-account KMS key to encrypt the build output artifacts if your service role has permission to that key.
You can specify either the Amazon Resource Name (ARN) of the CMK or, if available, the CMK's alias (using the format alias/<alias-name>
).
Specifies the service role ARN for the batch build project.
", - "ProjectEnvironment$image": "The image tag or image digest that identifies the Docker image to use for this build project. Use the following formats:
For an image tag: <registry>/<repository>:<tag>
. For example, in the Docker repository that CodeBuild uses to manage its Docker images, this would be aws/codebuild/standard:4.0
. To specify the latest version of this image, this would be aws/codebuild/standard:latest
.
For an image digest: <registry>/<repository>@<digest>
. For example, to specify an image with the digest \"sha256:cbbf2f9a99b47fc460d422812b6a5adff7dfee951d8fa2e4a98caa0382cfbdbf,\" use <registry>/<repository>@sha256:cbbf2f9a99b47fc460d422812b6a5adff7dfee951d8fa2e4a98caa0382cfbdbf
.
The image tag or image digest that identifies the Docker image to use for this build project. Use the following formats:
For an image tag: <registry>/<repository>:<tag>
. For example, in the Docker repository that CodeBuild uses to manage its Docker images, this would be aws/codebuild/standard:4.0
.
For an image digest: <registry>/<repository>@<digest>
. For example, to specify an image with the digest \"sha256:cbbf2f9a99b47fc460d422812b6a5adff7dfee951d8fa2e4a98caa0382cfbdbf,\" use <registry>/<repository>@sha256:cbbf2f9a99b47fc460d422812b6a5adff7dfee951d8fa2e4a98caa0382cfbdbf
.
A JSON-formatted resource policy. For more information, see Sharing a Project and Sharing a Report Group in the AWS CodeBuild User Guide.
", "PutResourcePolicyInput$resourceArn": " The ARN of the Project
or ReportGroup
resource you want to associate with a resource policy.
If you use a LOCAL
cache, the local cache mode. You can use one or more local cache modes at the same time.
LOCAL_SOURCE_CACHE
mode caches Git metadata for primary and secondary sources. After the cache is created, subsequent builds pull only the change between commits. This mode is a good choice for projects with a clean working directory and a source that is a large Git repository. If you choose this option and your project does not use a Git repository (GitHub, GitHub Enterprise, or Bitbucket), the option is ignored.
LOCAL_DOCKER_LAYER_CACHE
mode caches existing Docker layers. This mode is a good choice for projects that build or pull large Docker images. It can prevent the performance issues caused by pulling large Docker images down from the network.
You can use a Docker layer cache in the Linux environment only.
The privileged
flag must be set so that your project has the required Docker permissions.
You should consider the security implications before you use a Docker layer cache.
LOCAL_CUSTOM_CACHE
mode caches directories you specify in the buildspec file. This mode is a good choice if your build scenario is not suited to one of the other three local cache modes. If you use a custom cache:
Only directories can be specified for caching. You cannot specify individual files.
Symlinks are used to reference cached directories.
Cached directories are linked to your build before it downloads its project sources. Cached items are overridden if a source item has the same name. Directories are specified using cache paths in the buildspec file.
An array of strings that specify the local cache modes. You can use one or more local cache modes at the same time. This is only used for LOCAL
cache types.
Possible values are:
Caches Git metadata for primary and secondary sources. After the cache is created, subsequent builds pull only the change between commits. This mode is a good choice for projects with a clean working directory and a source that is a large Git repository. If you choose this option and your project does not use a Git repository (GitHub, GitHub Enterprise, or Bitbucket), the option is ignored.
Caches existing Docker layers. This mode is a good choice for projects that build or pull large Docker images. It can prevent the performance issues caused by pulling large Docker images down from the network.
You can use a Docker layer cache in the Linux environment only.
The privileged
flag must be set so that your project has the required Docker permissions.
You should consider the security implications before you use a Docker layer cache.
Caches directories you specify in the buildspec file. This mode is a good choice if your build scenario is not suited to one of the other three local cache modes. If you use a custom cache:
Only directories can be specified for caching. You cannot specify individual files.
Symlinks are used to reference cached directories.
Cached directories are linked to your build before it downloads its project sources. Cached items are overridden if a source item has the same name. Directories are specified using cache paths in the buildspec file.
The criterion to be used to list build report groups. Valid values include:
CREATED_TIME
: List based on when each report group was created.
LAST_MODIFIED_TIME
: List based on when each report group was last changed.
NAME
: List based on each report group's name.
An identifier for this artifact definition.
", "ProjectBadge$badgeRequestUrl": "The publicly-accessible URL through which you can access the build badge for your project.
The publicly accessible URL through which you can access the build badge for your project.
", "ProjectCache$location": "Information about the cache location:
NO_CACHE
or LOCAL
: This value is ignored.
S3
: This is the S3 bucket name/prefix.
The certificate to use with this build project.
", - "ProjectFileSystemLocation$location": " A string that specifies the location of the file system created by Amazon EFS. Its format is efs-dns-name:/directory-path
. You can find the DNS name of file system when you view it in the AWS EFS console. The directory path is a path to a directory in the file system that CodeBuild mounts. For example, if the DNS name of a file system is fs-abcd1234.efs.us-west-2.amazonaws.com
, and its mount directory is my-efs-mount-directory
, then the location
is fs-abcd1234.efs.us-west-2.amazonaws.com:/my-efs-mount-directory
.
The directory path in the format efs-dns-name:/directory-path
is optional. If you do not specify a directory path, the location is only the DNS name and CodeBuild mounts the entire file system.
The location in the container where you mount the file system.
", - "ProjectFileSystemLocation$identifier": " The name used to access a file system created by Amazon EFS. CodeBuild creates an environment variable by appending the identifier
in all capital letters to CODEBUILD_
. For example, if you specify my-efs
for identifier
, a new environment variable is create named CODEBUILD_MY-EFS
.
The identifier
is used to mount your file system.
The ARN of the Amazon Simple Storage Service (Amazon S3) bucket, path prefix, and object key that contains the PEM-encoded certificate for the build project. For more information, see certificate in the AWS CodeBuild User Guide.
", + "ProjectFileSystemLocation$location": "A string that specifies the location of the file system created by Amazon EFS. Its format is efs-dns-name:/directory-path
. You can find the DNS name of file system when you view it in the AWS EFS console. The directory path is a path to a directory in the file system that CodeBuild mounts. For example, if the DNS name of a file system is fs-abcd1234.efs.us-west-2.amazonaws.com
, and its mount directory is my-efs-mount-directory
, then the location
is fs-abcd1234.efs.us-west-2.amazonaws.com:/my-efs-mount-directory
.
The directory path in the format efs-dns-name:/directory-path
is optional. If you do not specify a directory path, the location is only the DNS name and CodeBuild mounts the entire file system.
The location in the container where you mount the file system.
", + "ProjectFileSystemLocation$identifier": "The name used to access a file system created by Amazon EFS. CodeBuild creates an environment variable by appending the identifier
in all capital letters to CODEBUILD_
. For example, if you specify my_efs
for identifier
, a new environment variable is create named CODEBUILD_MY_EFS
.
The identifier
is used to mount your file system.
The mount options for a file system created by AWS EFS. The default mount options used by CodeBuild are nfsvers=4.1,rsize=1048576,wsize=1048576,hard,timeo=600,retrans=2
. For more information, see Recommended NFS Mount Options.
Information about the location of the source code to be built. Valid values include:
For source code settings that are specified in the source action of a pipeline in AWS CodePipeline, location
should not be specified. If it is specified, AWS CodePipeline ignores it. This is because AWS CodePipeline uses the settings in a pipeline's source action instead of this value.
For source code in an AWS CodeCommit repository, the HTTPS clone URL to the repository that contains the source code and the buildspec file (for example, https://git-codecommit.<region-ID>.amazonaws.com/v1/repos/<repo-name>
).
For source code in an Amazon Simple Storage Service (Amazon S3) input bucket, one of the following.
The path to the ZIP file that contains the source code (for example, <bucket-name>/<path>/<object-name>.zip
).
The path to the folder that contains the source code (for example, <bucket-name>/<path-to-source-code>/<folder>/
).
For source code in a GitHub repository, the HTTPS clone URL to the repository that contains the source and the buildspec file. You must connect your AWS account to your GitHub account. Use the AWS CodeBuild console to start creating a build project. When you use the console to connect (or reconnect) with GitHub, on the GitHub Authorize application page, for Organization access, choose Request access next to each repository you want to allow AWS CodeBuild to have access to, and then choose Authorize application. (After you have connected to your GitHub account, you do not need to finish creating the build project. You can leave the AWS CodeBuild console.) To instruct AWS CodeBuild to use this connection, in the source
object, set the auth
object's type
value to OAUTH
.
For source code in a Bitbucket repository, the HTTPS clone URL to the repository that contains the source and the buildspec file. You must connect your AWS account to your Bitbucket account. Use the AWS CodeBuild console to start creating a build project. When you use the console to connect (or reconnect) with Bitbucket, on the Bitbucket Confirm access to your account page, choose Grant access. (After you have connected to your Bitbucket account, you do not need to finish creating the build project. You can leave the AWS CodeBuild console.) To instruct AWS CodeBuild to use this connection, in the source
object, set the auth
object's type
value to OAUTH
.
The buildspec file declaration to use for the builds in this build project.
If this value is set, it can be either an inline buildspec definition, the path to an alternate buildspec file relative to the value of the built-in CODEBUILD_SRC_DIR
environment variable, or the path to an S3 bucket. The bucket must be in the same AWS Region as the build project. Specify the buildspec file using its ARN (for example, arn:aws:s3:::my-codebuild-sample2/buildspec.yml
). If this value is not provided or is set to an empty string, the source code must contain a buildspec file in its root directory. For more information, see Buildspec File Name and Storage Location.
Deletes the specified customer gateway. You must delete the VPN connection before you can delete the customer gateway.
", "DeleteDhcpOptions": "Deletes the specified set of DHCP options. You must disassociate the set of DHCP options before you can delete it. You can disassociate the set of DHCP options by associating either a new set of options or the default set of options with the VPC.
", "DeleteEgressOnlyInternetGateway": "Deletes an egress-only internet gateway.
", - "DeleteFleets": "Deletes the specified EC2 Fleet.
After you delete an EC2 Fleet, it launches no new instances. You must specify whether an EC2 Fleet should also terminate its instances. If you terminate the instances, the EC2 Fleet enters the deleted_terminating
state. Otherwise, the EC2 Fleet enters the deleted_running
state, and the instances continue to run until they are interrupted or you terminate them manually.
Deletes the specified EC2 Fleet.
After you delete an EC2 Fleet, it launches no new instances.
You must specify whether a deleted EC2 Fleet should also terminate its instances. If you choose to terminate the instances, the EC2 Fleet enters the deleted_terminating
state. Otherwise, the EC2 Fleet enters the deleted_running
state, and the instances continue to run until they are interrupted or you terminate them manually.
For instant
fleets, EC2 Fleet must terminate the instances when the fleet is deleted. A deleted instant
fleet with running instances is not supported.
Restrictions
You can delete up to 25 instant
fleets in a single request. If you exceed this number, no instant
fleets are deleted and an error is returned. There is no restriction on the number of fleets of type maintain
or request
that can be deleted in a single request.
Up to 1000 instances can be terminated in a single request to delete instant
fleets.
For more information, see Deleting an EC2 Fleet in the Amazon Elastic Compute Cloud User Guide.
", "DeleteFlowLogs": "Deletes one or more flow logs.
", "DeleteFpgaImage": "Deletes the specified Amazon FPGA Image (AFI).
", "DeleteInternetGateway": "Deletes the specified internet gateway. You must detach the internet gateway from the VPC before you can delete it.
", @@ -1272,7 +1272,7 @@ "DeleteEgressOnlyInternetGatewayRequest$DryRun": "Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation
. Otherwise, it is UnauthorizedOperation
.
Returns true
if the request succeeds; otherwise, it returns an error.
Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation
. Otherwise, it is UnauthorizedOperation
.
Indicates whether to terminate instances for an EC2 Fleet if it is deleted successfully.
", + "DeleteFleetsRequest$TerminateInstances": "Indicates whether to terminate the instances when the EC2 Fleet is deleted. The default is to terminate the instances.
To let the instances continue to run after the EC2 Fleet is deleted, specify NoTerminateInstances
. Supported only for fleets of type maintain
and request
.
For instant
fleets, you cannot specify NoTerminateInstances
. A deleted instant
fleet with running instances is not supported.
Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation
. Otherwise, it is UnauthorizedOperation
.
Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is DryRunOperation
. Otherwise, it is UnauthorizedOperation
.
Is true
if the request succeeds, and an error otherwise.
To allow EC2 Fleet to launch a replacement Spot Instance when an instance rebalance notification is emitted for an existing Spot Instance in the fleet, specify launch
. Only available for fleets of type maintain
.
When a replacement instance is launched, the instance marked for rebalance is not automatically terminated. You can terminate it, or you can wait until Amazon EC2 interrupts it. You are charged for both instances while they are running.
The replacement strategy to use. Only available for fleets of type maintain
.
To allow EC2 Fleet to launch a replacement Spot Instance when an instance rebalance notification is emitted for an existing Spot Instance in the fleet, specify launch
. You must specify a value, otherwise you get an error.
When a replacement instance is launched, the instance marked for rebalance is not automatically terminated. You can terminate it, or you can wait until Amazon EC2 interrupts it. You are charged for all instances while they are running.
To allow EC2 Fleet to launch a replacement Spot Instance when an instance rebalance notification is emitted for an existing Spot Instance in the fleet, specify launch
. Only available for fleets of type maintain
.
When a replacement instance is launched, the instance marked for rebalance is not automatically terminated. You can terminate it, or you can leave it running. You are charged for both instances while they are running.
The replacement strategy to use. Only available for fleets of type maintain
.
To allow EC2 Fleet to launch a replacement Spot Instance when an instance rebalance notification is emitted for an existing Spot Instance in the fleet, specify launch
. You must specify a value, otherwise you get an error.
When a replacement instance is launched, the instance marked for rebalance is not automatically terminated. You can terminate it, or you can leave it running. You are charged for all instances while they are running.
The replacement strategy to use. Only available for fleets of type maintain
. You must specify a value, otherwise you get an error.
To allow Spot Fleet to launch a replacement Spot Instance when an instance rebalance notification is emitted for a Spot Instance in the fleet, specify launch
.
When a replacement instance is launched, the instance marked for rebalance is not automatically terminated. You can terminate it, or you can wait until Amazon EC2 interrupts it. You are charged for all instances while they are running.
The replacement strategy to use. Only available for fleets of type maintain
. You must specify a value, otherwise you get an error.
To allow Spot Fleet to launch a replacement Spot Instance when an instance rebalance notification is emitted for a Spot Instance in the fleet, specify launch
.
When a replacement instance is launched, the instance marked for rebalance is not automatically terminated. You can terminate it, or you can leave it running. You are charged for all instances while they are running.
Deleting a Global Datastore is a two-step process:
First, you must DisassociateGlobalReplicationGroup to remove the secondary clusters in the Global Datastore.
Once the Global Datastore contains only the primary cluster, you can use DeleteGlobalReplicationGroup API to delete the Global Datastore while retainining the primary cluster using Retain…= true.
Since the Global Datastore has only a primary cluster, you can delete the Global Datastore while retaining the primary by setting RetainPrimaryCluster=true
.
