feat(client-ssm): This release adds support for Systems Manager State Manager Association tagging.

Author: awstools

clients/client-ssm/src/models/models_0.ts

@@ -95,6 +95,7 @@ export interface Activation {
 }
 
 export enum ResourceTypeForTagging {
+  ASSOCIATION = "Association",
   AUTOMATION = "Automation",
   DOCUMENT = "Document",
   MAINTENANCE_WINDOW = "MaintenanceWindow",
@@ -1088,6 +1089,14 @@ export interface CreateAssociationRequest {
    *    can't be specified together.</p>
    */
   TargetMaps?: Record<string, string[]>[];
+
+  /**
+   * <p>Adds or overwrites one or more tags for a State Manager association. <i>Tags</i>
+   *    are metadata that you can assign to your Amazon Web Services resources. Tags enable you to categorize your
+   *    resources in different ways, for example, by purpose, owner, or environment. Each tag consists of
+   *    a key and an optional value, both of which you define. </p>
+   */
+  Tags?: Tag[];
 }
 
 /**
@@ -1406,6 +1415,27 @@ export class InvalidSchedule extends __BaseException {
   }
 }
 
+/**
+ * <p>The specified tag key or value is not valid.</p>
+ */
+export class InvalidTag extends __BaseException {
+  readonly name: "InvalidTag" = "InvalidTag";
+  readonly $fault: "client" = "client";
+  Message?: string;
+  /**
+   * @internal
+   */
+  constructor(opts: __ExceptionOptionType<InvalidTag, __BaseException>) {
+    super({
+      name: "InvalidTag",
+      $fault: "client",
+      ...opts,
+    });
+    Object.setPrototypeOf(this, InvalidTag.prototype);
+    this.Message = opts.Message;
+  }
+}
+
 /**
  * <p>The target isn't valid or doesn't exist. It might not be configured for Systems Manager or you might
  *    not have permission to perform the operation.</p>
@@ -1815,7 +1845,7 @@ export interface CreateDocumentRequest {
    *             <ul>
    *                <li>
    *                   <p>
-   *                      <code>aws-</code>
+   *                      <code>aws</code>
    *                   </p>
    *                </li>
    *                <li>
@@ -5700,14 +5730,16 @@ export interface DescribeInstanceAssociationsStatusResult {
 export interface InstanceInformationStringFilter {
   /**
    * <p>The filter key name to describe your managed nodes. For example:</p>
-   *          <p>"InstanceIds"|"AgentVersion"|"PingStatus"|"PlatformTypes"|"ActivationIds"|"IamRole"|"ResourceType"|"AssociationStatus"|"Tag
-   *    Key"</p>
+   *          <p>"InstanceIds" | "AgentVersion" | "PingStatus" | "PlatformTypes" | "ActivationIds" |
+   *    "IamRole" | "ResourceType" | "AssociationStatus" | "tag-key" | "tag:<code>{keyname}</code>
+   *          </p>
    *          <important>
    *             <p>
-   *                <code>Tag key</code> isn't a valid filter. You must specify either <code>tag-key</code> or
-   *      <code>tag:keyname</code> and a string. Here are some valid examples: tag-key, tag:123, tag:al!,
-   *     tag:Windows. Here are some <i>invalid</i> examples: tag-keys, Tag Key, tag:,
-   *     tagKey, abc:keyname.</p>
+   *                <code>Tag Key</code> isn't a valid filter. You must specify either <code>tag-key</code> or
+   *      <code>tag:{keyname}</code> and a string. Here are some valid examples: <code>tag-key</code>,
+   *      <code>tag:123</code>, <code>tag:al!</code>, <code>tag:Windows</code>. Here are some
+   *      <i>invalid</i> examples: <code>tag-keys</code>, <code>Tag Key</code>,
+   *      <code>tag:</code>, <code>tagKey</code>, <code>abc:keyname</code>.</p>
    *          </important>
    */
   Key: string | undefined;
@@ -5762,8 +5794,8 @@ export interface DescribeInstanceInformationRequest {
 
   /**
    * <p>One or more filters. Use a filter to return a more specific list of managed nodes. You can
-   *    filter based on tags applied to EC2 instances. Use this <code>Filters</code> data type instead of
-   *     <code>InstanceInformationFilterList</code>, which is deprecated.</p>
+   *    filter based on tags applied to your managed nodes. Use this <code>Filters</code> data type
+   *    instead of <code>InstanceInformationFilterList</code>, which is deprecated.</p>
    */
   Filters?: InstanceInformationStringFilter[];
 
@@ -7807,29 +7839,6 @@ export interface DescribeParametersRequest {
   NextToken?: string;
 }
 
