rebase: bump github.com/aws/aws-sdk-go from 1.44.132 to 1.44.143

Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) from 1.44.132 to 1.44.143.
- [Release notes](https://github.com/aws/aws-sdk-go/releases)
- [Commits](https://github.com/aws/aws-sdk-go/compare/v1.44.132...v1.44.143)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

go.mod

@@ -4,7 +4,7 @@ go 1.18
 
 require (
 	github.com/IBM/keyprotect-go-client v0.9.0
-	github.com/aws/aws-sdk-go v1.44.132
+	github.com/aws/aws-sdk-go v1.44.143
 	github.com/aws/aws-sdk-go-v2/service/sts v1.17.3
 	github.com/ceph/ceph-csi/api v0.0.0-00010101000000-000000000000
 	// TODO: API for managing subvolume metadata and snapshot metadata requires `ceph_ci_untested` build-tag

go.sum

@@ -140,8 +140,8 @@ github.com/asaskevich/govalidator v0.0.0-20180720115003-f9ffefc3facf/go.mod h1:l
 github.com/asaskevich/govalidator v0.0.0-20190424111038-f61b66f89f4a/go.mod h1:lB+ZfQJz7igIIfQNfa7Ml4HSf2uFQQRzpGGRXenZAgY=
 github.com/aws/aws-sdk-go v1.25.37/go.mod h1:KmX6BPdI08NWTb3/sm4ZGu5ShLoqVDhKgpiN924inxo=
 github.com/aws/aws-sdk-go v1.25.41/go.mod h1:KmX6BPdI08NWTb3/sm4ZGu5ShLoqVDhKgpiN924inxo=
-github.com/aws/aws-sdk-go v1.44.132 h1:+IjL9VoR0OXScQ5gyme9xjcolwUkd3uaH144f4Ao+4s=
+github.com/aws/aws-sdk-go v1.44.143 h1:5xN01uj7zV0VozeE/cxsHsNjSIooqmzVRX0omLxoO0w=
-github.com/aws/aws-sdk-go v1.44.132/go.mod h1:aVsgQcEevwlmQ7qHE9I3h+dtQgpqhFB+i8Phjh7fkwI=
+github.com/aws/aws-sdk-go v1.44.143/go.mod h1:aVsgQcEevwlmQ7qHE9I3h+dtQgpqhFB+i8Phjh7fkwI=
 github.com/aws/aws-sdk-go-v2 v1.17.1 h1:02c72fDJr87N8RAC2s3Qu0YuvMRZKNZJ9F+lAehCazk=
 github.com/aws/aws-sdk-go-v2 v1.17.1/go.mod h1:JLnGeGONAyi2lWXI1p0PCIOIy333JMVK1U7Hf0aRFLw=
 github.com/aws/aws-sdk-go-v2/internal/configsources v1.1.25 h1:nBO/RFxeq/IS5G9Of+ZrgucRciie2qpLy++3UGZ+q2E=

vendor/github.com/aws/aws-sdk-go/aws/version.go

@@ -5,4 +5,4 @@ package aws
 const SDKName = "aws-sdk-go"
 
 // SDKVersion is the version of this SDK
-const SDKVersion = "1.44.132"
+const SDKVersion = "1.44.143"