When you receive a successful response from this operation, Amazon ElastiCache immediately begins deleting the selected resources; you cannot cancel or revert this operation.
", "DeleteReplicationGroup": "Deletes an existing replication group. By default, this operation deletes the entire replication group, including the primary/primaries and all of the read replicas. If the replication group has only one primary, you can optionally delete only the read replicas, while retaining the primary by setting RetainPrimaryCluster=true
.
When you receive a successful response from this operation, Amazon ElastiCache immediately begins deleting the selected resources; you cannot cancel or revert this operation.
This operation is valid for Redis only.
Deletes an existing snapshot. When you receive a successful response from this operation, ElastiCache immediately begins deleting the snapshot; you cannot cancel or revert this operation.
This operation is valid for Redis only.
For Redis engine version 6.04 onwards: Deletes a user. The user will be removed from all user groups and in turn removed from all replication groups. For more information, see Using Role Based Access Control (RBAC).
", - "DeleteUserGroup": "For Redis engine version 6.04 onwards: Deletes a ser group. The user group must first be disassociated from the replcation group before it can be deleted. For more information, see Using Role Based Access Control (RBAC).
", + "DeleteUser": "For Redis engine version 6.x onwards: Deletes a user. The user will be removed from all user groups and in turn removed from all replication groups. For more information, see Using Role Based Access Control (RBAC).
", + "DeleteUserGroup": "For Redis engine version 6.x onwards: Deletes a ser group. The user group must first be disassociated from the replcation group before it can be deleted. For more information, see Using Role Based Access Control (RBAC).
", "DescribeCacheClusters": "Returns information about all provisioned clusters if no cluster identifier is specified, or about a specific cache cluster if a cluster identifier is supplied.
By default, abbreviated information about the clusters is returned. You can use the optional ShowCacheNodeInfo flag to retrieve detailed information about the cache nodes associated with the clusters. These details include the DNS address and port for the cache node endpoint.
If the cluster is in the creating state, only cluster-level information is displayed until all of the nodes are successfully provisioned.
If the cluster is in the deleting state, only cluster-level information is displayed.
If cache nodes are currently being added to the cluster, node endpoint information and creation time for the additional nodes are not displayed until they are completely provisioned. When the cluster state is available, the cluster is ready for use.
If cache nodes are currently being removed from the cluster, no endpoint information for the removed nodes is displayed.
", "DescribeCacheEngineVersions": "Returns a list of the available cache engines and their versions.
", "DescribeCacheParameterGroups": "Returns a list of cache parameter group descriptions. If a cache parameter group name is specified, the list contains only the descriptions for that group.
", @@ -1916,7 +1916,7 @@ "CacheClusterMessage$Marker": "Provides an identifier to allow retrieval of paginated results.
", "CacheEngineVersion$Engine": "The name of the cache engine.
", "CacheEngineVersion$EngineVersion": "The version number of the cache engine.
", - "CacheEngineVersion$CacheParameterGroupFamily": "The name of the cache parameter group family associated with this cache engine.
Valid values are: memcached1.4
| memcached1.5
| redis2.6
| redis2.8
| redis3.2
| redis4.0
| redis5.0
| redis6.0
|
The name of the cache parameter group family associated with this cache engine.
Valid values are: memcached1.4
| memcached1.5
| memcached1.6
| redis2.6
| redis2.8
| redis3.2
| redis4.0
| redis5.0
| redis6.x
|
The description of the cache engine.
", "CacheEngineVersion$CacheEngineVersionDescription": "The description of the cache engine version.
", "CacheEngineVersionMessage$Marker": "Provides an identifier to allow retrieval of paginated results.
", @@ -1937,7 +1937,7 @@ "CacheNodeTypeSpecificValue$Value": "The value for the cache node type.
", "CacheNodeUpdateStatus$CacheNodeId": "The node ID of the cache cluster
", "CacheParameterGroup$CacheParameterGroupName": "The name of the cache parameter group.
", - "CacheParameterGroup$CacheParameterGroupFamily": "The name of the cache parameter group family that this cache parameter group is compatible with.
Valid values are: memcached1.4
| memcached1.5
| redis2.6
| redis2.8
| redis3.2
| redis4.0
| redis5.0
| redis6.0
|
The name of the cache parameter group family that this cache parameter group is compatible with.
Valid values are: memcached1.4
| memcached1.5
| memcached1.6
| redis2.6
| redis2.8
| redis3.2
| redis4.0
| redis5.0
| redis6.x
|
The description for this cache parameter group.
", "CacheParameterGroup$ARN": "The ARN (Amazon Resource Name) of the cache parameter group.
", "CacheParameterGroupDetails$Marker": "Provides an identifier to allow retrieval of paginated results.
", @@ -1979,7 +1979,7 @@ "CreateCacheClusterMessage$AuthToken": "Reserved parameter. The password used to access a password protected server.
Password constraints:
Must be only printable ASCII characters.
Must be at least 16 characters and no more than 128 characters in length.
The only permitted printable special characters are !, &, #, $, ^, <, >, and -. Other printable special characters cannot be used in the AUTH token.
For more information, see AUTH password at http://redis.io/commands/AUTH.
", "CreateCacheClusterMessage$PreferredOutpostArn": "The outpost ARN in which the cache cluster is created.
", "CreateCacheParameterGroupMessage$CacheParameterGroupName": "A user-specified name for the cache parameter group.
", - "CreateCacheParameterGroupMessage$CacheParameterGroupFamily": "The name of the cache parameter group family that the cache parameter group can be used with.
Valid values are: memcached1.4
| memcached1.5
| redis2.6
| redis2.8
| redis3.2
| redis4.0
| redis5.0
| redis6.0
|
The name of the cache parameter group family that the cache parameter group can be used with.
Valid values are: memcached1.4
| memcached1.5
| memcached1.6
| redis2.6
| redis2.8
| redis3.2
| redis4.0
| redis5.0
| redis6.x
|
A user-specified description for the cache parameter group.
", "CreateCacheSecurityGroupMessage$CacheSecurityGroupName": "A name for the cache security group. This value is stored as a lowercase string.
Constraints: Must contain no more than 255 alphanumeric characters. Cannot be the word \"Default\".
Example: mysecuritygroup
A description for the cache security group.
", @@ -2025,7 +2025,7 @@ "DescribeCacheClustersMessage$Marker": "An optional marker returned from a prior request. Use this marker for pagination of results from this operation. If this parameter is specified, the response includes only records beyond the marker, up to the value specified by MaxRecords
.
The cache engine to return. Valid values: memcached
| redis
The cache engine version to return.
Example: 1.4.14
The name of a specific cache parameter group family to return details for.
Valid values are: memcached1.4
| memcached1.5
| redis2.6
| redis2.8
| redis3.2
| redis4.0
| redis5.0
| redis6.0
|
Constraints:
Must be 1 to 255 alphanumeric characters
First character must be a letter
Cannot end with a hyphen or contain two consecutive hyphens
The name of a specific cache parameter group family to return details for.
Valid values are: memcached1.4
| memcached1.5
| memcached1.6
| redis2.6
| redis2.8
| redis3.2
| redis4.0
| redis5.0
| redis6.x
|
Constraints:
Must be 1 to 255 alphanumeric characters
First character must be a letter
Cannot end with a hyphen or contain two consecutive hyphens
An optional marker returned from a prior request. Use this marker for pagination of results from this operation. If this parameter is specified, the response includes only records beyond the marker, up to the value specified by MaxRecords
.
The name of a specific cache parameter group to return details for.
", "DescribeCacheParameterGroupsMessage$Marker": "An optional marker returned from a prior request. Use this marker for pagination of results from this operation. If this parameter is specified, the response includes only records beyond the marker, up to the value specified by MaxRecords
.
An optional marker returned from a prior request. Use this marker for pagination of results from this operation. If this parameter is specified, the response includes only records beyond the marker, up to the value specified by MaxRecords
.
The name of the cache subnet group to return details for.
", "DescribeCacheSubnetGroupsMessage$Marker": "An optional marker returned from a prior request. Use this marker for pagination of results from this operation. If this parameter is specified, the response includes only records beyond the marker, up to the value specified by MaxRecords
.
The name of the cache parameter group family.
Valid values are: memcached1.4
| memcached1.5
| redis2.6
| redis2.8
| redis3.2
| redis4.0
| redis5.0
| redis6.0
|
The name of the cache parameter group family.
Valid values are: memcached1.4
| memcached1.5
| memcached1.6
| redis2.6
| redis2.8
| redis3.2
| redis4.0
| redis5.0
| redis6.x
|
An optional marker returned from a prior request. Use this marker for pagination of results from this operation. If this parameter is specified, the response includes only records beyond the marker, up to the value specified by MaxRecords
.
The identifier of the event source for which events are returned. If not specified, all sources are included in the response.
", "DescribeEventsMessage$Marker": "An optional marker returned from a prior request. Use this marker for pagination of results from this operation. If this parameter is specified, the response includes only records beyond the marker, up to the value specified by MaxRecords
.
The name of the Amazon EC2 security group.
", "EC2SecurityGroup$EC2SecurityGroupOwnerId": "The AWS account ID of the Amazon EC2 security group owner.
", "Endpoint$Address": "The DNS hostname of the cache node.
", - "EngineDefaults$CacheParameterGroupFamily": "Specifies the name of the cache parameter group family to which the engine default parameters apply.
Valid values are: memcached1.4
| memcached1.5
| redis2.6
| redis2.8
| redis3.2
| redis4.0
| redis5.0
| redis6.0
|
Specifies the name of the cache parameter group family to which the engine default parameters apply.
Valid values are: memcached1.4
| memcached1.5
| memcached1.6
| redis2.6
| redis2.8
| redis3.2
| redis4.0
| redis5.0
| redis6.x
|
Provides an identifier to allow retrieval of paginated results.
", "Event$SourceIdentifier": "The identifier for the source of the event. For example, if the event occurred at the cluster level, the identifier would be the name of the cluster.
", "Event$Message": "The text of the event.
", diff --git a/aws-sdk-core/apis/outposts/2019-12-03/api-2.json b/aws-sdk-core/apis/outposts/2019-12-03/api-2.json index 5f9d4a99305..3627aa7edc4 100644 --- a/aws-sdk-core/apis/outposts/2019-12-03/api-2.json +++ b/aws-sdk-core/apis/outposts/2019-12-03/api-2.json @@ -146,7 +146,10 @@ }, "CreateOutpostInput":{ "type":"structure", - "required":["SiteId"], + "required":[ + "Name", + "SiteId" + ], "members":{ "Name":{"shape":"OutpostName"}, "Description":{"shape":"OutpostDescription"}, diff --git a/aws-sdk-core/apis/s3control/2018-08-20/api-2.json b/aws-sdk-core/apis/s3control/2018-08-20/api-2.json index 13d185860bd..4b8e13dffb9 100644 --- a/aws-sdk-core/apis/s3control/2018-08-20/api-2.json +++ b/aws-sdk-core/apis/s3control/2018-08-20/api-2.json @@ -158,6 +158,29 @@ "hostPrefix":"{AccountId}." } }, + "DeleteStorageLensConfiguration":{ + "name":"DeleteStorageLensConfiguration", + "http":{ + "method":"DELETE", + "requestUri":"/v20180820/storagelens/{storagelensid}" + }, + "input":{"shape":"DeleteStorageLensConfigurationRequest"}, + "endpoint":{ + "hostPrefix":"{AccountId}." + } + }, + "DeleteStorageLensConfigurationTagging":{ + "name":"DeleteStorageLensConfigurationTagging", + "http":{ + "method":"DELETE", + "requestUri":"/v20180820/storagelens/{storagelensid}/tagging" + }, + "input":{"shape":"DeleteStorageLensConfigurationTaggingRequest"}, + "output":{"shape":"DeleteStorageLensConfigurationTaggingResult"}, + "endpoint":{ + "hostPrefix":"{AccountId}." + } + }, "DescribeJob":{ "name":"DescribeJob", "http":{ @@ -292,6 +315,30 @@ "hostPrefix":"{AccountId}." } }, + "GetStorageLensConfiguration":{ + "name":"GetStorageLensConfiguration", + "http":{ + "method":"GET", + "requestUri":"/v20180820/storagelens/{storagelensid}" + }, + "input":{"shape":"GetStorageLensConfigurationRequest"}, + "output":{"shape":"GetStorageLensConfigurationResult"}, + "endpoint":{ + "hostPrefix":"{AccountId}." + } + }, + "GetStorageLensConfigurationTagging":{ + "name":"GetStorageLensConfigurationTagging", + "http":{ + "method":"GET", + "requestUri":"/v20180820/storagelens/{storagelensid}/tagging" + }, + "input":{"shape":"GetStorageLensConfigurationTaggingRequest"}, + "output":{"shape":"GetStorageLensConfigurationTaggingResult"}, + "endpoint":{ + "hostPrefix":"{AccountId}." + } + }, "ListAccessPoints":{ "name":"ListAccessPoints", "http":{ @@ -333,6 +380,18 @@ "hostPrefix":"{AccountId}." } }, + "ListStorageLensConfigurations":{ + "name":"ListStorageLensConfigurations", + "http":{ + "method":"GET", + "requestUri":"/v20180820/storagelens" + }, + "input":{"shape":"ListStorageLensConfigurationsRequest"}, + "output":{"shape":"ListStorageLensConfigurationsResult"}, + "endpoint":{ + "hostPrefix":"{AccountId}." + } + }, "PutAccessPointPolicy":{ "name":"PutAccessPointPolicy", "http":{ @@ -421,6 +480,37 @@ "hostPrefix":"{AccountId}." } }, + "PutStorageLensConfiguration":{ + "name":"PutStorageLensConfiguration", + "http":{ + "method":"PUT", + "requestUri":"/v20180820/storagelens/{storagelensid}" + }, + "input":{ + "shape":"PutStorageLensConfigurationRequest", + "locationName":"PutStorageLensConfigurationRequest", + "xmlNamespace":{"uri":"http://awss3control.amazonaws.com/doc/2018-08-20/"} + }, + "endpoint":{ + "hostPrefix":"{AccountId}." + } + }, + "PutStorageLensConfigurationTagging":{ + "name":"PutStorageLensConfigurationTagging", + "http":{ + "method":"PUT", + "requestUri":"/v20180820/storagelens/{storagelensid}/tagging" + }, + "input":{ + "shape":"PutStorageLensConfigurationTaggingRequest", + "locationName":"PutStorageLensConfigurationTaggingRequest", + "xmlNamespace":{"uri":"http://awss3control.amazonaws.com/doc/2018-08-20/"} + }, + "output":{"shape":"PutStorageLensConfigurationTaggingResult"}, + "endpoint":{ + "hostPrefix":"{AccountId}." + } + }, "UpdateJobPriority":{ "name":"UpdateJobPriority", "http":{ @@ -498,6 +588,26 @@ "max":64, "pattern":"^\\d{12}$" }, + "AccountLevel":{ + "type":"structure", + "required":["BucketLevel"], + "members":{ + "ActivityMetrics":{"shape":"ActivityMetrics"}, + "BucketLevel":{"shape":"BucketLevel"} + } + }, + "ActivityMetrics":{ + "type":"structure", + "members":{ + "IsEnabled":{"shape":"IsEnabled"} + } + }, + "AwsOrgArn":{ + "type":"string", + "max":1024, + "min":1, + "pattern":"arn:[a-z\\-]+:organizations::\\d{12}:organization\\/o-[a-z0-9]{10,32}" + }, "BadRequestException":{ "type":"structure", "members":{ @@ -527,6 +637,13 @@ "authenticated-read" ] }, + "BucketLevel":{ + "type":"structure", + "members":{ + "ActivityMetrics":{"shape":"ActivityMetrics"}, + "PrefixLevel":{"shape":"PrefixLevel"} + } + }, "BucketLocationConstraint":{ "type":"string", "enum":[ @@ -548,8 +665,22 @@ "max":255, "min":3 }, + "Buckets":{ + "type":"list", + "member":{ + "shape":"S3BucketArnString", + "locationName":"Arn" + } + }, + "ConfigId":{ + "type":"string", + "max":64, + "min":1, + "pattern":"[a-zA-Z0-9\\-\\_\\.]