Returns detailed metadata about the specified ACM certificate.
If you have just created a certificate using the RequestCertificate action, there is a delay of several seconds before you can retrieve information about it.
Exports a private certificate issued by a private certificate authority (CA) for use anywhere. The exported file contains the certificate, the certificate chain, and the encrypted private 2048-bit RSA key associated with the public key that is embedded in the certificate. For security, you must assign a passphrase for the private key when exporting it.
For information about exporting and formatting a certificate using the ACM console or CLI, see Export a Private Certificate.
", "GetAccountConfiguration": "Returns the account configuration options associated with an Amazon Web Services account.
", - "GetCertificate": "Retrieves an Amazon-issued certificate and its certificate chain. The chain consists of the certificate of the issuing CA and the intermediate certificates of any other subordinate CAs. All of the certificates are base64 encoded. You can use OpenSSL to decode the certificates and inspect individual fields.
", - "ImportCertificate": "Imports a certificate into Certificate Manager (ACM) to use with services that are integrated with ACM. Note that integrated services allow only certificate types and keys they support to be associated with their resources. Further, their support differs depending on whether the certificate is imported into IAM or into ACM. For more information, see the documentation for each service. For more information about importing certificates into ACM, see Importing Certificates in the Certificate Manager User Guide.
ACM does not provide managed renewal for certificates that you import.
Note the following guidelines when importing third party certificates:
You must enter the private key that matches the certificate you are importing.
The private key must be unencrypted. You cannot import a private key that is protected by a password or a passphrase.
The private key must be no larger than 5 KB (5,120 bytes).
If the certificate you are importing is not self-signed, you must enter its certificate chain.
If a certificate chain is included, the issuer must be the subject of one of the certificates in the chain.
The certificate, private key, and certificate chain must be PEM-encoded.
The current time must be between the Not Before and Not After certificate fields.
The Issuer field must not be empty.
The OCSP authority URL, if present, must not exceed 1000 characters.
To import a new certificate, omit the CertificateArn argument. Include this argument only when you want to replace a previously imported certificate.
When you import a certificate by using the CLI, you must specify the certificate, the certificate chain, and the private key by their file names preceded by fileb://. For example, you can specify a certificate saved in the C:\\temp folder as fileb://C:\\temp\\certificate_to_import.pem. If you are making an HTTP or HTTPS Query request, include these arguments as BLOBs.
When you import a certificate by using an SDK, you must specify the certificate, the certificate chain, and the private key files in the manner required by the programming language you're using.
The cryptographic algorithm of an imported certificate must match the algorithm of the signing CA. For example, if the signing CA key type is RSA, then the certificate key type must also be RSA.
This operation returns the Amazon Resource Name (ARN) of the imported certificate.
", - "ListCertificates": "Retrieves a list of certificate ARNs and domain names. You can request that only certificates that match a specific status be listed. You can also filter by specific attributes of the certificate. Default filtering returns only RSA_2048 certificates. For more information, see Filters.
Retrieves a certificate and its certificate chain. The certificate may be either a public or private certificate issued using the ACM RequestCertificate action, or a certificate imported into ACM using the ImportCertificate action. The chain consists of the certificate of the issuing CA and the intermediate certificates of any other subordinate CAs. All of the certificates are base64 encoded. You can use OpenSSL to decode the certificates and inspect individual fields.
Imports a certificate into Certificate Manager (ACM) to use with services that are integrated with ACM. Note that integrated services allow only certificate types and keys they support to be associated with their resources. Further, their support differs depending on whether the certificate is imported into IAM or into ACM. For more information, see the documentation for each service. For more information about importing certificates into ACM, see Importing Certificates in the Certificate Manager User Guide.
ACM does not provide managed renewal for certificates that you import.
Note the following guidelines when importing third party certificates:
You must enter the private key that matches the certificate you are importing.
The private key must be unencrypted. You cannot import a private key that is protected by a password or a passphrase.
The private key must be no larger than 5 KB (5,120 bytes).
The certificate, private key, and certificate chain must be PEM-encoded.
The current time must be between the Not Before and Not After certificate fields.
The Issuer field must not be empty.
The OCSP authority URL, if present, must not exceed 1000 characters.
To import a new certificate, omit the CertificateArn argument. Include this argument only when you want to replace a previously imported certificate.
When you import a certificate by using the CLI, you must specify the certificate, the certificate chain, and the private key by their file names preceded by fileb://. For example, you can specify a certificate saved in the C:\\temp folder as fileb://C:\\temp\\certificate_to_import.pem. If you are making an HTTP or HTTPS Query request, include these arguments as BLOBs.
When you import a certificate by using an SDK, you must specify the certificate, the certificate chain, and the private key files in the manner required by the programming language you're using.
The cryptographic algorithm of an imported certificate must match the algorithm of the signing CA. For example, if the signing CA key type is RSA, then the certificate key type must also be RSA.
This operation returns the Amazon Resource Name (ARN) of the imported certificate.
", + "ListCertificates": "Retrieves a list of certificate ARNs and domain names. By default, the API returns RSA_2048 certificates. To return all certificates in the account, include the keyType filter with the values [RSA_1024, RSA_2048, RSA_3072, RSA_4096, EC_prime256v1, EC_secp384r1, EC_secp521r1].
In addition to keyType, you can also filter by the CertificateStatuses, keyUsage, and extendedKeyUsage attributes on the certificate. For more information, see Filters.
Lists the tags that have been applied to the ACM certificate. Use the certificate's Amazon Resource Name (ARN) to specify the certificate. To add a tag to an ACM certificate, use the AddTagsToCertificate action. To delete a tag, use the RemoveTagsFromCertificate action.
", "PutAccountConfiguration": "Adds or modifies account-level configurations in ACM.
The supported configuration option is DaysBeforeExpiry. This option specifies the number of days prior to certificate expiration when ACM starts generating EventBridge events. ACM sends one event per day per certificate until the certificate expires. By default, accounts receive events starting 45 days before certificate expiration.
Remove one or more tags from an ACM certificate. A tag consists of a key-value pair. If you do not specify the value portion of the tag when calling this function, the tag will be removed regardless of value. If you specify a value, the tag is removed only if it is associated with the specified value.
To add tags to a certificate, use the AddTagsToCertificate action. To view all of the tags that have been applied to a specific ACM certificate, use the ListTagsForCertificate action.
", @@ -159,7 +159,7 @@ "base": null, "refs": { "CertificateDetail$SubjectAlternativeNames": "One or more domain names (subject alternative names) included in the certificate. This list contains the domain names that are bound to the public key that is contained in the certificate. The subject alternative names include the canonical domain name (CN) of the certificate and additional domain names that can be used to connect to the website.
", - "CertificateSummary$SubjectAlternativeNameSummaries": "One or more domain names (subject alternative names) included in the certificate. This list contains the domain names that are bound to the public key that is contained in the certificate. The subject alternative names include the canonical domain name (CN) of the certificate and additional domain names that can be used to connect to the website.
When called by ListCertificates, this parameter will only return the first 100 subject alternative names included in the certificate. To display the full list of subject alternative names, use DescribeCertificate.
", + "CertificateSummary$SubjectAlternativeNameSummaries": "One or more domain names (subject alternative names) included in the certificate. This list contains the domain names that are bound to the public key that is contained in the certificate. The subject alternative names include the canonical domain name (CN) of the certificate and additional domain names that can be used to connect to the website.
When called by ListCertificates, this parameter will only return the first 100 subject alternative names included in the certificate. To display the full list of subject alternative names, use DescribeCertificate.
", "RequestCertificateRequest$SubjectAlternativeNames": "Additional FQDNs to be included in the Subject Alternative Name extension of the ACM certificate. For example, add the name www.example.net to a certificate for which the DomainName field is www.example.com if users can reach your site by using either name. The maximum number of domain names that you can add to an ACM certificate is 100. However, the initial quota is 10 domain names. If you need more than 10 names, you must request a quota increase. For more information, see Quotas.
The maximum length of a SAN DNS name is 253 octets. The name is made up of multiple labels separated by periods. No label can be longer than 63 octets. Consider the following examples:
(63 octets).(63 octets).(63 octets).(61 octets) is legal because the total length is 253 octets (63+1+63+1+63+1+61) and no label exceeds 63 octets.
(64 octets).(63 octets).(63 octets).(61 octets) is not legal because the total length exceeds 253 octets (64+1+63+1+63+1+61) and the first label exceeds 63 octets.
(63 octets).(63 octets).(63 octets).(62 octets) is not legal because the total length of the DNS name (63+1+63+1+63+1+62) exceeds 253 octets.
The validation status of the domain name. This can be one of the following values:
PENDING_VALIDATION
SUCCESS
FAILED
The validation status of the domain name. This can be one of the following values:
PENDING_VALIDATION
SUCCESS
FAILED
The algorithm that was used to generate the public-private key pair.
", "CertificateSummary$KeyAlgorithm": "The algorithm that was used to generate the public-private key pair.
", "KeyAlgorithmList$member": null, - "RequestCertificateRequest$KeyAlgorithm": "Specifies the algorithm of the public and private key pair that your certificate uses to encrypt data. RSA is the default key algorithm for ACM certificates. Elliptic Curve Digital Signature Algorithm (ECDSA) keys are smaller, offering security comparable to RSA keys but with greater computing efficiency. However, ECDSA is not supported by all network clients. Some AWS services may require RSA keys, or only support ECDSA keys of a particular size, while others allow the use of either RSA and ECDSA keys to ensure that compatibility is not broken. Check the requirements for the AWS service where you plan to deploy your certificate.
Default: RSA_2048
" + "RequestCertificateRequest$KeyAlgorithm": "Specifies the algorithm of the public and private key pair that your certificate uses to encrypt data. RSA is the default key algorithm for ACM certificates. Elliptic Curve Digital Signature Algorithm (ECDSA) keys are smaller, offering security comparable to RSA keys but with greater computing efficiency. However, ECDSA is not supported by all network clients. Some Amazon Web Services services may require RSA keys, or only support ECDSA keys of a particular size, while others allow the use of either RSA and ECDSA keys to ensure that compatibility is not broken. Check the requirements for the Amazon Web Services service where you plan to deploy your certificate. For more information about selecting an algorithm, see Key algorithms.
