AWS AppSync now supports a new authorization mode allowing you to define your own authorization logic using an AWS Lambda function.

Add support for KmsKeyIds in the ListSecretVersionIds API response

API changes with respect to Lambda steps in model building pipelines. Adds several waiters to async Sagemaker Image APIs. Add more instance types to AppInstanceType field

Client Port Preservation ALB Attribute Launch

Author: aws-sdk-cpp-automation

aws-cpp-sdk-appsync/include/aws/appsync/AppSyncClient.h

@@ -263,8 +263,8 @@ namespace Model
     typedef std::function<void(const AppSyncClient*, const Model::UpdateTypeRequest&, const Model::UpdateTypeOutcome&, const std::shared_ptr<const Aws::Client::AsyncCallerContext>&) > UpdateTypeResponseReceivedHandler;
 
   /**
-   * <p>AWS AppSync provides API actions for creating and interacting with data
-   * sources using GraphQL from your application.</p>
+   * <p>AppSync provides API actions for creating and interacting with data sources
+   * using GraphQL from your application.</p>
    */
   class AWS_APPSYNC_API AppSyncClient : public Aws::Client::AWSJsonClient
   {

aws-cpp-sdk-appsync/include/aws/appsync/model/AdditionalAuthenticationProvider.h

@@ -8,6 +8,7 @@
 #include <aws/appsync/model/AuthenticationType.h>
 #include <aws/appsync/model/OpenIDConnectConfig.h>
 #include <aws/appsync/model/CognitoUserPoolConfig.h>
+#include <aws/appsync/model/LambdaAuthorizerConfig.h>
 #include <utility>
 
 namespace Aws
@@ -41,38 +42,38 @@ namespace Model
 
 
     /**
-     * <p>The authentication type: API key, AWS IAM, OIDC, or Amazon Cognito user
-     * pools.</p>
+     * <p>The authentication type: API key, Identity and Access Management, OIDC, or
+     * Amazon Cognito user pools.</p>
      */
     inline const AuthenticationType& GetAuthenticationType() const{ return m_authenticationType; }
 
     /**
-     * <p>The authentication type: API key, AWS IAM, OIDC, or Amazon Cognito user
-     * pools.</p>
+     * <p>The authentication type: API key, Identity and Access Management, OIDC, or
+     * Amazon Cognito user pools.</p>
      */
     inline bool AuthenticationTypeHasBeenSet() const { return m_authenticationTypeHasBeenSet; }
 
     /**
-     * <p>The authentication type: API key, AWS IAM, OIDC, or Amazon Cognito user
-     * pools.</p>
+     * <p>The authentication type: API key, Identity and Access Management, OIDC, or
+     * Amazon Cognito user pools.</p>
      */
     inline void SetAuthenticationType(const AuthenticationType& value) { m_authenticationTypeHasBeenSet = true; m_authenticationType = value; }
 
     /**
-     * <p>The authentication type: API key, AWS IAM, OIDC, or Amazon Cognito user
-     * pools.</p>
+     * <p>The authentication type: API key, Identity and Access Management, OIDC, or
+     * Amazon Cognito user pools.</p>
      */
     inline void SetAuthenticationType(AuthenticationType&& value) { m_authenticationTypeHasBeenSet = true; m_authenticationType = std::move(value); }
 
     /**
-     * <p>The authentication type: API key, AWS IAM, OIDC, or Amazon Cognito user
-     * pools.</p>
+     * <p>The authentication type: API key, Identity and Access Management, OIDC, or
+     * Amazon Cognito user pools.</p>
      */
     inline AdditionalAuthenticationProvider& WithAuthenticationType(const AuthenticationType& value) { SetAuthenticationType(value); return *this;}
 
     /**
-     * <p>The authentication type: API key, AWS IAM, OIDC, or Amazon Cognito user
-     * pools.</p>
+     * <p>The authentication type: API key, Identity and Access Management, OIDC, or
+     * Amazon Cognito user pools.</p>
      */
     inline AdditionalAuthenticationProvider& WithAuthenticationType(AuthenticationType&& value) { SetAuthenticationType(std::move(value)); return *this;}
 
@@ -138,6 +139,37 @@ namespace Model
      */
     inline AdditionalAuthenticationProvider& WithUserPoolConfig(CognitoUserPoolConfig&& value) { SetUserPoolConfig(std::move(value)); return *this;}
 