+" + }, "ConfirmRemoveSelfBucketAccess":{"type":"boolean"}, "ConfirmationRequired":{"type":"boolean"}, + "ContinuationToken":{"type":"string"}, "CreateAccessPointRequest":{ "type":"structure", "required":[ @@ -859,6 +990,51 @@ } } }, + "DeleteStorageLensConfigurationRequest":{ + "type":"structure", + "required":[ + "ConfigId", + "AccountId" + ], + "members":{ + "ConfigId":{ + "shape":"ConfigId", + "location":"uri", + "locationName":"storagelensid" + }, + "AccountId":{ + "shape":"AccountId", + "hostLabel":true, + "location":"header", + "locationName":"x-amz-account-id" + } + } + }, + "DeleteStorageLensConfigurationTaggingRequest":{ + "type":"structure", + "required":[ + "ConfigId", + "AccountId" + ], + "members":{ + "ConfigId":{ + "shape":"ConfigId", + "location":"uri", + "locationName":"storagelensid" + }, + "AccountId":{ + "shape":"AccountId", + "hostLabel":true, + "location":"header", + "locationName":"x-amz-account-id" + } + } + }, + "DeleteStorageLensConfigurationTaggingResult":{ + "type":"structure", + "members":{ + } + }, "DescribeJobRequest":{ "type":"structure", "required":[ @@ -890,6 +1066,13 @@ "max":1024, "min":1 }, + "Exclude":{ + "type":"structure", + "members":{ + "Buckets":{"shape":"Buckets"}, + "Regions":{"shape":"Regions"} + } + }, "ExpirationStatus":{ "type":"string", "enum":[ @@ -898,6 +1081,13 @@ ] }, "ExpiredObjectDeleteMarker":{"type":"boolean"}, + "Format":{ + "type":"string", + "enum":[ + "CSV", + "Parquet" + ] + }, "FunctionArnString":{ "type":"string", "max":1024, @@ -1139,6 +1329,59 @@ } } }, + "GetStorageLensConfigurationRequest":{ + "type":"structure", + "required":[ + "ConfigId", + "AccountId" + ], + "members":{ + "ConfigId":{ + "shape":"ConfigId", + "location":"uri", + "locationName":"storagelensid" + }, + "AccountId":{ + "shape":"AccountId", + "hostLabel":true, + "location":"header", + "locationName":"x-amz-account-id" + } + } + }, + "GetStorageLensConfigurationResult":{ + "type":"structure", + "members":{ + "StorageLensConfiguration":{"shape":"StorageLensConfiguration"} + }, + "payload":"StorageLensConfiguration" + }, + "GetStorageLensConfigurationTaggingRequest":{ + "type":"structure", + "required":[ + "ConfigId", + "AccountId" + ], + "members":{ + "ConfigId":{ + "shape":"ConfigId", + "location":"uri", + "locationName":"storagelensid" + }, + "AccountId":{ + "shape":"AccountId", + "hostLabel":true, + "location":"header", + "locationName":"x-amz-account-id" + } + } + }, + "GetStorageLensConfigurationTaggingResult":{ + "type":"structure", + "members":{ + "Tags":{"shape":"StorageLensTags"} + } + }, "GrantFullControl":{"type":"string"}, "GrantRead":{"type":"string"}, "GrantReadACP":{"type":"string"}, @@ -1158,6 +1401,13 @@ }, "exception":true }, + "Include":{ + "type":"structure", + "members":{ + "Buckets":{"shape":"Buckets"}, + "Regions":{"shape":"Regions"} + } + }, "InternalServiceException":{ "type":"structure", "members":{ @@ -1180,6 +1430,7 @@ }, "exception":true }, + "IsEnabled":{"type":"boolean"}, "IsPublic":{"type":"boolean"}, "JobArn":{ "type":"string", @@ -1650,6 +1901,44 @@ "NextToken":{"shape":"NonEmptyMaxLength1024String"} } }, + "ListStorageLensConfigurationEntry":{ + "type":"structure", + "required":[ + "Id", + "StorageLensArn", + "HomeRegion" + ], + "members":{ + "Id":{"shape":"ConfigId"}, + "StorageLensArn":{"shape":"StorageLensArn"}, + "HomeRegion":{"shape":"S3AWSRegion"}, + "IsEnabled":{"shape":"IsEnabled"} + } + }, + "ListStorageLensConfigurationsRequest":{ + "type":"structure", + "required":["AccountId"], + "members":{ + "AccountId":{ + "shape":"AccountId", + "hostLabel":true, + "location":"header", + "locationName":"x-amz-account-id" + }, + "NextToken":{ + "shape":"ContinuationToken", + "location":"querystring", + "locationName":"nextToken" + } + } + }, + "ListStorageLensConfigurationsResult":{ + "type":"structure", + "members":{ + "NextToken":{"shape":"ContinuationToken"}, + "StorageLensConfigurationList":{"shape":"StorageLensConfigurationList"} + } + }, "Location":{"type":"string"}, "MaxLength1024String":{ "type":"string", @@ -1660,6 +1949,11 @@ "max":1000, "min":0 }, + "MinStorageBytesPercentage":{ + "type":"double", + "max":100, + "min":0.1 + }, "NetworkOrigin":{ "type":"string", "enum":[ @@ -1736,6 +2030,10 @@ "S3PutObjectRetention" ] }, + "OutputSchemaVersion":{ + "type":"string", + "enum":["V_1"] + }, "Policy":{"type":"string"}, "PolicyStatus":{ "type":"structure", @@ -1747,6 +2045,20 @@ } }, "Prefix":{"type":"string"}, + "PrefixLevel":{ + "type":"structure", + "required":["StorageMetrics"], + "members":{ + "StorageMetrics":{"shape":"PrefixLevelStorageMetrics"} + } + }, + "PrefixLevelStorageMetrics":{ + "type":"structure", + "members":{ + "IsEnabled":{"shape":"IsEnabled"}, + "SelectionCriteria":{"shape":"SelectionCriteria"} + } + }, "PublicAccessBlockConfiguration":{ "type":"structure", "members":{ @@ -1919,6 +2231,56 @@ }, "payload":"PublicAccessBlockConfiguration" }, + "PutStorageLensConfigurationRequest":{ + "type":"structure", + "required":[ + "ConfigId", + "AccountId", + "StorageLensConfiguration" + ], + "members":{ + "ConfigId":{ + "shape":"ConfigId", + "location":"uri", + "locationName":"storagelensid" + }, + "AccountId":{ + "shape":"AccountId", + "hostLabel":true, + "location":"header", + "locationName":"x-amz-account-id" + }, + "StorageLensConfiguration":{"shape":"StorageLensConfiguration"}, + "Tags":{"shape":"StorageLensTags"} + } + }, + "PutStorageLensConfigurationTaggingRequest":{ + "type":"structure", + "required":[ + "ConfigId", + "AccountId", + "Tags" + ], + "members":{ + "ConfigId":{ + "shape":"ConfigId", + "location":"uri", + "locationName":"storagelensid" + }, + "AccountId":{ + "shape":"AccountId", + "hostLabel":true, + "location":"header", + "locationName":"x-amz-account-id" + }, + "Tags":{"shape":"StorageLensTags"} + } + }, + "PutStorageLensConfigurationTaggingResult":{ + "type":"structure", + "members":{ + } + }, "RegionalBucket":{ "type":"structure", "required":[ @@ -1941,6 +2303,13 @@ "locationName":"RegionalBucket" } }, + "Regions":{ + "type":"list", + "member":{ + "shape":"S3AWSRegion", + "locationName":"Region" + } + }, "ReportPrefixString":{ "type":"string", "max":512, @@ -1953,6 +2322,12 @@ "Ready" ] }, + "S3AWSRegion":{ + "type":"string", + "max":30, + "min":5, + "pattern":"[a-z0-9\\-]+" + }, "S3AccessControlList":{ "type":"structure", "required":["Owner"], @@ -1985,6 +2360,23 @@ "min":1, "pattern":"arn:[^:]+:s3:.*" }, + "S3BucketDestination":{ + "type":"structure", + "required":[ + "Format", + "OutputSchemaVersion", + "AccountId", + "Arn" + ], + "members":{ + "Format":{"shape":"Format"}, + "OutputSchemaVersion":{"shape":"OutputSchemaVersion"}, + "AccountId":{"shape":"AccountId"}, + "Arn":{"shape":"S3BucketArnString"}, + "Prefix":{"shape":"Prefix"}, + "Encryption":{"shape":"StorageLensDataExportEncryption"} + } + }, "S3CannedAccessControlList":{ "type":"string", "enum":[ @@ -2239,7 +2631,116 @@ "value":{"shape":"MaxLength1024String"}, "max":8192 }, + "SSEKMS":{ + "type":"structure", + "required":["KeyId"], + "members":{ + "KeyId":{"shape":"SSEKMSKeyId"} + }, + "locationName":"SSE-KMS" + }, + "SSEKMSKeyId":{"type":"string"}, + "SSES3":{ + "type":"structure", + "members":{ + }, + "locationName":"SSE-S3" + }, + "SelectionCriteria":{ + "type":"structure", + "members":{ + "Delimiter":{"shape":"StorageLensPrefixLevelDelimiter"}, + "MaxDepth":{"shape":"StorageLensPrefixLevelMaxDepth"}, + "MinStorageBytesPercentage":{"shape":"MinStorageBytesPercentage"} + } + }, "Setting":{"type":"boolean"}, + "StorageLensArn":{ + "type":"string", + "max":1024, + "min":1, + "pattern":"arn:[a-z\\-]+:s3:[a-z0-9\\-]+:\\d{12}:storage\\-lens\\/.*" + }, + "StorageLensAwsOrg":{ + "type":"structure", + "required":["Arn"], + "members":{ + "Arn":{"shape":"AwsOrgArn"} + } + }, + "StorageLensConfiguration":{ + "type":"structure", + "required":[ + "Id", + "AccountLevel", + "IsEnabled" + ], + "members":{ + "Id":{"shape":"ConfigId"}, + "AccountLevel":{"shape":"AccountLevel"}, + "Include":{"shape":"Include"}, + "Exclude":{"shape":"Exclude"}, + "DataExport":{"shape":"StorageLensDataExport"}, + "IsEnabled":{"shape":"IsEnabled"}, + "AwsOrg":{"shape":"StorageLensAwsOrg"}, + "StorageLensArn":{"shape":"StorageLensArn"} + } + }, + "StorageLensConfigurationList":{ + "type":"list", + "member":{ + "shape":"ListStorageLensConfigurationEntry", + "locationName":"StorageLensConfiguration" + }, + "flattened":true + }, + "StorageLensDataExport":{ + "type":"structure", + "required":["S3BucketDestination"], + "members":{ + "S3BucketDestination":{"shape":"S3BucketDestination"} + } + }, + "StorageLensDataExportEncryption":{ + "type":"structure", + "members":{ + "SSES3":{ + "shape":"SSES3", + "locationName":"SSE-S3" + }, + "SSEKMS":{ + "shape":"SSEKMS", + "locationName":"SSE-KMS" + } + } + }, + "StorageLensPrefixLevelDelimiter":{ + "type":"string", + "max":1 + }, + "StorageLensPrefixLevelMaxDepth":{ + "type":"integer", + "max":10, + "min":1 + }, + "StorageLensTag":{ + "type":"structure", + "required":[ + "Key", + "Value" + ], + "members":{ + "Key":{"shape":"TagKeyString"}, + "Value":{"shape":"TagValueString"} + } + }, + "StorageLensTags":{ + "type":"list", + "member":{ + "shape":"StorageLensTag", + "locationName":"Tag" + } + }, "StringForNextToken":{ "type":"string", "max":1024, diff --git a/aws-sdk-core/apis/s3control/2018-08-20/docs-2.json b/aws-sdk-core/apis/s3control/2018-08-20/docs-2.json index 4f92bc1f086..d447b1bf062 100644 --- a/aws-sdk-core/apis/s3control/2018-08-20/docs-2.json +++ b/aws-sdk-core/apis/s3control/2018-08-20/docs-2.json @@ -2,36 +2,43 @@ "version": "2.0", "service": "AWS S3 Control provides access to Amazon S3 control plane operations.
", "operations": { - "CreateAccessPoint": "Creates an access point and associates it with the specified bucket. For more information, see Managing Data Access with Amazon S3 Access Points in the Amazon Simple Storage Service Developer Guide.
Using this action with Amazon S3 on Outposts
This action:
Requires a virtual private cloud (VPC) configuration as S3 on Outposts only supports VPC style access points.
Does not support ACL on S3 on Outposts buckets.
Does not support Public Access on S3 on Outposts buckets.
Does not support object lock for S3 on Outposts buckets.
For more information, see Using Amazon S3 on Outposts in the Amazon Simple Storage Service Developer Guide .
All Amazon S3 on Outposts REST API requests for this action require an additional parameter of outpost-id to be passed with the request and an S3 on Outposts endpoint hostname prefix instead of s3-control. For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and the outpost-id derived using the access point ARN, see the Example section below.
The following actions are related to CreateAccessPoint
:
This API operation creates an Amazon S3 on Outposts bucket. To create an S3 bucket, see Create Bucket in the Amazon Simple Storage Service API.
Creates a new Outposts bucket. By creating the bucket, you become the bucket owner. To create an Outposts bucket, you must have S3 on Outposts. For more information, see Using Amazon S3 on Outposts in Amazon Simple Storage Service Developer Guide.
Not every string is an acceptable bucket name. For information on bucket naming restrictions, see Working with Amazon S3 Buckets.
S3 on Outposts buckets do not support
ACLs. Instead, configure access point policies to manage access to buckets.
Public access.
Object Lock
Bucket Location constraint
For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and outpost-id in your API request, see the Example section below.
The following actions are related to CreateBucket
for Amazon S3 on Outposts:
S3 Batch Operations performs large-scale Batch Operations on Amazon S3 objects. Batch Operations can run a single operation or action on lists of Amazon S3 objects that you specify. For more information, see S3 Batch Operations in the Amazon Simple Storage Service Developer Guide.
This operation creates a S3 Batch Operations job.
Related actions include:
", - "DeleteAccessPoint": "Deletes the specified access point.
All Amazon S3 on Outposts REST API requests for this action require an additional parameter of outpost-id to be passed with the request and an S3 on Outposts endpoint hostname prefix instead of s3-control. For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and the outpost-id derived using the access point ARN, see the ARN, see the Example section below.
The following actions are related to DeleteAccessPoint
:
Deletes the access point policy for the specified access point.
All Amazon S3 on Outposts REST API requests for this action require an additional parameter of outpost-id to be passed with the request and an S3 on Outposts endpoint hostname prefix instead of s3-control. For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and the outpost-id derived using the access point ARN, see the Example section below.
