"documentation":"<p>Adds or overwrites one or more tags for the specified resource. Tags are metadata that you assign to your managed instances, Maintenance Windows, or Parameter Store parameters. Tags enable you to categorize your resources in different ways, for example, by purpose, owner, or environment. Each tag consists of a key and an optional value, both of which you define. For example, you could define a set of tags for your account's managed instances that helps you track each instance's owner and stack level. For example: Key=Owner and Value=DbAdmin, SysAdmin, or Dev. Or Key=Stack and Value=Production, Pre-Production, or Test.</p> <p>Each resource can have a maximum of 10 tags. </p> <p>We recommend that you devise a set of tag keys that meets your needs for each resource type. Using a consistent set of tag keys makes it easier for you to manage your resources. You can search and filter the resources based on the tags you add. Tags don't have any semantic meaning to Amazon EC2 and are interpreted strictly as a string of characters. </p> <p>For more information about tags, see <a href=\"http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Using_Tags.html\">Tagging Your Amazon EC2 Resources</a> in the <i>Amazon EC2 User Guide</i>.</p>"
"documentation":"<p>Attempts to cancel the command specified by the Command ID. There is no guarantee that the command will be terminated and the underlying process stopped.</p>"
"documentation":"<p>Registers your on-premises server or virtual machine with Amazon EC2 so that you can manage these resources using Run Command. An on-premises server or virtual machine that has been registered with EC2 is called a managed instance. For more information about activations, see <a href=\"http://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-managedinstances.html\">Setting Up Systems Manager in Hybrid Environments</a>.</p>"
"documentation":"<p>Associates the specified Systems Manager document with the specified instances or targets.</p> <p>When you associate a document with one or more instances using instance IDs or tags, the SSM Agent running on the instance processes the document and configures the instance as specified.</p> <p>If you associate a document with an instance that already has an associated document, the system throws the AssociationAlreadyExists exception.</p>"
"documentation":"<p>Associates the specified Systems Manager document with the specified instances or targets.</p> <p>When you associate a document with one or more instances using instance IDs or tags, the SSM Agent running on the instance processes the document and configures the instance as specified.</p> <p>If you associate a document with an instance that already has an associated document, the system throws the AssociationAlreadyExists exception.</p>"
"documentation":"<p>Creates a Systems Manager document.</p> <p>After you create a document, you can use CreateAssociation to associate it with one or more running instances.</p>"
"documentation":"<p>Creates a resource data sync configuration to a single bucket in Amazon S3. This is an asynchronous operation that returns immediately. After a successful initial sync is completed, the system continuously syncs data to the Amazon S3 bucket. To check the status of the sync, use the <a href=\"API_ListResourceDataSync.html\">ListResourceDataSync</a> operation.</p> <p>By default, data is not encrypted in Amazon S3. We strongly recommend that you enable encryption in Amazon S3 to ensure secure data storage. We also recommend that you secure access to the Amazon S3 bucket by creating a restrictive bucket policy. To view an example of a restrictive Amazon S3 bucket policy for Resource Data Sync, see <a href=\"http://docs.aws.amazon.com/systems-manager/latest/userguide/sysman-inventory-configuring.html#sysman-inventory-datasync\">Configuring Resource Data Sync for Inventory</a>.</p>"
"documentation":"<p>Deletes an activation. You are not required to delete an activation. If you delete an activation, you can no longer use it to register additional managed instances. Deleting an activation does not de-register managed instances. You must manually de-register managed instances.</p>"
"documentation":"<p>Disassociates the specified Systems Manager document from the specified instance.</p> <p>When you disassociate a document from an instance, it does not change the configuration of the instance. To change the configuration state of an instance after you disassociate a document, you must create a new document with the desired configuration and associate it with the instance.</p>"
"documentation":"<p>Deletes the Systems Manager document and all instance associations to the document.</p> <p>Before you delete the document, we recommend that you use <a>DeleteAssociation</a> to disassociate all instances that are associated with the document.</p>"
"documentation":"<p>Deletes a Resource Data Sync configuration. After the configuration is deleted, changes to inventory data on managed instances are no longer synced with the target Amazon S3 bucket. Deleting a sync configuration does not delete data in the target Amazon S3 bucket.</p>"
"documentation":"<p>Removes the server or virtual machine from the list of registered servers. You can reregister the instance again at any time. If you don't plan to use Run Command on the server, we suggest uninstalling the SSM Agent first.</p>"
"documentation":"<p>Details about the activation, including: the date and time the activation was created, the expiration date, the IAM role assigned to the instances in the activation, and the number of instances activated by this registration.</p>"
"documentation":"<p>Describes the permissions for a Systems Manager document. If you created the document, you are the owner. If a document is shared, it can either be shared privately (by specifying a user's AWS account ID) or publicly (<i>All</i>). </p>"
"documentation":"<p>Retrieves the current effective patches (the patch and the approval state) for the specified patch baseline. Note that this API applies only to Windows patch baselines.</p>"
"documentation":"<p>Describes one or more of your instances. You can use this to get information about instances like the operating system platform, the SSM Agent version (Linux), status etc. If you specify one or more instance IDs, it returns information for those instances. If you do not specify instance IDs, it returns information for all your instances. If you specify an instance ID that is not valid or an instance that you do not own, you receive an error. </p>"
"documentation":"<p>Retrieves information about the patches on the specified instance and their state relative to the patch baseline being used for the instance.</p>"
"documentation":"<p>Retrieves the individual task executions (one per target) for a particular task executed as part of a Maintenance Window execution.</p>"
"documentation":"<p>Lists the executions of a Maintenance Window (meaning, information about when the Maintenance Window was scheduled to be active and information about tasks registered and run with the Maintenance Window).</p>"
"documentation":"<p>Retrieves the default patch baseline. Note that Systems Manager supports creating multiple default patch baselines. For example, you can create a default patch baseline for each operating system.</p>"
"documentation":"<p>Retrieves the current snapshot for the patch baseline the instance uses. This API is primarily used by the AWS-RunPatchBaseline Systems Manager document. </p>"
"documentation":"<p>Return a list of inventory type names for the account, or return a list of attribute names for a specific Inventory item type. </p>"
},
"GetMaintenanceWindow":{
"name":"GetMaintenanceWindow",
"http":{
"method":"POST",
"requestUri":"/"
},
"input":{"shape":"GetMaintenanceWindowRequest"},
"output":{"shape":"GetMaintenanceWindowResult"},
"errors":[
{"shape":"DoesNotExistException"},
{"shape":"InternalServerError"}
],
"documentation":"<p>Retrieves a Maintenance Window.</p>"
"documentation":"<p>Retrieve parameters in a specific hierarchy. For more information, see <a href=\"http://docs.aws.amazon.com/systems-manager/latest/userguide/sysman-paramstore-working.html\">Working with Systems Manager Parameters</a>. </p>"
"documentation":"<p>An invocation is copy of a command sent to a specific instance. A command can apply to one or more instances. A command invocation applies to one instance. For example, if a user executes SendCommand against three instances, then a command invocation is created for each requested instance ID. ListCommandInvocations provide status about command execution.</p>"
},
"ListCommands":{
"name":"ListCommands",
"http":{
"method":"POST",
"requestUri":"/"
},
"input":{"shape":"ListCommandsRequest"},
"output":{"shape":"ListCommandsResult"},
"errors":[
{"shape":"InternalServerError"},
{"shape":"InvalidCommandId"},
{"shape":"InvalidInstanceId"},
{"shape":"InvalidFilterKey"},
{"shape":"InvalidNextToken"}
],
"documentation":"<p>Lists the commands requested by users of the AWS account.</p>"
},
"ListDocumentVersions":{
"name":"ListDocumentVersions",
"http":{
"method":"POST",
"requestUri":"/"
},
"input":{"shape":"ListDocumentVersionsRequest"},
"output":{"shape":"ListDocumentVersionsResult"},
"errors":[
{"shape":"InternalServerError"},
{"shape":"InvalidNextToken"},
{"shape":"InvalidDocument"}
],
"documentation":"<p>List all versions for a document.</p>"
},
"ListDocuments":{
"name":"ListDocuments",
"http":{
"method":"POST",
"requestUri":"/"
},
"input":{"shape":"ListDocumentsRequest"},
"output":{"shape":"ListDocumentsResult"},
"errors":[
{"shape":"InternalServerError"},
{"shape":"InvalidNextToken"},
{"shape":"InvalidFilterKey"}
],
"documentation":"<p>Describes one or more of your SSM documents.</p>"
},
"ListInventoryEntries":{
"name":"ListInventoryEntries",
"http":{
"method":"POST",
"requestUri":"/"
},
"input":{"shape":"ListInventoryEntriesRequest"},
"output":{"shape":"ListInventoryEntriesResult"},
"errors":[
{"shape":"InternalServerError"},
{"shape":"InvalidInstanceId"},
{"shape":"InvalidTypeNameException"},
{"shape":"InvalidFilter"},
{"shape":"InvalidNextToken"}
],
"documentation":"<p>A list of inventory items returned by the request.</p>"
"documentation":"<p>Lists your resource data sync configurations. Includes information about the last time a sync attempted to start, the last sync status, and the last time a sync successfully completed.</p> <p>The number of sync configurations might be too large to return using a single call to <code>ListResourceDataSync</code>. You can limit the number of sync configurations returned by using the <code>MaxResults</code> parameter. To determine whether there are more sync configurations to list, check the value of <code>NextToken</code> in the output. If there are more sync configurations to list, you can request them by specifying the <code>NextToken</code> returned in the call to the parameter of a subsequent call. </p>"
"documentation":"<p>Shares a Systems Manager document publicly or privately. If you share a document privately, you must specify the AWS user account IDs for those people who can use the document. If you share a document publicly, you must specify <i>All</i> as the account ID.</p>"
"documentation":"<p>Bulk update custom inventory items on one more instance. The request adds an inventory item, if it doesn't already exist, or updates an inventory item, if it does exist.</p>"
"documentation":"<p>Updates an association. You can only update the document version, schedule, parameters, and Amazon S3 output of an association.</p>"
"documentation":"<p>Assigns or changes an Amazon Identity and Access Management (IAM) role to the managed instance.</p>"
},
"UpdatePatchBaseline":{
"name":"UpdatePatchBaseline",
"http":{
"method":"POST",
"requestUri":"/"
},
"input":{"shape":"UpdatePatchBaselineRequest"},
"output":{"shape":"UpdatePatchBaselineResult"},
"errors":[
{"shape":"DoesNotExistException"},
{"shape":"InternalServerError"}
],
"documentation":"<p>Modifies an existing patch baseline. Fields not specified in the request are left unchanged.</p>"
}
},
"shapes":{
"AccountId":{
"type":"string",
"pattern":"(?i)all|[0-9]{12}"
},
"AccountIdList":{
"type":"list",
"member":{
"shape":"AccountId",
"locationName":"AccountId"
},
"max":20
},
"Activation":{
"type":"structure",
"members":{
"ActivationId":{
"shape":"ActivationId",
"documentation":"<p>The ID created by Systems Manager when you submitted the activation.</p>"