+
+    /**
+     * <p>Configuration for AWS Lambda function authorization.</p>
+     */
+    inline const LambdaAuthorizerConfig& GetLambdaAuthorizerConfig() const{ return m_lambdaAuthorizerConfig; }
+
+    /**
+     * <p>Configuration for AWS Lambda function authorization.</p>
+     */
+    inline bool LambdaAuthorizerConfigHasBeenSet() const { return m_lambdaAuthorizerConfigHasBeenSet; }
+
+    /**
+     * <p>Configuration for AWS Lambda function authorization.</p>
+     */
+    inline void SetLambdaAuthorizerConfig(const LambdaAuthorizerConfig& value) { m_lambdaAuthorizerConfigHasBeenSet = true; m_lambdaAuthorizerConfig = value; }
+
+    /**
+     * <p>Configuration for AWS Lambda function authorization.</p>
+     */
+    inline void SetLambdaAuthorizerConfig(LambdaAuthorizerConfig&& value) { m_lambdaAuthorizerConfigHasBeenSet = true; m_lambdaAuthorizerConfig = std::move(value); }
+
+    /**
+     * <p>Configuration for AWS Lambda function authorization.</p>
+     */
+    inline AdditionalAuthenticationProvider& WithLambdaAuthorizerConfig(const LambdaAuthorizerConfig& value) { SetLambdaAuthorizerConfig(value); return *this;}
+
+    /**
+     * <p>Configuration for AWS Lambda function authorization.</p>
+     */
+    inline AdditionalAuthenticationProvider& WithLambdaAuthorizerConfig(LambdaAuthorizerConfig&& value) { SetLambdaAuthorizerConfig(std::move(value)); return *this;}
+
   private:
 
     AuthenticationType m_authenticationType;
@@ -148,6 +180,9 @@ namespace Model
 
     CognitoUserPoolConfig m_userPoolConfig;
     bool m_userPoolConfigHasBeenSet;
+
+    LambdaAuthorizerConfig m_lambdaAuthorizerConfig;
+    bool m_lambdaAuthorizerConfigHasBeenSet;
   };
 