vendor/github.com/aws/aws-sdk-go/service/ec2/api.go

@@ -3400,9 +3400,9 @@ func (c *EC2) CancelImageLaunchPermissionRequest(input *CancelImageLaunchPermiss
 // CancelImageLaunchPermission API operation for Amazon Elastic Compute Cloud.
 //
 // Removes your Amazon Web Services account from the launch permissions for
-// the specified AMI. For more information, see Cancel sharing an AMI with your
+// the specified AMI. For more information, see Cancel having an AMI shared
-// Amazon Web Services account (https://docs.aws.amazon.com/) in the Amazon
+// with your Amazon Web Services account (https://docs.aws.amazon.com/) in the
-// Elastic Compute Cloud User Guide.
+// Amazon Elastic Compute Cloud User Guide.
 //
 // Returns awserr.Error for service API and SDK errors. Use runtime type assertions
 // with awserr.Error's Code and Message methods to get detailed information about
@@ -3951,7 +3951,7 @@ func (c *EC2) CopyImageRequest(input *CopyImageInput) (req *request.Request, out
 // in the Amazon Elastic Compute Cloud User Guide.
 //
 // For more information about the prerequisites and limits when copying an AMI,
-// see Copying an AMI (https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/CopyingAMIs.html)
+// see Copy an AMI (https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/CopyingAMIs.html)
 // in the Amazon Elastic Compute Cloud User Guide.
 //
 // Returns awserr.Error for service API and SDK errors. Use runtime type assertions
@@ -5375,7 +5375,7 @@ func (c *EC2) CreateImageRequest(input *CreateImageInput) (req *request.Request,
 // from this new AMI, the instance automatically launches with those additional
 // volumes.
 //
-// For more information, see Creating Amazon EBS-Backed Linux AMIs (https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/creating-an-ami-ebs.html)
+// For more information, see Create an Amazon EBS-backed Linux AMI (https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/creating-an-ami-ebs.html)
 // in the Amazon Elastic Compute Cloud User Guide.
 //
 // Returns awserr.Error for service API and SDK errors. Use runtime type assertions
@@ -45667,7 +45667,7 @@ func (c *EC2) RegisterImageRequest(input *RegisterImageInput) (req *request.Requ
 //
 // Registers an AMI. When you're creating an AMI, this is the final step you
 // must complete before you can launch an instance from the AMI. For more information
-// about creating AMIs, see Creating your own AMIs (https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/creating-an-ami.html)
+// about creating AMIs, see Create your own AMI (https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/creating-an-ami.html)
 // in the Amazon Elastic Compute Cloud User Guide.
 //
 // For Amazon EBS-backed instances, CreateImage creates and registers the AMI
@@ -45716,7 +45716,7 @@ func (c *EC2) RegisterImageRequest(input *RegisterImageInput) (req *request.Requ
 // a Reserved Instance without the matching billing product code, the Reserved
 // Instance will not be applied to the On-Demand Instance. For information about
 // how to obtain the platform details and billing information of an AMI, see
-// Understanding AMI billing (https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ami-billing-info.html)
+// Understand AMI billing information (https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ami-billing-info.html)
 // in the Amazon Elastic Compute Cloud User Guide.
 //
 // Returns awserr.Error for service API and SDK errors. Use runtime type assertions
@@ -61643,6 +61643,19 @@ type CopyImageInput struct {
 	// in the Amazon EC2 API Reference.
 	ClientToken *string `type:"string"`
 
+	// Indicates whether to include your user-defined AMI tags when copying the
+	// AMI.
+	//
+	// The following tags will not be copied:
+	//
+	//    * System tags (prefixed with aws:)
+	//
+	//    * For public and shared AMIs, user-defined tags that are attached by other
+	//    Amazon Web Services accounts
+	//
+	// Default: Your user-defined AMI tags are not copied.
+	CopyImageTags *bool `type:"boolean"`
+
 	// A description for the new AMI in the destination Region.
 	Description *string `type:"string"`
 
@@ -61652,8 +61665,8 @@ type CopyImageInput struct {
 	// You cannot copy an AMI from an Outpost to a Region, from one Outpost to another,
 	// or within the same Outpost.
 	//
-	// For more information, see Copying AMIs from an Amazon Web Services Region
+	// For more information, see Copy AMIs from an Amazon Web Services Region to
-	// to an Outpost (https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/snapshots-outposts.html#copy-amis)
+	// an Outpost (https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/snapshots-outposts.html#copy-amis)
 	// in the Amazon Elastic Compute Cloud User Guide.
 	DestinationOutpostArn *string `type:"string"`
 
