Release v1.44.67

CHANGELOG.md

@@ -1,3 +1,11 @@
+Release v1.44.67 (2022-08-01)
+===
+
+### Service Client Updates
+* `service/config`: Updates service documentation
+* `service/workspaces`: Updates service API and documentation
+  * This release introduces ModifySamlProperties, a new API that allows control of SAML properties associated with a WorkSpaces directory. The DescribeWorkspaceDirectories API will now additionally return SAML properties in its responses.
+
 Release v1.44.66 (2022-07-29)
 ===
 

aws/version.go

@@ -5,4 +5,4 @@ package aws
 const SDKName = "aws-sdk-go"
 
 // SDKVersion is the version of this SDK
-const SDKVersion = "1.44.66"
+const SDKVersion = "1.44.67"

models/apis/workspaces/2015-04-08/api-2.json

@@ -659,6 +659,21 @@
         {"shape":"AccessDeniedException"}
       ]
     },
+    "ModifySamlProperties":{
+      "name":"ModifySamlProperties",
+      "http":{
+        "method":"POST",
+        "requestUri":"/"
+      },
+      "input":{"shape":"ModifySamlPropertiesRequest"},
+      "output":{"shape":"ModifySamlPropertiesResult"},
+      "errors":[
+        {"shape":"AccessDeniedException"},
+        {"shape":"InvalidParameterValuesException"},
+        {"shape":"OperationNotSupportedException"},
+        {"shape":"ResourceNotFoundException"}
+      ]
+    },
     "ModifySelfservicePermissions":{
       "name":"ModifySelfservicePermissions",
       "http":{
@@ -1467,6 +1482,17 @@
         "EnableMaintenanceMode":{"shape":"BooleanObject"}
       }
     },
+    "DeletableSamlPropertiesList":{
+      "type":"list",
+      "member":{"shape":"DeletableSamlProperty"}
+    },
+    "DeletableSamlProperty":{
+      "type":"string",
+      "enum":[
+        "SAML_PROPERTIES_USER_ACCESS_URL",
+        "SAML_PROPERTIES_RELAY_STATE_PARAMETER_NAME"
+      ]
+    },
     "DeleteClientBrandingRequest":{
       "type":"structure",
       "required":[
@@ -2165,6 +2191,20 @@
       "members":{
       }
     },
+    "ModifySamlPropertiesRequest":{
+      "type":"structure",
+      "required":["ResourceId"],
+      "members":{
+        "ResourceId":{"shape":"DirectoryId"},
+        "SamlProperties":{"shape":"SamlProperties"},
+        "PropertiesToDelete":{"shape":"DeletableSamlPropertiesList"}
+      }
+    },
+    "ModifySamlPropertiesResult":{
+      "type":"structure",
+      "members":{
+      }
+    },
     "ModifySelfservicePermissionsRequest":{
       "type":"structure",
       "required":[
@@ -2465,6 +2505,28 @@
       ]
     },
     "RunningModeAutoStopTimeoutInMinutes":{"type":"integer"},
+    "SamlProperties":{
+      "type":"structure",
+      "members":{
+        "Status":{"shape":"SamlStatusEnum"},
+        "UserAccessUrl":{"shape":"SamlUserAccessUrl"},
+        "RelayStateParameterName":{"shape":"NonEmptyString"}
+      }
+    },
+    "SamlStatusEnum":{
+      "type":"string",
+      "enum":[
+        "DISABLED",
+        "ENABLED",
+        "ENABLED_WITH_DIRECTORY_LOGIN_FALLBACK"
+      ]
+    },
+    "SamlUserAccessUrl":{
+      "type":"string",
+      "max":200,
+      "min":8,
+      "pattern":"^(http|https)\\://\\S+$"
+    },
     "SecurityGroupId":{
       "type":"string",
       "max":20,
@@ -2840,7 +2902,8 @@
         "ipGroupIds":{"shape":"IpGroupIdList"},
         "WorkspaceAccessProperties":{"shape":"WorkspaceAccessProperties"},
         "Tenancy":{"shape":"Tenancy"},
-        "SelfservicePermissions":{"shape":"SelfservicePermissions"}
+        "SelfservicePermissions":{"shape":"SelfservicePermissions"},
+        "SamlProperties":{"shape":"SamlProperties"}
       }
     },
     "WorkspaceDirectoryState":{

