Skip to content

Commit 29c5d21

Browse files
author
awstools
committed
feat(client-securitylake): Add capability to update the Data Lake's MetaStoreManager Role in order to perform required data lake updates to use Iceberg table format in their data lake or update the role for any other reason.
1 parent 06093eb commit 29c5d21

14 files changed

+71
-27
lines changed

‎clients/client-securitylake/src/commands/CreateAwsLogSourceCommand.ts

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -50,7 +50,7 @@ export interface CreateAwsLogSourceCommandOutput extends CreateAwsLogSourceRespo
5050
* regions: [ // RegionList // required
5151
* "STRING_VALUE",
5252
* ],
53-
* sourceName: "ROUTE53" || "VPC_FLOW" || "SH_FINDINGS" || "CLOUD_TRAIL_MGMT" || "LAMBDA_EXECUTION" || "S3_DATA", // required
53+
* sourceName: "ROUTE53" || "VPC_FLOW" || "SH_FINDINGS" || "CLOUD_TRAIL_MGMT" || "LAMBDA_EXECUTION" || "S3_DATA" || "EKS_AUDIT" || "WAF", // required
5454
* sourceVersion: "STRING_VALUE",
5555
* },
5656
* ],

‎clients/client-securitylake/src/commands/CreateDataLakeOrganizationConfigurationCommand.ts

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -47,12 +47,12 @@ export interface CreateDataLakeOrganizationConfigurationCommandOutput
4747
* // const { SecurityLakeClient, CreateDataLakeOrganizationConfigurationCommand } = require("@aws-sdk/client-securitylake"); // CommonJS import
4848
* const client = new SecurityLakeClient(config);
4949
* const input = { // CreateDataLakeOrganizationConfigurationRequest
50-
* autoEnableNewAccount: [ // DataLakeAutoEnableNewAccountConfigurationList // required
50+
* autoEnableNewAccount: [ // DataLakeAutoEnableNewAccountConfigurationList
5151
* { // DataLakeAutoEnableNewAccountConfiguration
5252
* region: "STRING_VALUE", // required
5353
* sources: [ // AwsLogSourceResourceList // required
5454
* { // AwsLogSourceResource
55-
* sourceName: "ROUTE53" || "VPC_FLOW" || "SH_FINDINGS" || "CLOUD_TRAIL_MGMT" || "LAMBDA_EXECUTION" || "S3_DATA",
55+
* sourceName: "ROUTE53" || "VPC_FLOW" || "SH_FINDINGS" || "CLOUD_TRAIL_MGMT" || "LAMBDA_EXECUTION" || "S3_DATA" || "EKS_AUDIT" || "WAF",
5656
* sourceVersion: "STRING_VALUE",
5757
* },
5858
* ],

‎clients/client-securitylake/src/commands/CreateSubscriberCommand.ts

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -46,7 +46,7 @@ export interface CreateSubscriberCommandOutput extends CreateSubscriberResponse,
4646
* sources: [ // LogSourceResourceList // required
4747
* { // LogSourceResource Union: only one key present
4848
* awsLogSource: { // AwsLogSourceResource
49-
* sourceName: "ROUTE53" || "VPC_FLOW" || "SH_FINDINGS" || "CLOUD_TRAIL_MGMT" || "LAMBDA_EXECUTION" || "S3_DATA",
49+
* sourceName: "ROUTE53" || "VPC_FLOW" || "SH_FINDINGS" || "CLOUD_TRAIL_MGMT" || "LAMBDA_EXECUTION" || "S3_DATA" || "EKS_AUDIT" || "WAF",
5050
* sourceVersion: "STRING_VALUE",
5151
* },
5252
* customLogSource: { // CustomLogSourceResource
@@ -89,7 +89,7 @@ export interface CreateSubscriberCommandOutput extends CreateSubscriberResponse,
8989
* // sources: [ // LogSourceResourceList // required
9090
* // { // LogSourceResource Union: only one key present
9191
* // awsLogSource: { // AwsLogSourceResource
92-
* // sourceName: "ROUTE53" || "VPC_FLOW" || "SH_FINDINGS" || "CLOUD_TRAIL_MGMT" || "LAMBDA_EXECUTION" || "S3_DATA",
92+
* // sourceName: "ROUTE53" || "VPC_FLOW" || "SH_FINDINGS" || "CLOUD_TRAIL_MGMT" || "LAMBDA_EXECUTION" || "S3_DATA" || "EKS_AUDIT" || "WAF",
9393
* // sourceVersion: "STRING_VALUE",
9494
* // },
9595
* // customLogSource: { // CustomLogSourceResource