@@ -61667,7 +61680,7 @@ type CopyImageInput struct {
 	// encrypted. You can encrypt a copy of an unencrypted snapshot, but you cannot
 	// create an unencrypted copy of an encrypted snapshot. The default KMS key
 	// for Amazon EBS is used unless you specify a non-default Key Management Service
-	// (KMS) KMS key using KmsKeyId. For more information, see Amazon EBS Encryption
+	// (KMS) KMS key using KmsKeyId. For more information, see Amazon EBS encryption
 	// (https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSEncryption.html)
 	// in the Amazon Elastic Compute Cloud User Guide.
 	Encrypted *bool `locationName:"encrypted" type:"boolean"`
@@ -61755,6 +61768,12 @@ func (s *CopyImageInput) SetClientToken(v string) *CopyImageInput {
 	return s
 }
 
+// SetCopyImageTags sets the CopyImageTags field's value.
+func (s *CopyImageInput) SetCopyImageTags(v bool) *CopyImageInput {
+	s.CopyImageTags = &v
+	return s
+}
+
 // SetDescription sets the Description field's value.
 func (s *CopyImageInput) SetDescription(v string) *CopyImageInput {
 	s.Description = &v
@@ -64469,10 +64488,12 @@ type CreateFlowLogsInput struct {
 	LogDestinationType *string `type:"string" enum:"LogDestinationType"`
 
 	// The fields to include in the flow log record. List the fields in the order
-	// in which they should appear. For more information about the available fields,
+	// in which they should appear. If you omit this parameter, the flow log is
-	// see Flow log records (https://docs.aws.amazon.com/vpc/latest/userguide/flow-logs.html#flow-log-records).
+	// created using the default format. If you specify this parameter, you must
-	// If you omit this parameter, the flow log is created using the default format.
+	// include at least one field. For more information about the available fields,
-	// If you specify this parameter, you must include at least one field.
+	// see Flow log records (https://docs.aws.amazon.com/vpc/latest/userguide/flow-logs.html#flow-log-records)
+	// in the Amazon VPC User Guide or Transit Gateway Flow Log records (https://docs.aws.amazon.com/vpc/latest/tgw/tgw-flow-logs.html#flow-log-records)
+	// in the Amazon Web Services Transit Gateway Guide.
 	//
 	// Specify the fields using the ${field-id} format, separated by spaces. For
 	// the CLI, surround this parameter value with single quotes on Linux or double
@@ -64486,8 +64507,9 @@ type CreateFlowLogsInput struct {
 	LogGroupName *string `type:"string"`
 
 	// The maximum interval of time during which a flow of packets is captured and
-	// aggregated into a flow log record. You can specify 60 seconds (1 minute)
+	// aggregated into a flow log record. The possible values are 60 seconds (1
-	// or 600 seconds (10 minutes).
+	// minute) or 600 seconds (10 minutes). This parameter must be 60 seconds for
+	// transit gateway resource types.
 	//
 	// When a network interface is attached to a Nitro-based instance (https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/instance-types.html#ec2-nitro-instances),
 	// the aggregation interval is always 60 seconds or less, regardless of the
@@ -64499,7 +64521,8 @@ type CreateFlowLogsInput struct {
 	// The IDs of the resources to monitor. For example, if the resource type is
 	// VPC, specify the IDs of the VPCs.
 	//
-	// Constraints: Maximum of 1000 resources
+	// Constraints: Maximum of 25 for transit gateway resource types. Maximum of
+	// 1000 for the other resource types.
 	//
 	// ResourceIds is a required field
 	ResourceIds []*string `locationName:"ResourceId" locationNameList:"item" type:"list" required:"true"`
@@ -64513,7 +64536,8 @@ type CreateFlowLogsInput struct {
 	TagSpecifications []*TagSpecification `locationName:"TagSpecification" locationNameList:"item" type:"list"`
 