},
"Description":{
"shape":"ActivationDescription",
"documentation":"<p>A user defined description of the activation.</p>"
},
"DefaultInstanceName":{
"shape":"DefaultInstanceName",
"documentation":"<p>A name for the managed instance when it is created.</p>"
},
"IamRole":{
"shape":"IamRole",
"documentation":"<p>The Amazon Identity and Access Management (IAM) role to assign to the managed instance.</p>"
},
"RegistrationLimit":{
"shape":"RegistrationLimit",
"documentation":"<p>The maximum number of managed instances that can be registered using this activation.</p>"
},
"RegistrationsCount":{
"shape":"RegistrationsCount",
"documentation":"<p>The number of managed instances already registered with this activation.</p>"
},
"ExpirationDate":{
"shape":"ExpirationDate",
"documentation":"<p>The date when this activation can no longer be used to register managed instances.</p>"
},
"Expired":{
"shape":"Boolean",
"documentation":"<p>Whether or not the activation is expired.</p>"
},
"CreatedDate":{
"shape":"CreatedDate",
"documentation":"<p>The date the activation was created.</p>"
}
},
"documentation":"<p>An activation registers one or more on-premises servers or virtual machines (VMs) with AWS so that you can configure those servers or VMs using Run Command. A server or VM that has been registered with AWS is called a managed instance.</p>"
"documentation":"<p>Specifies the type of resource you are tagging.</p>"
},
"ResourceId":{
"shape":"ResourceId",
"documentation":"<p>The resource ID you want to tag.</p>"
},
"Tags":{
"shape":"TagList",
"documentation":"<p> One or more tags. The value parameter is required, but if you don't want the tag to have a value, specify the parameter with no value, and we set the value to an empty string. </p>"
"documentation":"<p>Error returned if an attempt is made to register a patch group with a patch baseline that is already registered with a different patch baseline.</p>",
"documentation":"<p>The name of the SSM document.</p>"
},
"InstanceId":{
"shape":"InstanceId",
"documentation":"<p>The ID of the instance.</p>"
},
"AssociationId":{
"shape":"AssociationId",
"documentation":"<p>The ID created by the system when you create an association. An association is a binding between a document and a set of targets with a schedule.</p>"
},
"DocumentVersion":{
"shape":"DocumentVersion",
"documentation":"<p>The version of the document used in the association.</p>"
},
"Targets":{
"shape":"Targets",
"documentation":"<p>The instances targeted by the request to create an association. </p>"
},
"LastExecutionDate":{
"shape":"DateTime",
"documentation":"<p>The date on which the association was last run.</p>"
},
"Overview":{
"shape":"AssociationOverview",
"documentation":"<p>Information about the association.</p>"
},
"ScheduleExpression":{
"shape":"ScheduleExpression",
"documentation":"<p>A cron expression that specifies a schedule when the association runs.</p>"
"documentation":"<p>A detailed status of the association.</p>"
},
"AssociationStatusAggregatedCount":{
"shape":"AssociationStatusAggregatedCount",
"documentation":"<p>Returns the number of targets for the association status. For example, if you created an association with two instances, and one of them was successful, this would return the count of instances by status.</p>"
}
},
"documentation":"<p>Information about the association.</p>"
},
"AssociationStatus":{
"type":"structure",
"required":[
"Date",
"Name",
"Message"
],
"members":{
"Date":{
"shape":"DateTime",
"documentation":"<p>The date when the status changed.</p>"
},
"Name":{
"shape":"AssociationStatusName",
"documentation":"<p>The status.</p>"
},
"Message":{
"shape":"StatusMessage",
"documentation":"<p>The reason for the status.</p>"
},
"AdditionalInfo":{
"shape":"StatusAdditionalInfo",
"documentation":"<p>A user-defined string.</p>"
}
},
"documentation":"<p>Describes an association status.</p>"
},
"AssociationStatusAggregatedCount":{
"type":"map",
"key":{"shape":"StatusName"},
"value":{"shape":"InstanceCount"}
},
"AssociationStatusName":{
"type":"string",
"enum":[
"Pending",
"Success",
"Failed"
]
},
"AttributeName":{
"type":"string",
"max":64,
"min":1
},
"AttributeValue":{
"type":"string",
"max":1024,
"min":0
},
"AutomationActionName":{
"type":"string",
"pattern":"^aws:[a-zA-Z]{3,25}$"
},
"AutomationDefinitionNotFoundException":{
"type":"structure",
"members":{
"Message":{"shape":"String"}
},
"documentation":"<p>An Automation document with the specified name could not be found.</p>",
"exception":true
},
"AutomationDefinitionVersionNotFoundException":{
"type":"structure",
"members":{
"Message":{"shape":"String"}
},
"documentation":"<p>An Automation document with the specified name and version could not be found.</p>",
"exception":true
},
"AutomationExecution":{
"type":"structure",
"members":{
"AutomationExecutionId":{
"shape":"AutomationExecutionId",
"documentation":"<p>The execution ID.</p>"
},
"DocumentName":{
"shape":"DocumentName",
"documentation":"<p>The name of the Automation document used during the execution.</p>"
},
"DocumentVersion":{
"shape":"DocumentVersion",
"documentation":"<p>The version of the document to use during execution.</p>"
},
"ExecutionStartTime":{
"shape":"DateTime",
"documentation":"<p>The time the execution started.</p>"
},
"ExecutionEndTime":{
"shape":"DateTime",
"documentation":"<p>The time the execution finished.</p>"
},
"AutomationExecutionStatus":{
"shape":"AutomationExecutionStatus",
"documentation":"<p>The execution status of the Automation.</p>"
},
"StepExecutions":{
"shape":"StepExecutionList",
"documentation":"<p>A list of details about the current state of all steps that comprise an execution. An Automation document contains a list of steps that are executed in order.</p>"
"documentation":"<p>The list of execution outputs as defined in the automation document.</p>"
},
"FailureMessage":{
"shape":"String",
"documentation":"<p>A message describing why an execution has failed, if the status is set to Failed.</p>"
}
},
"documentation":"<p>Detailed information about the current state of an individual Automation execution.</p>"
},
"AutomationExecutionFilter":{
"type":"structure",
"required":[
"Key",
"Values"
],
"members":{
"Key":{
"shape":"AutomationExecutionFilterKey",
"documentation":"<p>The aspect of the Automation execution information that should be limited.</p>"
},
"Values":{
"shape":"AutomationExecutionFilterValueList",
"documentation":"<p>The values used to limit the execution information associated with the filter's key.</p>"
}
},
"documentation":"<p>A filter used to match specific automation executions. This is used to limit the scope of Automation execution information returned.</p>"
"documentation":"<p>The number of simultaneously running Automation executions exceeded the allowable limit.</p>",
"exception":true
},
"AutomationExecutionMetadata":{
"type":"structure",
"members":{
"AutomationExecutionId":{
"shape":"AutomationExecutionId",
"documentation":"<p>The execution ID.</p>"
},
"DocumentName":{
"shape":"DocumentName",
"documentation":"<p>The name of the Automation document used during execution.</p>"
},
"DocumentVersion":{
"shape":"DocumentVersion",
"documentation":"<p>The document version used during the execution.</p>"
},
"AutomationExecutionStatus":{
"shape":"AutomationExecutionStatus",
"documentation":"<p>The status of the execution. Valid values include: Running, Succeeded, Failed, Timed out, or Cancelled.</p>"
},
"ExecutionStartTime":{
"shape":"DateTime",
"documentation":"<p>The time the execution started.></p>"
},
"ExecutionEndTime":{
"shape":"DateTime",
"documentation":"<p>The time the execution finished. This is not populated if the execution is still in progress.</p>"
},
"ExecutedBy":{
"shape":"String",
"documentation":"<p>The IAM role ARN of the user who executed the Automation.</p>"
},
"LogFile":{
"shape":"String",
"documentation":"<p>An Amazon S3 bucket where execution information is stored.</p>"
},
"Outputs":{
"shape":"AutomationParameterMap",
"documentation":"<p>The list of execution outputs as defined in the Automation document.</p>"
}
},
"documentation":"<p>Details about a specific Automation execution.</p>"
},
"AutomationExecutionMetadataList":{
"type":"list",
"member":{"shape":"AutomationExecutionMetadata"},
"max":50,
"min":0
},
"AutomationExecutionNotFoundException":{
"type":"structure",
"members":{
"Message":{"shape":"String"}
},
"documentation":"<p>There is no automation execution information for the requested automation execution ID.</p>",
"exception":true
},
"AutomationExecutionStatus":{
"type":"string",
"enum":[
"Pending",
"InProgress",
"Success",
"TimedOut",
"Cancelled",
"Failed"
]
},
"AutomationParameterKey":{
"type":"string",
"max":30,
"min":1
},
"AutomationParameterMap":{
"type":"map",
"key":{"shape":"AutomationParameterKey"},
"value":{"shape":"AutomationParameterValueList"},
"max":200,
"min":1
},
"AutomationParameterValue":{
"type":"string",
"max":512,
"min":1
},
"AutomationParameterValueList":{
"type":"list",
"member":{"shape":"AutomationParameterValue"},
"max":10,
"min":0
},
"BaselineDescription":{
"type":"string",
"max":1024,
"min":1
},
"BaselineId":{
"type":"string",
"max":128,
"min":20,
"pattern":"^[a-zA-Z0-9_\\-:/]{20,128}$"
},
"BaselineName":{
"type":"string",
"max":128,
"min":3,
"pattern":"^[a-zA-Z0-9_\\-.]{3,128}$"
},
"BatchErrorMessage":{"type":"string"},
"Boolean":{"type":"boolean"},
"CancelCommandRequest":{
"type":"structure",
"required":["CommandId"],
"members":{
"CommandId":{
"shape":"CommandId",
"documentation":"<p>The ID of the command you want to cancel.</p>"
},
"InstanceIds":{
"shape":"InstanceIdList",
"documentation":"<p>(Optional) A list of instance IDs on which you want to cancel the command. If not provided, the command is canceled on every instance on which it was requested.</p>"
}
},
"documentation":"<p/>"
},
"CancelCommandResult":{
"type":"structure",
"members":{
},
"documentation":"<p>Whether or not the command was successfully canceled. There is no guarantee that a request can be canceled.</p>"
},
"ClientToken":{
"type":"string",
"max":64,
"min":1
},
"Command":{
"type":"structure",
"members":{
"CommandId":{
"shape":"CommandId",
"documentation":"<p>A unique identifier for this command.</p>"
"documentation":"<p>User-specified information about the command, such as a brief description of what the command should do.</p>"
},
"ExpiresAfter":{
"shape":"DateTime",
"documentation":"<p>If this time is reached and the command has not already started executing, it will not execute. Calculated based on the ExpiresAfter user input provided as part of the SendCommand API.</p>"
"documentation":"<p>An array of search criteria that targets instances using a Key,Value combination that you specify. Targets is required if you don't provide one or more instance IDs in the call.</p>"
"documentation":"<p>A detailed status of the command execution. StatusDetails includes more information than Status because it includes states resulting from error and concurrency control parameters. StatusDetails can show different results than Status. For more information about these statuses, see <a href=\"http://docs.aws.amazon.com/systems-manager/latest/userguide/monitor-about-status.html\">Run Command Status</a>. StatusDetails can be one of the following values:</p> <ul> <li> <p>Pending: The command has not been sent to any instances.</p> </li> <li> <p>In Progress: The command has been sent to at least one instance but has not reached a final state on all instances.</p> </li> <li> <p>Success: The command successfully executed on all invocations. This is a terminal state.</p> </li> <li> <p>Delivery Timed Out: The value of MaxErrors or more command invocations shows a status of Delivery Timed Out. This is a terminal state.</p> </li> <li> <p>Execution Timed Out: The value of MaxErrors or more command invocations shows a status of Execution Timed Out. This is a terminal state.</p> </li> <li> <p>Failed: The value of MaxErrors or more command invocations shows a status of Failed. This is a terminal state.</p> </li> <li> <p>Incomplete: The command was attempted on all instances and one or more invocations does not have a value of Success but not enough invocations failed for the status to be Failed. This is a terminal state.</p> </li> <li> <p>Canceled: The command was terminated before it was completed. This is a terminal state.</p> </li> <li> <p>Rate Exceeded: The number of instances targeted by the command exceeded the account limit for pending invocations. The system has canceled the command before executing it on any instance. This is a terminal state.</p> </li> </ul>"