 } // namespace Model

aws-cpp-sdk-appsync/include/aws/appsync/model/ApiKey.h

@@ -24,35 +24,34 @@ namespace Model
 {
 
   /**
-   * <p>Describes an API key.</p> <p>Customers invoke AWS AppSync GraphQL API
-   * operations with API keys as an identity mechanism. There are two key
-   * versions:</p> <p> <b>da1</b>: This version was introduced at launch in November
-   * 2017. These keys always expire after 7 days. Key expiration is managed by Amazon
-   * DynamoDB TTL. The keys ceased to be valid after February 21, 2018 and should not
-   * be used after that date.</p> <ul> <li> <p> <code>ListApiKeys</code> returns the
-   * expiration time in milliseconds.</p> </li> <li> <p> <code>CreateApiKey</code>
-   * returns the expiration time in milliseconds.</p> </li> <li> <p>
-   * <code>UpdateApiKey</code> is not available for this key version.</p> </li> <li>
-   * <p> <code>DeleteApiKey</code> deletes the item from the table.</p> </li> <li>
-   * <p>Expiration is stored in Amazon DynamoDB as milliseconds. This results in a
-   * bug where keys are not automatically deleted because DynamoDB expects the TTL to
-   * be stored in seconds. As a one-time action, we will delete these keys from the
-   * table after February 21, 2018.</p> </li> </ul> <p> <b>da2</b>: This version was
-   * introduced in February 2018 when AppSync added support to extend key
-   * expiration.</p> <ul> <li> <p> <code>ListApiKeys</code> returns the expiration
-   * time and deletion time in seconds.</p> </li> <li> <p> <code>CreateApiKey</code>
-   * returns the expiration time and deletion time in seconds and accepts a
-   * user-provided expiration time in seconds.</p> </li> <li> <p>
-   * <code>UpdateApiKey</code> returns the expiration time and and deletion time in
-   * seconds and accepts a user-provided expiration time in seconds. Expired API keys
-   * are kept for 60 days after the expiration time. Key expiration time can be
-   * updated while the key is not deleted. </p> </li> <li> <p>
-   * <code>DeleteApiKey</code> deletes the item from the table.</p> </li> <li>
-   * <p>Expiration is stored in Amazon DynamoDB as seconds. After the expiration
-   * time, using the key to authenticate will fail. But the key can be reinstated
-   * before deletion.</p> </li> <li> <p>Deletion is stored in Amazon DynamoDB as
-   * seconds. The key will be deleted after deletion time. </p> </li> </ul><p><h3>See
-   * Also:</h3>   <a
+   * <p>Describes an API key.</p> <p>Customers invoke AppSync GraphQL API operations
+   * with API keys as an identity mechanism. There are two key versions:</p> <p>
+   * <b>da1</b>: This version was introduced at launch in November 2017. These keys
+   * always expire after 7 days. Key expiration is managed by Amazon DynamoDB TTL.
+   * The keys ceased to be valid after February 21, 2018 and should not be used after
+   * that date.</p> <ul> <li> <p> <code>ListApiKeys</code> returns the expiration
+   * time in milliseconds.</p> </li> <li> <p> <code>CreateApiKey</code> returns the
+   * expiration time in milliseconds.</p> </li> <li> <p> <code>UpdateApiKey</code> is
+   * not available for this key version.</p> </li> <li> <p> <code>DeleteApiKey</code>
+   * deletes the item from the table.</p> </li> <li> <p>Expiration is stored in
+   * Amazon DynamoDB as milliseconds. This results in a bug where keys are not
+   * automatically deleted because DynamoDB expects the TTL to be stored in seconds.
+   * As a one-time action, we will delete these keys from the table after February
+   * 21, 2018.</p> </li> </ul> <p> <b>da2</b>: This version was introduced in
+   * February 2018 when AppSync added support to extend key expiration.</p> <ul> <li>
+   * <p> <code>ListApiKeys</code> returns the expiration time and deletion time in
+   * seconds.</p> </li> <li> <p> <code>CreateApiKey</code> returns the expiration
+   * time and deletion time in seconds and accepts a user-provided expiration time in
+   * seconds.</p> </li> <li> <p> <code>UpdateApiKey</code> returns the expiration
+   * time and and deletion time in seconds and accepts a user-provided expiration
+   * time in seconds. Expired API keys are kept for 60 days after the expiration
+   * time. Key expiration time can be updated while the key is not deleted. </p>
+   * </li> <li> <p> <code>DeleteApiKey</code> deletes the item from the table.</p>
+   * </li> <li> <p>Expiration is stored in Amazon DynamoDB as seconds. After the
+   * expiration time, using the key to authenticate will fail. But the key can be
+   * reinstated before deletion.</p> </li> <li> <p>Deletion is stored in Amazon
+   * DynamoDB as seconds. The key will be deleted after deletion time. </p> </li>
+   * </ul><p><h3>See Also:</h3>   <a
    * href="http://docs.aws.amazon.com/goto/WebAPI/appsync-2017-07-25/ApiKey">AWS API
    * Reference</a></p>
    */

aws-cpp-sdk-appsync/include/aws/appsync/model/AuthenticationType.h

@@ -19,7 +19,8 @@ namespace Model
     API_KEY,
     AWS_IAM,
     AMAZON_COGNITO_USER_POOLS,
-    OPENID_CONNECT
+    OPENID_CONNECT,
+    AWS_LAMBDA
   };
 
 namespace AuthenticationTypeMapper

aws-cpp-sdk-appsync/include/aws/appsync/model/AuthorizationConfig.h

@@ -77,32 +77,32 @@ namespace Model
 
 
     /**
-     * <p>The AWS IAM settings.</p>
+     * <p>The Identity and Access Management settings.</p>
      */
     inline const AwsIamConfig& GetAwsIamConfig() const{ return m_awsIamConfig; }
 
     /**
-     * <p>The AWS IAM settings.</p>
+     * <p>The Identity and Access Management settings.</p>
      */
     inline bool AwsIamConfigHasBeenSet() const { return m_awsIamConfigHasBeenSet; }
 
     /**
-     * <p>The AWS IAM settings.</p>
+     * <p>The Identity and Access Management settings.</p>
      */
     inline void SetAwsIamConfig(const AwsIamConfig& value) { m_awsIamConfigHasBeenSet = true; m_awsIamConfig = value; }
 