The following actions are related to DeleteAccessPointPolicy
:
This API operation deletes an Amazon S3 on Outposts bucket. To delete an S3 bucket, see DeleteBucket in the Amazon Simple Storage Service API.
Deletes the Amazon S3 on Outposts bucket. All objects (including all object versions and delete markers) in the bucket must be deleted before the bucket itself can be deleted. For more information, see Using Amazon S3 on Outposts in Amazon Simple Storage Service Developer Guide.
All Amazon S3 on Outposts REST API requests for this action require an additional parameter of outpost-id to be passed with the request and an S3 on Outposts endpoint hostname prefix instead of s3-control. For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and the outpost-id derived using the access point ARN, see the Example section below.
Related Resources
", - "DeleteBucketLifecycleConfiguration": "This API action deletes an Amazon S3 on Outposts bucket's lifecycle configuration. To delete an S3 bucket's lifecycle configuration, see DeleteBucketLifecycle in the Amazon Simple Storage Service API.
Deletes the lifecycle configuration from the specified Outposts bucket. Amazon S3 on Outposts removes all the lifecycle configuration rules in the lifecycle subresource associated with the bucket. Your objects never expire, and Amazon S3 on Outposts no longer automatically deletes any objects on the basis of rules contained in the deleted lifecycle configuration. For more information, see Using Amazon S3 on Outposts in Amazon Simple Storage Service Developer Guide.
To use this operation, you must have permission to perform the s3outposts:DeleteLifecycleConfiguration
action. By default, the bucket owner has this permission and the Outposts bucket owner can grant this permission to others.
All Amazon S3 on Outposts REST API requests for this action require an additional parameter of outpost-id to be passed with the request and an S3 on Outposts endpoint hostname prefix instead of s3-control. For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and the outpost-id derived using the access point ARN, see the Example section below.
For more information about object expiration, see Elements to Describe Lifecycle Actions.
Related actions include:
", - "DeleteBucketPolicy": "This API operation deletes an Amazon S3 on Outposts bucket policy. To delete an S3 bucket policy, see DeleteBucketPolicy in the Amazon Simple Storage Service API.
This implementation of the DELETE operation uses the policy subresource to delete the policy of a specified Amazon S3 on Outposts bucket. If you are using an identity other than the root user of the AWS account that owns the bucket, the calling identity must have the s3outposts:DeleteBucketPolicy
permissions on the specified Outposts bucket and belong to the bucket owner's account to use this operation. For more information, see Using Amazon S3 on Outposts in Amazon Simple Storage Service Developer Guide.
If you don't have DeleteBucketPolicy
permissions, Amazon S3 returns a 403 Access Denied
error. If you have the correct permissions, but you're not using an identity that belongs to the bucket owner's account, Amazon S3 returns a 405 Method Not Allowed
error.
As a security precaution, the root user of the AWS account that owns a bucket can always use this operation, even if the policy explicitly denies the root user the ability to perform this action.
For more information about bucket policies, see Using Bucket Policies and User Policies.
All Amazon S3 on Outposts REST API requests for this action require an additional parameter of outpost-id to be passed with the request and an S3 on Outposts endpoint hostname prefix instead of s3-control. For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and the outpost-id derived using the access point ARN, see the Example section below.
The following actions are related to DeleteBucketPolicy
:
This API operation deletes an Amazon S3 on Outposts bucket's tags. To delete an S3 bucket tags, see DeleteBucketTagging in the Amazon Simple Storage Service API.
Deletes the tags from the Outposts bucket. For more information, see Using Amazon S3 on Outposts in Amazon Simple Storage Service Developer Guide.
To use this operation, you must have permission to perform the PutBucketTagging
action. By default, the bucket owner has this permission and can grant this permission to others.
All Amazon S3 on Outposts REST API requests for this action require an additional parameter of outpost-id to be passed with the request and an S3 on Outposts endpoint hostname prefix instead of s3-control. For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and the outpost-id derived using the access point ARN, see the Example section below.
The following actions are related to DeleteBucketTagging
:
Creates an access point and associates it with the specified bucket. For more information, see Managing Data Access with Amazon S3 Access Points in the Amazon Simple Storage Service Developer Guide.
Using this action with Amazon S3 on Outposts
This action:
Requires a virtual private cloud (VPC) configuration as S3 on Outposts only supports VPC style access points.
Does not support ACL on S3 on Outposts buckets.
Does not support Public Access on S3 on Outposts buckets.
Does not support object lock for S3 on Outposts buckets.
For more information, see Using Amazon S3 on Outposts in the Amazon Simple Storage Service Developer Guide .
All Amazon S3 on Outposts REST API requests for this action require an additional parameter of x-amz-outpost-id
to be passed with the request and an S3 on Outposts endpoint hostname prefix instead of s3-control
. For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and the x-amz-outpost-id
derived using the access point ARN, see the Examples section.
The following actions are related to CreateAccessPoint
:
This API operation creates an Amazon S3 on Outposts bucket. To create an S3 bucket, see Create Bucket in the Amazon Simple Storage Service API.
Creates a new Outposts bucket. By creating the bucket, you become the bucket owner. To create an Outposts bucket, you must have S3 on Outposts. For more information, see Using Amazon S3 on Outposts in Amazon Simple Storage Service Developer Guide.
Not every string is an acceptable bucket name. For information on bucket naming restrictions, see Working with Amazon S3 Buckets.
S3 on Outposts buckets do not support
ACLs. Instead, configure access point policies to manage access to buckets.
Public access.
Object Lock
Bucket Location constraint
For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and x-amz-outpost-id
in your API request, see the Examples section.
The following actions are related to CreateBucket
for Amazon S3 on Outposts:
S3 Batch Operations performs large-scale Batch Operations on Amazon S3 objects. Batch Operations can run a single operation or action on lists of Amazon S3 objects that you specify. For more information, see S3 Batch Operations in the Amazon Simple Storage Service Developer Guide.
This operation creates an S3 Batch Operations job.
Related actions include:
", + "DeleteAccessPoint": "Deletes the specified access point.
All Amazon S3 on Outposts REST API requests for this action require an additional parameter of x-amz-outpost-id
to be passed with the request and an S3 on Outposts endpoint hostname prefix instead of s3-control
. For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and the x-amz-outpost-id
derived using the access point ARN, see the Examples section.
The following actions are related to DeleteAccessPoint
:
Deletes the access point policy for the specified access point.
All Amazon S3 on Outposts REST API requests for this action require an additional parameter of x-amz-outpost-id
to be passed with the request and an S3 on Outposts endpoint hostname prefix instead of s3-control
. For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and the x-amz-outpost-id
derived using the access point ARN, see the Examples section.
The following actions are related to DeleteAccessPointPolicy
:
This API operation deletes an Amazon S3 on Outposts bucket. To delete an S3 bucket, see DeleteBucket in the Amazon Simple Storage Service API.
Deletes the Amazon S3 on Outposts bucket. All objects (including all object versions and delete markers) in the bucket must be deleted before the bucket itself can be deleted. For more information, see Using Amazon S3 on Outposts in Amazon Simple Storage Service Developer Guide.
All Amazon S3 on Outposts REST API requests for this action require an additional parameter of x-amz-outpost-id
to be passed with the request and an S3 on Outposts endpoint hostname prefix instead of s3-control
. For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and the x-amz-outpost-id
derived using the access point ARN, see the Examples section.
Related Resources
", + "DeleteBucketLifecycleConfiguration": "This API action deletes an Amazon S3 on Outposts bucket's lifecycle configuration. To delete an S3 bucket's lifecycle configuration, see DeleteBucketLifecycle in the Amazon Simple Storage Service API.
Deletes the lifecycle configuration from the specified Outposts bucket. Amazon S3 on Outposts removes all the lifecycle configuration rules in the lifecycle subresource associated with the bucket. Your objects never expire, and Amazon S3 on Outposts no longer automatically deletes any objects on the basis of rules contained in the deleted lifecycle configuration. For more information, see Using Amazon S3 on Outposts in Amazon Simple Storage Service Developer Guide.
To use this operation, you must have permission to perform the s3-outposts:DeleteLifecycleConfiguration
action. By default, the bucket owner has this permission and the Outposts bucket owner can grant this permission to others.
All Amazon S3 on Outposts REST API requests for this action require an additional parameter of x-amz-outpost-id
to be passed with the request and an S3 on Outposts endpoint hostname prefix instead of s3-control
. For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and the x-amz-outpost-id
derived using the access point ARN, see the Examples section.
For more information about object expiration, see Elements to Describe Lifecycle Actions.
Related actions include:
", + "DeleteBucketPolicy": "This API operation deletes an Amazon S3 on Outposts bucket policy. To delete an S3 bucket policy, see DeleteBucketPolicy in the Amazon Simple Storage Service API.
This implementation of the DELETE operation uses the policy subresource to delete the policy of a specified Amazon S3 on Outposts bucket. If you are using an identity other than the root user of the AWS account that owns the bucket, the calling identity must have the s3-outposts:DeleteBucketPolicy
permissions on the specified Outposts bucket and belong to the bucket owner's account to use this operation. For more information, see Using Amazon S3 on Outposts in Amazon Simple Storage Service Developer Guide.
If you don't have DeleteBucketPolicy
permissions, Amazon S3 returns a 403 Access Denied
error. If you have the correct permissions, but you're not using an identity that belongs to the bucket owner's account, Amazon S3 returns a 405 Method Not Allowed
error.
As a security precaution, the root user of the AWS account that owns a bucket can always use this operation, even if the policy explicitly denies the root user the ability to perform this action.
For more information about bucket policies, see Using Bucket Policies and User Policies.
All Amazon S3 on Outposts REST API requests for this action require an additional parameter of x-amz-outpost-id
to be passed with the request and an S3 on Outposts endpoint hostname prefix instead of s3-control
. For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and the x-amz-outpost-id
derived using the access point ARN, see the Examples section.
The following actions are related to DeleteBucketPolicy
:
This operation deletes an Amazon S3 on Outposts bucket's tags. To delete an S3 bucket tags, see DeleteBucketTagging in the Amazon Simple Storage Service API.
Deletes the tags from the Outposts bucket. For more information, see Using Amazon S3 on Outposts in Amazon Simple Storage Service Developer Guide.
To use this operation, you must have permission to perform the PutBucketTagging
action. By default, the bucket owner has this permission and can grant this permission to others.
All Amazon S3 on Outposts REST API requests for this action require an additional parameter of x-amz-outpost-id
to be passed with the request and an S3 on Outposts endpoint hostname prefix instead of s3-control
. For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and the x-amz-outpost-id
derived using the access point ARN, see the Examples section.
The following actions are related to DeleteBucketTagging
:
Removes the entire tag set from the specified S3 Batch Operations job. To use this operation, you must have permission to perform the s3:DeleteJobTagging
action. For more information, see Controlling access and labeling jobs using tags in the Amazon Simple Storage Service Developer Guide.
Related actions include:
", "DeletePublicAccessBlock": "Removes the PublicAccessBlock
configuration for an AWS account. For more information, see Using Amazon S3 block public access.
Related actions include:
", + "DeleteStorageLensConfiguration": "Deletes the Amazon S3 Storage Lens configuration. For more information about S3 Storage Lens, see Working with Amazon S3 Storage Lens in the Amazon Simple Storage Service Developer Guide.
To use this action, you must have permission to perform the s3:DeleteStorageLensConfiguration
action. For more information, see Setting permissions to use Amazon S3 Storage Lens in the Amazon Simple Storage Service Developer Guide.
Deletes the Amazon S3 Storage Lens configuration tags. For more information about S3 Storage Lens, see Working with Amazon S3 Storage Lens in the Amazon Simple Storage Service Developer Guide.
To use this action, you must have permission to perform the s3:DeleteStorageLensConfigurationTagging
action. For more information, see Setting permissions to use Amazon S3 Storage Lens in the Amazon Simple Storage Service Developer Guide.
Retrieves the configuration parameters and status for a Batch Operations job. For more information, see S3 Batch Operations in the Amazon Simple Storage Service Developer Guide.
Related actions include:
", - "GetAccessPoint": "Returns configuration information about the specified access point.
All Amazon S3 on Outposts REST API requests for this action require an additional parameter of outpost-id to be passed with the request and an S3 on Outposts endpoint hostname prefix instead of s3-control. For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and the outpost-id derived using the access point ARN, see the Example section below.
The following actions are related to GetAccessPoint
:
Returns configuration information about the specified access point.
All Amazon S3 on Outposts REST API requests for this action require an additional parameter of x-amz-outpost-id
to be passed with the request and an S3 on Outposts endpoint hostname prefix instead of s3-control
. For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and the x-amz-outpost-id
derived using the access point ARN, see the Examples section.
The following actions are related to GetAccessPoint
:
Returns the access point policy associated with the specified access point.
The following actions are related to GetAccessPointPolicy
:
Indicates whether the specified access point currently has a policy that allows public access. For more information about public access through access points, see Managing Data Access with Amazon S3 Access Points in the Amazon Simple Storage Service Developer Guide.
", - "GetBucket": "Gets an Amazon S3 on Outposts bucket. For more information, see Using Amazon S3 on Outposts in the Amazon Simple Storage Service Developer Guide.
The following actions are related to GetBucket
for Amazon S3 on Outposts:
This API operation gets an Amazon S3 on Outposts bucket's lifecycle configuration. To get an S3 bucket's lifecycle configuration, see GetBucketLifecycleConfiguration in the Amazon Simple Storage Service API.
Returns the lifecycle configuration information set on the Outposts bucket. For more information, see Using Amazon S3 on Outposts and for information about lifecycle configuration, see Object Lifecycle Management in Amazon Simple Storage Service Developer Guide.
To use this operation, you must have permission to perform the s3outposts:GetLifecycleConfiguration
action. The Outposts bucket owner has this permission, by default. The bucket owner can grant this permission to others. For more information about permissions, see Permissions Related to Bucket Subresource Operations and Managing Access Permissions to Your Amazon S3 Resources.
All Amazon S3 on Outposts REST API requests for this action require an additional parameter of outpost-id to be passed with the request and an S3 on Outposts endpoint hostname prefix instead of s3-control. For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and the outpost-id derived using the access point ARN, see the Example section below.
GetBucketLifecycleConfiguration
has the following special error:
Error code: NoSuchLifecycleConfiguration
Description: The lifecycle configuration does not exist.
HTTP Status Code: 404 Not Found
SOAP Fault Code Prefix: Client
The following actions are related to GetBucketLifecycleConfiguration
:
This API action gets a bucket policy for an Amazon S3 on Outposts bucket. To get a policy for an S3 bucket, see GetBucketPolicy in the Amazon Simple Storage Service API.
Returns the policy of a specified Outposts bucket. For more information, see Using Amazon S3 on Outposts in the Amazon Simple Storage Service Developer Guide.
If you are using an identity other than the root user of the AWS account that owns the bucket, the calling identity must have the GetBucketPolicy
permissions on the specified bucket and belong to the bucket owner's account in order to use this operation.
If you don't have s3outposts:GetBucketPolicy
permissions, Amazon S3 returns a 403 Access Denied
error. If you have the correct permissions, but you're not using an identity that belongs to the bucket owner's account, Amazon S3 returns a 405 Method Not Allowed
error.
As a security precaution, the root user of the AWS account that owns a bucket can always use this operation, even if the policy explicitly denies the root user the ability to perform this action.
For more information about bucket policies, see Using Bucket Policies and User Policies.
All Amazon S3 on Outposts REST API requests for this action require an additional parameter of outpost-id to be passed with the request and an S3 on Outposts endpoint hostname prefix instead of s3-control. For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and the outpost-id derived using the access point ARN, see the Example section below.
The following actions are related to GetBucketPolicy
:
This API operation gets an Amazon S3 on Outposts bucket's tags. To get an S3 bucket tags, see GetBucketTagging in the Amazon Simple Storage Service API.
Returns the tag set associated with the Outposts bucket. For more information, see Using Amazon S3 on Outposts in the Amazon Simple Storage Service Developer Guide.
To use this operation, you must have permission to perform the GetBucketTagging
action. By default, the bucket owner has this permission and can grant this permission to others.
GetBucketTagging
has the following special error:
Error code: NoSuchTagSetError
Description: There is no tag set associated with the bucket.
All Amazon S3 on Outposts REST API requests for this action require an additional parameter of outpost-id to be passed with the request and an S3 on Outposts endpoint hostname prefix instead of s3-control. For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and the outpost-id derived using the access point ARN, see the Example section below.
The following actions are related to GetBucketTagging
:
Gets an Amazon S3 on Outposts bucket. For more information, see Using Amazon S3 on Outposts in the Amazon Simple Storage Service Developer Guide.
If you are using an identity other than the root user of the AWS account that owns the bucket, the calling identity must have the s3-outposts:GetBucket
permissions on the specified bucket and belong to the bucket owner's account in order to use this operation. Only users from Outposts bucket owner account with the right permissions can perform actions on an Outposts bucket.
If you don't have s3-outposts:GetBucket
permissions or you're not using an identity that belongs to the bucket owner's account, Amazon S3 returns a 403 Access Denied
error.
The following actions are related to GetBucket
for Amazon S3 on Outposts:
All Amazon S3 on Outposts REST API requests for this action require an additional parameter of x-amz-outpost-id
to be passed with the request and an S3 on Outposts endpoint hostname prefix instead of s3-control
. For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and the x-amz-outpost-id
derived using the access point ARN, see the Examples section.
This operation gets an Amazon S3 on Outposts bucket's lifecycle configuration. To get an S3 bucket's lifecycle configuration, see GetBucketLifecycleConfiguration in the Amazon Simple Storage Service API.
Returns the lifecycle configuration information set on the Outposts bucket. For more information, see Using Amazon S3 on Outposts and for information about lifecycle configuration, see Object Lifecycle Management in Amazon Simple Storage Service Developer Guide.
To use this operation, you must have permission to perform the s3-outposts:GetLifecycleConfiguration
action. The Outposts bucket owner has this permission, by default. The bucket owner can grant this permission to others. For more information about permissions, see Permissions Related to Bucket Subresource Operations and Managing Access Permissions to Your Amazon S3 Resources.
All Amazon S3 on Outposts REST API requests for this action require an additional parameter of x-amz-outpost-id
to be passed with the request and an S3 on Outposts endpoint hostname prefix instead of s3-control
. For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and the x-amz-outpost-id
derived using the access point ARN, see the Examples section.
GetBucketLifecycleConfiguration
has the following special error:
Error code: NoSuchLifecycleConfiguration
Description: The lifecycle configuration does not exist.
HTTP Status Code: 404 Not Found
SOAP Fault Code Prefix: Client
The following actions are related to GetBucketLifecycleConfiguration
:
This action gets a bucket policy for an Amazon S3 on Outposts bucket. To get a policy for an S3 bucket, see GetBucketPolicy in the Amazon Simple Storage Service API.
Returns the policy of a specified Outposts bucket. For more information, see Using Amazon S3 on Outposts in the Amazon Simple Storage Service Developer Guide.
If you are using an identity other than the root user of the AWS account that owns the bucket, the calling identity must have the GetBucketPolicy
permissions on the specified bucket and belong to the bucket owner's account in order to use this operation.
Only users from Outposts bucket owner account with the right permissions can perform actions on an Outposts bucket. If you don't have s3-outposts:GetBucketPolicy
permissions or you're not using an identity that belongs to the bucket owner's account, Amazon S3 returns a 403 Access Denied
error.
As a security precaution, the root user of the AWS account that owns a bucket can always use this operation, even if the policy explicitly denies the root user the ability to perform this action.
For more information about bucket policies, see Using Bucket Policies and User Policies.
All Amazon S3 on Outposts REST API requests for this action require an additional parameter of x-amz-outpost-id
to be passed with the request and an S3 on Outposts endpoint hostname prefix instead of s3-control
. For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and the x-amz-outpost-id
derived using the access point ARN, see the Examples section.
The following actions are related to GetBucketPolicy
:
This operation gets an Amazon S3 on Outposts bucket's tags. To get an S3 bucket tags, see GetBucketTagging in the Amazon Simple Storage Service API.
Returns the tag set associated with the Outposts bucket. For more information, see Using Amazon S3 on Outposts in the Amazon Simple Storage Service Developer Guide.
To use this operation, you must have permission to perform the GetBucketTagging
action. By default, the bucket owner has this permission and can grant this permission to others.
GetBucketTagging
has the following special error:
Error code: NoSuchTagSetError
Description: There is no tag set associated with the bucket.
All Amazon S3 on Outposts REST API requests for this action require an additional parameter of x-amz-outpost-id
to be passed with the request and an S3 on Outposts endpoint hostname prefix instead of s3-control
. For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and the x-amz-outpost-id
derived using the access point ARN, see the Examples section.
The following actions are related to GetBucketTagging
:
Returns the tags on an S3 Batch Operations job. To use this operation, you must have permission to perform the s3:GetJobTagging
action. For more information, see Controlling access and labeling jobs using tags in the Amazon Simple Storage Service Developer Guide.
Related actions include:
", "GetPublicAccessBlock": "Retrieves the PublicAccessBlock
configuration for an AWS account. For more information, see Using Amazon S3 block public access.
Related actions include:
", - "ListAccessPoints": "Returns a list of the access points currently associated with the specified bucket. You can retrieve up to 1000 access points per call. If the specified bucket has more than 1,000 access points (or the number specified in maxResults
, whichever is less), the response will include a continuation token that you can use to list the additional access points.
All Amazon S3 on Outposts REST API requests for this action require an additional parameter of outpost-id to be passed with the request and an S3 on Outposts endpoint hostname prefix instead of s3-control. For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and the outpost-id derived using the access point ARN, see the Example section below.
The following actions are related to ListAccessPoints
:
Gets the Amazon S3 Storage Lens configuration. For more information, see Working with Amazon S3 Storage Lens in the Amazon Simple Storage Service Developer Guide.
To use this action, you must have permission to perform the s3:GetStorageLensConfiguration
action. For more information, see Setting permissions to use Amazon S3 Storage Lens in the Amazon Simple Storage Service Developer Guide.
Gets the tags of Amazon S3 Storage Lens configuration. For more information about S3 Storage Lens, see Working with Amazon S3 Storage Lens in the Amazon Simple Storage Service Developer Guide.
To use this action, you must have permission to perform the s3:GetStorageLensConfigurationTagging
action. For more information, see Setting permissions to use Amazon S3 Storage Lens in the Amazon Simple Storage Service Developer Guide.
Returns a list of the access points currently associated with the specified bucket. You can retrieve up to 1000 access points per call. If the specified bucket has more than 1,000 access points (or the number specified in maxResults
, whichever is less), the response will include a continuation token that you can use to list the additional access points.
All Amazon S3 on Outposts REST API requests for this action require an additional parameter of x-amz-outpost-id
to be passed with the request and an S3 on Outposts endpoint hostname prefix instead of s3-control
. For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and the x-amz-outpost-id
derived using the access point ARN, see the Examples section.
The following actions are related to ListAccessPoints
:
Lists current S3 Batch Operations jobs and jobs that have ended within the last 30 days for the AWS account making the request. For more information, see S3 Batch Operations in the Amazon Simple Storage Service Developer Guide.
Related actions include:
", - "ListRegionalBuckets": "Returns a list of all Outposts buckets in an Outposts that are owned by the authenticated sender of the request. For more information, see Using Amazon S3 on Outposts in the Amazon Simple Storage Service Developer Guide.
For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and outpost-id in your API request, see the Example section below.
", - "PutAccessPointPolicy": "Associates an access policy with the specified access point. Each access point can have only one policy, so a request made to this API replaces any existing policy associated with the specified access point.
All Amazon S3 on Outposts REST API requests for this action require an additional parameter of outpost-id to be passed with the request and an S3 on Outposts endpoint hostname prefix instead of s3-control. For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and the outpost-id derived using the access point ARN, see the Example section below.
The following actions are related to PutAccessPointPolicy
:
This API action puts a lifecycle configuration to an Amazon S3 on Outposts bucket. To put a lifecycle configuration to an S3 bucket, see PutBucketLifecycleConfiguration in the Amazon Simple Storage Service API.
Creates a new lifecycle configuration for the Outposts bucket or replaces an existing lifecycle configuration. Outposts buckets can only support a lifecycle that deletes objects after a certain period of time. For more information, see Managing Lifecycle Permissions for Amazon S3 on Outposts.
All Amazon S3 on Outposts REST API requests for this action require an additional parameter of outpost-id to be passed with the request and an S3 on Outposts endpoint hostname prefix instead of s3-control. For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and the outpost-id derived using the access point ARN, see the Example section below.
The following actions are related to PutBucketLifecycleConfiguration
:
This API action puts a bucket policy to an Amazon S3 on Outposts bucket. To put a policy on an S3 bucket, see PutBucketPolicy in the Amazon Simple Storage Service API.
Applies an Amazon S3 bucket policy to an Outposts bucket. For more information, see Using Amazon S3 on Outposts in the Amazon Simple Storage Service Developer Guide.
If you are using an identity other than the root user of the AWS account that owns the Outposts bucket, the calling identity must have the PutBucketPolicy
permissions on the specified Outposts bucket and belong to the bucket owner's account in order to use this operation.
If you don't have PutBucketPolicy
permissions, Amazon S3 returns a 403 Access Denied
error. If you have the correct permissions, but you're not using an identity that belongs to the bucket owner's account, Amazon S3 returns a 405 Method Not Allowed
error.
As a security precaution, the root user of the AWS account that owns a bucket can always use this operation, even if the policy explicitly denies the root user the ability to perform this action.
For more information about bucket policies, see Using Bucket Policies and User Policies.
All Amazon S3 on Outposts REST API requests for this action require an additional parameter of outpost-id to be passed with the request and an S3 on Outposts endpoint hostname prefix instead of s3-control. For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and the outpost-id derived using the access point ARN, see the Example section below.
The following actions are related to PutBucketPolicy
:
This API action puts tags on an Amazon S3 on Outposts bucket. To put tags on an S3 bucket, see PutBucketTagging in the Amazon Simple Storage Service API.
Sets the tags for an Outposts bucket. For more information, see Using Amazon S3 on Outposts in the Amazon Simple Storage Service Developer Guide.
Use tags to organize your AWS bill to reflect your own cost structure. To do this, sign up to get your AWS account bill with tag key values included. Then, to see the cost of combined resources, organize your billing information according to resources with the same tag key values. For example, you can tag several resources with a specific application name, and then organize your billing information to see the total cost of that application across several services. For more information, see Cost Allocation and Tagging.
Within a bucket, if you add a tag that has the same key as an existing tag, the new value overwrites the old value. For more information, see Using Cost Allocation in Amazon S3 Bucket Tags.
To use this operation, you must have permissions to perform the s3outposts:PutBucketTagging
action. The Outposts bucket owner has this permission by default and can grant this permission to others. For more information about permissions, see Permissions Related to Bucket Subresource Operations and Managing Access Permissions to Your Amazon S3 Resources.
PutBucketTagging
has the following special errors:
Error code: InvalidTagError
Description: The tag provided was not a valid tag. This error can occur if the tag did not pass input validation. For information about tag restrictions, see User-Defined Tag Restrictions and AWS-Generated Cost Allocation Tag Restrictions.
Error code: MalformedXMLError
Description: The XML provided does not match the schema.
Error code: OperationAbortedError
Description: A conflicting conditional operation is currently in progress against this resource. Try again.
Error code: InternalError
Description: The service was unable to apply the provided tag to the bucket.
All Amazon S3 on Outposts REST API requests for this action require an additional parameter of outpost-id to be passed with the request and an S3 on Outposts endpoint hostname prefix instead of s3-control. For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and the outpost-id derived using the access point ARN, see the Example section below.
The following actions are related to PutBucketTagging
:
Sets the supplied tag-set on an S3 Batch Operations job.
A tag is a key-value pair. You can associate S3 Batch Operations tags with any job by sending a PUT request against the tagging subresource that is associated with the job. To modify the existing tag set, you can either replace the existing tag set entirely, or make changes within the existing tag set by retrieving the existing tag set using GetJobTagging, modify that tag set, and use this API action to replace the tag set with the one you modified. For more information, see Controlling access and labeling jobs using tags in the Amazon Simple Storage Service Developer Guide.
If you send this request with an empty tag set, Amazon S3 deletes the existing tag set on the Batch Operations job. If you use this method, you are charged for a Tier 1 Request (PUT). For more information, see Amazon S3 pricing.
For deleting existing tags for your Batch Operations job, a DeleteJobTagging request is preferred because it achieves the same result without incurring charges.
A few things to consider about using tags:
Amazon S3 limits the maximum number of tags to 50 tags per job.
You can associate up to 50 tags with a job as long as they have unique tag keys.
A tag key can be up to 128 Unicode characters in length, and tag values can be up to 256 Unicode characters in length.
The key and values are case sensitive.
For tagging-related restrictions related to characters and encodings, see User-Defined Tag Restrictions in the AWS Billing and Cost Management User Guide.
To use this operation, you must have permission to perform the s3:PutJobTagging
action.
Related actions include:
", + "ListRegionalBuckets": "Returns a list of all Outposts buckets in an Outpost that are owned by the authenticated sender of the request. For more information, see Using Amazon S3 on Outposts in the Amazon Simple Storage Service Developer Guide.
For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and x-amz-outpost-id
in your request, see the Examples section.
Gets a list of Amazon S3 Storage Lens configurations. For more information about S3 Storage Lens, see Working with Amazon S3 Storage Lens in the Amazon Simple Storage Service Developer Guide.
To use this action, you must have permission to perform the s3:ListStorageLensConfigurations
action. For more information, see Setting permissions to use Amazon S3 Storage Lens in the Amazon Simple Storage Service Developer Guide.
Associates an access policy with the specified access point. Each access point can have only one policy, so a request made to this API replaces any existing policy associated with the specified access point.
All Amazon S3 on Outposts REST API requests for this action require an additional parameter of x-amz-outpost-id
to be passed with the request and an S3 on Outposts endpoint hostname prefix instead of s3-control
. For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and the x-amz-outpost-id
derived using the access point ARN, see the Examples section.
The following actions are related to PutAccessPointPolicy
:
This action puts a lifecycle configuration to an Amazon S3 on Outposts bucket. To put a lifecycle configuration to an S3 bucket, see PutBucketLifecycleConfiguration in the Amazon Simple Storage Service API.
Creates a new lifecycle configuration for the Outposts bucket or replaces an existing lifecycle configuration. Outposts buckets only support lifecycle configurations that delete/expire objects after a certain period of time and abort incomplete multipart uploads. For more information, see Managing Lifecycle Permissions for Amazon S3 on Outposts.
All Amazon S3 on Outposts REST API requests for this action require an additional parameter of x-amz-outpost-id
to be passed with the request and an S3 on Outposts endpoint hostname prefix instead of s3-control
. For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and the x-amz-outpost-id
derived using the access point ARN, see the Examples section.