Algorithms supported for an ACM certificate request include:
RSA_2048
EC_prime256v1
EC_secp384r1
Other listed algorithms are for imported certificates only.
When you request a private PKI certificate signed by a CA from Amazon Web Services Private CA, the specified signing algorithm family (RSA or ECDSA) must match the algorithm family of the CA's secret key.
Default: RSA_2048
" } }, "KeyAlgorithmList": { @@ -427,7 +427,7 @@ "NullableBoolean": { "base": null, "refs": { - "CertificateSummary$HasAdditionalSubjectAlternativeNames": "When called by ListCertificates, indicates whether the full list of subject alternative names has been included in the response. If false, the response includes all of the subject alternative names included in the certificate. If true, the response only includes the first 100 subject alternative names included in the certificate. To display the full list of subject alternative names, use DescribeCertificate.
", + "CertificateSummary$HasAdditionalSubjectAlternativeNames": "When called by ListCertificates, indicates whether the full list of subject alternative names has been included in the response. If false, the response includes all of the subject alternative names included in the certificate. If true, the response only includes the first 100 subject alternative names included in the certificate. To display the full list of subject alternative names, use DescribeCertificate.
", "CertificateSummary$InUse": "Indicates whether the certificate is currently in use by any Amazon Web Services resources.
", "CertificateSummary$Exported": "Indicates whether the certificate has been exported. This value exists only when the certificate type is PRIVATE.
Card data parameters that are required to verify a Card Security Code (CSC2) for an AMEX payment card.
" } }, + "ApplicationCryptogramType": { + "base": null, + "refs": { + "SessionKeyDerivationValue$ApplicationCryptogram": "The cryptogram provided by the terminal during transaction processing.
" + } + }, "AsymmetricEncryptionAttributes": { "base": "Parameters for plaintext encryption using asymmetric keys.
", "refs": { "EncryptionDecryptionAttributes$Asymmetric": null } }, + "AuthRequestCryptogramType": { + "base": null, + "refs": { + "VerifyAuthRequestCryptogramInput$AuthRequestCryptogram": "The auth request cryptogram imported into Amazon Web Services Payment Cryptography for ARQC verification using a major encryption key and transaction data.
" + } + }, + "AuthResponseValueType": { + "base": null, + "refs": { + "VerifyAuthRequestCryptogramOutput$AuthResponseValue": "The result for ARQC verification or ARPC generation within Amazon Web Services Payment Cryptography.
" + } + }, + "CardExpiryDateType": { + "base": null, + "refs": { + "AmexCardSecurityCodeVersion1$CardExpiryDate": "The expiry date of a payment card.
", + "AmexCardSecurityCodeVersion2$CardExpiryDate": "The expiry date of a payment card.
", + "CardVerificationValue1$CardExpiryDate": "The expiry date of a payment card.
", + "CardVerificationValue2$CardExpiryDate": "The expiry date of a payment card.
", + "DiscoverDynamicCardVerificationCode$CardExpiryDate": "The expiry date of a payment card.
", + "DynamicCardVerificationValue$CardExpiryDate": "The expiry date of a payment card.
" + } + }, "CardGenerationAttributes": { "base": "Card data parameters that are required to generate Card Verification Values (CVV/CVV2), Dynamic Card Verification Values (dCVV/dCVV2), or Card Security Codes (CSC).
", "refs": { @@ -73,6 +102,15 @@ "CardVerificationAttributes$CardVerificationValue2": "Card data parameters that are required to verify Card Verification Value (CVV2) for the payment card.
" } }, + "CipherTextType": { + "base": null, + "refs": { + "DecryptDataInput$CipherText": "The ciphertext to decrypt.
", + "EncryptDataOutput$CipherText": "The encrypted ciphertext.
", + "ReEncryptDataInput$CipherText": "Ciphertext to be encrypted. The minimum allowed length is 16 bytes and maximum allowed length is 4096 bytes.
", + "ReEncryptDataOutput$CipherText": "The encrypted ciphertext.
" + } + }, "CryptogramAuthResponse": { "base": "Parameters that are required for Authorization Response Cryptogram (ARPC) generation after Authorization Request Cryptogram (ARQC) verification is successful.
", "refs": { @@ -91,6 +129,16 @@ "CryptogramAuthResponse$ArpcMethod2": "Parameters that are required for ARPC response generation using method2 after ARQC verification is successful.
" } }, + "DecimalizationTableType": { + "base": null, + "refs": { + "Ibm3624NaturalPin$DecimalizationTable": "The decimalization table to use for IBM 3624 PIN algorithm. The table is used to convert the algorithm intermediate result from hexadecimal characters to decimal.
", + "Ibm3624PinFromOffset$DecimalizationTable": "The decimalization table to use for IBM 3624 PIN algorithm. The table is used to convert the algorithm intermediate result from hexadecimal characters to decimal.
", + "Ibm3624PinOffset$DecimalizationTable": "The decimalization table to use for IBM 3624 PIN algorithm. The table is used to convert the algorithm intermediate result from hexadecimal characters to decimal.
", + "Ibm3624PinVerification$DecimalizationTable": "The decimalization table to use for IBM 3624 PIN algorithm. The table is used to convert the algorithm intermediate result from hexadecimal characters to decimal.
", + "Ibm3624RandomPin$DecimalizationTable": "The decimalization table to use for IBM 3624 PIN algorithm. The table is used to convert the algorithm intermediate result from hexadecimal characters to decimal.
" + } + }, "DecryptDataInput": { "base": null, "refs": { @@ -192,6 +240,16 @@ "refs": { } }, + "EncryptedPinBlockType": { + "base": null, + "refs": { + "GeneratePinDataOutput$EncryptedPinBlock": "The PIN block encrypted under PEK from Amazon Web Services Payment Cryptography. The encrypted PIN block is a composite of PAN (Primary Account Number) and PIN (Personal Identification Number), generated in accordance with ISO 9564 standard.
", + "Ibm3624PinOffset$EncryptedPinBlock": "The encrypted PIN block data. According to ISO 9564 standard, a PIN Block is an encoded representation of a payment card Personal Account Number (PAN) and the cardholder Personal Identification Number (PIN).
", + "TranslatePinDataOutput$PinBlock": "The outgoing encrypted PIN block data after translation.
", + "VerifyPinDataInput$EncryptedPinBlock": "The encrypted PIN block data that Amazon Web Services Payment Cryptography verifies.
", + "VisaPinVerificationValue$EncryptedPinBlock": "The encrypted PIN block data to verify.
" + } + }, "EncryptionDecryptionAttributes": { "base": "Parameters that are required to perform encryption and decryption operations.
", "refs": { @@ -241,43 +299,6 @@ "TranslatePinDataInput$EncryptedPinBlock": "The encrypted PIN block data that Amazon Web Services Payment Cryptography translates.
" } }, - "HexEvenLengthBetween16And4064": { - "base": null, - "refs": { - "EncryptDataInput$PlainText": "The plaintext to be encrypted.
For encryption using asymmetric keys, plaintext data length is constrained by encryption key strength that you define in KeyAlgorithm and padding type that you define in AsymmetricEncryptionAttributes. For more information, see Encrypt data in the Amazon Web Services Payment Cryptography User Guide.
The ciphertext to decrypt.
", - "DecryptDataOutput$PlainText": "The decrypted plaintext data in hexBinary format.
", - "EncryptDataOutput$CipherText": "The encrypted ciphertext.
", - "ReEncryptDataInput$CipherText": "Ciphertext to be encrypted. The minimum allowed length is 16 bytes and maximum allowed length is 4096 bytes.
", - "ReEncryptDataOutput$CipherText": "The encrypted ciphertext.
" - } - }, - "HexEvenLengthBetween2And4096": { - "base": null, - "refs": { - "GenerateMacInput$MessageData": "The data for which a MAC is under generation. This value must be hexBinary.
", - "VerifyMacInput$MessageData": "The data on for which MAC is under verification. This value must be hexBinary.
" - } - }, - "HexEvenLengthBetween4And128": { - "base": null, - "refs": { - "VerifyMacInput$Mac": "The MAC being verified.
" - } - }, - "HexLength16Or32": { - "base": null, - "refs": { - "DukptEncryptionAttributes$InitializationVector": "An input used to provide the intial state. If no value is provided, Amazon Web Services Payment Cryptography defaults it to zero.
", - "EmvEncryptionAttributes$InitializationVector": "An input used to provide the intial state. If no value is provided, Amazon Web Services Payment Cryptography defaults it to zero.
", - "SymmetricEncryptionAttributes$InitializationVector": "An input used to provide the intial state. If no value is provided, Amazon Web Services Payment Cryptography defaults it to zero.
" - } - }, "HexLengthBetween10And24": { "base": null, "refs": { @@ -287,35 +308,6 @@ "MacAlgorithmDukpt$KeySerialNumber": "The unique identifier known as Key Serial Number (KSN) that comes from an encrypting device using DUKPT encryption method. The KSN is derived from the encrypting device unique identifier and an internal transaction counter.
" } }, - "HexLengthBetween16And32": { - "base": null, - "refs": { - "GeneratePinDataOutput$EncryptedPinBlock": "The PIN block encrypted under PEK from Amazon Web Services Payment Cryptography. The encrypted PIN block is a composite of PAN (Primary Account Number) and PIN (Personal Identification Number), generated in accordance with ISO 9564 standard.
", - "Ibm3624PinOffset$EncryptedPinBlock": "The encrypted PIN block data. According to ISO 9564 standard, a PIN Block is an encoded representation of a payment card Personal Account Number (PAN) and the cardholder Personal Identification Number (PIN).
", - "TranslatePinDataOutput$PinBlock": "The outgoing encrypted PIN block data after translation.