"documentation":"<p>(Deprecated) You can no longer specify this parameter. The system ignores it. Instead, Systems Manager automatically determines the Amazon S3 bucket region.</p>"
"documentation":"<p>The S3 bucket where the responses to the command executions should be stored. This was requested when issuing the command.</p>"
},
"OutputS3KeyPrefix":{
"shape":"S3KeyPrefix",
"documentation":"<p>The S3 directory path inside the bucket where the responses to the command executions should be stored. This was requested when issuing the command.</p>"
"documentation":"<p>The maximum number of instances that are allowed to execute the command at the same time. You can specify a number of instances, such as 10, or a percentage of instances, such as 10%. The default value is 50. For more information about how to use MaxConcurrency, see <a href=\"http://docs.aws.amazon.com/systems-manager/latest/userguide/run-command.html\">Executing a Command Using Systems Manager Run Command</a>.</p>"
"documentation":"<p>The maximum number of errors allowed before the system stops sending the command to additional targets. You can specify a number of errors, such as 10, or a percentage or errors, such as 10%. The default value is 50. For more information about how to use MaxErrors, see <a href=\"http://docs.aws.amazon.com/systems-manager/latest/userguide/run-command.html\">Executing a Command Using Systems Manager Run Command</a>.</p>"
"documentation":"<p>The number of targets for which the command invocation reached a terminal state. Terminal states include the following: Success, Failed, Execution Timed Out, Delivery Timed Out, Canceled, Terminated, or Undeliverable.</p>"
"documentation":"<p>The name of the invocation target. For Amazon EC2 instances this is the value for the aws:Name tag. For on-premises instances, this is the name of the instance.</p>"
"documentation":"<p>A detailed status of the command execution for each invocation (each instance targeted by the command). StatusDetails includes more information than Status because it includes states resulting from error and concurrency control parameters. StatusDetails can show different results than Status. For more information about these statuses, see <a href=\"http://docs.aws.amazon.com/systems-manager/latest/userguide/monitor-about-status.html\">Run Command Status</a>. StatusDetails can be one of the following values:</p> <ul> <li> <p>Pending: The command has not been sent to the instance.</p> </li> <li> <p>In Progress: The command has been sent to the instance but has not reached a terminal state.</p> </li> <li> <p>Success: The execution of the command or plugin was successfully completed. This is a terminal state.</p> </li> <li> <p>Delivery Timed Out: The command was not delivered to the instance before the delivery timeout expired. Delivery timeouts do not count against the parent command's MaxErrors limit, but they do contribute to whether the parent command status is Success or Incomplete. This is a terminal state.</p> </li> <li> <p>Execution Timed Out: Command execution started on the instance, but the execution was not complete before the execution timeout expired. Execution timeouts count against the MaxErrors limit of the parent command. This is a terminal state.</p> </li> <li> <p>Failed: The command was not successful on the instance. For a plugin, this indicates that the result code was not zero. For a command invocation, this indicates that the result code for one or more plugins was not zero. Invocation failures count against the MaxErrors limit of the parent command. This is a terminal state.</p> </li> <li> <p>Canceled: The command was terminated before it was completed. This is a terminal state.</p> </li> <li> <p>Undeliverable: The command can't be delivered to the instance. The instance might not exist or might not be responding. Undeliverable invocations don't count against the parent command's MaxErrors limit and don't contribute to whether the parent command status is Success or Incomplete. This is a terminal state.</p> </li> <li> <p>Terminated: The parent command exceeded its MaxErrors limit and subsequent command invocations were canceled by the system. This is a terminal state.</p> </li> </ul>"
"documentation":"<p>The URL to the plugin's StdOut file in Amazon S3, if the Amazon S3 bucket was defined for the parent command. For an invocation, StandardOutputUrl is populated if there is just one plugin defined for the command, and the Amazon S3 bucket was defined for the command.</p>"
"documentation":"<p>The URL to the plugin's StdErr file in Amazon S3, if the Amazon S3 bucket was defined for the parent command. For an invocation, StandardErrorUrl is populated if there is just one plugin defined for the command, and the Amazon S3 bucket was defined for the command.</p>"
"documentation":"<p>The IAM service role that Run Command uses to act on your behalf when sending notifications about command status changes on a per instance basis.</p>"
},
"NotificationConfig":{
"shape":"NotificationConfig",
"documentation":"<p>Configurations for sending notifications about command status changes on a per instance basis.</p>"
}
},
"documentation":"<p>An invocation is copy of a command sent to a specific instance. A command can apply to one or more instances. A command invocation applies to one instance. For example, if a user executes SendCommand against three instances, then a command invocation is created for each requested instance ID. A command invocation returns status and detail information about a command you executed. </p>"
},
"CommandInvocationList":{
"type":"list",
"member":{"shape":"CommandInvocation"}
},
"CommandInvocationStatus":{
"type":"string",
"enum":[
"Pending",
"InProgress",
"Delayed",
"Success",
"Cancelled",
"TimedOut",
"Failed",
"Cancelling"
]
},
"CommandList":{
"type":"list",
"member":{"shape":"Command"}
},
"CommandMaxResults":{
"type":"integer",
"max":50,
"min":1
},
"CommandPlugin":{
"type":"structure",
"members":{
"Name":{
"shape":"CommandPluginName",
"documentation":"<p>The name of the plugin. Must be one of the following: aws:updateAgent, aws:domainjoin, aws:applications, aws:runPowerShellScript, aws:psmodule, aws:cloudWatch, aws:runShellScript, or aws:updateSSMAgent. </p>"
},
"Status":{
"shape":"CommandPluginStatus",
"documentation":"<p>The status of this plugin. You can execute a document with multiple plugins.</p>"
"documentation":"<p>A detailed status of the plugin execution. StatusDetails includes more information than Status because it includes states resulting from error and concurrency control parameters. StatusDetails can show different results than Status. For more information about these statuses, see <a href=\"http://docs.aws.amazon.com/systems-manager/latest/userguide/monitor-about-status.html\">Run Command Status</a>. StatusDetails can be one of the following values:</p> <ul> <li> <p>Pending: The command has not been sent to the instance.</p> </li> <li> <p>In Progress: The command has been sent to the instance but has not reached a terminal state.</p> </li> <li> <p>Success: The execution of the command or plugin was successfully completed. This is a terminal state.</p> </li> <li> <p>Delivery Timed Out: The command was not delivered to the instance before the delivery timeout expired. Delivery timeouts do not count against the parent command's MaxErrors limit, but they do contribute to whether the parent command status is Success or Incomplete. This is a terminal state.</p> </li> <li> <p>Execution Timed Out: Command execution started on the instance, but the execution was not complete before the execution timeout expired. Execution timeouts count against the MaxErrors limit of the parent command. This is a terminal state.</p> </li> <li> <p>Failed: The command was not successful on the instance. For a plugin, this indicates that the result code was not zero. For a command invocation, this indicates that the result code for one or more plugins was not zero. Invocation failures count against the MaxErrors limit of the parent command. This is a terminal state.</p> </li> <li> <p>Canceled: The command was terminated before it was completed. This is a terminal state.</p> </li> <li> <p>Undeliverable: The command can't be delivered to the instance. The instance might not exist, or it might not be responding. Undeliverable invocations don't count against the parent command's MaxErrors limit, and they don't contribute to whether the parent command status is Success or Incomplete. This is a terminal state.</p> </li> <li> <p>Terminated: The parent command exceeded its MaxErrors limit and subsequent command invocations were canceled by the system. This is a terminal state.</p> </li> </ul>"
"documentation":"<p>A numeric response code generated after executing the plugin. </p>"
},
"ResponseStartDateTime":{
"shape":"DateTime",
"documentation":"<p>The time the plugin started executing. </p>"
},
"ResponseFinishDateTime":{
"shape":"DateTime",
"documentation":"<p>The time the plugin stopped executing. Could stop prematurely if, for example, a cancel command was sent. </p>"
},
"Output":{
"shape":"CommandPluginOutput",
"documentation":"<p>Output of the plugin execution.</p>"
},
"StandardOutputUrl":{
"shape":"Url",
"documentation":"<p>The URL for the complete text written by the plugin to stdout in Amazon S3. If the Amazon S3 bucket for the command was not specified, then this string is empty.</p>"
},
"StandardErrorUrl":{
"shape":"Url",
"documentation":"<p>The URL for the complete text written by the plugin to stderr. If execution is not yet complete, then this string is empty.</p>"
"documentation":"<p>(Deprecated) You can no longer specify this parameter. The system ignores it. Instead, Systems Manager automatically determines the Amazon S3 bucket region.</p>"
"documentation":"<p>The S3 bucket where the responses to the command executions should be stored. This was requested when issuing the command. For example, in the following response:</p> <p> test_folder/ab19cb99-a030-46dd-9dfc-8eSAMPLEPre-Fix/i-1234567876543/awsrunShellScript </p> <p>test_folder is the name of the Amazon S3 bucket;</p> <p> ab19cb99-a030-46dd-9dfc-8eSAMPLEPre-Fix is the name of the S3 prefix;</p> <p>i-1234567876543 is the instance ID;</p> <p>awsrunShellScript is the name of the plugin.</p>"
"documentation":"<p>The S3 directory path inside the bucket where the responses to the command executions should be stored. This was requested when issuing the command. For example, in the following response:</p> <p> test_folder/ab19cb99-a030-46dd-9dfc-8eSAMPLEPre-Fix/i-1234567876543/awsrunShellScript </p> <p>test_folder is the name of the Amazon S3 bucket;</p> <p> ab19cb99-a030-46dd-9dfc-8eSAMPLEPre-Fix is the name of the S3 prefix;</p> <p>i-1234567876543 is the instance ID;</p> <p>awsrunShellScript is the name of the plugin.</p>"
"documentation":"<p>The name of the registered, managed instance as it will appear in the Amazon EC2 console or when you use the AWS command line tools to list EC2 resources.</p>"
},
"IamRole":{
"shape":"IamRole",
"documentation":"<p>The Amazon Identity and Access Management (IAM) role that you want to assign to the managed instance. </p>"
},
"RegistrationLimit":{
"shape":"RegistrationLimit",
"documentation":"<p>Specify the maximum number of managed instances you want to register. The default value is 1 instance.</p>",
"box":true
},
"ExpirationDate":{
"shape":"ExpirationDate",
"documentation":"<p>The date by which this activation request should expire. The default value is 24 hours.</p>"
}
}
},
"CreateActivationResult":{
"type":"structure",
"members":{
"ActivationId":{
"shape":"ActivationId",
"documentation":"<p>The ID number generated by the system when it processed the activation. The activation ID functions like a user name.</p>"
},
"ActivationCode":{
"shape":"ActivationCode",
"documentation":"<p>The code the system generates when it processes the activation. The activation code functions like a password to validate the activation ID. </p>"
}
}
},
"CreateAssociationBatchRequest":{
"type":"structure",
"required":["Entries"],
"members":{
"Entries":{
"shape":"CreateAssociationBatchRequestEntries",
"documentation":"<p>One or more associations.</p>"
"documentation":"<p>Defines the operating system the patch baseline applies to. Supported operating systems include WINDOWS, AMAZON_LINUX, UBUNTU and REDHAT_ENTERPRISE_LINUX. The Default value is WINDOWS.</p>"