-/**
- * <p>One or more policies assigned to a parameter.</p>
- */
-export interface ParameterInlinePolicy {
-  /**
-   * <p>The JSON text of the policy.</p>
-   */
-  PolicyText?: string;
-
-  /**
-   * <p>The type of policy. Parameter Store, a capability of Amazon Web Services Systems Manager, supports the following
-   *    policy types: Expiration, ExpirationNotification, and NoChangeNotification. </p>
-   */
-  PolicyType?: string;
-
-  /**
-   * <p>The status of the policy. Policies report the following statuses: Pending (the policy hasn't
-   *    been enforced or applied yet), Finished (the policy was applied), Failed (the policy wasn't
-   *    applied), or InProgress (the policy is being applied now). </p>
-   */
-  PolicyStatus?: string;
-}
-
 /**
  * @internal
  */
@@ -9262,10 +9271,3 @@ export const ParameterStringFilterFilterSensitiveLog = (obj: ParameterStringFilt
 export const DescribeParametersRequestFilterSensitiveLog = (obj: DescribeParametersRequest): any => ({
   ...obj,
 });
-
-/**
- * @internal
- */
-export const ParameterInlinePolicyFilterSensitiveLog = (obj: ParameterInlinePolicy): any => ({
-  ...obj,
-});

clients/client-ssm/src/models/models_1.ts

@@ -31,7 +31,6 @@ import {
   OpsItemDataValue,
   OpsItemNotification,
   OpsItemStatus,
-  ParameterInlinePolicy,
   ParameterStringFilter,
   PatchAction,
   PatchComplianceLevel,
@@ -55,6 +54,29 @@ import {
 } from "./models_0";
 import { SSMServiceException as __BaseException } from "./SSMServiceException";
 
+/**
+ * <p>One or more policies assigned to a parameter.</p>
+ */
+export interface ParameterInlinePolicy {
+  /**
+   * <p>The JSON text of the policy.</p>
+   */
+  PolicyText?: string;
+
+  /**
+   * <p>The type of policy. Parameter Store, a capability of Amazon Web Services Systems Manager, supports the following
+   *    policy types: Expiration, ExpirationNotification, and NoChangeNotification. </p>
+   */
+  PolicyType?: string;
+
+  /**
+   * <p>The status of the policy. Policies report the following statuses: Pending (the policy hasn't
+   *    been enforced or applied yet), Finished (the policy was applied), Failed (the policy wasn't
+   *    applied), or InProgress (the policy is being applied now). </p>
+   */
+  PolicyStatus?: string;
+}
+
 export enum ParameterTier {
   ADVANCED = "Advanced",
   INTELLIGENT_TIERING = "Intelligent-Tiering",
@@ -7797,6 +7819,9 @@ export interface SendCommandRequest {
   /**
    * <p>The ARN of the Identity and Access Management (IAM) service role to use to publish
    *     Amazon Simple Notification Service (Amazon SNS) notifications for Run Command commands.</p>
+   *          <p>This role must provide the <code>sns:Publish</code> permission for your notification topic.
+   *    For information about creating and using this service role, see <a href="https://docs.aws.amazon.com/systems-manager/latest/userguide/monitoring-sns-notifications.html">Monitoring Systems Manager status changes using Amazon SNS notifications</a> in the
+   *     <i>Amazon Web Services Systems Manager User Guide</i>.</p>
    */
   ServiceRoleArn?: string;
 
@@ -8210,8 +8235,7 @@ export interface StartSessionResponse {
   SessionId?: string;
 
   /**
-   * <p>An encrypted token value containing session and caller information. Used to authenticate the
-   *    connection to the managed node.</p>
+   * <p>An encrypted token value containing session and caller information. This token is used to authenticate the connection to the managed node, and is valid only long enough to ensure the connection is successful. Never share your session's token.</p>
    */
   TokenValue?: string;
 
@@ -8788,19 +8812,11 @@ export enum DocumentReviewAction {
 }
 
 /**
- * <p>Information about a document approval review.</p>
+ * @internal
  */
-export interface DocumentReviews {
-  /**
-   * <p>The action to take on a document approval review request.</p>
-   */
-  Action: DocumentReviewAction | string | undefined;
-
-  /**
-   * <p>A comment entered by a user in your organization about the document review request.</p>
-   */
-  Comment?: DocumentReviewCommentSource[];
-}
+export const ParameterInlinePolicyFilterSensitiveLog = (obj: ParameterInlinePolicy): any => ({
+  ...obj,
+});
 
 /**
  * @internal
@@ -10352,10 +10368,3 @@ export const DocumentDefaultVersionDescriptionFilterSensitiveLog = (obj: Documen
 export const UpdateDocumentDefaultVersionResultFilterSensitiveLog = (obj: UpdateDocumentDefaultVersionResult): any => ({
   ...obj,
 });
-
-/**
- * @internal
- */
-export const DocumentReviewsFilterSensitiveLog = (obj: DocumentReviews): any => ({
-  ...obj,
-});

clients/client-ssm/src/models/models_2.ts

@@ -21,7 +21,8 @@ import {
   Target,
 } from "./models_0";
 import {
-  DocumentReviews,
+  DocumentReviewAction,
+  DocumentReviewCommentSource,
   InventoryFilter,
   InventoryGroup,
   MaintenanceWindowTaskInvocationParameters,
@@ -32,6 +33,21 @@ import {
 } from "./models_1";
 import { SSMServiceException as __BaseException } from "./SSMServiceException";
 
+/**
+ * <p>Information about a document approval review.</p>
+ */
+export interface DocumentReviews {
+  /**
+   * <p>The action to take on a document approval review request.</p>
+   */
+  Action: DocumentReviewAction | string | undefined;
+
+  /**
+   * <p>A comment entered by a user in your organization about the document review request.</p>
+   */
+  Comment?: DocumentReviewCommentSource[];
+}
+
 export interface UpdateDocumentMetadataRequest {
   /**
    * <p>The name of the change template for which a version's metadata is to be updated.</p>
@@ -1147,6 +1163,13 @@ export interface GetOpsSummaryRequest {
   MaxResults?: number;
 }
 
+/**
+ * @internal
+ */
+export const DocumentReviewsFilterSensitiveLog = (obj: DocumentReviews): any => ({
+  ...obj,
+});
+
 /**
  * @internal
  */

clients/client-ssm/src/protocols/Aws_json1_1.ts

@@ -601,6 +601,7 @@ import {
   InvalidResourceId,
   InvalidResourceType,
   InvalidSchedule,
+  InvalidTag,
   InvalidTarget,
   InvalidTargetMaps,
   InvalidTypeNameException,
@@ -634,7 +635,6 @@ import {
   OpsMetadataNotFoundException,
   OpsMetadataTooManyUpdatesException,
   OutputSource,
-  ParameterInlinePolicy,
   ParameterNotFound,
   ParametersFilter,
   ParameterStringFilter,
@@ -725,7 +725,6 @@ import {
   DocumentPermissionLimit,
   DocumentReviewCommentSource,
   DocumentReviewerResponseSource,
-  DocumentReviews,
   DocumentVersionInfo,
   DocumentVersionLimitExceeded,
   DuplicateDocumentContent,
@@ -870,6 +869,7 @@ import {
   Parameter,
   ParameterAlreadyExists,
   ParameterHistory,
+  ParameterInlinePolicy,
   ParameterLimitExceeded,
   ParameterMaxVersionLimitExceeded,
   ParameterMetadata,
@@ -947,6 +947,7 @@ import {
   UpdateDocumentResult,
 } from "../models/models_1";
 import {
+  DocumentReviews,
   GetInventoryRequest,
   GetOpsSummaryRequest,
   InventoryAggregator,
@@ -3029,6 +3030,9 @@ const deserializeAws_json1_1CreateAssociationCommandError = async (
     case "InvalidSchedule":
     case "com.amazonaws.ssm#InvalidSchedule":
       throw await deserializeAws_json1_1InvalidScheduleResponse(parsedOutput, context);
+    case "InvalidTag":
+    case "com.amazonaws.ssm#InvalidTag":
+      throw await deserializeAws_json1_1InvalidTagResponse(parsedOutput, context);
     case "InvalidTarget":
     case "com.amazonaws.ssm#InvalidTarget":
       throw await deserializeAws_json1_1InvalidTargetResponse(parsedOutput, context);
@@ -10310,6 +10314,19 @@ const deserializeAws_json1_1InvalidScheduleResponse = async (
   return __decorateServiceException(exception, body);
 };
 
+const deserializeAws_json1_1InvalidTagResponse = async (
+  parsedOutput: any,
+  context: __SerdeContext
+): Promise<InvalidTag> => {
+  const body = parsedOutput.body;
+  const deserialized: any = deserializeAws_json1_1InvalidTag(body, context);
+  const exception = new InvalidTag({
+    $metadata: deserializeMetadata(parsedOutput),
+    ...deserialized,
+  });
+  return __decorateServiceException(exception, body);
+};
+
 const deserializeAws_json1_1InvalidTargetResponse = async (
   parsedOutput: any,
   context: __SerdeContext
@@ -11401,6 +11418,7 @@ const serializeAws_json1_1CreateAssociationRequest = (
     ...(input.ScheduleExpression != null && { ScheduleExpression: input.ScheduleExpression }),
     ...(input.ScheduleOffset != null && { ScheduleOffset: input.ScheduleOffset }),
     ...(input.SyncCompliance != null && { SyncCompliance: input.SyncCompliance }),
+    ...(input.Tags != null && { Tags: serializeAws_json1_1TagList(input.Tags, context) }),
     ...(input.TargetLocations != null && {
       TargetLocations: serializeAws_json1_1TargetLocations(input.TargetLocations, context),
     }),
@@ -17183,6 +17201,12 @@ const deserializeAws_json1_1InvalidSchedule = (output: any, context: __SerdeCont
   } as any;
 };
 
+const deserializeAws_json1_1InvalidTag = (output: any, context: __SerdeContext): InvalidTag => {
+  return {
+    Message: __expectString(output.Message),
+  } as any;
+};
+
 const deserializeAws_json1_1InvalidTarget = (output: any, context: __SerdeContext): InvalidTarget => {
   return {
     Message: __expectString(output.Message),