‎clients/client-securitylake/src/commands/DeleteAwsLogSourceCommand.ts

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -50,7 +50,7 @@ export interface DeleteAwsLogSourceCommandOutput extends DeleteAwsLogSourceRespo
5050
* regions: [ // RegionList // required
5151
* "STRING_VALUE",
5252
* ],
53-
* sourceName: "ROUTE53" || "VPC_FLOW" || "SH_FINDINGS" || "CLOUD_TRAIL_MGMT" || "LAMBDA_EXECUTION" || "S3_DATA", // required
53+
* sourceName: "ROUTE53" || "VPC_FLOW" || "SH_FINDINGS" || "CLOUD_TRAIL_MGMT" || "LAMBDA_EXECUTION" || "S3_DATA" || "EKS_AUDIT" || "WAF", // required
5454
* sourceVersion: "STRING_VALUE",
5555
* },
5656
* ],

‎clients/client-securitylake/src/commands/DeleteDataLakeOrganizationConfigurationCommand.ts

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -47,12 +47,12 @@ export interface DeleteDataLakeOrganizationConfigurationCommandOutput
4747
* // const { SecurityLakeClient, DeleteDataLakeOrganizationConfigurationCommand } = require("@aws-sdk/client-securitylake"); // CommonJS import
4848
* const client = new SecurityLakeClient(config);
4949
* const input = { // DeleteDataLakeOrganizationConfigurationRequest
50-
* autoEnableNewAccount: [ // DataLakeAutoEnableNewAccountConfigurationList // required
50+
* autoEnableNewAccount: [ // DataLakeAutoEnableNewAccountConfigurationList
5151
* { // DataLakeAutoEnableNewAccountConfiguration
5252
* region: "STRING_VALUE", // required
5353
* sources: [ // AwsLogSourceResourceList // required
5454
* { // AwsLogSourceResource
55-
* sourceName: "ROUTE53" || "VPC_FLOW" || "SH_FINDINGS" || "CLOUD_TRAIL_MGMT" || "LAMBDA_EXECUTION" || "S3_DATA",
55+
* sourceName: "ROUTE53" || "VPC_FLOW" || "SH_FINDINGS" || "CLOUD_TRAIL_MGMT" || "LAMBDA_EXECUTION" || "S3_DATA" || "EKS_AUDIT" || "WAF",
5656
* sourceVersion: "STRING_VALUE",
5757
* },
5858
* ],

‎clients/client-securitylake/src/commands/GetDataLakeOrganizationConfigurationCommand.ts

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -54,7 +54,7 @@ export interface GetDataLakeOrganizationConfigurationCommandOutput
5454
* // region: "STRING_VALUE", // required
5555
* // sources: [ // AwsLogSourceResourceList // required
5656
* // { // AwsLogSourceResource
57-
* // sourceName: "ROUTE53" || "VPC_FLOW" || "SH_FINDINGS" || "CLOUD_TRAIL_MGMT" || "LAMBDA_EXECUTION" || "S3_DATA",
57+
* // sourceName: "ROUTE53" || "VPC_FLOW" || "SH_FINDINGS" || "CLOUD_TRAIL_MGMT" || "LAMBDA_EXECUTION" || "S3_DATA" || "EKS_AUDIT" || "WAF",
5858
* // sourceVersion: "STRING_VALUE",
5959
* // },
6060
* // ],