"documentation":"<p>Defines the compliance level for approved patches. This means that if an approved patch is reported as missing, this is the severity of the compliance violation. Valid compliance severity levels include the following: CRITICAL, HIGH, MEDIUM, LOW, INFORMATIONAL, UNSPECIFIED. The default value is UNSPECIFIED.</p>"
"documentation":"<p>The ID assigned to the managed instance when you registered it using the activation process. </p>"
}
}
},
"DeregisterManagedInstanceResult":{
"type":"structure",
"members":{
}
},
"DeregisterPatchBaselineForPatchGroupRequest":{
"type":"structure",
"required":[
"BaselineId",
"PatchGroup"
],
"members":{
"BaselineId":{
"shape":"BaselineId",
"documentation":"<p>The ID of the patch baseline to deregister the patch group from.</p>"
},
"PatchGroup":{
"shape":"PatchGroup",
"documentation":"<p>The name of the patch group that should be deregistered from the patch baseline.</p>"
}
}
},
"DeregisterPatchBaselineForPatchGroupResult":{
"type":"structure",
"members":{
"BaselineId":{
"shape":"BaselineId",
"documentation":"<p>The ID of the patch baseline the patch group was deregistered from.</p>"
},
"PatchGroup":{
"shape":"PatchGroup",
"documentation":"<p>The name of the patch group deregistered from the patch baseline.</p>"
}
}
},
"DeregisterTargetFromMaintenanceWindowRequest":{
"type":"structure",
"required":[
"WindowId",
"WindowTargetId"
],
"members":{
"WindowId":{
"shape":"MaintenanceWindowId",
"documentation":"<p>The ID of the Maintenance Window the target should be removed from.</p>"
},
"WindowTargetId":{
"shape":"MaintenanceWindowTargetId",
"documentation":"<p>The ID of the target definition to remove.</p>"
}
}
},
"DeregisterTargetFromMaintenanceWindowResult":{
"type":"structure",
"members":{
"WindowId":{
"shape":"MaintenanceWindowId",
"documentation":"<p>The ID of the Maintenance Window the target was removed from.</p>"
},
"WindowTargetId":{
"shape":"MaintenanceWindowTargetId",
"documentation":"<p>The ID of the removed target definition.</p>"
}
}
},
"DeregisterTaskFromMaintenanceWindowRequest":{
"type":"structure",
"required":[
"WindowId",
"WindowTaskId"
],
"members":{
"WindowId":{
"shape":"MaintenanceWindowId",
"documentation":"<p>The ID of the Maintenance Window the task should be removed from.</p>"
},
"WindowTaskId":{
"shape":"MaintenanceWindowTaskId",
"documentation":"<p>The ID of the task to remove from the Maintenance Window.</p>"
}
}
},
"DeregisterTaskFromMaintenanceWindowResult":{
"type":"structure",
"members":{
"WindowId":{
"shape":"MaintenanceWindowId",
"documentation":"<p>The ID of the Maintenance Window the task was removed from.</p>"
},
"WindowTaskId":{
"shape":"MaintenanceWindowTaskId",
"documentation":"<p>The ID of the task removed from the Maintenance Window.</p>"
}
}
},
"DescribeActivationsFilter":{
"type":"structure",
"members":{
"FilterKey":{
"shape":"DescribeActivationsFilterKeys",
"documentation":"<p>The name of the filter.</p>"
},
"FilterValues":{
"shape":"StringList",
"documentation":"<p>The filter values.</p>"
}
},
"documentation":"<p>Filter for the DescribeActivation API.</p>"
},
"DescribeActivationsFilterKeys":{
"type":"string",
"enum":[
"ActivationIds",
"DefaultInstanceName",
"IamRole"
]
},
"DescribeActivationsFilterList":{
"type":"list",
"member":{"shape":"DescribeActivationsFilter"}
},
"DescribeActivationsRequest":{
"type":"structure",
"members":{
"Filters":{
"shape":"DescribeActivationsFilterList",
"documentation":"<p>A filter to view information about your activations.</p>"
},
"MaxResults":{
"shape":"MaxResults",
"documentation":"<p>The maximum number of items to return for this call. The call also returns a token that you can specify in a subsequent call to get the next set of results.</p>",
"box":true
},
"NextToken":{
"shape":"NextToken",
"documentation":"<p>A token to start the list. Use this token to get the next set of results. </p>"
}
}
},
"DescribeActivationsResult":{
"type":"structure",
"members":{
"ActivationList":{
"shape":"ActivationList",
"documentation":"<p>A list of activations for your AWS account.</p>"
"documentation":"<p>The name of the SSM document.</p>"
},
"InstanceId":{
"shape":"InstanceId",
"documentation":"<p>The instance ID.</p>"
},
"AssociationId":{
"shape":"AssociationId",
"documentation":"<p>The association ID for which you want information.</p>"
}
}
},
"DescribeAssociationResult":{
"type":"structure",
"members":{
"AssociationDescription":{
"shape":"AssociationDescription",
"documentation":"<p>Information about the association.</p>"
}
}
},
"DescribeAutomationExecutionsRequest":{
"type":"structure",
"members":{
"Filters":{
"shape":"AutomationExecutionFilterList",
"documentation":"<p>Filters used to limit the scope of executions that are requested.</p>"
},
"MaxResults":{
"shape":"MaxResults",
"documentation":"<p>The maximum number of items to return for this call. The call also returns a token that you can specify in a subsequent call to get the next set of results.</p>",
"box":true
},
"NextToken":{
"shape":"NextToken",
"documentation":"<p>The token for the next set of items to return. (You received this token from a previous call.)</p>"
}
}
},
"DescribeAutomationExecutionsResult":{
"type":"structure",
"members":{
"AutomationExecutionMetadataList":{
"shape":"AutomationExecutionMetadataList",
"documentation":"<p>The list of details about each automation execution which has occurred which matches the filter specification, if any.</p>"
},
"NextToken":{
"shape":"NextToken",
"documentation":"<p>The token to use when requesting the next set of items. If there are no additional items to return, the string is empty.</p>"
}
}
},
"DescribeAvailablePatchesRequest":{
"type":"structure",
"members":{
"Filters":{
"shape":"PatchOrchestratorFilterList",
"documentation":"<p>Filters used to scope down the returned patches.</p>"
},
"MaxResults":{
"shape":"PatchBaselineMaxResults",
"documentation":"<p>The maximum number of patches to return (per page).</p>",
"box":true
},
"NextToken":{
"shape":"NextToken",
"documentation":"<p>The token for the next set of items to return. (You received this token from a previous call.)</p>"
}
}
},
"DescribeAvailablePatchesResult":{
"type":"structure",
"members":{
"Patches":{
"shape":"PatchList",
"documentation":"<p>An array of patches. Each entry in the array is a patch structure.</p>"
},
"NextToken":{
"shape":"NextToken",
"documentation":"<p>The token to use when requesting the next set of items. If there are no additional items to return, the string is empty.</p>"
}
}
},
"DescribeDocumentPermissionRequest":{
"type":"structure",
"required":[
"Name",
"PermissionType"
],
"members":{
"Name":{
"shape":"DocumentName",
"documentation":"<p>The name of the document for which you are the owner.</p>"
},
"PermissionType":{
"shape":"DocumentPermissionType",
"documentation":"<p>The permission type for the document. The permission type can be <i>Share</i>.</p>"
}
}
},
"DescribeDocumentPermissionResponse":{
"type":"structure",
"members":{
"AccountIds":{
"shape":"AccountIdList",
"documentation":"<p>The account IDs that have permission to use this document. The ID can be either an AWS account or <i>All</i>.</p>"
}
}
},
"DescribeDocumentRequest":{
"type":"structure",
"required":["Name"],
"members":{
"Name":{
"shape":"DocumentARN",
"documentation":"<p>The name of the SSM document.</p>"
},
"DocumentVersion":{
"shape":"DocumentVersion",
"documentation":"<p>The document version for which you want information. Can be a specific version or the default version.</p>"
}
}
},
"DescribeDocumentResult":{
"type":"structure",
"members":{
"Document":{
"shape":"DocumentDescription",
"documentation":"<p>Information about the SSM document.</p>"
}
}
},
"DescribeEffectiveInstanceAssociationsRequest":{
"type":"structure",
"required":["InstanceId"],
"members":{
"InstanceId":{
"shape":"InstanceId",
"documentation":"<p>The instance ID for which you want to view all associations.</p>"
},
"MaxResults":{
"shape":"EffectiveInstanceAssociationMaxResults",
"documentation":"<p>The maximum number of items to return for this call. The call also returns a token that you can specify in a subsequent call to get the next set of results.</p>",
"box":true
},
"NextToken":{
"shape":"NextToken",
"documentation":"<p>The token for the next set of items to return. (You received this token from a previous call.)</p>"
}
}
},
"DescribeEffectiveInstanceAssociationsResult":{
"type":"structure",
"members":{
"Associations":{
"shape":"InstanceAssociationList",
"documentation":"<p>The associations for the requested instance.</p>"
},
"NextToken":{
"shape":"NextToken",
"documentation":"<p>The token to use when requesting the next set of items. If there are no additional items to return, the string is empty.</p>"
"documentation":"<p>An array of patches and patch status.</p>"
},
"NextToken":{
"shape":"NextToken",
"documentation":"<p>The token to use when requesting the next set of items. If there are no additional items to return, the string is empty.</p>"
}
}
},
"DescribeInstanceAssociationsStatusRequest":{
"type":"structure",
"required":["InstanceId"],
"members":{
"InstanceId":{
"shape":"InstanceId",
"documentation":"<p>The instance IDs for which you want association status information.</p>"
},
"MaxResults":{
"shape":"MaxResults",
"documentation":"<p>The maximum number of items to return for this call. The call also returns a token that you can specify in a subsequent call to get the next set of results.</p>",
"box":true
},
"NextToken":{
"shape":"NextToken",
"documentation":"<p>The token for the next set of items to return. (You received this token from a previous call.)</p>"
}
}
},
"DescribeInstanceAssociationsStatusResult":{
"type":"structure",
"members":{
"InstanceAssociationStatusInfos":{
"shape":"InstanceAssociationStatusInfos",
"documentation":"<p>Status information about the association.</p>"
},
"NextToken":{
"shape":"NextToken",
"documentation":"<p>The token to use when requesting the next set of items. If there are no additional items to return, the string is empty.</p>"
}
}
},
"DescribeInstanceInformationRequest":{
"type":"structure",
"members":{
"InstanceInformationFilterList":{
"shape":"InstanceInformationFilterList",
"documentation":"<p>One or more filters. Use a filter to return a more specific list of instances.</p>"
},
"Filters":{
"shape":"InstanceInformationStringFilterList",
"documentation":"<p>One or more filters. Use a filter to return a more specific list of instances.</p>"
},
"MaxResults":{
"shape":"MaxResultsEC2Compatible",
"documentation":"<p>The maximum number of items to return for this call. The call also returns a token that you can specify in a subsequent call to get the next set of results. </p>",
"box":true
},
"NextToken":{
"shape":"NextToken",
"documentation":"<p>The token for the next set of items to return. (You received this token from a previous call.)</p>"
}
}
},
"DescribeInstanceInformationResult":{
"type":"structure",
"members":{
"InstanceInformationList":{
"shape":"InstanceInformationList",
"documentation":"<p>The instance information list.</p>"
},
"NextToken":{
"shape":"NextToken",
"documentation":"<p>The token to use when requesting the next set of items. If there are no additional items to return, the string is empty. </p>"
"documentation":"<p>Each entry in the array is a structure containing:</p> <p>Key (string between 1 and 200 characters)</p> <p> Values (array containing a single string)</p> <p> Type (string \"Equal\", \"NotEqual\", \"LessThan\", \"GreaterThan\")</p>"
"documentation":"<p>Each entry in the array is a structure containing:</p> <p>Key (string, between 1 and 128 characters)</p> <p>Values (array of strings, each string between 1 and 256 characters)</p>"
"documentation":"<p>The ID of the Maintenance Window execution the task is part of.</p>"
},
"TaskId":{
"shape":"MaintenanceWindowExecutionTaskId",
"documentation":"<p>The ID of the specific task in the Maintenance Window task that should be retrieved.</p>"
},
"Filters":{
"shape":"MaintenanceWindowFilterList",
"documentation":"<p>Optional filters used to scope down the returned task invocations. The supported filter key is STATUS with the corresponding values PENDING, IN_PROGRESS, SUCCESS, FAILED, TIMED_OUT, CANCELLING, and CANCELLED.</p>"
},
"MaxResults":{
"shape":"MaintenanceWindowMaxResults",
"documentation":"<p>The maximum number of items to return for this call. The call also returns a token that you can specify in a subsequent call to get the next set of results.</p>",
"box":true
},
"NextToken":{
"shape":"NextToken",
"documentation":"<p>The token for the next set of items to return. (You received this token from a previous call.)</p>"
"documentation":"<p>The ID of the Maintenance Window execution whose task executions should be retrieved.</p>"
},
"Filters":{
"shape":"MaintenanceWindowFilterList",
"documentation":"<p>Optional filters used to scope down the returned tasks. The supported filter key is STATUS with the corresponding values PENDING, IN_PROGRESS, SUCCESS, FAILED, TIMED_OUT, CANCELLING, and CANCELLED. </p>"
},
"MaxResults":{
"shape":"MaintenanceWindowMaxResults",
"documentation":"<p>The maximum number of items to return for this call. The call also returns a token that you can specify in a subsequent call to get the next set of results.</p>",
"box":true
},
"NextToken":{
"shape":"NextToken",
"documentation":"<p>The token for the next set of items to return. (You received this token from a previous call.)</p>"
"documentation":"<p>Each entry in the array is a structure containing:</p> <p>Key (string, between 1 and 128 characters)</p> <p>Values (array of strings, each string is between 1 and 256 characters)</p> <p>The supported Keys are ExecutedBefore and ExecutedAfter with the value being a date/time string such as 2016-11-04T05:00:00Z.</p>"
"documentation":"<p>The maximum number of items to return for this call. The call also returns a token that you can specify in a subsequent call to get the next set of results.</p>",
"box":true
},
"NextToken":{
"shape":"NextToken",
"documentation":"<p>The token for the next set of items to return. (You received this token from a previous call.)</p>"
}
}
},
"DescribeMaintenanceWindowExecutionsResult":{
"type":"structure",
"members":{
"WindowExecutions":{
"shape":"MaintenanceWindowExecutionList",
"documentation":"<p>Information about the Maintenance Windows execution.</p>"
},
"NextToken":{
"shape":"NextToken",
"documentation":"<p>The token to use when requesting the next set of items. If there are no additional items to return, the string is empty.</p>"
}
}
},
"DescribeMaintenanceWindowTargetsRequest":{
"type":"structure",
"required":["WindowId"],
"members":{
"WindowId":{
"shape":"MaintenanceWindowId",
"documentation":"<p>The ID of the Maintenance Window whose targets should be retrieved.</p>"
"documentation":"<p>Optional filters that can be used to narrow down the scope of the returned window targets. The supported filter keys are Type, WindowTargetId and OwnerInformation.</p>"
"documentation":"<p>The maximum number of items to return for this call. The call also returns a token that you can specify in a subsequent call to get the next set of results.</p>",
"box":true
},
"NextToken":{
"shape":"NextToken",
"documentation":"<p>The token for the next set of items to return. (You received this token from a previous call.)</p>"
}
}
},
"DescribeMaintenanceWindowTargetsResult":{
"type":"structure",
"members":{
"Targets":{
"shape":"MaintenanceWindowTargetList",
"documentation":"<p>Information about the targets in the Maintenance Window.</p>"
},
"NextToken":{
"shape":"NextToken",
"documentation":"<p>The token to use when requesting the next set of items. If there are no additional items to return, the string is empty.</p>"
}
}
},
"DescribeMaintenanceWindowTasksRequest":{
"type":"structure",
"required":["WindowId"],
"members":{
"WindowId":{
"shape":"MaintenanceWindowId",
"documentation":"<p>The ID of the Maintenance Window whose tasks should be retrieved.</p>"
"documentation":"<p>Optional filters used to narrow down the scope of the returned tasks. The supported filter keys are WindowTaskId, TaskArn, Priority, and TaskType.</p>"
"documentation":"<p>The maximum number of items to return for this call. The call also returns a token that you can specify in a subsequent call to get the next set of results.</p>",
"box":true
},
"NextToken":{
"shape":"NextToken",
"documentation":"<p>The token for the next set of items to return. (You received this token from a previous call.)</p>"
}
}
},
"DescribeMaintenanceWindowTasksResult":{
"type":"structure",
"members":{
"Tasks":{
"shape":"MaintenanceWindowTaskList",
"documentation":"<p>Information about the tasks in the Maintenance Window.</p>"
},
"NextToken":{
"shape":"NextToken",
"documentation":"<p>The token to use when requesting the next set of items. If there are no additional items to return, the string is empty.</p>"
"documentation":"<p>Optional filters used to narrow down the scope of the returned Maintenance Windows. Supported filter keys are Name and Enabled.</p>"
"documentation":"<p>The maximum number of items to return for this call. The call also returns a token that you can specify in a subsequent call to get the next set of results.</p>",
"box":true
},
"NextToken":{
"shape":"NextToken",
"documentation":"<p>The token for the next set of items to return. (You received this token from a previous call.)</p>"
}
}
},
"DescribeMaintenanceWindowsResult":{
"type":"structure",
"members":{
"WindowIdentities":{
"shape":"MaintenanceWindowIdentityList",
"documentation":"<p>Information about the Maintenance Windows.</p>"
},
"NextToken":{
"shape":"NextToken",
"documentation":"<p>The token to use when requesting the next set of items. If there are no additional items to return, the string is empty.</p>"
}
}
},
"DescribeParametersRequest":{
"type":"structure",
"members":{
"Filters":{
"shape":"ParametersFilterList",
"documentation":"<p>One or more filters. Use a filter to return a more specific list of results.</p>"
"documentation":"<p>The maximum number of items to return for this call. The call also returns a token that you can specify in a subsequent call to get the next set of results.</p>",
"box":true
},
"NextToken":{
"shape":"NextToken",
"documentation":"<p>The token for the next set of items to return. (You received this token from a previous call.)</p>"
}
}
},
"DescribeParametersResult":{
"type":"structure",
"members":{
"Parameters":{
"shape":"ParameterMetadataList",
"documentation":"<p>Parameters returned by the request.</p>"
},
"NextToken":{
"shape":"NextToken",
"documentation":"<p>The token to use when requesting the next set of items. If there are no additional items to return, the string is empty.</p>"
"documentation":"<p>Each element in the array is a structure containing: </p> <p>Key: (string, \"NAME_PREFIX\" or \"OWNER\")</p> <p>Value: (array of strings, exactly 1 entry, between 1 and 255 characters)</p>"
"documentation":"<p>Each entry in the array contains:</p> <p>PatchGroup: string (between 1 and 256 characters, Regex: ^([\\p{L}\\p{Z}\\p{N}_.:/=+\\-@]*)$)</p> <p>PatchBaselineIdentity: A PatchBaselineIdentity element. </p>"
"documentation":"<p>The name of the document.</p>"
},
"DefaultVersion":{
"shape":"DocumentVersion",
"documentation":"<p>The default version of the document.</p>"
}
},
"documentation":"<p>A default version of a document.</p>"
},
"DocumentDescription":{
"type":"structure",
"members":{
"Sha1":{
"shape":"DocumentSha1",
"documentation":"<p>The SHA1 hash of the document, which you can use for verification purposes.</p>"
},
"Hash":{
"shape":"DocumentHash",
"documentation":"<p>The Sha256 or Sha1 hash created by the system when the document was created. </p> <note> <p>Sha1 hashes have been deprecated.</p> </note>"
},
"HashType":{
"shape":"DocumentHashType",
"documentation":"<p>Sha256 or Sha1.</p> <note> <p>Sha1 hashes have been deprecated.</p> </note>"
},
"Name":{
"shape":"DocumentARN",
"documentation":"<p>The name of the SSM document.</p>"
},
"Owner":{
"shape":"DocumentOwner",
"documentation":"<p>The AWS user account of the person who created the document.</p>"
"documentation":"<p>A description of what the parameter does, how to use it, the default value, and whether or not the parameter is optional.</p>"
},
"DefaultValue":{
"shape":"DocumentParameterDefaultValue",
"documentation":"<p>If specified, the default values for the parameters. Parameters without a default value are required. Parameters with a default value are optional.</p>"
"documentation":"<p>The document cannot be shared with more AWS user accounts. You can share a document with a maximum of 20 accounts. You can publicly share up to five documents. If you need to increase this limit, contact AWS Support.</p>",
"exception":true
},
"DocumentPermissionType":{
"type":"string",
"enum":["Share"]
},
"DocumentSchemaVersion":{
"type":"string",
"pattern":"([0-9]+)\\.([0-9]+)"
},
"DocumentSha1":{"type":"string"},
"DocumentStatus":{
"type":"string",
"enum":[
"Creating",
"Active",
"Updating",
"Deleting"
]
},
"DocumentType":{
"type":"string",
"enum":[
"Command",
"Policy",
"Automation"
]
},
"DocumentVersion":{
"type":"string",
"pattern":"([$]LATEST|[$]DEFAULT|^[1-9][0-9]*$)"
},
"DocumentVersionInfo":{
"type":"structure",
"members":{
"Name":{
"shape":"DocumentName",
"documentation":"<p>The document name.</p>"
},
"DocumentVersion":{
"shape":"DocumentVersion",
"documentation":"<p>The document version.</p>"
},
"CreatedDate":{
"shape":"DateTime",
"documentation":"<p>The date the document was created.</p>"
},
"IsDefaultVersion":{
"shape":"Boolean",
"documentation":"<p>An identifier for the default version of the document.</p>"
}
},
"documentation":"<p>Version information about the document.</p>"
},
"DocumentVersionLimitExceeded":{
"type":"structure",
"members":{
"Message":{"shape":"String"}
},
"documentation":"<p>The document has too many versions. Delete one or more document versions and try again.</p>",
"documentation":"<p>The content of the association document matches another document. Change the content of the document and try again.</p>",
"exception":true
},
"DuplicateInstanceId":{
"type":"structure",
"members":{
},
"documentation":"<p>You cannot specify an instance ID in more than one association.</p>",
"exception":true
},
"EffectiveInstanceAssociationMaxResults":{
"type":"integer",
"max":5,
"min":1
},
"EffectivePatch":{
"type":"structure",
"members":{
"Patch":{
"shape":"Patch",
"documentation":"<p>Provides metadata for a patch, including information such as the KB ID, severity, classification and a URL for where more information can be obtained about the patch.</p>"
},
"PatchStatus":{
"shape":"PatchStatus",
"documentation":"<p>The status of the patch in a patch baseline. This includes information about whether the patch is currently approved, due to be approved by a rule, explicitly approved, or explicitly rejected and the date the patch was or will be approved.</p>"
}
},
"documentation":"<p>The EffectivePatch structure defines metadata about a patch along with the approval state of the patch in a particular patch baseline. The approval state includes information about whether the patch is currently approved, due to be approved by a rule, explicitly approved, or explicitly rejected and the date the patch was or will be approved.</p>"
},
"EffectivePatchList":{
"type":"list",
"member":{"shape":"EffectivePatch"}
},
"ErrorCount":{"type":"integer"},
"ExpirationDate":{"type":"timestamp"},
"FailedCreateAssociation":{
"type":"structure",
"members":{
"Entry":{
"shape":"CreateAssociationBatchRequestEntry",
"documentation":"<p>The association.</p>"
},
"Message":{
"shape":"BatchErrorMessage",
"documentation":"<p>A description of the failure.</p>"
},
"Fault":{
"shape":"Fault",
"documentation":"<p>The source of the failure.</p>"
}
},
"documentation":"<p>Describes a failed association.</p>"
"documentation":"<p>The stage of the Automation execution when the failure occurred. The stages include the following: InputValidation, PreVerification, Invocation, PostVerification.</p>"
},
"FailureType":{
"shape":"String",
"documentation":"<p>The type of Automation failure. Failure types include the following: Action, Permission, Throttling, Verification, Internal.</p>"
},
"Details":{
"shape":"AutomationParameterMap",
"documentation":"<p>Detailed information about the Automation step failure.</p>"
}
},
"documentation":"<p>Information about an Automation failure.</p>"
"documentation":"<p>The unique identifier for an existing automation execution to examine. The execution ID is returned by StartAutomationExecution when the execution of an Automation document is initiated.</p>"
"documentation":"<p>Detailed information about the current state of an automation execution.</p>"
}
}
},
"GetCommandInvocationRequest":{
"type":"structure",
"required":[
"CommandId",
"InstanceId"
],
"members":{
"CommandId":{
"shape":"CommandId",
"documentation":"<p>(Required) The parent command ID of the invocation plugin.</p>"