", - "VerifyPinDataInput$EncryptedPinBlock": "The encrypted PIN block data that Amazon Web Services Payment Cryptography verifies.
", - "VisaPinVerificationValue$EncryptedPinBlock": "The encrypted PIN block data to verify.
" - } - }, - "HexLengthBetween1And16": { - "base": null, - "refs": { - "CryptogramVerificationArpcMethod2$ProprietaryAuthenticationData": "The proprietary authentication data used by issuer for communication during online transaction using an EMV chip card.
", - "VerifyAuthRequestCryptogramOutput$AuthResponseValue": "The result for ARQC verification or ARPC generation within Amazon Web Services Payment Cryptography.
" - } - }, - "HexLengthBetween2And1024": { - "base": null, - "refs": { - "VerifyAuthRequestCryptogramInput$TransactionData": "The transaction data that Amazon Web Services Payment Cryptography uses for ARQC verification. The same transaction is used for ARQC generation outside of Amazon Web Services Payment Cryptography.
" - } - }, - "HexLengthBetween2And160": { - "base": null, - "refs": { - "DynamicCardVerificationCode$TrackData": "The data on the two tracks of magnetic cards used for financial transactions. This includes the cardholder name, PAN, expiration date, bank ID (BIN) and several other numbers the issuing bank uses to validate the data received.
" - } - }, "HexLengthBetween2And4": { "base": null, "refs": { @@ -338,12 +330,6 @@ "SessionKeyMastercard$UnpredictableNumber": "A random number generated by the issuer.
" } }, - "HexLengthBetween4And128": { - "base": null, - "refs": { - "GenerateMacOutput$Mac": "The MAC cryptogram generated within Amazon Web Services Payment Cryptography.
" - } - }, "HexLengthEquals1": { "base": null, "refs": { @@ -354,14 +340,6 @@ "Ibm3624RandomPin$PinValidationDataPadCharacter": "The padding character for validation data.
" } }, - "HexLengthEquals16": { - "base": null, - "refs": { - "EmvEncryptionAttributes$SessionDerivationData": "The derivation value used to derive the ICC session key. It is typically the application transaction counter value padded with zeros or previous ARQC value padded with zeros as per EMV version 4.3 book 2.
", - "SessionKeyDerivationValue$ApplicationCryptogram": "The cryptogram provided by the terminal during transaction processing.
", - "VerifyAuthRequestCryptogramInput$AuthRequestCryptogram": "The auth request cryptogram imported into Amazon Web Services Payment Cryptography for ARQC verification using a major encryption key and transaction data.
" - } - }, "HexLengthEquals4": { "base": null, "refs": { @@ -404,6 +382,14 @@ "PinGenerationAttributes$Ibm3624RandomPin": "Parameters that are required to generate or verify Ibm3624 random PIN.
" } }, + "InitializationVectorType": { + "base": null, + "refs": { + "DukptEncryptionAttributes$InitializationVector": "An input used to provide the intial state. If no value is provided, Amazon Web Services Payment Cryptography defaults it to zero.
", + "EmvEncryptionAttributes$InitializationVector": "An input used to provide the intial state. If no value is provided, Amazon Web Services Payment Cryptography defaults it to zero.
", + "SymmetricEncryptionAttributes$InitializationVector": "An input used to provide the intial state. If no value is provided, Amazon Web Services Payment Cryptography defaults it to zero.
" + } + }, "IntegerRangeBetween0And6": { "base": null, "refs": { @@ -526,65 +512,30 @@ "VerifyMacInput$VerificationAttributes": "The attributes and data values to use for MAC verification within Amazon Web Services Payment Cryptography.
" } }, - "MajorKeyDerivationMode": { - "base": null, - "refs": { - "MacAlgorithmEmv$MajorKeyDerivationMode": "The method to use when deriving the master key for EMV MAC generation or verification.
", - "VerifyAuthRequestCryptogramInput$MajorKeyDerivationMode": "The method to use when deriving the major encryption key for ARQC verification within Amazon Web Services Payment Cryptography. The same key derivation mode was used for ARQC generation outside of Amazon Web Services Payment Cryptography.
" - } - }, - "NumberLengthBetween12And19": { - "base": null, - "refs": { - "EmvEncryptionAttributes$PrimaryAccountNumber": "The Primary Account Number (PAN), a unique identifier for a payment credit or debit card and associates the card to a specific account holder.
", - "GenerateCardValidationDataInput$PrimaryAccountNumber": "The Primary Account Number (PAN), a unique identifier for a payment credit or debit card that associates the card with a specific account holder.
", - "GeneratePinDataInput$PrimaryAccountNumber": "The Primary Account Number (PAN), a unique identifier for a payment credit or debit card that associates the card with a specific account holder.
", - "MacAlgorithmEmv$PrimaryAccountNumber": "The Primary Account Number (PAN), a unique identifier for a payment credit or debit card and associates the card to a specific account holder.
", - "SessionKeyAmex$PrimaryAccountNumber": "The Primary Account Number (PAN) of the cardholder. A PAN is a unique identifier for a payment credit or debit card and associates the card to a specific account holder.
", - "SessionKeyEmv2000$PrimaryAccountNumber": "The Primary Account Number (PAN) of the cardholder. A PAN is a unique identifier for a payment credit or debit card and associates the card to a specific account holder.
", - "SessionKeyEmvCommon$PrimaryAccountNumber": "The Primary Account Number (PAN) of the cardholder. A PAN is a unique identifier for a payment credit or debit card and associates the card to a specific account holder.
", - "SessionKeyMastercard$PrimaryAccountNumber": "The Primary Account Number (PAN) of the cardholder. A PAN is a unique identifier for a payment credit or debit card and associates the card to a specific account holder.
", - "SessionKeyVisa$PrimaryAccountNumber": "The Primary Account Number (PAN) of the cardholder. A PAN is a unique identifier for a payment credit or debit card and associates the card to a specific account holder.
", - "TranslationPinDataIsoFormat034$PrimaryAccountNumber": "The Primary Account Number (PAN) of the cardholder. A PAN is a unique identifier for a payment credit or debit card and associates the card to a specific account holder.
", - "VerifyCardValidationDataInput$PrimaryAccountNumber": "The Primary Account Number (PAN), a unique identifier for a payment credit or debit card that associates the card with a specific account holder.
", - "VerifyPinDataInput$PrimaryAccountNumber": "The Primary Account Number (PAN), a unique identifier for a payment credit or debit card that associates the card with a specific account holder.
" - } - }, - "NumberLengthBetween3And5": { + "MacOutputType": { "base": null, "refs": { - "GenerateCardValidationDataOutput$ValidationData": "The CVV or CSC value that Amazon Web Services Payment Cryptography generates for the card.
", - "VerifyCardValidationDataInput$ValidationData": "The CVV or CSC value for use for card data verification within Amazon Web Services Payment Cryptography.
" + "GenerateMacOutput$Mac": "The MAC cryptogram generated within Amazon Web Services Payment Cryptography.
" } }, - "NumberLengthBetween4And12": { + "MacType": { "base": null, "refs": { - "Ibm3624PinFromOffset$PinOffset": "The PIN offset value.
", - "Ibm3624PinVerification$PinOffset": "The PIN offset value.
", - "PinData$PinOffset": "The PIN offset value.
", - "PinData$VerificationValue": "The unique data to identify a cardholder. In most cases, this is the same as cardholder's Primary Account Number (PAN). If a value is not provided, it defaults to PAN.
", - "VisaPinVerification$VerificationValue": "Parameters that are required to generate or verify Visa PVV (PIN Verification Value).
" + "VerifyMacInput$Mac": "The MAC being verified.
" } }, - "NumberLengthBetween4And16": { + "MajorKeyDerivationMode": { "base": null, "refs": { - "Ibm3624NaturalPin$PinValidationData": "The unique data for cardholder identification.
", - "Ibm3624PinFromOffset$PinValidationData": "The unique data for cardholder identification.
", - "Ibm3624PinOffset$PinValidationData": "The unique data for cardholder identification.
", - "Ibm3624PinVerification$PinValidationData": "The unique data for cardholder identification.
", - "Ibm3624RandomPin$PinValidationData": "The unique data for cardholder identification.
" + "MacAlgorithmEmv$MajorKeyDerivationMode": "The method to use when deriving the master key for EMV MAC generation or verification.
", + "VerifyAuthRequestCryptogramInput$MajorKeyDerivationMode": "The method to use when deriving the major encryption key for ARQC verification within Amazon Web Services Payment Cryptography. The same key derivation mode was used for ARQC generation outside of Amazon Web Services Payment Cryptography.
" } }, - "NumberLengthEquals16": { + "MessageDataType": { "base": null, "refs": { - "Ibm3624NaturalPin$DecimalizationTable": "The decimalization table to use for IBM 3624 PIN algorithm. The table is used to convert the algorithm intermediate result from hexadecimal characters to decimal.
", - "Ibm3624PinFromOffset$DecimalizationTable": "The decimalization table to use for IBM 3624 PIN algorithm. The table is used to convert the algorithm intermediate result from hexadecimal characters to decimal.
", - "Ibm3624PinOffset$DecimalizationTable": "The decimalization table to use for IBM 3624 PIN algorithm. The table is used to convert the algorithm intermediate result from hexadecimal characters to decimal.
", - "Ibm3624PinVerification$DecimalizationTable": "The decimalization table to use for IBM 3624 PIN algorithm. The table is used to convert the algorithm intermediate result from hexadecimal characters to decimal.
", - "Ibm3624RandomPin$DecimalizationTable": "The decimalization table to use for IBM 3624 PIN algorithm. The table is used to convert the algorithm intermediate result from hexadecimal characters to decimal.
" + "GenerateMacInput$MessageData": "The data for which a MAC is under generation. This value must be hexBinary.
", + "VerifyMacInput$MessageData": "The data on for which MAC is under verification. This value must be hexBinary.
" } }, "NumberLengthEquals2": { @@ -602,25 +553,6 @@ "SessionKeyVisa$PanSequenceNumber": "A number that identifies and differentiates payment cards with the same Primary Account Number (PAN).