The following actions are related to PutBucketLifecycleConfiguration
:
This action puts a bucket policy to an Amazon S3 on Outposts bucket. To put a policy on an S3 bucket, see PutBucketPolicy in the Amazon Simple Storage Service API.
Applies an Amazon S3 bucket policy to an Outposts bucket. For more information, see Using Amazon S3 on Outposts in the Amazon Simple Storage Service Developer Guide.
If you are using an identity other than the root user of the AWS account that owns the Outposts bucket, the calling identity must have the PutBucketPolicy
permissions on the specified Outposts bucket and belong to the bucket owner's account in order to use this operation.
If you don't have PutBucketPolicy
permissions, Amazon S3 returns a 403 Access Denied
error. If you have the correct permissions, but you're not using an identity that belongs to the bucket owner's account, Amazon S3 returns a 405 Method Not Allowed
error.
As a security precaution, the root user of the AWS account that owns a bucket can always use this operation, even if the policy explicitly denies the root user the ability to perform this action.
For more information about bucket policies, see Using Bucket Policies and User Policies.
All Amazon S3 on Outposts REST API requests for this action require an additional parameter of x-amz-outpost-id
to be passed with the request and an S3 on Outposts endpoint hostname prefix instead of s3-control
. For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and the x-amz-outpost-id
derived using the access point ARN, see the Examples section.
The following actions are related to PutBucketPolicy
:
This action puts tags on an Amazon S3 on Outposts bucket. To put tags on an S3 bucket, see PutBucketTagging in the Amazon Simple Storage Service API.
Sets the tags for an Outposts bucket. For more information, see Using Amazon S3 on Outposts in the Amazon Simple Storage Service Developer Guide.
Use tags to organize your AWS bill to reflect your own cost structure. To do this, sign up to get your AWS account bill with tag key values included. Then, to see the cost of combined resources, organize your billing information according to resources with the same tag key values. For example, you can tag several resources with a specific application name, and then organize your billing information to see the total cost of that application across several services. For more information, see Cost Allocation and Tagging.
Within a bucket, if you add a tag that has the same key as an existing tag, the new value overwrites the old value. For more information, see Using Cost Allocation in Amazon S3 Bucket Tags.
To use this operation, you must have permissions to perform the s3-outposts:PutBucketTagging
action. The Outposts bucket owner has this permission by default and can grant this permission to others. For more information about permissions, see Permissions Related to Bucket Subresource Operations and Managing Access Permissions to Your Amazon S3 Resources.
PutBucketTagging
has the following special errors:
Error code: InvalidTagError
Description: The tag provided was not a valid tag. This error can occur if the tag did not pass input validation. For information about tag restrictions, see User-Defined Tag Restrictions and AWS-Generated Cost Allocation Tag Restrictions.
Error code: MalformedXMLError
Description: The XML provided does not match the schema.
Error code: OperationAbortedError
Description: A conflicting conditional operation is currently in progress against this resource. Try again.
Error code: InternalError
Description: The service was unable to apply the provided tag to the bucket.
All Amazon S3 on Outposts REST API requests for this action require an additional parameter of x-amz-outpost-id
to be passed with the request and an S3 on Outposts endpoint hostname prefix instead of s3-control
. For an example of the request syntax for Amazon S3 on Outposts that uses the S3 on Outposts endpoint hostname prefix and the x-amz-outpost-id
derived using the access point ARN, see the Examples section.
The following actions are related to PutBucketTagging
:
Sets the supplied tag-set on an S3 Batch Operations job.
A tag is a key-value pair. You can associate S3 Batch Operations tags with any job by sending a PUT request against the tagging subresource that is associated with the job. To modify the existing tag set, you can either replace the existing tag set entirely, or make changes within the existing tag set by retrieving the existing tag set using GetJobTagging, modify that tag set, and use this action to replace the tag set with the one you modified. For more information, see Controlling access and labeling jobs using tags in the Amazon Simple Storage Service Developer Guide.
If you send this request with an empty tag set, Amazon S3 deletes the existing tag set on the Batch Operations job. If you use this method, you are charged for a Tier 1 Request (PUT). For more information, see Amazon S3 pricing.
For deleting existing tags for your Batch Operations job, a DeleteJobTagging request is preferred because it achieves the same result without incurring charges.
A few things to consider about using tags:
Amazon S3 limits the maximum number of tags to 50 tags per job.
You can associate up to 50 tags with a job as long as they have unique tag keys.
A tag key can be up to 128 Unicode characters in length, and tag values can be up to 256 Unicode characters in length.
The key and values are case sensitive.
For tagging-related restrictions related to characters and encodings, see User-Defined Tag Restrictions in the AWS Billing and Cost Management User Guide.
To use this operation, you must have permission to perform the s3:PutJobTagging
action.
Related actions include:
", "PutPublicAccessBlock": "Creates or modifies the PublicAccessBlock
configuration for an AWS account. For more information, see Using Amazon S3 block public access.
Related actions include:
", + "PutStorageLensConfiguration": "Puts an Amazon S3 Storage Lens configuration. For more information about S3 Storage Lens, see Working with Amazon S3 Storage Lens in the Amazon Simple Storage Service Developer Guide.
To use this action, you must have permission to perform the s3:PutStorageLensConfiguration
action. For more information, see Setting permissions to use Amazon S3 Storage Lens in the Amazon Simple Storage Service Developer Guide.
Put or replace tags on an existing Amazon S3 Storage Lens configuration. For more information about S3 Storage Lens, see Working with Amazon S3 Storage Lens in the Amazon Simple Storage Service Developer Guide.
To use this action, you must have permission to perform the s3:PutStorageLensConfigurationTagging
action. For more information, see Setting permissions to use Amazon S3 Storage Lens in the Amazon Simple Storage Service Developer Guide.
Updates an existing S3 Batch Operations job's priority. For more information, see S3 Batch Operations in the Amazon Simple Storage Service Developer Guide.
Related actions include:
", "UpdateJobStatus": "Updates the status for the specified job. Use this operation to confirm that you want to run a job or to cancel an existing job. For more information, see S3 Batch Operations in the Amazon Simple Storage Service Developer Guide.
Related actions include:
" }, @@ -59,13 +66,13 @@ "refs": { "AccessPoint$Name": "The name of this access point.
", "CreateAccessPointRequest$Name": "The name you want to assign to this access point.
", - "DeleteAccessPointPolicyRequest$Name": "The name of the access point whose policy you want to delete.
For Amazon S3 on Outposts specify the ARN of the access point accessed in the format arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/accesspoint/<my-accesspoint-name>
. For example, to access the access point reports-ap
through outpost my-outpost
owned by account 123456789012
in Region us-west-2
, use the URL encoding of arn:aws:s3-outposts:us-west-2:123456789012:outpost/my-outpost/accesspoint/reports-ap
. The value must be URL encoded.
The name of the access point you want to delete.
For Amazon S3 on Outposts specify the ARN of the access point accessed in the format arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/accesspoint/<my-accesspoint-name>
. For example, to access the access point reports-ap
through outpost my-outpost
owned by account 123456789012
in Region us-west-2
, use the URL encoding of arn:aws:s3-outposts:us-west-2:123456789012:outpost/my-outpost/accesspoint/reports-ap
. The value must be URL encoded.
The name of the access point whose policy you want to retrieve.
For Amazon S3 on Outposts specify the ARN of the access point accessed in the format arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/accesspoint/<my-accesspoint-name>
. For example, to access the access point reports-ap
through outpost my-outpost
owned by account 123456789012
in Region us-west-2
, use the URL encoding of arn:aws:s3-outposts:us-west-2:123456789012:outpost/my-outpost/accesspoint/reports-ap
. The value must be URL encoded.
The name of the access point whose policy you want to delete.
For using this parameter with Amazon S3 on Outposts with the REST API, you must specify the name and the x-amz-outpost-id as well.
For using this parameter with S3 on Outposts with the AWS SDK and CLI, you must specify the ARN of the access point accessed in the format arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/accesspoint/<my-accesspoint-name>
. For example, to access the access point reports-ap
through outpost my-outpost
owned by account 123456789012
in Region us-west-2
, use the URL encoding of arn:aws:s3-outposts:us-west-2:123456789012:outpost/my-outpost/accesspoint/reports-ap
. The value must be URL encoded.
The name of the access point you want to delete.
For using this parameter with Amazon S3 on Outposts with the REST API, you must specify the name and the x-amz-outpost-id as well.
For using this parameter with S3 on Outposts with the AWS SDK and CLI, you must specify the ARN of the access point accessed in the format arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/accesspoint/<my-accesspoint-name>
. For example, to access the access point reports-ap
through outpost my-outpost
owned by account 123456789012
in Region us-west-2
, use the URL encoding of arn:aws:s3-outposts:us-west-2:123456789012:outpost/my-outpost/accesspoint/reports-ap
. The value must be URL encoded.
The name of the access point whose policy you want to retrieve.
For using this parameter with Amazon S3 on Outposts with the REST API, you must specify the name and the x-amz-outpost-id as well.
For using this parameter with S3 on Outposts with the AWS SDK and CLI, you must specify the ARN of the access point accessed in the format arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/accesspoint/<my-accesspoint-name>
. For example, to access the access point reports-ap
through outpost my-outpost
owned by account 123456789012
in Region us-west-2
, use the URL encoding of arn:aws:s3-outposts:us-west-2:123456789012:outpost/my-outpost/accesspoint/reports-ap
. The value must be URL encoded.
The name of the access point whose policy status you want to retrieve.
", - "GetAccessPointRequest$Name": "The name of the access point whose configuration information you want to retrieve.
For Amazon S3 on Outposts specify the ARN of the access point accessed in the format arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/accesspoint/<my-accesspoint-name>
. For example, to access the access point reports-ap
through outpost my-outpost
owned by account 123456789012
in Region us-west-2
, use the URL encoding of arn:aws:s3-outposts:us-west-2:123456789012:outpost/my-outpost/accesspoint/reports-ap
. The value must be URL encoded.
The name of the access point whose configuration information you want to retrieve.
For using this parameter with Amazon S3 on Outposts with the REST API, you must specify the name and the x-amz-outpost-id as well.
For using this parameter with S3 on Outposts with the AWS SDK and CLI, you must specify the ARN of the access point accessed in the format arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/accesspoint/<my-accesspoint-name>
. For example, to access the access point reports-ap
through outpost my-outpost
owned by account 123456789012
in Region us-west-2
, use the URL encoding of arn:aws:s3-outposts:us-west-2:123456789012:outpost/my-outpost/accesspoint/reports-ap
. The value must be URL encoded.
The name of the specified access point.
", - "PutAccessPointPolicyRequest$Name": "The name of the access point that you want to associate with the specified policy.
For Amazon S3 on Outposts specify the ARN of the access point accessed in the format arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/accesspoint/<my-accesspoint-name>
. For example, to access the access point reports-ap
through outpost my-outpost
owned by account 123456789012
in Region us-west-2
, use the URL encoding of arn:aws:s3-outposts:us-west-2:123456789012:outpost/my-outpost/accesspoint/reports-ap
. The value must be URL encoded.
The name of the access point that you want to associate with the specified policy.
For using this parameter with Amazon S3 on Outposts with the REST API, you must specify the name and the x-amz-outpost-id as well.
For using this parameter with S3 on Outposts with the AWS SDK and CLI, you must specify the ARN of the access point accessed in the format arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/accesspoint/<my-accesspoint-name>
. For example, to access the access point reports-ap
through outpost my-outpost
owned by account 123456789012
in Region us-west-2
, use the URL encoding of arn:aws:s3-outposts:us-west-2:123456789012:outpost/my-outpost/accesspoint/reports-ap
. The value must be URL encoded.
The AWS account ID of the Outposts bucket tag set to be removed.
", "DeleteJobTaggingRequest$AccountId": "The AWS account ID associated with the S3 Batch Operations job.
", "DeletePublicAccessBlockRequest$AccountId": "The account ID for the AWS account whose PublicAccessBlock
configuration you want to remove.
The account ID of the requester.
", + "DeleteStorageLensConfigurationTaggingRequest$AccountId": "The account ID of the requester.
", "DescribeJobRequest$AccountId": "", "GetAccessPointPolicyRequest$AccountId": "The account ID for the account that owns the specified access point.
", "GetAccessPointPolicyStatusRequest$AccountId": "The account ID for the account that owns the specified access point.
", @@ -91,19 +100,44 @@ "GetBucketTaggingRequest$AccountId": "The AWS account ID of the Outposts bucket.
", "GetJobTaggingRequest$AccountId": "The AWS account ID associated with the S3 Batch Operations job.
", "GetPublicAccessBlockRequest$AccountId": "The account ID for the AWS account whose PublicAccessBlock
configuration you want to retrieve.
The account ID of the requester.
", + "GetStorageLensConfigurationTaggingRequest$AccountId": "The account ID of the requester.
", "ListAccessPointsRequest$AccountId": "The AWS account ID for owner of the bucket whose access points you want to list.
", "ListJobsRequest$AccountId": "", "ListRegionalBucketsRequest$AccountId": "The AWS account ID of the Outposts bucket.
", + "ListStorageLensConfigurationsRequest$AccountId": "The account ID of the requester.
", "PutAccessPointPolicyRequest$AccountId": "The AWS account ID for owner of the bucket associated with the specified access point.
", "PutBucketLifecycleConfigurationRequest$AccountId": "The AWS account ID of the Outposts bucket.
", "PutBucketPolicyRequest$AccountId": "The AWS account ID of the Outposts bucket.
", "PutBucketTaggingRequest$AccountId": "The AWS account ID of the Outposts bucket.
", "PutJobTaggingRequest$AccountId": "The AWS account ID associated with the S3 Batch Operations job.
", "PutPublicAccessBlockRequest$AccountId": "The account ID for the AWS account whose PublicAccessBlock
configuration you want to set.
The account ID of the requester.
", + "PutStorageLensConfigurationTaggingRequest$AccountId": "The account ID of the requester.
", + "S3BucketDestination$AccountId": "The account ID of the owner of the S3 Storage Lens metrics export bucket.
", "UpdateJobPriorityRequest$AccountId": "", "UpdateJobStatusRequest$AccountId": "" } }, + "AccountLevel": { + "base": "A container for the account level Amazon S3 Storage Lens configuration.
", + "refs": { + "StorageLensConfiguration$AccountLevel": "A container for all the account-level configurations of your S3 Storage Lens configuration.
" + } + }, + "ActivityMetrics": { + "base": "A container for the activity metrics.
", + "refs": { + "AccountLevel$ActivityMetrics": "A container for the S3 Storage Lens activity metrics.
", + "BucketLevel$ActivityMetrics": "A container for the bucket-level activity metrics for Amazon S3 Storage Lens
" + } + }, + "AwsOrgArn": { + "base": null, + "refs": { + "StorageLensAwsOrg$Arn": "A container for the Amazon Resource Name (ARN) of the AWS organization. This property is read-only and follows the following format: arn:aws:organizations:us-east-1:example-account-id:organization/o-ex2l495dck
The canned ACL to apply to the bucket.
This is not supported by Amazon S3 on Outposts buckets.
A container for the bucket-level configuration.
", + "refs": { + "AccountLevel$BucketLevel": "A container for the S3 Storage Lens bucket-level configuration.
" + } + }, "BucketLocationConstraint": { "base": null, "refs": { @@ -144,25 +184,45 @@ "base": null, "refs": { "AccessPoint$Bucket": "The name of the bucket associated with this access point.
", - "CreateAccessPointRequest$Bucket": "The name of the bucket that you want to associate this access point with.
For Amazon S3 on Outposts specify the ARN of the bucket accessed in the format arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/bucket/<my-bucket-name>
. For example, to access the bucket reports
through outpost my-outpost
owned by account 123456789012
in Region us-west-2
, use the URL encoding of arn:aws:s3-outposts:us-west-2:123456789012:outpost/my-outpost/bucket/reports
. The value must be URL encoded.
The name of the bucket that you want to associate this access point with.
For using this parameter with Amazon S3 on Outposts with the REST API, you must specify the name and the x-amz-outpost-id as well.
For using this parameter with S3 on Outposts with the AWS SDK and CLI, you must specify the ARN of the bucket accessed in the format arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/bucket/<my-bucket-name>
. For example, to access the bucket reports
through outpost my-outpost
owned by account 123456789012
in Region us-west-2
, use the URL encoding of arn:aws:s3-outposts:us-west-2:123456789012:outpost/my-outpost/bucket/reports
. The value must be URL encoded.
The name of the bucket.
", - "DeleteBucketLifecycleConfigurationRequest$Bucket": "The bucket ARN of the bucket.
For Amazon S3 on Outposts specify the ARN of the bucket accessed in the format arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/bucket/<my-bucket-name>
. For example, to access the bucket reports
through outpost my-outpost
owned by account 123456789012
in Region us-west-2
, use the URL encoding of arn:aws:s3-outposts:us-west-2:123456789012:outpost/my-outpost/bucket/reports
. The value must be URL encoded.
The ARN of the bucket.
For Amazon S3 on Outposts specify the ARN of the bucket accessed in the format arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/bucket/<my-bucket-name>
. For example, to access the bucket reports
through outpost my-outpost
owned by account 123456789012
in Region us-west-2
, use the URL encoding of arn:aws:s3-outposts:us-west-2:123456789012:outpost/my-outpost/bucket/reports
. The value must be URL encoded.
Specifies the bucket being deleted.
For Amazon S3 on Outposts specify the ARN of the bucket accessed in the format arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/bucket/<my-bucket-name>
. For example, to access the bucket reports
through outpost my-outpost
owned by account 123456789012
in Region us-west-2
, use the URL encoding of arn:aws:s3-outposts:us-west-2:123456789012:outpost/my-outpost/bucket/reports
. The value must be URL encoded.
The bucket ARN that has the tag set to be removed.
For Amazon S3 on Outposts specify the ARN of the bucket accessed in the format arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/bucket/<my-bucket-name>
. For example, to access the bucket reports
through outpost my-outpost
owned by account 123456789012
in Region us-west-2
, use the URL encoding of arn:aws:s3-outposts:us-west-2:123456789012:outpost/my-outpost/bucket/reports
. The value must be URL encoded.
Specifies the bucket.
For using this parameter with Amazon S3 on Outposts with the REST API, you must specify the name and the x-amz-outpost-id as well.
For using this parameter with S3 on Outposts with the AWS SDK and CLI, you must specify the ARN of the bucket accessed in the format arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/bucket/<my-bucket-name>
. For example, to access the bucket reports
through outpost my-outpost
owned by account 123456789012
in Region us-west-2
, use the URL encoding of arn:aws:s3-outposts:us-west-2:123456789012:outpost/my-outpost/bucket/reports
. The value must be URL encoded.
Specifies the bucket.
For using this parameter with Amazon S3 on Outposts with the REST API, you must specify the name and the x-amz-outpost-id as well.
For using this parameter with S3 on Outposts with the AWS SDK and CLI, you must specify the ARN of the bucket accessed in the format arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/bucket/<my-bucket-name>
. For example, to access the bucket reports
through outpost my-outpost
owned by account 123456789012
in Region us-west-2
, use the URL encoding of arn:aws:s3-outposts:us-west-2:123456789012:outpost/my-outpost/bucket/reports
. The value must be URL encoded.
Specifies the bucket being deleted.
For using this parameter with Amazon S3 on Outposts with the REST API, you must specify the name and the x-amz-outpost-id as well.
For using this parameter with S3 on Outposts with the AWS SDK and CLI, you must specify the ARN of the bucket accessed in the format arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/bucket/<my-bucket-name>
. For example, to access the bucket reports
through outpost my-outpost
owned by account 123456789012
in Region us-west-2
, use the URL encoding of arn:aws:s3-outposts:us-west-2:123456789012:outpost/my-outpost/bucket/reports
. The value must be URL encoded.
The bucket ARN that has the tag set to be removed.
For using this parameter with Amazon S3 on Outposts with the REST API, you must specify the name and the x-amz-outpost-id as well.
For using this parameter with S3 on Outposts with the AWS SDK and CLI, you must specify the ARN of the bucket accessed in the format arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/bucket/<my-bucket-name>
. For example, to access the bucket reports
through outpost my-outpost
owned by account 123456789012
in Region us-west-2
, use the URL encoding of arn:aws:s3-outposts:us-west-2:123456789012:outpost/my-outpost/bucket/reports
. The value must be URL encoded.
The name of the bucket associated with the specified access point.
", - "GetBucketLifecycleConfigurationRequest$Bucket": "The Amazon Resource Name (ARN) of the bucket.
For Amazon S3 on Outposts specify the ARN of the bucket accessed in the format arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/bucket/<my-bucket-name>
. For example, to access the bucket reports
through outpost my-outpost
owned by account 123456789012
in Region us-west-2
, use the URL encoding of arn:aws:s3-outposts:us-west-2:123456789012:outpost/my-outpost/bucket/reports
. The value must be URL encoded.
The ARN of the bucket.
For Amazon S3 on Outposts specify the ARN of the bucket accessed in the format arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/bucket/<my-bucket-name>
. For example, to access the bucket reports
through outpost my-outpost
owned by account 123456789012
in Region us-west-2
, use the URL encoding of arn:aws:s3-outposts:us-west-2:123456789012:outpost/my-outpost/bucket/reports
. The value must be URL encoded.
The ARN of the bucket.
For Amazon S3 on Outposts specify the ARN of the bucket accessed in the format arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/bucket/<my-bucket-name>
. For example, to access the bucket reports
through outpost my-outpost
owned by account 123456789012
in Region us-west-2
, use the URL encoding of arn:aws:s3-outposts:us-west-2:123456789012:outpost/my-outpost/bucket/reports
. The value must be URL encoded.
The Amazon Resource Name (ARN) of the bucket.
For using this parameter with Amazon S3 on Outposts with the REST API, you must specify the name and the x-amz-outpost-id as well.
For using this parameter with S3 on Outposts with the AWS SDK and CLI, you must specify the ARN of the bucket accessed in the format arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/bucket/<my-bucket-name>
. For example, to access the bucket reports
through outpost my-outpost
owned by account 123456789012
in Region us-west-2
, use the URL encoding of arn:aws:s3-outposts:us-west-2:123456789012:outpost/my-outpost/bucket/reports
. The value must be URL encoded.
Specifies the bucket.
For using this parameter with Amazon S3 on Outposts with the REST API, you must specify the name and the x-amz-outpost-id as well.
For using this parameter with S3 on Outposts with the AWS SDK and CLI, you must specify the ARN of the bucket accessed in the format arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/bucket/<my-bucket-name>
. For example, to access the bucket reports
through outpost my-outpost
owned by account 123456789012
in Region us-west-2
, use the URL encoding of arn:aws:s3-outposts:us-west-2:123456789012:outpost/my-outpost/bucket/reports
. The value must be URL encoded.
Specifies the bucket.
For using this parameter with Amazon S3 on Outposts with the REST API, you must specify the name and the x-amz-outpost-id as well.
For using this parameter with S3 on Outposts with the AWS SDK and CLI, you must specify the ARN of the bucket accessed in the format arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/bucket/<my-bucket-name>
. For example, to access the bucket reports
through outpost my-outpost
owned by account 123456789012
in Region us-west-2
, use the URL encoding of arn:aws:s3-outposts:us-west-2:123456789012:outpost/my-outpost/bucket/reports
. The value must be URL encoded.
The Outposts bucket requested.
", - "GetBucketTaggingRequest$Bucket": "The ARN of the bucket.
For Amazon S3 on Outposts specify the ARN of the bucket accessed in the format arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/bucket/<my-bucket-name>
. For example, to access the bucket reports
through outpost my-outpost
owned by account 123456789012
in Region us-west-2
, use the URL encoding of arn:aws:s3-outposts:us-west-2:123456789012:outpost/my-outpost/bucket/reports
. The value must be URL encoded.
The name of the bucket whose associated access points you want to list.
For Amazon S3 on Outposts specify the ARN of the bucket accessed in the format arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/bucket/<my-bucket-name>
. For example, to access the bucket reports
through outpost my-outpost
owned by account 123456789012
in Region us-west-2
, use the URL encoding of arn:aws:s3-outposts:us-west-2:123456789012:outpost/my-outpost/bucket/reports
. The value must be URL encoded.
Specifies the bucket.
For using this parameter with Amazon S3 on Outposts with the REST API, you must specify the name and the x-amz-outpost-id as well.
For using this parameter with S3 on Outposts with the AWS SDK and CLI, you must specify the ARN of the bucket accessed in the format arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/bucket/<my-bucket-name>
. For example, to access the bucket reports
through outpost my-outpost
owned by account 123456789012
in Region us-west-2
, use the URL encoding of arn:aws:s3-outposts:us-west-2:123456789012:outpost/my-outpost/bucket/reports
. The value must be URL encoded.
The name of the bucket whose associated access points you want to list.
For using this parameter with Amazon S3 on Outposts with the REST API, you must specify the name and the x-amz-outpost-id as well.
For using this parameter with S3 on Outposts with the AWS SDK and CLI, you must specify the ARN of the bucket accessed in the format arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/bucket/<my-bucket-name>
. For example, to access the bucket reports
through outpost my-outpost
owned by account 123456789012
in Region us-west-2
, use the URL encoding of arn:aws:s3-outposts:us-west-2:123456789012:outpost/my-outpost/bucket/reports
. The value must be URL encoded.
The name of the bucket for which to set the configuration.
", - "PutBucketPolicyRequest$Bucket": "The ARN of the bucket.
For Amazon S3 on Outposts specify the ARN of the bucket accessed in the format arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/bucket/<my-bucket-name>
. For example, to access the bucket reports
through outpost my-outpost
owned by account 123456789012
in Region us-west-2
, use the URL encoding of arn:aws:s3-outposts:us-west-2:123456789012:outpost/my-outpost/bucket/reports
. The value must be URL encoded.
The Amazon Resource Name (ARN) of the bucket.
For Amazon S3 on Outposts specify the ARN of the bucket accessed in the format arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/bucket/<my-bucket-name>
. For example, to access the bucket reports
through outpost my-outpost
owned by account 123456789012
in Region us-west-2
, use the URL encoding of arn:aws:s3-outposts:us-west-2:123456789012:outpost/my-outpost/bucket/reports
. The value must be URL encoded.
Specifies the bucket.
For using this parameter with Amazon S3 on Outposts with the REST API, you must specify the name and the x-amz-outpost-id as well.
For using this parameter with S3 on Outposts with the AWS SDK and CLI, you must specify the ARN of the bucket accessed in the format arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/bucket/<my-bucket-name>
. For example, to access the bucket reports
through outpost my-outpost
owned by account 123456789012
in Region us-west-2
, use the URL encoding of arn:aws:s3-outposts:us-west-2:123456789012:outpost/my-outpost/bucket/reports
. The value must be URL encoded.
The Amazon Resource Name (ARN) of the bucket.
For using this parameter with Amazon S3 on Outposts with the REST API, you must specify the name and the x-amz-outpost-id as well.
For using this parameter with S3 on Outposts with the AWS SDK and CLI, you must specify the ARN of the bucket accessed in the format arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/bucket/<my-bucket-name>
. For example, to access the bucket reports
through outpost my-outpost
owned by account 123456789012
in Region us-west-2
, use the URL encoding of arn:aws:s3-outposts:us-west-2:123456789012:outpost/my-outpost/bucket/reports
. The value must be URL encoded.
A container for the S3 Storage Lens bucket excludes.
", + "Include$Buckets": "A container for the S3 Storage Lens bucket includes.
" + } + }, + "ConfigId": { + "base": null, + "refs": { + "DeleteStorageLensConfigurationRequest$ConfigId": "The ID of the S3 Storage Lens configuration.
", + "DeleteStorageLensConfigurationTaggingRequest$ConfigId": "The ID of the S3 Storage Lens configuration.
", + "GetStorageLensConfigurationRequest$ConfigId": "The ID of the Amazon S3 Storage Lens configuration.
", + "GetStorageLensConfigurationTaggingRequest$ConfigId": "The ID of the Amazon S3 Storage Lens configuration.
", + "ListStorageLensConfigurationEntry$Id": "A container for the S3 Storage Lens configuration ID.
", + "PutStorageLensConfigurationRequest$ConfigId": "The ID of the S3 Storage Lens configuration.
", + "PutStorageLensConfigurationTaggingRequest$ConfigId": "The ID of the S3 Storage Lens configuration.
", + "StorageLensConfiguration$Id": "A container for the Amazon S3 Storage Lens configuration ID.
" + } + }, "ConfirmRemoveSelfBucketAccess": { "base": null, "refs": { @@ -176,6 +236,13 @@ "JobDescriptor$ConfirmationRequired": "Indicates whether confirmation is required before Amazon S3 begins running the specified job. Confirmation is required only for jobs created through the Amazon S3 console.
" } }, + "ContinuationToken": { + "base": null, + "refs": { + "ListStorageLensConfigurationsRequest$NextToken": "A pagination token to request the next page of results.
", + "ListStorageLensConfigurationsResult$NextToken": "If the request produced more than the maximum number of S3 Storage Lens configuration results, you can pass this value into a subsequent request to retrieve the next page of results.
" + } + }, "CreateAccessPointRequest": { "base": null, "refs": { @@ -287,6 +354,21 @@ "refs": { } }, + "DeleteStorageLensConfigurationRequest": { + "base": null, + "refs": { + } + }, + "DeleteStorageLensConfigurationTaggingRequest": { + "base": null, + "refs": { + } + }, + "DeleteStorageLensConfigurationTaggingResult": { + "base": null, + "refs": { + } + }, "DescribeJobRequest": { "base": null, "refs": { @@ -311,6 +393,12 @@ "TooManyTagsException$Message": null } }, + "Exclude": { + "base": "A container for what Amazon S3 Storage Lens will exclude.
", + "refs": { + "StorageLensConfiguration$Exclude": "A container for what is excluded in this configuration. This container can only be valid if there is no Include
container submitted, and it's not empty.
Indicates whether Amazon S3 will remove a delete marker with no noncurrent versions. If set to true, the delete marker will be expired. If set to false, the policy takes no action. This cannot be specified with Days or Date in a Lifecycle Expiration Policy.
" } }, + "Format": { + "base": null, + "refs": { + "S3BucketDestination$Format": "" + } + }, "FunctionArnString": { "base": null, "refs": { @@ -419,6 +513,26 @@ "refs": { } }, + "GetStorageLensConfigurationRequest": { + "base": null, + "refs": { + } + }, + "GetStorageLensConfigurationResult": { + "base": null, + "refs": { + } + }, + "GetStorageLensConfigurationTaggingRequest": { + "base": null, + "refs": { + } + }, + "GetStorageLensConfigurationTaggingResult": { + "base": null, + "refs": { + } + }, "GrantFullControl": { "base": null, "refs": { @@ -467,6 +581,12 @@ "refs": { } }, + "Include": { + "base": "A container for what Amazon S3 Storage Lens configuration includes.
", + "refs": { + "StorageLensConfiguration$Include": "A container for what is included in this configuration. This container can only be valid if there is no Exclude
container submitted, and it's not empty.
A container for whether the activity metrics are enabled.
", + "ListStorageLensConfigurationEntry$IsEnabled": "A container for whether the S3 Storage Lens configuration is enabled. This property is required.
", + "PrefixLevelStorageMetrics$IsEnabled": "A container for whether prefix-level storage metrics are enabled.
", + "StorageLensConfiguration$IsEnabled": "A container for whether the S3 Storage Lens configuration is enabled.
" + } + }, "IsPublic": { "base": null, "refs": { @@ -771,6 +900,22 @@ "refs": { } }, + "ListStorageLensConfigurationEntry": { + "base": "Part of ListStorageLensConfigurationResult
. Each entry includes the description of the S3 Storage Lens configuration, its home Region, whether it is enabled, its Amazon Resource Name (ARN), and config ID.
The minimum number of storage bytes percentage whose metrics will be selected.
You must choose a value greater than or equal to 1.0
.
If the specified bucket has more access points than can be returned in one call to this API, this field contains a continuation token that you can provide in subsequent calls to this API to retrieve additional access points.
", "ListRegionalBucketsRequest$NextToken": "", "ListRegionalBucketsResult$NextToken": " NextToken
is sent when isTruncated
is true, which means there are more buckets that can be listed. The next list requests to Amazon S3 can be continued with this NextToken
. NextToken
is obfuscated and is not a real key.
Specifies the folder prefix into which you would like the objects to be copied. For example, to copy objects into a folder named \"Folder1\" in the destination bucket, set the TargetKeyPrefix to \"Folder1/\".
", "S3Grantee$Identifier": "", "S3Grantee$DisplayName": "", "S3ObjectMetadata$CacheControl": "", @@ -834,7 +985,7 @@ "NonEmptyMaxLength2048String": { "base": null, "refs": { - "S3CopyObjectOperation$RedirectLocation": "" + "S3CopyObjectOperation$RedirectLocation": "Specifies an optional metadata property for website redirects, x-amz-website-redirect-location
. Allows webpage redirects if the object is accessed through a website endpoint.
The operation that the specified job is configured to run on each object listed in the manifest.
" } }, + "OutputSchemaVersion": { + "base": null, + "refs": { + "S3BucketDestination$OutputSchemaVersion": "The schema version of the export file.
" + } + }, "Policy": { "base": null, "refs": { "GetAccessPointPolicyResult$Policy": "The access point policy associated with the specified access point.
", "GetBucketPolicyResult$Policy": "The policy of the Outposts bucket.
", - "PutAccessPointPolicyRequest$Policy": "The policy that you want to apply to the specified access point. For more information about access point policies, see Managing Data Access with Amazon S3 Access Points in the Amazon Simple Storage Service Developer Guide.
", + "PutAccessPointPolicyRequest$Policy": "The policy that you want to apply to the specified access point. For more information about access point policies, see Managing data access with Amazon S3 Access Points in the Amazon Simple Storage Service Developer Guide.
", "PutBucketPolicyRequest$Policy": "The bucket policy as a JSON document.
" } }, @@ -908,11 +1065,24 @@ "base": null, "refs": { "LifecycleRuleAndOperator$Prefix": "Prefix identifying one or more objects to which the rule applies.
", - "LifecycleRuleFilter$Prefix": "Prefix identifying one or more objects to which the rule applies.
" + "LifecycleRuleFilter$Prefix": "Prefix identifying one or more objects to which the rule applies.
", + "S3BucketDestination$Prefix": "The prefix of the destination bucket where the metrics export will be delivered.
" + } + }, + "PrefixLevel": { + "base": "A container for the prefix-level configuration.
", + "refs": { + "BucketLevel$PrefixLevel": "A container for the bucket-level prefix-level metrics for S3 Storage Lens
" + } + }, + "PrefixLevelStorageMetrics": { + "base": "A container for the prefix-level storage metrics for S3 Storage Lens.
", + "refs": { + "PrefixLevel$StorageMetrics": "A container for the prefix-level storage metrics for S3 Storage Lens.
" } }, "PublicAccessBlockConfiguration": { - "base": "The PublicAccessBlock
configuration that you want to apply to this Amazon S3 bucket. You can enable the configuration options in any combination. For more information about when Amazon S3 considers a bucket or object public, see The Meaning of \"Public\" in the Amazon Simple Storage Service Developer Guide.
This is not supported for Amazon S3 on Outposts.
", + "base": "The PublicAccessBlock
configuration that you want to apply to this Amazon S3 account. You can enable the configuration options in any combination. For more information about when Amazon S3 considers a bucket or object public, see The Meaning of \"Public\" in the Amazon Simple Storage Service Developer Guide.
This is not supported for Amazon S3 on Outposts.
", "refs": { "CreateAccessPointRequest$PublicAccessBlockConfiguration": null, "GetAccessPointResult$PublicAccessBlockConfiguration": null, @@ -962,6 +1132,21 @@ "refs": { } }, + "PutStorageLensConfigurationRequest": { + "base": null, + "refs": { + } + }, + "PutStorageLensConfigurationTaggingRequest": { + "base": null, + "refs": { + } + }, + "PutStorageLensConfigurationTaggingResult": { + "base": null, + "refs": { + } + }, "RegionalBucket": { "base": "The container for the regional bucket.
", "refs": { @@ -974,6 +1159,13 @@ "ListRegionalBucketsResult$RegionalBucketList": "" } }, + "Regions": { + "base": null, + "refs": { + "Exclude$Regions": "A container for the S3 Storage Lens Region excludes.
", + "Include$Regions": "A container for the S3 Storage Lens Region includes.
" + } + }, "ReportPrefixString": { "base": null, "refs": { @@ -986,6 +1178,13 @@ "UpdateJobStatusRequest$RequestedJobStatus": "The status that you want to move the specified job to.
" } }, + "S3AWSRegion": { + "base": null, + "refs": { + "ListStorageLensConfigurationEntry$HomeRegion": "A container for the S3 Storage Lens home Region. Your metrics data is stored and retained in your designated S3 Storage Lens home Region.
", + "Regions$member": null + } + }, "S3AccessControlList": { "base": "", "refs": { @@ -1002,14 +1201,22 @@ "base": null, "refs": { "AccessPoint$AccessPointArn": "The ARN for the access point.
", - "CreateAccessPointResult$AccessPointArn": "The ARN of the access point.
" + "CreateAccessPointResult$AccessPointArn": "The ARN of the access point.
This is only supported by Amazon S3 on Outposts.
The Amazon Resource Name (ARN) for the bucket where specified job-completion report will be stored.
", - "S3CopyObjectOperation$TargetResource": "" + "S3BucketDestination$Arn": "The Amazon Resource Name (ARN) of the bucket. This property is read-only and follows the following format: arn:aws:s3:us-east-1:example-account-id:bucket/your-destination-bucket-name
Specifies the destination bucket ARN for the batch copy operation. For example, to copy objects to a bucket named \"destinationBucket\", set the TargetResource to \"arn:aws:s3:::destinationBucket\".
" + } + }, + "S3BucketDestination": { + "base": "A container for the bucket where the Amazon S3 Storage Lens metrics export files are located.
", + "refs": { + "StorageLensDataExport$S3BucketDestination": "A container for the bucket where the S3 Storage Lens metrics export will be located.
" } }, "S3CannedAccessControlList": { @@ -1138,7 +1345,7 @@ "S3RegionalBucketArn": { "base": null, "refs": { - "CreateBucketResult$BucketArn": "The Amazon Resource Name (ARN) of the bucket.
For Amazon S3 on Outposts specify the ARN of the bucket accessed in the format arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/bucket/<my-bucket-name>
. For example, to access the bucket reports
through outpost my-outpost
owned by account 123456789012
in Region us-west-2
, use the URL encoding of arn:aws:s3-outposts:us-west-2:123456789012:outpost/my-outpost/bucket/reports
. The value must be URL encoded.
The Amazon Resource Name (ARN) of the bucket.
For using this parameter with Amazon S3 on Outposts with the REST API, you must specify the name and the x-amz-outpost-id as well.
For using this parameter with S3 on Outposts with the AWS SDK and CLI, you must specify the ARN of the bucket accessed in the format arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/bucket/<my-bucket-name>
. For example, to access the bucket reports
through outpost my-outpost
owned by account 123456789012
in Region us-west-2
, use the URL encoding of arn:aws:s3-outposts:us-west-2:123456789012:outpost/my-outpost/bucket/reports
. The value must be URL encoded.
The Amazon Resource Name (ARN) for the regional bucket.
" } }, @@ -1210,13 +1417,101 @@ "S3ObjectMetadata$UserMetadata": "" } }, + "SSEKMS": { + "base": "", + "refs": { + "StorageLensDataExportEncryption$SSEKMS": "" + } + }, + "SSEKMSKeyId": { + "base": null, + "refs": { + "SSEKMS$KeyId": "A container for the ARN of the SSE-KMS encryption. This property is read-only and follows the following format: arn:aws:kms:us-east-1:example-account-id:key/example-9a73-4afc-8d29-8f5900cef44e
Specifies whether Amazon S3 should block public access control lists (ACLs) for buckets in this account. Setting this element to TRUE
causes the following behavior:
PUT Bucket acl and PUT Object acl calls fail if the specified ACL is public.
PUT Object calls fail if the request includes a public ACL.
PUT Bucket calls fail if the request includes a public ACL.
Enabling this setting doesn't affect existing policies or ACLs.
This is not supported for Amazon S3 on Outposts.
", "PublicAccessBlockConfiguration$IgnorePublicAcls": "Specifies whether Amazon S3 should ignore public ACLs for buckets in this account. Setting this element to TRUE
causes Amazon S3 to ignore all public ACLs on buckets in this account and any objects that they contain.
Enabling this setting doesn't affect the persistence of any existing ACLs and doesn't prevent new public ACLs from being set.
This is not supported for Amazon S3 on Outposts.
", "PublicAccessBlockConfiguration$BlockPublicPolicy": "Specifies whether Amazon S3 should block public bucket policies for buckets in this account. Setting this element to TRUE
causes Amazon S3 to reject calls to PUT Bucket policy if the specified bucket policy allows public access.
Enabling this setting doesn't affect existing bucket policies.
This is not supported for Amazon S3 on Outposts.
", - "PublicAccessBlockConfiguration$RestrictPublicBuckets": "Specifies whether Amazon S3 should restrict public bucket policies for buckets in this account. Setting this element to TRUE
restricts access to buckets with public policies to only AWS services and authorized users within this account.
Enabling this setting doesn't affect previously stored bucket policies, except that public and cross-account access within any public bucket policy, including non-public delegation to specific accounts, is blocked.
This is not supported for Amazon S3 on Outposts.
" + "PublicAccessBlockConfiguration$RestrictPublicBuckets": "Specifies whether Amazon S3 should restrict public bucket policies for buckets in this account. Setting this element to TRUE
restricts access to buckets with public policies to only AWS service principals and authorized users within this account.
Enabling this setting doesn't affect previously stored bucket policies, except that public and cross-account access within any public bucket policy, including non-public delegation to specific accounts, is blocked.
This is not supported for Amazon S3 on Outposts.
" + } + }, + "StorageLensArn": { + "base": null, + "refs": { + "ListStorageLensConfigurationEntry$StorageLensArn": "The ARN of the S3 Storage Lens configuration. This property is read-only.
", + "StorageLensConfiguration$StorageLensArn": "The Amazon Resource Name (ARN) of the S3 Storage Lens configuration. This property is read-only and follows the following format: arn:aws:s3:us-east-1:example-account-id:storage-lens/your-dashboard-name
The AWS organization for your S3 Storage Lens.
", + "refs": { + "StorageLensConfiguration$AwsOrg": "A container for the AWS organization for this S3 Storage Lens configuration.
" + } + }, + "StorageLensConfiguration": { + "base": "A container for the Amazon S3 Storage Lens configuration.
", + "refs": { + "GetStorageLensConfigurationResult$StorageLensConfiguration": "The S3 Storage Lens configuration requested.
", + "PutStorageLensConfigurationRequest$StorageLensConfiguration": "The S3 Storage Lens configuration.
" + } + }, + "StorageLensConfigurationList": { + "base": null, + "refs": { + "ListStorageLensConfigurationsResult$StorageLensConfigurationList": "A list of S3 Storage Lens configurations.
" + } + }, + "StorageLensDataExport": { + "base": "A container to specify the properties of your S3 Storage Lens metrics export, including the destination, schema, and format.
", + "refs": { + "StorageLensConfiguration$DataExport": "A container to specify the properties of your S3 Storage Lens metrics export including, the destination, schema and format.
" + } + }, + "StorageLensDataExportEncryption": { + "base": "A container for the encryption of the S3 Storage Lens metrics exports.
", + "refs": { + "S3BucketDestination$Encryption": "The container for the type encryption of the metrics exports in this bucket.
" + } + }, + "StorageLensPrefixLevelDelimiter": { + "base": null, + "refs": { + "SelectionCriteria$Delimiter": "A container for the delimiter of the selection criteria being used.
" + } + }, + "StorageLensPrefixLevelMaxDepth": { + "base": null, + "refs": { + "SelectionCriteria$MaxDepth": "The max depth of the selection criteria
" + } + }, + "StorageLensTag": { + "base": "", + "refs": { + "StorageLensTags$member": null + } + }, + "StorageLensTags": { + "base": null, + "refs": { + "GetStorageLensConfigurationTaggingResult$Tags": "The tags of S3 Storage Lens configuration requested.
", + "PutStorageLensConfigurationRequest$Tags": "The tag set of the S3 Storage Lens configuration.
You can set up to a maximum of 50 tags.
The tag set of the S3 Storage Lens configuration.
You can set up to a maximum of 50 tags.
Specifies when an object transitions to a specified storage class. For more information about Amazon S3 Lifecycle configuration rules, see Transitioning Objects Using Amazon S3 Lifecycle in the Amazon Simple Storage Service Developer Guide.
", + "base": "Specifies when an object transitions to a specified storage class. For more information about Amazon S3 Lifecycle configuration rules, see Transitioning objects using Amazon S3 Lifecycle in the Amazon Simple Storage Service Developer Guide.
", "refs": { "TransitionList$member": null } diff --git a/aws-sdk-core/endpoints.json b/aws-sdk-core/endpoints.json index 563ddd6d05b..f47be3402f9 100644 --- a/aws-sdk-core/endpoints.json +++ b/aws-sdk-core/endpoints.json @@ -676,6 +676,7 @@ }, "athena" : { "endpoints" : { + "af-south-1" : { }, "ap-east-1" : { }, "ap-northeast-1" : { }, "ap-northeast-2" : { }, @@ -856,7 +857,7 @@ "credentialScope" : { "region" : "us-east-1" }, - "hostname" : "service.chime.aws.amazon.com", + "hostname" : "chime.us-east-1.amazonaws.com", "protocols" : [ "https" ] } }, @@ -9248,6 +9249,11 @@ "us-isob-east-1" : { } } }, + "es" : { + "endpoints" : { + "us-isob-east-1" : { } + } + }, "events" : { "endpoints" : { "us-isob-east-1" : { }