},
"InstanceId":{
"shape":"InstanceId",
"documentation":"<p>(Required) The ID of the managed instance targeted by the command. A managed instance can be an Amazon EC2 instance or an instance in your hybrid environment that is configured for Systems Manager.</p>"
"documentation":"<p>(Optional) The name of the plugin for which you want detailed results. If the document contains only one plugin, the name can be omitted and the details will be returned.</p>"
"documentation":"<p>The parent command ID of the invocation plugin.</p>"
},
"InstanceId":{
"shape":"InstanceId",
"documentation":"<p>The ID of the managed instance targeted by the command. A managed instance can be an Amazon EC2 instance or an instance in your hybrid environment that is configured for Systems Manager.</p>"
},
"Comment":{
"shape":"Comment",
"documentation":"<p>The comment text for the command.</p>"
"documentation":"<p>The error level response code for the plugin script. If the response code is -1, then the command has not started executing on the instance, or it was not received by the instance.</p>"
"documentation":"<p>The date and time the plugin started executing. Date and time are written in ISO 8601 format. For example, June 7, 2017 is represented as 2017-06-7. The following sample AWS CLI command uses the <code>InvokedBefore</code> filter.</p> <p> <code>aws ssm list-commands --filters key=InvokedBefore,value=2017-06-07T00:00:00Z</code> </p> <p>If the plugin has not started to execute, the string is empty.</p>"
"documentation":"<p>The date and time the plugin was finished executing. Date and time are written in ISO 8601 format. For example, June 7, 2017 is represented as 2017-06-7. The following sample AWS CLI command uses the <code>InvokedAfter</code> filter.</p> <p> <code>aws ssm list-commands --filters key=InvokedAfter,value=2017-06-07T00:00:00Z</code> </p> <p>If the plugin has not started to execute, the string is empty.</p>"
"documentation":"<p>A detailed status of the command execution for an invocation. StatusDetails includes more information than Status because it includes states resulting from error and concurrency control parameters. StatusDetails can show different results than Status. For more information about these statuses, see <a href=\"http://docs.aws.amazon.com/systems-manager/latest/userguide/monitor-about-status.html\">Run Command Status</a>. StatusDetails can be one of the following values:</p> <ul> <li> <p>Pending: The command has not been sent to the instance.</p> </li> <li> <p>In Progress: The command has been sent to the instance but has not reached a terminal state.</p> </li> <li> <p>Delayed: The system attempted to send the command to the target, but the target was not available. The instance might not be available because of network issues, the instance was stopped, etc. The system will try to deliver the command again.</p> </li> <li> <p>Success: The command or plugin was executed successfully. This is a terminal state.</p> </li> <li> <p>Delivery Timed Out: The command was not delivered to the instance before the delivery timeout expired. Delivery timeouts do not count against the parent command's MaxErrors limit, but they do contribute to whether the parent command status is Success or Incomplete. This is a terminal state.</p> </li> <li> <p>Execution Timed Out: The command started to execute on the instance, but the execution was not complete before the timeout expired. Execution timeouts count against the MaxErrors limit of the parent command. This is a terminal state.</p> </li> <li> <p>Failed: The command wasn't executed successfully on the instance. For a plugin, this indicates that the result code was not zero. For a command invocation, this indicates that the result code for one or more plugins was not zero. Invocation failures count against the MaxErrors limit of the parent command. This is a terminal state.</p> </li> <li> <p>Canceled: The command was terminated before it was completed. This is a terminal state.</p> </li> <li> <p>Undeliverable: The command can't be delivered to the instance. The instance might not exist or might not be responding. Undeliverable invocations don't count against the parent command's MaxErrors limit and don't contribute to whether the parent command status is Success or Incomplete. This is a terminal state.</p> </li> <li> <p>Terminated: The parent command exceeded its MaxErrors limit and subsequent command invocations were canceled by the system. This is a terminal state.</p> </li> </ul>"
"documentation":"<p>The first 24,000 characters written by the plugin to stdout. If the command has not finished executing, if ExecutionStatus is neither Succeeded nor Failed, then this string is empty.</p>"
"documentation":"<p>The URL for the complete text written by the plugin to stdout in Amazon S3. If an Amazon S3 bucket was not specified, then this string is empty.</p>"
},
"StandardErrorContent":{
"shape":"StandardErrorContent",
"documentation":"<p>The first 8,000 characters written by the plugin to stderr. If the command has not finished executing, then this string is empty.</p>"
},
"StandardErrorUrl":{
"shape":"Url",
"documentation":"<p>The URL for the complete text written by the plugin to stderr. If the command has not finished executing, then this string is empty.</p>"
"documentation":"<p>Returns the specific operating system (for example Windows Server 2012 or Amazon Linux 2015.09) on the instance for the specified patch snapshot.</p>"
"documentation":"<p>The name of the SSM document.</p>"
},
"DocumentVersion":{
"shape":"DocumentVersion",
"documentation":"<p>The document version for which you want information.</p>"
}
}
},
"GetDocumentResult":{
"type":"structure",
"members":{
"Name":{
"shape":"DocumentARN",
"documentation":"<p>The name of the SSM document.</p>"
},
"DocumentVersion":{
"shape":"DocumentVersion",
"documentation":"<p>The document version.</p>"
},
"Content":{
"shape":"DocumentContent",
"documentation":"<p>The contents of the SSM document.</p>"
},
"DocumentType":{
"shape":"DocumentType",
"documentation":"<p>The document type.</p>"
}
}
},
"GetInventoryRequest":{
"type":"structure",
"members":{
"Filters":{
"shape":"InventoryFilterList",
"documentation":"<p>One or more filters. Use a filter to return a more specific list of results.</p>"
},
"ResultAttributes":{
"shape":"ResultAttributeList",
"documentation":"<p>The list of inventory item types to return.</p>"
},
"NextToken":{
"shape":"NextToken",
"documentation":"<p>The token for the next set of items to return. (You received this token from a previous call.)</p>"
},
"MaxResults":{
"shape":"MaxResults",
"documentation":"<p>The maximum number of items to return for this call. The call also returns a token that you can specify in a subsequent call to get the next set of results.</p>",
"box":true
}
}
},
"GetInventoryResult":{
"type":"structure",
"members":{
"Entities":{
"shape":"InventoryResultEntityList",
"documentation":"<p>Collection of inventory entities such as a collection of instance inventory. </p>"
},
"NextToken":{
"shape":"NextToken",
"documentation":"<p>The token to use when requesting the next set of items. If there are no additional items to return, the string is empty.</p>"
}
}
},
"GetInventorySchemaMaxResults":{
"type":"integer",
"max":200,
"min":50
},
"GetInventorySchemaRequest":{
"type":"structure",
"members":{
"TypeName":{
"shape":"InventoryItemTypeNameFilter",
"documentation":"<p>The type of inventory item to return.</p>"
},
"NextToken":{
"shape":"NextToken",
"documentation":"<p>The token for the next set of items to return. (You received this token from a previous call.)</p>"
},
"MaxResults":{
"shape":"GetInventorySchemaMaxResults",
"documentation":"<p>The maximum number of items to return for this call. The call also returns a token that you can specify in a subsequent call to get the next set of results.</p>",
"box":true
}
}
},
"GetInventorySchemaResult":{
"type":"structure",
"members":{
"Schemas":{
"shape":"InventoryItemSchemaResultList",
"documentation":"<p>Inventory schemas returned by the request.</p>"
},
"NextToken":{
"shape":"NextToken",
"documentation":"<p>The token to use when requesting the next set of items. If there are no additional items to return, the string is empty.</p>"
}
}
},
"GetMaintenanceWindowExecutionRequest":{
"type":"structure",
"required":["WindowExecutionId"],
"members":{
"WindowExecutionId":{
"shape":"MaintenanceWindowExecutionId",
"documentation":"<p>The ID of the Maintenance Window execution that includes the task.</p>"
}
}
},
"GetMaintenanceWindowExecutionResult":{
"type":"structure",
"members":{
"WindowExecutionId":{
"shape":"MaintenanceWindowExecutionId",
"documentation":"<p>The ID of the Maintenance Window execution.</p>"
},
"TaskIds":{
"shape":"MaintenanceWindowExecutionTaskIdList",
"documentation":"<p>The ID of the task executions from the Maintenance Window execution.</p>"
},
"Status":{
"shape":"MaintenanceWindowExecutionStatus",
"documentation":"<p>The status of the Maintenance Window execution.</p>"
"documentation":"<p>The parameters passed to the task when it was executed. The map has the following format:</p> <p>Key: string, between 1 and 255 characters</p> <p>Value: an array of strings, each string is between 1 and 255 characters</p>"
"documentation":"<p>Whether targets must be registered with the Maintenance Window before tasks can be defined for those targets.</p>"
},
"Enabled":{
"shape":"MaintenanceWindowEnabled",
"documentation":"<p>Whether the Maintenance Windows is enabled.</p>"
},
"CreatedDate":{
"shape":"DateTime",
"documentation":"<p>The date the Maintenance Window was created.</p>"
},
"ModifiedDate":{
"shape":"DateTime",
"documentation":"<p>The date the Maintenance Window was last modified.</p>"
}
}
},
"GetParameterHistoryRequest":{
"type":"structure",
"required":["Name"],
"members":{
"Name":{
"shape":"PSParameterName",
"documentation":"<p>The name of a parameter you want to query.</p>"
},
"WithDecryption":{
"shape":"Boolean",
"documentation":"<p>Return decrypted values for secure string parameters. This flag is ignored for String and StringList parameter types.</p>",
"box":true
},
"MaxResults":{
"shape":"MaxResults",
"documentation":"<p>The maximum number of items to return for this call. The call also returns a token that you can specify in a subsequent call to get the next set of results.</p>",
"box":true
},
"NextToken":{
"shape":"NextToken",
"documentation":"<p>The token for the next set of items to return. (You received this token from a previous call.)</p>"
}
}
},
"GetParameterHistoryResult":{
"type":"structure",
"members":{
"Parameters":{
"shape":"ParameterHistoryList",
"documentation":"<p>A list of parameters returned by the request.</p>"
},
"NextToken":{
"shape":"NextToken",
"documentation":"<p>The token to use when requesting the next set of items. If there are no additional items to return, the string is empty.</p>"
"documentation":"<p>The name of the parameter you want to query.</p>"
},
"WithDecryption":{
"shape":"Boolean",
"documentation":"<p>Return decrypted values for secure string parameters. This flag is ignored for String and StringList parameter types.</p>",
"box":true
}
}
},
"GetParameterResult":{
"type":"structure",
"members":{
"Parameter":{
"shape":"Parameter",
"documentation":"<p>Information about a parameter.</p>"
}
}
},
"GetParametersByPathMaxResults":{
"type":"integer",
"max":10,
"min":1
},
"GetParametersByPathRequest":{
"type":"structure",
"required":["Path"],
"members":{
"Path":{
"shape":"PSParameterName",
"documentation":"<p>The hierarchy for the parameter. Hierarchies start with a forward slash (/) and end with the parameter name. A hierarchy can have a maximum of five levels. Examples: /Environment/Test/DBString003</p> <p>/Finance/Prod/IAD/OS/WinServ2016/license15</p>"
},
"Recursive":{
"shape":"Boolean",
"documentation":"<p>Retrieve all parameters within a hierarchy.</p>",
"box":true
},
"ParameterFilters":{
"shape":"ParameterStringFilterList",
"documentation":"<p>Filters to limit the request results.</p>"
},
"WithDecryption":{
"shape":"Boolean",
"documentation":"<p>Retrieve all parameters in a hierarchy with their value decrypted.</p>",
"box":true
},
"MaxResults":{
"shape":"GetParametersByPathMaxResults",
"documentation":"<p>The maximum number of items to return for this call. The call also returns a token that you can specify in a subsequent call to get the next set of results.</p>",
"box":true
},
"NextToken":{
"shape":"NextToken",
"documentation":"<p>A token to start the list. Use this token to get the next set of results. </p>"
}
}
},
"GetParametersByPathResult":{
"type":"structure",
"members":{
"Parameters":{
"shape":"ParameterList",
"documentation":"<p>A list of parameters found in the specified hierarchy.</p>"
},
"NextToken":{
"shape":"NextToken",
"documentation":"<p>The token for the next set of items to return. Use this token to get the next set of results.</p>"
"documentation":"<p>Names of the parameters for which you want to query information.</p>"
},
"WithDecryption":{
"shape":"Boolean",
"documentation":"<p>Return decrypted secure string value. Return decrypted values for secure string parameters. This flag is ignored for String and StringList parameter types.</p>",
"documentation":"<p>A hierarchy can have a maximum of five levels. For example:</p> <p>/Finance/Prod/IAD/OS/WinServ2016/license15</p> <p>For more information, see <a href=\"http://docs.aws.amazon.com/systems-manager/latest/userguide/sysman-paramstore-working.html\">Working with Systems Manager Parameters</a>. </p>"
"documentation":"<p>A hierarchy can have a maximum of five levels. For example:</p> <p>/Finance/Prod/IAD/OS/WinServ2016/license15</p> <p>For more information, see <a href=\"http://docs.aws.amazon.com/systems-manager/latest/userguide/sysman-paramstore-working.html\">Working with Systems Manager Parameters</a>. </p>",
"documentation":"<p>Parameter Store does not support changing a parameter type in a hierarchy. For example, you can't change a parameter from a String type to a SecureString type. You must create a new, unique parameter.</p>"
}
},
"documentation":"<p>Parameter Store does not support changing a parameter type in a hierarchy. For example, you can't change a parameter from a String type to a SecureString type. You must create a new, unique parameter.</p>",
"documentation":"<p>Error returned when an idempotent operation is retried and the parameters don't match the original call to the API with the same idempotency token. </p>",
"documentation":"<p>The filter key name to describe your instances. For example:</p> <p>\"InstanceIds\"|\"AgentVersion\"|\"PingStatus\"|\"PlatformTypes\"|\"ActivationIds\"|\"IamRole\"|\"ResourceType\"|\"AssociationStatus\"|\"Tag Key\"</p>"
"documentation":"<p>The number of patches from the patch baseline that were attempted to be installed during the last patching operation, but failed to install.</p>"
"documentation":"<p>The number of patches from the patch baseline that aren't applicable for the instance and hence aren't installed on the instance.</p>"
"documentation":"<p>Defines the high-level patch compliance state for a managed instance, providing information about the number of installed, missing, not applicable, and failed patches along with metadata about the operation when this information was gathered for the instance.</p>"
},
"InstancePatchStateFilter":{
"type":"structure",
"required":[
"Key",
"Values",
"Type"
],
"members":{
"Key":{
"shape":"InstancePatchStateFilterKey",
"documentation":"<p>The key for the filter. Supported values are FailedCount, InstalledCount, InstalledOtherCount, MissingCount and NotApplicableCount.</p>"
},
"Values":{
"shape":"InstancePatchStateFilterValues",
"documentation":"<p>The value for the filter, must be an integer greater than or equal to 0.</p>"
},
"Type":{
"shape":"InstancePatchStateOperatorType",
"documentation":"<p>The type of comparison that should be performed for the value: Equal, NotEqual, LessThan or GreaterThan.</p>"
}
},
"documentation":"<p>Defines a filter used in DescribeInstancePatchStatesForPatchGroup used to scope down the information returned by the API.</p>"
"documentation":"<p>The activation is not valid. The activation might have been deleted, or the ActivationId and the ActivationCode do not match.</p>",
"documentation":"<p>The supplied parameters for invoking the specified Automation document are incorrect. For example, they may not match the set of parameters permitted for the specified Automation document.</p>",
"documentation":"<p>The document does not exist or the document is not available to the user. This exception can be issued by CreateAssociation, CreateAssociationBatch, DeleteAssociation, DeleteDocument, DescribeAssociation, DescribeDocument, GetDocument, SendCommand, or UpdateAssociationStatus. </p>"
"documentation":"<p>The specified filter option is not valid. Valid options are Equals and BeginsWith. For Path filter, valid options are Recursive and OneLevel.</p>"
}
},
"documentation":"<p>The specified filter option is not valid. Valid options are Equals and BeginsWith. For Path filter, valid options are Recursive and OneLevel.</p>",
"documentation":"<p>The following problems can cause this exception:</p> <p>You do not have permission to access the instance.</p> <p>The SSM Agent is not running. On managed instances and Linux instances, verify that the SSM Agent is running. On EC2 Windows instances, verify that the EC2Config service is running.</p> <p>The SSM Agent or EC2Config service is not registered to the SSM endpoint. Try reinstalling the SSM Agent or EC2Config service.</p> <p>The instance is not in valid state. Valid states are: Running, Pending, Stopped, Stopping. Invalid states are: Shutting-down and Terminated.</p>",
"documentation":"<p>One or more configuration items is not valid. Verify that a valid Amazon Resource Name (ARN) was provided for an Amazon SNS topic.</p>",
"documentation":"<p>You must specify values for all required parameters in the SSM document. You can only supply values to parameters defined in the SSM document.</p>",
"documentation":"<p>The resource type is not valid. If you are attempting to tag an instance, the instance must be a registered, managed instance.</p>",
"documentation":"<p>The role name can't contain invalid characters. Also verify that you specified an IAM role for notifications that includes the required trust policy. For information about configuring the IAM role for Run Command notifications, see <a href=\"http://docs.aws.amazon.com/systems-manager/latest/userguide/rc-sns-notifications.html\">Configuring Amazon SNS Notifications for Run Command</a> in the <i>Amazon EC2 Systems Manager User Guide</i>.</p>",
"documentation":"<p>The target is not valid or does not exist. It might not be configured for EC2 Systems Manager or you might not have permission to perform the operation.</p>",
"documentation":"<p>The name of the inventory type. Default inventory item type names start with AWS. Custom inventory type names will start with Custom. Default inventory item types include the following: AWS:AWSComponent, AWS:Application, AWS:InstanceInformation, AWS:Network, and AWS:WindowsUpdate.</p>"
"documentation":"<p>MD5 hash of the inventory item type contents. The content hash is used to determine whether to update inventory information. The PutInventory API does not update the inventory item type contents if the MD5 hash has not changed since last update. </p>"
"documentation":"<p>The name of the inventory type. Default inventory item type names start with AWS. Custom inventory type names will start with Custom. Default inventory item types include the following: AWS:AWSComponent, AWS:Application, AWS:InstanceInformation, AWS:Network, and AWS:WindowsUpdate.</p>"
"documentation":"<p>ID of the inventory result entity. For example, for managed instance inventory the result will be the managed instance ID. For EC2 instance inventory, the result will be the instance ID. </p>"
},
"Data":{
"shape":"InventoryResultItemMap",
"documentation":"<p>The data section in the inventory result entity json.</p>"
"documentation":"<p>MD5 hash of the inventory item type contents. The content hash is used to determine whether to update inventory information. The PutInventory API does not update the inventory item type contents if the MD5 hash has not changed since last update. </p>"
"documentation":"<p>The command ID and instance ID you specified did not match any invocations. Verify the command ID adn the instance ID and try again. </p>",
"documentation":"<p>The maximum number of items to return for this call. The call also returns a token that you can specify in a subsequent call to get the next set of results.</p>",
"documentation":"<p>(Optional) The command execution details for a specific instance ID.</p>"
},
"MaxResults":{
"shape":"CommandMaxResults",
"documentation":"<p>(Optional) The maximum number of items to return for this call. The call also returns a token that you can specify in a subsequent call to get the next set of results.</p>",
"box":true
},
"NextToken":{
"shape":"NextToken",
"documentation":"<p>(Optional) The token for the next set of items to return. (You received this token from a previous call.)</p>"
},
"Filters":{
"shape":"CommandFilterList",
"documentation":"<p>(Optional) One or more filters. Use a filter to return a more specific list of results.</p>"
},
"Details":{
"shape":"Boolean",
"documentation":"<p>(Optional) If set this returns the response of the command executions and any command output. By default this is set to False. </p>"
"documentation":"<p>(Optional) Lists commands issued against this instance ID.</p>"
},
"MaxResults":{
"shape":"CommandMaxResults",
"documentation":"<p>(Optional) The maximum number of items to return for this call. The call also returns a token that you can specify in a subsequent call to get the next set of results.</p>",
"box":true
},
"NextToken":{
"shape":"NextToken",
"documentation":"<p>(Optional) The token for the next set of items to return. (You received this token from a previous call.)</p>"
},
"Filters":{
"shape":"CommandFilterList",
"documentation":"<p>(Optional) One or more filters. Use a filter to return a more specific list of results. </p>"
"documentation":"<p>The name of the document about which you want version information.</p>"
},
"MaxResults":{
"shape":"MaxResults",
"documentation":"<p>The maximum number of items to return for this call. The call also returns a token that you can specify in a subsequent call to get the next set of results.</p>",
"box":true
},
"NextToken":{
"shape":"NextToken",
"documentation":"<p>The token for the next set of items to return. (You received this token from a previous call.)</p>"
"documentation":"<p>The maximum number of items to return for this call. The call also returns a token that you can specify in a subsequent call to get the next set of results.</p>",
"documentation":"<p>The maximum number of items to return for this call. The call also returns a token that you can specify in a subsequent call to get the next set of results.</p>",
"documentation":"<p>A token to start the list. Use this token to get the next set of results. </p>"
},
"MaxResults":{
"shape":"MaxResults",
"documentation":"<p>The maximum number of items to return for this call. The call also returns a token that you can specify in a subsequent call to get the next set of results.</p>",
"box":true
}
}
},
"ListResourceDataSyncResult":{
"type":"structure",
"members":{
"ResourceDataSyncItems":{
"shape":"ResourceDataSyncItemList",
"documentation":"<p>A list of your current Resource Data Sync configurations and their statuses.</p>"
},
"NextToken":{
"shape":"NextToken",
"documentation":"<p>The token for the next set of items to return. Use this token to get the next set of results.</p>"
"documentation":"<p>The ID of the action performed in the service that actually handled the task invocation. If the task type is RUN_COMMAND, this value is the command ID.</p>"
"documentation":"<p>The details explaining the status of the task invocation. Only available for certain Status values. </p>"
},
"StartTime":{
"shape":"DateTime",
"documentation":"<p>The time the invocation started.</p>"
},
"EndTime":{
"shape":"DateTime",
"documentation":"<p>The time the invocation finished.</p>"
},
"OwnerInformation":{
"shape":"OwnerInformation",
"documentation":"<p>User-provided value that was specified when the target was registered with the Maintenance Window. This was also included in any CloudWatch events raised during the task invocation.</p>"
},
"WindowTargetId":{
"shape":"MaintenanceWindowTaskTargetId",
"documentation":"<p>The ID of the target definition in this Maintenance Window the invocation was performed for.</p>"
"documentation":"<p>Describes the information about a task invocation for a particular target as part of a task execution performed as part of a Maintenance Window execution.</p>"
