diff --git a/CHANGELOG.md b/CHANGELOG.md index 6c941e5eae8..f770b621f94 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,3 +1,14 @@ +Release v1.48.3 (2023-11-22) +=== + +### Service Client Updates +* `service/kinesis`: Updates service API and documentation + * This release adds support for resource based policies on streams and consumers. +* `service/s3control`: Updates service API and documentation + * Amazon S3 Batch Operations now manages buckets or prefixes in a single step. +* `service/sagemaker`: Updates service API and documentation + * This feature adds the end user license agreement status as a model access configuration parameter. + Release v1.48.2 (2023-11-21) === diff --git a/aws/version.go b/aws/version.go index f968ac35c96..6802d805c58 100644 --- a/aws/version.go +++ b/aws/version.go @@ -5,4 +5,4 @@ package aws const SDKName = "aws-sdk-go" // SDKVersion is the version of this SDK -const SDKVersion = "1.48.2" +const SDKVersion = "1.48.3" diff --git a/models/apis/kinesis/2013-12-02/api-2.json b/models/apis/kinesis/2013-12-02/api-2.json index dd4094382d3..53ff29fc960 100644 --- a/models/apis/kinesis/2013-12-02/api-2.json +++ b/models/apis/kinesis/2013-12-02/api-2.json @@ -63,6 +63,24 @@ "OperationType":{"value":"control"} } }, + "DeleteResourcePolicy":{ + "name":"DeleteResourcePolicy", + "http":{ + "method":"POST", + "requestUri":"/" + }, + "input":{"shape":"DeleteResourcePolicyInput"}, + "errors":[ + {"shape":"AccessDeniedException"}, + {"shape":"ResourceNotFoundException"}, + {"shape":"LimitExceededException"}, + {"shape":"InvalidArgumentException"}, + {"shape":"ResourceInUseException"} + ], + "staticContextParams":{ + "OperationType":{"value":"control"} + } + }, "DeleteStream":{ "name":"DeleteStream", "http":{ @@ -225,6 +243,24 @@ "OperationType":{"value":"data"} } }, + "GetResourcePolicy":{ + "name":"GetResourcePolicy", + "http":{ + "method":"POST", + "requestUri":"/" + }, + "input":{"shape":"GetResourcePolicyInput"}, + "output":{"shape":"GetResourcePolicyOutput"}, + "errors":[ + {"shape":"AccessDeniedException"}, + {"shape":"ResourceNotFoundException"}, + {"shape":"LimitExceededException"}, + {"shape":"InvalidArgumentException"} + ], + "staticContextParams":{ + "OperationType":{"value":"control"} + } + }, "GetShardIterator":{ "name":"GetShardIterator", "http":{ @@ -399,6 +435,24 @@ "OperationType":{"value":"data"} } }, + "PutResourcePolicy":{ + "name":"PutResourcePolicy", + "http":{ + "method":"POST", + "requestUri":"/" + }, + "input":{"shape":"PutResourcePolicyInput"}, + "errors":[ + {"shape":"AccessDeniedException"}, + {"shape":"ResourceNotFoundException"}, + {"shape":"LimitExceededException"}, + {"shape":"InvalidArgumentException"}, + {"shape":"ResourceInUseException"} + ], + "staticContextParams":{ + "OperationType":{"value":"control"} + } + }, "RegisterStreamConsumer":{ "name":"RegisterStreamConsumer", "http":{ @@ -678,6 +732,16 @@ } } }, + "DeleteResourcePolicyInput":{ + "type":"structure", + "required":["ResourceARN"], + "members":{ + "ResourceARN":{ + "shape":"ResourceARN", + "contextParam":{"name":"ResourceARN"} + } + } + }, "DeleteStreamInput":{ "type":"structure", "members":{ @@ -878,6 +942,23 @@ "ChildShards":{"shape":"ChildShardList"} } }, + "GetResourcePolicyInput":{ + "type":"structure", + "required":["ResourceARN"], + "members":{ + "ResourceARN":{ + "shape":"ResourceARN", + "contextParam":{"name":"ResourceARN"} + } + } + }, + "GetResourcePolicyOutput":{ + "type":"structure", + "required":["Policy"], + "members":{ + "Policy":{"shape":"Policy"} + } + }, "GetShardIteratorInput":{ "type":"structure", "required":[ @@ -1163,6 +1244,7 @@ "max":256, "min":1 }, + "Policy":{"type":"string"}, "PositiveIntegerObject":{ "type":"integer", "min":1 @@ -1258,6 +1340,20 @@ "max":500, "min":1 }, + "PutResourcePolicyInput":{ + "type":"structure", + "required":[ + "ResourceARN", + "Policy" + ], + "members":{ + "ResourceARN":{ + "shape":"ResourceARN", + "contextParam":{"name":"ResourceARN"} + }, + "Policy":{"shape":"Policy"} + } + }, "Record":{ "type":"structure", "required":[ @@ -1310,6 +1406,12 @@ } } }, + "ResourceARN":{ + "type":"string", + "max":2048, + "min":1, + "pattern":"arn:aws.*:kinesis:.*:\\d{12}:.*stream/\\S+" + }, "ResourceInUseException":{ "type":"structure", "members":{ diff --git a/models/apis/kinesis/2013-12-02/docs-2.json b/models/apis/kinesis/2013-12-02/docs-2.json index 5196727795b..8e1de8e76cc 100644 --- a/models/apis/kinesis/2013-12-02/docs-2.json +++ b/models/apis/kinesis/2013-12-02/docs-2.json @@ -2,34 +2,37 @@ "version": "2.0", "service": "Amazon Kinesis Data Streams Service API Reference

Amazon Kinesis Data Streams is a managed service that scales elastically for real-time processing of streaming big data.

", "operations": { - "AddTagsToStream": "

Adds or updates tags for the specified Kinesis data stream. You can assign up to 50 tags to a data stream.

When invoking this API, it is recommended you use the StreamARN input parameter rather than the StreamName input parameter.

If tags have already been assigned to the stream, AddTagsToStream overwrites any existing tags that correspond to the specified tag keys.

AddTagsToStream has a limit of five transactions per second per account.

", + "AddTagsToStream": "

Adds or updates tags for the specified Kinesis data stream. You can assign up to 50 tags to a data stream.

When invoking this API, you must use either the StreamARN or the StreamName parameter, or both. It is recommended that you use the StreamARN input parameter when you invoke this API.

If tags have already been assigned to the stream, AddTagsToStream overwrites any existing tags that correspond to the specified tag keys.

AddTagsToStream has a limit of five transactions per second per account.

", "CreateStream": "

Creates a Kinesis data stream. A stream captures and transports data records that are continuously emitted from different data sources or producers. Scale-out within a stream is explicitly supported by means of shards, which are uniquely identified groups of data records in a stream.

You can create your data stream using either on-demand or provisioned capacity mode. Data streams with an on-demand mode require no capacity planning and automatically scale to handle gigabytes of write and read throughput per minute. With the on-demand mode, Kinesis Data Streams automatically manages the shards in order to provide the necessary throughput. For the data streams with a provisioned mode, you must specify the number of shards for the data stream. Each shard can support reads up to five transactions per second, up to a maximum data read total of 2 MiB per second. Each shard can support writes up to 1,000 records per second, up to a maximum data write total of 1 MiB per second. If the amount of data input increases or decreases, you can add or remove shards.

The stream name identifies the stream. The name is scoped to the Amazon Web Services account used by the application. It is also scoped by Amazon Web Services Region. That is, two streams in two different accounts can have the same name, and two streams in the same account, but in two different Regions, can have the same name.

CreateStream is an asynchronous operation. Upon receiving a CreateStream request, Kinesis Data Streams immediately returns and sets the stream status to CREATING. After the stream is created, Kinesis Data Streams sets the stream status to ACTIVE. You should perform read and write operations only on an ACTIVE stream.

You receive a LimitExceededException when making a CreateStream request when you try to do one of the following:

For the default shard limit for an Amazon Web Services account, see Amazon Kinesis Data Streams Limits in the Amazon Kinesis Data Streams Developer Guide. To increase this limit, contact Amazon Web Services Support.

You can use DescribeStreamSummary to check the stream status, which is returned in StreamStatus.

CreateStream has a limit of five transactions per second per account.

", - "DecreaseStreamRetentionPeriod": "

Decreases the Kinesis data stream's retention period, which is the length of time data records are accessible after they are added to the stream. The minimum value of a stream's retention period is 24 hours.

When invoking this API, it is recommended you use the StreamARN input parameter rather than the StreamName input parameter.

This operation may result in lost data. For example, if the stream's retention period is 48 hours and is decreased to 24 hours, any data already in the stream that is older than 24 hours is inaccessible.

", - "DeleteStream": "

Deletes a Kinesis data stream and all its shards and data. You must shut down any applications that are operating on the stream before you delete the stream. If an application attempts to operate on a deleted stream, it receives the exception ResourceNotFoundException.

When invoking this API, it is recommended you use the StreamARN input parameter rather than the StreamName input parameter.

If the stream is in the ACTIVE state, you can delete it. After a DeleteStream request, the specified stream is in the DELETING state until Kinesis Data Streams completes the deletion.

Note: Kinesis Data Streams might continue to accept data read and write operations, such as PutRecord, PutRecords, and GetRecords, on a stream in the DELETING state until the stream deletion is complete.

When you delete a stream, any shards in that stream are also deleted, and any tags are dissociated from the stream.

You can use the DescribeStreamSummary operation to check the state of the stream, which is returned in StreamStatus.

DeleteStream has a limit of five transactions per second per account.

", + "DecreaseStreamRetentionPeriod": "

Decreases the Kinesis data stream's retention period, which is the length of time data records are accessible after they are added to the stream. The minimum value of a stream's retention period is 24 hours.

When invoking this API, you must use either the StreamARN or the StreamName parameter, or both. It is recommended that you use the StreamARN input parameter when you invoke this API.

This operation may result in lost data. For example, if the stream's retention period is 48 hours and is decreased to 24 hours, any data already in the stream that is older than 24 hours is inaccessible.

", + "DeleteResourcePolicy": "

Delete a policy for the specified data stream or consumer. Request patterns can be one of the following:

", + "DeleteStream": "

Deletes a Kinesis data stream and all its shards and data. You must shut down any applications that are operating on the stream before you delete the stream. If an application attempts to operate on a deleted stream, it receives the exception ResourceNotFoundException.

When invoking this API, you must use either the StreamARN or the StreamName parameter, or both. It is recommended that you use the StreamARN input parameter when you invoke this API.

If the stream is in the ACTIVE state, you can delete it. After a DeleteStream request, the specified stream is in the DELETING state until Kinesis Data Streams completes the deletion.

Note: Kinesis Data Streams might continue to accept data read and write operations, such as PutRecord, PutRecords, and GetRecords, on a stream in the DELETING state until the stream deletion is complete.

When you delete a stream, any shards in that stream are also deleted, and any tags are dissociated from the stream.

You can use the DescribeStreamSummary operation to check the state of the stream, which is returned in StreamStatus.

DeleteStream has a limit of five transactions per second per account.

", "DeregisterStreamConsumer": "

To deregister a consumer, provide its ARN. Alternatively, you can provide the ARN of the data stream and the name you gave the consumer when you registered it. You may also provide all three parameters, as long as they don't conflict with each other. If you don't know the name or ARN of the consumer that you want to deregister, you can use the ListStreamConsumers operation to get a list of the descriptions of all the consumers that are currently registered with a given data stream. The description of a consumer contains its name and ARN.

This operation has a limit of five transactions per second per stream.

", "DescribeLimits": "

Describes the shard limits and usage for the account.

If you update your account limits, the old limits might be returned for a few minutes.

This operation has a limit of one transaction per second per account.

", - "DescribeStream": "

Describes the specified Kinesis data stream.

This API has been revised. It's highly recommended that you use the DescribeStreamSummary API to get a summarized description of the specified Kinesis data stream and the ListShards API to list the shards in a specified data stream and obtain information about each shard.

When invoking this API, it is recommended you use the StreamARN input parameter rather than the StreamName input parameter.

The information returned includes the stream name, Amazon Resource Name (ARN), creation time, enhanced metric configuration, and shard map. The shard map is an array of shard objects. For each shard object, there is the hash key and sequence number ranges that the shard spans, and the IDs of any earlier shards that played in a role in creating the shard. Every record ingested in the stream is identified by a sequence number, which is assigned when the record is put into the stream.

You can limit the number of shards returned by each call. For more information, see Retrieving Shards from a Stream in the Amazon Kinesis Data Streams Developer Guide.

There are no guarantees about the chronological order shards returned. To process shards in chronological order, use the ID of the parent shard to track the lineage to the oldest shard.

This operation has a limit of 10 transactions per second per account.

", - "DescribeStreamConsumer": "

To get the description of a registered consumer, provide the ARN of the consumer. Alternatively, you can provide the ARN of the data stream and the name you gave the consumer when you registered it. You may also provide all three parameters, as long as they don't conflict with each other. If you don't know the name or ARN of the consumer that you want to describe, you can use the ListStreamConsumers operation to get a list of the descriptions of all the consumers that are currently registered with a given data stream.

This operation has a limit of 20 transactions per second per stream.

", - "DescribeStreamSummary": "

Provides a summarized description of the specified Kinesis data stream without the shard list.

When invoking this API, it is recommended you use the StreamARN input parameter rather than the StreamName input parameter.

The information returned includes the stream name, Amazon Resource Name (ARN), status, record retention period, approximate creation time, monitoring, encryption details, and open shard count.

DescribeStreamSummary has a limit of 20 transactions per second per account.

", - "DisableEnhancedMonitoring": "

Disables enhanced monitoring.

When invoking this API, it is recommended you use the StreamARN input parameter rather than the StreamName input parameter.

", - "EnableEnhancedMonitoring": "

Enables enhanced Kinesis data stream monitoring for shard-level metrics.

When invoking this API, it is recommended you use the StreamARN input parameter rather than the StreamName input parameter.

", - "GetRecords": "

Gets data records from a Kinesis data stream's shard.

When invoking this API, it is recommended you use the StreamARN input parameter in addition to the ShardIterator parameter.

Specify a shard iterator using the ShardIterator parameter. The shard iterator specifies the position in the shard from which you want to start reading data records sequentially. If there are no records available in the portion of the shard that the iterator points to, GetRecords returns an empty list. It might take multiple calls to get to a portion of the shard that contains records.

You can scale by provisioning multiple shards per stream while considering service limits (for more information, see Amazon Kinesis Data Streams Limits in the Amazon Kinesis Data Streams Developer Guide). Your application should have one thread per shard, each reading continuously from its stream. To read from a stream continually, call GetRecords in a loop. Use GetShardIterator to get the shard iterator to specify in the first GetRecords call. GetRecords returns a new shard iterator in NextShardIterator. Specify the shard iterator returned in NextShardIterator in subsequent calls to GetRecords. If the shard has been closed, the shard iterator can't return more data and GetRecords returns null in NextShardIterator. You can terminate the loop when the shard is closed, or when the shard iterator reaches the record with the sequence number or other attribute that marks it as the last record to process.

Each data record can be up to 1 MiB in size, and each shard can read up to 2 MiB per second. You can ensure that your calls don't exceed the maximum supported size or throughput by using the Limit parameter to specify the maximum number of records that GetRecords can return. Consider your average record size when determining this limit. The maximum number of records that can be returned per call is 10,000.

The size of the data returned by GetRecords varies depending on the utilization of the shard. It is recommended that consumer applications retrieve records via the GetRecords command using the 5 TPS limit to remain caught up. Retrieving records less frequently can lead to consumer applications falling behind. The maximum size of data that GetRecords can return is 10 MiB. If a call returns this amount of data, subsequent calls made within the next 5 seconds throw ProvisionedThroughputExceededException. If there is insufficient provisioned throughput on the stream, subsequent calls made within the next 1 second throw ProvisionedThroughputExceededException. GetRecords doesn't return any data when it throws an exception. For this reason, we recommend that you wait 1 second between calls to GetRecords. However, it's possible that the application will get exceptions for longer than 1 second.

To detect whether the application is falling behind in processing, you can use the MillisBehindLatest response attribute. You can also monitor the stream using CloudWatch metrics and other mechanisms (see Monitoring in the Amazon Kinesis Data Streams Developer Guide).

Each Amazon Kinesis record includes a value, ApproximateArrivalTimestamp, that is set when a stream successfully receives and stores a record. This is commonly referred to as a server-side time stamp, whereas a client-side time stamp is set when a data producer creates or sends the record to a stream (a data producer is any data source putting data records into a stream, for example with PutRecords). The time stamp has millisecond precision. There are no guarantees about the time stamp accuracy, or that the time stamp is always increasing. For example, records in a shard or across a stream might have time stamps that are out of order.

This operation has a limit of five transactions per second per shard.

", - "GetShardIterator": "

Gets an Amazon Kinesis shard iterator. A shard iterator expires 5 minutes after it is returned to the requester.

When invoking this API, it is recommended you use the StreamARN input parameter rather than the StreamName input parameter.

A shard iterator specifies the shard position from which to start reading data records sequentially. The position is specified using the sequence number of a data record in a shard. A sequence number is the identifier associated with every record ingested in the stream, and is assigned when a record is put into the stream. Each stream has one or more shards.

You must specify the shard iterator type. For example, you can set the ShardIteratorType parameter to read exactly from the position denoted by a specific sequence number by using the AT_SEQUENCE_NUMBER shard iterator type. Alternatively, the parameter can read right after the sequence number by using the AFTER_SEQUENCE_NUMBER shard iterator type, using sequence numbers returned by earlier calls to PutRecord, PutRecords, GetRecords, or DescribeStream. In the request, you can specify the shard iterator type AT_TIMESTAMP to read records from an arbitrary point in time, TRIM_HORIZON to cause ShardIterator to point to the last untrimmed record in the shard in the system (the oldest data record in the shard), or LATEST so that you always read the most recent data in the shard.

When you read repeatedly from a stream, use a GetShardIterator request to get the first shard iterator for use in your first GetRecords request and for subsequent reads use the shard iterator returned by the GetRecords request in NextShardIterator. A new shard iterator is returned by every GetRecords request in NextShardIterator, which you use in the ShardIterator parameter of the next GetRecords request.

If a GetShardIterator request is made too often, you receive a ProvisionedThroughputExceededException. For more information about throughput limits, see GetRecords, and Streams Limits in the Amazon Kinesis Data Streams Developer Guide.

If the shard is closed, GetShardIterator returns a valid iterator for the last sequence number of the shard. A shard can be closed as a result of using SplitShard or MergeShards.

GetShardIterator has a limit of five transactions per second per account per open shard.

", - "IncreaseStreamRetentionPeriod": "

Increases the Kinesis data stream's retention period, which is the length of time data records are accessible after they are added to the stream. The maximum value of a stream's retention period is 8760 hours (365 days).

When invoking this API, it is recommended you use the StreamARN input parameter rather than the StreamName input parameter.

If you choose a longer stream retention period, this operation increases the time period during which records that have not yet expired are accessible. However, it does not make previous, expired data (older than the stream's previous retention period) accessible after the operation has been called. For example, if a stream's retention period is set to 24 hours and is increased to 168 hours, any data that is older than 24 hours remains inaccessible to consumer applications.

", - "ListShards": "

Lists the shards in a stream and provides information about each shard. This operation has a limit of 1000 transactions per second per data stream.

When invoking this API, it is recommended you use the StreamARN input parameter rather than the StreamName input parameter.

This action does not list expired shards. For information about expired shards, see Data Routing, Data Persistence, and Shard State after a Reshard.

This API is a new operation that is used by the Amazon Kinesis Client Library (KCL). If you have a fine-grained IAM policy that only allows specific operations, you must update your policy to allow calls to this API. For more information, see Controlling Access to Amazon Kinesis Data Streams Resources Using IAM.

", + "DescribeStream": "

Describes the specified Kinesis data stream.

This API has been revised. It's highly recommended that you use the DescribeStreamSummary API to get a summarized description of the specified Kinesis data stream and the ListShards API to list the shards in a specified data stream and obtain information about each shard.

When invoking this API, you must use either the StreamARN or the StreamName parameter, or both. It is recommended that you use the StreamARN input parameter when you invoke this API.

The information returned includes the stream name, Amazon Resource Name (ARN), creation time, enhanced metric configuration, and shard map. The shard map is an array of shard objects. For each shard object, there is the hash key and sequence number ranges that the shard spans, and the IDs of any earlier shards that played in a role in creating the shard. Every record ingested in the stream is identified by a sequence number, which is assigned when the record is put into the stream.

You can limit the number of shards returned by each call. For more information, see Retrieving Shards from a Stream in the Amazon Kinesis Data Streams Developer Guide.

There are no guarantees about the chronological order shards returned. To process shards in chronological order, use the ID of the parent shard to track the lineage to the oldest shard.

This operation has a limit of 10 transactions per second per account.

", + "DescribeStreamConsumer": "

To get the description of a registered consumer, provide the ARN of the consumer. Alternatively, you can provide the ARN of the data stream and the name you gave the consumer when you registered it. You may also provide all three parameters, as long as they don't conflict with each other. If you don't know the name or ARN of the consumer that you want to describe, you can use the ListStreamConsumers operation to get a list of the descriptions of all the consumers that are currently registered with a given data stream.

This operation has a limit of 20 transactions per second per stream.

When making a cross-account call with DescribeStreamConsumer, make sure to provide the ARN of the consumer.

", + "DescribeStreamSummary": "

Provides a summarized description of the specified Kinesis data stream without the shard list.

When invoking this API, you must use either the StreamARN or the StreamName parameter, or both. It is recommended that you use the StreamARN input parameter when you invoke this API.

The information returned includes the stream name, Amazon Resource Name (ARN), status, record retention period, approximate creation time, monitoring, encryption details, and open shard count.

DescribeStreamSummary has a limit of 20 transactions per second per account.

", + "DisableEnhancedMonitoring": "

Disables enhanced monitoring.

When invoking this API, you must use either the StreamARN or the StreamName parameter, or both. It is recommended that you use the StreamARN input parameter when you invoke this API.

", + "EnableEnhancedMonitoring": "

Enables enhanced Kinesis data stream monitoring for shard-level metrics.

When invoking this API, you must use either the StreamARN or the StreamName parameter, or both. It is recommended that you use the StreamARN input parameter when you invoke this API.

", + "GetRecords": "

Gets data records from a Kinesis data stream's shard.

When invoking this API, you must use either the StreamARN or the StreamName parameter, or both. It is recommended that you use the StreamARN input parameter when you invoke this API.

Specify a shard iterator using the ShardIterator parameter. The shard iterator specifies the position in the shard from which you want to start reading data records sequentially. If there are no records available in the portion of the shard that the iterator points to, GetRecords returns an empty list. It might take multiple calls to get to a portion of the shard that contains records.

You can scale by provisioning multiple shards per stream while considering service limits (for more information, see Amazon Kinesis Data Streams Limits in the Amazon Kinesis Data Streams Developer Guide). Your application should have one thread per shard, each reading continuously from its stream. To read from a stream continually, call GetRecords in a loop. Use GetShardIterator to get the shard iterator to specify in the first GetRecords call. GetRecords returns a new shard iterator in NextShardIterator. Specify the shard iterator returned in NextShardIterator in subsequent calls to GetRecords. If the shard has been closed, the shard iterator can't return more data and GetRecords returns null in NextShardIterator. You can terminate the loop when the shard is closed, or when the shard iterator reaches the record with the sequence number or other attribute that marks it as the last record to process.

Each data record can be up to 1 MiB in size, and each shard can read up to 2 MiB per second. You can ensure that your calls don't exceed the maximum supported size or throughput by using the Limit parameter to specify the maximum number of records that GetRecords can return. Consider your average record size when determining this limit. The maximum number of records that can be returned per call is 10,000.

The size of the data returned by GetRecords varies depending on the utilization of the shard. It is recommended that consumer applications retrieve records via the GetRecords command using the 5 TPS limit to remain caught up. Retrieving records less frequently can lead to consumer applications falling behind. The maximum size of data that GetRecords can return is 10 MiB. If a call returns this amount of data, subsequent calls made within the next 5 seconds throw ProvisionedThroughputExceededException. If there is insufficient provisioned throughput on the stream, subsequent calls made within the next 1 second throw ProvisionedThroughputExceededException. GetRecords doesn't return any data when it throws an exception. For this reason, we recommend that you wait 1 second between calls to GetRecords. However, it's possible that the application will get exceptions for longer than 1 second.

To detect whether the application is falling behind in processing, you can use the MillisBehindLatest response attribute. You can also monitor the stream using CloudWatch metrics and other mechanisms (see Monitoring in the Amazon Kinesis Data Streams Developer Guide).

Each Amazon Kinesis record includes a value, ApproximateArrivalTimestamp, that is set when a stream successfully receives and stores a record. This is commonly referred to as a server-side time stamp, whereas a client-side time stamp is set when a data producer creates or sends the record to a stream (a data producer is any data source putting data records into a stream, for example with PutRecords). The time stamp has millisecond precision. There are no guarantees about the time stamp accuracy, or that the time stamp is always increasing. For example, records in a shard or across a stream might have time stamps that are out of order.

This operation has a limit of five transactions per second per shard.

", + "GetResourcePolicy": "

Returns a policy attached to the specified data stream or consumer. Request patterns can be one of the following:

", + "GetShardIterator": "

Gets an Amazon Kinesis shard iterator. A shard iterator expires 5 minutes after it is returned to the requester.

When invoking this API, you must use either the StreamARN or the StreamName parameter, or both. It is recommended that you use the StreamARN input parameter when you invoke this API.

A shard iterator specifies the shard position from which to start reading data records sequentially. The position is specified using the sequence number of a data record in a shard. A sequence number is the identifier associated with every record ingested in the stream, and is assigned when a record is put into the stream. Each stream has one or more shards.

You must specify the shard iterator type. For example, you can set the ShardIteratorType parameter to read exactly from the position denoted by a specific sequence number by using the AT_SEQUENCE_NUMBER shard iterator type. Alternatively, the parameter can read right after the sequence number by using the AFTER_SEQUENCE_NUMBER shard iterator type, using sequence numbers returned by earlier calls to PutRecord, PutRecords, GetRecords, or DescribeStream. In the request, you can specify the shard iterator type AT_TIMESTAMP to read records from an arbitrary point in time, TRIM_HORIZON to cause ShardIterator to point to the last untrimmed record in the shard in the system (the oldest data record in the shard), or LATEST so that you always read the most recent data in the shard.

When you read repeatedly from a stream, use a GetShardIterator request to get the first shard iterator for use in your first GetRecords request and for subsequent reads use the shard iterator returned by the GetRecords request in NextShardIterator. A new shard iterator is returned by every GetRecords request in NextShardIterator, which you use in the ShardIterator parameter of the next GetRecords request.

If a GetShardIterator request is made too often, you receive a ProvisionedThroughputExceededException. For more information about throughput limits, see GetRecords, and Streams Limits in the Amazon Kinesis Data Streams Developer Guide.

If the shard is closed, GetShardIterator returns a valid iterator for the last sequence number of the shard. A shard can be closed as a result of using SplitShard or MergeShards.

GetShardIterator has a limit of five transactions per second per account per open shard.

", + "IncreaseStreamRetentionPeriod": "

Increases the Kinesis data stream's retention period, which is the length of time data records are accessible after they are added to the stream. The maximum value of a stream's retention period is 8760 hours (365 days).

When invoking this API, you must use either the StreamARN or the StreamName parameter, or both. It is recommended that you use the StreamARN input parameter when you invoke this API.

If you choose a longer stream retention period, this operation increases the time period during which records that have not yet expired are accessible. However, it does not make previous, expired data (older than the stream's previous retention period) accessible after the operation has been called. For example, if a stream's retention period is set to 24 hours and is increased to 168 hours, any data that is older than 24 hours remains inaccessible to consumer applications.

", + "ListShards": "

Lists the shards in a stream and provides information about each shard. This operation has a limit of 1000 transactions per second per data stream.

When invoking this API, you must use either the StreamARN or the StreamName parameter, or both. It is recommended that you use the StreamARN input parameter when you invoke this API.

This action does not list expired shards. For information about expired shards, see Data Routing, Data Persistence, and Shard State after a Reshard.

This API is a new operation that is used by the Amazon Kinesis Client Library (KCL). If you have a fine-grained IAM policy that only allows specific operations, you must update your policy to allow calls to this API. For more information, see Controlling Access to Amazon Kinesis Data Streams Resources Using IAM.

", "ListStreamConsumers": "

Lists the consumers registered to receive data from a stream using enhanced fan-out, and provides information about each consumer.

This operation has a limit of 5 transactions per second per stream.

", "ListStreams": "

Lists your Kinesis data streams.

The number of streams may be too large to return from a single call to ListStreams. You can limit the number of returned streams using the Limit parameter. If you do not specify a value for the Limit parameter, Kinesis Data Streams uses the default limit, which is currently 100.

You can detect if there are more streams available to list by using the HasMoreStreams flag from the returned output. If there are more streams available, you can request more streams by using the name of the last stream returned by the ListStreams request in the ExclusiveStartStreamName parameter in a subsequent request to ListStreams. The group of stream names returned by the subsequent request is then added to the list. You can continue this process until all the stream names have been collected in the list.

ListStreams has a limit of five transactions per second per account.

", - "ListTagsForStream": "

Lists the tags for the specified Kinesis data stream. This operation has a limit of five transactions per second per account.

When invoking this API, it is recommended you use the StreamARN input parameter rather than the StreamName input parameter.

", - "MergeShards": "

Merges two adjacent shards in a Kinesis data stream and combines them into a single shard to reduce the stream's capacity to ingest and transport data. This API is only supported for the data streams with the provisioned capacity mode. Two shards are considered adjacent if the union of the hash key ranges for the two shards form a contiguous set with no gaps. For example, if you have two shards, one with a hash key range of 276...381 and the other with a hash key range of 382...454, then you could merge these two shards into a single shard that would have a hash key range of 276...454. After the merge, the single child shard receives data for all hash key values covered by the two parent shards.

When invoking this API, it is recommended you use the StreamARN input parameter rather than the StreamName input parameter.

