From ab919c6c43113bbc9cdbeb518a08d4b0d78141f8 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 30 Apr 2026 21:45:09 +0000 Subject: [PATCH 1/2] build(deps): bump aws from 2.34.39 to 2.34.40 Bumps [aws](https://github.com/aws/aws-cli) from 2.34.39 to 2.34.40. - [Release notes](https://github.com/aws/aws-cli/releases) - [Commits](https://github.com/aws/aws-cli/compare/2.34.39...66c55fe46924fdbed72ee7e17f2396995a741f12) --- updated-dependencies: - dependency-name: aws dependency-version: 66c55fe46924fdbed72ee7e17f2396995a741f12 dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- package.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/package.json b/package.json index 844c87b39..17df24fc1 100644 --- a/package.json +++ b/package.json @@ -1,5 +1,5 @@ { "dependencies": { - "aws": "https://github.com/aws/aws-cli#2.34.39" + "aws": "https://github.com/aws/aws-cli#2.34.40" } } \ No newline at end of file From daa2093e459a217bfc85ad18bf29fa1b9db07bc0 Mon Sep 17 00:00:00 2001 From: rsteube-bot Date: Thu, 30 Apr 2026 21:46:36 +0000 Subject: [PATCH 2/2] updated botocore --- .../aws.bedrock-agentcore-control.yaml | 6 ++ .../cmd/botocore/aws.bedrock-agentcore.yaml | 10 +++ .../cmd/botocore/aws.datazone.yaml | 64 +++++++++++++++++++ cmd/carapace-aws/cmd/botocore/aws.kafka.yaml | 3 +- .../botocore/aws.payment-cryptography.yaml | 59 +++++++++++++++++ .../botocore/aws.route53globalresolver.yaml | 3 + .../cmd/botocore/aws.sagemaker.yaml | 6 ++ 7 files changed, 150 insertions(+), 1 deletion(-) diff --git a/cmd/carapace-aws/cmd/botocore/aws.bedrock-agentcore-control.yaml b/cmd/carapace-aws/cmd/botocore/aws.bedrock-agentcore-control.yaml index cf0eb5944..50de6e215 100755 --- a/cmd/carapace-aws/cmd/botocore/aws.bedrock-agentcore-control.yaml +++ b/cmd/carapace-aws/cmd/botocore/aws.bedrock-agentcore-control.yaml @@ -228,6 +228,9 @@ commands: --encryption-key-arn=: The Amazon Resource Name (ARN) of the KMS key used to encrypt the memory data. --event-expiry-duration=!: The duration after which memory events expire. --generate-cli-skeleton: Prints a JSON skeleton to standard output without sending an API request. + --indexed-keys=: + description: Metadata keys to index for filtering. + nargs: -1 --memory-execution-role-arn=: The Amazon Resource Name (ARN) of the IAM role that provides permissions for the memory to access Amazon Web Services services. --memory-strategies=: description: The memory strategies to use for this memory. @@ -1281,6 +1284,9 @@ commands: - name: update-memory description: Update an Amazon Bedrock AgentCore Memory resource memory. flags: + --add-indexed-keys=: + description: Additional metadata keys to index. + nargs: -1 --cli-input-json=: Read arguments from the JSON string provided. --cli-input-yaml=: Read arguments from the YAML string provided. --client-token=: A client token is used for keeping track of idempotent requests. diff --git a/cmd/carapace-aws/cmd/botocore/aws.bedrock-agentcore.yaml b/cmd/carapace-aws/cmd/botocore/aws.bedrock-agentcore.yaml index 979b37d2e..ab06e405e 100755 --- a/cmd/carapace-aws/cmd/botocore/aws.bedrock-agentcore.yaml +++ b/cmd/carapace-aws/cmd/botocore/aws.bedrock-agentcore.yaml @@ -201,6 +201,9 @@ commands: - name: get-resource-oauth2-token description: Returns the OAuth 2.0 token of the provided resource. flags: + --audiences=: + description: The audiences to include in the token request. + nargs: -1 --cli-input-json=: Read arguments from the JSON string provided. --cli-input-yaml=: Read arguments from the YAML string provided. --custom-parameters=: A map of custom parameters to include in the authorization request to the resource credential provider. @@ -211,6 +214,9 @@ commands: --oauth2-flow=!: The type of flow to be performed. --resource-credential-provider-name=!: The name of the resource's credential provider. --resource-oauth2-return-url=: The callback URL to redirect to after the OAuth 2.0 token retrieval is