" } }, - "NumberLengthEquals3": { - "base": null, - "refs": { - "AmexCardSecurityCodeVersion2$ServiceCode": "The service code of the AMEX payment card. This is different from the Card Security Code (CSC).
", - "CardVerificationValue1$ServiceCode": "The service code of the payment card. This is different from Card Security Code (CSC).
", - "DynamicCardVerificationValue$ServiceCode": "The service code of the payment card. This is different from Card Security Code (CSC).
" - } - }, - "NumberLengthEquals4": { - "base": null, - "refs": { - "AmexCardSecurityCodeVersion1$CardExpiryDate": "The expiry date of a payment card.
", - "AmexCardSecurityCodeVersion2$CardExpiryDate": "The expiry date of a payment card.
", - "CardVerificationValue1$CardExpiryDate": "The expiry date of a payment card.
", - "CardVerificationValue2$CardExpiryDate": "The expiry date of a payment card.
", - "DiscoverDynamicCardVerificationCode$CardExpiryDate": "The expiry date of a payment card.
", - "DynamicCardVerificationValue$CardExpiryDate": "The expiry date of a payment card.
" - } - }, "PaddingType": { "base": null, "refs": { @@ -647,12 +579,65 @@ "GeneratePinDataInput$GenerationAttributes": "The attributes and values to use for PIN, PVV, or PIN Offset generation.
" } }, + "PinOffsetType": { + "base": null, + "refs": { + "Ibm3624PinFromOffset$PinOffset": "The PIN offset value.
", + "Ibm3624PinVerification$PinOffset": "The PIN offset value.
", + "PinData$PinOffset": "The PIN offset value.
" + } + }, + "PinValidationDataType": { + "base": null, + "refs": { + "Ibm3624NaturalPin$PinValidationData": "The unique data for cardholder identification.
", + "Ibm3624PinFromOffset$PinValidationData": "The unique data for cardholder identification.
", + "Ibm3624PinOffset$PinValidationData": "The unique data for cardholder identification.
", + "Ibm3624PinVerification$PinValidationData": "The unique data for cardholder identification.
", + "Ibm3624RandomPin$PinValidationData": "The unique data for cardholder identification.
" + } + }, "PinVerificationAttributes": { "base": "Parameters that are required for PIN data verification.
", "refs": { "VerifyPinDataInput$VerificationAttributes": "The attributes and values for PIN data verification.
" } }, + "PlainTextOutputType": { + "base": null, + "refs": { + "DecryptDataOutput$PlainText": "The decrypted plaintext data in hexBinary format.
" + } + }, + "PlainTextType": { + "base": null, + "refs": { + "EncryptDataInput$PlainText": "The plaintext to be encrypted.
For encryption using asymmetric keys, plaintext data length is constrained by encryption key strength that you define in KeyAlgorithm and padding type that you define in AsymmetricEncryptionAttributes. For more information, see Encrypt data in the Amazon Web Services Payment Cryptography User Guide.
The Primary Account Number (PAN), a unique identifier for a payment credit or debit card and associates the card to a specific account holder.
", + "GenerateCardValidationDataInput$PrimaryAccountNumber": "The Primary Account Number (PAN), a unique identifier for a payment credit or debit card that associates the card with a specific account holder.
", + "GeneratePinDataInput$PrimaryAccountNumber": "The Primary Account Number (PAN), a unique identifier for a payment credit or debit card that associates the card with a specific account holder.
", + "MacAlgorithmEmv$PrimaryAccountNumber": "The Primary Account Number (PAN), a unique identifier for a payment credit or debit card and associates the card to a specific account holder.
", + "SessionKeyAmex$PrimaryAccountNumber": "The Primary Account Number (PAN) of the cardholder. A PAN is a unique identifier for a payment credit or debit card and associates the card to a specific account holder.
", + "SessionKeyEmv2000$PrimaryAccountNumber": "The Primary Account Number (PAN) of the cardholder. A PAN is a unique identifier for a payment credit or debit card and associates the card to a specific account holder.
", + "SessionKeyEmvCommon$PrimaryAccountNumber": "The Primary Account Number (PAN) of the cardholder. A PAN is a unique identifier for a payment credit or debit card and associates the card to a specific account holder.
", + "SessionKeyMastercard$PrimaryAccountNumber": "The Primary Account Number (PAN) of the cardholder. A PAN is a unique identifier for a payment credit or debit card and associates the card to a specific account holder.
", + "SessionKeyVisa$PrimaryAccountNumber": "The Primary Account Number (PAN) of the cardholder. A PAN is a unique identifier for a payment credit or debit card and associates the card to a specific account holder.
", + "TranslationPinDataIsoFormat034$PrimaryAccountNumber": "The Primary Account Number (PAN) of the cardholder. A PAN is a unique identifier for a payment credit or debit card and associates the card to a specific account holder.
", + "VerifyCardValidationDataInput$PrimaryAccountNumber": "The Primary Account Number (PAN), a unique identifier for a payment credit or debit card that associates the card with a specific account holder.
", + "VerifyPinDataInput$PrimaryAccountNumber": "The Primary Account Number (PAN), a unique identifier for a payment credit or debit card that associates the card with a specific account holder.
" + } + }, + "ProprietaryAuthenticationDataType": { + "base": null, + "refs": { + "CryptogramVerificationArpcMethod2$ProprietaryAuthenticationData": "The proprietary authentication data used by issuer for communication during online transaction using an EMV chip card.
" + } + }, "ReEncryptDataInput": { "base": null, "refs": { @@ -675,6 +660,20 @@ "refs": { } }, + "ServiceCodeType": { + "base": null, + "refs": { + "AmexCardSecurityCodeVersion2$ServiceCode": "The service code of the AMEX payment card. This is different from the Card Security Code (CSC).
", + "CardVerificationValue1$ServiceCode": "The service code of the payment card. This is different from Card Security Code (CSC).
", + "DynamicCardVerificationValue$ServiceCode": "The service code of the payment card. This is different from Card Security Code (CSC).
" + } + }, + "SessionDerivationDataType": { + "base": null, + "refs": { + "EmvEncryptionAttributes$SessionDerivationData": "The derivation value used to derive the ICC session key. It is typically the application transaction counter value padded with zeros or previous ARQC value padded with zeros as per EMV version 4.3 book 2.
" + } + }, "SessionKeyAmex": { "base": "Parameters to derive session key for an Amex payment card.
", "refs": { @@ -754,6 +753,18 @@ "WrappedKeyMaterial$Tr31KeyBlock": "The TR-31 wrapped key block.
" } }, + "TrackDataType": { + "base": null, + "refs": { + "DynamicCardVerificationCode$TrackData": "The data on the two tracks of magnetic cards used for financial transactions. This includes the cardholder name, PAN, expiration date, bank ID (BIN) and several other numbers the issuing bank uses to validate the data received.
" + } + }, + "TransactionDataType": { + "base": null, + "refs": { + "VerifyAuthRequestCryptogramInput$TransactionData": "The transaction data that Amazon Web Services Payment Cryptography uses for ARQC verification. The same transaction is used for ARQC generation outside of Amazon Web Services Payment Cryptography.
" + } + }, "TranslatePinDataInput": { "base": null, "refs": { @@ -785,6 +796,13 @@ "TranslationIsoFormats$IsoFormat1": "Parameters that are required for ISO9564 PIN format 1 tranlation.
" } }, + "ValidationDataType": { + "base": null, + "refs": { + "GenerateCardValidationDataOutput$ValidationData": "The CVV or CSC value that Amazon Web Services Payment Cryptography generates for the card.
", + "VerifyCardValidationDataInput$ValidationData": "The CVV or CSC value for use for card data verification within Amazon Web Services Payment Cryptography.
" + } + }, "ValidationException": { "base": "The request was denied due to an invalid request error.
", "refs": { @@ -813,6 +831,13 @@ "VerificationFailedException$Reason": "The reason for the exception.
" } }, + "VerificationValueType": { + "base": null, + "refs": { + "PinData$VerificationValue": "The unique data to identify a cardholder. In most cases, this is the same as cardholder's Primary Account Number (PAN). If a value is not provided, it defaults to PAN.
", + "VisaPinVerification$VerificationValue": "Parameters that are required to generate or verify Visa PVV (PIN Verification Value).
" + } + }, "VerifyAuthRequestCryptogramInput": { "base": null, "refs": { diff --git a/models/apis/qbusiness/2023-11-27/api-2.json b/models/apis/qbusiness/2023-11-27/api-2.json index 6ae2ed03c35..bb528337baf 100644 --- a/models/apis/qbusiness/2023-11-27/api-2.json +++ b/models/apis/qbusiness/2023-11-27/api-2.json @@ -2806,6 +2806,9 @@ "identityCenterInstanceArn": { "shape": "InstanceArn" }, + "personalizationConfiguration": { + "shape": "PersonalizationConfiguration" + }, "qAppsConfiguration": { "shape": "QAppsConfiguration" }, @@ -3979,6 +3982,9 @@ "identityCenterApplicationArn": { "shape": "IdcApplicationArn" }, + "personalizationConfiguration": { + "shape": "PersonalizationConfiguration" + }, "qAppsConfiguration": { "shape": "QAppsConfiguration" }, @@ -5482,6 +5488,24 @@ "sensitive": true, "type": "string" }, + "PersonalizationConfiguration": { + "members": { + "personalizationControlMode": { + "shape": "PersonalizationControlMode" + } + }, + "required": [ + "personalizationControlMode" + ], + "type": "structure" + }, + "PersonalizationControlMode": { + "enum": [ + "ENABLED", + "DISABLED" + ], + "type": "string" + }, "Plugin": { "members": { "buildStatus": { @@ -6423,6 +6447,9 @@ "identityCenterInstanceArn": { "shape": "InstanceArn" }, + "personalizationConfiguration": { + "shape": "PersonalizationConfiguration" + }, "qAppsConfiguration": { "shape": "QAppsConfiguration" }, diff --git a/models/apis/qbusiness/2023-11-27/docs-2.json b/models/apis/qbusiness/2023-11-27/docs-2.json index 6c8fba91424..469ad8f8a0b 100644 --- a/models/apis/qbusiness/2023-11-27/docs-2.json +++ b/models/apis/qbusiness/2023-11-27/docs-2.json @@ -1,6 +1,6 @@ { "version": "2.0", - "service": "This is the Amazon Q Business API Reference. Amazon Q Business is a fully managed, generative-AI powered enterprise chat assistant that you can deploy within your organization. Amazon Q Business enhances employee productivity by supporting key tasks such as question-answering, knowledge discovery, writing email messages, summarizing text, drafting document outlines, and brainstorming ideas. Users ask questions of Amazon Q Business and get answers that are presented in a conversational manner. For an introduction to the service, see the Amazon Q Business User Guide .
For an overview of the Amazon Q Business APIs, see Overview of Amazon Q Business API operations.
For information about the IAM access control permissions you need to use this API, see IAM roles for Amazon Q Business in the Amazon Q Business User Guide.
You can use the following AWS SDKs to access Amazon Q Business APIs:
The following resources provide additional information about using the Amazon Q Business API:
This is the Amazon Q Business API Reference. Amazon Q Business is a fully managed, generative-AI powered enterprise chat assistant that you can deploy within your organization. Amazon Q Business enhances employee productivity by supporting key tasks such as question-answering, knowledge discovery, writing email messages, summarizing text, drafting document outlines, and brainstorming ideas. Users ask questions of Amazon Q Business and get answers that are presented in a conversational manner. For an introduction to the service, see the Amazon Q Business User Guide .
For an overview of the Amazon Q Business APIs, see Overview of Amazon Q Business API operations.
For information about the IAM access control permissions you need to use this API, see IAM roles for Amazon Q Business in the Amazon Q Business User Guide.
The following resources provide additional information about using the Amazon Q Business API:
Asynchronously deletes one or more documents added using the BatchPutDocument API from an Amazon Q Business index.
You can see the progress of the deletion, and any error messages related to the process, by using CloudWatch.
", "BatchPutDocument": "Adds one or more documents to an Amazon Q Business index.
You use this API to:
ingest your structured and unstructured documents and documents stored in an Amazon S3 bucket into an Amazon Q Business index.
add custom attributes to documents in an Amazon Q Business index.
attach an access control list to the documents added to an Amazon Q Business index.
You can see the progress of the deletion, and any error messages related to the process, by using CloudWatch.
", @@ -1943,6 +1943,20 @@ "APISchema$payload": "The JSON or YAML-formatted payload defining the OpenAPI schema for a custom plugin.
" } }, + "PersonalizationConfiguration": { + "base": "Configuration information about chat response personalization. For more information, see Personalizing chat responses.
", + "refs": { + "CreateApplicationRequest$personalizationConfiguration": "Configuration information about chat response personalization. For more information, see Personalizing chat responses
", + "GetApplicationResponse$personalizationConfiguration": "Configuration information about chat response personalization. For more information, see Personalizing chat responses.
", + "UpdateApplicationRequest$personalizationConfiguration": "Configuration information about chat response personalization. For more information, see Personalizing chat responses.
" + } + }, + "PersonalizationControlMode": { + "base": null, + "refs": { + "PersonalizationConfiguration$personalizationControlMode": "An option to allow Amazon Q Business to customize chat responses using user specific metadata—specifically, location and job information—in your IAM Identity Center instance.
" + } + }, "Plugin": { "base": "Information about an Amazon Q Business plugin and its configuration.
", "refs": { diff --git a/models/endpoints/endpoints.json b/models/endpoints/endpoints.json index 91c22a854b0..e271448f8cb 100644 --- a/models/endpoints/endpoints.json +++ b/models/endpoints/endpoints.json @@ -3923,6 +3923,7 @@ "ap-southeast-3" : { }, "ap-southeast-4" : { }, "ca-central-1" : { }, + "ca-west-1" : { }, "eu-central-1" : { }, "eu-central-2" : { }, "eu-north-1" : { }, @@ -3992,6 +3993,7 @@ "cognito-idp" : { "endpoints" : { "af-south-1" : { }, + "ap-east-1" : { }, "ap-northeast-1" : { }, "ap-northeast-2" : { }, "ap-northeast-3" : { }, @@ -4002,6 +4004,7 @@ "ap-southeast-3" : { }, "ap-southeast-4" : { }, "ca-central-1" : { }, + "ca-west-1" : { }, "eu-central-1" : { }, "eu-central-2" : { }, "eu-north-1" : { }, @@ -17739,6 +17742,7 @@ "tags" : [ "fips" ] } ] }, + "ca-west-1" : { }, "eu-central-1" : { }, "eu-central-2" : { }, "eu-north-1" : { }, diff --git a/service/acm/api.go b/service/acm/api.go index ecc60288c4d..bab32edb8e9 100644 --- a/service/acm/api.go +++ b/service/acm/api.go @@ -543,10 +543,12 @@ func (c *ACM) GetCertificateRequest(input *GetCertificateInput) (req *request.Re // GetCertificate API operation for AWS Certificate Manager. // -// Retrieves an Amazon-issued certificate and its certificate chain. The chain -// consists of the certificate of the issuing CA and the intermediate certificates -// of any other subordinate CAs. All of the certificates are base64 encoded. -// You can use OpenSSL (https://wiki.openssl.org/index.php/Command_Line_Utilities) +// Retrieves a certificate and its certificate chain. The certificate may be +// either a public or private certificate issued using the ACM RequestCertificate +// action, or a certificate imported into ACM using the ImportCertificate action. +// The chain consists of the certificate of the issuing CA and the intermediate +// certificates of any other subordinate CAs. All of the certificates are base64 +// encoded. You can use OpenSSL (https://wiki.openssl.org/index.php/Command_Line_Utilities) // to decode the certificates and inspect individual fields. // // Returns awserr.Error for service API and SDK errors. Use runtime type assertions @@ -656,12 +658,6 @@ func (c *ACM) ImportCertificateRequest(input *ImportCertificateInput) (req *requ // // - The private key must be no larger than 5 KB (5,120 bytes). // -// - If the certificate you are importing is not self-signed, you must enter -// its certificate chain. -// -// - If a certificate chain is included, the issuer must be the subject of -// one of the certificates in the chain. -// // - The certificate, private key, and certificate chain must be PEM-encoded. // // - The current time must be between the Not Before and Not After certificate @@ -795,10 +791,14 @@ func (c *ACM) ListCertificatesRequest(input *ListCertificatesInput) (req *reques // ListCertificates API operation for AWS Certificate Manager. // -// Retrieves a list of certificate ARNs and domain names. You can request that -// only certificates that match a specific status be listed. You can also filter -// by specific attributes of the certificate. Default filtering returns only -// RSA_2048 certificates. For more information, see Filters. +// Retrieves a list of certificate ARNs and domain names. By default, the API +// returns RSA_2048 certificates. To return all certificates in the account, +// include the keyType filter with the values [RSA_1024, RSA_2048, RSA_3072, +// RSA_4096, EC_prime256v1, EC_secp384r1, EC_secp521r1]. +// +// In addition to keyType, you can also filter by the CertificateStatuses, keyUsage, +// and extendedKeyUsage attributes on the certificate. For more information, +// see Filters. // // Returns awserr.Error for service API and SDK errors. Use runtime type assertions // with awserr.Error's Code and Message methods to get detailed information about @@ -2116,12 +2116,12 @@ type CertificateSummary struct { // consists of a name and an object identifier (OID). ExtendedKeyUsages []*string `type:"list" enum:"ExtendedKeyUsageName"` - // When called by ListCertificates (https://docs.aws.amazon.com/acm/latestAPIReference/API_ListCertificates.html), - // indicates whether the full list of subject alternative names has been included - // in the response. If false, the response includes all of the subject alternative - // names included in the certificate. If true, the response only includes the - // first 100 subject alternative names included in the certificate. To display - // the full list of subject alternative names, use DescribeCertificate (https://docs.aws.amazon.com/acm/latestAPIReference/API_DescribeCertificate.html). + // When called by ListCertificates, indicates whether the full list of subject + // alternative names has been included in the response. If false, the response + // includes all of the subject alternative names included in the certificate. + // If true, the response only includes the first 100 subject alternative names + // included in the certificate. To display the full list of subject alternative + // names, use DescribeCertificate. HasAdditionalSubjectAlternativeNames *bool `type:"boolean"` // The date and time when the certificate was imported. This value exists only @@ -2178,10 +2178,9 @@ type CertificateSummary struct { // canonical domain name (CN) of the certificate and additional domain names // that can be used to connect to the website. // - // When called by ListCertificates (https://docs.aws.amazon.com/acm/latestAPIReference/API_ListCertificates.html), - // this parameter will only return the first 100 subject alternative names included - // in the certificate. To display the full list of subject alternative names, - // use DescribeCertificate (https://docs.aws.amazon.com/acm/latestAPIReference/API_DescribeCertificate.html). + // When called by ListCertificates, this parameter will only return the first + // 100 subject alternative names included in the certificate. To display the + // full list of subject alternative names, use DescribeCertificate. SubjectAlternativeNameSummaries []*string `min:"1" type:"list"` // The source of the certificate. For certificates provided by ACM, this value @@ -4424,11 +4423,26 @@ type RequestCertificateInput struct { // uses to encrypt data. RSA is the default key algorithm for ACM certificates. // Elliptic Curve Digital Signature Algorithm (ECDSA) keys are smaller, offering // security comparable to RSA keys but with greater computing efficiency. However, - // ECDSA is not supported by all network clients. Some AWS services may require - // RSA keys, or only support ECDSA keys of a particular size, while others allow - // the use of either RSA and ECDSA keys to ensure that compatibility is not - // broken. Check the requirements for the AWS service where you plan to deploy - // your certificate. + // ECDSA is not supported by all network clients. Some Amazon Web Services services + // may require RSA keys, or only support ECDSA keys of a particular size, while + // others allow the use of either RSA and ECDSA keys to ensure that compatibility + // is not broken. Check the requirements for the Amazon Web Services service + // where you plan to deploy your certificate. For more information about selecting + // an algorithm, see Key algorithms (https://docs.aws.amazon.com/acm/latest/userguide/acm-certificate.html#algorithms). + // + // Algorithms supported for an ACM certificate request include: + // + // * RSA_2048 + // + // * EC_prime256v1 + // + // * EC_secp384r1 + // + // Other listed algorithms are for imported certificates only. + // + // When you request a private PKI certificate signed by a CA from Amazon Web + // Services Private CA, the specified signing algorithm family (RSA or ECDSA) + // must match the algorithm family of the CA's secret key. // // Default: RSA_2048 KeyAlgorithm *string `type:"string" enum:"KeyAlgorithm"` diff --git a/service/paymentcryptographydata/api.go b/service/paymentcryptographydata/api.go index 80361536090..fe4e32dfea9 100644 --- a/service/paymentcryptographydata/api.go +++ b/service/paymentcryptographydata/api.go @@ -1427,8 +1427,12 @@ type AmexCardSecurityCodeVersion1 struct { // The expiry date of a payment card. // + // CardExpiryDate is a sensitive parameter and its value will be + // replaced with "sensitive" in string returned by AmexCardSecurityCodeVersion1's + // String and GoString methods. + // // CardExpiryDate is a required field - CardExpiryDate *string `min:"4" type:"string" required:"true"` + CardExpiryDate *string `min:"4" type:"string" required:"true" sensitive:"true"` } // String returns the string representation. @@ -1478,14 +1482,22 @@ type AmexCardSecurityCodeVersion2 struct { // The expiry date of a payment card. // + // CardExpiryDate is a sensitive parameter and its value will be + // replaced with "sensitive" in string returned by AmexCardSecurityCodeVersion2's + // String and GoString methods. + // // CardExpiryDate is a required field - CardExpiryDate *string `min:"4" type:"string" required:"true"` + CardExpiryDate *string `min:"4" type:"string" required:"true" sensitive:"true"` // The service code of the AMEX payment card. This is different from the Card // Security Code (CSC). // + // ServiceCode is a sensitive parameter and its value will be + // replaced with "sensitive" in string returned by AmexCardSecurityCodeVersion2's + // String and GoString methods. + // // ServiceCode is a required field - ServiceCode *string `min:"3" type:"string" required:"true"` + ServiceCode *string `min:"3" type:"string" required:"true" sensitive:"true"` } // String returns the string representation. @@ -1960,14 +1972,22 @@ type CardVerificationValue1 struct { // The expiry date of a payment card. // + // CardExpiryDate is a sensitive parameter and its value will be + // replaced with "sensitive" in string returned by CardVerificationValue1's + // String and GoString methods. + // // CardExpiryDate is a required field - CardExpiryDate *string `min:"4" type:"string" required:"true"` + CardExpiryDate *string `min:"4" type:"string" required:"true" sensitive:"true"` // The service code of the payment card. This is different from Card Security // Code (CSC). // + // ServiceCode is a sensitive parameter and its value will be + // replaced with "sensitive" in string returned by CardVerificationValue1's + // String and GoString methods. + // // ServiceCode is a required field - ServiceCode *string `min:"3" type:"string" required:"true"` + ServiceCode *string `min:"3" type:"string" required:"true" sensitive:"true"` } // String returns the string representation. @@ -2029,8 +2049,12 @@ type CardVerificationValue2 struct { // The expiry date of a payment card. // + // CardExpiryDate is a sensitive parameter and its value will be + // replaced with "sensitive" in string returned by CardVerificationValue2's + // String and GoString methods. + // // CardExpiryDate is a required field - CardExpiryDate *string `min:"4" type:"string" required:"true"` + CardExpiryDate *string `min:"4" type:"string" required:"true" sensitive:"true"` } // String returns the string representation. @@ -2204,7 +2228,11 @@ type CryptogramVerificationArpcMethod2 struct { // The proprietary authentication data used by issuer for communication during // online transaction using an EMV chip card. - ProprietaryAuthenticationData *string `min:"1" type:"string"` + // + // ProprietaryAuthenticationData is a sensitive parameter and its value will be + // replaced with "sensitive" in string returned by CryptogramVerificationArpcMethod2's + // String and GoString methods. + ProprietaryAuthenticationData *string `min:"1" type:"string" sensitive:"true"` } // String returns the string representation. @@ -2441,8 +2469,12 @@ type DiscoverDynamicCardVerificationCode struct { // The expiry date of a payment card. // + // CardExpiryDate is a sensitive parameter and its value will be + // replaced with "sensitive" in string returned by DiscoverDynamicCardVerificationCode's + // String and GoString methods. + // // CardExpiryDate is a required field - CardExpiryDate *string `min:"4" type:"string" required:"true"` + CardExpiryDate *string `min:"4" type:"string" required:"true" sensitive:"true"` // A random number that is generated by the issuer. // @@ -2780,8 +2812,12 @@ type DynamicCardVerificationCode struct { // This includes the cardholder name, PAN, expiration date, bank ID (BIN) and // several other numbers the issuing bank uses to validate the data received. // + // TrackData is a sensitive parameter and its value will be + // replaced with "sensitive" in string returned by DynamicCardVerificationCode's + // String and GoString methods. + // // TrackData is a required field - TrackData *string `min:"2" type:"string" required:"true"` + TrackData *string `min:"2" type:"string" required:"true" sensitive:"true"` // A random number generated by the issuer. // @@ -2877,8 +2913,12 @@ type DynamicCardVerificationValue struct { // The expiry date of a payment card. // + // CardExpiryDate is a sensitive parameter and its value will be + // replaced with "sensitive" in string returned by DynamicCardVerificationValue's + // String and GoString methods. + // // CardExpiryDate is a required field - CardExpiryDate *string `min:"4" type:"string" required:"true"` + CardExpiryDate *string `min:"4" type:"string" required:"true" sensitive:"true"` // A number that identifies and differentiates payment cards with the same Primary // Account Number (PAN). @@ -2889,8 +2929,12 @@ type DynamicCardVerificationValue struct { // The service code of the payment card. This is different from Card Security // Code (CSC). // + // ServiceCode is a sensitive parameter and its value will be + // replaced with "sensitive" in string returned by DynamicCardVerificationValue's + // String and GoString methods. + // // ServiceCode is a required field - ServiceCode *string `min:"3" type:"string" required:"true"` + ServiceCode *string `min:"3" type:"string" required:"true" sensitive:"true"` } // String returns the string representation. @@ -3010,8 +3054,12 @@ type EmvEncryptionAttributes struct { // the application transaction counter value padded with zeros or previous ARQC // value padded with zeros as per EMV version 4.3 book 2. // + // SessionDerivationData is a sensitive parameter and its value will be + // replaced with "sensitive" in string returned by EmvEncryptionAttributes's + // String and GoString methods. + // // SessionDerivationData is a required field - SessionDerivationData *string `min:"16" type:"string" required:"true"` + SessionDerivationData *string `min:"16" type:"string" required:"true" sensitive:"true"` } // String returns the string representation. @@ -3490,8 +3538,12 @@ type GenerateCardValidationDataOutput struct { // The CVV or CSC value that Amazon Web Services Payment Cryptography generates // for the card. // + // ValidationData is a sensitive parameter and its value will be + // replaced with "sensitive" in string returned by GenerateCardValidationDataOutput's + // String and GoString methods. + // // ValidationData is a required field - ValidationData *string `min:"3" type:"string" required:"true"` + ValidationData *string `min:"3" type:"string" required:"true" sensitive:"true"` } // String returns the string representation. @@ -3653,8 +3705,12 @@ type GenerateMacOutput struct { // The MAC cryptogram generated within Amazon Web Services Payment Cryptography. // + // Mac is a sensitive parameter and its value will be + // replaced with "sensitive" in string returned by GenerateMacOutput's + // String and GoString methods. + // // Mac is a required field - Mac *string `min:"4" type:"string" required:"true"` + Mac *string `min:"4" type:"string" required:"true" sensitive:"true"` } // String returns the string representation. @@ -3844,8 +3900,12 @@ type GeneratePinDataOutput struct { // PIN (Personal Identification Number), generated in accordance with ISO 9564 // standard. // + // EncryptedPinBlock is a sensitive parameter and its value will be + // replaced with "sensitive" in string returned by GeneratePinDataOutput's + // String and GoString methods. + // // EncryptedPinBlock is a required field - EncryptedPinBlock *string `min:"16" type:"string" required:"true"` + EncryptedPinBlock *string `min:"16" type:"string" required:"true" sensitive:"true"` // The keyARN of the PEK that Amazon Web Services Payment Cryptography uses // for encrypted pin block generation. @@ -3948,13 +4008,21 @@ type Ibm3624NaturalPin struct { // used to convert the algorithm intermediate result from hexadecimal characters // to decimal. // + // DecimalizationTable is a sensitive parameter and its value will be + // replaced with "sensitive" in string returned by Ibm3624NaturalPin's + // String and GoString methods. + // // DecimalizationTable is a required field - DecimalizationTable *string `min:"16" type:"string" required:"true"` + DecimalizationTable *string `min:"16" type:"string" required:"true" sensitive:"true"` // The unique data for cardholder identification. // + // PinValidationData is a sensitive parameter and its value will be + // replaced with "sensitive" in string returned by Ibm3624NaturalPin's + // String and GoString methods. + // // PinValidationData is a required field - PinValidationData *string `min:"4" type:"string" required:"true"` + PinValidationData *string `min:"4" type:"string" required:"true" sensitive:"true"` // The padding character for validation data. // @@ -4035,18 +4103,30 @@ type Ibm3624PinFromOffset struct { // used to convert the algorithm intermediate result from hexadecimal characters // to decimal. // + // DecimalizationTable is a sensitive parameter and its value will be + // replaced with "sensitive" in string returned by Ibm3624PinFromOffset's + // String and GoString methods. + // // DecimalizationTable is a required field - DecimalizationTable *string `min:"16" type:"string" required:"true"` + DecimalizationTable *string `min:"16" type:"string" required:"true" sensitive:"true"` // The PIN offset value. // + // PinOffset is a sensitive parameter and its value will be + // replaced with "sensitive" in string returned by Ibm3624PinFromOffset's + // String and GoString methods. + // // PinOffset is a required field - PinOffset *string `min:"4" type:"string" required:"true"` + PinOffset *string `min:"4" type:"string" required:"true" sensitive:"true"` // The unique data for cardholder identification. // + // PinValidationData is a sensitive parameter and its value will be + // replaced with "sensitive" in string returned by Ibm3624PinFromOffset's + // String and GoString methods. + // // PinValidationData is a required field - PinValidationData *string `min:"4" type:"string" required:"true"` + PinValidationData *string `min:"4" type:"string" required:"true" sensitive:"true"` // The padding character for validation data. // @@ -4138,20 +4218,32 @@ type Ibm3624PinOffset struct { // used to convert the algorithm intermediate result from hexadecimal characters // to decimal. // + // DecimalizationTable is a sensitive parameter and its value will be + // replaced with "sensitive" in string returned by Ibm3624PinOffset's + // String and GoString methods. + // // DecimalizationTable is a required field - DecimalizationTable *string `min:"16" type:"string" required:"true"` + DecimalizationTable *string `min:"16" type:"string" required:"true" sensitive:"true"` // The encrypted PIN block data. According to ISO 9564 standard, a PIN Block // is an encoded representation of a payment card Personal Account Number (PAN) // and the cardholder Personal Identification Number (PIN). // + // EncryptedPinBlock is a sensitive parameter and its value will be + // replaced with "sensitive" in string returned by Ibm3624PinOffset's + // String and GoString methods. + // // EncryptedPinBlock is a required field - EncryptedPinBlock *string `min:"16" type:"string" required:"true"` + EncryptedPinBlock *string `min:"16" type:"string" required:"true" sensitive:"true"` // The unique data for cardholder identification. // + // PinValidationData is a sensitive parameter and its value will be + // replaced with "sensitive" in string returned by Ibm3624PinOffset's + // String and GoString methods. + // // PinValidationData is a required field - PinValidationData *string `min:"4" type:"string" required:"true"` + PinValidationData *string `min:"4" type:"string" required:"true" sensitive:"true"` // The padding character for validation data. // @@ -4244,18 +4336,30 @@ type Ibm3624PinVerification struct { // used to convert the algorithm intermediate result from hexadecimal characters // to decimal. // + // DecimalizationTable is a sensitive parameter and its value will be + // replaced with "sensitive" in string returned by Ibm3624PinVerification's + // String and GoString methods. + // // DecimalizationTable is a required field - DecimalizationTable *string `min:"16" type:"string" required:"true"` + DecimalizationTable *string `min:"16" type:"string" required:"true" sensitive:"true"` // The PIN offset value. // + // PinOffset is a sensitive parameter and its value will be + // replaced with "sensitive" in string returned by Ibm3624PinVerification's + // String and GoString methods. + // // PinOffset is a required field - PinOffset *string `min:"4" type:"string" required:"true"` + PinOffset *string `min:"4" type:"string" required:"true" sensitive:"true"` // The unique data for cardholder identification. // + // PinValidationData is a sensitive parameter and its value will be + // replaced with "sensitive" in string returned by Ibm3624PinVerification's + // String and GoString methods. + // // PinValidationData is a required field - PinValidationData *string `min:"4" type:"string" required:"true"` + PinValidationData *string `min:"4" type:"string" required:"true" sensitive:"true"` // The padding character for validation data. // @@ -4347,13 +4451,21 @@ type Ibm3624RandomPin struct { // used to convert the algorithm intermediate result from hexadecimal characters // to decimal. // + // DecimalizationTable is a sensitive parameter and its value will be + // replaced with "sensitive" in string returned by Ibm3624RandomPin's + // String and GoString methods. + // // DecimalizationTable is a required field - DecimalizationTable *string `min:"16" type:"string" required:"true"` + DecimalizationTable *string `min:"16" type:"string" required:"true" sensitive:"true"` // The unique data for cardholder identification. // + // PinValidationData is a sensitive parameter and its value will be + // replaced with "sensitive" in string returned by Ibm3624RandomPin's + // String and GoString methods. + // // PinValidationData is a required field - PinValidationData *string `min:"4" type:"string" required:"true"` + PinValidationData *string `min:"4" type:"string" required:"true" sensitive:"true"` // The padding character for validation data. // @@ -4798,12 +4910,20 @@ type PinData struct { _ struct{} `type:"structure"` // The PIN offset value. - PinOffset *string `min:"4" type:"string"` + // + // PinOffset is a sensitive parameter and its value will be + // replaced with "sensitive" in string returned by PinData's + // String and GoString methods. + PinOffset *string `min:"4" type:"string" sensitive:"true"` // The unique data to identify a cardholder. In most cases, this is the same // as cardholder's Primary Account Number (PAN). If a value is not provided, // it defaults to PAN. - VerificationValue *string `min:"4" type:"string"` + // + // VerificationValue is a sensitive parameter and its value will be + // replaced with "sensitive" in string returned by PinData's + // String and GoString methods. + VerificationValue *string `min:"4" type:"string" sensitive:"true"` } // String returns the string representation. @@ -5555,7 +5675,11 @@ type SessionKeyDerivationValue struct { _ struct{} `type:"structure"` // The cryptogram provided by the terminal during transaction processing. - ApplicationCryptogram *string `min:"16" type:"string"` + // + // ApplicationCryptogram is a sensitive parameter and its value will be + // replaced with "sensitive" in string returned by SessionKeyDerivationValue's + // String and GoString methods. + ApplicationCryptogram *string `min:"16" type:"string" sensitive:"true"` // The transaction counter that is provided by the terminal during transaction // processing. @@ -6328,8 +6452,12 @@ type TranslatePinDataOutput struct { // The outgoing encrypted PIN block data after translation. // + // PinBlock is a sensitive parameter and its value will be + // replaced with "sensitive" in string returned by TranslatePinDataOutput's + // String and GoString methods. + // // PinBlock is a required field - PinBlock *string `min:"16" type:"string" required:"true"` + PinBlock *string `min:"16" type:"string" required:"true" sensitive:"true"` } // String returns the string representation. @@ -6720,8 +6848,12 @@ type VerifyAuthRequestCryptogramInput struct { // The auth request cryptogram imported into Amazon Web Services Payment Cryptography // for ARQC verification using a major encryption key and transaction data. // + // AuthRequestCryptogram is a sensitive parameter and its value will be + // replaced with "sensitive" in string returned by VerifyAuthRequestCryptogramInput's + // String and GoString methods. + // // AuthRequestCryptogram is a required field - AuthRequestCryptogram *string `min:"16" type:"string" required:"true"` + AuthRequestCryptogram *string `min:"16" type:"string" required:"true" sensitive:"true"` // The attributes and values for auth request cryptogram verification. These // parameters are required in case using ARPC Method 1 or Method 2 for ARQC @@ -6753,8 +6885,12 @@ type VerifyAuthRequestCryptogramInput struct { // ARQC verification. The same transaction is used for ARQC generation outside // of Amazon Web Services Payment Cryptography. // + // TransactionData is a sensitive parameter and its value will be + // replaced with "sensitive" in string returned by VerifyAuthRequestCryptogramInput's + // String and GoString methods. + // // TransactionData is a required field - TransactionData *string `min:"2" type:"string" required:"true"` + TransactionData *string `min:"2" type:"string" required:"true" sensitive:"true"` } // String returns the string representation. @@ -6860,7 +6996,11 @@ type VerifyAuthRequestCryptogramOutput struct { // The result for ARQC verification or ARPC generation within Amazon Web Services // Payment Cryptography. - AuthResponseValue *string `min:"1" type:"string"` + // + // AuthResponseValue is a sensitive parameter and its value will be + // replaced with "sensitive" in string returned by VerifyAuthRequestCryptogramOutput's + // String and GoString methods. + AuthResponseValue *string `min:"1" type:"string" sensitive:"true"` // The keyARN of the major encryption key that Amazon Web Services Payment Cryptography // uses for ARQC verification. @@ -6937,8 +7077,12 @@ type VerifyCardValidationDataInput struct { // The CVV or CSC value for use for card data verification within Amazon Web // Services Payment Cryptography. // + // ValidationData is a sensitive parameter and its value will be + // replaced with "sensitive" in string returned by VerifyCardValidationDataInput's + // String and GoString methods. + // // ValidationData is a required field - ValidationData *string `min:"3" type:"string" required:"true"` + ValidationData *string `min:"3" type:"string" required:"true" sensitive:"true"` // The algorithm to use for verification of card data within Amazon Web Services // Payment Cryptography. @@ -7258,8 +7402,12 @@ type VerifyPinDataInput struct { // The encrypted PIN block data that Amazon Web Services Payment Cryptography // verifies. // + // EncryptedPinBlock is a sensitive parameter and its value will be + // replaced with "sensitive" in string returned by VerifyPinDataInput's + // String and GoString methods. + // // EncryptedPinBlock is a required field - EncryptedPinBlock *string `min:"16" type:"string" required:"true"` + EncryptedPinBlock *string `min:"16" type:"string" required:"true" sensitive:"true"` // The keyARN of the encryption key under which the PIN block data is encrypted. // This key type can be PEK or BDK. @@ -7562,8 +7710,12 @@ type VisaPinVerification struct { // Parameters that are required to generate or verify Visa PVV (PIN Verification // Value). // + // VerificationValue is a sensitive parameter and its value will be + // replaced with "sensitive" in string returned by VisaPinVerification's + // String and GoString methods. + // // VerificationValue is a required field - VerificationValue *string `min:"4" type:"string" required:"true"` + VerificationValue *string `min:"4" type:"string" required:"true" sensitive:"true"` } // String returns the string representation. @@ -7622,8 +7774,12 @@ type VisaPinVerificationValue struct { // The encrypted PIN block data to verify. // + // EncryptedPinBlock is a sensitive parameter and its value will be + // replaced with "sensitive" in string returned by VisaPinVerificationValue's + // String and GoString methods. + // // EncryptedPinBlock is a required field - EncryptedPinBlock *string `min:"16" type:"string" required:"true"` + EncryptedPinBlock *string `min:"16" type:"string" required:"true" sensitive:"true"` // The value for PIN verification index. It is used in the Visa PIN algorithm // to calculate the PVV (PIN Verification Value). diff --git a/service/qbusiness/api.go b/service/qbusiness/api.go index 7ca0693186d..d56f26892ad 100644 --- a/service/qbusiness/api.go +++ b/service/qbusiness/api.go @@ -9453,6 +9453,10 @@ type CreateApplicationInput struct { // either creating for—or connecting to—your Amazon Q Business application. IdentityCenterInstanceArn *string `locationName:"identityCenterInstanceArn" min:"10" type:"string"` + // Configuration information about chat response personalization. For more information, + // see Personalizing chat responses (https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/personalizing-chat-responses.html) + PersonalizationConfiguration *PersonalizationConfiguration `locationName:"personalizationConfiguration" type:"structure"` + // An option to allow end users to create and use Amazon Q Apps in the web experience. QAppsConfiguration *QAppsConfiguration `locationName:"qAppsConfiguration" type:"structure"` @@ -9510,6 +9514,11 @@ func (s *CreateApplicationInput) Validate() error { invalidParams.AddNested("EncryptionConfiguration", err.(request.ErrInvalidParams)) } } + if s.PersonalizationConfiguration != nil { + if err := s.PersonalizationConfiguration.Validate(); err != nil { + invalidParams.AddNested("PersonalizationConfiguration", err.(request.ErrInvalidParams)) + } + } if s.QAppsConfiguration != nil { if err := s.QAppsConfiguration.Validate(); err != nil { invalidParams.AddNested("QAppsConfiguration", err.(request.ErrInvalidParams)) @@ -9568,6 +9577,12 @@ func (s *CreateApplicationInput) SetIdentityCenterInstanceArn(v string) *CreateA return s } +// SetPersonalizationConfiguration sets the PersonalizationConfiguration field's value. +func (s *CreateApplicationInput) SetPersonalizationConfiguration(v *PersonalizationConfiguration) *CreateApplicationInput { + s.PersonalizationConfiguration = v + return s +} + // SetQAppsConfiguration sets the QAppsConfiguration field's value. func (s *CreateApplicationInput) SetQAppsConfiguration(v *QAppsConfiguration) *CreateApplicationInput { s.QAppsConfiguration = v @@ -13248,6 +13263,10 @@ type GetApplicationOutput struct { // to your Amazon Q Business application. IdentityCenterApplicationArn *string `locationName:"identityCenterApplicationArn" min:"10" type:"string"` + // Configuration information about chat response personalization. For more information, + // see Personalizing chat responses (https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/personalizing-chat-responses.html). + PersonalizationConfiguration *PersonalizationConfiguration `locationName:"personalizationConfiguration" type:"structure"` + // Settings for whether end users can create and use Amazon Q Apps in the web // experience. QAppsConfiguration *QAppsConfiguration `locationName:"qAppsConfiguration" type:"structure"` @@ -13335,6 +13354,12 @@ func (s *GetApplicationOutput) SetIdentityCenterApplicationArn(v string) *GetApp return s } +// SetPersonalizationConfiguration sets the PersonalizationConfiguration field's value. +func (s *GetApplicationOutput) SetPersonalizationConfiguration(v *PersonalizationConfiguration) *GetApplicationOutput { + s.PersonalizationConfiguration = v + return s +} + // SetQAppsConfiguration sets the QAppsConfiguration field's value. func (s *GetApplicationOutput) SetQAppsConfiguration(v *QAppsConfiguration) *GetApplicationOutput { s.QAppsConfiguration = v @@ -17654,6 +17679,56 @@ func (s *OAuth2ClientCredentialConfiguration) SetSecretArn(v string) *OAuth2Clie return s } +// Configuration information about chat response personalization. For more information, +// see Personalizing chat responses (https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/personalizing-chat-responses.html). +type PersonalizationConfiguration struct { + _ struct{} `type:"structure"` + + // An option to allow Amazon Q Business to customize chat responses using user + // specific metadata—specifically, location and job information—in your + // IAM Identity Center instance. + // + // PersonalizationControlMode is a required field + PersonalizationControlMode *string `locationName:"personalizationControlMode" type:"string" required:"true" enum:"PersonalizationControlMode"` +} + +// String returns the string representation. +// +// API parameter values that are decorated as "sensitive" in the API will not +// be included in the string output. The member name will be present, but the +// value will be replaced with "sensitive". +func (s PersonalizationConfiguration) String() string { + return awsutil.Prettify(s) +} + +// GoString returns the string representation. +// +// API parameter values that are decorated as "sensitive" in the API will not +// be included in the string output. The member name will be present, but the +// value will be replaced with "sensitive". +func (s PersonalizationConfiguration) GoString() string { + return s.String() +} + +// Validate inspects the fields of the type to determine if they are valid. +func (s *PersonalizationConfiguration) Validate() error { + invalidParams := request.ErrInvalidParams{Context: "PersonalizationConfiguration"} + if s.PersonalizationControlMode == nil { + invalidParams.Add(request.NewErrParamRequired("PersonalizationControlMode")) + } + + if invalidParams.Len() > 0 { + return invalidParams + } + return nil +} + +// SetPersonalizationControlMode sets the PersonalizationControlMode field's value. +func (s *PersonalizationConfiguration) SetPersonalizationControlMode(v string) *PersonalizationConfiguration { + s.PersonalizationControlMode = &v + return s +} + // Information about an Amazon Q Business plugin and its configuration. type Plugin struct { _ struct{} `type:"structure"` @@ -20151,6 +20226,10 @@ type UpdateApplicationInput struct { // either creating for—or connecting to—your Amazon Q Business application. IdentityCenterInstanceArn *string `locationName:"identityCenterInstanceArn" min:"10" type:"string"` + // Configuration information about chat response personalization. For more information, + // see Personalizing chat responses (https://docs.aws.amazon.com/amazonq/latest/qbusiness-ug/personalizing-chat-responses.html). + PersonalizationConfiguration *PersonalizationConfiguration `locationName:"personalizationConfiguration" type:"structure"` + // An option to allow end users to create and use Amazon Q Apps in the web experience. QAppsConfiguration *QAppsConfiguration `locationName:"qAppsConfiguration" type:"structure"` @@ -20197,6 +20276,11 @@ func (s *UpdateApplicationInput) Validate() error { invalidParams.AddNested("AttachmentsConfiguration", err.(request.ErrInvalidParams)) } } + if s.PersonalizationConfiguration != nil { + if err := s.PersonalizationConfiguration.Validate(); err != nil { + invalidParams.AddNested("PersonalizationConfiguration", err.(request.ErrInvalidParams)) + } + } if s.QAppsConfiguration != nil { if err := s.QAppsConfiguration.Validate(); err != nil { invalidParams.AddNested("QAppsConfiguration", err.(request.ErrInvalidParams)) @@ -20239,6 +20323,12 @@ func (s *UpdateApplicationInput) SetIdentityCenterInstanceArn(v string) *UpdateA return s } +// SetPersonalizationConfiguration sets the PersonalizationConfiguration field's value. +func (s *UpdateApplicationInput) SetPersonalizationConfiguration(v *PersonalizationConfiguration) *UpdateApplicationInput { + s.PersonalizationConfiguration = v + return s +} + // SetQAppsConfiguration sets the QAppsConfiguration field's value. func (s *UpdateApplicationInput) SetQAppsConfiguration(v *QAppsConfiguration) *UpdateApplicationInput { s.QAppsConfiguration = v @@ -22346,6 +22436,22 @@ func NumberAttributeBoostingType_Values() []string { } } +const ( + // PersonalizationControlModeEnabled is a PersonalizationControlMode enum value + PersonalizationControlModeEnabled = "ENABLED" + + // PersonalizationControlModeDisabled is a PersonalizationControlMode enum value + PersonalizationControlModeDisabled = "DISABLED" +) + +// PersonalizationControlMode_Values returns all elements of the PersonalizationControlMode enum +func PersonalizationControlMode_Values() []string { + return []string{ + PersonalizationControlModeEnabled, + PersonalizationControlModeDisabled, + } +} + const ( // PluginBuildStatusReady is a PluginBuildStatus enum value PluginBuildStatusReady = "READY" diff --git a/service/qbusiness/doc.go b/service/qbusiness/doc.go index 81e3c272793..1b7a5358d3a 100644 --- a/service/qbusiness/doc.go +++ b/service/qbusiness/doc.go @@ -19,22 +19,6 @@ // this API, see IAM roles for Amazon Q Business (https://docs.aws.amazon.com/amazonq/latest/business-use-dg/iam-roles.html) // in the Amazon Q Business User Guide. // -// You can use the following AWS SDKs to access Amazon Q Business APIs: -// -// - AWS SDK for C++ (https://docs.aws.amazon.com/sdk-for-cpp) -// -// - AWS SDK for Go (https://docs.aws.amazon.com/sdk-for-go) -// -// - AWS SDK for Java (https://docs.aws.amazon.com/sdk-for-java) -// -// - AWS SDK for JavaScript (https://docs.aws.amazon.com/sdk-for-javascript) -// -// - AWS SDK for .NET (https://docs.aws.amazon.com/sdk-for-net) -// -// - AWS SDK for Python (Boto3) (https://docs.aws.amazon.com/pythonsdk) -// -// - AWS SDK for Ruby (https://docs.aws.amazon.com/sdk-for-ruby) -// // The following resources provide additional information about using the Amazon // Q Business API: //