‎clients/client-securitylake/src/commands/GetSubscriberCommand.ts

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -54,7 +54,7 @@ export interface GetSubscriberCommandOutput extends GetSubscriberResponse, __Met
5454
* // sources: [ // LogSourceResourceList // required
5555
* // { // LogSourceResource Union: only one key present
5656
* // awsLogSource: { // AwsLogSourceResource
57-
* // sourceName: "ROUTE53" || "VPC_FLOW" || "SH_FINDINGS" || "CLOUD_TRAIL_MGMT" || "LAMBDA_EXECUTION" || "S3_DATA",
57+
* // sourceName: "ROUTE53" || "VPC_FLOW" || "SH_FINDINGS" || "CLOUD_TRAIL_MGMT" || "LAMBDA_EXECUTION" || "S3_DATA" || "EKS_AUDIT" || "WAF",
5858
* // sourceVersion: "STRING_VALUE",
5959
* // },
6060
* // customLogSource: { // CustomLogSourceResource

‎clients/client-securitylake/src/commands/ListLogSourcesCommand.ts

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -45,7 +45,7 @@ export interface ListLogSourcesCommandOutput extends ListLogSourcesResponse, __M
4545
* sources: [ // LogSourceResourceList
4646
* { // LogSourceResource Union: only one key present
4747
* awsLogSource: { // AwsLogSourceResource
48-
* sourceName: "ROUTE53" || "VPC_FLOW" || "SH_FINDINGS" || "CLOUD_TRAIL_MGMT" || "LAMBDA_EXECUTION" || "S3_DATA",
48+
* sourceName: "ROUTE53" || "VPC_FLOW" || "SH_FINDINGS" || "CLOUD_TRAIL_MGMT" || "LAMBDA_EXECUTION" || "S3_DATA" || "EKS_AUDIT" || "WAF",
4949
* sourceVersion: "STRING_VALUE",
5050
* },
5151
* customLogSource: { // CustomLogSourceResource
@@ -76,7 +76,7 @@ export interface ListLogSourcesCommandOutput extends ListLogSourcesResponse, __M
7676
* // sources: [ // LogSourceResourceList
7777
* // { // LogSourceResource Union: only one key present
7878
* // awsLogSource: { // AwsLogSourceResource
79-
* // sourceName: "ROUTE53" || "VPC_FLOW" || "SH_FINDINGS" || "CLOUD_TRAIL_MGMT" || "LAMBDA_EXECUTION" || "S3_DATA",
79+
* // sourceName: "ROUTE53" || "VPC_FLOW" || "SH_FINDINGS" || "CLOUD_TRAIL_MGMT" || "LAMBDA_EXECUTION" || "S3_DATA" || "EKS_AUDIT" || "WAF",
8080
* // sourceVersion: "STRING_VALUE",
8181
* // },
8282
* // customLogSource: { // CustomLogSourceResource

‎clients/client-securitylake/src/commands/ListSubscribersCommand.ts

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -56,7 +56,7 @@ export interface ListSubscribersCommandOutput extends ListSubscribersResponse, _
5656
* // sources: [ // LogSourceResourceList // required
5757
* // { // LogSourceResource Union: only one key present
5858
* // awsLogSource: { // AwsLogSourceResource
59-
* // sourceName: "ROUTE53" || "VPC_FLOW" || "SH_FINDINGS" || "CLOUD_TRAIL_MGMT" || "LAMBDA_EXECUTION" || "S3_DATA",
59+
* // sourceName: "ROUTE53" || "VPC_FLOW" || "SH_FINDINGS" || "CLOUD_TRAIL_MGMT" || "LAMBDA_EXECUTION" || "S3_DATA" || "EKS_AUDIT" || "WAF",
6060
* // sourceVersion: "STRING_VALUE",
6161
* // },
6262
* // customLogSource: { // CustomLogSourceResource