 	// The type of traffic to monitor (accepted traffic, rejected traffic, or all
-	// traffic).
+	// traffic). This parameter is not supported for transit gateway resource types.
+	// It is required for the other resource types.
 	TrafficType *string `type:"string" enum:"TrafficType"`
 }
 
@@ -66941,6 +66965,10 @@ type CreateNatGatewayInput struct {
 	// it is UnauthorizedOperation.
 	DryRun *bool `type:"boolean"`
 
+	// The private IPv4 address to assign to the NAT gateway. If you don't provide
+	// an address, a private IPv4 address will be automatically assigned.
+	PrivateIpAddress *string `type:"string"`
+
 	// The subnet in which to create the NAT gateway.
 	//
 	// SubnetId is a required field
@@ -67005,6 +67033,12 @@ func (s *CreateNatGatewayInput) SetDryRun(v bool) *CreateNatGatewayInput {
 	return s
 }
 
+// SetPrivateIpAddress sets the PrivateIpAddress field's value.
+func (s *CreateNatGatewayInput) SetPrivateIpAddress(v string) *CreateNatGatewayInput {
+	s.PrivateIpAddress = &v
+	return s
+}
+
 // SetSubnetId sets the SubnetId field's value.
 func (s *CreateNatGatewayInput) SetSubnetId(v string) *CreateNatGatewayInput {
 	s.SubnetId = &v
@@ -86448,7 +86482,7 @@ type DescribeImagesInput struct {
 	//    * owner-id - The Amazon Web Services account ID of the owner. We recommend
 	//    that you use the Owner request parameter instead of this filter.
 	//
-	//    * platform - The platform. To only list Windows-based AMIs, use windows.
+	//    * platform - The platform. The only supported value is windows.
 	//
 	//    * product-code - The product code.
 	//
@@ -116104,7 +116138,7 @@ type Image struct {
 	Platform *string `locationName:"platform" type:"string" enum:"PlatformValues"`
 
 	// The platform details associated with the billing code of the AMI. For more
-	// information, see Understanding AMI billing (https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ami-billing-info.html)
+	// information, see Understand AMI billing information (https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ami-billing-info.html)
 	// in the Amazon Elastic Compute Cloud User Guide.
 	PlatformDetails *string `locationName:"platformDetails" type:"string"`
 
@@ -126900,6 +126934,10 @@ type LaunchTemplatePlacement struct {
 	// The Availability Zone of the instance.
 	AvailabilityZone *string `locationName:"availabilityZone" type:"string"`
 
+	// The Group ID of the placement group. You must specify the Placement Group
+	// Group ID to launch an instance in a shared placement group.
+	GroupId *string `locationName:"groupId" type:"string"`
+
 	// The name of the placement group for the instance.
 	GroupName *string `locationName:"groupName" type:"string"`
 
@@ -126951,6 +126989,12 @@ func (s *LaunchTemplatePlacement) SetAvailabilityZone(v string) *LaunchTemplateP
 	return s
 }
 
+// SetGroupId sets the GroupId field's value.
+func (s *LaunchTemplatePlacement) SetGroupId(v string) *LaunchTemplatePlacement {
+	s.GroupId = &v
+	return s
+}
+
 // SetGroupName sets the GroupName field's value.
 func (s *LaunchTemplatePlacement) SetGroupName(v string) *LaunchTemplatePlacement {
 	s.GroupName = &v
@@ -126997,6 +127041,10 @@ type LaunchTemplatePlacementRequest struct {
 	// The Availability Zone for the instance.
 	AvailabilityZone *string `type:"string"`
 
+	// The Group Id of a placement group. You must specify the Placement Group Group
+	// Id to launch an instance in a shared placement group.
+	GroupId *string `type:"string"`
+
 	// The name of the placement group for the instance.
 	GroupName *string `type:"string"`
 
@@ -127050,6 +127098,12 @@ func (s *LaunchTemplatePlacementRequest) SetAvailabilityZone(v string) *LaunchTe
 	return s
 }
 