complete. + --resources=: + description: The resources to include in the token request. + nargs: -1 --scopes=!: description: The OAuth scopes being requested. nargs: -1 @@ -221,6 +227,7 @@ commands: oauth2-flow: - USER_FEDERATION - M2M + - ON_BEHALF_OF_TOKEN_EXCHANGE - name: get-workload-access-token description: Obtains a workload access token for agentic workloads not acting on behalf of a user. flags: @@ -405,6 +412,9 @@ commands: --max-results=: The maximum number of results to return in a single call. --memory-id=!: The identifier of the AgentCore Memory resource for which to list memory records. --memory-strategy-id=: The memory strategy identifier to filter memory records by. + --metadata-filters=: + description: A list of metadata filter expressions to scope the returned memory records. + nargs: -1 --namespace-path=: Use namespacePath for hierarchical retrievals. --namespace=: The namespace prefix to filter memory records by. --next-token=: The token for the next set of results. diff --git a/cmd/carapace-aws/cmd/botocore/aws.datazone.yaml b/cmd/carapace-aws/cmd/botocore/aws.datazone.yaml index 5193a2df6..dd1d3e553 100755 --- a/cmd/carapace-aws/cmd/botocore/aws.datazone.yaml +++ b/cmd/carapace-aws/cmd/botocore/aws.datazone.yaml @@ -1166,6 +1166,14 @@ commands: - BUSINESS_DESCRIPTIONS - BUSINESS_NAMES - BUSINESS_GLOSSARY_ASSOCIATIONS + - name: get-notebook-run + description: Gets the details of a notebook run in an Amazon DataZone domain. + flags: + --cli-input-json=: Read arguments from the JSON string provided. + --cli-input-yaml=: Read arguments from the YAML string provided. + --domain-identifier=!: The identifier of the Amazon DataZone domain in which the notebook run exists. + --generate-cli-skeleton: Prints a JSON skeleton to standard output without sending an API request. + --identifier=!: The identifier of the notebook run. - name: get-project description: Gets a project in Amazon DataZone. flags: @@ -1716,6 +1724,36 @@ commands: - BUSINESS_DESCRIPTIONS - BUSINESS_NAMES - BUSINESS_GLOSSARY_ASSOCIATIONS + - name: list-notebook-runs + description: Lists notebook runs in an Amazon DataZone domain. + flags: + --cli-input-json=: Read arguments from the JSON string provided. + --cli-input-yaml=: Read arguments from the YAML string provided. + --domain-identifier=!: The identifier of the Amazon DataZone domain in which to list notebook runs. + --generate-cli-skeleton: Prints a JSON skeleton to standard output without sending an API request. + --max-items=: The total number of items to return in the command's output. + --max-results=: The maximum number of notebook runs to return in a single call. + --next-token=: When the number of notebook runs is greater than the default value for the `MaxResults` parameter, or if you explicitly specify a value for `MaxResults` that is less than the number of notebook runs, the response includes a pagination token named `NextToken`. + --notebook-identifier=: The identifier of the notebook to filter runs by. + --owning-project-identifier=!: The identifier of the project that owns the notebook runs. + --page-size=: The size of each page to get in the AWS service call. + --schedule-identifier=: The identifier of the schedule to filter notebook runs by. + --sort-order=: The sort order for the results. + --starting-token=: A token to specify where to start paginating. + --status=: The status to filter notebook runs by. + completion: + flag: + sort-order: + - ASCENDING + - DESCENDING + status: + - QUEUED + - STARTING + - RUNNING + - STOPPING + - STOPPED + - SUCCEEDED + - FAILED - name: list-notifications description: Lists all Amazon DataZone notifications. flags: @@ -2332,6 +2370,32 @@ commands: - BUSINESS_DESCRIPTIONS - BUSINESS_NAMES - BUSINESS_GLOSSARY_ASSOCIATIONS + - name: start-notebook-run + description: Starts a notebook run in an Amazon DataZone domain. + flags: + --cli-input-json=: Read arguments from the JSON string