"documentation":"<p>The targets (either instances or tags). Instances are specified using Key=instanceids,Values=<instanceid1>,<instanceid2>. Tags are specified using Key=<tag name>,Values=<tag value>.</p>"
"documentation":"<p>User-provided value that will be included in any CloudWatch events raised while running tasks for these targets in this Maintenance Window.</p>"
"documentation":"<p>The ARN of the task to execute.</p>"
},
"Type":{
"shape":"MaintenanceWindowTaskType",
"documentation":"<p>The type of task.</p>"
},
"Targets":{
"shape":"Targets",
"documentation":"<p>The targets (either instances or tags). Instances are specified using Key=instanceids,Values=<instanceid1>,<instanceid2>. Tags are specified using Key=<tag name>,Values=<tag value>.</p>"
},
"TaskParameters":{
"shape":"MaintenanceWindowTaskParameters",
"documentation":"<p>The parameters that should be passed to the task when it is executed.</p>"
},
"Priority":{
"shape":"MaintenanceWindowTaskPriority",
"documentation":"<p>The priority of the task in the Maintenance Window, the lower the number the higher the priority. Tasks in a Maintenance Window are scheduled in priority order with tasks that have the same priority scheduled in parallel.</p>"
},
"LoggingInfo":{
"shape":"LoggingInfo",
"documentation":"<p>Information about an Amazon S3 bucket to write task-level logs to.</p>"
},
"ServiceRoleArn":{
"shape":"ServiceRole",
"documentation":"<p>The role that should be assumed when executing the task</p>"
"documentation":"<p>The name of the document that you want to share.</p>"
},
"PermissionType":{
"shape":"DocumentPermissionType",
"documentation":"<p>The permission type for the document. The permission type can be <i>Share</i>.</p>"
},
"AccountIdsToAdd":{
"shape":"AccountIdList",
"documentation":"<p>The AWS user accounts that should have access to the document. The account IDs can either be a group of account IDs or <i>All</i>.</p>"
},
"AccountIdsToRemove":{
"shape":"AccountIdList",
"documentation":"<p>The AWS user accounts that should no longer have access to the document. The AWS user account can either be a group of account IDs or <i>All</i>. This action has a higher priority than <i>AccountIdsToAdd</i>. If you specify an account ID to add and the same ID to remove, the system removes access to the document.</p>"
"documentation":"<p>An Amazon Resource Name (ARN) for a Simple Notification Service (SNS) topic. Run Command pushes notifications about command status changes to this topic.</p>"
"documentation":"<p>The different events for which you can receive notifications. These events include the following: All (events), InProgress, Success, TimedOut, Cancelled, Failed. To learn more about these events, see <a href=\"http://docs.aws.amazon.com/systems-manager/latest/userguide/monitor-commands.html\">Setting Up Events and Notifications</a> in the <i>Amazon EC2 Systems Manager User Guide</i>.</p>"
"documentation":"<p>Command: Receive notification when the status of a command changes. Invocation: For commands sent to multiple instances, receive notification on a per-instance basis when the status of a command changes. </p>"
"documentation":"<p>Defines the operating system the patch baseline applies to. Supported operating systems include WINDOWS, AMAZON_LINUX, UBUNTU and REDHAT_ENTERPRISE_LINUX. The Default value is WINDOWS. </p>"
"documentation":"<p>Whether this is the default baseline. Note that Systems Manager supports creating multiple default patch baselines. For example, you can create a default patch baseline for each operating system.</p>"
"documentation":"<p>Information about the state of a patch on a particular instance as it relates to the patch baseline used to patch the instance.</p>"
"documentation":"<p>A compliance severity level for all approved patches in a patch baseline. Valid compliance severity levels include the following: Unspecified, Critical, High, Medium, Low, and Informational.</p>"
"documentation":"<p>The number of days after the release date of each patch matched by the rule the patch is marked as approved in the patch baseline.</p>",
"documentation":"<p>The KMS Key ID that you want to use to encrypt a parameter when you choose the SecureString data type. If you don't specify a key ID, the system uses the default key associated with your AWS account.</p>"
"documentation":"<p>A regular expression used to validate the parameter value. For example, for String types with values restricted to numbers, you can specify the following: AllowedPattern=^\\d+$ </p>"
"documentation":"<p>The targets (either instances or tags). Instances are specified using Key=instanceids,Values=<instanceid1>,<instanceid2>. Tags are specified using Key=<tag name>,Values=<tag value>.</p>"
},
"OwnerInformation":{
"shape":"OwnerInformation",
"documentation":"<p>User-provided value that will be included in any CloudWatch events raised while running tasks for these targets in this Maintenance Window.</p>"
"documentation":"<p>The targets (either instances or tags). Instances are specified using Key=instanceids,Values=<instanceid1>,<instanceid2>. Tags are specified using Key=<tag name>,Values=<tag value>.</p>"
"documentation":"<p>The role that should be assumed when executing the task.</p>"
},
"TaskType":{
"shape":"MaintenanceWindowTaskType",
"documentation":"<p>The type of task being registered.</p>"
},
"TaskParameters":{
"shape":"MaintenanceWindowTaskParameters",
"documentation":"<p>The parameters that should be passed to the task when it is executed.</p>"
},
"Priority":{
"shape":"MaintenanceWindowTaskPriority",
"documentation":"<p>The priority of the task in the Maintenance Window, the lower the number the higher the priority. Tasks in a Maintenance Window are scheduled in priority order with tasks that have the same priority scheduled in parallel.</p>",
"documentation":"<p>Error returned if an attempt is made to delete a patch baseline that is registered for a patch group.</p>",
"exception":true
},
"ResourceLimitExceededException":{
"type":"structure",
"members":{
"Message":{"shape":"String"}
},
"documentation":"<p>Error returned when the caller has exceeded the default resource limits (e.g. too many Maintenance Windows have been created).</p>",
"documentation":"<p>(Deprecated) You can no longer specify this parameter. The system ignores it. Instead, Systems Manager automatically determines the Amazon S3 bucket region.</p>"
"documentation":"<p>The instance IDs where the command should execute. You can specify a maximum of 50 IDs. If you prefer not to list individual instance IDs, you can instead send commands to a fleet of instances using the Targets parameter, which accepts EC2 tags. For more information about how to use Targets, see <a href=\"http://docs.aws.amazon.com/systems-manager/latest/userguide/send-commands-multiple.html\">Sending Commands to a Fleet</a>.</p>"
"documentation":"<p>(Optional) An array of search criteria that targets instances using a Key,Value combination that you specify. Targets is required if you don't provide one or more instance IDs in the call. For more information about how to use Targets, see <a href=\"http://docs.aws.amazon.com/systems-manager/latest/userguide/send-commands-multiple.html\">Sending Commands to a Fleet</a>.</p>"
"documentation":"<p>The Sha256 or Sha1 hash created by the system when the document was created. </p> <note> <p>Sha1 hashes have been deprecated.</p> </note>"
},
"DocumentHashType":{
"shape":"DocumentHashType",
"documentation":"<p>Sha256 or Sha1.</p> <note> <p>Sha1 hashes have been deprecated.</p> </note>"
"documentation":"<p>(Deprecated) You can no longer specify this parameter. The system ignores it. Instead, Systems Manager automatically determines the Amazon S3 bucket region.</p>"
"documentation":"<p>(Optional) The maximum number of instances that are allowed to execute the command at the same time. You can specify a number such as 10 or a percentage such as 10%. The default value is 50. For more information about how to use MaxConcurrency, see <a href=\"http://docs.aws.amazon.com/systems-manager/latest/userguide/send-commands-velocity.html\">Using Concurrency Controls</a>.</p>"
"documentation":"<p>The maximum number of errors allowed without the command failing. When the command fails one more time beyond the value of MaxErrors, the systems stops sending the command to additional targets. You can specify a number like 10 or a percentage like 10%. The default value is 50. For more information about how to use MaxErrors, see <a href=\"http://docs.aws.amazon.com/systems-manager/latest/userguide/send-commands-maxerrors.html\">Using Error Controls</a>.</p>"
"documentation":"<p>The request as it was received by Systems Manager. Also provides the command ID which can be used future references to this request.</p>"
"documentation":"<p>If a step has begun execution, this contains the time the step started. If the step is in Pending status, this field is not populated.</p>"
"documentation":"<p>If a step has finished execution, this contains the time the execution ended. If the step has not yet concluded, this field is not populated.</p>"
"documentation":"<p>Metadata that you assign to your managed instances. Tags enable you to categorize your managed instances in different ways, for example, by purpose, owner, or environment.</p>"
"documentation":"<p>User-defined criteria for sending commands that target instances that meet the criteria. Key can be tag:<Amazon EC2 tag> or InstanceIds. For more information about how to send commands that target instances using Key,Value parameters, see <a href=\"http://docs.aws.amazon.com/systems-manager/latest/userguide/send-commands-multiple.html\">Executing a Command Using Systems Manager Run Command</a>.</p>"
"documentation":"<p>User-defined criteria that maps to Key. For example, if you specified tag:ServerRole, you could specify value:WebServer to execute a command on instances that include Amazon EC2 tags of ServerRole,WebServer. For more information about how to send commands that target instances using Key,Value parameters, see <a href=\"http://docs.aws.amazon.com/systems-manager/latest/userguide/send-commands-multiple.html\">Executing a Command Using Systems Manager Run Command</a>.</p>"
"documentation":"<p>An array of search criteria that targets instances using a Key,Value combination that you specify. <code>Targets</code> is required if you don't provide one or more instance IDs in the call.</p> <p/>"
"documentation":"<p>Inventory item type schema version has to match supported versions in the service. Check output of GetInventorySchema to see the available schema version for each type.</p>",
"documentation":"<p>The operating systems you specified is not supported, or the operation is not supported for the operating system. Valid operating systems include: Windows, AmazonLinux, RedhatEnterpriseLinux, and Ubuntu.</p>",
"documentation":"<p>The document does not support the platform type of the given instance ID(s). For example, you sent an document for a Windows instance to a Linux instance.</p>",
"documentation":"<p>The ID of the association you want to update. </p>"
},
"Parameters":{
"shape":"Parameters",
"documentation":"<p>The parameters you want to update for the association. If you create a parameter using Parameter Store, you can reference the parameter using {{ssm:parameter-name}}</p>"
},
"DocumentVersion":{
"shape":"DocumentVersion",
"documentation":"<p>The document version you want update for the association. </p>"
"documentation":"<fullname>Amazon EC2 Systems Manager</fullname> <p>Amazon EC2 Systems Manager is a collection of capabilities that helps you automate management tasks such as collecting system inventory, applying operating system (OS) patches, automating the creation of Amazon Machine Images (AMIs), and configuring operating systems (OSs) and applications at scale. Systems Manager lets you remotely and securely manage the configuration of your managed instances. A <i>managed instance</i> is any Amazon EC2 instance or on-premises machine in your hybrid environment that has been configured for Systems Manager.</p> <p>This reference is intended to be used with the <a href=\"http://docs.aws.amazon.com/systems-manager/latest/userguide/\">Amazon EC2 Systems Manager User Guide</a>.</p> <p>To get started, verify prerequisites and configure managed instances. For more information, see <a href=\"http://docs.aws.amazon.com/systems-manager/latest/userguide/systems-manager-setting-up.html\">Systems Manager Prerequisites</a>.</p>"