Stops a database activity stream that was started using the Amazon Web Services console, the start-activity-stream CLI command, or the StartActivityStream action.
For more information, see Database Activity Streams in the Amazon Aurora User Guide.
", "StopDBCluster": "Stops an Amazon Aurora DB cluster. When you stop a DB cluster, Aurora retains the DB cluster's metadata, including its endpoints and DB parameter groups. Aurora also retains the transaction logs so you can do a point-in-time restore if necessary.
For more information, see Stopping and Starting an Aurora Cluster in the Amazon Aurora User Guide.
This action only applies to Aurora DB clusters.
Stops an Amazon RDS DB instance. When you stop a DB instance, Amazon RDS retains the DB instance's metadata, including its endpoint, DB parameter group, and option group membership. Amazon RDS also retains the transaction logs so you can do a point-in-time restore if necessary.
For more information, see Stopping an Amazon RDS DB Instance Temporarily in the Amazon RDS User Guide.
This command doesn't apply to RDS Custom, Aurora MySQL, and Aurora PostgreSQL. For Aurora clusters, use StopDBCluster instead.
Stops automated backup replication for a DB instance.
This command doesn't apply to RDS Custom, Aurora MySQL, and Aurora PostgreSQL.
For more information, see Replicating Automated Backups to Another Amazon Web Services Region in the Amazon RDS User Guide.
" + "StopDBInstanceAutomatedBackupsReplication": "Stops automated backup replication for a DB instance.
This command doesn't apply to RDS Custom, Aurora MySQL, and Aurora PostgreSQL.
For more information, see Replicating Automated Backups to Another Amazon Web Services Region in the Amazon RDS User Guide.
", + "SwitchoverReadReplica": "Switches over an Oracle standby database in an Oracle Data Guard environment, making it the new primary database. Issue this command in the AWS Region that hosts the current standby database.
" }, "shapes": { "AccountAttributesMessage": { @@ -1149,7 +1150,8 @@ "RestoreDBInstanceFromS3Result$DBInstance": null, "RestoreDBInstanceToPointInTimeResult$DBInstance": null, "StartDBInstanceResult$DBInstance": null, - "StopDBInstanceResult$DBInstance": null + "StopDBInstanceResult$DBInstance": null, + "SwitchoverReadReplicaResult$DBInstance": null } }, "DBInstanceAlreadyExistsFault": { @@ -4592,6 +4594,7 @@ "Subnet$SubnetIdentifier": "The identifier of the subnet.
", "Subnet$SubnetStatus": "The status of the subnet.
", "SubnetIdentifierList$member": null, + "SwitchoverReadReplicaMessage$DBInstanceIdentifier": "The DB instance identifier of the current standby database. This value is stored as a lowercase string.
Constraints:
Must match the identifier of an existing Oracle read replica DB instance.
A key is the required name of the tag. The string value can be from 1 to 128 Unicode characters in length and can't be prefixed with aws: or rds:. The string can only contain only the set of Unicode letters, digits, white-space, '_', '.', ':', '/', '=', '+', '-', '@' (Java regex: \"^([\\\\p{L}\\\\p{Z}\\\\p{N}_.:/=+\\\\-@]*)$\").
A value is the optional value of the tag. The string value can be from 1 to 256 Unicode characters in length and can't be prefixed with aws: or rds:. The string can only contain only the set of Unicode letters, digits, white-space, '_', '.', ':', '/', '=', '+', '-', '@' (Java regex: \"^([\\\\p{L}\\\\p{Z}\\\\p{N}_.:/=+\\\\-@]*)$\").
A description of the health of the RDS Proxy target. If the State is AVAILABLE, a description is not included.
A list of the time zones supported by this engine for the Timezone parameter of the CreateDBInstance action.
Specifies when the snapshot was taken in Coordinated Universal Time (UTC). Changes for the copy when the snapshot is copied.
", "DBSnapshot$InstanceCreateTime": "Specifies the time in Coordinated Universal Time (UTC) when the DB instance, from which the snapshot was taken, was created.