models/apis/workspaces/2015-04-08/docs-2.json

@@ -46,6 +46,7 @@
     "MigrateWorkspace": "<p>Migrates a WorkSpace from one operating system or bundle type to another, while retaining the data on the user volume.</p> <p>The migration process recreates the WorkSpace by using a new root volume from the target bundle image and the user volume from the last available snapshot of the original WorkSpace. During migration, the original <code>D:\\Users\\%USERNAME%</code> user profile folder is renamed to <code>D:\\Users\\%USERNAME%MMddyyTHHmmss%.NotMigrated</code>. A new <code>D:\\Users\\%USERNAME%\\</code> folder is generated by the new OS. Certain files in the old user profile are moved to the new user profile.</p> <p>For available migration scenarios, details about what happens during migration, and best practices, see <a href=\"https://docs.aws.amazon.com/workspaces/latest/adminguide/migrate-workspaces.html\">Migrate a WorkSpace</a>.</p>",
     "ModifyAccount": "<p>Modifies the configuration of Bring Your Own License (BYOL) for the specified account.</p>",
     "ModifyClientProperties": "<p>Modifies the properties of the specified Amazon WorkSpaces clients.</p>",
+    "ModifySamlProperties": "<p>Modifies multiple properties related to SAML 2.0 authentication, including the enablement status, user access URL, and relay state parameter name that are used for configuring federation with an SAML 2.0 identity provider.</p>",
     "ModifySelfservicePermissions": "<p>Modifies the self-service WorkSpace management capabilities for your users. For more information, see <a href=\"https://docs.aws.amazon.com/workspaces/latest/adminguide/enable-user-self-service-workspace-management.html\">Enable Self-Service WorkSpace Management Capabilities for Your Users</a>.</p>",
     "ModifyWorkspaceAccessProperties": "<p>Specifies which devices and operating systems users can use to access their WorkSpaces. For more information, see <a href=\"https://docs.aws.amazon.com/workspaces/latest/adminguide/update-directory-details.html#control-device-access\"> Control Device Access</a>.</p>",
     "ModifyWorkspaceCreationProperties": "<p>Modify the default properties used to create WorkSpaces.</p>",
@@ -599,6 +600,18 @@
         "WorkspaceDirectory$WorkspaceCreationProperties": "<p>The default creation properties for all WorkSpaces in the directory.</p>"
       }
     },
+    "DeletableSamlPropertiesList": {
+      "base": null,
+      "refs": {
+        "ModifySamlPropertiesRequest$PropertiesToDelete": "<p>The SAML properties to delete as part of your request.</p> <p>Specify one of the following options:</p> <ul> <li> <p> <code>SAML_PROPERTIES_USER_ACCESS_URL</code> to delete the user access URL.</p> </li> <li> <p> <code>SAML_PROPERTIES_RELAY_STATE_PARAMETER_NAME</code> to delete the relay state parameter name.</p> </li> </ul>"
+      }
+    },
+    "DeletableSamlProperty": {
+      "base": null,
+      "refs": {
+        "DeletableSamlPropertiesList$member": null
+      }
+    },
     "DeleteClientBrandingRequest": {
       "base": null,
       "refs": {
@@ -865,6 +878,7 @@
         "DirectoryIdList$member": null,
         "DisassociateIpGroupsRequest$DirectoryId": "<p>The identifier of the directory.</p>",
         "ImportClientBrandingRequest$ResourceId": "<p>The directory identifier of the WorkSpace for which you want to import client branding.</p>",
+        "ModifySamlPropertiesRequest$ResourceId": "<p>The directory identifier for which you want to configure SAML properties.</p>",
         "ModifySelfservicePermissionsRequest$ResourceId": "<p>The identifier of the directory.</p>",
         "ModifyWorkspaceAccessPropertiesRequest$ResourceId": "<p>The identifier of the directory.</p>",