‎clients/client-securitylake/src/commands/UpdateDataLakeCommand.ts

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -62,6 +62,7 @@ export interface UpdateDataLakeCommandOutput extends UpdateDataLakeResponse, __M
6262
* },
6363
* },
6464
* ],
65+
* metaStoreManagerRoleArn: "STRING_VALUE",
6566
* };
6667
* const command = new UpdateDataLakeCommand(input);
6768
* const response = await client.send(command);

‎clients/client-securitylake/src/commands/UpdateSubscriberCommand.ts

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -47,7 +47,7 @@ export interface UpdateSubscriberCommandOutput extends UpdateSubscriberResponse,
4747
* sources: [ // LogSourceResourceList
4848
* { // LogSourceResource Union: only one key present
4949
* awsLogSource: { // AwsLogSourceResource
50-
* sourceName: "ROUTE53" || "VPC_FLOW" || "SH_FINDINGS" || "CLOUD_TRAIL_MGMT" || "LAMBDA_EXECUTION" || "S3_DATA",
50+
* sourceName: "ROUTE53" || "VPC_FLOW" || "SH_FINDINGS" || "CLOUD_TRAIL_MGMT" || "LAMBDA_EXECUTION" || "S3_DATA" || "EKS_AUDIT" || "WAF",
5151
* sourceVersion: "STRING_VALUE",
5252
* },
5353
* customLogSource: { // CustomLogSourceResource
@@ -81,7 +81,7 @@ export interface UpdateSubscriberCommandOutput extends UpdateSubscriberResponse,
8181
* // sources: [ // LogSourceResourceList // required
8282
* // { // LogSourceResource Union: only one key present
8383
* // awsLogSource: { // AwsLogSourceResource
84-
* // sourceName: "ROUTE53" || "VPC_FLOW" || "SH_FINDINGS" || "CLOUD_TRAIL_MGMT" || "LAMBDA_EXECUTION" || "S3_DATA",
84+
* // sourceName: "ROUTE53" || "VPC_FLOW" || "SH_FINDINGS" || "CLOUD_TRAIL_MGMT" || "LAMBDA_EXECUTION" || "S3_DATA" || "EKS_AUDIT" || "WAF",
8585
* // sourceVersion: "STRING_VALUE",
8686
* // },
8787
* // customLogSource: { // CustomLogSourceResource

‎clients/client-securitylake/src/models/models_0.ts

Lines changed: 14 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -71,11 +71,13 @@ export interface AwsIdentity {
7171
*/
7272
export const AwsLogSourceName = {
7373
CLOUD_TRAIL_MGMT: "CLOUD_TRAIL_MGMT",
74+
EKS_AUDIT: "EKS_AUDIT",
7475
LAMBDA_EXECUTION: "LAMBDA_EXECUTION",
7576
ROUTE53: "ROUTE53",
7677
S3_DATA: "S3_DATA",
7778
SH_FINDINGS: "SH_FINDINGS",
7879
VPC_FLOW: "VPC_FLOW",
80+
WAF: "WAF",
7981
} as const;
8082

8183
/**
@@ -529,7 +531,7 @@ export interface CreateCustomLogSourceRequest {
529531
* @public
530532
* <p>The configuration for the third-party custom source.</p>
531533
*/
532-
configuration?: CustomLogSourceConfiguration;
534+
configuration: CustomLogSourceConfiguration | undefined;
533535
}
534536

535537
/**
@@ -984,7 +986,7 @@ export interface CreateDataLakeOrganizationConfigurationRequest {
984986
* <p>Enable Security Lake with the specified configuration settings, to begin collecting security
985987
* data for new accounts in your organization.</p>
986988
*/
987-
autoEnableNewAccount: DataLakeAutoEnableNewAccountConfiguration[] | undefined;
989+
autoEnableNewAccount?: DataLakeAutoEnableNewAccountConfiguration[];
988990
}
989991

