|
1855 | 1855 | "requestUri":"/" |
1856 | 1856 | }, |
1857 | 1857 | "input":{"shape":"DeleteSecurityGroupRequest"}, |
| 1858 | + "output":{"shape":"DeleteSecurityGroupResult"}, |
1858 | 1859 | "documentation":"<p>Deletes a security group.</p> <p>If you attempt to delete a security group that is associated with an instance or network interface, is referenced by another security group in the same VPC, or has a VPC association, the operation fails with <code>DependencyViolation</code>.</p>" |
1859 | 1860 | }, |
1860 | 1861 | "DeleteSnapshot":{ |
|
6388 | 6389 | }, |
6389 | 6390 | "input":{"shape":"StartDeclarativePoliciesReportRequest"}, |
6390 | 6391 | "output":{"shape":"StartDeclarativePoliciesReportResult"}, |
6391 | | - "documentation":"<p>Generates an account status report. The report is generated asynchronously, and can take several hours to complete.</p> <p>The report provides the current status of all attributes supported by declarative policies for the accounts within the specified scope. The scope is determined by the specified <code>TargetId</code>, which can represent an individual account, or all the accounts that fall under the specified organizational unit (OU) or root (the entire Amazon Web Services Organization).</p> <p>The report is saved to your specified S3 bucket, using the following path structure (with the <i>italicized placeholders</i> representing your specific values):</p> <p> <code>s3://<i>amzn-s3-demo-bucket</i>/<i>your-optional-s3-prefix</i>/ec2_<i>targetId</i>_<i>reportId</i>_<i>yyyyMMdd</i>T<i>hhmm</i>Z.csv</code> </p> <p class=\"title\"> <b>Prerequisites for generating a report</b> </p> <ul> <li> <p>The <code>StartDeclarativePoliciesReport</code> API can only be called by the management account or delegated administrators for the organization.</p> </li> <li> <p>An S3 bucket must be available before generating the report (you can create a new one or use an existing one), and it must have an appropriate bucket policy. For a sample S3 policy, see <i>Sample Amazon S3 policy</i> under .</p> </li> <li> <p>Trusted access must be enabled for the service for which the declarative policy will enforce a baseline configuration. If you use the Amazon Web Services Organizations console, this is done automatically when you enable declarative policies. The API uses the following service principal to identify the EC2 service: <code>ec2.amazonaws.com</code>. For more information on how to enable trusted access with the Amazon Web Services CLI and Amazon Web Services SDKs, see <a href=\"https://docs.aws.amazon.com/organizations/latest/userguide/orgs_integrate_services.html\">Using Organizations with other Amazon Web Services services</a> in the <i>Amazon Web Services Organizations User Guide</i>.</p> </li> <li> <p>Only one report per organization can be generated at a time. Attempting to generate a report while another is in progress will result in an error.</p> </li> </ul> <p>For more information, including the required IAM permissions to run this API, see <a href=\"https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_declarative_status-report.html\">Generating the account status report for declarative policies</a> in the <i>Amazon Web Services Organizations User Guide</i>.</p>" |
| 6392 | + "documentation":"<p>Generates an account status report. The report is generated asynchronously, and can take several hours to complete.</p> <p>The report provides the current status of all attributes supported by declarative policies for the accounts within the specified scope. The scope is determined by the specified <code>TargetId</code>, which can represent an individual account, or all the accounts that fall under the specified organizational unit (OU) or root (the entire Amazon Web Services Organization).</p> <p>The report is saved to your specified S3 bucket, using the following path structure (with the <i>italicized placeholders</i> representing your specific values):</p> <p> <code>s3://<i>amzn-s3-demo-bucket</i>/<i>your-optional-s3-prefix</i>/ec2_<i>targetId</i>_<i>reportId</i>_<i>yyyyMMdd</i>T<i>hhmm</i>Z.csv</code> </p> <p class=\"title\"> <b>Prerequisites for generating a report</b> </p> <ul> <li> <p>The <code>StartDeclarativePoliciesReport</code> API can only be called by the management account or delegated administrators for the organization.