MergeShards is called when there is a need to reduce the overall capacity of a stream because of excess capacity that is not being used. You must specify the shard to be merged and the adjacent shard for a stream. For more information about merging shards, see Merge Two Shards in the Amazon Kinesis Data Streams Developer Guide.

If the stream is in the ACTIVE state, you can call MergeShards. If a stream is in the CREATING, UPDATING, or DELETING state, MergeShards returns a ResourceInUseException. If the specified stream does not exist, MergeShards returns a ResourceNotFoundException.

You can use DescribeStreamSummary to check the state of the stream, which is returned in StreamStatus.

MergeShards is an asynchronous operation. Upon receiving a MergeShards request, Amazon Kinesis Data Streams immediately returns a response and sets the StreamStatus to UPDATING. After the operation is completed, Kinesis Data Streams sets the StreamStatus to ACTIVE. Read and write operations continue to work while the stream is in the UPDATING state.

You use DescribeStreamSummary and the ListShards APIs to determine the shard IDs that are specified in the MergeShards request.

If you try to operate on too many streams in parallel using CreateStream, DeleteStream, MergeShards, or SplitShard, you receive a LimitExceededException.

MergeShards has a limit of five transactions per second per account.

", - "PutRecord": "

Writes a single data record into an Amazon Kinesis data stream. Call PutRecord to send data into the stream for real-time ingestion and subsequent processing, one record at a time. Each shard can support writes up to 1,000 records per second, up to a maximum data write total of 1 MiB per second.

When invoking this API, it is recommended you use the StreamARN input parameter rather than the StreamName input parameter.

You must specify the name of the stream that captures, stores, and transports the data; a partition key; and the data blob itself.

The data blob can be any type of data; for example, a segment from a log file, geographic/location data, website clickstream data, and so on.

The partition key is used by Kinesis Data Streams to distribute data across shards. Kinesis Data Streams segregates the data records that belong to a stream into multiple shards, using the partition key associated with each data record to determine the shard to which a given data record belongs.

Partition keys are Unicode strings, with a maximum length limit of 256 characters for each key. An MD5 hash function is used to map partition keys to 128-bit integer values and to map associated data records to shards using the hash key ranges of the shards. You can override hashing the partition key to determine the shard by explicitly specifying a hash value using the ExplicitHashKey parameter. For more information, see Adding Data to a Stream in the Amazon Kinesis Data Streams Developer Guide.

PutRecord returns the shard ID of where the data record was placed and the sequence number that was assigned to the data record.

Sequence numbers increase over time and are specific to a shard within a stream, not across all shards within a stream. To guarantee strictly increasing ordering, write serially to a shard and use the SequenceNumberForOrdering parameter. For more information, see Adding Data to a Stream in the Amazon Kinesis Data Streams Developer Guide.

After you write a record to a stream, you cannot modify that record or its order within the stream.

If a PutRecord request cannot be processed because of insufficient provisioned throughput on the shard involved in the request, PutRecord throws ProvisionedThroughputExceededException.

By default, data records are accessible for 24 hours from the time that they are added to a stream. You can use IncreaseStreamRetentionPeriod or DecreaseStreamRetentionPeriod to modify this retention period.

", - "PutRecords": "

Writes multiple data records into a Kinesis data stream in a single call (also referred to as a PutRecords request). Use this operation to send data into the stream for data ingestion and processing.

When invoking this API, it is recommended you use the StreamARN input parameter rather than the StreamName input parameter.

Each PutRecords request can support up to 500 records. Each record in the request can be as large as 1 MiB, up to a limit of 5 MiB for the entire request, including partition keys. Each shard can support writes up to 1,000 records per second, up to a maximum data write total of 1 MiB per second.

You must specify the name of the stream that captures, stores, and transports the data; and an array of request Records, with each record in the array requiring a partition key and data blob. The record size limit applies to the total size of the partition key and data blob.

The data blob can be any type of data; for example, a segment from a log file, geographic/location data, website clickstream data, and so on.

The partition key is used by Kinesis Data Streams as input to a hash function that maps the partition key and associated data to a specific shard. An MD5 hash function is used to map partition keys to 128-bit integer values and to map associated data records to shards. As a result of this hashing mechanism, all data records with the same partition key map to the same shard within the stream. For more information, see Adding Data to a Stream in the Amazon Kinesis Data Streams Developer Guide.

Each record in the Records array may include an optional parameter, ExplicitHashKey, which overrides the partition key to shard mapping. This parameter allows a data producer to determine explicitly the shard where the record is stored. For more information, see Adding Multiple Records with PutRecords in the Amazon Kinesis Data Streams Developer Guide.

The PutRecords response includes an array of response Records. Each record in the response array directly correlates with a record in the request array using natural ordering, from the top to the bottom of the request and response. The response Records array always includes the same number of records as the request array.

The response Records array includes both successfully and unsuccessfully processed records. Kinesis Data Streams attempts to process all records in each PutRecords request. A single record failure does not stop the processing of subsequent records. As a result, PutRecords doesn't guarantee the ordering of records. If you need to read records in the same order they are written to the stream, use PutRecord instead of PutRecords, and write to the same shard.

A successfully processed record includes ShardId and SequenceNumber values. The ShardId parameter identifies the shard in the stream where the record is stored. The SequenceNumber parameter is an identifier assigned to the put record, unique to all records in the stream.

An unsuccessfully processed record includes ErrorCode and ErrorMessage values. ErrorCode reflects the type of error and can be one of the following values: ProvisionedThroughputExceededException or InternalFailure. ErrorMessage provides more detailed information about the ProvisionedThroughputExceededException exception including the account ID, stream name, and shard ID of the record that was throttled. For more information about partially successful responses, see Adding Multiple Records with PutRecords in the Amazon Kinesis Data Streams Developer Guide.

After you write a record to a stream, you cannot modify that record or its order within the stream.

By default, data records are accessible for 24 hours from the time that they are added to a stream. You can use IncreaseStreamRetentionPeriod or DecreaseStreamRetentionPeriod to modify this retention period.

", + "ListTagsForStream": "

Lists the tags for the specified Kinesis data stream. This operation has a limit of five transactions per second per account.

When invoking this API, you must use either the StreamARN or the StreamName parameter, or both. It is recommended that you use the StreamARN input parameter when you invoke this API.

", + "MergeShards": "

Merges two adjacent shards in a Kinesis data stream and combines them into a single shard to reduce the stream's capacity to ingest and transport data. This API is only supported for the data streams with the provisioned capacity mode. Two shards are considered adjacent if the union of the hash key ranges for the two shards form a contiguous set with no gaps. For example, if you have two shards, one with a hash key range of 276...381 and the other with a hash key range of 382...454, then you could merge these two shards into a single shard that would have a hash key range of 276...454. After the merge, the single child shard receives data for all hash key values covered by the two parent shards.

When invoking this API, you must use either the StreamARN or the StreamName parameter, or both. It is recommended that you use the StreamARN input parameter when you invoke this API.

MergeShards is called when there is a need to reduce the overall capacity of a stream because of excess capacity that is not being used. You must specify the shard to be merged and the adjacent shard for a stream. For more information about merging shards, see Merge Two Shards in the Amazon Kinesis Data Streams Developer Guide.

If the stream is in the ACTIVE state, you can call MergeShards. If a stream is in the CREATING, UPDATING, or DELETING state, MergeShards returns a ResourceInUseException. If the specified stream does not exist, MergeShards returns a ResourceNotFoundException.

You can use DescribeStreamSummary to check the state of the stream, which is returned in StreamStatus.

MergeShards is an asynchronous operation. Upon receiving a MergeShards request, Amazon Kinesis Data Streams immediately returns a response and sets the StreamStatus to UPDATING. After the operation is completed, Kinesis Data Streams sets the StreamStatus to ACTIVE. Read and write operations continue to work while the stream is in the UPDATING state.

You use DescribeStreamSummary and the ListShards APIs to determine the shard IDs that are specified in the MergeShards request.

If you try to operate on too many streams in parallel using CreateStream, DeleteStream, MergeShards, or SplitShard, you receive a LimitExceededException.

MergeShards has a limit of five transactions per second per account.

", + "PutRecord": "

Writes a single data record into an Amazon Kinesis data stream. Call PutRecord to send data into the stream for real-time ingestion and subsequent processing, one record at a time. Each shard can support writes up to 1,000 records per second, up to a maximum data write total of 1 MiB per second.

When invoking this API, you must use either the StreamARN or the StreamName parameter, or both. It is recommended that you use the StreamARN input parameter when you invoke this API.

You must specify the name of the stream that captures, stores, and transports the data; a partition key; and the data blob itself.

The data blob can be any type of data; for example, a segment from a log file, geographic/location data, website clickstream data, and so on.

The partition key is used by Kinesis Data Streams to distribute data across shards. Kinesis Data Streams segregates the data records that belong to a stream into multiple shards, using the partition key associated with each data record to determine the shard to which a given data record belongs.

Partition keys are Unicode strings, with a maximum length limit of 256 characters for each key. An MD5 hash function is used to map partition keys to 128-bit integer values and to map associated data records to shards using the hash key ranges of the shards. You can override hashing the partition key to determine the shard by explicitly specifying a hash value using the ExplicitHashKey parameter. For more information, see Adding Data to a Stream in the Amazon Kinesis Data Streams Developer Guide.

PutRecord returns the shard ID of where the data record was placed and the sequence number that was assigned to the data record.

Sequence numbers increase over time and are specific to a shard within a stream, not across all shards within a stream. To guarantee strictly increasing ordering, write serially to a shard and use the SequenceNumberForOrdering parameter. For more information, see Adding Data to a Stream in the Amazon Kinesis Data Streams Developer Guide.

After you write a record to a stream, you cannot modify that record or its order within the stream.

If a PutRecord request cannot be processed because of insufficient provisioned throughput on the shard involved in the request, PutRecord throws ProvisionedThroughputExceededException.

By default, data records are accessible for 24 hours from the time that they are added to a stream. You can use IncreaseStreamRetentionPeriod or DecreaseStreamRetentionPeriod to modify this retention period.

", + "PutRecords": "

Writes multiple data records into a Kinesis data stream in a single call (also referred to as a PutRecords request). Use this operation to send data into the stream for data ingestion and processing.

When invoking this API, you must use either the StreamARN or the StreamName parameter, or both. It is recommended that you use the StreamARN input parameter when you invoke this API.

Each PutRecords request can support up to 500 records. Each record in the request can be as large as 1 MiB, up to a limit of 5 MiB for the entire request, including partition keys. Each shard can support writes up to 1,000 records per second, up to a maximum data write total of 1 MiB per second.

You must specify the name of the stream that captures, stores, and transports the data; and an array of request Records, with each record in the array requiring a partition key and data blob. The record size limit applies to the total size of the partition key and data blob.

The data blob can be any type of data; for example, a segment from a log file, geographic/location data, website clickstream data, and so on.

The partition key is used by Kinesis Data Streams as input to a hash function that maps the partition key and associated data to a specific shard. An MD5 hash function is used to map partition keys to 128-bit integer values and to map associated data records to shards. As a result of this hashing mechanism, all data records with the same partition key map to the same shard within the stream. For more information, see Adding Data to a Stream in the Amazon Kinesis Data Streams Developer Guide.

Each record in the Records array may include an optional parameter, ExplicitHashKey, which overrides the partition key to shard mapping. This parameter allows a data producer to determine explicitly the shard where the record is stored. For more information, see Adding Multiple Records with PutRecords in the Amazon Kinesis Data Streams Developer Guide.

The PutRecords response includes an array of response Records. Each record in the response array directly correlates with a record in the request array using natural ordering, from the top to the bottom of the request and response. The response Records array always includes the same number of records as the request array.

The response Records array includes both successfully and unsuccessfully processed records. Kinesis Data Streams attempts to process all records in each PutRecords request. A single record failure does not stop the processing of subsequent records. As a result, PutRecords doesn't guarantee the ordering of records. If you need to read records in the same order they are written to the stream, use PutRecord instead of PutRecords, and write to the same shard.

A successfully processed record includes ShardId and SequenceNumber values. The ShardId parameter identifies the shard in the stream where the record is stored. The SequenceNumber parameter is an identifier assigned to the put record, unique to all records in the stream.

An unsuccessfully processed record includes ErrorCode and ErrorMessage values. ErrorCode reflects the type of error and can be one of the following values: ProvisionedThroughputExceededException or InternalFailure. ErrorMessage provides more detailed information about the ProvisionedThroughputExceededException exception including the account ID, stream name, and shard ID of the record that was throttled. For more information about partially successful responses, see Adding Multiple Records with PutRecords in the Amazon Kinesis Data Streams Developer Guide.

After you write a record to a stream, you cannot modify that record or its order within the stream.

By default, data records are accessible for 24 hours from the time that they are added to a stream. You can use IncreaseStreamRetentionPeriod or DecreaseStreamRetentionPeriod to modify this retention period.

", + "PutResourcePolicy": "

Attaches a resource-based policy to a data stream or registered consumer. If you are using an identity other than the root user of the Amazon Web Services account that owns the resource, the calling identity must have the PutResourcePolicy permissions on the specified Kinesis Data Streams resource and belong to the owner's account in order to use this operation. If you don't have PutResourcePolicy permissions, Amazon Kinesis Data Streams returns a 403 Access Denied error. If you receive a ResourceNotFoundException, check to see if you passed a valid stream or consumer resource.

Request patterns can be one of the following:

For more information, see Controlling Access to Amazon Kinesis Data Streams Resources Using IAM.

", "RegisterStreamConsumer": "

Registers a consumer with a Kinesis data stream. When you use this operation, the consumer you register can then call SubscribeToShard to receive data from the stream using enhanced fan-out, at a rate of up to 2 MiB per second for every shard you subscribe to. This rate is unaffected by the total number of consumers that read from the same stream.

You can register up to 20 consumers per stream. A given consumer can only be registered with one stream at a time.

For an example of how to use this operations, see Enhanced Fan-Out Using the Kinesis Data Streams API.

The use of this operation has a limit of five transactions per second per account. Also, only 5 consumers can be created simultaneously. In other words, you cannot have more than 5 consumers in a CREATING status at the same time. Registering a 6th consumer while there are 5 in a CREATING status results in a LimitExceededException.

", - "RemoveTagsFromStream": "

Removes tags from the specified Kinesis data stream. Removed tags are deleted and cannot be recovered after this operation successfully completes.

When invoking this API, it is recommended you use the StreamARN input parameter rather than the StreamName input parameter.

If you specify a tag that does not exist, it is ignored.

RemoveTagsFromStream has a limit of five transactions per second per account.

", - "SplitShard": "

Splits a shard into two new shards in the Kinesis data stream, to increase the stream's capacity to ingest and transport data. SplitShard is called when there is a need to increase the overall capacity of a stream because of an expected increase in the volume of data records being ingested. This API is only supported for the data streams with the provisioned capacity mode.

When invoking this API, it is recommended you use the StreamARN input parameter rather than the StreamName input parameter.

You can also use SplitShard when a shard appears to be approaching its maximum utilization; for example, the producers sending data into the specific shard are suddenly sending more than previously anticipated. You can also call SplitShard to increase stream capacity, so that more Kinesis Data Streams applications can simultaneously read data from the stream for real-time processing.

You must specify the shard to be split and the new hash key, which is the position in the shard where the shard gets split in two. In many cases, the new hash key might be the average of the beginning and ending hash key, but it can be any hash key value in the range being mapped into the shard. For more information, see Split a Shard in the Amazon Kinesis Data Streams Developer Guide.

You can use DescribeStreamSummary and the ListShards APIs to determine the shard ID and hash key values for the ShardToSplit and NewStartingHashKey parameters that are specified in the SplitShard request.

SplitShard is an asynchronous operation. Upon receiving a SplitShard request, Kinesis Data Streams immediately returns a response and sets the stream status to UPDATING. After the operation is completed, Kinesis Data Streams sets the stream status to ACTIVE. Read and write operations continue to work while the stream is in the UPDATING state.

You can use DescribeStreamSummary to check the status of the stream, which is returned in StreamStatus. If the stream is in the ACTIVE state, you can call SplitShard.

If the specified stream does not exist, DescribeStreamSummary returns a ResourceNotFoundException. If you try to create more shards than are authorized for your account, you receive a LimitExceededException.

For the default shard limit for an Amazon Web Services account, see Kinesis Data Streams Limits in the Amazon Kinesis Data Streams Developer Guide. To increase this limit, contact Amazon Web Services Support.

If you try to operate on too many streams simultaneously using CreateStream, DeleteStream, MergeShards, and/or SplitShard, you receive a LimitExceededException.

SplitShard has a limit of five transactions per second per account.

", - "StartStreamEncryption": "

Enables or updates server-side encryption using an Amazon Web Services KMS key for a specified stream.

Starting encryption is an asynchronous operation. Upon receiving the request, Kinesis Data Streams returns immediately and sets the status of the stream to UPDATING. After the update is complete, Kinesis Data Streams sets the status of the stream back to ACTIVE. Updating or applying encryption normally takes a few seconds to complete, but it can take minutes. You can continue to read and write data to your stream while its status is UPDATING. Once the status of the stream is ACTIVE, encryption begins for records written to the stream.

API Limits: You can successfully apply a new Amazon Web Services KMS key for server-side encryption 25 times in a rolling 24-hour period.

Note: It can take up to 5 seconds after the stream is in an ACTIVE status before all records written to the stream are encrypted. After you enable encryption, you can verify that encryption is applied by inspecting the API response from PutRecord or PutRecords.

When invoking this API, it is recommended you use the StreamARN input parameter rather than the StreamName input parameter.

", - "StopStreamEncryption": "

Disables server-side encryption for a specified stream.

When invoking this API, it is recommended you use the StreamARN input parameter rather than the StreamName input parameter.

Stopping encryption is an asynchronous operation. Upon receiving the request, Kinesis Data Streams returns immediately and sets the status of the stream to UPDATING. After the update is complete, Kinesis Data Streams sets the status of the stream back to ACTIVE. Stopping encryption normally takes a few seconds to complete, but it can take minutes. You can continue to read and write data to your stream while its status is UPDATING. Once the status of the stream is ACTIVE, records written to the stream are no longer encrypted by Kinesis Data Streams.

API Limits: You can successfully disable server-side encryption 25 times in a rolling 24-hour period.

Note: It can take up to 5 seconds after the stream is in an ACTIVE status before all records written to the stream are no longer subject to encryption. After you disabled encryption, you can verify that encryption is not applied by inspecting the API response from PutRecord or PutRecords.

", + "RemoveTagsFromStream": "

Removes tags from the specified Kinesis data stream. Removed tags are deleted and cannot be recovered after this operation successfully completes.

When invoking this API, you must use either the StreamARN or the StreamName parameter, or both. It is recommended that you use the StreamARN input parameter when you invoke this API.

If you specify a tag that does not exist, it is ignored.

RemoveTagsFromStream has a limit of five transactions per second per account.

", + "SplitShard": "

Splits a shard into two new shards in the Kinesis data stream, to increase the stream's capacity to ingest and transport data. SplitShard is called when there is a need to increase the overall capacity of a stream because of an expected increase in the volume of data records being ingested. This API is only supported for the data streams with the provisioned capacity mode.

When invoking this API, you must use either the StreamARN or the StreamName parameter, or both. It is recommended that you use the StreamARN input parameter when you invoke this API.

You can also use SplitShard when a shard appears to be approaching its maximum utilization; for example, the producers sending data into the specific shard are suddenly sending more than previously anticipated. You can also call SplitShard to increase stream capacity, so that more Kinesis Data Streams applications can simultaneously read data from the stream for real-time processing.

You must specify the shard to be split and the new hash key, which is the position in the shard where the shard gets split in two. In many cases, the new hash key might be the average of the beginning and ending hash key, but it can be any hash key value in the range being mapped into the shard. For more information, see Split a Shard in the Amazon Kinesis Data Streams Developer Guide.

You can use DescribeStreamSummary and the ListShards APIs to determine the shard ID and hash key values for the ShardToSplit and NewStartingHashKey parameters that are specified in the SplitShard request.

SplitShard is an asynchronous operation. Upon receiving a SplitShard request, Kinesis Data Streams immediately returns a response and sets the stream status to UPDATING. After the operation is completed, Kinesis Data Streams sets the stream status to ACTIVE. Read and write operations continue to work while the stream is in the UPDATING state.

You can use DescribeStreamSummary to check the status of the stream, which is returned in StreamStatus. If the stream is in the ACTIVE state, you can call SplitShard.

If the specified stream does not exist, DescribeStreamSummary returns a ResourceNotFoundException. If you try to create more shards than are authorized for your account, you receive a LimitExceededException.

For the default shard limit for an Amazon Web Services account, see Kinesis Data Streams Limits in the Amazon Kinesis Data Streams Developer Guide. To increase this limit, contact Amazon Web Services Support.

If you try to operate on too many streams simultaneously using CreateStream, DeleteStream, MergeShards, and/or SplitShard, you receive a LimitExceededException.

SplitShard has a limit of five transactions per second per account.

", + "StartStreamEncryption": "

Enables or updates server-side encryption using an Amazon Web Services KMS key for a specified stream.

When invoking this API, you must use either the StreamARN or the StreamName parameter, or both. It is recommended that you use the StreamARN input parameter when you invoke this API.

Starting encryption is an asynchronous operation. Upon receiving the request, Kinesis Data Streams returns immediately and sets the status of the stream to UPDATING. After the update is complete, Kinesis Data Streams sets the status of the stream back to ACTIVE. Updating or applying encryption normally takes a few seconds to complete, but it can take minutes. You can continue to read and write data to your stream while its status is UPDATING. Once the status of the stream is ACTIVE, encryption begins for records written to the stream.

API Limits: You can successfully apply a new Amazon Web Services KMS key for server-side encryption 25 times in a rolling 24-hour period.

Note: It can take up to 5 seconds after the stream is in an ACTIVE status before all records written to the stream are encrypted. After you enable encryption, you can verify that encryption is applied by inspecting the API response from PutRecord or PutRecords.

", + "StopStreamEncryption": "

Disables server-side encryption for a specified stream.

When invoking this API, you must use either the StreamARN or the StreamName parameter, or both. It is recommended that you use the StreamARN input parameter when you invoke this API.

Stopping encryption is an asynchronous operation. Upon receiving the request, Kinesis Data Streams returns immediately and sets the status of the stream to UPDATING. After the update is complete, Kinesis Data Streams sets the status of the stream back to ACTIVE. Stopping encryption normally takes a few seconds to complete, but it can take minutes. You can continue to read and write data to your stream while its status is UPDATING. Once the status of the stream is ACTIVE, records written to the stream are no longer encrypted by Kinesis Data Streams.

API Limits: You can successfully disable server-side encryption 25 times in a rolling 24-hour period.

Note: It can take up to 5 seconds after the stream is in an ACTIVE status before all records written to the stream are no longer subject to encryption. After you disabled encryption, you can verify that encryption is not applied by inspecting the API response from PutRecord or PutRecords.

", "SubscribeToShard": "

This operation establishes an HTTP/2 connection between the consumer you specify in the ConsumerARN parameter and the shard you specify in the ShardId parameter. After the connection is successfully established, Kinesis Data Streams pushes records from the shard to the consumer over this connection. Before you call this operation, call RegisterStreamConsumer to register the consumer with Kinesis Data Streams.

When the SubscribeToShard call succeeds, your consumer starts receiving events of type SubscribeToShardEvent over the HTTP/2 connection for up to 5 minutes, after which time you need to call SubscribeToShard again to renew the subscription if you want to continue to receive records.

You can make one call to SubscribeToShard per second per registered consumer per shard. For example, if you have a 4000 shard stream and two registered stream consumers, you can make one SubscribeToShard request per second for each combination of shard and registered consumer, allowing you to subscribe both consumers to all 4000 shards in one second.

If you call SubscribeToShard again with the same ConsumerARN and ShardId within 5 seconds of a successful call, you'll get a ResourceInUseException. If you call SubscribeToShard 5 seconds or more after a successful call, the second call takes over the subscription and the previous connection expires or fails with a ResourceInUseException.

For an example of how to use this operations, see Enhanced Fan-Out Using the Kinesis Data Streams API.

", - "UpdateShardCount": "

Updates the shard count of the specified stream to the specified number of shards. This API is only supported for the data streams with the provisioned capacity mode.

When invoking this API, it is recommended you use the StreamARN input parameter rather than the StreamName input parameter.

Updating the shard count is an asynchronous operation. Upon receiving the request, Kinesis Data Streams returns immediately and sets the status of the stream to UPDATING. After the update is complete, Kinesis Data Streams sets the status of the stream back to ACTIVE. Depending on the size of the stream, the scaling action could take a few minutes to complete. You can continue to read and write data to your stream while its status is UPDATING.

To update the shard count, Kinesis Data Streams performs splits or merges on individual shards. This can cause short-lived shards to be created, in addition to the final shards. These short-lived shards count towards your total shard limit for your account in the Region.

When using this operation, we recommend that you specify a target shard count that is a multiple of 25% (25%, 50%, 75%, 100%). You can specify any target value within your shard limit. However, if you specify a target that isn't a multiple of 25%, the scaling action might take longer to complete.

This operation has the following default limits. By default, you cannot do the following:

For the default limits for an Amazon Web Services account, see Streams Limits in the Amazon Kinesis Data Streams Developer Guide. To request an increase in the call rate limit, the shard limit for this API, or your overall shard limit, use the limits form.

", + "UpdateShardCount": "

Updates the shard count of the specified stream to the specified number of shards. This API is only supported for the data streams with the provisioned capacity mode.

When invoking this API, you must use either the StreamARN or the StreamName parameter, or both. It is recommended that you use the StreamARN input parameter when you invoke this API.

Updating the shard count is an asynchronous operation. Upon receiving the request, Kinesis Data Streams returns immediately and sets the status of the stream to UPDATING. After the update is complete, Kinesis Data Streams sets the status of the stream back to ACTIVE. Depending on the size of the stream, the scaling action could take a few minutes to complete. You can continue to read and write data to your stream while its status is UPDATING.

To update the shard count, Kinesis Data Streams performs splits or merges on individual shards. This can cause short-lived shards to be created, in addition to the final shards. These short-lived shards count towards your total shard limit for your account in the Region.

When using this operation, we recommend that you specify a target shard count that is a multiple of 25% (25%, 50%, 75%, 100%). You can specify any target value within your shard limit. However, if you specify a target that isn't a multiple of 25%, the scaling action might take longer to complete.

This operation has the following default limits. By default, you cannot do the following:

For the default limits for an Amazon Web Services account, see Streams Limits in the Amazon Kinesis Data Streams Developer Guide. To request an increase in the call rate limit, the shard limit for this API, or your overall shard limit, use the limits form.

", "UpdateStreamMode": "

Updates the capacity mode of the data stream. Currently, in Kinesis Data Streams, you can choose between an on-demand capacity mode and a provisioned capacity mode for your data stream.

" }, "shapes": { @@ -135,6 +138,11 @@ "refs": { } }, + "DeleteResourcePolicyInput": { + "base": null, + "refs": { + } + }, "DeleteStreamInput": { "base": "

Represents the input for DeleteStream.

", "refs": { @@ -285,6 +293,16 @@ "refs": { } }, + "GetResourcePolicyInput": { + "base": null, + "refs": { + } + }, + "GetResourcePolicyOutput": { + "base": null, + "refs": { + } + }, "GetShardIteratorInput": { "base": "

Represents the input for GetShardIterator.

", "refs": { @@ -501,6 +519,13 @@ "Record$PartitionKey": "

Identifies which shard in the stream the data record is assigned to.

" } }, + "Policy": { + "base": null, + "refs": { + "GetResourcePolicyOutput$Policy": "

Details of the resource policy. This is formatted as a JSON string.

", + "PutResourcePolicyInput$Policy": "

Details of the resource policy. It must include the identity of the principal and the actions allowed on this resource. This is formatted as a JSON string.

" + } + }, "PositiveIntegerObject": { "base": null, "refs": { @@ -560,6 +585,11 @@ "PutRecordsOutput$Records": "

An array of successfully and unsuccessfully processed record results. A record that is successfully added to a stream includes SequenceNumber and ShardId in the result. A record that fails to be added to a stream includes ErrorCode and ErrorMessage in the result.

" } }, + "PutResourcePolicyInput": { + "base": null, + "refs": { + } + }, "Record": { "base": "

The unit of data of the Kinesis data stream, which is composed of a sequence number, a partition key, and a data blob.

", "refs": { @@ -588,6 +618,14 @@ "refs": { } }, + "ResourceARN": { + "base": null, + "refs": { + "DeleteResourcePolicyInput$ResourceARN": "

The Amazon Resource Name (ARN) of the data stream or consumer.

", + "GetResourcePolicyInput$ResourceARN": "

The Amazon Resource Name (ARN) of the data stream or consumer.

", + "PutResourcePolicyInput$ResourceARN": "

The Amazon Resource Name (ARN) of the data stream or consumer.

" + } + }, "ResourceInUseException": { "base": "

The resource is not available for this operation. For successful operation, the resource must be in the ACTIVE state.

", "refs": { diff --git a/models/apis/kinesis/2013-12-02/endpoint-rule-set-1.json b/models/apis/kinesis/2013-12-02/endpoint-rule-set-1.json index f8dc09f1cbb..33343536fd0 100644 --- a/models/apis/kinesis/2013-12-02/endpoint-rule-set-1.json +++ b/models/apis/kinesis/2013-12-02/endpoint-rule-set-1.json @@ -1,9 +1,9 @@ { - "version": "1.3", + "version": "1.0", "parameters": { "Region": { "builtIn": "AWS::Region", - "required": true, + "required": false, "documentation": "The AWS region used to dispatch the request.", "type": "String" }, @@ -41,111 +41,151 @@ "required": false, "documentation": "The ARN of the Kinesis consumer", "type": "String" + }, + "ResourceARN": { + "required": false, + "documentation": "The ARN of the Kinesis resource", + "type": "String" } }, "rules": [ { "conditions": [ { - "fn": "aws.partition", + "fn": "isSet", "argv": [ { - "ref": "Region" + "ref": "StreamARN" } - ], - "assign": "PartitionResult" - } - ], - "type": "tree", - "rules": [ + ] + }, { - "conditions": [ + "fn": "not", + "argv": [ { "fn": "isSet", "argv": [ { - "ref": "StreamARN" + "ref": "Endpoint" } ] - }, + } + ] + }, + { + "fn": "isSet", + "argv": [ + { + "ref": "Region" + } + ] + }, + { + "fn": "aws.partition", + "argv": [ { - "fn": "not", + "ref": "Region" + } + ], + "assign": "PartitionResult" + }, + { + "fn": "not", + "argv": [ + { + "fn": "stringEquals", "argv": [ { - "fn": "isSet", + "fn": "getAttr", "argv": [ { - "ref": "Endpoint" - } + "ref": "PartitionResult" + }, + "name" ] - } + }, + "aws-iso" ] - }, + } + ] + }, + { + "fn": "not", + "argv": [ { - "fn": "not", + "fn": "stringEquals", "argv": [ { - "fn": "stringEquals", + "fn": "getAttr", "argv": [ { - "fn": "getAttr", - "argv": [ - { - "ref": "PartitionResult" - }, - "name" - ] + "ref": "PartitionResult" }, - "aws-iso" + "name" ] - } + }, + "aws-iso-b" ] - }, + } + ] + } + ], + "rules": [ + { + "conditions": [ { - "fn": "not", + "fn": "aws.parseArn", "argv": [ { - "fn": "stringEquals", + "ref": "StreamARN" + } + ], + "assign": "arn" + } + ], + "rules": [ + { + "conditions": [ + { + "fn": "isValidHostLabel", "argv": [ { "fn": "getAttr", "argv": [ { - "ref": "PartitionResult" + "ref": "arn" }, - "name" + "accountId" ] }, - "aws-iso-b" + false ] } - ] - } - ], - "type": "tree", - "rules": [ - { - "conditions": [ + ], + "rules": [ { - "fn": "aws.parseArn", - "argv": [ + "conditions": [ { - "ref": "StreamARN" + "fn": "isValidHostLabel", + "argv": [ + { + "fn": "getAttr", + "argv": [ + { + "ref": "arn" + }, + "region" + ] + }, + false + ] } ], - "assign": "arn" - } - ], - "type": "tree", - "rules": [ - { - "conditions": [], - "type": "tree", "rules": [ { "conditions": [ { - "fn": "isValidHostLabel", + "fn": "stringEquals", "argv": [ { "fn": "getAttr", @@ -153,528 +193,491 @@ { "ref": "arn" }, - "accountId" + "service" ] }, - false + "kinesis" ] } ], - "type": "tree", "rules": [ { - "conditions": [], - "type": "tree", + "conditions": [ + { + "fn": "getAttr", + "argv": [ + { + "ref": "arn" + }, + "resourceId[0]" + ], + "assign": "arnType" + }, + { + "fn": "not", + "argv": [ + { + "fn": "stringEquals", + "argv": [ + { + "ref": "arnType" + }, + "" + ] + } + ] + } + ], "rules": [ { "conditions": [ { - "fn": "isValidHostLabel", + "fn": "stringEquals", "argv": [ { - "fn": "getAttr", - "argv": [ - { - "ref": "arn" - }, - "region" - ] + "ref": "arnType" }, - false + "stream" ] } ], - "type": "tree", "rules": [ { - "conditions": [], - "type": "tree", + "conditions": [ + { + "fn": "stringEquals", + "argv": [ + { + "fn": "getAttr", + "argv": [ + { + "ref": "PartitionResult" + }, + "name" + ] + }, + "{arn#partition}" + ] + } + ], "rules": [ { "conditions": [ { - "fn": "stringEquals", + "fn": "isSet", "argv": [ { - "fn": "getAttr", - "argv": [ - { - "ref": "arn" - }, - "service" - ] - }, - "kinesis" + "ref": "OperationType" + } ] } ], - "type": "tree", "rules": [ { - "conditions": [], - "type": "tree", - "rules": [ + "conditions": [ { - "conditions": [ + "fn": "booleanEquals", + "argv": [ { - "fn": "getAttr", - "argv": [ - { - "ref": "arn" - }, - "resourceId[0]" - ], - "assign": "arnType" + "ref": "UseFIPS" + }, + true + ] + }, + { + "fn": "booleanEquals", + "argv": [ + { + "ref": "UseDualStack" }, + true + ] + } + ], + "rules": [ + { + "conditions": [ { - "fn": "not", + "fn": "booleanEquals", "argv": [ { - "fn": "stringEquals", + "fn": "getAttr", "argv": [ { - "ref": "arnType" + "ref": "PartitionResult" }, - "" + "supportsFIPS" ] - } + }, + true ] } ], - "type": "tree", "rules": [ { - "conditions": [], - "type": "tree", - "rules": [ + "conditions": [ { - "conditions": [ + "fn": "booleanEquals", + "argv": [ { - "fn": "stringEquals", + "fn": "getAttr", "argv": [ { - "ref": "arnType" - }, - "stream" - ] - } - ], - "type": "tree", - "rules": [ - { - "conditions": [], - "type": "tree", - "rules": [ - { - "conditions": [ - { - "fn": "stringEquals", - "argv": [ - { - "fn": "getAttr", - "argv": [ - { - "ref": "PartitionResult" - }, - "name" - ] - }, - "{arn#partition}" - ] - } - ], - "type": "tree", - "rules": [ - { - "conditions": [], - "type": "tree", - "rules": [ - { - "conditions": [ - { - "fn": "isSet", - "argv": [ - { - "ref": "OperationType" - } - ] - } - ], - "type": "tree", - "rules": [ - { - "conditions": [], - "type": "tree", - "rules": [ - { - "conditions": [ - { - "fn": "booleanEquals", - "argv": [ - { - "ref": "UseFIPS" - }, - true - ] - }, - { - "fn": "booleanEquals", - "argv": [ - { - "ref": "UseDualStack" - }, - true - ] - } - ], - "type": "tree", - "rules": [ - { - "conditions": [ - { - "fn": "booleanEquals", - "argv": [ - { - "fn": "getAttr", - "argv": [ - { - "ref": "PartitionResult" - }, - "supportsFIPS" - ] - }, - true - ] - } - ], - "type": "tree", - "rules": [ - { - "conditions": [], - "type": "tree", - "rules": [ - { - "conditions": [ - { - "fn": "booleanEquals", - "argv": [ - { - "fn": "getAttr", - "argv": [ - { - "ref": "PartitionResult" - }, - "supportsDualStack" - ] - }, - true - ] - } - ], - "type": "tree", - "rules": [ - { - "conditions": [], - "endpoint": { - "url": "https://{arn#accountId}.{OperationType}-kinesis-fips.{Region}.{PartitionResult#dualStackDnsSuffix}", - "properties": {}, - "headers": {} - }, - "type": "endpoint" - } - ] - }, - { - "conditions": [], - "error": "DualStack is enabled, but this partition does not support DualStack.", - "type": "error" - } - ] - } - ] - }, - { - "conditions": [], - "error": "FIPS is enabled, but this partition does not support FIPS.", - "type": "error" - } - ] - }, - { - "conditions": [ - { - "fn": "booleanEquals", - "argv": [ - { - "ref": "UseFIPS" - }, - true - ] - } - ], - "type": "tree", - "rules": [ - { - "conditions": [ - { - "fn": "booleanEquals", - "argv": [ - { - "fn": "getAttr", - "argv": [ - { - "ref": "PartitionResult" - }, - "supportsFIPS" - ] - }, - true - ] - } - ], - "type": "tree", - "rules": [ - { - "conditions": [], - "endpoint": { - "url": "https://{arn#accountId}.{OperationType}-kinesis-fips.{Region}.{PartitionResult#dnsSuffix}", - "properties": {}, - "headers": {} - }, - "type": "endpoint" - } - ] - }, - { - "conditions": [], - "error": "FIPS is enabled but this partition does not support FIPS", - "type": "error" - } - ] - }, - { - "conditions": [ - { - "fn": "booleanEquals", - "argv": [ - { - "ref": "UseDualStack" - }, - true - ] - } - ], - "type": "tree", - "rules": [ - { - "conditions": [ - { - "fn": "booleanEquals", - "argv": [ - { - "fn": "getAttr", - "argv": [ - { - "ref": "PartitionResult" - }, - "supportsDualStack" - ] - }, - true - ] - } - ], - "type": "tree", - "rules": [ - { - "conditions": [], - "endpoint": { - "url": "https://{arn#accountId}.{OperationType}-kinesis.{Region}.{PartitionResult#dualStackDnsSuffix}", - "properties": {}, - "headers": {} - }, - "type": "endpoint" - } - ] - }, - { - "conditions": [], - "error": "DualStack is enabled but this partition does not support DualStack", - "type": "error" - } - ] - }, - { - "conditions": [], - "endpoint": { - "url": "https://{arn#accountId}.{OperationType}-kinesis.{Region}.{PartitionResult#dnsSuffix}", - "properties": {}, - "headers": {} - }, - "type": "endpoint" - } - ] - } - ] - }, - { - "conditions": [], - "error": "Operation Type is not set. Please contact service team for resolution.", - "type": "error" - } - ] - } - ] + "ref": "PartitionResult" }, - { - "conditions": [], - "error": "Partition: {arn#partition} from ARN doesn't match with partition name: {PartitionResult#name}.", - "type": "error" - } + "supportsDualStack" ] - } + }, + true ] - }, + } + ], + "rules": [ { "conditions": [], - "error": "Invalid ARN: Kinesis ARNs don't support `{arnType}` arn types.", - "type": "error" + "endpoint": { + "url": "https://{arn#accountId}.{OperationType}-kinesis-fips.{Region}.{PartitionResult#dualStackDnsSuffix}", + "properties": {}, + "headers": {} + }, + "type": "endpoint" } + ], + "type": "tree" + }, + { + "conditions": [], + "error": "DualStack is enabled, but this partition does not support DualStack.", + "type": "error" + } + ], + "type": "tree" + }, + { + "conditions": [], + "error": "FIPS is enabled, but this partition does not support FIPS.", + "type": "error" + } + ], + "type": "tree" + }, + { + "conditions": [ + { + "fn": "booleanEquals", + "argv": [ + { + "ref": "UseFIPS" + }, + true + ] + } + ], + "rules": [ + { + "conditions": [ + { + "fn": "booleanEquals", + "argv": [ + { + "fn": "getAttr", + "argv": [ + { + "ref": "PartitionResult" + }, + "supportsFIPS" + ] + }, + true ] } + ], + "rules": [ + { + "conditions": [], + "endpoint": { + "url": "https://{arn#accountId}.{OperationType}-kinesis-fips.{Region}.{PartitionResult#dnsSuffix}", + "properties": {}, + "headers": {} + }, + "type": "endpoint" + } + ], + "type": "tree" + }, + { + "conditions": [], + "error": "FIPS is enabled but this partition does not support FIPS", + "type": "error" + } + ], + "type": "tree" + }, + { + "conditions": [ + { + "fn": "booleanEquals", + "argv": [ + { + "ref": "UseDualStack" + }, + true ] + } + ], + "rules": [ + { + "conditions": [ + { + "fn": "booleanEquals", + "argv": [ + { + "fn": "getAttr", + "argv": [ + { + "ref": "PartitionResult" + }, + "supportsDualStack" + ] + }, + true + ] + } + ], + "rules": [ + { + "conditions": [], + "endpoint": { + "url": "https://{arn#accountId}.{OperationType}-kinesis.{Region}.{PartitionResult#dualStackDnsSuffix}", + "properties": {}, + "headers": {} + }, + "type": "endpoint" + } + ], + "type": "tree" }, { "conditions": [], - "error": "Invalid ARN: No ARN type specified", + "error": "DualStack is enabled but this partition does not support DualStack", "type": "error" } - ] + ], + "type": "tree" + }, + { + "conditions": [], + "endpoint": { + "url": "https://{arn#accountId}.{OperationType}-kinesis.{Region}.{PartitionResult#dnsSuffix}", + "properties": {}, + "headers": {} + }, + "type": "endpoint" } - ] + ], + "type": "tree" }, { "conditions": [], - "error": "Invalid ARN: The ARN was not for the Kinesis service, found: {arn#service}.", + "error": "Operation Type is not set. Please contact service team for resolution.", "type": "error" } - ] + ], + "type": "tree" + }, + { + "conditions": [], + "error": "Partition: {arn#partition} from ARN doesn't match with partition name: {PartitionResult#name}.", + "type": "error" } - ] + ], + "type": "tree" }, { "conditions": [], - "error": "Invalid ARN: Invalid region.", + "error": "Invalid ARN: Kinesis ARNs don't support `{arnType}` arn types.", "type": "error" } - ] + ], + "type": "tree" + }, + { + "conditions": [], + "error": "Invalid ARN: No ARN type specified", + "type": "error" } - ] + ], + "type": "tree" }, { "conditions": [], - "error": "Invalid ARN: Invalid account id.", + "error": "Invalid ARN: The ARN was not for the Kinesis service, found: {arn#service}.", "type": "error" } - ] + ], + "type": "tree" + }, + { + "conditions": [], + "error": "Invalid ARN: Invalid region.", + "type": "error" } - ] + ], + "type": "tree" }, { "conditions": [], - "error": "Invalid ARN: Failed to parse ARN.", + "error": "Invalid ARN: Invalid account id.", "type": "error" } + ], + "type": "tree" + }, + { + "conditions": [], + "error": "Invalid ARN: Failed to parse ARN.", + "type": "error" + } + ], + "type": "tree" + }, + { + "conditions": [ + { + "fn": "isSet", + "argv": [ + { + "ref": "ConsumerARN" + } ] }, { - "conditions": [ + "fn": "not", + "argv": [ { "fn": "isSet", "argv": [ { - "ref": "ConsumerARN" + "ref": "Endpoint" } ] - }, + } + ] + }, + { + "fn": "isSet", + "argv": [ { - "fn": "not", + "ref": "Region" + } + ] + }, + { + "fn": "aws.partition", + "argv": [ + { + "ref": "Region" + } + ], + "assign": "PartitionResult" + }, + { + "fn": "not", + "argv": [ + { + "fn": "stringEquals", "argv": [ { - "fn": "isSet", + "fn": "getAttr", "argv": [ { - "ref": "Endpoint" - } + "ref": "PartitionResult" + }, + "name" ] - } + }, + "aws-iso" ] - }, + } + ] + }, + { + "fn": "not", + "argv": [ { - "fn": "not", + "fn": "stringEquals", "argv": [ { - "fn": "stringEquals", + "fn": "getAttr", "argv": [ { - "fn": "getAttr", - "argv": [ - { - "ref": "PartitionResult" - }, - "name" - ] + "ref": "PartitionResult" }, - "aws-iso" + "name" ] - } + }, + "aws-iso-b" ] - }, + } + ] + } + ], + "rules": [ + { + "conditions": [ { - "fn": "not", + "fn": "aws.parseArn", "argv": [ { - "fn": "stringEquals", + "ref": "ConsumerARN" + } + ], + "assign": "arn" + } + ], + "rules": [ + { + "conditions": [ + { + "fn": "isValidHostLabel", "argv": [ { "fn": "getAttr", "argv": [ { - "ref": "PartitionResult" + "ref": "arn" }, - "name" + "accountId" ] }, - "aws-iso-b" + false ] } - ] - } - ], - "type": "tree", - "rules": [ - { - "conditions": [ + ], + "rules": [ { - "fn": "aws.parseArn", - "argv": [ + "conditions": [ { - "ref": "ConsumerARN" + "fn": "isValidHostLabel", + "argv": [ + { + "fn": "getAttr", + "argv": [ + { + "ref": "arn" + }, + "region" + ] + }, + false + ] } ], - "assign": "arn" - } - ], - "type": "tree", - "rules": [ - { - "conditions": [], - "type": "tree", "rules": [ { "conditions": [ { - "fn": "isValidHostLabel", + "fn": "stringEquals", "argv": [ { "fn": "getAttr", @@ -682,442 +685,367 @@ { "ref": "arn" }, - "accountId" + "service" ] }, - false + "kinesis" ] } ], - "type": "tree", "rules": [ { - "conditions": [], - "type": "tree", + "conditions": [ + { + "fn": "getAttr", + "argv": [ + { + "ref": "arn" + }, + "resourceId[0]" + ], + "assign": "arnType" + }, + { + "fn": "not", + "argv": [ + { + "fn": "stringEquals", + "argv": [ + { + "ref": "arnType" + }, + "" + ] + } + ] + } + ], "rules": [ { "conditions": [ { - "fn": "isValidHostLabel", + "fn": "stringEquals", "argv": [ { - "fn": "getAttr", - "argv": [ - { - "ref": "arn" - }, - "region" - ] + "ref": "arnType" }, - false + "stream" ] } ], - "type": "tree", "rules": [ { - "conditions": [], - "type": "tree", + "conditions": [ + { + "fn": "stringEquals", + "argv": [ + { + "fn": "getAttr", + "argv": [ + { + "ref": "PartitionResult" + }, + "name" + ] + }, + "{arn#partition}" + ] + } + ], "rules": [ { "conditions": [ { - "fn": "stringEquals", + "fn": "isSet", "argv": [ { - "fn": "getAttr", - "argv": [ - { - "ref": "arn" - }, - "service" - ] - }, - "kinesis" + "ref": "OperationType" + } ] } ], - "type": "tree", "rules": [ { - "conditions": [], - "type": "tree", - "rules": [ + "conditions": [ { - "conditions": [ + "fn": "booleanEquals", + "argv": [ { - "fn": "getAttr", - "argv": [ - { - "ref": "arn" - }, - "resourceId[0]" - ], - "assign": "arnType" + "ref": "UseFIPS" + }, + true + ] + }, + { + "fn": "booleanEquals", + "argv": [ + { + "ref": "UseDualStack" }, + true + ] + } + ], + "rules": [ + { + "conditions": [ { - "fn": "not", + "fn": "booleanEquals", "argv": [ { - "fn": "stringEquals", + "fn": "getAttr", "argv": [ { - "ref": "arnType" + "ref": "PartitionResult" }, - "" + "supportsFIPS" ] - } + }, + true ] } ], - "type": "tree", "rules": [ { - "conditions": [], - "type": "tree", - "rules": [ + "conditions": [ { - "conditions": [ + "fn": "booleanEquals", + "argv": [ { - "fn": "stringEquals", + "fn": "getAttr", "argv": [ { - "ref": "arnType" - }, - "stream" - ] - } - ], - "type": "tree", - "rules": [ - { - "conditions": [], - "type": "tree", - "rules": [ - { - "conditions": [ - { - "fn": "stringEquals", - "argv": [ - { - "fn": "getAttr", - "argv": [ - { - "ref": "PartitionResult" - }, - "name" - ] - }, - "{arn#partition}" - ] - } - ], - "type": "tree", - "rules": [ - { - "conditions": [], - "type": "tree", - "rules": [ - { - "conditions": [ - { - "fn": "isSet", - "argv": [ - { - "ref": "OperationType" - } - ] - } - ], - "type": "tree", - "rules": [ - { - "conditions": [], - "type": "tree", - "rules": [ - { - "conditions": [ - { - "fn": "booleanEquals", - "argv": [ - { - "ref": "UseFIPS" - }, - true - ] - }, - { - "fn": "booleanEquals", - "argv": [ - { - "ref": "UseDualStack" - }, - true - ] - } - ], - "type": "tree", - "rules": [ - { - "conditions": [ - { - "fn": "booleanEquals", - "argv": [ - { - "fn": "getAttr", - "argv": [ - { - "ref": "PartitionResult" - }, - "supportsFIPS" - ] - }, - true - ] - } - ], - "type": "tree", - "rules": [ - { - "conditions": [], - "type": "tree", - "rules": [ - { - "conditions": [ - { - "fn": "booleanEquals", - "argv": [ - { - "fn": "getAttr", - "argv": [ - { - "ref": "PartitionResult" - }, - "supportsDualStack" - ] - }, - true - ] - } - ], - "type": "tree", - "rules": [ - { - "conditions": [], - "endpoint": { - "url": "https://{arn#accountId}.{OperationType}-kinesis-fips.{Region}.{PartitionResult#dualStackDnsSuffix}", - "properties": {}, - "headers": {} - }, - "type": "endpoint" - } - ] - }, - { - "conditions": [], - "error": "DualStack is enabled, but this partition does not support DualStack.", - "type": "error" - } - ] - } - ] - }, - { - "conditions": [], - "error": "FIPS is enabled, but this partition does not support FIPS.", - "type": "error" - } - ] - }, - { - "conditions": [ - { - "fn": "booleanEquals", - "argv": [ - { - "ref": "UseFIPS" - }, - true - ] - } - ], - "type": "tree", - "rules": [ - { - "conditions": [ - { - "fn": "booleanEquals", - "argv": [ - { - "fn": "getAttr", - "argv": [ - { - "ref": "PartitionResult" - }, - "supportsFIPS" - ] - }, - true - ] - } - ], - "type": "tree", - "rules": [ - { - "conditions": [], - "endpoint": { - "url": "https://{arn#accountId}.{OperationType}-kinesis-fips.{Region}.{PartitionResult#dnsSuffix}", - "properties": {}, - "headers": {} - }, - "type": "endpoint" - } - ] - }, - { - "conditions": [], - "error": "FIPS is enabled but this partition does not support FIPS", - "type": "error" - } - ] - }, - { - "conditions": [ - { - "fn": "booleanEquals", - "argv": [ - { - "ref": "UseDualStack" - }, - true - ] - } - ], - "type": "tree", - "rules": [ - { - "conditions": [ - { - "fn": "booleanEquals", - "argv": [ - { - "fn": "getAttr", - "argv": [ - { - "ref": "PartitionResult" - }, - "supportsDualStack" - ] - }, - true - ] - } - ], - "type": "tree", - "rules": [ - { - "conditions": [], - "endpoint": { - "url": "https://{arn#accountId}.{OperationType}-kinesis.{Region}.{PartitionResult#dualStackDnsSuffix}", - "properties": {}, - "headers": {} - }, - "type": "endpoint" - } - ] - }, - { - "conditions": [], - "error": "DualStack is enabled but this partition does not support DualStack", - "type": "error" - } - ] - }, - { - "conditions": [], - "endpoint": { - "url": "https://{arn#accountId}.{OperationType}-kinesis.{Region}.{PartitionResult#dnsSuffix}", - "properties": {}, - "headers": {} - }, - "type": "endpoint" - } - ] - } - ] - }, - { - "conditions": [], - "error": "Operation Type is not set. Please contact service team for resolution.", - "type": "error" - } - ] - } - ] + "ref": "PartitionResult" }, - { - "conditions": [], - "error": "Partition: {arn#partition} from ARN doesn't match with partition name: {PartitionResult#name}.", - "type": "error" - } + "supportsDualStack" ] - } + }, + true ] - }, + } + ], + "rules": [ { "conditions": [], - "error": "Invalid ARN: Kinesis ARNs don't support `{arnType}` arn types.", - "type": "error" + "endpoint": { + "url": "https://{arn#accountId}.{OperationType}-kinesis-fips.{Region}.{PartitionResult#dualStackDnsSuffix}", + "properties": {}, + "headers": {} + }, + "type": "endpoint" } + ], + "type": "tree" + }, + { + "conditions": [], + "error": "DualStack is enabled, but this partition does not support DualStack.", + "type": "error" + } + ], + "type": "tree" + }, + { + "conditions": [], + "error": "FIPS is enabled, but this partition does not support FIPS.", + "type": "error" + } + ], + "type": "tree" + }, + { + "conditions": [ + { + "fn": "booleanEquals", + "argv": [ + { + "ref": "UseFIPS" + }, + true + ] + } + ], + "rules": [ + { + "conditions": [ + { + "fn": "booleanEquals", + "argv": [ + { + "fn": "getAttr", + "argv": [ + { + "ref": "PartitionResult" + }, + "supportsFIPS" + ] + }, + true ] } + ], + "rules": [ + { + "conditions": [], + "endpoint": { + "url": "https://{arn#accountId}.{OperationType}-kinesis-fips.{Region}.{PartitionResult#dnsSuffix}", + "properties": {}, + "headers": {} + }, + "type": "endpoint" + } + ], + "type": "tree" + }, + { + "conditions": [], + "error": "FIPS is enabled but this partition does not support FIPS", + "type": "error" + } + ], + "type": "tree" + }, + { + "conditions": [ + { + "fn": "booleanEquals", + "argv": [ + { + "ref": "UseDualStack" + }, + true ] + } + ], + "rules": [ + { + "conditions": [ + { + "fn": "booleanEquals", + "argv": [ + { + "fn": "getAttr", + "argv": [ + { + "ref": "PartitionResult" + }, + "supportsDualStack" + ] + }, + true + ] + } + ], + "rules": [ + { + "conditions": [], + "endpoint": { + "url": "https://{arn#accountId}.{OperationType}-kinesis.{Region}.{PartitionResult#dualStackDnsSuffix}", + "properties": {}, + "headers": {} + }, + "type": "endpoint" + } + ], + "type": "tree" }, { "conditions": [], - "error": "Invalid ARN: No ARN type specified", + "error": "DualStack is enabled but this partition does not support DualStack", "type": "error" } - ] + ], + "type": "tree" + }, + { + "conditions": [], + "endpoint": { + "url": "https://{arn#accountId}.{OperationType}-kinesis.{Region}.{PartitionResult#dnsSuffix}", + "properties": {}, + "headers": {} + }, + "type": "endpoint" } - ] + ], + "type": "tree" }, { "conditions": [], - "error": "Invalid ARN: The ARN was not for the Kinesis service, found: {arn#service}.", + "error": "Operation Type is not set. Please contact service team for resolution.", "type": "error" } - ] - } - ] + ], + "type": "tree" + }, + { + "conditions": [], + "error": "Partition: {arn#partition} from ARN doesn't match with partition name: {PartitionResult#name}.", + "type": "error" + } + ], + "type": "tree" }, { "conditions": [], - "error": "Invalid ARN: Invalid region.", + "error": "Invalid ARN: Kinesis ARNs don't support `{arnType}` arn types.", "type": "error" } - ] + ], + "type": "tree" + }, + { + "conditions": [], + "error": "Invalid ARN: No ARN type specified", + "type": "error" } - ] + ], + "type": "tree" }, { "conditions": [], - "error": "Invalid ARN: Invalid account id.", + "error": "Invalid ARN: The ARN was not for the Kinesis service, found: {arn#service}.", "type": "error" } - ] + ], + "type": "tree" + }, + { + "conditions": [], + "error": "Invalid ARN: Invalid region.", + "type": "error" } - ] + ], + "type": "tree" }, { "conditions": [], - "error": "Invalid ARN: Failed to parse ARN.", + "error": "Invalid ARN: Invalid account id.", "type": "error" } + ], + "type": "tree" + }, + { + "conditions": [], + "error": "Invalid ARN: Failed to parse ARN.", + "type": "error" + } + ], + "type": "tree" + }, + { + "conditions": [ + { + "fn": "isSet", + "argv": [ + { + "ref": "ResourceARN" + } ] }, { - "conditions": [ + "fn": "not", + "argv": [ { "fn": "isSet", "argv": [ @@ -1126,58 +1054,489 @@ } ] } + ] + }, + { + "fn": "isSet", + "argv": [ + { + "ref": "Region" + } + ] + }, + { + "fn": "aws.partition", + "argv": [ + { + "ref": "Region" + } + ], + "assign": "PartitionResult" + }, + { + "fn": "not", + "argv": [ + { + "fn": "stringEquals", + "argv": [ + { + "fn": "getAttr", + "argv": [ + { + "ref": "PartitionResult" + }, + "name" + ] + }, + "aws-iso" + ] + } + ] + }, + { + "fn": "not", + "argv": [ + { + "fn": "stringEquals", + "argv": [ + { + "fn": "getAttr", + "argv": [ + { + "ref": "PartitionResult" + }, + "name" + ] + }, + "aws-iso-b" + ] + } + ] + } + ], + "rules": [ + { + "conditions": [ + { + "fn": "aws.parseArn", + "argv": [ + { + "ref": "ResourceARN" + } + ], + "assign": "arn" + } ], - "type": "tree", "rules": [ { "conditions": [ { - "fn": "booleanEquals", + "fn": "isValidHostLabel", "argv": [ { - "ref": "UseFIPS" + "fn": "getAttr", + "argv": [ + { + "ref": "arn" + }, + "accountId" + ] }, - true + false ] } ], - "error": "Invalid Configuration: FIPS and custom endpoint are not supported", - "type": "error" - }, - { - "conditions": [], - "type": "tree", "rules": [ { "conditions": [ { - "fn": "booleanEquals", + "fn": "isValidHostLabel", "argv": [ { - "ref": "UseDualStack" + "fn": "getAttr", + "argv": [ + { + "ref": "arn" + }, + "region" + ] }, - true + false ] } ], - "error": "Invalid Configuration: Dualstack and custom endpoint are not supported", - "type": "error" + "rules": [ + { + "conditions": [ + { + "fn": "stringEquals", + "argv": [ + { + "fn": "getAttr", + "argv": [ + { + "ref": "arn" + }, + "service" + ] + }, + "kinesis" + ] + } + ], + "rules": [ + { + "conditions": [ + { + "fn": "getAttr", + "argv": [ + { + "ref": "arn" + }, + "resourceId[0]" + ], + "assign": "arnType" + }, + { + "fn": "not", + "argv": [ + { + "fn": "stringEquals", + "argv": [ + { + "ref": "arnType" + }, + "" + ] + } + ] + } + ], + "rules": [ + { + "conditions": [ + { + "fn": "stringEquals", + "argv": [ + { + "ref": "arnType" + }, + "stream" + ] + } + ], + "rules": [ + { + "conditions": [ + { + "fn": "stringEquals", + "argv": [ + { + "fn": "getAttr", + "argv": [ + { + "ref": "PartitionResult" + }, + "name" + ] + }, + "{arn#partition}" + ] + } + ], + "rules": [ + { + "conditions": [ + { + "fn": "isSet", + "argv": [ + { + "ref": "OperationType" + } + ] + } + ], + "rules": [ + { + "conditions": [ + { + "fn": "booleanEquals", + "argv": [ + { + "ref": "UseFIPS" + }, + true + ] + }, + { + "fn": "booleanEquals", + "argv": [ + { + "ref": "UseDualStack" + }, + true + ] + } + ], + "rules": [ + { + "conditions": [ + { + "fn": "booleanEquals", + "argv": [ + { + "fn": "getAttr", + "argv": [ + { + "ref": "PartitionResult" + }, + "supportsFIPS" + ] + }, + true + ] + } + ], + "rules": [ + { + "conditions": [ + { + "fn": "booleanEquals", + "argv": [ + { + "fn": "getAttr", + "argv": [ + { + "ref": "PartitionResult" + }, + "supportsDualStack" + ] + }, + true + ] + } + ], + "rules": [ + { + "conditions": [], + "endpoint": { + "url": "https://{arn#accountId}.{OperationType}-kinesis-fips.{Region}.{PartitionResult#dualStackDnsSuffix}", + "properties": {}, + "headers": {} + }, + "type": "endpoint" + } + ], + "type": "tree" + }, + { + "conditions": [], + "error": "DualStack is enabled, but this partition does not support DualStack.", + "type": "error" + } + ], + "type": "tree" + }, + { + "conditions": [], + "error": "FIPS is enabled, but this partition does not support FIPS.", + "type": "error" + } + ], + "type": "tree" + }, + { + "conditions": [ + { + "fn": "booleanEquals", + "argv": [ + { + "ref": "UseFIPS" + }, + true + ] + } + ], + "rules": [ + { + "conditions": [ + { + "fn": "booleanEquals", + "argv": [ + { + "fn": "getAttr", + "argv": [ + { + "ref": "PartitionResult" + }, + "supportsFIPS" + ] + }, + true + ] + } + ], + "rules": [ + { + "conditions": [], + "endpoint": { + "url": "https://{arn#accountId}.{OperationType}-kinesis-fips.{Region}.{PartitionResult#dnsSuffix}", + "properties": {}, + "headers": {} + }, + "type": "endpoint" + } + ], + "type": "tree" + }, + { + "conditions": [], + "error": "FIPS is enabled but this partition does not support FIPS", + "type": "error" + } + ], + "type": "tree" + }, + { + "conditions": [ + { + "fn": "booleanEquals", + "argv": [ + { + "ref": "UseDualStack" + }, + true + ] + } + ], + "rules": [ + { + "conditions": [ + { + "fn": "booleanEquals", + "argv": [ + { + "fn": "getAttr", + "argv": [ + { + "ref": "PartitionResult" + }, + "supportsDualStack" + ] + }, + true + ] + } + ], + "rules": [ + { + "conditions": [], + "endpoint": { + "url": "https://{arn#accountId}.{OperationType}-kinesis.{Region}.{PartitionResult#dualStackDnsSuffix}", + "properties": {}, + "headers": {} + }, + "type": "endpoint" + } + ], + "type": "tree" + }, + { + "conditions": [], + "error": "DualStack is enabled but this partition does not support DualStack", + "type": "error" + } + ], + "type": "tree" + }, + { + "conditions": [], + "endpoint": { + "url": "https://{arn#accountId}.{OperationType}-kinesis.{Region}.{PartitionResult#dnsSuffix}", + "properties": {}, + "headers": {} + }, + "type": "endpoint" + } + ], + "type": "tree" + }, + { + "conditions": [], + "error": "Operation Type is not set. Please contact service team for resolution.", + "type": "error" + } + ], + "type": "tree" + }, + { + "conditions": [], + "error": "Partition: {arn#partition} from ARN doesn't match with partition name: {PartitionResult#name}.", + "type": "error" + } + ], + "type": "tree" + }, + { + "conditions": [], + "error": "Invalid ARN: Kinesis ARNs don't support `{arnType}` arn types.", + "type": "error" + } + ], + "type": "tree" + }, + { + "conditions": [], + "error": "Invalid ARN: No ARN type specified", + "type": "error" + } + ], + "type": "tree" + }, + { + "conditions": [], + "error": "Invalid ARN: The ARN was not for the Kinesis service, found: {arn#service}.", + "type": "error" + } + ], + "type": "tree" }, { "conditions": [], - "endpoint": { - "url": { - "ref": "Endpoint" - }, - "properties": {}, - "headers": {} - }, - "type": "endpoint" + "error": "Invalid ARN: Invalid region.", + "type": "error" } - ] + ], + "type": "tree" + }, + { + "conditions": [], + "error": "Invalid ARN: Invalid account id.", + "type": "error" } - ] + ], + "type": "tree" }, + { + "conditions": [], + "error": "Invalid ARN: Failed to parse ARN.", + "type": "error" + } + ], + "type": "tree" + }, + { + "conditions": [ + { + "fn": "isSet", + "argv": [ + { + "ref": "Endpoint" + } + ] + } + ], + "rules": [ { "conditions": [ { @@ -1188,7 +1547,13 @@ }, true ] - }, + } + ], + "error": "Invalid Configuration: FIPS and custom endpoint are not supported", + "type": "error" + }, + { + "conditions": [ { "fn": "booleanEquals", "argv": [ @@ -1199,46 +1564,103 @@ ] } ], - "type": "tree", + "error": "Invalid Configuration: Dualstack and custom endpoint are not supported", + "type": "error" + }, + { + "conditions": [], + "endpoint": { + "url": { + "ref": "Endpoint" + }, + "properties": {}, + "headers": {} + }, + "type": "endpoint" + } + ], + "type": "tree" + }, + { + "conditions": [ + { + "fn": "isSet", + "argv": [ + { + "ref": "Region" + } + ] + } + ], + "rules": [ + { + "conditions": [ + { + "fn": "aws.partition", + "argv": [ + { + "ref": "Region" + } + ], + "assign": "PartitionResult" + } + ], "rules": [ { "conditions": [ { "fn": "booleanEquals", "argv": [ - true, { - "fn": "getAttr", - "argv": [ - { - "ref": "PartitionResult" - }, - "supportsFIPS" - ] - } + "ref": "UseFIPS" + }, + true ] }, { "fn": "booleanEquals", "argv": [ - true, { - "fn": "getAttr", - "argv": [ - { - "ref": "PartitionResult" - }, - "supportsDualStack" - ] - } + "ref": "UseDualStack" + }, + true ] } ], - "type": "tree", "rules": [ { - "conditions": [], - "type": "tree", + "conditions": [ + { + "fn": "booleanEquals", + "argv": [ + true, + { + "fn": "getAttr", + "argv": [ + { + "ref": "PartitionResult" + }, + "supportsFIPS" + ] + } + ] + }, + { + "fn": "booleanEquals", + "argv": [ + true, + { + "fn": "getAttr", + "argv": [ + { + "ref": "PartitionResult" + }, + "supportsDualStack" + ] + } + ] + } + ], "rules": [ { "conditions": [], @@ -1249,61 +1671,54 @@ }, "type": "endpoint" } - ] + ], + "type": "tree" + }, + { + "conditions": [], + "error": "FIPS and DualStack are enabled, but this partition does not support one or both", + "type": "error" } - ] + ], + "type": "tree" }, - { - "conditions": [], - "error": "FIPS and DualStack are enabled, but this partition does not support one or both", - "type": "error" - } - ] - }, - { - "conditions": [ - { - "fn": "booleanEquals", - "argv": [ - { - "ref": "UseFIPS" - }, - true - ] - } - ], - "type": "tree", - "rules": [ { "conditions": [ { "fn": "booleanEquals", "argv": [ - true, { - "fn": "getAttr", - "argv": [ - { - "ref": "PartitionResult" - }, - "supportsFIPS" - ] - } + "ref": "UseFIPS" + }, + true ] } ], - "type": "tree", "rules": [ { - "conditions": [], - "type": "tree", + "conditions": [ + { + "fn": "booleanEquals", + "argv": [ + { + "fn": "getAttr", + "argv": [ + { + "ref": "PartitionResult" + }, + "supportsFIPS" + ] + }, + true + ] + } + ], "rules": [ { "conditions": [ { "fn": "stringEquals", "argv": [ - "aws-us-gov", { "fn": "getAttr", "argv": [ @@ -1312,7 +1727,8 @@ }, "name" ] - } + }, + "aws-us-gov" ] } ], @@ -1332,54 +1748,48 @@ }, "type": "endpoint" } - ] + ], + "type": "tree" + }, + { + "conditions": [], + "error": "FIPS is enabled but this partition does not support FIPS", + "type": "error" } - ] + ], + "type": "tree" }, - { - "conditions": [], - "error": "FIPS is enabled but this partition does not support FIPS", - "type": "error" - } - ] - }, - { - "conditions": [ - { - "fn": "booleanEquals", - "argv": [ - { - "ref": "UseDualStack" - }, - true - ] - } - ], - "type": "tree", - "rules": [ { "conditions": [ { "fn": "booleanEquals", "argv": [ - true, { - "fn": "getAttr", - "argv": [ - { - "ref": "PartitionResult" - }, - "supportsDualStack" - ] - } + "ref": "UseDualStack" + }, + true ] } ], - "type": "tree", "rules": [ { - "conditions": [], - "type": "tree", + "conditions": [ + { + "fn": "booleanEquals", + "argv": [ + true, + { + "fn": "getAttr", + "argv": [ + { + "ref": "PartitionResult" + }, + "supportsDualStack" + ] + } + ] + } + ], "rules": [ { "conditions": [], @@ -1390,58 +1800,16 @@ }, "type": "endpoint" } - ] - } - ] - }, - { - "conditions": [], - "error": "DualStack is enabled but this partition does not support DualStack", - "type": "error" - } - ] - }, - { - "conditions": [], - "type": "tree", - "rules": [ - { - "conditions": [ - { - "fn": "stringEquals", - "argv": [ - { - "ref": "Region" - }, - "us-gov-east-1" - ] - } - ], - "endpoint": { - "url": "https://kinesis.us-gov-east-1.amazonaws.com", - "properties": {}, - "headers": {} - }, - "type": "endpoint" - }, - { - "conditions": [ + ], + "type": "tree" + }, { - "fn": "stringEquals", - "argv": [ - { - "ref": "Region" - }, - "us-gov-west-1" - ] + "conditions": [], + "error": "DualStack is enabled but this partition does not support DualStack", + "type": "error" } ], - "endpoint": { - "url": "https://kinesis.us-gov-west-1.amazonaws.com", - "properties": {}, - "headers": {} - }, - "type": "endpoint" + "type": "tree" }, { "conditions": [], @@ -1452,9 +1820,16 @@ }, "type": "endpoint" } - ] + ], + "type": "tree" } - ] + ], + "type": "tree" + }, + { + "conditions": [], + "error": "Invalid Configuration: Missing Region", + "type": "error" } ] } \ No newline at end of file diff --git a/models/apis/kinesis/2013-12-02/endpoint-tests-1.json b/models/apis/kinesis/2013-12-02/endpoint-tests-1.json index 052d9e96454..f68c22f6de4 100644 --- a/models/apis/kinesis/2013-12-02/endpoint-tests-1.json +++ b/models/apis/kinesis/2013-12-02/endpoint-tests-1.json @@ -1,94 +1,94 @@ { "testCases": [ { - "documentation": "For region us-gov-west-1 with FIPS disabled and DualStack disabled", + "documentation": "For region af-south-1 with FIPS disabled and DualStack disabled", "expect": { "endpoint": { - "url": "https://kinesis.us-gov-west-1.amazonaws.com" + "url": "https://kinesis.af-south-1.amazonaws.com" } }, "params": { + "Region": "af-south-1", "UseFIPS": false, - "UseDualStack": false, - "Region": "us-gov-west-1" + "UseDualStack": false } }, { - "documentation": "For region us-gov-west-1 with FIPS enabled and DualStack disabled", + "documentation": "For region ap-east-1 with FIPS disabled and DualStack disabled", "expect": { "endpoint": { - "url": "https://kinesis.us-gov-west-1.amazonaws.com" + "url": "https://kinesis.ap-east-1.amazonaws.com" } }, "params": { - "UseFIPS": true, - "UseDualStack": false, - "Region": "us-gov-west-1" + "Region": "ap-east-1", + "UseFIPS": false, + "UseDualStack": false } }, { - "documentation": "For region us-gov-east-1 with FIPS disabled and DualStack disabled", + "documentation": "For region ap-northeast-1 with FIPS disabled and DualStack disabled", "expect": { "endpoint": { - "url": "https://kinesis.us-gov-east-1.amazonaws.com" + "url": "https://kinesis.ap-northeast-1.amazonaws.com" } }, "params": { + "Region": "ap-northeast-1", "UseFIPS": false, - "UseDualStack": false, - "Region": "us-gov-east-1" + "UseDualStack": false } }, { - "documentation": "For region us-gov-east-1 with FIPS enabled and DualStack disabled", + "documentation": "For region ap-northeast-2 with FIPS disabled and DualStack disabled", "expect": { "endpoint": { - "url": "https://kinesis.us-gov-east-1.amazonaws.com" + "url": "https://kinesis.ap-northeast-2.amazonaws.com" } }, "params": { - "UseFIPS": true, - "UseDualStack": false, - "Region": "us-gov-east-1" + "Region": "ap-northeast-2", + "UseFIPS": false, + "UseDualStack": false } }, { - "documentation": "For region us-gov-east-1 with FIPS enabled and DualStack enabled", + "documentation": "For region ap-northeast-3 with FIPS disabled and DualStack disabled", "expect": { "endpoint": { - "url": "https://kinesis-fips.us-gov-east-1.api.aws" + "url": "https://kinesis.ap-northeast-3.amazonaws.com" } }, "params": { - "UseFIPS": true, - "UseDualStack": true, - "Region": "us-gov-east-1" + "Region": "ap-northeast-3", + "UseFIPS": false, + "UseDualStack": false } }, { - "documentation": "For region us-gov-east-1 with FIPS disabled and DualStack enabled", + "documentation": "For region ap-south-1 with FIPS disabled and DualStack disabled", "expect": { "endpoint": { - "url": "https://kinesis.us-gov-east-1.api.aws" + "url": "https://kinesis.ap-south-1.amazonaws.com" } }, "params": { + "Region": "ap-south-1", "UseFIPS": false, - "UseDualStack": true, - "Region": "us-gov-east-1" + "UseDualStack": false } }, { - "documentation": "For region ap-southeast-3 with FIPS disabled and DualStack disabled", + "documentation": "For region ap-southeast-1 with FIPS disabled and DualStack disabled", "expect": { "endpoint": { - "url": "https://kinesis.ap-southeast-3.amazonaws.com" + "url": "https://kinesis.ap-southeast-1.amazonaws.com" } }, "params": { + "Region": "ap-southeast-1", "UseFIPS": false, - "UseDualStack": false, - "Region": "ap-southeast-3" + "UseDualStack": false } }, { @@ -99,113 +99,113 @@ } }, "params": { + "Region": "ap-southeast-2", "UseFIPS": false, - "UseDualStack": false, - "Region": "ap-southeast-2" + "UseDualStack": false } }, { - "documentation": "For region ap-southeast-1 with FIPS disabled and DualStack disabled", + "documentation": "For region ap-southeast-3 with FIPS disabled and DualStack disabled", "expect": { "endpoint": { - "url": "https://kinesis.ap-southeast-1.amazonaws.com" + "url": "https://kinesis.ap-southeast-3.amazonaws.com" } }, "params": { + "Region": "ap-southeast-3", "UseFIPS": false, - "UseDualStack": false, - "Region": "ap-southeast-1" + "UseDualStack": false } }, { - "documentation": "For region eu-central-1 with FIPS disabled and DualStack disabled", + "documentation": "For region ca-central-1 with FIPS disabled and DualStack disabled", "expect": { "endpoint": { - "url": "https://kinesis.eu-central-1.amazonaws.com" + "url": "https://kinesis.ca-central-1.amazonaws.com" } }, "params": { + "Region": "ca-central-1", "UseFIPS": false, - "UseDualStack": false, - "Region": "eu-central-1" + "UseDualStack": false } }, { - "documentation": "For region eu-south-1 with FIPS disabled and DualStack disabled", + "documentation": "For region eu-central-1 with FIPS disabled and DualStack disabled", "expect": { "endpoint": { - "url": "https://kinesis.eu-south-1.amazonaws.com" + "url": "https://kinesis.eu-central-1.amazonaws.com" } }, "params": { + "Region": "eu-central-1", "UseFIPS": false, - "UseDualStack": false, - "Region": "eu-south-1" + "UseDualStack": false } }, { - "documentation": "For region ap-east-1 with FIPS disabled and DualStack disabled", + "documentation": "For region eu-north-1 with FIPS disabled and DualStack disabled", "expect": { "endpoint": { - "url": "https://kinesis.ap-east-1.amazonaws.com" + "url": "https://kinesis.eu-north-1.amazonaws.com" } }, "params": { + "Region": "eu-north-1", "UseFIPS": false, - "UseDualStack": false, - "Region": "ap-east-1" + "UseDualStack": false } }, { - "documentation": "For region sa-east-1 with FIPS disabled and DualStack disabled", + "documentation": "For region eu-south-1 with FIPS disabled and DualStack disabled", "expect": { "endpoint": { - "url": "https://kinesis.sa-east-1.amazonaws.com" + "url": "https://kinesis.eu-south-1.amazonaws.com" } }, "params": { + "Region": "eu-south-1", "UseFIPS": false, - "UseDualStack": false, - "Region": "sa-east-1" + "UseDualStack": false } }, { - "documentation": "For region us-east-2 with FIPS disabled and DualStack disabled", + "documentation": "For region eu-west-1 with FIPS disabled and DualStack disabled", "expect": { "endpoint": { - "url": "https://kinesis.us-east-2.amazonaws.com" + "url": "https://kinesis.eu-west-1.amazonaws.com" } }, "params": { + "Region": "eu-west-1", "UseFIPS": false, - "UseDualStack": false, - "Region": "us-east-2" + "UseDualStack": false } }, { - "documentation": "For region us-east-2 with FIPS enabled and DualStack disabled", + "documentation": "For region eu-west-2 with FIPS disabled and DualStack disabled", "expect": { "endpoint": { - "url": "https://kinesis-fips.us-east-2.amazonaws.com" + "url": "https://kinesis.eu-west-2.amazonaws.com" } }, "params": { - "UseFIPS": true, - "UseDualStack": false, - "Region": "us-east-2" + "Region": "eu-west-2", + "UseFIPS": false, + "UseDualStack": false } }, { - "documentation": "For region eu-north-1 with FIPS disabled and DualStack disabled", + "documentation": "For region eu-west-3 with FIPS disabled and DualStack disabled", "expect": { "endpoint": { - "url": "https://kinesis.eu-north-1.amazonaws.com" + "url": "https://kinesis.eu-west-3.amazonaws.com" } }, "params": { + "Region": "eu-west-3", "UseFIPS": false, - "UseDualStack": false, - "Region": "eu-north-1" + "UseDualStack": false } }, { @@ -216,230 +216,295 @@ } }, "params": { + "Region": "me-south-1", "UseFIPS": false, - "UseDualStack": false, - "Region": "me-south-1" + "UseDualStack": false } }, { - "documentation": "For region eu-west-3 with FIPS disabled and DualStack disabled", + "documentation": "For region sa-east-1 with FIPS disabled and DualStack disabled", "expect": { "endpoint": { - "url": "https://kinesis.eu-west-3.amazonaws.com" + "url": "https://kinesis.sa-east-1.amazonaws.com" } }, "params": { + "Region": "sa-east-1", "UseFIPS": false, - "UseDualStack": false, - "Region": "eu-west-3" + "UseDualStack": false } }, { - "documentation": "For region eu-west-2 with FIPS disabled and DualStack disabled", + "documentation": "For region us-east-1 with FIPS disabled and DualStack disabled", "expect": { "endpoint": { - "url": "https://kinesis.eu-west-2.amazonaws.com" + "url": "https://kinesis.us-east-1.amazonaws.com" } }, "params": { + "Region": "us-east-1", "UseFIPS": false, - "UseDualStack": false, - "Region": "eu-west-2" + "UseDualStack": false } }, { - "documentation": "For region eu-west-1 with FIPS disabled and DualStack disabled", + "documentation": "For region us-east-1 with FIPS enabled and DualStack disabled", "expect": { "endpoint": { - "url": "https://kinesis.eu-west-1.amazonaws.com" + "url": "https://kinesis-fips.us-east-1.amazonaws.com" } }, "params": { - "UseFIPS": false, - "UseDualStack": false, - "Region": "eu-west-1" + "Region": "us-east-1", + "UseFIPS": true, + "UseDualStack": false } }, { - "documentation": "For region us-east-1 with FIPS disabled and DualStack disabled", + "documentation": "For region us-east-2 with FIPS disabled and DualStack disabled", "expect": { "endpoint": { - "url": "https://kinesis.us-east-1.amazonaws.com" + "url": "https://kinesis.us-east-2.amazonaws.com" } }, "params": { + "Region": "us-east-2", "UseFIPS": false, - "UseDualStack": false, - "Region": "us-east-1" + "UseDualStack": false } }, { - "documentation": "For region us-east-1 with FIPS enabled and DualStack disabled", + "documentation": "For region us-east-2 with FIPS enabled and DualStack disabled", "expect": { "endpoint": { - "url": "https://kinesis-fips.us-east-1.amazonaws.com" + "url": "https://kinesis-fips.us-east-2.amazonaws.com" } }, "params": { + "Region": "us-east-2", "UseFIPS": true, - "UseDualStack": false, - "Region": "us-east-1" + "UseDualStack": false } }, { - "documentation": "For region ap-northeast-3 with FIPS disabled and DualStack disabled", + "documentation": "For region us-west-1 with FIPS disabled and DualStack disabled", "expect": { "endpoint": { - "url": "https://kinesis.ap-northeast-3.amazonaws.com" + "url": "https://kinesis.us-west-1.amazonaws.com" } }, "params": { + "Region": "us-west-1", "UseFIPS": false, - "UseDualStack": false, - "Region": "ap-northeast-3" + "UseDualStack": false } }, { - "documentation": "For region ap-northeast-2 with FIPS disabled and DualStack disabled", + "documentation": "For region us-west-1 with FIPS enabled and DualStack disabled", "expect": { "endpoint": { - "url": "https://kinesis.ap-northeast-2.amazonaws.com" + "url": "https://kinesis-fips.us-west-1.amazonaws.com" } }, "params": { - "UseFIPS": false, - "UseDualStack": false, - "Region": "ap-northeast-2" + "Region": "us-west-1", + "UseFIPS": true, + "UseDualStack": false } }, { - "documentation": "For region ap-northeast-1 with FIPS disabled and DualStack disabled", + "documentation": "For region us-west-2 with FIPS disabled and DualStack disabled", "expect": { "endpoint": { - "url": "https://kinesis.ap-northeast-1.amazonaws.com" + "url": "https://kinesis.us-west-2.amazonaws.com" } }, "params": { + "Region": "us-west-2", "UseFIPS": false, - "UseDualStack": false, - "Region": "ap-northeast-1" + "UseDualStack": false } }, { - "documentation": "For region ap-south-1 with FIPS disabled and DualStack disabled", + "documentation": "For region us-west-2 with FIPS enabled and DualStack disabled", "expect": { "endpoint": { - "url": "https://kinesis.ap-south-1.amazonaws.com" + "url": "https://kinesis-fips.us-west-2.amazonaws.com" + } + }, + "params": { + "Region": "us-west-2", + "UseFIPS": true, + "UseDualStack": false + } + }, + { + "documentation": "For region us-east-1 with FIPS enabled and DualStack enabled", + "expect": { + "endpoint": { + "url": "https://kinesis-fips.us-east-1.api.aws" + } + }, + "params": { + "Region": "us-east-1", + "UseFIPS": true, + "UseDualStack": true + } + }, + { + "documentation": "For region us-east-1 with FIPS disabled and DualStack enabled", + "expect": { + "endpoint": { + "url": "https://kinesis.us-east-1.api.aws" } }, "params": { + "Region": "us-east-1", "UseFIPS": false, - "UseDualStack": false, - "Region": "ap-south-1" + "UseDualStack": true } }, { - "documentation": "For region af-south-1 with FIPS disabled and DualStack disabled", + "documentation": "For region cn-north-1 with FIPS disabled and DualStack disabled", "expect": { "endpoint": { - "url": "https://kinesis.af-south-1.amazonaws.com" + "url": "https://kinesis.cn-north-1.amazonaws.com.cn" } }, "params": { + "Region": "cn-north-1", "UseFIPS": false, - "UseDualStack": false, - "Region": "af-south-1" + "UseDualStack": false } }, { - "documentation": "For region us-west-2 with FIPS disabled and DualStack disabled", + "documentation": "For region cn-northwest-1 with FIPS disabled and DualStack disabled", "expect": { "endpoint": { - "url": "https://kinesis.us-west-2.amazonaws.com" + "url": "https://kinesis.cn-northwest-1.amazonaws.com.cn" } }, "params": { + "Region": "cn-northwest-1", "UseFIPS": false, - "UseDualStack": false, - "Region": "us-west-2" + "UseDualStack": false } }, { - "documentation": "For region us-west-2 with FIPS enabled and DualStack disabled", + "documentation": "For region cn-north-1 with FIPS enabled and DualStack enabled", "expect": { "endpoint": { - "url": "https://kinesis-fips.us-west-2.amazonaws.com" + "url": "https://kinesis-fips.cn-north-1.api.amazonwebservices.com.cn" } }, "params": { + "Region": "cn-north-1", "UseFIPS": true, - "UseDualStack": false, - "Region": "us-west-2" + "UseDualStack": true } }, { - "documentation": "For region us-west-1 with FIPS disabled and DualStack disabled", + "documentation": "For region cn-north-1 with FIPS enabled and DualStack disabled", "expect": { "endpoint": { - "url": "https://kinesis.us-west-1.amazonaws.com" + "url": "https://kinesis-fips.cn-north-1.amazonaws.com.cn" + } + }, + "params": { + "Region": "cn-north-1", + "UseFIPS": true, + "UseDualStack": false + } + }, + { + "documentation": "For region cn-north-1 with FIPS disabled and DualStack enabled", + "expect": { + "endpoint": { + "url": "https://kinesis.cn-north-1.api.amazonwebservices.com.cn" } }, "params": { + "Region": "cn-north-1", "UseFIPS": false, - "UseDualStack": false, - "Region": "us-west-1" + "UseDualStack": true } }, { - "documentation": "For region us-west-1 with FIPS enabled and DualStack disabled", + "documentation": "For region us-gov-east-1 with FIPS disabled and DualStack disabled", "expect": { "endpoint": { - "url": "https://kinesis-fips.us-west-1.amazonaws.com" + "url": "https://kinesis.us-gov-east-1.amazonaws.com" + } + }, + "params": { + "Region": "us-gov-east-1", + "UseFIPS": false, + "UseDualStack": false + } + }, + { + "documentation": "For region us-gov-east-1 with FIPS enabled and DualStack disabled", + "expect": { + "endpoint": { + "url": "https://kinesis.us-gov-east-1.amazonaws.com" } }, "params": { + "Region": "us-gov-east-1", "UseFIPS": true, - "UseDualStack": false, - "Region": "us-west-1" + "UseDualStack": false } }, { - "documentation": "For region ca-central-1 with FIPS disabled and DualStack disabled", + "documentation": "For region us-gov-west-1 with FIPS disabled and DualStack disabled", "expect": { "endpoint": { - "url": "https://kinesis.ca-central-1.amazonaws.com" + "url": "https://kinesis.us-gov-west-1.amazonaws.com" } }, "params": { + "Region": "us-gov-west-1", "UseFIPS": false, - "UseDualStack": false, - "Region": "ca-central-1" + "UseDualStack": false } }, { - "documentation": "For region us-east-1 with FIPS enabled and DualStack enabled", + "documentation": "For region us-gov-west-1 with FIPS enabled and DualStack disabled", "expect": { "endpoint": { - "url": "https://kinesis-fips.us-east-1.api.aws" + "url": "https://kinesis.us-gov-west-1.amazonaws.com" } }, "params": { + "Region": "us-gov-west-1", "UseFIPS": true, - "UseDualStack": true, - "Region": "us-east-1" + "UseDualStack": false } }, { - "documentation": "For region us-east-1 with FIPS disabled and DualStack enabled", + "documentation": "For region us-gov-east-1 with FIPS enabled and DualStack enabled", "expect": { "endpoint": { - "url": "https://kinesis.us-east-1.api.aws" + "url": "https://kinesis-fips.us-gov-east-1.api.aws" + } + }, + "params": { + "Region": "us-gov-east-1", + "UseFIPS": true, + "UseDualStack": true + } + }, + { + "documentation": "For region us-gov-east-1 with FIPS disabled and DualStack enabled", + "expect": { + "endpoint": { + "url": "https://kinesis.us-gov-east-1.api.aws" } }, "params": { + "Region": "us-gov-east-1", "UseFIPS": false, - "UseDualStack": true, - "Region": "us-east-1" + "UseDualStack": true } }, { @@ -450,168 +515,949 @@ } }, "params": { + "Region": "us-iso-east-1", "UseFIPS": false, - "UseDualStack": false, - "Region": "us-iso-east-1" + "UseDualStack": false } }, { "documentation": "For region us-iso-west-1 with FIPS disabled and DualStack disabled", "expect": { "endpoint": { - "url": "https://kinesis.us-iso-west-1.c2s.ic.gov" + "url": "https://kinesis.us-iso-west-1.c2s.ic.gov" + } + }, + "params": { + "Region": "us-iso-west-1", + "UseFIPS": false, + "UseDualStack": false + } + }, + { + "documentation": "For region us-iso-east-1 with FIPS enabled and DualStack enabled", + "expect": { + "error": "FIPS and DualStack are enabled, but this partition does not support one or both" + }, + "params": { + "Region": "us-iso-east-1", + "UseFIPS": true, + "UseDualStack": true + } + }, + { + "documentation": "For region us-iso-east-1 with FIPS enabled and DualStack disabled", + "expect": { + "endpoint": { + "url": "https://kinesis-fips.us-iso-east-1.c2s.ic.gov" + } + }, + "params": { + "Region": "us-iso-east-1", + "UseFIPS": true, + "UseDualStack": false + } + }, + { + "documentation": "For region us-iso-east-1 with FIPS disabled and DualStack enabled", + "expect": { + "error": "DualStack is enabled but this partition does not support DualStack" + }, + "params": { + "Region": "us-iso-east-1", + "UseFIPS": false, + "UseDualStack": true + } + }, + { + "documentation": "For region us-isob-east-1 with FIPS disabled and DualStack disabled", + "expect": { + "endpoint": { + "url": "https://kinesis.us-isob-east-1.sc2s.sgov.gov" + } + }, + "params": { + "Region": "us-isob-east-1", + "UseFIPS": false, + "UseDualStack": false + } + }, + { + "documentation": "For region us-isob-east-1 with FIPS enabled and DualStack enabled", + "expect": { + "error": "FIPS and DualStack are enabled, but this partition does not support one or both" + }, + "params": { + "Region": "us-isob-east-1", + "UseFIPS": true, + "UseDualStack": true + } + }, + { + "documentation": "For region us-isob-east-1 with FIPS enabled and DualStack disabled", + "expect": { + "endpoint": { + "url": "https://kinesis-fips.us-isob-east-1.sc2s.sgov.gov" + } + }, + "params": { + "Region": "us-isob-east-1", + "UseFIPS": true, + "UseDualStack": false + } + }, + { + "documentation": "For region us-isob-east-1 with FIPS disabled and DualStack enabled", + "expect": { + "error": "DualStack is enabled but this partition does not support DualStack" + }, + "params": { + "Region": "us-isob-east-1", + "UseFIPS": false, + "UseDualStack": true + } + }, + { + "documentation": "For custom endpoint with region set and fips disabled and dualstack disabled", + "expect": { + "endpoint": { + "url": "https://example.com" + } + }, + "params": { + "Region": "us-east-1", + "UseFIPS": false, + "UseDualStack": false, + "Endpoint": "https://example.com" + } + }, + { + "documentation": "For custom endpoint with region not set and fips disabled and dualstack disabled", + "expect": { + "endpoint": { + "url": "https://example.com" + } + }, + "params": { + "UseFIPS": false, + "UseDualStack": false, + "Endpoint": "https://example.com" + } + }, + { + "documentation": "For custom endpoint with fips enabled and dualstack disabled", + "expect": { + "error": "Invalid Configuration: FIPS and custom endpoint are not supported" + }, + "params": { + "Region": "us-east-1", + "UseFIPS": true, + "UseDualStack": false, + "Endpoint": "https://example.com" + } + }, + { + "documentation": "For custom endpoint with fips disabled and dualstack enabled", + "expect": { + "error": "Invalid Configuration: Dualstack and custom endpoint are not supported" + }, + "params": { + "Region": "us-east-1", + "UseFIPS": false, + "UseDualStack": true, + "Endpoint": "https://example.com" + } + }, + { + "documentation": "Missing region", + "expect": { + "error": "Invalid Configuration: Missing Region" + } + }, + { + "documentation": "Invalid ARN: Failed to parse ARN.", + "expect": { + "error": "Invalid ARN: Failed to parse ARN." + }, + "params": { + "Region": "us-east-1", + "UseFIPS": false, + "UseDualStack": false, + "StreamARN": "arn" + } + }, + { + "documentation": "Invalid ARN: partition missing from ARN.", + "expect": { + "error": "Invalid ARN: Failed to parse ARN." + }, + "params": { + "Region": "us-east-1", + "UseFIPS": false, + "UseDualStack": false, + "StreamARN": "arn::kinesis:us-west-2:123456789012:stream/testStream" + } + }, + { + "documentation": "Invalid ARN: partitions mismatch.", + "expect": { + "error": "Partition: aws from ARN doesn't match with partition name: aws-us-gov." + }, + "params": { + "Region": "us-gov-west-1", + "UseFIPS": false, + "UseDualStack": false, + "StreamARN": "arn:aws:kinesis:us-west-2:123456789012:stream/testStream" + } + }, + { + "documentation": "Invalid ARN: Not Kinesis", + "expect": { + "error": "Invalid ARN: The ARN was not for the Kinesis service, found: s3." + }, + "params": { + "Region": "us-east-1", + "UseFIPS": false, + "UseDualStack": false, + "StreamARN": "arn:aws:s3:us-west-2:123456789012:stream/testStream" + } + }, + { + "documentation": "Invalid ARN: Region is missing in ARN", + "expect": { + "error": "Invalid ARN: Invalid region." + }, + "params": { + "Region": "us-east-1", + "UseFIPS": false, + "UseDualStack": false, + "StreamARN": "arn:aws:kinesis::123456789012:stream/testStream" + } + }, + { + "documentation": "Invalid ARN: Region is empty string in ARN", + "expect": { + "error": "Invalid ARN: Invalid region." + }, + "params": { + "Region": "us-east-1", + "UseFIPS": false, + "UseDualStack": false, + "StreamARN": "arn:aws:kinesis: :123456789012:stream/testStream" + } + }, + { + "documentation": "Invalid ARN: Invalid account id", + "expect": { + "error": "Invalid ARN: Invalid account id." + }, + "params": { + "Region": "us-east-1", + "UseFIPS": false, + "UseDualStack": false, + "StreamARN": "arn:aws:kinesis:us-east-1::stream/testStream", + "OperationType": "control" + } + }, + { + "documentation": "Invalid ARN: Invalid account id", + "expect": { + "error": "Invalid ARN: Invalid account id." + }, + "params": { + "Region": "us-east-1", + "UseFIPS": false, + "UseDualStack": false, + "StreamARN": "arn:aws:kinesis:us-east-1: :stream/testStream", + "OperationType": "control" + } + }, + { + "documentation": "Invalid ARN: Kinesis ARNs only support stream arn types", + "expect": { + "error": "Invalid ARN: Kinesis ARNs don't support `accesspoint` arn types." + }, + "params": { + "Region": "us-east-1", + "UseFIPS": false, + "UseDualStack": false, + "StreamARN": "arn:aws:kinesis:us-east-1:123:accesspoint/testStream" + } + }, + { + "documentation": "Dual Stack not supported region.", + "expect": { + "error": "FIPS and DualStack are enabled, but this partition does not support one or both" + }, + "params": { + "Region": "us-iso-west-1", + "UseFIPS": true, + "UseDualStack": true, + "StreamARN": "arn:aws-iso:kinesis:us-iso-west-1:123456789012:stream/testStream", + "OperationType": "control" + } + }, + { + "documentation": "OperationType not set", + "expect": { + "error": "Operation Type is not set. Please contact service team for resolution." + }, + "params": { + "Region": "us-east-1", + "UseFIPS": false, + "UseDualStack": false, + "StreamARN": "arn:aws:kinesis:us-east-1:123456789012:stream/testStream" + } + }, + { + "documentation": "Custom Endpoint is specified", + "expect": { + "endpoint": { + "url": "https://example.com" + } + }, + "params": { + "Region": "us-east-1", + "UseFIPS": false, + "UseDualStack": false, + "OperationType": "control", + "StreamARN": "arn:aws:kinesis:us-east-1:123:stream/test-stream", + "Endpoint": "https://example.com" + } + }, + { + "documentation": "Account endpoint targeting control operation type", + "expect": { + "endpoint": { + "url": "https://123.control-kinesis.us-east-1.amazonaws.com" + } + }, + "params": { + "Region": "us-east-1", + "UseFIPS": false, + "UseDualStack": false, + "OperationType": "control", + "StreamARN": "arn:aws:kinesis:us-east-1:123:stream/test-stream" + } + }, + { + "documentation": "Account endpoint targeting data operation type", + "expect": { + "endpoint": { + "url": "https://123.data-kinesis.us-east-1.amazonaws.com" + } + }, + "params": { + "Region": "us-east-1", + "UseFIPS": false, + "UseDualStack": false, + "OperationType": "data", + "StreamARN": "arn:aws:kinesis:us-east-1:123:stream/test-stream" + } + }, + { + "documentation": "Account endpoint with fips targeting data operation type", + "expect": { + "endpoint": { + "url": "https://123.data-kinesis-fips.us-east-1.amazonaws.com" + } + }, + "params": { + "Region": "us-east-1", + "UseFIPS": true, + "UseDualStack": false, + "OperationType": "data", + "StreamARN": "arn:aws:kinesis:us-east-1:123:stream/test-stream" + } + }, + { + "documentation": "Account endpoint with fips targeting control operation type", + "expect": { + "endpoint": { + "url": "https://123.control-kinesis-fips.us-east-1.amazonaws.com" + } + }, + "params": { + "Region": "us-east-1", + "UseFIPS": true, + "UseDualStack": false, + "OperationType": "control", + "StreamARN": "arn:aws:kinesis:us-east-1:123:stream/test-stream" + } + }, + { + "documentation": "Account endpoint with Dual Stack and FIPS enabled", + "expect": { + "endpoint": { + "url": "https://123.control-kinesis-fips.us-east-1.api.aws" + } + }, + "params": { + "Region": "us-east-1", + "UseFIPS": true, + "UseDualStack": true, + "OperationType": "control", + "StreamARN": "arn:aws:kinesis:us-east-1:123:stream/test-stream" + } + }, + { + "documentation": "Account endpoint with Dual Stack enabled", + "expect": { + "endpoint": { + "url": "https://123.data-kinesis.us-west-1.api.aws" + } + }, + "params": { + "Region": "us-west-1", + "UseFIPS": false, + "UseDualStack": true, + "OperationType": "data", + "StreamARN": "arn:aws:kinesis:us-west-1:123:stream/test-stream" + } + }, + { + "documentation": "Account endpoint with FIPS and DualStack disabled", + "expect": { + "endpoint": { + "url": "https://123.control-kinesis.us-west-1.amazonaws.com" + } + }, + "params": { + "Region": "us-west-1", + "UseFIPS": false, + "UseDualStack": false, + "OperationType": "control", + "StreamARN": "arn:aws:kinesis:us-west-1:123:stream/test-stream" + } + }, + { + "documentation": "RegionMismatch: client region should be used for endpoint region", + "expect": { + "endpoint": { + "url": "https://123.data-kinesis.us-east-1.amazonaws.com" + } + }, + "params": { + "Region": "us-east-1", + "UseFIPS": false, + "UseDualStack": false, + "OperationType": "data", + "StreamARN": "arn:aws:kinesis:us-west-1:123:stream/testStream" + } + }, + { + "documentation": "Account endpoint with FIPS enabled", + "expect": { + "endpoint": { + "url": "https://123.data-kinesis-fips.cn-northwest-1.amazonaws.com.cn" + } + }, + "params": { + "Region": "cn-northwest-1", + "UseFIPS": true, + "UseDualStack": false, + "OperationType": "data", + "StreamARN": "arn:aws-cn:kinesis:cn-northwest-1:123:stream/test-stream" + } + }, + { + "documentation": "Account endpoint with FIPS and DualStack enabled for cn regions.", + "expect": { + "endpoint": { + "url": "https://123.data-kinesis-fips.cn-northwest-1.api.amazonwebservices.com.cn" + } + }, + "params": { + "Region": "cn-northwest-1", + "UseFIPS": true, + "UseDualStack": true, + "OperationType": "data", + "StreamARN": "arn:aws-cn:kinesis:cn-northwest-1:123:stream/test-stream" + } + }, + { + "documentation": "Account endpoint targeting control operation type in ADC regions", + "expect": { + "endpoint": { + "url": "https://kinesis.us-iso-east-1.c2s.ic.gov" + } + }, + "params": { + "Region": "us-iso-east-1", + "UseFIPS": false, + "UseDualStack": false, + "OperationType": "control", + "StreamARN": "arn:aws-iso:kinesis:us-iso-east-1:123:stream/test-stream" + } + }, + { + "documentation": "Account endpoint targeting control operation type in ADC regions", + "expect": { + "endpoint": { + "url": "https://kinesis.us-iso-west-1.c2s.ic.gov" + } + }, + "params": { + "Region": "us-iso-west-1", + "UseFIPS": false, + "UseDualStack": false, + "OperationType": "control", + "StreamARN": "arn:aws-iso:kinesis:us-iso-west-1:123:stream/test-stream" + } + }, + { + "documentation": "Account endpoint targeting data operation type in ADC regions", + "expect": { + "endpoint": { + "url": "https://kinesis.us-isob-east-1.sc2s.sgov.gov" + } + }, + "params": { + "Region": "us-isob-east-1", + "UseFIPS": false, + "UseDualStack": false, + "OperationType": "data", + "StreamARN": "arn:aws-iso-b:kinesis:us-isob-east-1:123:stream/test-stream" + } + }, + { + "documentation": "Account endpoint with fips targeting control operation type in ADC regions", + "expect": { + "endpoint": { + "url": "https://kinesis-fips.us-iso-east-1.c2s.ic.gov" + } + }, + "params": { + "Region": "us-iso-east-1", + "UseFIPS": true, + "UseDualStack": false, + "OperationType": "control", + "StreamARN": "arn:aws-iso:kinesis:us-iso-east-1:123:stream/test-stream" + } + }, + { + "documentation": "Account endpoint with fips targeting data operation type in ADC regions", + "expect": { + "endpoint": { + "url": "https://kinesis-fips.us-isob-east-1.sc2s.sgov.gov" + } + }, + "params": { + "Region": "us-isob-east-1", + "UseFIPS": true, + "UseDualStack": false, + "OperationType": "data", + "StreamARN": "arn:aws-iso-b:kinesis:us-isob-east-1:123:stream/test-stream" + } + }, + { + "documentation": "Invalid ConsumerARN: Failed to parse ARN.", + "expect": { + "error": "Invalid ARN: Failed to parse ARN." + }, + "params": { + "Region": "us-east-1", + "UseFIPS": false, + "UseDualStack": false, + "ConsumerARN": "arn" + } + }, + { + "documentation": "Invalid ConsumerARN: partition missing from ARN.", + "expect": { + "error": "Invalid ARN: Failed to parse ARN." + }, + "params": { + "Region": "us-east-1", + "UseFIPS": false, + "UseDualStack": false, + "ConsumerARN": "arn::kinesis:us-west-2:123456789012:stream/testStream/consumer/test-consumer:1525898737" + } + }, + { + "documentation": "Invalid ARN: partitions mismatch.", + "expect": { + "error": "Partition: aws from ARN doesn't match with partition name: aws-us-gov." + }, + "params": { + "Region": "us-gov-west-1", + "UseFIPS": false, + "UseDualStack": false, + "ConsumerARN": "arn:aws:kinesis:us-west-2:123456789012:stream/testStream/consumer/test-consumer:1525898737" + } + }, + { + "documentation": "Invalid ARN: Not Kinesis", + "expect": { + "error": "Invalid ARN: The ARN was not for the Kinesis service, found: s3." + }, + "params": { + "Region": "us-east-1", + "UseFIPS": false, + "UseDualStack": false, + "ConsumerARN": "arn:aws:s3:us-west-2:123456789012:stream/testStream/consumer/test-consumer:1525898737" + } + }, + { + "documentation": "Invalid ARN: Region is missing in ARN", + "expect": { + "error": "Invalid ARN: Invalid region." + }, + "params": { + "Region": "us-east-1", + "UseFIPS": false, + "UseDualStack": false, + "ConsumerARN": "arn:aws:kinesis::123456789012:stream/testStream/consumer/test-consumer:1525898737" + } + }, + { + "documentation": "Invalid ARN: Region is empty string in ARN", + "expect": { + "error": "Invalid ARN: Invalid region." + }, + "params": { + "Region": "us-east-1", + "UseFIPS": false, + "UseDualStack": false, + "ConsumerARN": "arn:aws:kinesis: :123456789012:stream/testStream/consumer/test-consumer:1525898737" + } + }, + { + "documentation": "Invalid ARN: Invalid account id", + "expect": { + "error": "Invalid ARN: Invalid account id." + }, + "params": { + "Region": "us-east-1", + "UseFIPS": false, + "UseDualStack": false, + "ConsumerARN": "arn:aws:kinesis:us-east-1::stream/testStream/consumer/test-consumer:1525898737", + "OperationType": "control" + } + }, + { + "documentation": "Invalid ARN: Invalid account id", + "expect": { + "error": "Invalid ARN: Invalid account id." + }, + "params": { + "Region": "us-east-1", + "UseFIPS": false, + "UseDualStack": false, + "ConsumerARN": "arn:aws:kinesis:us-east-1: :stream/testStream/consumer/test-consumer:1525898737", + "OperationType": "control" + } + }, + { + "documentation": "Invalid ARN: Kinesis ARNs only support stream arn/consumer arn types", + "expect": { + "error": "Invalid ARN: Kinesis ARNs don't support `accesspoint` arn types." + }, + "params": { + "Region": "us-east-1", + "UseFIPS": false, + "UseDualStack": false, + "ConsumerARN": "arn:aws:kinesis:us-east-1:123:accesspoint/testStream/consumer/test-consumer:1525898737" + } + }, + { + "documentation": "Dual Stack not supported region.", + "expect": { + "error": "FIPS and DualStack are enabled, but this partition does not support one or both" + }, + "params": { + "Region": "us-iso-west-1", + "UseFIPS": true, + "UseDualStack": true, + "ConsumerARN": "arn:aws-iso:kinesis:us-iso-west-1:123456789012:stream/testStream/consumer/test-consumer:1525898737", + "OperationType": "control" + } + }, + { + "documentation": "OperationType not set", + "expect": { + "error": "Operation Type is not set. Please contact service team for resolution." + }, + "params": { + "Region": "us-east-1", + "UseFIPS": false, + "UseDualStack": false, + "ConsumerARN": "arn:aws:kinesis:us-east-1:123456789012:stream/testStream/consumer/test-consumer:1525898737" + } + }, + { + "documentation": "Custom Endpoint is specified", + "expect": { + "endpoint": { + "url": "https://example.com" + } + }, + "params": { + "Region": "us-east-1", + "UseFIPS": false, + "UseDualStack": false, + "OperationType": "control", + "ConsumerARN": "arn:aws:kinesis:us-east-1:123:stream/test-stream/consumer/test-consumer:1525898737", + "Endpoint": "https://example.com" + } + }, + { + "documentation": "Account endpoint targeting control operation type", + "expect": { + "endpoint": { + "url": "https://123.control-kinesis.us-east-1.amazonaws.com" + } + }, + "params": { + "Region": "us-east-1", + "UseFIPS": false, + "UseDualStack": false, + "OperationType": "control", + "ConsumerARN": "arn:aws:kinesis:us-east-1:123:stream/test-stream/consumer/test-consumer:1525898737" + } + }, + { + "documentation": "Account endpoint targeting data operation type", + "expect": { + "endpoint": { + "url": "https://123.data-kinesis.us-east-1.amazonaws.com" + } + }, + "params": { + "Region": "us-east-1", + "UseFIPS": false, + "UseDualStack": false, + "OperationType": "data", + "ConsumerARN": "arn:aws:kinesis:us-east-1:123:stream/test-stream/consumer/test-consumer:1525898737" + } + }, + { + "documentation": "Account endpoint with fips targeting data operation type", + "expect": { + "endpoint": { + "url": "https://123.data-kinesis-fips.us-east-1.amazonaws.com" + } + }, + "params": { + "Region": "us-east-1", + "UseFIPS": true, + "UseDualStack": false, + "OperationType": "data", + "ConsumerARN": "arn:aws:kinesis:us-east-1:123:stream/test-stream/consumer/test-consumer:1525898737" + } + }, + { + "documentation": "Account endpoint with fips targeting control operation type", + "expect": { + "endpoint": { + "url": "https://123.control-kinesis-fips.us-east-1.amazonaws.com" + } + }, + "params": { + "Region": "us-east-1", + "UseFIPS": true, + "UseDualStack": false, + "OperationType": "control", + "ConsumerARN": "arn:aws:kinesis:us-east-1:123:stream/test-stream/consumer/test-consumer:1525898737" + } + }, + { + "documentation": "Account endpoint with Dual Stack and FIPS enabled", + "expect": { + "endpoint": { + "url": "https://123.control-kinesis-fips.us-east-1.api.aws" + } + }, + "params": { + "Region": "us-east-1", + "UseFIPS": true, + "UseDualStack": true, + "OperationType": "control", + "ConsumerARN": "arn:aws:kinesis:us-east-1:123:stream/test-stream/consumer/test-consumer:1525898737" + } + }, + { + "documentation": "Account endpoint with Dual Stack enabled", + "expect": { + "endpoint": { + "url": "https://123.data-kinesis.us-west-1.api.aws" } }, "params": { + "Region": "us-west-1", "UseFIPS": false, - "UseDualStack": false, - "Region": "us-iso-west-1" + "UseDualStack": true, + "OperationType": "data", + "ConsumerARN": "arn:aws:kinesis:us-west-1:123:stream/test-stream/consumer/test-consumer:1525898737" } }, { - "documentation": "For region us-iso-east-1 with FIPS enabled and DualStack disabled", + "documentation": "Account endpoint with FIPS and DualStack disabled", "expect": { "endpoint": { - "url": "https://kinesis-fips.us-iso-east-1.c2s.ic.gov" + "url": "https://123.control-kinesis.us-west-1.amazonaws.com" } }, "params": { - "UseFIPS": true, + "Region": "us-west-1", + "UseFIPS": false, "UseDualStack": false, - "Region": "us-iso-east-1" + "OperationType": "control", + "ConsumerARN": "arn:aws:kinesis:us-west-1:123:stream/test-stream/consumer/test-consumer:1525898737" } }, { - "documentation": "For region cn-north-1 with FIPS disabled and DualStack disabled", + "documentation": "RegionMismatch: client region should be used for endpoint region", "expect": { "endpoint": { - "url": "https://kinesis.cn-north-1.amazonaws.com.cn" + "url": "https://123.data-kinesis.us-east-1.amazonaws.com" } }, "params": { + "Region": "us-east-1", "UseFIPS": false, "UseDualStack": false, - "Region": "cn-north-1" + "OperationType": "data", + "ConsumerARN": "arn:aws:kinesis:us-west-1:123:stream/testStream/consumer/test-consumer:1525898737" } }, { - "documentation": "For region cn-northwest-1 with FIPS disabled and DualStack disabled", + "documentation": "Account endpoint with FIPS enabled", "expect": { "endpoint": { - "url": "https://kinesis.cn-northwest-1.amazonaws.com.cn" + "url": "https://123.data-kinesis-fips.cn-northwest-1.amazonaws.com.cn" } }, "params": { - "UseFIPS": false, + "Region": "cn-northwest-1", + "UseFIPS": true, "UseDualStack": false, - "Region": "cn-northwest-1" + "OperationType": "data", + "ConsumerARN": "arn:aws-cn:kinesis:cn-northwest-1:123:stream/test-stream/consumer/test-consumer:1525898737" } }, { - "documentation": "For region cn-north-1 with FIPS enabled and DualStack enabled", + "documentation": "Account endpoint with FIPS and DualStack enabled for cn regions.", "expect": { "endpoint": { - "url": "https://kinesis-fips.cn-north-1.api.amazonwebservices.com.cn" + "url": "https://123.data-kinesis-fips.cn-northwest-1.api.amazonwebservices.com.cn" } }, "params": { + "Region": "cn-northwest-1", "UseFIPS": true, "UseDualStack": true, - "Region": "cn-north-1" + "OperationType": "data", + "ConsumerARN": "arn:aws-cn:kinesis:cn-northwest-1:123:stream/test-stream/consumer/test-consumer:1525898737" } }, { - "documentation": "For region cn-north-1 with FIPS enabled and DualStack disabled", + "documentation": "Account endpoint targeting control operation type in ADC regions", "expect": { "endpoint": { - "url": "https://kinesis-fips.cn-north-1.amazonaws.com.cn" + "url": "https://kinesis.us-iso-east-1.c2s.ic.gov" } }, "params": { - "UseFIPS": true, + "Region": "us-iso-east-1", + "UseFIPS": false, "UseDualStack": false, - "Region": "cn-north-1" + "OperationType": "control", + "ConsumerARN": "arn:aws-iso:kinesis:us-iso-east-1:123:stream/test-stream/consumer/test-consumer:1525898737" } }, { - "documentation": "For region cn-north-1 with FIPS disabled and DualStack enabled", + "documentation": "Account endpoint targeting control operation type in ADC regions", "expect": { "endpoint": { - "url": "https://kinesis.cn-north-1.api.amazonwebservices.com.cn" + "url": "https://kinesis.us-iso-west-1.c2s.ic.gov" } }, "params": { + "Region": "us-iso-west-1", "UseFIPS": false, - "UseDualStack": true, - "Region": "cn-north-1" + "UseDualStack": false, + "OperationType": "control", + "ConsumerARN": "arn:aws-iso:kinesis:us-iso-west-1:123:stream/test-stream/consumer/test-consumer:1525898737" } }, { - "documentation": "For region us-isob-east-1 with FIPS disabled and DualStack disabled", + "documentation": "Account endpoint targeting data operation type in ADC regions", "expect": { "endpoint": { "url": "https://kinesis.us-isob-east-1.sc2s.sgov.gov" } }, "params": { + "Region": "us-isob-east-1", "UseFIPS": false, "UseDualStack": false, - "Region": "us-isob-east-1" + "OperationType": "data", + "ConsumerARN": "arn:aws-iso-b:kinesis:us-isob-east-1:123:stream/test-stream/consumer/test-consumer:1525898737" } }, { - "documentation": "For region us-isob-east-1 with FIPS enabled and DualStack disabled", + "documentation": "Account endpoint with fips targeting control operation type in ADC regions", "expect": { "endpoint": { - "url": "https://kinesis-fips.us-isob-east-1.sc2s.sgov.gov" + "url": "https://kinesis-fips.us-iso-east-1.c2s.ic.gov" } }, "params": { + "Region": "us-iso-east-1", "UseFIPS": true, "UseDualStack": false, - "Region": "us-isob-east-1" + "OperationType": "control", + "ConsumerARN": "arn:aws-iso:kinesis:us-iso-east-1:123:stream/test-stream/consumer/test-consumer:1525898737" } }, { - "documentation": "For custom endpoint with fips disabled and dualstack disabled", + "documentation": "Account endpoint with fips targeting data operation type in ADC regions", "expect": { "endpoint": { - "url": "https://example.com" + "url": "https://kinesis-fips.us-isob-east-1.sc2s.sgov.gov" } }, "params": { - "UseFIPS": false, + "Region": "us-isob-east-1", + "UseFIPS": true, "UseDualStack": false, - "Region": "us-east-1", - "Endpoint": "https://example.com" + "OperationType": "data", + "ConsumerARN": "arn:aws-iso-b:kinesis:us-isob-east-1:123:stream/test-stream/consumer/test-consumer:1525898737" } }, { - "documentation": "For custom endpoint with fips enabled and dualstack disabled", + "documentation": "ConsumerARN targeting US-EAST-1", "expect": { - "error": "Invalid Configuration: FIPS and custom endpoint are not supported" + "endpoint": { + "url": "https://123456789123.data-kinesis.us-east-1.amazonaws.com" + } }, "params": { - "UseFIPS": true, - "UseDualStack": false, "Region": "us-east-1", - "Endpoint": "https://example.com" + "UseFIPS": false, + "UseDualStack": false, + "OperationType": "data", + "ConsumerARN": "arn:aws:kinesis:us-east-1:123456789123:stream/foobar/consumer/test-consumer:1525898737" } }, { - "documentation": "For custom endpoint with fips disabled and dualstack enabled", + "documentation": "Both StreamARN and ConsumerARN specified. StreamARN should take precedence", "expect": { - "error": "Invalid Configuration: Dualstack and custom endpoint are not supported" + "endpoint": { + "url": "https://123.data-kinesis.us-east-1.amazonaws.com" + } }, "params": { - "UseFIPS": false, - "UseDualStack": true, "Region": "us-east-1", - "Endpoint": "https://example.com" + "UseFIPS": false, + "UseDualStack": false, + "OperationType": "data", + "StreamARN": "arn:aws:kinesis:us-east-1:123:stream/foobar", + "ConsumerARN": "arn:aws:kinesis:us-east-1:123456789123:stream/foobar/consumer/test-consumer:1525898737" } }, { - "documentation": "Invalid ARN: Failed to parse ARN.", + "documentation": "ResourceARN test: Invalid ARN: Failed to parse ARN.", "expect": { "error": "Invalid ARN: Failed to parse ARN." }, @@ -619,11 +1465,11 @@ "Region": "us-east-1", "UseFIPS": false, "UseDualStack": false, - "StreamARN": "arn" + "ResourceARN": "arn" } }, { - "documentation": "Invalid ARN: partition missing from ARN.", + "documentation": "ResourceARN as StreamARN test: Invalid ARN: partition missing from ARN.", "expect": { "error": "Invalid ARN: Failed to parse ARN." }, @@ -631,11 +1477,11 @@ "Region": "us-east-1", "UseFIPS": false, "UseDualStack": false, - "StreamARN": "arn::kinesis:us-west-2:123456789012:stream/testStream" + "ResourceARN": "arn::kinesis:us-west-2:123456789012:stream/testStream" } }, { - "documentation": "Invalid ARN: partitions mismatch.", + "documentation": "ResourceARN as StreamARN test: Invalid ARN: partitions mismatch.", "expect": { "error": "Partition: aws from ARN doesn't match with partition name: aws-us-gov." }, @@ -643,11 +1489,11 @@ "Region": "us-gov-west-1", "UseFIPS": false, "UseDualStack": false, - "StreamARN": "arn:aws:kinesis:us-west-2:123456789012:stream/testStream" + "ResourceARN": "arn:aws:kinesis:us-west-2:123456789012:stream/testStream" } }, { - "documentation": "Invalid ARN: Not Kinesis", + "documentation": "ResourceARN as StreamARN test: Invalid ARN: Not Kinesis", "expect": { "error": "Invalid ARN: The ARN was not for the Kinesis service, found: s3." }, @@ -655,11 +1501,11 @@ "Region": "us-east-1", "UseFIPS": false, "UseDualStack": false, - "StreamARN": "arn:aws:s3:us-west-2:123456789012:stream/testStream" + "ResourceARN": "arn:aws:s3:us-west-2:123456789012:stream/testStream" } }, { - "documentation": "Invalid ARN: Region is missing in ARN", + "documentation": "ResourceARN as StreamARN test: Invalid ARN: Region is missing in ARN", "expect": { "error": "Invalid ARN: Invalid region." }, @@ -667,11 +1513,11 @@ "Region": "us-east-1", "UseFIPS": false, "UseDualStack": false, - "StreamARN": "arn:aws:kinesis::123456789012:stream/testStream" + "ResourceARN": "arn:aws:kinesis::123456789012:stream/testStream" } }, { - "documentation": "Invalid ARN: Region is empty string in ARN", + "documentation": "ResourceARN as StreamARN test: Invalid ARN: Region is empty string in ARN", "expect": { "error": "Invalid ARN: Invalid region." }, @@ -679,11 +1525,11 @@ "Region": "us-east-1", "UseFIPS": false, "UseDualStack": false, - "StreamARN": "arn:aws:kinesis: :123456789012:stream/testStream" + "ResourceARN": "arn:aws:kinesis: :123456789012:stream/testStream" } }, { - "documentation": "Invalid ARN: Invalid account id", + "documentation": "ResourceARN as StreamARN test: Invalid ARN: Invalid account id", "expect": { "error": "Invalid ARN: Invalid account id." }, @@ -691,12 +1537,12 @@ "Region": "us-east-1", "UseFIPS": false, "UseDualStack": false, - "StreamARN": "arn:aws:kinesis:us-east-1::stream/testStream", + "ResourceARN": "arn:aws:kinesis:us-east-1::stream/testStream", "OperationType": "control" } }, { - "documentation": "Invalid ARN: Invalid account id", + "documentation": "ResourceARN as StreamARN test: Invalid ARN: Invalid account id", "expect": { "error": "Invalid ARN: Invalid account id." }, @@ -704,12 +1550,12 @@ "Region": "us-east-1", "UseFIPS": false, "UseDualStack": false, - "StreamARN": "arn:aws:kinesis:us-east-1: :stream/testStream", + "ResourceARN": "arn:aws:kinesis:us-east-1: :stream/testStream", "OperationType": "control" } }, { - "documentation": "Invalid ARN: Kinesis ARNs only support stream arn types", + "documentation": "ResourceARN as StreamARN test: Invalid ARN: Kinesis ARNs only support stream arn types", "expect": { "error": "Invalid ARN: Kinesis ARNs don't support `accesspoint` arn types." }, @@ -717,11 +1563,11 @@ "Region": "us-east-1", "UseFIPS": false, "UseDualStack": false, - "StreamARN": "arn:aws:kinesis:us-east-1:123:accesspoint/testStream" + "ResourceARN": "arn:aws:kinesis:us-east-1:123:accesspoint/testStream" } }, { - "documentation": "Dual Stack not supported region.", + "documentation": "ResourceARN as StreamARN test: Dual Stack not supported region.", "expect": { "error": "FIPS and DualStack are enabled, but this partition does not support one or both" }, @@ -729,12 +1575,12 @@ "Region": "us-iso-west-1", "UseFIPS": true, "UseDualStack": true, - "StreamARN": "arn:aws-iso:kinesis:us-iso-west-1:123456789012:stream/testStream", + "ResourceARN": "arn:aws-iso:kinesis:us-iso-west-1:123456789012:stream/testStream", "OperationType": "control" } }, { - "documentation": "OperationType not set", + "documentation": "ResourceARN as StreamARN test: OperationType not set", "expect": { "error": "Operation Type is not set. Please contact service team for resolution." }, @@ -742,11 +1588,11 @@ "Region": "us-east-1", "UseFIPS": false, "UseDualStack": false, - "StreamARN": "arn:aws:kinesis:us-east-1:123456789012:stream/testStream" + "ResourceARN": "arn:aws:kinesis:us-east-1:123456789012:stream/testStream" } }, { - "documentation": "Custom Endpoint is specified", + "documentation": "ResourceARN as StreamARN test: Custom Endpoint is specified", "expect": { "endpoint": { "url": "https://example.com" @@ -757,12 +1603,12 @@ "UseFIPS": false, "UseDualStack": false, "OperationType": "control", - "StreamARN": "arn:aws:kinesis:us-east-1:123:stream/test-stream", + "ResourceARN": "arn:aws:kinesis:us-east-1:123:stream/test-stream", "Endpoint": "https://example.com" } }, { - "documentation": "Account endpoint targeting control operation type", + "documentation": "ResourceARN as StreamARN test: Account endpoint targeting control operation type", "expect": { "endpoint": { "url": "https://123.control-kinesis.us-east-1.amazonaws.com" @@ -773,11 +1619,11 @@ "UseFIPS": false, "UseDualStack": false, "OperationType": "control", - "StreamARN": "arn:aws:kinesis:us-east-1:123:stream/test-stream" + "ResourceARN": "arn:aws:kinesis:us-east-1:123:stream/test-stream" } }, { - "documentation": "Account endpoint targeting data operation type", + "documentation": "ResourceARN as StreamARN test: Account endpoint targeting data operation type", "expect": { "endpoint": { "url": "https://123.data-kinesis.us-east-1.amazonaws.com" @@ -788,11 +1634,11 @@ "UseFIPS": false, "UseDualStack": false, "OperationType": "data", - "StreamARN": "arn:aws:kinesis:us-east-1:123:stream/test-stream" + "ResourceARN": "arn:aws:kinesis:us-east-1:123:stream/test-stream" } }, { - "documentation": "Account endpoint with fips targeting data operation type", + "documentation": "ResourceARN as StreamARN test: Account endpoint with fips targeting data operation type", "expect": { "endpoint": { "url": "https://123.data-kinesis-fips.us-east-1.amazonaws.com" @@ -803,11 +1649,11 @@ "UseFIPS": true, "UseDualStack": false, "OperationType": "data", - "StreamARN": "arn:aws:kinesis:us-east-1:123:stream/test-stream" + "ResourceARN": "arn:aws:kinesis:us-east-1:123:stream/test-stream" } }, { - "documentation": "Account endpoint with fips targeting control operation type", + "documentation": "ResourceARN as StreamARN test: Account endpoint with fips targeting control operation type", "expect": { "endpoint": { "url": "https://123.control-kinesis-fips.us-east-1.amazonaws.com" @@ -818,11 +1664,11 @@ "UseFIPS": true, "UseDualStack": false, "OperationType": "control", - "StreamARN": "arn:aws:kinesis:us-east-1:123:stream/test-stream" + "ResourceARN": "arn:aws:kinesis:us-east-1:123:stream/test-stream" } }, { - "documentation": "Account endpoint with Dual Stack and FIPS enabled", + "documentation": "ResourceARN as StreamARN test: Account endpoint with Dual Stack and FIPS enabled", "expect": { "endpoint": { "url": "https://123.control-kinesis-fips.us-east-1.api.aws" @@ -833,11 +1679,11 @@ "UseFIPS": true, "UseDualStack": true, "OperationType": "control", - "StreamARN": "arn:aws:kinesis:us-east-1:123:stream/test-stream" + "ResourceARN": "arn:aws:kinesis:us-east-1:123:stream/test-stream" } }, { - "documentation": "Account endpoint with Dual Stack enabled", + "documentation": "ResourceARN as StreamARN test: Account endpoint with Dual Stack enabled", "expect": { "endpoint": { "url": "https://123.data-kinesis.us-west-1.api.aws" @@ -848,11 +1694,11 @@ "UseFIPS": false, "UseDualStack": true, "OperationType": "data", - "StreamARN": "arn:aws:kinesis:us-west-1:123:stream/test-stream" + "ResourceARN": "arn:aws:kinesis:us-west-1:123:stream/test-stream" } }, { - "documentation": "Account endpoint with FIPS and DualStack disabled", + "documentation": "ResourceARN as StreamARN test: Account endpoint with FIPS and DualStack disabled", "expect": { "endpoint": { "url": "https://123.control-kinesis.us-west-1.amazonaws.com" @@ -863,11 +1709,11 @@ "UseFIPS": false, "UseDualStack": false, "OperationType": "control", - "StreamARN": "arn:aws:kinesis:us-west-1:123:stream/test-stream" + "ResourceARN": "arn:aws:kinesis:us-west-1:123:stream/test-stream" } }, { - "documentation": "RegionMismatch: client region should be used for endpoint region", + "documentation": "ResourceARN as StreamARN test: RegionMismatch: client region should be used for endpoint region", "expect": { "endpoint": { "url": "https://123.data-kinesis.us-east-1.amazonaws.com" @@ -878,11 +1724,11 @@ "UseFIPS": false, "UseDualStack": false, "OperationType": "data", - "StreamARN": "arn:aws:kinesis:us-west-1:123:stream/testStream" + "ResourceARN": "arn:aws:kinesis:us-west-1:123:stream/testStream" } }, { - "documentation": "Account endpoint with FIPS enabled", + "documentation": "ResourceARN as StreamARN test: Account endpoint with FIPS enabled", "expect": { "endpoint": { "url": "https://123.data-kinesis-fips.cn-northwest-1.amazonaws.com.cn" @@ -893,11 +1739,11 @@ "UseFIPS": true, "UseDualStack": false, "OperationType": "data", - "StreamARN": "arn:aws-cn:kinesis:cn-northwest-1:123:stream/test-stream" + "ResourceARN": "arn:aws-cn:kinesis:cn-northwest-1:123:stream/test-stream" } }, { - "documentation": "Account endpoint with FIPS and DualStack enabled for cn regions.", + "documentation": "ResourceARN as StreamARN test: Account endpoint with FIPS and DualStack enabled for cn regions.", "expect": { "endpoint": { "url": "https://123.data-kinesis-fips.cn-northwest-1.api.amazonwebservices.com.cn" @@ -908,11 +1754,11 @@ "UseFIPS": true, "UseDualStack": true, "OperationType": "data", - "StreamARN": "arn:aws-cn:kinesis:cn-northwest-1:123:stream/test-stream" + "ResourceARN": "arn:aws-cn:kinesis:cn-northwest-1:123:stream/test-stream" } }, { - "documentation": "Account endpoint targeting control operation type in ADC regions", + "documentation": "ResourceARN as StreamARN test: Account endpoint targeting control operation type in ADC regions", "expect": { "endpoint": { "url": "https://kinesis.us-iso-east-1.c2s.ic.gov" @@ -923,11 +1769,11 @@ "UseFIPS": false, "UseDualStack": false, "OperationType": "control", - "StreamARN": "arn:aws-iso:kinesis:us-iso-east-1:123:stream/test-stream" + "ResourceARN": "arn:aws-iso:kinesis:us-iso-east-1:123:stream/test-stream" } }, { - "documentation": "Account endpoint targeting control operation type in ADC regions", + "documentation": "ResourceARN as StreamARN test: Account endpoint targeting control operation type in ADC regions", "expect": { "endpoint": { "url": "https://kinesis.us-iso-west-1.c2s.ic.gov" @@ -938,11 +1784,11 @@ "UseFIPS": false, "UseDualStack": false, "OperationType": "control", - "StreamARN": "arn:aws-iso:kinesis:us-iso-west-1:123:stream/test-stream" + "ResourceARN": "arn:aws-iso:kinesis:us-iso-west-1:123:stream/test-stream" } }, { - "documentation": "Account endpoint targeting data operation type in ADC regions", + "documentation": "ResourceARN as StreamARN test: Account endpoint targeting data operation type in ADC regions", "expect": { "endpoint": { "url": "https://kinesis.us-isob-east-1.sc2s.sgov.gov" @@ -953,11 +1799,11 @@ "UseFIPS": false, "UseDualStack": false, "OperationType": "data", - "StreamARN": "arn:aws-iso-b:kinesis:us-isob-east-1:123:stream/test-stream" + "ResourceARN": "arn:aws-iso-b:kinesis:us-isob-east-1:123:stream/test-stream" } }, { - "documentation": "Account endpoint with fips targeting control operation type in ADC regions", + "documentation": "ResourceARN as StreamARN test: Account endpoint with fips targeting control operation type in ADC regions", "expect": { "endpoint": { "url": "https://kinesis-fips.us-iso-east-1.c2s.ic.gov" @@ -968,11 +1814,11 @@ "UseFIPS": true, "UseDualStack": false, "OperationType": "control", - "StreamARN": "arn:aws-iso:kinesis:us-iso-east-1:123:stream/test-stream" + "ResourceARN": "arn:aws-iso:kinesis:us-iso-east-1:123:stream/test-stream" } }, { - "documentation": "Account endpoint with fips targeting data operation type in ADC regions", + "documentation": "ResourceARN as StreamARN test: Account endpoint with fips targeting data operation type in ADC regions", "expect": { "endpoint": { "url": "https://kinesis-fips.us-isob-east-1.sc2s.sgov.gov" @@ -983,23 +1829,11 @@ "UseFIPS": true, "UseDualStack": false, "OperationType": "data", - "StreamARN": "arn:aws-iso-b:kinesis:us-isob-east-1:123:stream/test-stream" - } - }, - { - "documentation": "Invalid ConsumerARN: Failed to parse ARN.", - "expect": { - "error": "Invalid ARN: Failed to parse ARN." - }, - "params": { - "Region": "us-east-1", - "UseFIPS": false, - "UseDualStack": false, - "ConsumerARN": "arn" + "ResourceARN": "arn:aws-iso-b:kinesis:us-isob-east-1:123:stream/test-stream" } }, { - "documentation": "Invalid ConsumerARN: partition missing from ARN.", + "documentation": "ResourceARN as ConsumerARN test: Invalid ARN: partition missing from ARN.", "expect": { "error": "Invalid ARN: Failed to parse ARN." }, @@ -1007,11 +1841,11 @@ "Region": "us-east-1", "UseFIPS": false, "UseDualStack": false, - "ConsumerARN": "arn::kinesis:us-west-2:123456789012:stream/testStream/consumer/test-consumer:1525898737" + "ResourceARN": "arn::kinesis:us-west-2:123456789012:stream/testStream/consumer/test-consumer:1525898737" } }, { - "documentation": "Invalid ARN: partitions mismatch.", + "documentation": "ResourceARN as ConsumerARN test: Invalid ARN: partitions mismatch.", "expect": { "error": "Partition: aws from ARN doesn't match with partition name: aws-us-gov." }, @@ -1019,11 +1853,11 @@ "Region": "us-gov-west-1", "UseFIPS": false, "UseDualStack": false, - "ConsumerARN": "arn:aws:kinesis:us-west-2:123456789012:stream/testStream/consumer/test-consumer:1525898737" + "ResourceARN": "arn:aws:kinesis:us-west-2:123456789012:stream/testStream/consumer/test-consumer:1525898737" } }, { - "documentation": "Invalid ARN: Not Kinesis", + "documentation": "ResourceARN as ConsumerARN test: Invalid ARN: Not Kinesis", "expect": { "error": "Invalid ARN: The ARN was not for the Kinesis service, found: s3." }, @@ -1031,11 +1865,11 @@ "Region": "us-east-1", "UseFIPS": false, "UseDualStack": false, - "ConsumerARN": "arn:aws:s3:us-west-2:123456789012:stream/testStream/consumer/test-consumer:1525898737" + "ResourceARN": "arn:aws:s3:us-west-2:123456789012:stream/testStream/consumer/test-consumer:1525898737" } }, { - "documentation": "Invalid ARN: Region is missing in ARN", + "documentation": "ResourceARN as ConsumerARN test: Invalid ARN: Region is missing in ARN", "expect": { "error": "Invalid ARN: Invalid region." }, @@ -1043,11 +1877,11 @@ "Region": "us-east-1", "UseFIPS": false, "UseDualStack": false, - "ConsumerARN": "arn:aws:kinesis::123456789012:stream/testStream/consumer/test-consumer:1525898737" + "ResourceARN": "arn:aws:kinesis::123456789012:stream/testStream/consumer/test-consumer:1525898737" } }, { - "documentation": "Invalid ARN: Region is empty string in ARN", + "documentation": "ResourceARN as ConsumerARN test: Invalid ARN: Region is empty string in ARN", "expect": { "error": "Invalid ARN: Invalid region." }, @@ -1055,11 +1889,11 @@ "Region": "us-east-1", "UseFIPS": false, "UseDualStack": false, - "ConsumerARN": "arn:aws:kinesis: :123456789012:stream/testStream/consumer/test-consumer:1525898737" + "ResourceARN": "arn:aws:kinesis: :123456789012:stream/testStream/consumer/test-consumer:1525898737" } }, { - "documentation": "Invalid ARN: Invalid account id", + "documentation": "ResourceARN as ConsumerARN test: Invalid ARN: Invalid account id", "expect": { "error": "Invalid ARN: Invalid account id." }, @@ -1067,12 +1901,12 @@ "Region": "us-east-1", "UseFIPS": false, "UseDualStack": false, - "ConsumerARN": "arn:aws:kinesis:us-east-1::stream/testStream/consumer/test-consumer:1525898737", + "ResourceARN": "arn:aws:kinesis:us-east-1::stream/testStream/consumer/test-consumer:1525898737", "OperationType": "control" } }, { - "documentation": "Invalid ARN: Invalid account id", + "documentation": "ResourceARN as ConsumerARN test: Invalid ARN: Invalid account id", "expect": { "error": "Invalid ARN: Invalid account id." }, @@ -1080,12 +1914,12 @@ "Region": "us-east-1", "UseFIPS": false, "UseDualStack": false, - "ConsumerARN": "arn:aws:kinesis:us-east-1: :stream/testStream/consumer/test-consumer:1525898737", + "ResourceARN": "arn:aws:kinesis:us-east-1: :stream/testStream/consumer/test-consumer:1525898737", "OperationType": "control" } }, { - "documentation": "Invalid ARN: Kinesis ARNs only support stream arn/consumer arn types", + "documentation": "ResourceARN as ConsumerARN test: Invalid ARN: Kinesis ARNs only support stream arn/consumer arn types", "expect": { "error": "Invalid ARN: Kinesis ARNs don't support `accesspoint` arn types." }, @@ -1093,11 +1927,11 @@ "Region": "us-east-1", "UseFIPS": false, "UseDualStack": false, - "ConsumerARN": "arn:aws:kinesis:us-east-1:123:accesspoint/testStream/consumer/test-consumer:1525898737" + "ResourceARN": "arn:aws:kinesis:us-east-1:123:accesspoint/testStream/consumer/test-consumer:1525898737" } }, { - "documentation": "Dual Stack not supported region.", + "documentation": "ResourceARN as ConsumerARN test: Dual Stack not supported region.", "expect": { "error": "FIPS and DualStack are enabled, but this partition does not support one or both" }, @@ -1105,12 +1939,12 @@ "Region": "us-iso-west-1", "UseFIPS": true, "UseDualStack": true, - "ConsumerARN": "arn:aws-iso:kinesis:us-iso-west-1:123456789012:stream/testStream/consumer/test-consumer:1525898737", + "ResourceARN": "arn:aws-iso:kinesis:us-iso-west-1:123456789012:stream/testStream/consumer/test-consumer:1525898737", "OperationType": "control" } }, { - "documentation": "OperationType not set", + "documentation": "ResourceARN as ConsumerARN test: OperationType not set", "expect": { "error": "Operation Type is not set. Please contact service team for resolution." }, @@ -1118,11 +1952,11 @@ "Region": "us-east-1", "UseFIPS": false, "UseDualStack": false, - "ConsumerARN": "arn:aws:kinesis:us-east-1:123456789012:stream/testStream/consumer/test-consumer:1525898737" + "ResourceARN": "arn:aws:kinesis:us-east-1:123456789012:stream/testStream/consumer/test-consumer:1525898737" } }, { - "documentation": "Custom Endpoint is specified", + "documentation": "ResourceARN as ConsumerARN test: Custom Endpoint is specified", "expect": { "endpoint": { "url": "https://example.com" @@ -1133,12 +1967,12 @@ "UseFIPS": false, "UseDualStack": false, "OperationType": "control", - "ConsumerARN": "arn:aws:kinesis:us-east-1:123:stream/test-stream/consumer/test-consumer:1525898737", + "ResourceARN": "arn:aws:kinesis:us-east-1:123:stream/test-stream/consumer/test-consumer:1525898737", "Endpoint": "https://example.com" } }, { - "documentation": "Account endpoint targeting control operation type", + "documentation": "ResourceARN as ConsumerARN test: Account endpoint targeting control operation type", "expect": { "endpoint": { "url": "https://123.control-kinesis.us-east-1.amazonaws.com" @@ -1149,11 +1983,11 @@ "UseFIPS": false, "UseDualStack": false, "OperationType": "control", - "ConsumerARN": "arn:aws:kinesis:us-east-1:123:stream/test-stream/consumer/test-consumer:1525898737" + "ResourceARN": "arn:aws:kinesis:us-east-1:123:stream/test-stream/consumer/test-consumer:1525898737" } }, { - "documentation": "Account endpoint targeting data operation type", + "documentation": "ResourceARN as ConsumerARN test: Account endpoint targeting data operation type", "expect": { "endpoint": { "url": "https://123.data-kinesis.us-east-1.amazonaws.com" @@ -1164,11 +1998,11 @@ "UseFIPS": false, "UseDualStack": false, "OperationType": "data", - "ConsumerARN": "arn:aws:kinesis:us-east-1:123:stream/test-stream/consumer/test-consumer:1525898737" + "ResourceARN": "arn:aws:kinesis:us-east-1:123:stream/test-stream/consumer/test-consumer:1525898737" } }, { - "documentation": "Account endpoint with fips targeting data operation type", + "documentation": "ResourceARN as ConsumerARN test: Account endpoint with fips targeting data operation type", "expect": { "endpoint": { "url": "https://123.data-kinesis-fips.us-east-1.amazonaws.com" @@ -1179,11 +2013,11 @@ "UseFIPS": true, "UseDualStack": false, "OperationType": "data", - "ConsumerARN": "arn:aws:kinesis:us-east-1:123:stream/test-stream/consumer/test-consumer:1525898737" + "ResourceARN": "arn:aws:kinesis:us-east-1:123:stream/test-stream/consumer/test-consumer:1525898737" } }, { - "documentation": "Account endpoint with fips targeting control operation type", + "documentation": "ResourceARN as ConsumerARN test: Account endpoint with fips targeting control operation type", "expect": { "endpoint": { "url": "https://123.control-kinesis-fips.us-east-1.amazonaws.com" @@ -1194,11 +2028,11 @@ "UseFIPS": true, "UseDualStack": false, "OperationType": "control", - "ConsumerARN": "arn:aws:kinesis:us-east-1:123:stream/test-stream/consumer/test-consumer:1525898737" + "ResourceARN": "arn:aws:kinesis:us-east-1:123:stream/test-stream/consumer/test-consumer:1525898737" } }, { - "documentation": "Account endpoint with Dual Stack and FIPS enabled", + "documentation": "ResourceARN as ConsumerARN test: Account endpoint with Dual Stack and FIPS enabled", "expect": { "endpoint": { "url": "https://123.control-kinesis-fips.us-east-1.api.aws" @@ -1209,11 +2043,11 @@ "UseFIPS": true, "UseDualStack": true, "OperationType": "control", - "ConsumerARN": "arn:aws:kinesis:us-east-1:123:stream/test-stream/consumer/test-consumer:1525898737" + "ResourceARN": "arn:aws:kinesis:us-east-1:123:stream/test-stream/consumer/test-consumer:1525898737" } }, { - "documentation": "Account endpoint with Dual Stack enabled", + "documentation": "ResourceARN as ConsumerARN test: Account endpoint with Dual Stack enabled", "expect": { "endpoint": { "url": "https://123.data-kinesis.us-west-1.api.aws" @@ -1224,11 +2058,11 @@ "UseFIPS": false, "UseDualStack": true, "OperationType": "data", - "ConsumerARN": "arn:aws:kinesis:us-west-1:123:stream/test-stream/consumer/test-consumer:1525898737" + "ResourceARN": "arn:aws:kinesis:us-west-1:123:stream/test-stream/consumer/test-consumer:1525898737" } }, { - "documentation": "Account endpoint with FIPS and DualStack disabled", + "documentation": "ResourceARN as ConsumerARN test: Account endpoint with FIPS and DualStack disabled", "expect": { "endpoint": { "url": "https://123.control-kinesis.us-west-1.amazonaws.com" @@ -1239,11 +2073,11 @@ "UseFIPS": false, "UseDualStack": false, "OperationType": "control", - "ConsumerARN": "arn:aws:kinesis:us-west-1:123:stream/test-stream/consumer/test-consumer:1525898737" + "ResourceARN": "arn:aws:kinesis:us-west-1:123:stream/test-stream/consumer/test-consumer:1525898737" } }, { - "documentation": "RegionMismatch: client region should be used for endpoint region", + "documentation": "ResourceARN as ConsumerARN test: RegionMismatch: client region should be used for endpoint region", "expect": { "endpoint": { "url": "https://123.data-kinesis.us-east-1.amazonaws.com" @@ -1254,11 +2088,11 @@ "UseFIPS": false, "UseDualStack": false, "OperationType": "data", - "ConsumerARN": "arn:aws:kinesis:us-west-1:123:stream/testStream/consumer/test-consumer:1525898737" + "ResourceARN": "arn:aws:kinesis:us-west-1:123:stream/testStream/consumer/test-consumer:1525898737" } }, { - "documentation": "Account endpoint with FIPS enabled", + "documentation": "ResourceARN as ConsumerARN test: Account endpoint with FIPS enabled", "expect": { "endpoint": { "url": "https://123.data-kinesis-fips.cn-northwest-1.amazonaws.com.cn" @@ -1269,11 +2103,11 @@ "UseFIPS": true, "UseDualStack": false, "OperationType": "data", - "ConsumerARN": "arn:aws-cn:kinesis:cn-northwest-1:123:stream/test-stream/consumer/test-consumer:1525898737" + "ResourceARN": "arn:aws-cn:kinesis:cn-northwest-1:123:stream/test-stream/consumer/test-consumer:1525898737" } }, { - "documentation": "Account endpoint with FIPS and DualStack enabled for cn regions.", + "documentation": "ResourceARN as ConsumerARN test: Account endpoint with FIPS and DualStack enabled for cn regions.", "expect": { "endpoint": { "url": "https://123.data-kinesis-fips.cn-northwest-1.api.amazonwebservices.com.cn" @@ -1284,11 +2118,11 @@ "UseFIPS": true, "UseDualStack": true, "OperationType": "data", - "ConsumerARN": "arn:aws-cn:kinesis:cn-northwest-1:123:stream/test-stream/consumer/test-consumer:1525898737" + "ResourceARN": "arn:aws-cn:kinesis:cn-northwest-1:123:stream/test-stream/consumer/test-consumer:1525898737" } }, { - "documentation": "Account endpoint targeting control operation type in ADC regions", + "documentation": "ResourceARN as ConsumerARN test: Account endpoint targeting control operation type in ADC regions", "expect": { "endpoint": { "url": "https://kinesis.us-iso-east-1.c2s.ic.gov" @@ -1299,11 +2133,11 @@ "UseFIPS": false, "UseDualStack": false, "OperationType": "control", - "ConsumerARN": "arn:aws-iso:kinesis:us-iso-east-1:123:stream/test-stream/consumer/test-consumer:1525898737" + "ResourceARN": "arn:aws-iso:kinesis:us-iso-east-1:123:stream/test-stream/consumer/test-consumer:1525898737" } }, { - "documentation": "Account endpoint targeting control operation type in ADC regions", + "documentation": "ResourceARN as ConsumerARN test: Account endpoint targeting control operation type in ADC regions", "expect": { "endpoint": { "url": "https://kinesis.us-iso-west-1.c2s.ic.gov" @@ -1314,11 +2148,11 @@ "UseFIPS": false, "UseDualStack": false, "OperationType": "control", - "ConsumerARN": "arn:aws-iso:kinesis:us-iso-west-1:123:stream/test-stream/consumer/test-consumer:1525898737" + "ResourceARN": "arn:aws-iso:kinesis:us-iso-west-1:123:stream/test-stream/consumer/test-consumer:1525898737" } }, { - "documentation": "Account endpoint targeting data operation type in ADC regions", + "documentation": "ResourceARN as ConsumerARN test: Account endpoint targeting data operation type in ADC regions", "expect": { "endpoint": { "url": "https://kinesis.us-isob-east-1.sc2s.sgov.gov" @@ -1329,11 +2163,11 @@ "UseFIPS": false, "UseDualStack": false, "OperationType": "data", - "ConsumerARN": "arn:aws-iso-b:kinesis:us-isob-east-1:123:stream/test-stream/consumer/test-consumer:1525898737" + "ResourceARN": "arn:aws-iso-b:kinesis:us-isob-east-1:123:stream/test-stream/consumer/test-consumer:1525898737" } }, { - "documentation": "Account endpoint with fips targeting control operation type in ADC regions", + "documentation": "ResourceARN as ConsumerARN test: Account endpoint with fips targeting control operation type in ADC regions", "expect": { "endpoint": { "url": "https://kinesis-fips.us-iso-east-1.c2s.ic.gov" @@ -1344,11 +2178,11 @@ "UseFIPS": true, "UseDualStack": false, "OperationType": "control", - "ConsumerARN": "arn:aws-iso:kinesis:us-iso-east-1:123:stream/test-stream/consumer/test-consumer:1525898737" + "ResourceARN": "arn:aws-iso:kinesis:us-iso-east-1:123:stream/test-stream/consumer/test-consumer:1525898737" } }, { - "documentation": "Account endpoint with fips targeting data operation type in ADC regions", + "documentation": "ResourceARN as ConsumerARN test: Account endpoint with fips targeting data operation type in ADC regions", "expect": { "endpoint": { "url": "https://kinesis-fips.us-isob-east-1.sc2s.sgov.gov" @@ -1359,38 +2193,7 @@ "UseFIPS": true, "UseDualStack": false, "OperationType": "data", - "ConsumerARN": "arn:aws-iso-b:kinesis:us-isob-east-1:123:stream/test-stream/consumer/test-consumer:1525898737" - } - }, - { - "documentation": "ConsumerARN targeting US-EAST-1", - "expect": { - "endpoint": { - "url": "https://123456789123.data-kinesis.us-east-1.amazonaws.com" - } - }, - "params": { - "Region": "us-east-1", - "UseFIPS": false, - "UseDualStack": false, - "OperationType": "data", - "ConsumerARN": "arn:aws:kinesis:us-east-1:123456789123:stream/foobar/consumer/test-consumer:1525898737" - } - }, - { - "documentation": "Both StreamARN and ConsumerARN specified. StreamARN should take precedence", - "expect": { - "endpoint": { - "url": "https://123.data-kinesis.us-east-1.amazonaws.com" - } - }, - "params": { - "Region": "us-east-1", - "UseFIPS": false, - "UseDualStack": false, - "OperationType": "data", - "StreamARN": "arn:aws:kinesis:us-east-1:123:stream/foobar", - "ConsumerARN": "arn:aws:kinesis:us-east-1:123456789123:stream/foobar/consumer/test-consumer:1525898737" + "ResourceARN": "arn:aws-iso-b:kinesis:us-isob-east-1:123:stream/test-stream/consumer/test-consumer:1525898737" } } ], diff --git a/models/apis/s3control/2018-08-20/api-2.json b/models/apis/s3control/2018-08-20/api-2.json index 39416114df8..77d98a599ee 100644 --- a/models/apis/s3control/2018-08-20/api-2.json +++ b/models/apis/s3control/2018-08-20/api-2.json @@ -3033,7 +3033,17 @@ }, "CreatedAfter":{"shape":"ObjectCreationTime"}, "CreatedBefore":{"shape":"ObjectCreationTime"}, - "ObjectReplicationStatuses":{"shape":"ReplicationStatusFilterList"} + "ObjectReplicationStatuses":{"shape":"ReplicationStatusFilterList"}, + "KeyNameConstraint":{"shape":"KeyNameConstraint"}, + "ObjectSizeGreaterThanBytes":{ + "shape":"ObjectSizeGreaterThanBytes", + "box":true + }, + "ObjectSizeLessThanBytes":{ + "shape":"ObjectSizeLessThanBytes", + "box":true + }, + "MatchAnyStorageClass":{"shape":"StorageClassList"} } }, "JobManifestLocation":{ @@ -3220,6 +3230,14 @@ "type":"long", "min":0 }, + "KeyNameConstraint":{ + "type":"structure", + "members":{ + "MatchAnyPrefix":{"shape":"NonEmptyMaxLength1024StringList"}, + "MatchAnySuffix":{"shape":"NonEmptyMaxLength1024StringList"}, + "MatchAnySubstring":{"shape":"NonEmptyMaxLength1024StringList"} + } + }, "KmsKeyArnString":{ "type":"string", "max":2000, @@ -3761,6 +3779,10 @@ "max":1024, "min":1 }, + "NonEmptyMaxLength1024StringList":{ + "type":"list", + "member":{"shape":"NonEmptyMaxLength1024String"} + }, "NonEmptyMaxLength2048String":{ "type":"string", "max":2048, @@ -5030,6 +5052,10 @@ "Disabled" ] }, + "StorageClassList":{ + "type":"list", + "member":{"shape":"S3StorageClass"} + }, "StorageLensArn":{ "type":"string", "max":1024, diff --git a/models/apis/s3control/2018-08-20/docs-2.json b/models/apis/s3control/2018-08-20/docs-2.json index 892dcece411..e6b51f7e9ee 100644 --- a/models/apis/s3control/2018-08-20/docs-2.json +++ b/models/apis/s3control/2018-08-20/docs-2.json @@ -1318,6 +1318,12 @@ "JobProgressSummary$TotalNumberOfTasks": "

" } }, + "KeyNameConstraint": { + "base": "

If provided, the generated manifest includes only source bucket objects whose object keys match the string constraints specified for MatchAnyPrefix, MatchAnySuffix, and MatchAnySubstring.

", + "refs": { + "JobManifestGeneratorFilter$KeyNameConstraint": "

If provided, the generated manifest includes only source bucket objects whose object keys match the string constraints specified for MatchAnyPrefix, MatchAnySuffix, and MatchAnySubstring.

" + } + }, "KmsKeyArnString": { "base": null, "refs": { @@ -1688,6 +1694,7 @@ "ListMultiRegionAccessPointsResult$NextToken": "

If the specified bucket has more Multi-Region Access Points than can be returned in one call to this action, this field contains a continuation token. You can use this token tin subsequent calls to this action to retrieve additional Multi-Region Access Points.

", "ListRegionalBucketsRequest$NextToken": "

", "ListRegionalBucketsResult$NextToken": "

NextToken is sent when isTruncated is true, which means there are more buckets that can be listed. The next list requests to Amazon S3 can be continued with this NextToken. NextToken is obfuscated and is not a real key.

", + "NonEmptyMaxLength1024StringList$member": null, "S3CopyObjectOperation$TargetKeyPrefix": "

Specifies the folder prefix that you want the objects to be copied into. For example, to copy objects into a folder named Folder1 in the destination bucket, set the TargetKeyPrefix property to Folder1.

", "S3Grantee$Identifier": "

", "S3Grantee$DisplayName": "

", @@ -1702,6 +1709,14 @@ "S3UserMetadata$key": null } }, + "NonEmptyMaxLength1024StringList": { + "base": null, + "refs": { + "KeyNameConstraint$MatchAnyPrefix": "

If provided, the generated manifest includes objects where the specified string appears at the start of the object key string.

", + "KeyNameConstraint$MatchAnySuffix": "

If provided, the generated manifest includes objects where the specified string appears at the end of the object key string.

", + "KeyNameConstraint$MatchAnySubstring": "

If provided, the generated manifest includes objects where the specified string appears anywhere within the object key string.

" + } + }, "NonEmptyMaxLength2048String": { "base": null, "refs": { @@ -1765,8 +1780,8 @@ "ObjectCreationTime": { "base": null, "refs": { - "JobManifestGeneratorFilter$CreatedAfter": "

If provided, the generated manifest should include only source bucket objects that were created after this time.

", - "JobManifestGeneratorFilter$CreatedBefore": "

If provided, the generated manifest should include only source bucket objects that were created before this time.

" + "JobManifestGeneratorFilter$CreatedAfter": "

If provided, the generated manifest includes only source bucket objects that were created after this time.

", + "JobManifestGeneratorFilter$CreatedBefore": "

If provided, the generated manifest includes only source bucket objects that were created before this time.

" } }, "ObjectLambdaAccessPoint": { @@ -1896,6 +1911,7 @@ "ObjectSizeGreaterThanBytes": { "base": null, "refs": { + "JobManifestGeneratorFilter$ObjectSizeGreaterThanBytes": "

If provided, the generated manifest includes only source bucket objects whose file size is greater than the specified number of bytes.

", "LifecycleRuleAndOperator$ObjectSizeGreaterThan": "

Minimum object size to which the rule applies.

", "LifecycleRuleFilter$ObjectSizeGreaterThan": "

Minimum object size to which the rule applies.

" } @@ -1903,6 +1919,7 @@ "ObjectSizeLessThanBytes": { "base": null, "refs": { + "JobManifestGeneratorFilter$ObjectSizeLessThanBytes": "

If provided, the generated manifest includes only source bucket objects whose file size is less than the specified number of bytes.

", "LifecycleRuleAndOperator$ObjectSizeLessThan": "

Maximum object size to which the rule applies.

", "LifecycleRuleFilter$ObjectSizeLessThan": "

Maximum object size to which the rule applies.

" } @@ -2209,7 +2226,7 @@ "ReplicationStatusFilterList": { "base": null, "refs": { - "JobManifestGeneratorFilter$ObjectReplicationStatuses": "

If provided, the generated manifest should include only source bucket objects that have one of the specified Replication statuses.

" + "JobManifestGeneratorFilter$ObjectReplicationStatuses": "

If provided, the generated manifest includes only source bucket objects that have one of the specified Replication statuses.

" } }, "ReplicationStorageClass": { @@ -2520,7 +2537,8 @@ "S3StorageClass": { "base": null, "refs": { - "S3CopyObjectOperation$StorageClass": "

" + "S3CopyObjectOperation$StorageClass": "

", + "StorageClassList$member": null } }, "S3Tag": { @@ -2615,6 +2633,12 @@ "SseKmsEncryptedObjects$Status": "

Specifies whether Amazon S3 replicates objects that are created with server-side encryption by using an KMS key stored in Key Management Service.

" } }, + "StorageClassList": { + "base": null, + "refs": { + "JobManifestGeneratorFilter$MatchAnyStorageClass": "

If provided, the generated manifest includes only source bucket objects that are stored with the specified storage class.

" + } + }, "StorageLensArn": { "base": null, "refs": { diff --git a/models/apis/sagemaker/2017-07-24/api-2.json b/models/apis/sagemaker/2017-07-24/api-2.json index e14c29b4c25..cf04d1a4147 100644 --- a/models/apis/sagemaker/2017-07-24/api-2.json +++ b/models/apis/sagemaker/2017-07-24/api-2.json @@ -3405,6 +3405,7 @@ "max":256, "pattern":".*" }, + "AcceptEula":{"type":"boolean"}, "AccountId":{ "type":"string", "pattern":"^\\d+$" @@ -14780,6 +14781,13 @@ "DeploymentRecommendation":{"shape":"DeploymentRecommendation"} } }, + "ModelAccessConfig":{ + "type":"structure", + "required":["AcceptEula"], + "members":{ + "AcceptEula":{"shape":"AcceptEula"} + } + }, "ModelApprovalStatus":{ "type":"string", "enum":[ @@ -18584,7 +18592,8 @@ "members":{ "S3Uri":{"shape":"S3ModelUri"}, "S3DataType":{"shape":"S3ModelDataType"}, - "CompressionType":{"shape":"ModelCompressionType"} + "CompressionType":{"shape":"ModelCompressionType"}, + "ModelAccessConfig":{"shape":"ModelAccessConfig"} } }, "S3ModelDataType":{ diff --git a/models/apis/sagemaker/2017-07-24/docs-2.json b/models/apis/sagemaker/2017-07-24/docs-2.json index 19a932bd93f..b1955e6a945 100644 --- a/models/apis/sagemaker/2017-07-24/docs-2.json +++ b/models/apis/sagemaker/2017-07-24/docs-2.json @@ -314,6 +314,12 @@ "TransformOutput$Accept": "

The MIME type used to specify the output data. Amazon SageMaker uses the MIME type with each http call to transfer data from the transform job.

" } }, + "AcceptEula": { + "base": null, + "refs": { + "ModelAccessConfig$AcceptEula": "

Specifies agreement to the model end-user license agreement (EULA). The AcceptEula value must be explicitly defined as True in order to accept the EULA that this model requires. You are responsible for reviewing and complying with any applicable license terms and making sure they are acceptable for your use case before downloading or using a model.

" + } + }, "AccountId": { "base": null, "refs": { @@ -8438,7 +8444,7 @@ "MaxPendingTimeInSeconds": { "base": "Maximum job scheduler pending time in seconds.", "refs": { - "StoppingCondition$MaxPendingTimeInSeconds": "

The maximum pending time in seconds.

" + "StoppingCondition$MaxPendingTimeInSeconds": "

The maximum length of time, in seconds, that a training or compilation job can be pending before it is stopped.

" } }, "MaxPercentageOfInputDatasetLabeled": { @@ -8693,6 +8699,12 @@ "ModelDashboardModel$Model": "

A model displayed in the Model Dashboard.

" } }, + "ModelAccessConfig": { + "base": "

The access configuration file for the ML model. You can explicitly accept the model end-user license agreement (EULA) within the ModelAccessConfig. For more information, see End-user license agreements.

", + "refs": { + "S3ModelDataSource$ModelAccessConfig": "

Specifies the access configuration file for the ML model. You can explicitly accept the model end-user license agreement (EULA) within the ModelAccessConfig. You are responsible for reviewing and complying with any applicable license terms and making sure they are acceptable for your use case before downloading or using a model.

" + } + }, "ModelApprovalStatus": { "base": null, "refs": { @@ -12643,7 +12655,7 @@ "SingleSignOnApplicationArn": { "base": null, "refs": { - "DescribeDomainResponse$SingleSignOnApplicationArn": "

The ARN of the associated Amazon Web Services Single Sign-On application for this Domain.

" + "DescribeDomainResponse$SingleSignOnApplicationArn": "

The ARN of the application managed by SageMaker in IAM Identity Center. This value is only returned for domains created after September 19, 2023.

" } }, "SingleSignOnUserIdentifier": { diff --git a/service/kinesis/api.go b/service/kinesis/api.go index 39722733c8b..39ec9a84e11 100644 --- a/service/kinesis/api.go +++ b/service/kinesis/api.go @@ -68,8 +68,9 @@ func (c *Kinesis) AddTagsToStreamRequest(input *AddTagsToStreamInput) (req *requ // Adds or updates tags for the specified Kinesis data stream. You can assign // up to 50 tags to a data stream. // -// When invoking this API, it is recommended you use the StreamARN input parameter -// rather than the StreamName input parameter. +// When invoking this API, you must use either the StreamARN or the StreamName +// parameter, or both. It is recommended that you use the StreamARN input parameter +// when you invoke this API. // // If tags have already been assigned to the stream, AddTagsToStream overwrites // any existing tags that correspond to the specified tag keys. @@ -307,8 +308,9 @@ func (c *Kinesis) DecreaseStreamRetentionPeriodRequest(input *DecreaseStreamRete // of time data records are accessible after they are added to the stream. The // minimum value of a stream's retention period is 24 hours. // -// When invoking this API, it is recommended you use the StreamARN input parameter -// rather than the StreamName input parameter. +// When invoking this API, you must use either the StreamARN or the StreamName +// parameter, or both. It is recommended that you use the StreamARN input parameter +// when you invoke this API. // // This operation may result in lost data. For example, if the stream's retention // period is 48 hours and is decreased to 24 hours, any data already in the @@ -364,6 +366,107 @@ func (c *Kinesis) DecreaseStreamRetentionPeriodWithContext(ctx aws.Context, inpu return out, req.Send() } +const opDeleteResourcePolicy = "DeleteResourcePolicy" + +// DeleteResourcePolicyRequest generates a "aws/request.Request" representing the +// client's request for the DeleteResourcePolicy operation. The "output" return +// value will be populated with the request's response once the request completes +// successfully. +// +// Use "Send" method on the returned Request to send the API call to the service. +// the "output" return value is not valid until after Send returns without error. +// +// See DeleteResourcePolicy for more information on using the DeleteResourcePolicy +// API call, and error handling. +// +// This method is useful when you want to inject custom logic or configuration +// into the SDK's request lifecycle. Such as custom headers, or retry logic. +// +// // Example sending a request using the DeleteResourcePolicyRequest method. +// req, resp := client.DeleteResourcePolicyRequest(params) +// +// err := req.Send() +// if err == nil { // resp is now filled +// fmt.Println(resp) +// } +// +// See also, https://docs.aws.amazon.com/goto/WebAPI/kinesis-2013-12-02/DeleteResourcePolicy +func (c *Kinesis) DeleteResourcePolicyRequest(input *DeleteResourcePolicyInput) (req *request.Request, output *DeleteResourcePolicyOutput) { + op := &request.Operation{ + Name: opDeleteResourcePolicy, + HTTPMethod: "POST", + HTTPPath: "/", + } + + if input == nil { + input = &DeleteResourcePolicyInput{} + } + + output = &DeleteResourcePolicyOutput{} + req = c.newRequest(op, input, output) + req.Handlers.Unmarshal.Swap(jsonrpc.UnmarshalHandler.Name, protocol.UnmarshalDiscardBodyHandler) + return +} + +// DeleteResourcePolicy API operation for Amazon Kinesis. +// +// Delete a policy for the specified data stream or consumer. Request patterns +// can be one of the following: +// +// - Data stream pattern: arn:aws.*:kinesis:.*:\d{12}:.*stream/\S+ +// +// - Consumer pattern: ^(arn):aws.*:kinesis:.*:\d{12}:.*stream\/[a-zA-Z0-9_.-]+\/consumer\/[a-zA-Z0-9_.-]+:[0-9]+ +// +// Returns awserr.Error for service API and SDK errors. Use runtime type assertions +// with awserr.Error's Code and Message methods to get detailed information about +// the error. +// +// See the AWS API reference guide for Amazon Kinesis's +// API operation DeleteResourcePolicy for usage and error information. +// +// Returned Error Types: +// +// - AccessDeniedException +// Specifies that you do not have the permissions required to perform this operation. +// +// - ResourceNotFoundException +// The requested resource could not be found. The stream might not be specified +// correctly. +// +// - LimitExceededException +// The requested resource exceeds the maximum number allowed, or the number +// of concurrent stream requests exceeds the maximum number allowed. +// +// - InvalidArgumentException +// A specified parameter exceeds its restrictions, is not supported, or can't +// be used. For more information, see the returned message. +// +// - ResourceInUseException +// The resource is not available for this operation. For successful operation, +// the resource must be in the ACTIVE state. +// +// See also, https://docs.aws.amazon.com/goto/WebAPI/kinesis-2013-12-02/DeleteResourcePolicy +func (c *Kinesis) DeleteResourcePolicy(input *DeleteResourcePolicyInput) (*DeleteResourcePolicyOutput, error) { + req, out := c.DeleteResourcePolicyRequest(input) + return out, req.Send() +} + +// DeleteResourcePolicyWithContext is the same as DeleteResourcePolicy with the addition of +// the ability to pass a context and additional request options. +// +// See DeleteResourcePolicy for details on how to use this API operation. +// +// The context must be non-nil and will be used for request cancellation. If +// the context is nil a panic will occur. In the future the SDK may create +// sub-contexts for http.Requests. See https://golang.org/pkg/context/ +// for more information on using Contexts. +func (c *Kinesis) DeleteResourcePolicyWithContext(ctx aws.Context, input *DeleteResourcePolicyInput, opts ...request.Option) (*DeleteResourcePolicyOutput, error) { + req, out := c.DeleteResourcePolicyRequest(input) + req.SetContext(ctx) + req.ApplyOptions(opts...) + return out, req.Send() +} + const opDeleteStream = "DeleteStream" // DeleteStreamRequest generates a "aws/request.Request" representing the @@ -413,8 +516,9 @@ func (c *Kinesis) DeleteStreamRequest(input *DeleteStreamInput) (req *request.Re // the stream. If an application attempts to operate on a deleted stream, it // receives the exception ResourceNotFoundException. // -// When invoking this API, it is recommended you use the StreamARN input parameter -// rather than the StreamName input parameter. +// When invoking this API, you must use either the StreamARN or the StreamName +// parameter, or both. It is recommended that you use the StreamARN input parameter +// when you invoke this API. // // If the stream is in the ACTIVE state, you can delete it. After a DeleteStream // request, the specified stream is in the DELETING state until Kinesis Data @@ -720,8 +824,9 @@ func (c *Kinesis) DescribeStreamRequest(input *DescribeStreamInput) (req *reques // and the ListShards API to list the shards in a specified data stream and // obtain information about each shard. // -// When invoking this API, it is recommended you use the StreamARN input parameter -// rather than the StreamName input parameter. +// When invoking this API, you must use either the StreamARN or the StreamName +// parameter, or both. It is recommended that you use the StreamARN input parameter +// when you invoke this API. // // The information returned includes the stream name, Amazon Resource Name (ARN), // creation time, enhanced metric configuration, and shard map. The shard map @@ -891,6 +996,9 @@ func (c *Kinesis) DescribeStreamConsumerRequest(input *DescribeStreamConsumerInp // // This operation has a limit of 20 transactions per second per stream. // +// When making a cross-account call with DescribeStreamConsumer, make sure to +// provide the ARN of the consumer. +// // Returns awserr.Error for service API and SDK errors. Use runtime type assertions // with awserr.Error's Code and Message methods to get detailed information about // the error. @@ -980,8 +1088,9 @@ func (c *Kinesis) DescribeStreamSummaryRequest(input *DescribeStreamSummaryInput // Provides a summarized description of the specified Kinesis data stream without // the shard list. // -// When invoking this API, it is recommended you use the StreamARN input parameter -// rather than the StreamName input parameter. +// When invoking this API, you must use either the StreamARN or the StreamName +// parameter, or both. It is recommended that you use the StreamARN input parameter +// when you invoke this API. // // The information returned includes the stream name, Amazon Resource Name (ARN), // status, record retention period, approximate creation time, monitoring, encryption @@ -1080,8 +1189,9 @@ func (c *Kinesis) DisableEnhancedMonitoringRequest(input *DisableEnhancedMonitor // // Disables enhanced monitoring. // -// When invoking this API, it is recommended you use the StreamARN input parameter -// rather than the StreamName input parameter. +// When invoking this API, you must use either the StreamARN or the StreamName +// parameter, or both. It is recommended that you use the StreamARN input parameter +// when you invoke this API. // // Returns awserr.Error for service API and SDK errors. Use runtime type assertions // with awserr.Error's Code and Message methods to get detailed information about @@ -1178,8 +1288,9 @@ func (c *Kinesis) EnableEnhancedMonitoringRequest(input *EnableEnhancedMonitorin // // Enables enhanced Kinesis data stream monitoring for shard-level metrics. // -// When invoking this API, it is recommended you use the StreamARN input parameter -// rather than the StreamName input parameter. +// When invoking this API, you must use either the StreamARN or the StreamName +// parameter, or both. It is recommended that you use the StreamARN input parameter +// when you invoke this API. // // Returns awserr.Error for service API and SDK errors. Use runtime type assertions // with awserr.Error's Code and Message methods to get detailed information about @@ -1276,8 +1387,9 @@ func (c *Kinesis) GetRecordsRequest(input *GetRecordsInput) (req *request.Reques // // Gets data records from a Kinesis data stream's shard. // -// When invoking this API, it is recommended you use the StreamARN input parameter -// in addition to the ShardIterator parameter. +// When invoking this API, you must use either the StreamARN or the StreamName +// parameter, or both. It is recommended that you use the StreamARN input parameter +// when you invoke this API. // // Specify a shard iterator using the ShardIterator parameter. The shard iterator // specifies the position in the shard from which you want to start reading @@ -1416,6 +1528,102 @@ func (c *Kinesis) GetRecordsWithContext(ctx aws.Context, input *GetRecordsInput, return out, req.Send() } +const opGetResourcePolicy = "GetResourcePolicy" + +// GetResourcePolicyRequest generates a "aws/request.Request" representing the +// client's request for the GetResourcePolicy operation. The "output" return +// value will be populated with the request's response once the request completes +// successfully. +// +// Use "Send" method on the returned Request to send the API call to the service. +// the "output" return value is not valid until after Send returns without error. +// +// See GetResourcePolicy for more information on using the GetResourcePolicy +// API call, and error handling. +// +// This method is useful when you want to inject custom logic or configuration +// into the SDK's request lifecycle. Such as custom headers, or retry logic. +// +// // Example sending a request using the GetResourcePolicyRequest method. +// req, resp := client.GetResourcePolicyRequest(params) +// +// err := req.Send() +// if err == nil { // resp is now filled +// fmt.Println(resp) +// } +// +// See also, https://docs.aws.amazon.com/goto/WebAPI/kinesis-2013-12-02/GetResourcePolicy +func (c *Kinesis) GetResourcePolicyRequest(input *GetResourcePolicyInput) (req *request.Request, output *GetResourcePolicyOutput) { + op := &request.Operation{ + Name: opGetResourcePolicy, + HTTPMethod: "POST", + HTTPPath: "/", + } + + if input == nil { + input = &GetResourcePolicyInput{} + } + + output = &GetResourcePolicyOutput{} + req = c.newRequest(op, input, output) + return +} + +// GetResourcePolicy API operation for Amazon Kinesis. +// +// Returns a policy attached to the specified data stream or consumer. Request +// patterns can be one of the following: +// +// - Data stream pattern: arn:aws.*:kinesis:.*:\d{12}:.*stream/\S+ +// +// - Consumer pattern: ^(arn):aws.*:kinesis:.*:\d{12}:.*stream\/[a-zA-Z0-9_.-]+\/consumer\/[a-zA-Z0-9_.-]+:[0-9]+ +// +// Returns awserr.Error for service API and SDK errors. Use runtime type assertions +// with awserr.Error's Code and Message methods to get detailed information about +// the error. +// +// See the AWS API reference guide for Amazon Kinesis's +// API operation GetResourcePolicy for usage and error information. +// +// Returned Error Types: +// +// - AccessDeniedException +// Specifies that you do not have the permissions required to perform this operation. +// +// - ResourceNotFoundException +// The requested resource could not be found. The stream might not be specified +// correctly. +// +// - LimitExceededException +// The requested resource exceeds the maximum number allowed, or the number +// of concurrent stream requests exceeds the maximum number allowed. +// +// - InvalidArgumentException +// A specified parameter exceeds its restrictions, is not supported, or can't +// be used. For more information, see the returned message. +// +// See also, https://docs.aws.amazon.com/goto/WebAPI/kinesis-2013-12-02/GetResourcePolicy +func (c *Kinesis) GetResourcePolicy(input *GetResourcePolicyInput) (*GetResourcePolicyOutput, error) { + req, out := c.GetResourcePolicyRequest(input) + return out, req.Send() +} + +// GetResourcePolicyWithContext is the same as GetResourcePolicy with the addition of +// the ability to pass a context and additional request options. +// +// See GetResourcePolicy for details on how to use this API operation. +// +// The context must be non-nil and will be used for request cancellation. If +// the context is nil a panic will occur. In the future the SDK may create +// sub-contexts for http.Requests. See https://golang.org/pkg/context/ +// for more information on using Contexts. +func (c *Kinesis) GetResourcePolicyWithContext(ctx aws.Context, input *GetResourcePolicyInput, opts ...request.Option) (*GetResourcePolicyOutput, error) { + req, out := c.GetResourcePolicyRequest(input) + req.SetContext(ctx) + req.ApplyOptions(opts...) + return out, req.Send() +} + const opGetShardIterator = "GetShardIterator" // GetShardIteratorRequest generates a "aws/request.Request" representing the @@ -1462,8 +1670,9 @@ func (c *Kinesis) GetShardIteratorRequest(input *GetShardIteratorInput) (req *re // Gets an Amazon Kinesis shard iterator. A shard iterator expires 5 minutes // after it is returned to the requester. // -// When invoking this API, it is recommended you use the StreamARN input parameter -// rather than the StreamName input parameter. +// When invoking this API, you must use either the StreamARN or the StreamName +// parameter, or both. It is recommended that you use the StreamARN input parameter +// when you invoke this API. // // A shard iterator specifies the shard position from which to start reading // data records sequentially. The position is specified using the sequence number @@ -1600,8 +1809,9 @@ func (c *Kinesis) IncreaseStreamRetentionPeriodRequest(input *IncreaseStreamRete // of time data records are accessible after they are added to the stream. The // maximum value of a stream's retention period is 8760 hours (365 days). // -// When invoking this API, it is recommended you use the StreamARN input parameter -// rather than the StreamName input parameter. +// When invoking this API, you must use either the StreamARN or the StreamName +// parameter, or both. It is recommended that you use the StreamARN input parameter +// when you invoke this API. // // If you choose a longer stream retention period, this operation increases // the time period during which records that have not yet expired are accessible. @@ -1707,8 +1917,9 @@ func (c *Kinesis) ListShardsRequest(input *ListShardsInput) (req *request.Reques // Lists the shards in a stream and provides information about each shard. This // operation has a limit of 1000 transactions per second per data stream. // -// When invoking this API, it is recommended you use the StreamARN input parameter -// rather than the StreamName input parameter. +// When invoking this API, you must use either the StreamARN or the StreamName +// parameter, or both. It is recommended that you use the StreamARN input parameter +// when you invoke this API. // // This action does not list expired shards. For information about expired shards, // see Data Routing, Data Persistence, and Shard State after a Reshard (https://docs.aws.amazon.com/streams/latest/dev/kinesis-using-sdk-java-after-resharding.html#kinesis-using-sdk-java-resharding-data-routing). @@ -2132,8 +2343,9 @@ func (c *Kinesis) ListTagsForStreamRequest(input *ListTagsForStreamInput) (req * // Lists the tags for the specified Kinesis data stream. This operation has // a limit of five transactions per second per account. // -// When invoking this API, it is recommended you use the StreamARN input parameter -// rather than the StreamName input parameter. +// When invoking this API, you must use either the StreamARN or the StreamName +// parameter, or both. It is recommended that you use the StreamARN input parameter +// when you invoke this API. // // Returns awserr.Error for service API and SDK errors. Use runtime type assertions // with awserr.Error's Code and Message methods to get detailed information about @@ -2236,8 +2448,9 @@ func (c *Kinesis) MergeShardsRequest(input *MergeShardsInput) (req *request.Requ // the single child shard receives data for all hash key values covered by the // two parent shards. // -// When invoking this API, it is recommended you use the StreamARN input parameter -// rather than the StreamName input parameter. +// When invoking this API, you must use either the StreamARN or the StreamName +// parameter, or both. It is recommended that you use the StreamARN input parameter +// when you invoke this API. // // MergeShards is called when there is a need to reduce the overall capacity // of a stream because of excess capacity that is not being used. You must specify @@ -2369,8 +2582,9 @@ func (c *Kinesis) PutRecordRequest(input *PutRecordInput) (req *request.Request, // one record at a time. Each shard can support writes up to 1,000 records per // second, up to a maximum data write total of 1 MiB per second. // -// When invoking this API, it is recommended you use the StreamARN input parameter -// rather than the StreamName input parameter. +// When invoking this API, you must use either the StreamARN or the StreamName +// parameter, or both. It is recommended that you use the StreamARN input parameter +// when you invoke this API. // // You must specify the name of the stream that captures, stores, and transports // the data; a partition key; and the data blob itself. @@ -2533,8 +2747,9 @@ func (c *Kinesis) PutRecordsRequest(input *PutRecordsInput) (req *request.Reques // (also referred to as a PutRecords request). Use this operation to send data // into the stream for data ingestion and processing. // -// When invoking this API, it is recommended you use the StreamARN input parameter -// rather than the StreamName input parameter. +// When invoking this API, you must use either the StreamARN or the StreamName +// parameter, or both. It is recommended that you use the StreamARN input parameter +// when you invoke this API. // // Each PutRecords request can support up to 500 records. Each record in the // request can be as large as 1 MiB, up to a limit of 5 MiB for the entire request, @@ -2674,6 +2889,118 @@ func (c *Kinesis) PutRecordsWithContext(ctx aws.Context, input *PutRecordsInput, return out, req.Send() } +const opPutResourcePolicy = "PutResourcePolicy" + +// PutResourcePolicyRequest generates a "aws/request.Request" representing the +// client's request for the PutResourcePolicy operation. The "output" return +// value will be populated with the request's response once the request completes +// successfully. +// +// Use "Send" method on the returned Request to send the API call to the service. +// the "output" return value is not valid until after Send returns without error. +// +// See PutResourcePolicy for more information on using the PutResourcePolicy +// API call, and error handling. +// +// This method is useful when you want to inject custom logic or configuration +// into the SDK's request lifecycle. Such as custom headers, or retry logic. +// +// // Example sending a request using the PutResourcePolicyRequest method. +// req, resp := client.PutResourcePolicyRequest(params) +// +// err := req.Send() +// if err == nil { // resp is now filled +// fmt.Println(resp) +// } +// +// See also, https://docs.aws.amazon.com/goto/WebAPI/kinesis-2013-12-02/PutResourcePolicy +func (c *Kinesis) PutResourcePolicyRequest(input *PutResourcePolicyInput) (req *request.Request, output *PutResourcePolicyOutput) { + op := &request.Operation{ + Name: opPutResourcePolicy, + HTTPMethod: "POST", + HTTPPath: "/", + } + + if input == nil { + input = &PutResourcePolicyInput{} + } + + output = &PutResourcePolicyOutput{} + req = c.newRequest(op, input, output) + req.Handlers.Unmarshal.Swap(jsonrpc.UnmarshalHandler.Name, protocol.UnmarshalDiscardBodyHandler) + return +} + +// PutResourcePolicy API operation for Amazon Kinesis. +// +// Attaches a resource-based policy to a data stream or registered consumer. +// If you are using an identity other than the root user of the Amazon Web Services +// account that owns the resource, the calling identity must have the PutResourcePolicy +// permissions on the specified Kinesis Data Streams resource and belong to +// the owner's account in order to use this operation. If you don't have PutResourcePolicy +// permissions, Amazon Kinesis Data Streams returns a 403 Access Denied error. +// If you receive a ResourceNotFoundException, check to see if you passed a +// valid stream or consumer resource. +// +// Request patterns can be one of the following: +// +// - Data stream pattern: arn:aws.*:kinesis:.*:\d{12}:.*stream/\S+ +// +// - Consumer pattern: ^(arn):aws.*:kinesis:.*:\d{12}:.*stream\/[a-zA-Z0-9_.-]+\/consumer\/[a-zA-Z0-9_.-]+:[0-9]+ +// +// For more information, see Controlling Access to Amazon Kinesis Data Streams +// Resources Using IAM (https://docs.aws.amazon.com/streams/latest/dev/controlling-access.html). +// +// Returns awserr.Error for service API and SDK errors. Use runtime type assertions +// with awserr.Error's Code and Message methods to get detailed information about +// the error. +// +// See the AWS API reference guide for Amazon Kinesis's +// API operation PutResourcePolicy for usage and error information. +// +// Returned Error Types: +// +// - AccessDeniedException +// Specifies that you do not have the permissions required to perform this operation. +// +// - ResourceNotFoundException +// The requested resource could not be found. The stream might not be specified +// correctly. +// +// - LimitExceededException +// The requested resource exceeds the maximum number allowed, or the number +// of concurrent stream requests exceeds the maximum number allowed. +// +// - InvalidArgumentException +// A specified parameter exceeds its restrictions, is not supported, or can't +// be used. For more information, see the returned message. +// +// - ResourceInUseException +// The resource is not available for this operation. For successful operation, +// the resource must be in the ACTIVE state. +// +// See also, https://docs.aws.amazon.com/goto/WebAPI/kinesis-2013-12-02/PutResourcePolicy +func (c *Kinesis) PutResourcePolicy(input *PutResourcePolicyInput) (*PutResourcePolicyOutput, error) { + req, out := c.PutResourcePolicyRequest(input) + return out, req.Send() +} + +// PutResourcePolicyWithContext is the same as PutResourcePolicy with the addition of +// the ability to pass a context and additional request options. +// +// See PutResourcePolicy for details on how to use this API operation. +// +// The context must be non-nil and will be used for request cancellation. If +// the context is nil a panic will occur. In the future the SDK may create +// sub-contexts for http.Requests. See https://golang.org/pkg/context/ +// for more information on using Contexts. +func (c *Kinesis) PutResourcePolicyWithContext(ctx aws.Context, input *PutResourcePolicyInput, opts ...request.Option) (*PutResourcePolicyOutput, error) { + req, out := c.PutResourcePolicyRequest(input) + req.SetContext(ctx) + req.ApplyOptions(opts...) + return out, req.Send() +} + const opRegisterStreamConsumer = "RegisterStreamConsumer" // RegisterStreamConsumerRequest generates a "aws/request.Request" representing the @@ -2829,8 +3156,9 @@ func (c *Kinesis) RemoveTagsFromStreamRequest(input *RemoveTagsFromStreamInput) // Removes tags from the specified Kinesis data stream. Removed tags are deleted // and cannot be recovered after this operation successfully completes. // -// When invoking this API, it is recommended you use the StreamARN input parameter -// rather than the StreamName input parameter. +// When invoking this API, you must use either the StreamARN or the StreamName +// parameter, or both. It is recommended that you use the StreamARN input parameter +// when you invoke this API. // // If you specify a tag that does not exist, it is ignored. // @@ -2937,8 +3265,9 @@ func (c *Kinesis) SplitShardRequest(input *SplitShardInput) (req *request.Reques // API is only supported for the data streams with the provisioned capacity // mode. // -// When invoking this API, it is recommended you use the StreamARN input parameter -// rather than the StreamName input parameter. +// When invoking this API, you must use either the StreamARN or the StreamName +// parameter, or both. It is recommended that you use the StreamARN input parameter +// when you invoke this API. // // You can also use SplitShard when a shard appears to be approaching its maximum // utilization; for example, the producers sending data into the specific shard @@ -3083,6 +3412,10 @@ func (c *Kinesis) StartStreamEncryptionRequest(input *StartStreamEncryptionInput // Enables or updates server-side encryption using an Amazon Web Services KMS // key for a specified stream. // +// When invoking this API, you must use either the StreamARN or the StreamName +// parameter, or both. It is recommended that you use the StreamARN input parameter +// when you invoke this API. +// // Starting encryption is an asynchronous operation. Upon receiving the request, // Kinesis Data Streams returns immediately and sets the status of the stream // to UPDATING. After the update is complete, Kinesis Data Streams sets the @@ -3100,9 +3433,6 @@ func (c *Kinesis) StartStreamEncryptionRequest(input *StartStreamEncryptionInput // encryption, you can verify that encryption is applied by inspecting the API // response from PutRecord or PutRecords. // -// When invoking this API, it is recommended you use the StreamARN input parameter -// rather than the StreamName input parameter. -// // Returns awserr.Error for service API and SDK errors. Use runtime type assertions // with awserr.Error's Code and Message methods to get detailed information about // the error. @@ -3225,8 +3555,9 @@ func (c *Kinesis) StopStreamEncryptionRequest(input *StopStreamEncryptionInput) // // Disables server-side encryption for a specified stream. // -// When invoking this API, it is recommended you use the StreamARN input parameter -// rather than the StreamName input parameter. +// When invoking this API, you must use either the StreamARN or the StreamName +// parameter, or both. It is recommended that you use the StreamARN input parameter +// when you invoke this API. // // Stopping encryption is an asynchronous operation. Upon receiving the request, // Kinesis Data Streams returns immediately and sets the status of the stream @@ -3678,8 +4009,9 @@ func (c *Kinesis) UpdateShardCountRequest(input *UpdateShardCountInput) (req *re // shards. This API is only supported for the data streams with the provisioned // capacity mode. // -// When invoking this API, it is recommended you use the StreamARN input parameter -// rather than the StreamName input parameter. +// When invoking this API, you must use either the StreamARN or the StreamName +// parameter, or both. It is recommended that you use the StreamARN input parameter +// when you invoke this API. // // Updating the shard count is an asynchronous operation. Upon receiving the // request, Kinesis Data Streams returns immediately and sets the status of @@ -3714,6 +4046,8 @@ func (c *Kinesis) UpdateShardCountRequest(input *UpdateShardCountInput) (req *re // // - Scale up to more than the shard limit for your account // +// - Make over 10 TPS. TPS over 10 will trigger the LimitExceededException +// // For the default limits for an Amazon Web Services account, see Streams Limits // (https://docs.aws.amazon.com/kinesis/latest/dev/service-sizes-and-limits.html) // in the Amazon Kinesis Data Streams Developer Guide. To request an increase @@ -4444,6 +4778,77 @@ func (s DecreaseStreamRetentionPeriodOutput) GoString() string { return s.String() } +type DeleteResourcePolicyInput struct { + _ struct{} `type:"structure"` + + // The Amazon Resource Name (ARN) of the data stream or consumer. + // + // ResourceARN is a required field + ResourceARN *string `min:"1" type:"string" required:"true"` +} + +// String returns the string representation. +// +// API parameter values that are decorated as "sensitive" in the API will not +// be included in the string output. The member name will be present, but the +// value will be replaced with "sensitive". +func (s DeleteResourcePolicyInput) String() string { + return awsutil.Prettify(s) +} + +// GoString returns the string representation. +// +// API parameter values that are decorated as "sensitive" in the API will not +// be included in the string output. The member name will be present, but the +// value will be replaced with "sensitive". +func (s DeleteResourcePolicyInput) GoString() string { + return s.String() +} + +// Validate inspects the fields of the type to determine if they are valid. +func (s *DeleteResourcePolicyInput) Validate() error { + invalidParams := request.ErrInvalidParams{Context: "DeleteResourcePolicyInput"} + if s.ResourceARN == nil { + invalidParams.Add(request.NewErrParamRequired("ResourceARN")) + } + if s.ResourceARN != nil && len(*s.ResourceARN) < 1 { + invalidParams.Add(request.NewErrParamMinLen("ResourceARN", 1)) + } + + if invalidParams.Len() > 0 { + return invalidParams + } + return nil +} + +// SetResourceARN sets the ResourceARN field's value. +func (s *DeleteResourcePolicyInput) SetResourceARN(v string) *DeleteResourcePolicyInput { + s.ResourceARN = &v + return s +} + +type DeleteResourcePolicyOutput struct { + _ struct{} `type:"structure"` +} + +// String returns the string representation. +// +// API parameter values that are decorated as "sensitive" in the API will not +// be included in the string output. The member name will be present, but the +// value will be replaced with "sensitive". +func (s DeleteResourcePolicyOutput) String() string { + return awsutil.Prettify(s) +} + +// GoString returns the string representation. +// +// API parameter values that are decorated as "sensitive" in the API will not +// be included in the string output. The member name will be present, but the +// value will be replaced with "sensitive". +func (s DeleteResourcePolicyOutput) GoString() string { + return s.String() +} + // Represents the input for DeleteStream. type DeleteStreamInput struct { _ struct{} `type:"structure"` @@ -5618,6 +6023,88 @@ func (s *GetRecordsOutput) SetRecords(v []*Record) *GetRecordsOutput { return s } +type GetResourcePolicyInput struct { + _ struct{} `type:"structure"` + + // The Amazon Resource Name (ARN) of the data stream or consumer. + // + // ResourceARN is a required field + ResourceARN *string `min:"1" type:"string" required:"true"` +} + +// String returns the string representation. +// +// API parameter values that are decorated as "sensitive" in the API will not +// be included in the string output. The member name will be present, but the +// value will be replaced with "sensitive". +func (s GetResourcePolicyInput) String() string { + return awsutil.Prettify(s) +} + +// GoString returns the string representation. +// +// API parameter values that are decorated as "sensitive" in the API will not +// be included in the string output. The member name will be present, but the +// value will be replaced with "sensitive". +func (s GetResourcePolicyInput) GoString() string { + return s.String() +} + +// Validate inspects the fields of the type to determine if they are valid. +func (s *GetResourcePolicyInput) Validate() error { + invalidParams := request.ErrInvalidParams{Context: "GetResourcePolicyInput"} + if s.ResourceARN == nil { + invalidParams.Add(request.NewErrParamRequired("ResourceARN")) + } + if s.ResourceARN != nil && len(*s.ResourceARN) < 1 { + invalidParams.Add(request.NewErrParamMinLen("ResourceARN", 1)) + } + + if invalidParams.Len() > 0 { + return invalidParams + } + return nil +} + +// SetResourceARN sets the ResourceARN field's value. +func (s *GetResourcePolicyInput) SetResourceARN(v string) *GetResourcePolicyInput { + s.ResourceARN = &v + return s +} + +type GetResourcePolicyOutput struct { + _ struct{} `type:"structure"` + + // Details of the resource policy. This is formatted as a JSON string. + // + // Policy is a required field + Policy *string `type:"string" required:"true"` +} + +// String returns the string representation. +// +// API parameter values that are decorated as "sensitive" in the API will not +// be included in the string output. The member name will be present, but the +// value will be replaced with "sensitive". +func (s GetResourcePolicyOutput) String() string { + return awsutil.Prettify(s) +} + +// GoString returns the string representation. +// +// API parameter values that are decorated as "sensitive" in the API will not +// be included in the string output. The member name will be present, but the +// value will be replaced with "sensitive". +func (s GetResourcePolicyOutput) GoString() string { + return s.String() +} + +// SetPolicy sets the Policy field's value. +func (s *GetResourcePolicyOutput) SetPolicy(v string) *GetResourcePolicyOutput { + s.Policy = &v + return s +} + // Represents the input for GetShardIterator. type GetShardIteratorInput struct { _ struct{} `type:"structure"` @@ -8036,6 +8523,92 @@ func (s *PutRecordsResultEntry) SetShardId(v string) *PutRecordsResultEntry { return s } +type PutResourcePolicyInput struct { + _ struct{} `type:"structure"` + + // Details of the resource policy. It must include the identity of the principal + // and the actions allowed on this resource. This is formatted as a JSON string. + // + // Policy is a required field + Policy *string `type:"string" required:"true"` + + // The Amazon Resource Name (ARN) of the data stream or consumer. + // + // ResourceARN is a required field + ResourceARN *string `min:"1" type:"string" required:"true"` +} + +// String returns the string representation. +// +// API parameter values that are decorated as "sensitive" in the API will not +// be included in the string output. The member name will be present, but the +// value will be replaced with "sensitive". +func (s PutResourcePolicyInput) String() string { + return awsutil.Prettify(s) +} + +// GoString returns the string representation. +// +// API parameter values that are decorated as "sensitive" in the API will not +// be included in the string output. The member name will be present, but the +// value will be replaced with "sensitive". +func (s PutResourcePolicyInput) GoString() string { + return s.String() +} + +// Validate inspects the fields of the type to determine if they are valid. +func (s *PutResourcePolicyInput) Validate() error { + invalidParams := request.ErrInvalidParams{Context: "PutResourcePolicyInput"} + if s.Policy == nil { + invalidParams.Add(request.NewErrParamRequired("Policy")) + } + if s.ResourceARN == nil { + invalidParams.Add(request.NewErrParamRequired("ResourceARN")) + } + if s.ResourceARN != nil && len(*s.ResourceARN) < 1 { + invalidParams.Add(request.NewErrParamMinLen("ResourceARN", 1)) + } + + if invalidParams.Len() > 0 { + return invalidParams + } + return nil +} + +// SetPolicy sets the Policy field's value. +func (s *PutResourcePolicyInput) SetPolicy(v string) *PutResourcePolicyInput { + s.Policy = &v + return s +} + +// SetResourceARN sets the ResourceARN field's value. +func (s *PutResourcePolicyInput) SetResourceARN(v string) *PutResourcePolicyInput { + s.ResourceARN = &v + return s +} + +type PutResourcePolicyOutput struct { + _ struct{} `type:"structure"` +} + +// String returns the string representation. +// +// API parameter values that are decorated as "sensitive" in the API will not +// be included in the string output. The member name will be present, but the +// value will be replaced with "sensitive". +func (s PutResourcePolicyOutput) String() string { + return awsutil.Prettify(s) +} + +// GoString returns the string representation. +// +// API parameter values that are decorated as "sensitive" in the API will not +// be included in the string output. The member name will be present, but the +// value will be replaced with "sensitive". +func (s PutResourcePolicyOutput) GoString() string { + return s.String() +} + // The unit of data of the Kinesis data stream, which is composed of a sequence // number, a partition key, and a data blob. type Record struct { diff --git a/service/kinesis/kinesisiface/interface.go b/service/kinesis/kinesisiface/interface.go index 36ac1636906..def7ea7a58a 100644 --- a/service/kinesis/kinesisiface/interface.go +++ b/service/kinesis/kinesisiface/interface.go @@ -72,6 +72,10 @@ type KinesisAPI interface { DecreaseStreamRetentionPeriodWithContext(aws.Context, *kinesis.DecreaseStreamRetentionPeriodInput, ...request.Option) (*kinesis.DecreaseStreamRetentionPeriodOutput, error) DecreaseStreamRetentionPeriodRequest(*kinesis.DecreaseStreamRetentionPeriodInput) (*request.Request, *kinesis.DecreaseStreamRetentionPeriodOutput) + DeleteResourcePolicy(*kinesis.DeleteResourcePolicyInput) (*kinesis.DeleteResourcePolicyOutput, error) + DeleteResourcePolicyWithContext(aws.Context, *kinesis.DeleteResourcePolicyInput, ...request.Option) (*kinesis.DeleteResourcePolicyOutput, error) + DeleteResourcePolicyRequest(*kinesis.DeleteResourcePolicyInput) (*request.Request, *kinesis.DeleteResourcePolicyOutput) + DeleteStream(*kinesis.DeleteStreamInput) (*kinesis.DeleteStreamOutput, error) DeleteStreamWithContext(aws.Context, *kinesis.DeleteStreamInput, ...request.Option) (*kinesis.DeleteStreamOutput, error) DeleteStreamRequest(*kinesis.DeleteStreamInput) (*request.Request, *kinesis.DeleteStreamOutput) @@ -111,6 +115,10 @@ type KinesisAPI interface { GetRecordsWithContext(aws.Context, *kinesis.GetRecordsInput, ...request.Option) (*kinesis.GetRecordsOutput, error) GetRecordsRequest(*kinesis.GetRecordsInput) (*request.Request, *kinesis.GetRecordsOutput) + GetResourcePolicy(*kinesis.GetResourcePolicyInput) (*kinesis.GetResourcePolicyOutput, error) + GetResourcePolicyWithContext(aws.Context, *kinesis.GetResourcePolicyInput, ...request.Option) (*kinesis.GetResourcePolicyOutput, error) + GetResourcePolicyRequest(*kinesis.GetResourcePolicyInput) (*request.Request, *kinesis.GetResourcePolicyOutput) + GetShardIterator(*kinesis.GetShardIteratorInput) (*kinesis.GetShardIteratorOutput, error) GetShardIteratorWithContext(aws.Context, *kinesis.GetShardIteratorInput, ...request.Option) (*kinesis.GetShardIteratorOutput, error) GetShardIteratorRequest(*kinesis.GetShardIteratorInput) (*request.Request, *kinesis.GetShardIteratorOutput) @@ -153,6 +161,10 @@ type KinesisAPI interface { PutRecordsWithContext(aws.Context, *kinesis.PutRecordsInput, ...request.Option) (*kinesis.PutRecordsOutput, error) PutRecordsRequest(*kinesis.PutRecordsInput) (*request.Request, *kinesis.PutRecordsOutput) + PutResourcePolicy(*kinesis.PutResourcePolicyInput) (*kinesis.PutResourcePolicyOutput, error) + PutResourcePolicyWithContext(aws.Context, *kinesis.PutResourcePolicyInput, ...request.Option) (*kinesis.PutResourcePolicyOutput, error) + PutResourcePolicyRequest(*kinesis.PutResourcePolicyInput) (*request.Request, *kinesis.PutResourcePolicyOutput) + RegisterStreamConsumer(*kinesis.RegisterStreamConsumerInput) (*kinesis.RegisterStreamConsumerOutput, error) RegisterStreamConsumerWithContext(aws.Context, *kinesis.RegisterStreamConsumerInput, ...request.Option) (*kinesis.RegisterStreamConsumerOutput, error) RegisterStreamConsumerRequest(*kinesis.RegisterStreamConsumerInput) (*request.Request, *kinesis.RegisterStreamConsumerOutput) diff --git a/service/s3control/api.go b/service/s3control/api.go index f9618587440..bb3ef243e92 100644 --- a/service/s3control/api.go +++ b/service/s3control/api.go @@ -15278,21 +15278,38 @@ func (s *JobManifestGenerator) SetS3JobManifestGenerator(v *S3JobManifestGenerat type JobManifestGeneratorFilter struct { _ struct{} `type:"structure"` - // If provided, the generated manifest should include only source bucket objects - // that were created after this time. + // If provided, the generated manifest includes only source bucket objects that + // were created after this time. CreatedAfter *time.Time `type:"timestamp"` - // If provided, the generated manifest should include only source bucket objects - // that were created before this time. + // If provided, the generated manifest includes only source bucket objects that + // were created before this time. CreatedBefore *time.Time `type:"timestamp"` // Include objects in the generated manifest only if they are eligible for replication // according to the Replication configuration on the source bucket. EligibleForReplication *bool `type:"boolean"` - // If provided, the generated manifest should include only source bucket objects - // that have one of the specified Replication statuses. + // If provided, the generated manifest includes only source bucket objects whose + // object keys match the string constraints specified for MatchAnyPrefix, MatchAnySuffix, + // and MatchAnySubstring. + KeyNameConstraint *KeyNameConstraint `type:"structure"` + + // If provided, the generated manifest includes only source bucket objects that + // are stored with the specified storage class. + MatchAnyStorageClass []*string `type:"list" enum:"S3StorageClass"` + + // If provided, the generated manifest includes only source bucket objects that + // have one of the specified Replication statuses. ObjectReplicationStatuses []*string `type:"list" enum:"ReplicationStatus"` + + // If provided, the generated manifest includes only source bucket objects whose + // file size is greater than the specified number of bytes. + ObjectSizeGreaterThanBytes *int64 `type:"long"` + + // If provided, the generated manifest includes only source bucket objects whose + // file size is less than the specified number of bytes. + ObjectSizeLessThanBytes *int64 `type:"long"` } // String returns the string representation. @@ -15331,12 +15348,36 @@ func (s *JobManifestGeneratorFilter) SetEligibleForReplication(v bool) *JobManif return s } +// SetKeyNameConstraint sets the KeyNameConstraint field's value. +func (s *JobManifestGeneratorFilter) SetKeyNameConstraint(v *KeyNameConstraint) *JobManifestGeneratorFilter { + s.KeyNameConstraint = v + return s +} + +// SetMatchAnyStorageClass sets the MatchAnyStorageClass field's value. +func (s *JobManifestGeneratorFilter) SetMatchAnyStorageClass(v []*string) *JobManifestGeneratorFilter { + s.MatchAnyStorageClass = v + return s +} + // SetObjectReplicationStatuses sets the ObjectReplicationStatuses field's value. func (s *JobManifestGeneratorFilter) SetObjectReplicationStatuses(v []*string) *JobManifestGeneratorFilter { s.ObjectReplicationStatuses = v return s } +// SetObjectSizeGreaterThanBytes sets the ObjectSizeGreaterThanBytes field's value. +func (s *JobManifestGeneratorFilter) SetObjectSizeGreaterThanBytes(v int64) *JobManifestGeneratorFilter { + s.ObjectSizeGreaterThanBytes = &v + return s +} + +// SetObjectSizeLessThanBytes sets the ObjectSizeLessThanBytes field's value. +func (s *JobManifestGeneratorFilter) SetObjectSizeLessThanBytes(v int64) *JobManifestGeneratorFilter { + s.ObjectSizeLessThanBytes = &v + return s +} + // Contains the information required to locate a manifest object. type JobManifestLocation struct { _ struct{} `type:"structure"` @@ -15823,6 +15864,61 @@ func (s *JobTimers) SetElapsedTimeInActiveSeconds(v int64) *JobTimers { return s } +// If provided, the generated manifest includes only source bucket objects whose +// object keys match the string constraints specified for MatchAnyPrefix, MatchAnySuffix, +// and MatchAnySubstring. +type KeyNameConstraint struct { + _ struct{} `type:"structure"` + + // If provided, the generated manifest includes objects where the specified + // string appears at the start of the object key string. + MatchAnyPrefix []*string `type:"list"` + + // If provided, the generated manifest includes objects where the specified + // string appears anywhere within the object key string. + MatchAnySubstring []*string `type:"list"` + + // If provided, the generated manifest includes objects where the specified + // string appears at the end of the object key string. + MatchAnySuffix []*string `type:"list"` +} + +// String returns the string representation. +// +// API parameter values that are decorated as "sensitive" in the API will not +// be included in the string output. The member name will be present, but the +// value will be replaced with "sensitive". +func (s KeyNameConstraint) String() string { + return awsutil.Prettify(s) +} + +// GoString returns the string representation. +// +// API parameter values that are decorated as "sensitive" in the API will not +// be included in the string output. The member name will be present, but the +// value will be replaced with "sensitive". +func (s KeyNameConstraint) GoString() string { + return s.String() +} + +// SetMatchAnyPrefix sets the MatchAnyPrefix field's value. +func (s *KeyNameConstraint) SetMatchAnyPrefix(v []*string) *KeyNameConstraint { + s.MatchAnyPrefix = v + return s +} + +// SetMatchAnySubstring sets the MatchAnySubstring field's value. +func (s *KeyNameConstraint) SetMatchAnySubstring(v []*string) *KeyNameConstraint { + s.MatchAnySubstring = v + return s +} + +// SetMatchAnySuffix sets the MatchAnySuffix field's value. +func (s *KeyNameConstraint) SetMatchAnySuffix(v []*string) *KeyNameConstraint { + s.MatchAnySuffix = v + return s +} + // Contains the configuration parameters for a Lambda Invoke operation. type LambdaInvokeOperation struct { _ struct{} `type:"structure"` diff --git a/service/sagemaker/api.go b/service/sagemaker/api.go index a97a41c7831..6106cead3ac 100644 --- a/service/sagemaker/api.go +++ b/service/sagemaker/api.go @@ -55484,8 +55484,8 @@ type DescribeDomainOutput struct { // apps and the RStudioServerPro app. SecurityGroupIdForDomainBoundary *string `type:"string"` - // The ARN of the associated Amazon Web Services Single Sign-On application - // for this Domain. + // The ARN of the application managed by SageMaker in IAM Identity Center. This + // value is only returned for domains created after September 19, 2023. SingleSignOnApplicationArn *string `type:"string"` // The IAM Identity Center managed application instance ID. @@ -89105,6 +89105,59 @@ func (s *Model) SetVpcConfig(v *VpcConfig) *Model { return s } +// The access configuration file for the ML model. You can explicitly accept +// the model end-user license agreement (EULA) within the ModelAccessConfig. +// For more information, see End-user license agreements (https://docs.aws.amazon.com/sagemaker/latest/dg/jumpstart-foundation-models-choose.html#jumpstart-foundation-models-choose-eula). +type ModelAccessConfig struct { + _ struct{} `type:"structure"` + + // Specifies agreement to the model end-user license agreement (EULA). The AcceptEula + // value must be explicitly defined as True in order to accept the EULA that + // this model requires. You are responsible for reviewing and complying with + // any applicable license terms and making sure they are acceptable for your + // use case before downloading or using a model. + // + // AcceptEula is a required field + AcceptEula *bool `type:"boolean" required:"true"` +} + +// String returns the string representation. +// +// API parameter values that are decorated as "sensitive" in the API will not +// be included in the string output. The member name will be present, but the +// value will be replaced with "sensitive". +func (s ModelAccessConfig) String() string { + return awsutil.Prettify(s) +} + +// GoString returns the string representation. +// +// API parameter values that are decorated as "sensitive" in the API will not +// be included in the string output. The member name will be present, but the +// value will be replaced with "sensitive". +func (s ModelAccessConfig) GoString() string { + return s.String() +} + +// Validate inspects the fields of the type to determine if they are valid. +func (s *ModelAccessConfig) Validate() error { + invalidParams := request.ErrInvalidParams{Context: "ModelAccessConfig"} + if s.AcceptEula == nil { + invalidParams.Add(request.NewErrParamRequired("AcceptEula")) + } + + if invalidParams.Len() > 0 { + return invalidParams + } + return nil +} + +// SetAcceptEula sets the AcceptEula field's value. +func (s *ModelAccessConfig) SetAcceptEula(v bool) *ModelAccessConfig { + s.AcceptEula = &v + return s +} + // Provides information about the location that is configured for storing model // artifacts. // @@ -104114,6 +104167,13 @@ type S3ModelDataSource struct { // CompressionType is a required field CompressionType *string `type:"string" required:"true" enum:"ModelCompressionType"` + // Specifies the access configuration file for the ML model. You can explicitly + // accept the model end-user license agreement (EULA) within the ModelAccessConfig. + // You are responsible for reviewing and complying with any applicable license + // terms and making sure they are acceptable for your use case before downloading + // or using a model. + ModelAccessConfig *ModelAccessConfig `type:"structure"` + // Specifies the type of ML model data to deploy. // // If you choose S3Prefix, S3Uri identifies a key name prefix. SageMaker uses @@ -104163,6 +104223,11 @@ func (s *S3ModelDataSource) Validate() error { if s.S3Uri == nil { invalidParams.Add(request.NewErrParamRequired("S3Uri")) } + if s.ModelAccessConfig != nil { + if err := s.ModelAccessConfig.Validate(); err != nil { + invalidParams.AddNested("ModelAccessConfig", err.(request.ErrInvalidParams)) + } + } if invalidParams.Len() > 0 { return invalidParams @@ -104176,6 +104241,12 @@ func (s *S3ModelDataSource) SetCompressionType(v string) *S3ModelDataSource { return s } +// SetModelAccessConfig sets the ModelAccessConfig field's value. +func (s *S3ModelDataSource) SetModelAccessConfig(v *ModelAccessConfig) *S3ModelDataSource { + s.ModelAccessConfig = v + return s +} + // SetS3DataType sets the S3DataType field's value. func (s *S3ModelDataSource) SetS3DataType(v string) *S3ModelDataSource { s.S3DataType = &v @@ -107956,7 +108027,8 @@ func (s StopTransformJobOutput) GoString() string { type StoppingCondition struct { _ struct{} `type:"structure"` - // The maximum pending time in seconds. + // The maximum length of time, in seconds, that a training or compilation job + // can be pending before it is stopped. MaxPendingTimeInSeconds *int64 `min:"7200" type:"integer"` // The maximum length of time, in seconds, that a training or compilation job