", "DBSnapshot$OriginalSnapshotCreateTime": "Specifies the time of the CreateDBSnapshot operation in Coordinated Universal Time (UTC). Doesn't change when the snapshot is copied.
", + "DBSnapshot$SnapshotDatabaseTime": "The timestamp of the most recent transaction applied to the database that you're backing up. Thus, if you restore a snapshot, SnapshotDatabaseTime is the most recent transaction in the restored DB instance. In contrast, originalSnapshotCreateTime specifies the system time that the snapshot completed.
If you back up a read replica, you can determine the replica lag by comparing SnapshotDatabaseTime with originalSnapshotCreateTime. For example, if originalSnapshotCreateTime is two hours later than SnapshotDatabaseTime, then the replica lag is two hours. *** REVIEWERS 7/27: Switchover
", "DescribeEventsMessage$StartTime": "The beginning of the time interval to retrieve events for, specified in ISO 8601 format. For more information about ISO 8601, go to the ISO8601 Wikipedia page.
Example: 2009-07-08T18:00Z
", "DescribeEventsMessage$EndTime": "The end of the time interval for which to retrieve events, specified in ISO 8601 format. For more information about ISO 8601, go to the ISO8601 Wikipedia page.
Example: 2009-07-08T18:00Z
", "Event$Date": "Specifies the date and time of the event.
", diff --git a/models/apis/sso-admin/2020-07-20/docs-2.json b/models/apis/sso-admin/2020-07-20/docs-2.json index 984efcadfa..3fa8096aaa 100644 --- a/models/apis/sso-admin/2020-07-20/docs-2.json +++ b/models/apis/sso-admin/2020-07-20/docs-2.json @@ -1,13 +1,13 @@ { "version": "2.0", - "service": "", + "service": "Amazon Web Services Single Sign On helps you securely create, or connect, your workforce identities and manage their access centrally across Amazon Web Services accounts and applications. Amazon Web Services SSO is the recommended approach for workforce authentication and authorization in Amazon Web Services, for organizations of any size and type.
Although Amazon Web Services Single Sign-On was renamed, the sso and identitystore API namespaces will continue to retain their original name for backward compatibility purposes. For more information, see Amazon Web Services SSO rename.
This reference guide provides information on single sign-on operations which could be used for access management of Amazon Web Services accounts. For information about Amazon Web Services SSO features, see the Amazon Web Services SSO User Guide.
Many operations in the Amazon Web Services SSO APIs rely on identifiers for users and groups, known as principals. For more information about how to work with principals and principal IDs in Amazon Web Services SSO, see the Identity Store API Reference.
Amazon Web Services provides SDKs that consist of libraries and sample code for various programming languages and platforms (Java, Ruby, .Net, iOS, Android, and more). The SDKs provide a convenient way to create programmatic access to Amazon Web Services SSO and other Amazon Web Services services. For more information about the Amazon Web Services SDKs, including how to download and install them, see Tools for Amazon Web Services.
Attaches the specified customer managed policy to the specified PermissionSet.
", "AttachManagedPolicyToPermissionSet": "Attaches an Amazon Web Services managed policy ARN to a permission set.
If the permission set is already referenced by one or more account assignments, you will need to call ProvisionPermissionSet after this operation. Calling ProvisionPermissionSet applies the corresponding IAM policy updates to all assigned accounts.
Assigns access to a principal for a specified Amazon Web Services account using a specified permission set.
The term principal here refers to a user or group that is defined in Amazon Web Services SSO.
As part of a successful CreateAccountAssignment call, the specified permission set will automatically be provisioned to the account in the form of an IAM policy. That policy is attached to the IAM role created in Amazon Web Services SSO. If the permission set is subsequently updated, the corresponding IAM policies attached to roles in your accounts will not be updated automatically. In this case, you must call ProvisionPermissionSet to make these updates.
Enables the attributes-based access control (ABAC) feature for the specified Amazon Web Services SSO instance. You can also specify new attributes to add to your ABAC configuration during the enabling process. For more information about ABAC, see Attribute-Based Access Control in the Amazon Web Services SSO User Guide.
", + "CreateAccountAssignment": "Assigns access to a principal for a specified Amazon Web Services account using a specified permission set.
The term principal here refers to a user or group that is defined in Amazon Web Services SSO.
As part of a successful CreateAccountAssignment call, the specified permission set will automatically be provisioned to the account in the form of an IAM policy. That policy is attached to the IAM role created in Amazon Web Services SSO. If the permission set is subsequently updated, the corresponding IAM policies attached to roles in your accounts will not be updated automatically. In this case, you must call ProvisionPermissionSet to make these updates.
After a successful response, call DescribeAccountAssignmentCreationStatus to describe the status of an assignment creation request.
Enables the attributes-based access control (ABAC) feature for the specified Amazon Web Services SSO instance. You can also specify new attributes to add to your ABAC configuration during the enabling process. For more information about ABAC, see Attribute-Based Access Control in the Amazon Web Services SSO User Guide.
After a successful response, call DescribeInstanceAccessControlAttributeConfiguration to validate that InstanceAccessControlAttributeConfiguration was created.
Creates a permission set within a specified Amazon Web Services SSO instance.
To grant users and groups access to Amazon Web Services account resources, use CreateAccountAssignment .
Deletes a principal's access from a specified Amazon Web Services account using a specified permission set.
", + "DeleteAccountAssignment": "Deletes a principal's access from a specified Amazon Web Services account using a specified permission set.
After a successful response, call DescribeAccountAssignmentCreationStatus to describe the status of an assignment deletion request.
Deletes the inline policy from a specified permission set.
", "DeleteInstanceAccessControlAttributeConfiguration": "Disables the attributes-based access control (ABAC) feature for the specified Amazon Web Services SSO instance and deletes all of the attribute mappings that have been configured. Once deleted, any attributes that are received from an identity source and any custom attributes you have previously configured will not be passed. For more information about ABAC, see Attribute-Based Access Control in the Amazon Web Services SSO User Guide.
", "DeletePermissionSet": "Deletes the specified permission set.
", diff --git a/service/rds/api.go b/service/rds/api.go index 813e929824..e42172fcf8 100644 --- a/service/rds/api.go +++ b/service/rds/api.go @@ -15015,6 +15015,90 @@ func (c *RDS) StopDBInstanceAutomatedBackupsReplicationWithContext(ctx aws.Conte return out, req.Send() } +const opSwitchoverReadReplica = "SwitchoverReadReplica" + +// SwitchoverReadReplicaRequest generates a "aws/request.Request" representing the +// client's request for the SwitchoverReadReplica operation. The "output" return +// value will be populated with the request's response once the request completes +// successfully. +// +// Use "Send" method on the returned Request to send the API call to the service. +// the "output" return value is not valid until after Send returns without error. +// +// See SwitchoverReadReplica for more information on using the SwitchoverReadReplica +// API call, and error handling. +// +// This method is useful when you want to inject custom logic or configuration +// into the SDK's request lifecycle. Such as custom headers, or retry logic. +// +// // Example sending a request using the SwitchoverReadReplicaRequest method. +// req, resp := client.SwitchoverReadReplicaRequest(params) +// +// err := req.Send() +// if err == nil { // resp is now filled +// fmt.Println(resp) +// } +// +// See also, https://docs.aws.amazon.com/goto/WebAPI/rds-2014-10-31/SwitchoverReadReplica +func (c *RDS) SwitchoverReadReplicaRequest(input *SwitchoverReadReplicaInput) (req *request.Request, output *SwitchoverReadReplicaOutput) { + op := &request.Operation{ + Name: opSwitchoverReadReplica, + HTTPMethod: "POST", + HTTPPath: "/", + } + + if input == nil { + input = &SwitchoverReadReplicaInput{} + } + + output = &SwitchoverReadReplicaOutput{} + req = c.newRequest(op, input, output) + return +} + +// SwitchoverReadReplica API operation for Amazon Relational Database Service. +// +// Switches over an Oracle standby database in an Oracle Data Guard environment, +// making it the new primary database. Issue this command in the AWS Region +// that hosts the current standby database. +// +// Returns awserr.Error for service API and SDK errors. Use runtime type assertions +// with awserr.Error's Code and Message methods to get detailed information about +// the error. +// +// See the AWS API reference guide for Amazon Relational Database Service's +// API operation SwitchoverReadReplica for usage and error information. +// +// Returned Error Codes: +// +// - ErrCodeDBInstanceNotFoundFault "DBInstanceNotFound" +// DBInstanceIdentifier doesn't refer to an existing DB instance. +// +// - ErrCodeInvalidDBInstanceStateFault "InvalidDBInstanceState" +// The DB instance isn't in a valid state. +// +// See also, https://docs.aws.amazon.com/goto/WebAPI/rds-2014-10-31/SwitchoverReadReplica +func (c *RDS) SwitchoverReadReplica(input *SwitchoverReadReplicaInput) (*SwitchoverReadReplicaOutput, error) { + req, out := c.SwitchoverReadReplicaRequest(input) + return out, req.Send() +} + +// SwitchoverReadReplicaWithContext is the same as SwitchoverReadReplica with the addition of +// the ability to pass a context and additional request options. +// +// See SwitchoverReadReplica for details on how to use this API operation. +// +// The context must be non-nil and will be used for request cancellation. If +// the context is nil a panic will occur. In the future the SDK may create +// sub-contexts for http.Requests. See https://golang.org/pkg/context/ +// for more information on using Contexts. +func (c *RDS) SwitchoverReadReplicaWithContext(ctx aws.Context, input *SwitchoverReadReplicaInput, opts ...request.Option) (*SwitchoverReadReplicaOutput, error) { + req, out := c.SwitchoverReadReplicaRequest(input) + req.SetContext(ctx) + req.ApplyOptions(opts...) + return out, req.Send() +} + // Describes a quota for an Amazon Web Services account. // // The following are account quotas: @@ -27283,6 +27367,17 @@ type DBSnapshot struct { // Changes for the copy when the snapshot is copied. SnapshotCreateTime *time.Time `type:"timestamp"` + // The timestamp of the most recent transaction applied to the database that + // you're backing up. Thus, if you restore a snapshot, SnapshotDatabaseTime + // is the most recent transaction in the restored DB instance. In contrast, + // originalSnapshotCreateTime specifies the system time that the snapshot completed. + // + // If you back up a read replica, you can determine the replica lag by comparing + // SnapshotDatabaseTime with originalSnapshotCreateTime. For example, if originalSnapshotCreateTime + // is two hours later than SnapshotDatabaseTime, then the replica lag is two + // hours. *** REVIEWERS 7/27: Switchover + SnapshotDatabaseTime *time.Time `type:"timestamp"` + // Specifies where manual snapshots are stored: Amazon Web Services Outposts // or the Amazon Web Services Region. SnapshotTarget *string `type:"string"` @@ -27465,6 +27560,12 @@ func (s *DBSnapshot) SetSnapshotCreateTime(v time.Time) *DBSnapshot { return s } +// SetSnapshotDatabaseTime sets the SnapshotDatabaseTime field's value. +func (s *DBSnapshot) SetSnapshotDatabaseTime(v time.Time) *DBSnapshot { + s.SnapshotDatabaseTime = &v + return s +} + // SetSnapshotTarget sets the SnapshotTarget field's value. func (s *DBSnapshot) SetSnapshotTarget(v string) *DBSnapshot { s.SnapshotTarget = &v @@ -50227,6 +50328,93 @@ func (s *Subnet) SetSubnetStatus(v string) *Subnet { return s } +type SwitchoverReadReplicaInput struct { + _ struct{} `type:"structure"` + + // The DB instance identifier of the current standby database. This value is + // stored as a lowercase string. + // + // Constraints: + // + // * Must match the identifier of an existing Oracle read replica DB instance. + // + // DBInstanceIdentifier is a required field + DBInstanceIdentifier *string `type:"string" required:"true"` +} + +// String returns the string representation. +// +// API parameter values that are decorated as "sensitive" in the API will not +// be included in the string output. The member name will be present, but the +// value will be replaced with "sensitive". +func (s SwitchoverReadReplicaInput) String() string { + return awsutil.Prettify(s) +} + +// GoString returns the string representation. +// +// API parameter values that are decorated as "sensitive" in the API will not +// be included in the string output. The member name will be present, but the +// value will be replaced with "sensitive". +func (s SwitchoverReadReplicaInput) GoString() string { + return s.String() +} + +// Validate inspects the fields of the type to determine if they are valid. +func (s *SwitchoverReadReplicaInput) Validate() error { + invalidParams := request.ErrInvalidParams{Context: "SwitchoverReadReplicaInput"} + if s.DBInstanceIdentifier == nil { + invalidParams.Add(request.NewErrParamRequired("DBInstanceIdentifier")) + } + + if invalidParams.Len() > 0 { + return invalidParams + } + return nil +} + +// SetDBInstanceIdentifier sets the DBInstanceIdentifier field's value. +func (s *SwitchoverReadReplicaInput) SetDBInstanceIdentifier(v string) *SwitchoverReadReplicaInput { + s.DBInstanceIdentifier = &v + return s +} + +type SwitchoverReadReplicaOutput struct { + _ struct{} `type:"structure"` + + // Contains the details of an Amazon RDS DB instance. + // + // This data type is used as a response element in the operations CreateDBInstance, + // CreateDBInstanceReadReplica, DeleteDBInstance, DescribeDBInstances, ModifyDBInstance, + // PromoteReadReplica, RebootDBInstance, RestoreDBInstanceFromDBSnapshot, RestoreDBInstanceFromS3, + // RestoreDBInstanceToPointInTime, StartDBInstance, and StopDBInstance. + DBInstance *DBInstance `type:"structure"` +} + +// String returns the string representation. +// +// API parameter values that are decorated as "sensitive" in the API will not +// be included in the string output. The member name will be present, but the +// value will be replaced with "sensitive". +func (s SwitchoverReadReplicaOutput) String() string { + return awsutil.Prettify(s) +} + +// GoString returns the string representation. +// +// API parameter values that are decorated as "sensitive" in the API will not +// be included in the string output. The member name will be present, but the +// value will be replaced with "sensitive". +func (s SwitchoverReadReplicaOutput) GoString() string { + return s.String() +} + +// SetDBInstance sets the DBInstance field's value. +func (s *SwitchoverReadReplicaOutput) SetDBInstance(v *DBInstance) *SwitchoverReadReplicaOutput { + s.DBInstance = v + return s +} + // Metadata assigned to an Amazon RDS resource consisting of a key-value pair. type Tag struct { _ struct{} `type:"structure"` diff --git a/service/rds/rdsiface/interface.go b/service/rds/rdsiface/interface.go index d7bb2e5319..e88494c9e6 100644 --- a/service/rds/rdsiface/interface.go +++ b/service/rds/rdsiface/interface.go @@ -703,6 +703,10 @@ type RDSAPI interface { StopDBInstanceAutomatedBackupsReplicationWithContext(aws.Context, *rds.StopDBInstanceAutomatedBackupsReplicationInput, ...request.Option) (*rds.StopDBInstanceAutomatedBackupsReplicationOutput, error) StopDBInstanceAutomatedBackupsReplicationRequest(*rds.StopDBInstanceAutomatedBackupsReplicationInput) (*request.Request, *rds.StopDBInstanceAutomatedBackupsReplicationOutput) + SwitchoverReadReplica(*rds.SwitchoverReadReplicaInput) (*rds.SwitchoverReadReplicaOutput, error) + SwitchoverReadReplicaWithContext(aws.Context, *rds.SwitchoverReadReplicaInput, ...request.Option) (*rds.SwitchoverReadReplicaOutput, error) + SwitchoverReadReplicaRequest(*rds.SwitchoverReadReplicaInput) (*request.Request, *rds.SwitchoverReadReplicaOutput) + WaitUntilDBClusterAvailable(*rds.DescribeDBClustersInput) error WaitUntilDBClusterAvailableWithContext(aws.Context, *rds.DescribeDBClustersInput, ...request.WaiterOption) error diff --git a/service/ssoadmin/api.go b/service/ssoadmin/api.go index f124ea1432..82a134b340 100644 --- a/service/ssoadmin/api.go +++ b/service/ssoadmin/api.go @@ -282,6 +282,9 @@ func (c *SSOAdmin) CreateAccountAssignmentRequest(input *CreateAccountAssignment // policies attached to roles in your accounts will not be updated automatically. // In this case, you must call ProvisionPermissionSet to make these updates. // +// After a successful response, call DescribeAccountAssignmentCreationStatus +// to describe the status of an assignment creation request. +// // Returns awserr.Error for service API and SDK errors. Use runtime type assertions // with awserr.Error's Code and Message methods to get detailed information about // the error. @@ -390,6 +393,9 @@ func (c *SSOAdmin) CreateInstanceAccessControlAttributeConfigurationRequest(inpu // about ABAC, see Attribute-Based Access Control (/singlesignon/latest/userguide/abac.html) // in the Amazon Web Services SSO User Guide. // +// After a successful response, call DescribeInstanceAccessControlAttributeConfiguration +// to validate that InstanceAccessControlAttributeConfiguration was created. +// // Returns awserr.Error for service API and SDK errors. Use runtime type assertions // with awserr.Error's Code and Message methods to get detailed information about // the error. @@ -596,6 +602,9 @@ func (c *SSOAdmin) DeleteAccountAssignmentRequest(input *DeleteAccountAssignment // Deletes a principal's access from a specified Amazon Web Services account // using a specified permission set. // +// After a successful response, call DescribeAccountAssignmentCreationStatus +// to describe the status of an assignment deletion request. +// // Returns awserr.Error for service API and SDK errors. Use runtime type assertions // with awserr.Error's Code and Message methods to get detailed information about // the error. diff --git a/service/ssoadmin/doc.go b/service/ssoadmin/doc.go index 8edbfe58fe..9363054aca 100644 --- a/service/ssoadmin/doc.go +++ b/service/ssoadmin/doc.go @@ -3,6 +3,33 @@ // Package ssoadmin provides the client and types for making API // requests to AWS Single Sign-On Admin. // +// Amazon Web Services Single Sign On helps you securely create, or connect, +// your workforce identities and manage their access centrally across Amazon +// Web Services accounts and applications. Amazon Web Services SSO is the recommended +// approach for workforce authentication and authorization in Amazon Web Services, +// for organizations of any size and type. +// +// Although Amazon Web Services Single Sign-On was renamed, the sso and identitystore +// API namespaces will continue to retain their original name for backward compatibility +// purposes. For more information, see Amazon Web Services SSO rename (https://docs.aws.amazon.com/singlesignon/latest/userguide/what-is.html#renamed). +// +// This reference guide provides information on single sign-on operations which +// could be used for access management of Amazon Web Services accounts. For +// information about Amazon Web Services SSO features, see the Amazon Web Services +// SSO User Guide (https://docs.aws.amazon.com/singlesignon/latest/userguide/what-is.html). +// +// Many operations in the Amazon Web Services SSO APIs rely on identifiers for +// users and groups, known as principals. For more information about how to +// work with principals and principal IDs in Amazon Web Services SSO, see the +// Identity Store API Reference (https://docs.aws.amazon.com/singlesignon/latest/IdentityStoreAPIReference/welcome.html). +// +// Amazon Web Services provides SDKs that consist of libraries and sample code +// for various programming languages and platforms (Java, Ruby, .Net, iOS, Android, +// and more). The SDKs provide a convenient way to create programmatic access +// to Amazon Web Services SSO and other Amazon Web Services services. For more +// information about the Amazon Web Services SDKs, including how to download +// and install them, see Tools for Amazon Web Services (http://aws.amazon.com/tools/). +// // See https://docs.aws.amazon.com/goto/WebAPI/sso-admin-2020-07-20 for more information on this service. // // See ssoadmin package documentation for more information.