990992
/**
@@ -1444,7 +1446,7 @@ export interface DeleteDataLakeOrganizationConfigurationRequest {
14441446
* @public
14451447
* <p>Turns off automatic enablement of Security Lake for member accounts that are added to an organization.</p>
14461448
*/
1447-
autoEnableNewAccount: DataLakeAutoEnableNewAccountConfiguration[] | undefined;
1449+
autoEnableNewAccount?: DataLakeAutoEnableNewAccountConfiguration[];
14481450
}
14491451

14501452
/**
@@ -1846,6 +1848,14 @@ export interface UpdateDataLakeRequest {
18461848
* <p>Specify the Region or Regions that will contribute data to the rollup region.</p>
18471849
*/
18481850
configurations: DataLakeConfiguration[] | undefined;
1851+
1852+
/**
1853+
* @public
1854+
* <p>The Amazon Resource Name (ARN) used to create and update the Glue table.
1855+
* This table contains partitions generated by the ingestion and normalization of
1856+
* Amazon Web Services log sources and custom sources.</p>
1857+
*/
1858+
metaStoreManagerRoleArn?: string;
18491859
}
18501860

18511861
/**
@@ -2082,7 +2092,7 @@ export interface ListSubscribersResponse {
20822092
export interface ListTagsForResourceRequest {
20832093
/**
20842094
* @public
2085-
* <p>The Amazon Resource Name (ARN) of the Amazon Security Lake resource to retrieve the tags for.</p>
2095+
* <p>The Amazon Resource Name (ARN) of the Amazon Security Lake resource for which you want to retrieve the tags.</p>
20862096
*/
20872097
resourceArn: string | undefined;
20882098
}

‎clients/client-securitylake/src/protocols/Aws_restJson1.ts

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -717,6 +717,7 @@ export const se_UpdateDataLakeCommand = async (
717717
body = JSON.stringify(
718718
take(input, {
719719
configurations: (_) => _json(_),
720+
metaStoreManagerRoleArn: [],
720721
})
721722
);
722723
b.m("PUT").h(headers).b(body);

