Skip to content

Commit ec76b2f

Browse files
author
AWS
committed
AWS DataSync Update: AWS DataSync now supports TLS encryption in transit, file system policies and access points for EFS locations.
1 parent 20779e9 commit ec76b2f

File tree

3 files changed

+66
-19
lines changed

3 files changed

+66
-19
lines changed

‎.changes/next-release/feature-AWSDataSync-2e7b9e9.json

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
{
2+
"type": "feature",
3+
"category": "AWS DataSync",
4+
"contributor": "",
5+
"description": "AWS DataSync now supports TLS encryption in transit, file system policies and access points for EFS locations."
6+
}

‎services/datasync/src/main/resources/codegen-resources/paginators-1.json

Lines changed: 10 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -3,27 +3,32 @@
33
"ListAgents": {
44
"input_token": "NextToken",
55
"output_token": "NextToken",
6-
"limit_key": "MaxResults"
6+
"limit_key": "MaxResults",
7+
"result_key": "Agents"
78
},
89
"ListLocations": {
910
"input_token": "NextToken",
1011
"output_token": "NextToken",
11-
"limit_key": "MaxResults"
12+
"limit_key": "MaxResults",
13+
"result_key": "Locations"
1214
},
1315
"ListTagsForResource": {
1416
"input_token": "NextToken",
1517
"output_token": "NextToken",
16-
"limit_key": "MaxResults"
18+
"limit_key": "MaxResults",
19+
"result_key": "Tags"
1720
},
1821
"ListTaskExecutions": {
1922
"input_token": "NextToken",
2023
"output_token": "NextToken",
21-
"limit_key": "MaxResults"
24+
"limit_key": "MaxResults",
25+
"result_key": "TaskExecutions"
2226
},
2327
"ListTasks": {
2428
"input_token": "NextToken",
2529
"output_token": "NextToken",
26-
"limit_key": "MaxResults"
30+
"limit_key": "MaxResults",
31+
"result_key": "Tasks"
2732
}
2833
}
2934
}

‎services/datasync/src/main/resources/codegen-resources/service-2.json

Lines changed: 50 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -54,7 +54,7 @@
5454
{"shape":"InvalidRequestException"},
5555
{"shape":"InternalException"}
5656
],
57-
"documentation":"<p>Creates an endpoint for an Amazon EFS file system.</p>"
57+
"documentation":"<p>Creates an endpoint for an Amazon EFS file system that DataSync can access for a transfer. For more information, see <a href=\"https://docs.aws.amazon.com/datasync/latest/userguide/create-efs-location.html\">Creating a location for Amazon EFS</a>.</p>"
5858
},
5959
"CreateLocationFsxLustre":{
6060
"name":"CreateLocationFsxLustre",
@@ -250,7 +250,7 @@
250250
{"shape":"InvalidRequestException"},
251251
{"shape":"InternalException"}
252252
],
253-
"documentation":"<p>Returns metadata, such as the path information about an Amazon EFS location.</p>"
253+
"documentation":"<p>Returns metadata about your DataSync location for an Amazon EFS file system.</p>"
254254
},
255255
"DescribeLocationFsxLustre":{
256256
"name":"DescribeLocationFsxLustre",
@@ -726,19 +726,31 @@
726726
"members":{
727727
"Subdirectory":{
728728
"shape":"EfsSubdirectory",
729-
"documentation":"<p>A subdirectory in the location’s path. This subdirectory in the EFS file system is used to read data from the EFS source location or write data to the EFS destination. By default, DataSync uses the root directory.</p> <note> <p> <code>Subdirectory</code> must be specified with forward slashes. For example, <code>/path/to/folder</code>.</p> </note>"
729+
"documentation":"<p>Specifies a mount path for your Amazon EFS file system. This is where DataSync reads or writes data (depending on if this is a source or destination location). By default, DataSync uses the root directory, but you can also include subdirectories.</p> <note> <p>You must specify a value with forward slashes (for example, <code>/path/to/folder</code>).</p> </note>"
730730
},
731731
"EfsFilesystemArn":{
732732
"shape":"EfsFilesystemArn",
733-
"documentation":"<p>The Amazon Resource Name (ARN) for the Amazon EFS file system.</p>"
733+
"documentation":"<p>Specifies the ARN for the Amazon EFS file system.</p>"
734734
},
735735
"Ec2Config":{
736736
"shape":"Ec2Config",
737-
"documentation":"<p>The subnet and security group that the Amazon EFS file system uses. The security group that you provide needs to be able to communicate with the security group on the mount target in the subnet specified.</p> <p>The exact relationship between security group M (of the mount target) and security group S (which you provide for DataSync to use at this stage) is as follows: </p> <ul> <li> <p> Security group M (which you associate with the mount target) must allow inbound access for the Transmission Control Protocol (TCP) on the NFS port (2049) from security group S. You can enable inbound connections either by IP address (CIDR range) or security group. </p> </li> <li> <p>Security group S (provided to DataSync to access EFS) should have a rule that enables outbound connections to the NFS port on one of the file system’s mount targets. You can enable outbound connections either by IP address (CIDR range) or security group.</p> <p>For information about security groups and mount targets, see Security Groups for Amazon EC2 Instances and Mount Targets in the <i>Amazon EFS User Guide.</i> </p> </li> </ul>"
737+
"documentation":"<p>Specifies the subnet and security groups DataSync uses to access your Amazon EFS file system.</p>"
738738
},
739739
"Tags":{
740740
"shape":"InputTagList",
741-
"documentation":"<p>The key-value pair that represents a tag that you want to add to the resource. The value can be an empty string. This value helps you manage, filter, and search for your resources. We recommend that you create a name tag for your location.</p>"
741+
"documentation":"<p>Specifies the key-value pair that represents a tag that you want to add to the resource. The value can be an empty string. This value helps you manage, filter, and search for your resources. We recommend that you create a name tag for your location.</p>"
742+
},
743+
"AccessPointArn":{
744+
"shape":"EfsAccessPointArn",
745+
"documentation":"<p>Specifies the Amazon Resource Name (ARN) of the access point that DataSync uses to access the Amazon EFS file system.</p>"
746+
},
747+
"FileSystemAccessRoleArn":{
748+
"shape":"IamRoleArn",
749+
"documentation":"<p>Specifies an Identity and Access Management (IAM) role that DataSync assumes when mounting the Amazon EFS file system.</p>"
750+
},
751+
"InTransitEncryption":{
752+
"shape":"EfsInTransitEncryption",
753+
"documentation":"<p>Specifies whether you want DataSync to use TLS encryption when transferring data to or from your Amazon EFS file system.</p> <p>If you specify an access point using <code>AccessPointArn</code> or an IAM role using <code>FileSystemAccessRoleArn</code>, you must set this parameter to <code>TLS1_2</code>.</p>"
742754
}
743755
},
744756
"documentation":"<p>CreateLocationEfsRequest</p>"
@@ -748,7 +760,7 @@
748760
"members":{
749761
"LocationArn":{
750762
"shape":"LocationArn",
751-
"documentation":"<p>The Amazon Resource Name (ARN) of the Amazon EFS file system location that is created.</p>"
763+
"documentation":"<p>The Amazon Resource Name (ARN) of the Amazon EFS file system location that you create.</p>"
752764
}
753765
},
754766
"documentation":"<p>CreateLocationEfs</p>"
@@ -1294,7 +1306,7 @@
12941306
"members":{
12951307
"LocationArn":{
12961308
"shape":"LocationArn",
1297-
"documentation":"<p>The Amazon Resource Name (ARN) of the EFS location to describe.</p>"
1309+
"documentation":"<p>The Amazon Resource Name (ARN) of the Amazon EFS file system location that you want information about.</p>"
12981310
}
12991311
},
13001312
"documentation":"<p>DescribeLocationEfsRequest</p>"
@@ -1304,16 +1316,28 @@
13041316
"members":{
13051317
"LocationArn":{
13061318
"shape":"LocationArn",
1307-
"documentation":"<p>The Amazon Resource Name (ARN) of the EFS location that was described.</p>"
1319+
"documentation":"<p>The ARN of the Amazon EFS file system location.</p>"
13081320
},
13091321
"LocationUri":{
13101322
"shape":"LocationUri",
1311-
"documentation":"<p>The URL of the EFS location that was described.</p>"
1323+
"documentation":"<p>The URL of the Amazon EFS file system location.</p>"
13121324
},
13131325
"Ec2Config":{"shape":"Ec2Config"},
13141326
"CreationTime":{
13151327
"shape":"Time",
1316-
"documentation":"<p>The time that the EFS location was created.</p>"
1328+
"documentation":"<p>The time that the location was created.</p>"
1329+
},
1330+
"AccessPointArn":{
1331+
"shape":"EfsAccessPointArn",
1332+
"documentation":"<p>The ARN of the access point that DataSync uses to access the Amazon EFS file system.</p>"
1333+
},
1334+
"FileSystemAccessRoleArn":{
1335+
"shape":"IamRoleArn",
1336+
"documentation":"<p>The Identity and Access Management (IAM) role that DataSync assumes when mounting the Amazon EFS file system.</p>"
1337+
},
1338+
"InTransitEncryption":{
1339+
"shape":"EfsInTransitEncryption",
1340+
"documentation":"<p>Whether DataSync uses TLS encryption when transferring data to or from your Amazon EFS file system.</p>"
13171341
}
13181342
},
13191343
"documentation":"<p>DescribeLocationEfsResponse</p>"
@@ -1808,14 +1832,14 @@
18081832
"members":{
18091833
"SubnetArn":{
18101834
"shape":"Ec2SubnetArn",
1811-
"documentation":"<p>The ARN of the subnet that DataSync uses to access the target EFS file system.</p>"
1835+
"documentation":"<p>Specifies the ARN of a subnet where DataSync creates the <a href=\"https://docs.aws.amazon.com/datasync/latest/userguide/datasync-network.html#required-network-interfaces\">network interfaces</a> for managing traffic during your transfer.</p> <p>The subnet must be located:</p> <ul> <li> <p>In the same virtual private cloud (VPC) as the Amazon EFS file system.</p> </li> <li> <p>In the same Availability Zone as at least one mount target for the Amazon EFS file system.</p> </li> </ul> <note> <p>You don't need to specify a subnet that includes a file system mount target.</p> </note>"
18121836
},
18131837
"SecurityGroupArns":{
18141838
"shape":"Ec2SecurityGroupArnList",
1815-
"documentation":"<p>The Amazon Resource Names (ARNs) of the security groups that are configured for the Amazon EC2 resource.</p>"
1839+
"documentation":"<p>Specifies the Amazon Resource Names (ARNs) of the security groups associated with an Amazon EFS file system's mount target.</p>"
18161840
}
18171841
},
1818-
"documentation":"<p>The subnet that DataSync uses to access target EFS file system. The subnet must have at least one mount target for that file system. The security group that you provide needs to be able to communicate with the security group on the mount target in the subnet specified. </p>"
1842+
"documentation":"<p>The subnet and security groups that DataSync uses to access your Amazon EFS file system.</p>"
18191843
},
18201844
"Ec2SecurityGroupArn":{
18211845
"type":"string",
@@ -1833,11 +1857,23 @@
18331857
"max":128,
18341858
"pattern":"^arn:(aws|aws-cn|aws-us-gov|aws-iso|aws-iso-b):ec2:[a-z\\-0-9]*:[0-9]{12}:subnet/.*$"
18351859
},
1860+
"EfsAccessPointArn":{
1861+
"type":"string",
1862+
"max":128,
1863+
"pattern":"^arn:(aws|aws-cn|aws-us-gov|aws-iso|aws-iso-b):elasticfilesystem:[a-z\\-0-9]+:[0-9]{12}:access-point/fsap-[0-9a-f]{8,40}$"
1864+
},
18361865
"EfsFilesystemArn":{
18371866
"type":"string",
18381867
"max":128,
18391868
"pattern":"^arn:(aws|aws-cn|aws-us-gov|aws-iso|aws-iso-b):elasticfilesystem:[a-z\\-0-9]*:[0-9]{12}:file-system/fs-.*$"
18401869
},
1870+
"EfsInTransitEncryption":{
1871+
"type":"string",
1872+
"enum":[
1873+
"NONE",
1874+
"TLS1_2"
1875+
]
1876+
},
18411877
"EfsSubdirectory":{
18421878
"type":"string",
18431879
"max":4096,

0 commit comments

Comments
 (0)