Associates a new node with the server. For more information about how to disassociate a node, see DisassociateNode.
On a Chef server: This command is an alternative to knife bootstrap.
Example (Chef): aws opsworks-cm associate-node --server-name MyServer --node-name MyManagedNode --engine-attributes \"Name=CHEF_ORGANIZATION,Value=default\" \"Name=CHEF_NODE_PUBLIC_KEY,Value=public-key-pem\"
On a Puppet server, this command is an alternative to the puppet cert sign command that signs a Puppet node CSR.
Example (Chef): aws opsworks-cm associate-node --server-name MyServer --node-name MyManagedNode --engine-attributes \"Name=PUPPET_NODE_CSR,Value=csr-pem\"
A node can can only be associated with servers that are in a HEALTHY state. Otherwise, an InvalidStateException is thrown. A ResourceNotFoundException is thrown when the server does not exist. A ValidationException is raised when parameters of the request are not valid. The AssociateNode API call can be integrated into Auto Scaling configurations, AWS Cloudformation templates, or the user data of a server's instance.
Creates an application-level backup of a server. While the server is in the BACKING_UP state, the server cannot be changed, and no additional backup can be created.
Backups can be created for servers in RUNNING, HEALTHY, and UNHEALTHY states. By default, you can create a maximum of 50 manual backups.
This operation is asynchronous.
A LimitExceededException is thrown when the maximum number of manual backups is reached. An InvalidStateException is thrown when the server is not in any of the following states: RUNNING, HEALTHY, or UNHEALTHY. A ResourceNotFoundException is thrown when the server is not found. A ValidationException is thrown when parameters of the request are not valid.
Creates and immedately starts a new server. The server is ready to use when it is in the HEALTHY state. By default, you can create a maximum of 10 servers.
This operation is asynchronous.
A LimitExceededException is thrown when you have created the maximum number of servers (10). A ResourceAlreadyExistsException is thrown when a server with the same name already exists in the account. A ResourceNotFoundException is thrown when you specify a backup ID that is not valid or is for a backup that does not exist. A ValidationException is thrown when parameters of the request are not valid.
If you do not specify a security group by adding the SecurityGroupIds parameter, AWS OpsWorks creates a new security group.
Chef Automate: The default security group opens the Chef server to the world on TCP port 443. If a KeyName is present, AWS OpsWorks enables SSH access. SSH is also open to the world on TCP port 22.
Puppet Enterprise: The default security group opens TCP ports 22, 443, 4433, 8140, 8142, 8143, and 8170. If a KeyName is present, AWS OpsWorks enables SSH access. SSH is also open to the world on TCP port 22.
By default, your server is accessible from any IP address. We recommend that you update your security group rules to allow access from known IP addresses and address ranges only. To edit security group rules, open Security Groups in the navigation pane of the EC2 management console.
" }, "DeleteBackup":{ "name":"DeleteBackup", "http":{ "method":"POST", "requestUri":"/" }, "input":{"shape":"DeleteBackupRequest"}, "output":{"shape":"DeleteBackupResponse"}, "errors":[ {"shape":"InvalidStateException"}, {"shape":"ResourceNotFoundException"}, {"shape":"ValidationException"} ], "documentation":"Deletes a backup. You can delete both manual and automated backups. This operation is asynchronous.
An InvalidStateException is thrown when a backup deletion is already in progress. A ResourceNotFoundException is thrown when the backup does not exist. A ValidationException is thrown when parameters of the request are not valid.
Deletes the server and the underlying AWS CloudFormation stacks (including the server's EC2 instance). When you run this command, the server state is updated to DELETING. After the server is deleted, it is no longer returned by DescribeServer requests. If the AWS CloudFormation stack cannot be deleted, the server cannot be deleted.
This operation is asynchronous.
An InvalidStateException is thrown when a server deletion is already in progress. A ResourceNotFoundException is thrown when the server does not exist. A ValidationException is raised when parameters of the request are not valid.
" }, "DescribeAccountAttributes":{ "name":"DescribeAccountAttributes", "http":{ "method":"POST", "requestUri":"/" }, "input":{"shape":"DescribeAccountAttributesRequest"}, "output":{"shape":"DescribeAccountAttributesResponse"}, "documentation":"
Describes your account attributes, and creates requests to increase limits before they are reached or exceeded.
This operation is synchronous.
" }, "DescribeBackups":{ "name":"DescribeBackups", "http":{ "method":"POST", "requestUri":"/" }, "input":{"shape":"DescribeBackupsRequest"}, "output":{"shape":"DescribeBackupsResponse"}, "errors":[ {"shape":"ValidationException"}, {"shape":"ResourceNotFoundException"}, {"shape":"InvalidNextTokenException"} ], "documentation":"Describes backups. The results are ordered by time, with newest backups first. If you do not specify a BackupId or ServerName, the command returns all backups.