+// SetGroupId sets the GroupId field's value.
+func (s *LaunchTemplatePlacementRequest) SetGroupId(v string) *LaunchTemplatePlacementRequest {
+	s.GroupId = &v
+	return s
+}
+
 // SetGroupName sets the GroupName field's value.
 func (s *LaunchTemplatePlacementRequest) SetGroupName(v string) *LaunchTemplatePlacementRequest {
 	s.GroupName = &v
@@ -131904,6 +131958,10 @@ type ModifyInstancePlacementInput struct {
 	// The affinity setting for the instance.
 	Affinity *string `locationName:"affinity" type:"string" enum:"Affinity"`
 
+	// The Group Id of a placement group. You must specify the Placement Group Group
+	// Id to launch an instance in a shared placement group.
+	GroupId *string `type:"string"`
+
 	// The name of the placement group in which to place the instance. For spread
 	// placement groups, the instance must have a tenancy of default. For cluster
 	// and partition placement groups, the instance must have a tenancy of default
@@ -131972,6 +132030,12 @@ func (s *ModifyInstancePlacementInput) SetAffinity(v string) *ModifyInstancePlac
 	return s
 }
 
+// SetGroupId sets the GroupId field's value.
+func (s *ModifyInstancePlacementInput) SetGroupId(v string) *ModifyInstancePlacementInput {
+	s.GroupId = &v
+	return s
+}
+
 // SetGroupName sets the GroupName field's value.
 func (s *ModifyInstancePlacementInput) SetGroupName(v string) *ModifyInstancePlacementInput {
 	s.GroupName = &v
@@ -140792,6 +140856,9 @@ type Placement struct {
 	// This parameter is not supported by CreateFleet (https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_CreateFleet).
 	AvailabilityZone *string `locationName:"availabilityZone" type:"string"`
 
+	// The Group Id of the placement group.
+	GroupId *string `locationName:"groupId" type:"string"`
+
 	// The name of the placement group the instance is in.
 	GroupName *string `locationName:"groupName" type:"string"`
 
@@ -140862,6 +140929,12 @@ func (s *Placement) SetAvailabilityZone(v string) *Placement {
 	return s
 }
 
+// SetGroupId sets the GroupId field's value.
+func (s *Placement) SetGroupId(v string) *Placement {
+	s.GroupId = &v
+	return s
+}
+
 // SetGroupName sets the GroupName field's value.
 func (s *Placement) SetGroupName(v string) *Placement {
 	s.GroupName = &v
@@ -151365,8 +151438,8 @@ type S3Storage struct {
 	_ struct{} `type:"structure"`
 
 	// The access key ID of the owner of the bucket. Before you specify a value
-	// for your access key ID, review and follow the guidance in Best Practices
+	// for your access key ID, review and follow the guidance in Best practices
-	// for Managing Amazon Web Services Access Keys (https://docs.aws.amazon.com/general/latest/gr/aws-access-keys-best-practices.html).
+	// for managing Amazon Web Services access keys (https://docs.aws.amazon.com/general/latest/gr/aws-access-keys-best-practices.html).
 	AWSAccessKeyId *string `type:"string"`
 
 	// The bucket in which to store the AMI. You can specify a bucket that you already
@@ -167219,6 +167292,9 @@ const (
 
 	// AllocationStrategyCapacityOptimizedPrioritized is a AllocationStrategy enum value
 	AllocationStrategyCapacityOptimizedPrioritized = "capacityOptimizedPrioritized"
+
+	// AllocationStrategyPriceCapacityOptimized is a AllocationStrategy enum value
+	AllocationStrategyPriceCapacityOptimized = "priceCapacityOptimized"
 )
 
 // AllocationStrategy_Values returns all elements of the AllocationStrategy enum
@@ -167228,6 +167304,7 @@ func AllocationStrategy_Values() []string {
 		AllocationStrategyDiversified,
 		AllocationStrategyCapacityOptimized,
 		AllocationStrategyCapacityOptimizedPrioritized,
+		AllocationStrategyPriceCapacityOptimized,
 	}
 }
 
@@ -167307,6 +167384,9 @@ const (
 
 	// ArchitectureTypeX8664Mac is a ArchitectureType enum value
 	ArchitectureTypeX8664Mac = "x86_64_mac"
+
+	// ArchitectureTypeArm64Mac is a ArchitectureType enum value
+	ArchitectureTypeArm64Mac = "arm64_mac"
 )
 
 // ArchitectureType_Values returns all elements of the ArchitectureType enum
@@ -167316,6 +167396,7 @@ func ArchitectureType_Values() []string {
 		ArchitectureTypeX8664,
 		ArchitectureTypeArm64,
 		ArchitectureTypeX8664Mac,
+		ArchitectureTypeArm64Mac,
 	}
 }
 
@@ -167331,6 +167412,9 @@ const (
 
 	// ArchitectureValuesX8664Mac is a ArchitectureValues enum value
 	ArchitectureValuesX8664Mac = "x86_64_mac"
+
+	// ArchitectureValuesArm64Mac is a ArchitectureValues enum value
+	ArchitectureValuesArm64Mac = "arm64_mac"
 )
 
 // ArchitectureValues_Values returns all elements of the ArchitectureValues enum
@@ -167340,6 +167424,7 @@ func ArchitectureValues_Values() []string {
 		ArchitectureValuesX8664,
 		ArchitectureValuesArm64,
 		ArchitectureValuesX8664Mac,
+		ArchitectureValuesArm64Mac,
 	}
 }
 
@@ -171410,6 +171495,18 @@ const (
 
 	// InstanceTypeU3tb156xlarge is a InstanceType enum value
 	InstanceTypeU3tb156xlarge = "u-3tb1.56xlarge"
+
+	// InstanceTypeU18tb1112xlarge is a InstanceType enum value
+	InstanceTypeU18tb1112xlarge = "u-18tb1.112xlarge"
+
+	// InstanceTypeU24tb1112xlarge is a InstanceType enum value
+	InstanceTypeU24tb1112xlarge = "u-24tb1.112xlarge"
+
+	// InstanceTypeTrn12xlarge is a InstanceType enum value
+	InstanceTypeTrn12xlarge = "trn1.2xlarge"
+
+	// InstanceTypeTrn132xlarge is a InstanceType enum value
+	InstanceTypeTrn132xlarge = "trn1.32xlarge"
 )
 
 // InstanceType_Values returns all elements of the InstanceType enum
@@ -171984,6 +172081,10 @@ func InstanceType_Values() []string {
 		InstanceTypeR6aMetal,
 		InstanceTypeP4de24xlarge,
 		InstanceTypeU3tb156xlarge,
+		InstanceTypeU18tb1112xlarge,
+		InstanceTypeU24tb1112xlarge,
+		InstanceTypeTrn12xlarge,
+		InstanceTypeTrn132xlarge,
 	}
 }
 
@@ -174267,6 +174368,9 @@ const (
 
 	// SpotAllocationStrategyCapacityOptimizedPrioritized is a SpotAllocationStrategy enum value
 	SpotAllocationStrategyCapacityOptimizedPrioritized = "capacity-optimized-prioritized"
+
+	// SpotAllocationStrategyPriceCapacityOptimized is a SpotAllocationStrategy enum value
+	SpotAllocationStrategyPriceCapacityOptimized = "price-capacity-optimized"
 )
 
 // SpotAllocationStrategy_Values returns all elements of the SpotAllocationStrategy enum
@@ -174276,6 +174380,7 @@ func SpotAllocationStrategy_Values() []string {
 		SpotAllocationStrategyDiversified,
 		SpotAllocationStrategyCapacityOptimized,
 		SpotAllocationStrategyCapacityOptimizedPrioritized,
+		SpotAllocationStrategyPriceCapacityOptimized,
 	}
 }
 

vendor/github.com/aws/aws-sdk-go/service/sts/api.go

@@ -74,16 +74,16 @@ func (c *STS) AssumeRoleRequest(input *AssumeRoleInput) (req *request.Request, o
 //
 // (Optional) You can pass inline or managed session policies (https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html#policies_session)
 // to this operation. You can pass a single JSON policy document to use as an
-// inline session policy. You can also specify up to 10 managed policies to
+// inline session policy. You can also specify up to 10 managed policy Amazon
-// use as managed session policies. The plaintext that you use for both inline
+// Resource Names (ARNs) to use as managed session policies. The plaintext that
-// and managed session policies can't exceed 2,048 characters. Passing policies
+// you use for both inline and managed session policies can't exceed 2,048 characters.
-// to this operation returns new temporary credentials. The resulting session's
+// Passing policies to this operation returns new temporary credentials. The
-// permissions are the intersection of the role's identity-based policy and
+// resulting session's permissions are the intersection of the role's identity-based
-// the session policies. You can use the role's temporary credentials in subsequent
+// policy and the session policies. You can use the role's temporary credentials
-// Amazon Web Services API calls to access resources in the account that owns
+// in subsequent Amazon Web Services API calls to access resources in the account
-// the role. You cannot use session policies to grant more permissions than
+// that owns the role. You cannot use session policies to grant more permissions
-// those allowed by the identity-based policy of the role that is being assumed.
+// than those allowed by the identity-based policy of the role that is being
-// For more information, see Session Policies (https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html#policies_session)
+// assumed. For more information, see Session Policies (https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html#policies_session)
 // in the IAM User Guide.
 //
 // When you create a role, you create two policies: A role trust policy that
@@ -307,16 +307,16 @@ func (c *STS) AssumeRoleWithSAMLRequest(input *AssumeRoleWithSAMLInput) (req *re
 //
 // (Optional) You can pass inline or managed session policies (https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html#policies_session)
 // to this operation. You can pass a single JSON policy document to use as an
-// inline session policy. You can also specify up to 10 managed policies to
+// inline session policy. You can also specify up to 10 managed policy Amazon
-// use as managed session policies. The plaintext that you use for both inline
+// Resource Names (ARNs) to use as managed session policies. The plaintext that
-// and managed session policies can't exceed 2,048 characters. Passing policies
+// you use for both inline and managed session policies can't exceed 2,048 characters.
-// to this operation returns new temporary credentials. The resulting session's
+// Passing policies to this operation returns new temporary credentials. The
-// permissions are the intersection of the role's identity-based policy and
+// resulting session's permissions are the intersection of the role's identity-based
-// the session policies. You can use the role's temporary credentials in subsequent
+// policy and the session policies. You can use the role's temporary credentials
-// Amazon Web Services API calls to access resources in the account that owns
+// in subsequent Amazon Web Services API calls to access resources in the account
-// the role. You cannot use session policies to grant more permissions than
+// that owns the role. You cannot use session policies to grant more permissions
-// those allowed by the identity-based policy of the role that is being assumed.
+// than those allowed by the identity-based policy of the role that is being
-// For more information, see Session Policies (https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html#policies_session)
+// assumed. For more information, see Session Policies (https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html#policies_session)
 // in the IAM User Guide.
 //
 // Calling AssumeRoleWithSAML does not require the use of Amazon Web Services
@@ -343,11 +343,12 @@ func (c *STS) AssumeRoleWithSAMLRequest(input *AssumeRoleWithSAMLInput) (req *re
 // and additional limits, see IAM and STS Character Limits (https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-limits.html#reference_iam-limits-entity-length)
 // in the IAM User Guide.
 //
-// An Amazon Web Services conversion compresses the passed session policies
+// An Amazon Web Services conversion compresses the passed inline session policy,