</p> </li> <li> <p>An S3 bucket must be available before generating the report (you can create a new one or use an existing one), it must be in the same Region where the report generation request is made, and it must have an appropriate bucket policy. For a sample S3 policy, see <i>Sample Amazon S3 policy</i> under .</p> </li> <li> <p>Trusted access must be enabled for the service for which the declarative policy will enforce a baseline configuration. If you use the Amazon Web Services Organizations console, this is done automatically when you enable declarative policies. The API uses the following service principal to identify the EC2 service: <code>ec2.amazonaws.com</code>. For more information on how to enable trusted access with the Amazon Web Services CLI and Amazon Web Services SDKs, see <a href=\"https://docs.aws.amazon.com/organizations/latest/userguide/orgs_integrate_services.html\">Using Organizations with other Amazon Web Services services</a> in the <i>Amazon Web Services Organizations User Guide</i>.</p> </li> <li> <p>Only one report per organization can be generated at a time. Attempting to generate a report while another is in progress will result in an error.</p> </li> </ul> <p>For more information, including the required IAM permissions to run this API, see <a href=\"https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_policies_declarative_status-report.html\">Generating the account status report for declarative policies</a> in the <i>Amazon Web Services Organizations User Guide</i>.</p>" |
6392 | 6393 | }, |
6393 | 6394 | "StartInstances":{ |
6394 | 6395 | "name":"StartInstances", |
|
19144 | 19145 | } |
19145 | 19146 | } |
19146 | 19147 | }, |
| 19148 | + "DeleteSecurityGroupResult":{ |
| 19149 | + "type":"structure", |
| 19150 | + "members":{ |
| 19151 | + "Return":{ |
| 19152 | + "shape":"Boolean", |
| 19153 | + "documentation":"<p>Returns <code>true</code> if the request succeeds; otherwise, returns an error.</p>", |
| 19154 | + "locationName":"return" |
| 19155 | + }, |
| 19156 | + "GroupId":{ |
| 19157 | + "shape":"SecurityGroupId", |
| 19158 | + "documentation":"<p>The ID of the deleted security group.</p>", |
| 19159 | + "locationName":"groupId" |
| 19160 | + } |
| 19161 | + } |
| 19162 | + }, |
19147 | 19163 | "DeleteSnapshotRequest":{ |
19148 | 19164 | "type":"structure", |
19149 | 19165 | "required":["SnapshotId"], |
|
31409 | 31425 | "locationName":"Value" |
31410 | 31426 | } |
31411 | 31427 | }, |
31412 | | - "documentation":"<p>A filter name and value pair that is used to return a more specific list of results from a describe operation. Filters can be used to match a set of resources by specific criteria, such as tags, attributes, or IDs.</p> <p>If you specify multiple filters, the filters are joined with an <code>AND</code>, and the request returns only results that match all of the specified filters.</p>" |
| 31428 | + "documentation":"<p>A filter name and value pair that is used to return a more specific list of results from a describe operation. Filters can be used to match a set of resources by specific criteria, such as tags, attributes, or IDs.</p> <p>If you specify multiple filters, the filters are joined with an <code>AND</code>, and the request returns only results that match all of the specified filters.</p> <p>For more information, see <a href=\"https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Using_Filtering.html#Filtering_Resources_CLI\">List and filter using the CLI and API</a> in the <i>Amazon EC2 User Guide</i>.</p>" |
31413 | 31429 | }, |
31414 | 31430 | "FilterList":{ |
31415 | 31431 | "type":"list", |
|
58278 | 58294 | }, |
58279 | 58295 | "S3Bucket":{ |
58280 | 58296 | "shape":"String", |
58281 | | - "documentation":"<p>The name of the S3 bucket where the report will be saved.</p>" |
| 58297 | + "documentation":"<p>The name of the S3 bucket where the report will be saved. The bucket must be in the same Region where the report generation request is made.</p>" |
58282 | 58298 | }, |
58283 | 58299 | "S3Prefix":{ |
58284 | 58300 | "shape":"String", |
|
0 commit comments