‎codegen/sdk-codegen/aws-models/securitylake.json

Lines changed: 40 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -137,7 +137,7 @@
137137
},
138138
"traits": {
139139
"smithy.api#length": {
140-
"min": 0,
140+
"min": 1,
141141
"max": 50
142142
}
143143
}
@@ -180,6 +180,18 @@
180180
"traits": {
181181
"smithy.api#enumValue": "S3_DATA"
182182
}
183+
},
184+
"EKS_AUDIT": {
185+
"target": "smithy.api#Unit",
186+
"traits": {
187+
"smithy.api#enumValue": "EKS_AUDIT"
188+
}
189+
},
190+
"WAF": {
191+
"target": "smithy.api#Unit",
192+
"traits": {
193+
"smithy.api#enumValue": "WAF"
194+
}
183195
}
184196
}
185197
},
@@ -207,6 +219,11 @@
207219
"type": "list",
208220
"member": {
209221
"target": "com.amazonaws.securitylake#AwsLogSourceResource"
222+
},
223+
"traits": {
224+
"smithy.api#length": {
225+
"min": 1
226+
}
210227
}
211228
},
212229
"com.amazonaws.securitylake#AwsLogSourceVersion": {
@@ -416,7 +433,8 @@
416433
"configuration": {
417434
"target": "com.amazonaws.securitylake#CustomLogSourceConfiguration",
418435
"traits": {
419-
"smithy.api#documentation": "<p>The configuration for the third-party custom source.</p>"
436+
"smithy.api#documentation": "<p>The configuration for the third-party custom source.</p>",
437+
"smithy.api#required": {}
420438
}
421439
}
422440
},
@@ -623,8 +641,7 @@
623641
"autoEnableNewAccount": {
624642
"target": "com.amazonaws.securitylake#DataLakeAutoEnableNewAccountConfigurationList",
625643
"traits": {
626-
"smithy.api#documentation": "<p>Enable Security Lake with the specified configuration settings, to begin collecting security\n data for new accounts in your organization.</p>",
627-
"smithy.api#required": {}
644+
"smithy.api#documentation": "<p>Enable Security Lake with the specified configuration settings, to begin collecting security\n data for new accounts in your organization.</p>"
628645
}
629646
}
630647
},
@@ -1107,6 +1124,11 @@
11071124
"type": "list",
11081125
"member": {
11091126
"target": "com.amazonaws.securitylake#DataLakeAutoEnableNewAccountConfiguration"
1127+
},
1128+
"traits": {
1129+
"smithy.api#length": {
1130+
"min": 1
1131+
}
11101132
}
11111133
},
11121134
"com.amazonaws.securitylake#DataLakeConfiguration": {
@@ -1146,6 +1168,11 @@
11461168
"type": "list",
11471169
"member": {
11481170
"target": "com.amazonaws.securitylake#DataLakeConfiguration"
1171+
},
1172+
"traits": {
1173+
"smithy.api#length": {
1174+
"min": 1
1175+
}
11491176
}
11501177
},
11511178
"com.amazonaws.securitylake#DataLakeEncryptionConfiguration": {
@@ -1771,8 +1798,7 @@
17711798
"autoEnableNewAccount": {
17721799
"target": "com.amazonaws.securitylake#DataLakeAutoEnableNewAccountConfigurationList",
17731800
"traits": {
1774-
"smithy.api#documentation": "<p>Turns off automatic enablement of Security Lake for member accounts that are added to an organization.</p>",
1775-
"smithy.api#required": {}
1801+
"smithy.api#documentation": "<p>Turns off automatic enablement of Security Lake for member accounts that are added to an organization.</p>"
17761802
}
17771803
}
17781804
},
@@ -2807,7 +2833,7 @@
28072833
"resourceArn": {
28082834
"target": "com.amazonaws.securitylake#AmazonResourceName",
28092835
"traits": {
2810-
"smithy.api#documentation": "<p>The Amazon Resource Name (ARN) of the Amazon Security Lake resource to retrieve the tags for.</p>",
2836+
"smithy.api#documentation": "<p>The Amazon Resource Name (ARN) of the Amazon Security Lake resource for which you want to retrieve the tags.</p>",
28112837
"smithy.api#httpLabel": {},
28122838
"smithy.api#required": {}
28132839
}
@@ -3063,7 +3089,7 @@
30633089
"com.amazonaws.securitylake#RoleArn": {
30643090
"type": "string",
30653091
"traits": {
3066-
"smithy.api#pattern": "^arn:.*$"
3092+
"smithy.api#pattern": "^arn:(aws[a-zA-Z-]*)?:iam::\\d{12}:role/?[a-zA-Z_0-9+=,.@\\-_/]+$"
30673093
}
30683094
},
30693095
"com.amazonaws.securitylake#S3BucketArn": {
@@ -4466,6 +4492,12 @@
44664492
"smithy.api#documentation": "<p>Specify the Region or Regions that will contribute data to the rollup region.</p>",
44674493
"smithy.api#required": {}
44684494
}
4495+
},
4496+
"metaStoreManagerRoleArn": {
4497+
"target": "com.amazonaws.securitylake#RoleArn",
4498+
"traits": {
4499+
"smithy.api#documentation": "<p>The Amazon Resource Name (ARN) used to create and update the Glue table.\n This table contains partitions generated by the ingestion and normalization of\n Amazon Web Services log sources and custom sources.</p>"
4500+
}
44694501
}
44704502
},
44714503
"traits": {

0 commit comments

Comments
 (0)