     /**
-     * <p>The AWS IAM settings.</p>
+     * <p>The Identity and Access Management settings.</p>
      */
     inline void SetAwsIamConfig(AwsIamConfig&& value) { m_awsIamConfigHasBeenSet = true; m_awsIamConfig = std::move(value); }
 
     /**
-     * <p>The AWS IAM settings.</p>
+     * <p>The Identity and Access Management settings.</p>
      */
     inline AuthorizationConfig& WithAwsIamConfig(const AwsIamConfig& value) { SetAwsIamConfig(value); return *this;}
 
     /**
-     * <p>The AWS IAM settings.</p>
+     * <p>The Identity and Access Management settings.</p>
      */
     inline AuthorizationConfig& WithAwsIamConfig(AwsIamConfig&& value) { SetAwsIamConfig(std::move(value)); return *this;}
 

aws-cpp-sdk-appsync/include/aws/appsync/model/AwsIamConfig.h

@@ -24,7 +24,8 @@ namespace Model
 {
 
   /**
-   * <p>The AWS IAM configuration.</p><p><h3>See Also:</h3>   <a
+   * <p>The Identity and Access Management configuration.</p><p><h3>See Also:</h3>  
+   * <a
    * href="http://docs.aws.amazon.com/goto/WebAPI/appsync-2017-07-25/AwsIamConfig">AWS
    * API Reference</a></p>
    */
@@ -38,83 +39,91 @@ namespace Model
 
 
     /**
-     * <p>The signing region for AWS IAM authorization.</p>
+     * <p>The signing region for Identity and Access Management authorization.</p>
      */
     inline const Aws::String& GetSigningRegion() const{ return m_signingRegion; }
 
     /**
-     * <p>The signing region for AWS IAM authorization.</p>
+     * <p>The signing region for Identity and Access Management authorization.</p>
      */
     inline bool SigningRegionHasBeenSet() const { return m_signingRegionHasBeenSet; }
 
     /**
-     * <p>The signing region for AWS IAM authorization.</p>
+     * <p>The signing region for Identity and Access Management authorization.</p>
      */
     inline void SetSigningRegion(const Aws::String& value) { m_signingRegionHasBeenSet = true; m_signingRegion = value; }
 
     /**
-     * <p>The signing region for AWS IAM authorization.</p>
+     * <p>The signing region for Identity and Access Management authorization.</p>
      */
     inline void SetSigningRegion(Aws::String&& value) { m_signingRegionHasBeenSet = true; m_signingRegion = std::move(value); }
 
     /**
-     * <p>The signing region for AWS IAM authorization.</p>
+     * <p>The signing region for Identity and Access Management authorization.</p>
      */
     inline void SetSigningRegion(const char* value) { m_signingRegionHasBeenSet = true; m_signingRegion.assign(value); }
 
     /**
-     * <p>The signing region for AWS IAM authorization.</p>
+     * <p>The signing region for Identity and Access Management authorization.</p>
      */
     inline AwsIamConfig& WithSigningRegion(const Aws::String& value) { SetSigningRegion(value); return *this;}
 
     /**
-     * <p>The signing region for AWS IAM authorization.</p>
+     * <p>The signing region for Identity and Access Management authorization.</p>
      */
     inline AwsIamConfig& WithSigningRegion(Aws::String&& value) { SetSigningRegion(std::move(value)); return *this;}
 
     /**
-     * <p>The signing region for AWS IAM authorization.</p>
+     * <p>The signing region for Identity and Access Management authorization.</p>
      */
     inline AwsIamConfig& WithSigningRegion(const char* value) { SetSigningRegion(value); return *this;}
 
 
     /**
-     * <p>The signing service name for AWS IAM authorization.</p>
+     * <p>The signing service name for Identity and Access Management
+     * authorization.</p>
      */
     inline const Aws::String& GetSigningServiceName() const{ return m_signingServiceName; }
 
     /**
-     * <p>The signing service name for AWS IAM authorization.</p>
+     * <p>The signing service name for Identity and Access Management
+     * authorization.</p>
      */
     inline bool SigningServiceNameHasBeenSet() const { return m_signingServiceNameHasBeenSet; }
 
     /**
-     * <p>The signing service name for AWS IAM authorization.</p>
+     * <p>The signing service name for Identity and Access Management
+     * authorization.</p>
      */
     inline void SetSigningServiceName(const Aws::String& value) { m_signingServiceNameHasBeenSet = true; m_signingServiceName = value; }
 
     /**
-     * <p>The signing service name for AWS IAM authorization.</p>
+     * <p>The signing service name for Identity and Access Management
+     * authorization.</p>
      */
     inline void SetSigningServiceName(Aws::String&& value) { m_signingServiceNameHasBeenSet = true; m_signingServiceName = std::move(value); }
 
     /**
-     * <p>The signing service name for AWS IAM authorization.</p>
+     * <p>The signing service name for Identity and Access Management
+     * authorization.</p>
      */
     inline void SetSigningServiceName(const char* value) { m_signingServiceNameHasBeenSet = true; m_signingServiceName.assign(value); }
 
     /**
-     * <p>The signing service name for AWS IAM authorization.</p>
+     * <p>The signing service name for Identity and Access Management
+     * authorization.</p>
      */
     inline AwsIamConfig& WithSigningServiceName(const Aws::String& value) { SetSigningServiceName(value); return *this;}
 
     /**
-     * <p>The signing service name for AWS IAM authorization.</p>
+     * <p>The signing service name for Identity and Access Management
+     * authorization.</p>
      */
     inline AwsIamConfig& WithSigningServiceName(Aws::String&& value) { SetSigningServiceName(std::move(value)); return *this;}
 
     /**
-     * <p>The signing service name for AWS IAM authorization.</p>
+     * <p>The signing service name for Identity and Access Management
+     * authorization.</p>
      */
     inline AwsIamConfig& WithSigningServiceName(const char* value) { SetSigningServiceName(value); return *this;}
 

aws-cpp-sdk-appsync/include/aws/appsync/model/CognitoUserPoolConfig.h

@@ -80,42 +80,42 @@ namespace Model
 
 
     /**
-     * <p>The AWS Region in which the user pool was created.</p>
+     * <p>The Amazon Web Services Region in which the user pool was created.</p>
      */
     inline const Aws::String& GetAwsRegion() const{ return m_awsRegion; }
 
     /**
-     * <p>The AWS Region in which the user pool was created.</p>
+     * <p>The Amazon Web Services Region in which the user pool was created.</p>
      */
     inline bool AwsRegionHasBeenSet() const { return m_awsRegionHasBeenSet; }
 
     /**
-     * <p>The AWS Region in which the user pool was created.</p>
+     * <p>The Amazon Web Services Region in which the user pool was created.</p>
      */
     inline void SetAwsRegion(const Aws::String& value) { m_awsRegionHasBeenSet = true; m_awsRegion = value; }
 
     /**
-     * <p>The AWS Region in which the user pool was created.</p>
+     * <p>The Amazon Web Services Region in which the user pool was created.</p>
      */
     inline void SetAwsRegion(Aws::String&& value) { m_awsRegionHasBeenSet = true; m_awsRegion = std::move(value); }
 
     /**
-     * <p>The AWS Region in which the user pool was created.</p>
+     * <p>The Amazon Web Services Region in which the user pool was created.</p>
      */
     inline void SetAwsRegion(const char* value) { m_awsRegionHasBeenSet = true; m_awsRegion.assign(value); }
 
     /**
-     * <p>The AWS Region in which the user pool was created.</p>
+     * <p>The Amazon Web Services Region in which the user pool was created.</p>
      */
     inline CognitoUserPoolConfig& WithAwsRegion(const Aws::String& value) { SetAwsRegion(value); return *this;}
 
     /**
-     * <p>The AWS Region in which the user pool was created.</p>
+     * <p>The Amazon Web Services Region in which the user pool was created.</p>
      */
     inline CognitoUserPoolConfig& WithAwsRegion(Aws::String&& value) { SetAwsRegion(std::move(value)); return *this;}
 
     /**
-     * <p>The AWS Region in which the user pool was created.</p>
+     * <p>The Amazon Web Services Region in which the user pool was created.</p>
      */
     inline CognitoUserPoolConfig& WithAwsRegion(const char* value) { SetAwsRegion(value); return *this;}