         "ModifyWorkspaceCreationPropertiesRequest$ResourceId": "<p>The identifier of the directory.</p>",
@@ -1262,6 +1276,16 @@
       "refs": {
       }
     },
+    "ModifySamlPropertiesRequest": {
+      "base": null,
+      "refs": {
+      }
+    },
+    "ModifySamlPropertiesResult": {
+      "base": null,
+      "refs": {
+      }
+    },
     "ModifySelfservicePermissionsRequest": {
       "base": null,
       "refs": {
@@ -1327,6 +1351,7 @@
         "ResourceNotFoundException$ResourceId": "<p>The ID of the resource that could not be found.</p>",
         "ResourceUnavailableException$ResourceId": "<p>The identifier of the resource that is not available.</p>",
         "RootStorage$Capacity": "<p>The size of the root volume.</p>",
+        "SamlProperties$RelayStateParameterName": "<p>The relay state parameter name supported by the SAML 2.0 identity provider (IdP). When the end user is redirected to the user access URL from the WorkSpaces client application, this relay state parameter name is appended as a query parameter to the URL along with the relay state endpoint to return the user to the client application session.</p> <p>To use SAML 2.0 authentication with WorkSpaces, the IdP must support IdP-initiated deep linking for the relay state URL. Consult your IdP documentation for more information.</p>",
         "TagKeyList$member": null,
         "UserStorage$Capacity": "<p>The size of the user volume.</p>",
         "WorkspaceBundle$Name": "<p>The name of the bundle.</p>"
@@ -1542,6 +1567,25 @@
         "WorkspaceProperties$RunningModeAutoStopTimeoutInMinutes": "<p>The time after a user logs off when WorkSpaces are automatically stopped. Configured in 60-minute intervals.</p>"
       }
     },
+    "SamlProperties": {
+      "base": "<p>Describes the enablement status, user access URL, and relay state parameter name that are used for configuring federation with an SAML 2.0 identity provider.</p>",
+      "refs": {
+        "ModifySamlPropertiesRequest$SamlProperties": "<p>The properties for configuring SAML 2.0 authentication.</p>",
+        "WorkspaceDirectory$SamlProperties": "<p>Describes the enablement status, user access URL, and relay state parameter name that are used for configuring federation with an SAML 2.0 identity provider.</p>"
+      }
+    },
+    "SamlStatusEnum": {
+      "base": null,
+      "refs": {
+        "SamlProperties$Status": "<p>Indicates the status of SAML 2.0 authentication. These statuses include the following.</p> <ul> <li> <p>If the setting is <code>DISABLED</code>, end users will be directed to login with their directory credentials.</p> </li> <li> <p>If the setting is <code>ENABLED</code>, end users will be directed to login via the user access URL. Users attempting to connect to WorkSpaces from a client application that does not support SAML 2.0 authentication will not be able to connect.</p> </li> <li> <p>If the setting is <code>ENABLED_WITH_DIRECTORY_LOGIN_FALLBACK</code>, end users will be directed to login via the user access URL on supported client applications, but will not prevent clients that do not support SAML 2.0 authentication from connecting as if SAML 2.0 authentication was disabled.</p> </li> </ul>"
+      }
+    },
+    "SamlUserAccessUrl": {
+      "base": null,
+      "refs": {
+        "SamlProperties$UserAccessUrl": "<p>The SAML 2.0 identity provider (IdP) user access URL is the URL a user would navigate to in their web browser in order to federate from the IdP and directly access the application, without any SAML 2.0 service provider (SP) bindings.</p>"
+      }
+    },
     "SecurityGroupId": {
       "base": null,
       "refs": {