This operation is synchronous.
A ResourceNotFoundException is thrown when the backup does not exist. A ValidationException is raised when parameters of the request are not valid.
Describes events for a specified server. Results are ordered by time, with newest events first.
This operation is synchronous.
A ResourceNotFoundException is thrown when the server does not exist. A ValidationException is raised when parameters of the request are not valid.
Returns the current status of an existing association or disassociation request.
A ResourceNotFoundException is thrown when no recent association or disassociation request with the specified token is found, or when the server does not exist. A ValidationException is raised when parameters of the request are not valid.
Lists all configuration management servers that are identified with your account. Only the stored results from Amazon DynamoDB are returned. AWS OpsWorks CM does not query other services.
This operation is synchronous.
A ResourceNotFoundException is thrown when the server does not exist. A ValidationException is raised when parameters of the request are not valid.
Disassociates a node from an AWS OpsWorks CM server, and removes the node from the server's managed nodes. After a node is disassociated, the node key pair is no longer valid for accessing the configuration manager's API. For more information about how to associate a node, see AssociateNode.
A node can can only be disassociated from a server that is in a HEALTHY state. Otherwise, an InvalidStateException is thrown. A ResourceNotFoundException is thrown when the server does not exist. A ValidationException is raised when parameters of the request are not valid.
Exports a specified server engine attribute as a base64-encoded string. For example, you can export user data that you can use in EC2 to associate nodes with a server.
This operation is synchronous.
A ValidationException is raised when parameters of the request are not valid. A ResourceNotFoundException is thrown when the server does not exist. An InvalidStateException is thrown when the server is in any of the following states: CREATING, TERMINATED, FAILED or DELETING.
Restores a backup to a server that is in a CONNECTION_LOST, HEALTHY, RUNNING, UNHEALTHY, or TERMINATED state. When you run RestoreServer, the server's EC2 instance is deleted, and a new EC2 instance is configured. RestoreServer maintains the existing server endpoint, so configuration management of the server's client devices (nodes) should continue to work.
This operation is asynchronous.
An InvalidStateException is thrown when the server is not in a valid state. A ResourceNotFoundException is thrown when the server does not exist. A ValidationException is raised when parameters of the request are not valid.
Manually starts server maintenance. This command can be useful if an earlier maintenance attempt failed, and the underlying cause of maintenance failure has been resolved. The server is in an UNDER_MAINTENANCE state while maintenance is in progress.
Maintenance can only be started on servers in HEALTHY and UNHEALTHY states. Otherwise, an InvalidStateException is thrown. A ResourceNotFoundException is thrown when the server does not exist. A ValidationException is raised when parameters of the request are not valid.
Updates settings for a server.
This operation is synchronous.
" }, "UpdateServerEngineAttributes":{ "name":"UpdateServerEngineAttributes", "http":{ "method":"POST", "requestUri":"/" }, "input":{"shape":"UpdateServerEngineAttributesRequest"}, "output":{"shape":"UpdateServerEngineAttributesResponse"}, "errors":[ {"shape":"InvalidStateException"}, {"shape":"ResourceNotFoundException"}, {"shape":"ValidationException"} ], "documentation":" Updates engine-specific attributes on a specified server. The server enters the MODIFYING state when this operation is in progress. Only one update can occur at a time. You can use this command to reset a Chef server's private key (CHEF_PIVOTAL_KEY), a Chef server's admin password (CHEF_DELIVERY_ADMIN_PASSWORD), or a Puppet server's admin password (PUPPET_ADMIN_PASSWORD).
This operation is asynchronous.
This operation can only be called for servers in HEALTHY or UNHEALTHY states. Otherwise, an InvalidStateException is raised. A ResourceNotFoundException is thrown when the server does not exist. A ValidationException is raised when parameters of the request are not valid.
The attribute name. The following are supported attribute names.
ServerLimit: The number of current servers/maximum number of servers allowed. By default, you can have a maximum of 10 servers.
ManualBackupLimit: The number of current manual backups/maximum number of backups allowed. By default, you can have a maximum of 50 manual backups saved.
The maximum allowed value.
" }, "Used":{ "shape":"Integer", "documentation":"The current usage, such as the current number of servers that are associated with the account.
" } }, "documentation":"Stores account attributes.
" }, "AccountAttributes":{ "type":"list", "member":{"shape":"AccountAttribute"}, "documentation":"A list of individual account attributes.
" }, "AssociateNodeRequest":{ "type":"structure", "required":[ "ServerName", "NodeName", "EngineAttributes" ], "members":{ "ServerName":{ "shape":"ServerName", "documentation":"The name of the server with which to associate the node.
" }, "NodeName":{ "shape":"NodeName", "documentation":"The name of the node.
" }, "EngineAttributes":{ "shape":"EngineAttributes", "documentation":"Engine attributes used for associating the node.
Attributes accepted in a AssociateNode request for Chef
CHEF_ORGANIZATION: The Chef organization with which the node is associated. By default only one organization named default can exist.
CHEF_NODE_PUBLIC_KEY: A PEM-formatted public key. This key is required for the chef-client agent to access the Chef API.
Attributes accepted in a AssociateNode request for Puppet
PUPPET_NODE_CSR: A PEM-formatted certificate-signing request (CSR) that is created by the node.
Contains a token which can be passed to the DescribeNodeAssociationStatus API call to get the status of the association request.
The ARN of the backup.
" }, "BackupId":{ "shape":"BackupId", "documentation":" The generated ID of the backup. Example: myServerName-yyyyMMddHHmmssSSS
The backup type. Valid values are automated or manual.
The time stamp when the backup was created in the database. Example: 2016-07-29T13:38:47.520Z
A user-provided description for a manual backup. This field is empty for automated backups.
" }, "Engine":{ "shape":"String", "documentation":"The engine type that is obtained from the server when the backup is created.
" }, "EngineModel":{ "shape":"String", "documentation":"The engine model that is obtained from the server when the backup is created.
" }, "EngineVersion":{ "shape":"String", "documentation":"The engine version that is obtained from the server when the backup is created.
" }, "InstanceProfileArn":{ "shape":"String", "documentation":"The EC2 instance profile ARN that is obtained from the server when the backup is created. Because this value is stored, you are not required to provide the InstanceProfileArn again if you restore a backup.
" }, "InstanceType":{ "shape":"String", "documentation":"The instance type that is obtained from the server when the backup is created.
" }, "KeyPair":{ "shape":"String", "documentation":"The key pair that is obtained from the server when the backup is created.
" }, "PreferredBackupWindow":{ "shape":"TimeWindowDefinition", "documentation":"The preferred backup period that is obtained from the server when the backup is created.
" }, "PreferredMaintenanceWindow":{ "shape":"TimeWindowDefinition", "documentation":"The preferred maintenance period that is obtained from the server when the backup is created.
" }, "S3DataSize":{ "shape":"Integer", "documentation":"This field is deprecated and is no longer used.
", "deprecated":true }, "S3DataUrl":{ "shape":"String", "documentation":"This field is deprecated and is no longer used.
", "deprecated":true }, "S3LogUrl":{ "shape":"String", "documentation":"The Amazon S3 URL of the backup's log file.
" }, "SecurityGroupIds":{ "shape":"Strings", "documentation":"The security group IDs that are obtained from the server when the backup is created.
" }, "ServerName":{ "shape":"ServerName", "documentation":"The name of the server from which the backup was made.
" }, "ServiceRoleArn":{ "shape":"String", "documentation":"The service role ARN that is obtained from the server when the backup is created.
" }, "Status":{ "shape":"BackupStatus", "documentation":"The status of a backup while in progress.
" }, "StatusDescription":{ "shape":"String", "documentation":"An informational message about backup status.
" }, "SubnetIds":{ "shape":"Strings", "documentation":"The subnet IDs that are obtained from the server when the backup is created.
" }, "ToolsVersion":{ "shape":"String", "documentation":"The version of AWS OpsWorks CM-specific tools that is obtained from the server when the backup is created.
" }, "UserArn":{ "shape":"String", "documentation":"The IAM user ARN of the requester for manual backups. This field is empty for automated backups.
" } }, "documentation":"Describes a single backup.
" }, "BackupId":{ "type":"string", "max":79 }, "BackupRetentionCountDefinition":{ "type":"integer", "min":1 }, "BackupStatus":{ "type":"string", "enum":[ "IN_PROGRESS", "OK", "FAILED", "DELETING" ] }, "BackupType":{ "type":"string", "enum":[ "AUTOMATED", "MANUAL" ] }, "Backups":{ "type":"list", "member":{"shape":"Backup"} }, "Boolean":{"type":"boolean"}, "CreateBackupRequest":{ "type":"structure", "required":["ServerName"], "members":{ "ServerName":{ "shape":"ServerName", "documentation":"The name of the server that you want to back up.
" }, "Description":{ "shape":"String", "documentation":"A user-defined description of the backup.
" } } }, "CreateBackupResponse":{ "type":"structure", "members":{ "Backup":{ "shape":"Backup", "documentation":"Backup created by request.
" } } }, "CreateServerRequest":{ "type":"structure", "required":[ "ServerName", "InstanceProfileArn", "InstanceType", "ServiceRoleArn" ], "members":{ "AssociatePublicIpAddress":{ "shape":"Boolean", "documentation":" Associate a public IP address with a server that you are launching. Valid values are true or false. The default value is true.
Enable or disable scheduled backups. Valid values are true or false. The default value is true.
The configuration management engine to use. Valid values include Chef and Puppet.
The engine model of the server. Valid values in this release include Monolithic for Puppet and Single for Chef.
The major release version of the engine that you want to use. For a Chef server, the valid value for EngineVersion is currently 12. For a Puppet server, the valid value is 2017.
Optional engine attributes on a specified server.
Attributes accepted in a Chef createServer request:
CHEF_PIVOTAL_KEY: A base64-encoded RSA private key that is not stored by AWS OpsWorks for Chef Automate. This private key is required to access the Chef API. When no CHEF_PIVOTAL_KEY is set, one is generated and returned in the response.
CHEF_DELIVERY_ADMIN_PASSWORD: The password for the administrative user in the Chef Automate GUI. The password length is a minimum of eight characters, and a maximum of 32. The password can contain letters, numbers, and special characters (!/@#$%^&+=_). The password must contain at least one lower case letter, one upper case letter, one number, and one special character. When no CHEF_DELIVERY_ADMIN_PASSWORD is set, one is generated and returned in the response.
Attributes accepted in a Puppet createServer request:
PUPPET_ADMIN_PASSWORD: To work with the Puppet Enterprise console, a password must use ASCII characters.
The number of automated backups that you want to keep. Whenever a new backup is created, AWS OpsWorks CM deletes the oldest backups if this number is exceeded. The default value is 1.
The name of the server. The server name must be unique within your AWS account, within each region. Server names must start with a letter; then letters, numbers, or hyphens (-) are allowed, up to a maximum of 40 characters.
" }, "InstanceProfileArn":{ "shape":"InstanceProfileArn", "documentation":"The ARN of the instance profile that your Amazon EC2 instances use. Although the AWS OpsWorks console typically creates the instance profile for you, if you are using API commands instead, run the service-role-creation.yaml AWS CloudFormation template, located at https://s3.amazonaws.com/opsworks-cm-us-east-1-prod-default-assets/misc/opsworks-cm-roles.yaml. This template creates a CloudFormation stack that includes the instance profile you need.
" }, "InstanceType":{ "shape":"String", "documentation":" The Amazon EC2 instance type to use. For example, m4.large. Recommended instance types include t2.medium and greater, m4.*, or c4.xlarge and greater.
The Amazon EC2 key pair to set for the instance. This parameter is optional; if desired, you may specify this parameter to connect to your instances by using SSH.
" }, "PreferredMaintenanceWindow":{ "shape":"TimeWindowDefinition", "documentation":" The start time for a one-hour period each week during which AWS OpsWorks CM performs maintenance on the instance. Valid values must be specified in the following format: DDD:HH:MM. The specified time is in coordinated universal time (UTC). The default value is a random one-hour period on Tuesday, Wednesday, or Friday. See TimeWindowDefinition for more information.
Example: Mon:08:00, which represents a start time of every Monday at 08:00 UTC. (8:00 a.m.)
The start time for a one-hour period during which AWS OpsWorks CM backs up application-level data on your server if automated backups are enabled. Valid values must be specified in one of the following formats:
HH:MM for daily backups
DDD:HH:MM for weekly backups
The specified time is in coordinated universal time (UTC). The default value is a random, daily start time.
Example: 08:00, which represents a daily start time of 08:00 UTC.
Example: Mon:08:00, which represents a start time of every Monday at 08:00 UTC. (8:00 a.m.)
A list of security group IDs to attach to the Amazon EC2 instance. If you add this parameter, the specified security groups must be within the VPC that is specified by SubnetIds.
If you do not specify this parameter, AWS OpsWorks CM creates one new security group that uses TCP ports 22 and 443, open to 0.0.0.0/0 (everyone).
" }, "ServiceRoleArn":{ "shape":"ServiceRoleArn", "documentation":"The service role that the AWS OpsWorks CM service backend uses to work with your account. Although the AWS OpsWorks management console typically creates the service role for you, if you are using the AWS CLI or API commands, run the service-role-creation.yaml AWS CloudFormation template, located at https://s3.amazonaws.com/opsworks-cm-us-east-1-prod-default-assets/misc/opsworks-cm-roles.yaml. This template creates a CloudFormation stack that includes the service role and instance profile that you need.
" }, "SubnetIds":{ "shape":"Strings", "documentation":"The IDs of subnets in which to launch the server EC2 instance.
Amazon EC2-Classic customers: This field is required. All servers must run within a VPC. The VPC must have \"Auto Assign Public IP\" enabled.
EC2-VPC customers: This field is optional. If you do not specify subnet IDs, your EC2 instances are created in a default subnet that is selected by Amazon EC2. If you specify subnet IDs, the VPC must have \"Auto Assign Public IP\" enabled.
For more information about supported Amazon EC2 platforms, see Supported Platforms.
" }, "BackupId":{ "shape":"BackupId", "documentation":"If you specify this field, AWS OpsWorks CM creates the server by using the backup represented by BackupId.
" } } }, "CreateServerResponse":{ "type":"structure", "members":{ "Server":{ "shape":"Server", "documentation":"The server that is created by the request.
" } } }, "DeleteBackupRequest":{ "type":"structure", "required":["BackupId"], "members":{ "BackupId":{ "shape":"BackupId", "documentation":"The ID of the backup to delete. Run the DescribeBackups command to get a list of backup IDs. Backup IDs are in the format ServerName-yyyyMMddHHmmssSSS.
The ID of the server to delete.
" } } }, "DeleteServerResponse":{ "type":"structure", "members":{ } }, "DescribeAccountAttributesRequest":{ "type":"structure", "members":{ } }, "DescribeAccountAttributesResponse":{ "type":"structure", "members":{ "Attributes":{ "shape":"AccountAttributes", "documentation":"The attributes that are currently set for the account.
" } } }, "DescribeBackupsRequest":{ "type":"structure", "members":{ "BackupId":{ "shape":"BackupId", "documentation":"Describes a single backup.
" }, "ServerName":{ "shape":"ServerName", "documentation":"Returns backups for the server with the specified ServerName.
" }, "NextToken":{ "shape":"NextToken", "documentation":"This is not currently implemented for DescribeBackups requests.
This is not currently implemented for DescribeBackups requests.
Contains the response to a DescribeBackups request.
This is not currently implemented for DescribeBackups requests.
The name of the server for which you want to view events.
" }, "NextToken":{ "shape":"NextToken", "documentation":"NextToken is a string that is returned in some command responses. It indicates that not all entries have been returned, and that you must run at least one more request to get remaining items. To get remaining results, call DescribeEvents again, and assign the token from the previous results as the value of the nextToken parameter. If there are no more results, the response object's nextToken parameter value is null. Setting a nextToken value that was not returned in your previous results causes an InvalidNextTokenException to occur.
To receive a paginated response, use this parameter to specify the maximum number of results to be returned with a single call. If the number of available results exceeds this maximum, the response includes a NextToken value that you can assign to the NextToken request parameter to get the next set of results.
Contains the response to a DescribeEvents request.
NextToken is a string that is returned in some command responses. It indicates that not all entries have been returned, and that you must run at least one more request to get remaining items. To get remaining results, call DescribeEvents again, and assign the token from the previous results as the value of the nextToken parameter. If there are no more results, the response object's nextToken parameter value is null. Setting a nextToken value that was not returned in your previous results causes an InvalidNextTokenException to occur.
The token returned in either the AssociateNodeResponse or the DisassociateNodeResponse.
" }, "ServerName":{ "shape":"ServerName", "documentation":"The name of the server from which to disassociate the node.
" } } }, "DescribeNodeAssociationStatusResponse":{ "type":"structure", "members":{ "NodeAssociationStatus":{ "shape":"NodeAssociationStatus", "documentation":"The status of the association or disassociation request.
Possible values:
SUCCESS: The association or disassociation succeeded.
FAILED: The association or disassociation failed.
IN_PROGRESS: The association or disassociation is still in progress.
Attributes specific to the node association. In Puppet, the attibute PUPPET_NODE_CERT contains the signed certificate (the result of the CSR).
" } } }, "DescribeServersRequest":{ "type":"structure", "members":{ "ServerName":{ "shape":"ServerName", "documentation":"Describes the server with the specified ServerName.
" }, "NextToken":{ "shape":"NextToken", "documentation":"This is not currently implemented for DescribeServers requests.
This is not currently implemented for DescribeServers requests.
Contains the response to a DescribeServers request.
For Puppet Server: DescribeServersResponse$Servers$EngineAttributes contains PUPPET_API_CA_CERT. This is the PEM-encoded CA certificate that is used by the Puppet API over TCP port number 8140. The CA certificate is also used to sign node certificates.
This is not currently implemented for DescribeServers requests.
The name of the server from which to disassociate the node.
" }, "NodeName":{ "shape":"NodeName", "documentation":"The name of the client node.
" }, "EngineAttributes":{ "shape":"EngineAttributes", "documentation":"Engine attributes that are used for disassociating the node. No attributes are required for Puppet.
Attributes required in a DisassociateNode request for Chef
CHEF_ORGANIZATION: The Chef organization with which the node was associated. By default only one organization named default can exist.
Contains a token which can be passed to the DescribeNodeAssociationStatus API call to get the status of the disassociation request.
The name of the engine attribute.
" }, "Value":{ "shape":"EngineAttributeValue", "documentation":"The value of the engine attribute.
" } }, "documentation":"A name and value pair that is specific to the engine of the server.
" }, "EngineAttributeName":{"type":"string"}, "EngineAttributeValue":{ "type":"string", "sensitive":true }, "EngineAttributes":{ "type":"list", "member":{"shape":"EngineAttribute"} }, "ExportServerEngineAttributeRequest":{ "type":"structure", "required":[ "ExportAttributeName", "ServerName" ], "members":{ "ExportAttributeName":{ "shape":"String", "documentation":"The name of the export attribute. Currently supported export attribute is \"Userdata\" which exports a userdata script filled out with parameters provided in the InputAttributes list.
The name of the Server to which the attribute is being exported from
" }, "InputAttributes":{ "shape":"EngineAttributes", "documentation":"The list of engine attributes. The list type is EngineAttribute. EngineAttribute is a pair of attribute name and value. For ExportAttributeName \"Userdata\", currently supported input attribute names are: - \"RunList\": For Chef, an ordered list of roles and/or recipes that are run in the exact order. For Puppet, this parameter is ignored. - \"OrganizationName\": For Chef, an organization name. AWS OpsWorks for Chef Server always creates the organization \"default\". For Puppet, this parameter is ignored. - \"NodeEnvironment\": For Chef, a node environment (eg. development, staging, onebox). For Puppet, this parameter is ignored. - \"NodeClientVersion\": For Chef, version of Chef Engine (3 numbers separated by dots, eg. \"13.8.5\"). If empty, it uses the latest one. For Puppet, this parameter is ignored.
The requested engine attribute pair with attribute name and value.
" }, "ServerName":{ "shape":"ServerName", "documentation":"The requested ServerName.
" } } }, "InstanceProfileArn":{ "type":"string", "pattern":"arn:aws:iam::[0-9]{12}:instance-profile/.*" }, "Integer":{"type":"integer"}, "InvalidNextTokenException":{ "type":"structure", "members":{ "Message":{ "shape":"String", "documentation":"Error or informational message that can contain more detail about a nextToken failure.
" } }, "documentation":"This occurs when the provided nextToken is not valid.
", "exception":true }, "InvalidStateException":{ "type":"structure", "members":{ "Message":{ "shape":"String", "documentation":"Error or informational message that provides more detail if a resource is in a state that is not valid for performing a specified action.
" } }, "documentation":"The resource is in a state that does not allow you to perform a specified action.
", "exception":true }, "KeyPair":{"type":"string"}, "LimitExceededException":{ "type":"structure", "members":{ "Message":{ "shape":"String", "documentation":"Error or informational message that the maximum allowed number of servers or backups has been exceeded.
" } }, "documentation":"The limit of servers or backups has been reached.
", "exception":true }, "MaintenanceStatus":{ "type":"string", "enum":[ "SUCCESS", "FAILED" ] }, "MaxResults":{ "type":"integer", "min":1 }, "NextToken":{"type":"string"}, "NodeAssociationStatus":{ "type":"string", "documentation":"The status of the association or disassociation request.
Possible values:
SUCCESS: The association or disassociation succeeded.
FAILED: The association or disassociation failed.
IN_PROGRESS: The association or disassociation is still in progress.
The node name that is used by chef-client or puppet-agentfor a new node. We recommend to use a unique FQDN as hostname. For more information, see the Chef or Puppet documentation.
Error or informational message in response to a CreateServer request that a resource cannot be created because it already exists.
" } }, "documentation":"The requested resource cannot be created because it already exists.
", "exception":true }, "ResourceNotFoundException":{ "type":"structure", "members":{ "Message":{ "shape":"String", "documentation":"Error or informational message that can contain more detail about problems locating or accessing a resource.
" } }, "documentation":"The requested resource does not exist, or access was denied.
", "exception":true }, "RestoreServerRequest":{ "type":"structure", "required":[ "BackupId", "ServerName" ], "members":{ "BackupId":{ "shape":"BackupId", "documentation":"The ID of the backup that you want to use to restore a server.
" }, "ServerName":{ "shape":"ServerName", "documentation":"The name of the server that you want to restore.
" }, "InstanceType":{ "shape":"String", "documentation":" The type of the instance to create. Valid values must be specified in the following format: ^([cm][34]|t2).* For example, m4.large. Valid values are t2.medium, m4.large, and m4.2xlarge. If you do not specify this parameter, RestoreServer uses the instance type from the specified backup.
The name of the key pair to set on the new EC2 instance. This can be helpful if the administrator no longer has the SSH key.
" } } }, "RestoreServerResponse":{ "type":"structure", "members":{ } }, "Server":{ "type":"structure", "members":{ "AssociatePublicIpAddress":{ "shape":"Boolean", "documentation":"Associate a public IP address with a server that you are launching.
" }, "BackupRetentionCount":{ "shape":"Integer", "documentation":"The number of automated backups to keep.
" }, "ServerName":{ "shape":"String", "documentation":"The name of the server.
" }, "CreatedAt":{ "shape":"Timestamp", "documentation":"Time stamp of server creation. Example 2016-07-29T13:38:47.520Z
The ARN of the CloudFormation stack that was used to create the server.
" }, "DisableAutomatedBackup":{ "shape":"Boolean", "documentation":"Disables automated backups. The number of stored backups is dependent on the value of PreferredBackupCount.
" }, "Endpoint":{ "shape":"String", "documentation":" A DNS name that can be used to access the engine. Example: myserver-asdfghjkl.us-east-1.opsworks.io
The engine type of the server. Valid values in this release include Chef and Puppet.
The engine model of the server. Valid values in this release include Monolithic for Puppet and Single for Chef.
The response of a createServer() request returns the master credential to access the server in EngineAttributes. These credentials are not stored by AWS OpsWorks CM; they are returned only as part of the result of createServer().
Attributes returned in a createServer response for Chef
CHEF_PIVOTAL_KEY: A base64-encoded RSA private key that is generated by AWS OpsWorks for Chef Automate. This private key is required to access the Chef API.
CHEF_STARTER_KIT: A base64-encoded ZIP file. The ZIP file contains a Chef starter kit, which includes a README, a configuration file, and the required RSA private key. Save this file, unzip it, and then change to the directory where you've unzipped the file contents. From this directory, you can run Knife commands.
Attributes returned in a createServer response for Puppet
PUPPET_STARTER_KIT: A base64-encoded ZIP file. The ZIP file contains a Puppet starter kit, including a README and a required private key. Save this file, unzip it, and then change to the directory where you've unzipped the file contents.
PUPPET_ADMIN_PASSWORD: An administrator password that you can use to sign in to the Puppet Enterprise console after the server is online.
The engine version of the server. For a Chef server, the valid value for EngineVersion is currently 12. For a Puppet server, the valid value is 2017.
The instance profile ARN of the server.
" }, "InstanceType":{ "shape":"String", "documentation":"The instance type for the server, as specified in the CloudFormation stack. This might not be the same instance type that is shown in the EC2 console.
" }, "KeyPair":{ "shape":"String", "documentation":"The key pair associated with the server.
" }, "MaintenanceStatus":{ "shape":"MaintenanceStatus", "documentation":"The status of the most recent server maintenance run. Shows SUCCESS or FAILED.
The preferred maintenance period specified for the server.
" }, "PreferredBackupWindow":{ "shape":"TimeWindowDefinition", "documentation":"The preferred backup period specified for the server.
" }, "SecurityGroupIds":{ "shape":"Strings", "documentation":"The security group IDs for the server, as specified in the CloudFormation stack. These might not be the same security groups that are shown in the EC2 console.
" }, "ServiceRoleArn":{ "shape":"String", "documentation":"The service role ARN used to create the server.
" }, "Status":{ "shape":"ServerStatus", "documentation":"The server's status. This field displays the states of actions in progress, such as creating, running, or backing up the server, as well as the server's health state.
" }, "StatusReason":{ "shape":"String", "documentation":"Depending on the server status, this field has either a human-readable message (such as a create or backup error), or an escaped block of JSON (used for health check results).
" }, "SubnetIds":{ "shape":"Strings", "documentation":"The subnet IDs specified in a CreateServer request.
" }, "ServerArn":{ "shape":"String", "documentation":"The ARN of the server.
" } }, "documentation":"Describes a configuration management server.
" }, "ServerEvent":{ "type":"structure", "members":{ "CreatedAt":{ "shape":"Timestamp", "documentation":"The time when the event occurred.
" }, "ServerName":{ "shape":"String", "documentation":"The name of the server on or for which the event occurred.
" }, "Message":{ "shape":"String", "documentation":"A human-readable informational or status message.
" }, "LogUrl":{ "shape":"String", "documentation":"The Amazon S3 URL of the event's log file.
" } }, "documentation":"An event that is related to the server, such as the start of maintenance or backup.
" }, "ServerEvents":{ "type":"list", "member":{"shape":"ServerEvent"} }, "ServerName":{ "type":"string", "max":40, "min":1, "pattern":"[a-zA-Z][a-zA-Z0-9\\-]*" }, "ServerStatus":{ "type":"string", "enum":[ "BACKING_UP", "CONNECTION_LOST", "CREATING", "DELETING", "MODIFYING", "FAILED", "HEALTHY", "RUNNING", "RESTORING", "SETUP", "UNDER_MAINTENANCE", "UNHEALTHY", "TERMINATED" ] }, "Servers":{ "type":"list", "member":{"shape":"Server"} }, "ServiceRoleArn":{ "type":"string", "pattern":"arn:aws:iam::[0-9]{12}:role/.*" }, "StartMaintenanceRequest":{ "type":"structure", "required":["ServerName"], "members":{ "ServerName":{ "shape":"ServerName", "documentation":"The name of the server on which to run maintenance.
" }, "EngineAttributes":{ "shape":"EngineAttributes", "documentation":"Engine attributes that are specific to the server on which you want to run maintenance.
" } } }, "StartMaintenanceResponse":{ "type":"structure", "members":{ "Server":{ "shape":"Server", "documentation":"Contains the response to a StartMaintenance request.
DDD:HH:MM (weekly start time) or HH:MM (daily start time).
Time windows always use coordinated universal time (UTC). Valid strings for day of week (DDD) are: Mon, Tue, Wed, Thr, Fri, Sat, or Sun.
The name of the server to update.
" }, "AttributeName":{ "shape":"AttributeName", "documentation":"The name of the engine attribute to update.
" }, "AttributeValue":{ "shape":"AttributeValue", "documentation":"The value to set for the attribute.
" } } }, "UpdateServerEngineAttributesResponse":{ "type":"structure", "members":{ "Server":{ "shape":"Server", "documentation":"Contains the response to an UpdateServerEngineAttributes request.
Setting DisableAutomatedBackup to true disables automated or scheduled backups. Automated backups are enabled by default.
Sets the number of automated backups that you want to keep.
" }, "ServerName":{ "shape":"ServerName", "documentation":"The name of the server to update.
" }, "PreferredMaintenanceWindow":{"shape":"TimeWindowDefinition"}, "PreferredBackupWindow":{"shape":"TimeWindowDefinition"} } }, "UpdateServerResponse":{ "type":"structure", "members":{ "Server":{ "shape":"Server", "documentation":"Contains the response to a UpdateServer request.
Error or informational message that can contain more detail about a validation failure.
" } }, "documentation":"One or more of the provided request parameters are not valid.
", "exception":true } }, "documentation":"AWS OpsWorks for configuration management (CM) is a service that runs and manages configuration management servers. You can use AWS OpsWorks CM to create and manage AWS OpsWorks for Chef Automate and AWS OpsWorks for Puppet Enterprise servers, and add or remove nodes for the servers to manage.
Glossary of terms
Server: A configuration management server that can be highly-available. The configuration management server runs on an Amazon Elastic Compute Cloud (EC2) instance, and may use various other AWS services, such as Amazon Relational Database Service (RDS) and Elastic Load Balancing. A server is a generic abstraction over the configuration manager that you want to use, much like Amazon RDS. In AWS OpsWorks CM, you do not start or stop servers. After you create servers, they continue to run until they are deleted.
Engine: The engine is the specific configuration manager that you want to use. Valid values in this release include Chef and Puppet.
Backup: This is an application-level backup of the data that the configuration manager stores. AWS OpsWorks CM creates an S3 bucket for backups when you launch the first server. A backup maintains a snapshot of a server's configuration-related attributes at the time the backup starts.
Events: Events are always related to a server. Events are written during server creation, when health checks run, when backups are created, when system maintenance is performed, etc. When you delete a server, the server's events are also deleted.
Account attributes: Every account has attributes that are assigned in the AWS OpsWorks CM database. These attributes store information about configuration limits (servers, backups, etc.) and your customer account.
Endpoints
AWS OpsWorks CM supports the following endpoints, all HTTPS. You must connect to one of the following endpoints. Your servers can only be accessed or managed within the endpoint in which they are created.
opsworks-cm.us-east-1.amazonaws.com
opsworks-cm.us-east-2.amazonaws.com
opsworks-cm.us-west-1.amazonaws.com
opsworks-cm.us-west-2.amazonaws.com
opsworks-cm.ap-northeast-1.amazonaws.com
opsworks-cm.ap-southeast-1.amazonaws.com
opsworks-cm.ap-southeast-2.amazonaws.com
opsworks-cm.eu-central-1.amazonaws.com
opsworks-cm.eu-west-1.amazonaws.com
Throttling limits
All API operations allow for five requests per second with a burst of 10 requests per second.
" }