provided. + --cli-input-yaml=: Read arguments from the YAML string provided. + --client-token=: A unique, case-sensitive identifier to ensure idempotency of the request. + --compute-configuration=: The compute configuration for the notebook run, including instance type and environment version. + --domain-identifier=!: The identifier of the Amazon DataZone domain in which the notebook run is started. + --generate-cli-skeleton: Prints a JSON skeleton to standard output without sending an API request. + --metadata=: The metadata for the notebook run, specified as key-value pairs. + --network-configuration=: The network configuration for the notebook run, including network access type and optional VPC settings. + --notebook-identifier=!: The identifier of the notebook to run. + --owning-project-identifier=!: The identifier of the project that owns the notebook run. + --parameters=: The sensitive parameters for the notebook run, specified as key-value pairs. + --schedule-identifier=: The identifier of the schedule associated with the notebook run. + --timeout-configuration=: The timeout configuration for the notebook run. + --trigger-source=: The source that triggered the notebook run. + - name: stop-notebook-run + description: Stops a running notebook run in an Amazon DataZone domain. + flags: + --cli-input-json=: Read arguments from the JSON string provided. + --cli-input-yaml=: Read arguments from the YAML string provided. + --client-token=: A unique, case-sensitive identifier to ensure idempotency of the request. + --domain-identifier=!: The identifier of the Amazon DataZone domain in which the notebook run is stopped. + --generate-cli-skeleton: Prints a JSON skeleton to standard output without sending an API request. + --identifier=!: The identifier of the notebook run to stop. - name: tag-resource description: Tags a resource in Amazon DataZone. flags: diff --git a/cmd/carapace-aws/cmd/botocore/aws.kafka.yaml b/cmd/carapace-aws/cmd/botocore/aws.kafka.yaml index 2e0d6eec8..31b4ec657 100755 --- a/cmd/carapace-aws/cmd/botocore/aws.kafka.yaml +++ b/cmd/carapace-aws/cmd/botocore/aws.kafka.yaml @@ -531,9 +531,10 @@ commands: --cli-input-json=: Read arguments from the JSON string provided. --cli-input-yaml=: Read arguments from the YAML string provided. --cluster-arn=!: The Amazon Resource Name (ARN) of the configuration. - --connectivity-info=!: Information about the broker access configuration. + --connectivity-info=: Information about the broker access configuration. --current-version=!: The version of the MSK cluster to update. --generate-cli-skeleton: Prints a JSON skeleton to standard output without sending an API request. + --zookeeper-access=: Access control settings for zookeeper - name: update-monitoring description: Updates the monitoring settings for the cluster. flags: diff --git a/cmd/carapace-aws/cmd/botocore/aws.payment-cryptography.yaml b/cmd/carapace-aws/cmd/botocore/aws.payment-cryptography.yaml index b871e9672..75758bcdb 100755 --- a/cmd/carapace-aws/cmd/botocore/aws.payment-cryptography.yaml +++ b/cmd/carapace-aws/cmd/botocore/aws.payment-cryptography.yaml @@ -12,6 +12,19 @@ commands: --replication-regions=!: description: The list of Amazon Web Services Regions to add to the key's replication configuration. nargs: -1 + - name: associate-mpa-team + description: Associates a Multi-Party Approval (MPA) team with a protected operation. + flags: + --action=!: The protected operation to associate with the MPA team. + --cli-input-json=: Read arguments from the JSON string provided. + --cli-input-yaml=: Read arguments from the YAML string provided. + --generate-cli-skeleton: Prints a JSON skeleton to standard output without sending an API request. + --mpa-team-arn=!: The ARN of the MPA team to associate with the protected operation. + --requester-comment=: The comment from the requester explaining the reason for the association. + completion: + flag: + action: + - IMPORT_ROOT_PUBLIC_KEY_CERTIFICATE - name: create-alias description: Creates an *alias*, or a friendly name, for an Amazon Web Services Payment Cryptography key. flags: @@ -80,6 +93,13 @@ commands: --delete-key-in-days=: The waiting period for key deletion. --generate-cli-skeleton: Prints a JSON skeleton to standard output without sending an API request. --key-identifier=!: The `KeyARN` of the key that is scheduled for deletion. + - name: delete-resource-policy + description: Removes the resource-based policy attached to an Amazon Web Services Payment Cryptography key. + flags: + --cli-input-json=: Read arguments from the JSON string provided. + --cli-input-yaml=: Read arguments from the YAML string provided. + --generate-cli-skeleton: Prints a JSON skeleton to standard output without sending an API request. + --resource-arn=!: The `KeyARN` of the key whose resource-based policy you want to delete. - name: disable-default-key-replication-regions description: Disables [Multi-Region key replication](https://docs.aws.amazon.com/payment-cryptography/latest/userguide/keys-multi-region-replication.html) settings for the specified Amazon Web Services Regions in your Amazon Web Services account, preventing new keys from being automatically replicated to those regions. flags: @@ -89,6 +109,18 @@ commands: --replication-regions=!: description: The list of Amazon Web Services Regions to remove from the account's default replication regions. nargs: -1 + - name: disassociate-mpa-team + description: Removes the association between a Multi-Party Approval (MPA) team and a protected operation. + flags: + --action=!: The protected operation to disassociate from the MPA team. + --cli-input-json=: Read arguments from the JSON string provided. + --cli-input-yaml=: Read arguments from the YAML string provided. + --generate-cli-skeleton: Prints a JSON skeleton to standard output without sending an API request. + --requester-comment=: The comment from the requester explaining the reason for the disassociation. + completion: + flag: + action: + - IMPORT_ROOT_PUBLIC_KEY_CERTIFICATE - name: enable-default-key-replication-regions description: Enables [Multi-Region key replication](https://docs.aws.amazon.com/payment-cryptography/latest/userguide/keys-multi-region-replication.html) settings for your Amazon Web Services account, causing new keys to be automatically replicated to the specified Amazon Web Services Regions when created. flags: @@ -143,6 +175,17 @@ commands: --cli-input-yaml=: Read arguments from the YAML string provided. --generate-cli-skeleton: Prints a JSON skeleton to standard output without sending an API request. --key-identifier=!: The `KeyARN` of the Amazon Web Services Payment Cryptography key. + - name: get-mpa-team-association + description: Returns the Multi-Party Approval (MPA) team association for a protected operation. + flags: + --action=!: The protected operation whose MPA team association you want to retrieve. + --cli-input-json=: Read arguments from the JSON string provided. + --cli-input-yaml=: Read arguments from the YAML string provided. + --generate-cli-skeleton: Prints a JSON skeleton to standard output without sending an API request. + completion: + flag: + action: + - IMPORT_ROOT_PUBLIC_KEY_CERTIFICATE - name: get-parameters-for-export description: Gets the export token and the signing key certificate to initiate a TR-34 key export from Amazon Web Services Payment Cryptography. flags: @@ -218,6 +261,13 @@ commands: --cli-input-yaml=: Read arguments from the YAML string provided. --generate-cli-skeleton: Prints a JSON skeleton to standard output without sending an API request. --key-identifier=!: The `KeyARN` of the asymmetric key pair. + - name: get-resource-policy + description: Returns the resource-based policy attached to an Amazon Web Services Payment Cryptography key. + flags: + --cli-input-json=: Read arguments from the JSON string provided. + --cli-input-yaml=: Read arguments from the YAML string provided. + --generate-cli-skeleton: Prints a JSON skeleton to standard output without sending an API request. + --resource-arn=!: The `KeyARN` of the key whose resource-based policy you want to retrieve. - name: import-key description: Imports symmetric keys and public key certificates in PEM format (base64 encoded) into Amazon Web Services Payment Cryptography. flags: @@ -230,6 +280,7 @@ commands: --no-enabled: Specifies whether import key is enabled. --replication-regions=: nargs: -1 + --requester-comment=: The comment from the requester explaining the reason for the import. --tags=: description: Assigns one or more tags to the Amazon Web Services Payment Cryptography key. nargs: -1 @@ -283,6 +334,14 @@ commands: --page-size=: The size of each page to get in the AWS service call. --resource-arn=!: The `KeyARN` of the key whose tags you are getting. --starting-token=: A token to specify where to start paginating. + - name: put-resource-policy + description: Attaches or replaces a resource-based policy on an Amazon Web Services Payment Cryptography key. + flags: + --cli-input-json=: Read arguments from the JSON string provided. + --cli-input-yaml=: Read arguments from the YAML string provided. + --generate-cli-skeleton: Prints a JSON skeleton to standard output without sending an API request. + --policy=!: The resource-based policy to attach to the key, in JSON format. + --resource-arn=!: The `KeyARN` of the key to attach the resource-based policy to. - name: remove-key-replication-regions description: Removes Replication Regions from an existing Amazon Web Services Payment Cryptography key, disabling the key's availability for cryptographic operations in the specified Amazon Web Services Regions. flags: diff --git a/cmd/carapace-aws/cmd/botocore/aws.route53globalresolver.yaml b/cmd/carapace-aws/cmd/botocore/aws.route53globalresolver.yaml index e974ffa36..47067d7e2 100755 --- a/cmd/carapace-aws/cmd/botocore/aws.route53globalresolver.yaml +++ b/cmd/carapace-aws/cmd/botocore/aws.route53globalresolver.yaml @@ -541,6 +541,9 @@ commands: --ip-address-type=: The IP address type for the Global Resolver. --name=: The name of the Global Resolver. --observability-region=: The Amazon Web Services Regions in which the users' Global Resolver query resolution logs will be propagated. + --regions=: + description: The list of Amazon Web Services Regions where the Global Resolver will operate. + nargs: -1 completion: flag: ip-address-type: diff --git a/cmd/carapace-aws/cmd/botocore/aws.sagemaker.yaml b/cmd/carapace-aws/cmd/botocore/aws.sagemaker.yaml index c985ada5f..980241cf8 100755 --- a/cmd/carapace-aws/cmd/botocore/aws.sagemaker.yaml +++ b/cmd/carapace-aws/cmd/botocore/aws.sagemaker.yaml @@ -735,6 +735,9 @@ commands: --inference-component-name=!: A unique name to assign to the inference component. --runtime-config=: Runtime settings for a model that is deployed with an inference component. --specification=: Details about the resources to deploy with this inference component, including the model, container, and compute resources. + --specifications=: + description: A list of specification objects for the inference component, one per instance type. + nargs: -1 --tags=: description: A list of key-value pairs associated with the model. nargs: -1 @@ -5991,6 +5994,9 @@ commands: --inference-component-name=!: The name of the inference component. --runtime-config=: Runtime settings for a model that is deployed with an inference component. --specification=: Details about the resources to deploy with this inference component, including the model, container, and compute resources. + --specifications=: + description: A list of specification objects for the inference component, one per instance type. + nargs: -1 - name: update-inference-component-runtime-config description: Runtime settings for a model that is deployed with an inference component. flags: