Skip to content

Commit a75a841

Browse files
author
AWS
committed
AWS Storage Gateway Update: Adding support for access based enumeration on SMB file shares, file share visibility on SMB file shares, and file upload notifications for all file shares
1 parent fb80853 commit a75a841

File tree

2 files changed

+88
-2
lines changed

2 files changed

+88
-2
lines changed

‎.changes/next-release/feature-AWSStorageGateway-1308059.json

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
{
2+
"type": "feature",
3+
"category": "AWS Storage Gateway",
4+
"contributor": "",
5+
"description": "Adding support for access based enumeration on SMB file shares, file share visibility on SMB file shares, and file upload notifications for all file shares"
6+
}

‎services/storagegateway/src/main/resources/codegen-resources/service-2.json

Lines changed: 82 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1090,7 +1090,7 @@
10901090
{"shape":"InvalidGatewayRequestException"},
10911091
{"shape":"InternalServerError"}
10921092
],
1093-
"documentation":"<p>Updates a Network File System (NFS) file share. This operation is only supported in the file gateway type.</p> <note> <p>To leave a file share field unchanged, set the corresponding input field to null.</p> </note> <p>Updates the following file share setting:</p> <ul> <li> <p>Default storage class for your S3 bucket</p> </li> <li> <p>Metadata defaults for your S3 bucket</p> </li> <li> <p>Allowed NFS clients for your file share</p> </li> <li> <p>Squash settings</p> </li> <li> <p>Write status of your file share</p> </li> </ul> <note> <p>To leave a file share field unchanged, set the corresponding input field to null. This operation is only supported in file gateways.</p> </note>"
1093+
"documentation":"<p>Updates a Network File System (NFS) file share. This operation is only supported in the file gateway type.</p> <note> <p>To leave a file share field unchanged, set the corresponding input field to null.</p> </note> <p>Updates the following file share settings:</p> <ul> <li> <p>Default storage class for your S3 bucket</p> </li> <li> <p>Metadata defaults for your S3 bucket</p> </li> <li> <p>Allowed NFS clients for your file share</p> </li> <li> <p>Squash settings</p> </li> <li> <p>Write status of your file share</p> </li> </ul>"
10941094
},
10951095
"UpdateSMBFileShare":{
10961096
"name":"UpdateSMBFileShare",
@@ -1104,7 +1104,21 @@
11041104
{"shape":"InvalidGatewayRequestException"},
11051105
{"shape":"InternalServerError"}
11061106
],
1107-
"documentation":"<p>Updates a Server Message Block (SMB) file share.</p> <note> <p>To leave a file share field unchanged, set the corresponding input field to null. This operation is only supported for file gateways.</p> </note> <important> <p>File gateways require AWS Security Token Service (AWS STS) to be activated to enable you to create a file share. Make sure that AWS STS is activated in the AWS Region you are creating your file gateway in. If AWS STS is not activated in this AWS Region, activate it. For information about how to activate AWS STS, see <a href=\"https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_enable-regions.html\">Activating and deactivating AWS STS in an AWS Region</a> in the <i>AWS Identity and Access Management User Guide</i>.</p> <p>File gateways don't support creating hard or symbolic links on a file share.</p> </important>"
1107+
"documentation":"<p>Updates a Server Message Block (SMB) file share. This operation is only supported for file gateways.</p> <note> <p>To leave a file share field unchanged, set the corresponding input field to null.</p> </note> <important> <p>File gateways require AWS Security Token Service (AWS STS) to be activated to enable you to create a file share. Make sure that AWS STS is activated in the AWS Region you are creating your file gateway in. If AWS STS is not activated in this AWS Region, activate it. For information about how to activate AWS STS, see <a href=\"https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_enable-regions.html\">Activating and deactivating AWS STS in an AWS Region</a> in the <i>AWS Identity and Access Management User Guide</i>.</p> <p>File gateways don't support creating hard or symbolic links on a file share.</p> </important>"
1108+
},
1109+
"UpdateSMBFileShareVisibility":{
1110+
"name":"UpdateSMBFileShareVisibility",
1111+
"http":{
1112+
"method":"POST",
1113+
"requestUri":"/"
1114+
},
1115+
"input":{"shape":"UpdateSMBFileShareVisibilityInput"},
1116+
"output":{"shape":"UpdateSMBFileShareVisibilityOutput"},
1117+
"errors":[
1118+
{"shape":"InvalidGatewayRequestException"},
1119+
{"shape":"InternalServerError"}
1120+
],
1121+
"documentation":"<p>Controls whether the shares on a gateway are visible in a net view or browse list.</p>"
11081122
},
11091123
"UpdateSMBSecurityStrategy":{
11101124
"name":"UpdateSMBSecurityStrategy",
@@ -1774,6 +1788,10 @@
17741788
"CacheAttributes":{
17751789
"shape":"CacheAttributes",
17761790
"documentation":"<p>Refresh cache information.</p>"
1791+
},
1792+
"NotificationPolicy":{
1793+
"shape":"NotificationPolicy",
1794+
"documentation":"<p>The notification policy of the file share.</p>"
17771795
}
17781796
},
17791797
"documentation":"<p>CreateNFSFileShareInput</p>"
@@ -1845,6 +1863,10 @@
18451863
"shape":"Boolean",
18461864
"documentation":"<p>Set this value to <code>true</code> to enable access control list (ACL) on the SMB file share. Set it to <code>false</code> to map file and directory permissions to the POSIX permissions.</p> <p>For more information, see <a href=\"https://docs.aws.amazon.com/storagegateway/latest/userguide/smb-acl.html\">Using Microsoft Windows ACLs to control access to an SMB file share</a> in the <i>AWS Storage Gateway User Guide</i>.</p> <p>Valid Values: <code>true</code> | <code>false</code> </p>"
18471865
},
1866+
"AccessBasedEnumeration":{
1867+
"shape":"Boolean",
1868+
"documentation":"<p>The files and folders on this share will only be visible to users with read access.</p>"
1869+
},
18481870
"AdminUserList":{
18491871
"shape":"FileShareUserList",
18501872
"documentation":"<p>A list of users or groups in the Active Directory that will be granted administrator privileges on the file share. These users can do all file operations as the super-user. Acceptable formats include: <code>DOMAIN\\User1</code>, <code>user1</code>, <code>@group1</code>, and <code>@DOMAIN\\group1</code>.</p> <important> <p>Use this option very carefully, because any user in this list can do anything they like on the file share, regardless of file permissions.</p> </important>"
@@ -1880,6 +1902,10 @@
18801902
"CacheAttributes":{
18811903
"shape":"CacheAttributes",
18821904
"documentation":"<p>Refresh cache information.</p>"
1905+
},
1906+
"NotificationPolicy":{
1907+
"shape":"NotificationPolicy",
1908+
"documentation":"<p>The notification policy of the file share.</p>"
18831909
}
18841910
},
18851911
"documentation":"<p>CreateSMBFileShareInput</p>"
@@ -2733,6 +2759,10 @@
27332759
"SMBSecurityStrategy":{
27342760
"shape":"SMBSecurityStrategy",
27352761
"documentation":"<p>The type of security strategy that was specified for file gateway.</p> <ul> <li> <p> <code>ClientSpecified</code>: If you use this option, requests are established based on what is negotiated by the client. This option is recommended when you want to maximize compatibility across different clients in your environment.</p> </li> <li> <p> <code>MandatorySigning</code>: If you use this option, file gateway only allows connections from SMBv2 or SMBv3 clients that have signing enabled. This option works with SMB clients on Microsoft Windows Vista, Windows Server 2008 or newer.</p> </li> <li> <p> <code>MandatoryEncryption</code>: If you use this option, file gateway only allows connections from SMBv3 clients that have encryption enabled. This option is highly recommended for environments that handle sensitive data. This option works with SMB clients on Microsoft Windows 8, Windows Server 2012 or newer.</p> </li> </ul>"
2762+
},
2763+
"FileSharesVisible":{
2764+
"shape":"Boolean",
2765+
"documentation":"<p>The shares on this gateway appear when listing shares.</p>"
27362766
}
27372767
}
27382768
},
@@ -3871,6 +3901,10 @@
38713901
"CacheAttributes":{
38723902
"shape":"CacheAttributes",
38733903
"documentation":"<p>Refresh cache information.</p>"
3904+
},
3905+
"NotificationPolicy":{
3906+
"shape":"NotificationPolicy",
3907+
"documentation":"<p>The notification policy of the file share.</p>"
38743908
}
38753909
},
38763910
"documentation":"<p>The Unix file permissions and ownership information assigned, by default, to native S3 objects when file gateway discovers them in S3 buckets. This operation is only supported in file gateways.</p>"
@@ -3912,6 +3946,12 @@
39123946
"max":2048,
39133947
"min":1
39143948
},
3949+
"NotificationPolicy":{
3950+
"type":"string",
3951+
"max":100,
3952+
"min":2,
3953+
"pattern":"^\\{[\\w\\s:\\{\\}\\[\\]\"]*}$"
3954+
},
39153955
"NotifyWhenUploadedInput":{
39163956
"type":"structure",
39173957
"required":["FileShareARN"],
@@ -4224,6 +4264,10 @@
42244264
"shape":"Boolean",
42254265
"documentation":"<p>If this value is set to <code>true</code>, it indicates that access control list (ACL) is enabled on the SMB file share. If it is set to <code>false</code>, it indicates that file and directory permissions are mapped to the POSIX permission.</p> <p>For more information, see <a href=\"https://docs.aws.amazon.com/storagegateway/latest/userguide/smb-acl.html\">Using Microsoft Windows ACLs to control access to an SMB file share</a> in the <i>AWS Storage Gateway User Guide</i>.</p>"
42264266
},
4267+
"AccessBasedEnumeration":{
4268+
"shape":"Boolean",
4269+
"documentation":"<p>Indicates whether <code>AccessBasedEnumeration</code> is enabled.</p>"
4270+
},
42274271
"AdminUserList":{
42284272
"shape":"FileShareUserList",
42294273
"documentation":"<p>A list of users or groups in the Active Directory that have administrator rights to the file share. A group must be prefixed with the @ character. Acceptable formats include: <code>DOMAIN\\User1</code>, <code>user1</code>, <code>@group1</code>, and <code>@DOMAIN\\group1</code>. Can only be set if Authentication is set to <code>ActiveDirectory</code>.</p>"
@@ -4256,6 +4300,10 @@
42564300
"CacheAttributes":{
42574301
"shape":"CacheAttributes",
42584302
"documentation":"<p>Refresh cache information.</p>"
4303+
},
4304+
"NotificationPolicy":{
4305+
"shape":"NotificationPolicy",
4306+
"documentation":"<p>The notification policy of the file share.</p>"
42594307
}
42604308
},
42614309
"documentation":"<p>The Windows file permissions and ownership information assigned, by default, to native S3 objects when file gateway discovers them in S3 buckets. This operation is only supported for file gateways.</p>"
@@ -4985,6 +5033,10 @@
49855033
"CacheAttributes":{
49865034
"shape":"CacheAttributes",
49875035
"documentation":"<p>Refresh cache information.</p>"
5036+
},
5037+
"NotificationPolicy":{
5038+
"shape":"NotificationPolicy",
5039+
"documentation":"<p>The notification policy of the file share.</p>"
49885040
}
49895041
},
49905042
"documentation":"<p>UpdateNFSFileShareInput</p>"
@@ -5039,6 +5091,10 @@
50395091
"shape":"Boolean",
50405092
"documentation":"<p>Set this value to <code>true</code> to enable access control list (ACL) on the SMB file share. Set it to <code>false</code> to map file and directory permissions to the POSIX permissions.</p> <p>For more information, see <a href=\"https://docs.aws.amazon.com/storagegateway/latest/userguide/smb-acl.html\">Using Microsoft Windows ACLs to control access to an SMB file share</a> in the <i>AWS Storage Gateway User Guide</i>.</p> <p>Valid Values: <code>true</code> | <code>false</code> </p>"
50415093
},
5094+
"AccessBasedEnumeration":{
5095+
"shape":"Boolean",
5096+
"documentation":"<p>The files and folders on this share will only be visible to users with read access.</p>"
5097+
},
50425098
"AdminUserList":{
50435099
"shape":"FileShareUserList",
50445100
"documentation":"<p>A list of users or groups in the Active Directory that have administrator rights to the file share. A group must be prefixed with the @ character. Acceptable formats include: <code>DOMAIN\\User1</code>, <code>user1</code>, <code>@group1</code>, and <code>@DOMAIN\\group1</code>. Can only be set if Authentication is set to <code>ActiveDirectory</code>.</p>"
@@ -5066,6 +5122,10 @@
50665122
"CacheAttributes":{
50675123
"shape":"CacheAttributes",
50685124
"documentation":"<p>Refresh cache information.</p>"
5125+
},
5126+
"NotificationPolicy":{
5127+
"shape":"NotificationPolicy",
5128+
"documentation":"<p>The notification policy of the file share.</p>"
50695129
}
50705130
},
50715131
"documentation":"<p>UpdateSMBFileShareInput</p>"
@@ -5080,6 +5140,26 @@
50805140
},
50815141
"documentation":"<p>UpdateSMBFileShareOutput</p>"
50825142
},
5143+
"UpdateSMBFileShareVisibilityInput":{
5144+
"type":"structure",
5145+
"required":[
5146+
"GatewayARN",
5147+
"FileSharesVisible"
5148+
],
5149+
"members":{
5150+
"GatewayARN":{"shape":"GatewayARN"},
5151+
"FileSharesVisible":{
5152+
"shape":"Boolean",
5153+
"documentation":"<p>The shares on this gateway appear when listing shares.</p>"
5154+
}
5155+
}
5156+
},
5157+
"UpdateSMBFileShareVisibilityOutput":{
5158+
"type":"structure",
5159+
"members":{
5160+
"GatewayARN":{"shape":"GatewayARN"}
5161+
}
5162+
},
50835163
"UpdateSMBSecurityStrategyInput":{
50845164
"type":"structure",
50855165
"required":[

0 commit comments

Comments
 (0)