-// and session tags into a packed binary format that has a separate limit. Your
+// managed policy ARNs, and session tags into a packed binary format that has
-// request can fail for this limit even if your plaintext meets the other requirements.
+// a separate limit. Your request can fail for this limit even if your plaintext
-// The PackedPolicySize response element indicates by percentage how close the
+// meets the other requirements. The PackedPolicySize response element indicates
-// policies and tags for your request are to the upper size limit.
+// by percentage how close the policies and tags for your request are to the
+// upper size limit.
 //
 // You can pass a session tag with the same key as a tag that is attached to
 // the role. When you do, session tags override the role's tags with the same
@@ -563,16 +564,16 @@ func (c *STS) AssumeRoleWithWebIdentityRequest(input *AssumeRoleWithWebIdentityI
 //
 // (Optional) You can pass inline or managed session policies (https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html#policies_session)
 // to this operation. You can pass a single JSON policy document to use as an
-// inline session policy. You can also specify up to 10 managed policies to
+// inline session policy. You can also specify up to 10 managed policy Amazon
-// use as managed session policies. The plaintext that you use for both inline
+// Resource Names (ARNs) to use as managed session policies. The plaintext that
-// and managed session policies can't exceed 2,048 characters. Passing policies
+// you use for both inline and managed session policies can't exceed 2,048 characters.
-// to this operation returns new temporary credentials. The resulting session's
+// Passing policies to this operation returns new temporary credentials. The
-// permissions are the intersection of the role's identity-based policy and
+// resulting session's permissions are the intersection of the role's identity-based
-// the session policies. You can use the role's temporary credentials in subsequent
+// policy and the session policies. You can use the role's temporary credentials
-// Amazon Web Services API calls to access resources in the account that owns
+// in subsequent Amazon Web Services API calls to access resources in the account
-// the role. You cannot use session policies to grant more permissions than
+// that owns the role. You cannot use session policies to grant more permissions
-// those allowed by the identity-based policy of the role that is being assumed.
+// than those allowed by the identity-based policy of the role that is being
-// For more information, see Session Policies (https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html#policies_session)
+// assumed. For more information, see Session Policies (https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html#policies_session)
 // in the IAM User Guide.
 //
 // # Tags
@@ -588,11 +589,12 @@ func (c *STS) AssumeRoleWithWebIdentityRequest(input *AssumeRoleWithWebIdentityI
 // and additional limits, see IAM and STS Character Limits (https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-limits.html#reference_iam-limits-entity-length)
 // in the IAM User Guide.
 //
-// An Amazon Web Services conversion compresses the passed session policies
+// An Amazon Web Services conversion compresses the passed inline session policy,
-// and session tags into a packed binary format that has a separate limit. Your
+// managed policy ARNs, and session tags into a packed binary format that has
-// request can fail for this limit even if your plaintext meets the other requirements.
+// a separate limit. Your request can fail for this limit even if your plaintext
-// The PackedPolicySize response element indicates by percentage how close the
+// meets the other requirements. The PackedPolicySize response element indicates
-// policies and tags for your request are to the upper size limit.
+// by percentage how close the policies and tags for your request are to the
+// upper size limit.
 //
 // You can pass a session tag with the same key as a tag that is attached to
 // the role. When you do, the session tag overrides the role tag with the same
@@ -1110,9 +1112,9 @@ func (c *STS) GetFederationTokenRequest(input *GetFederationTokenInput) (req *re
 //
 // You must pass an inline or managed session policy (https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html#policies_session)
 // to this operation. You can pass a single JSON policy document to use as an
-// inline session policy. You can also specify up to 10 managed policies to
+// inline session policy. You can also specify up to 10 managed policy Amazon
-// use as managed session policies. The plaintext that you use for both inline
+// Resource Names (ARNs) to use as managed session policies. The plaintext that
-// and managed session policies can't exceed 2,048 characters.
+// you use for both inline and managed session policies can't exceed 2,048 characters.
 //
 // Though the session policy parameters are optional, if you do not pass a policy,
 // then the resulting federated user session has no permissions. When you pass
@@ -1424,11 +1426,12 @@ type AssumeRoleInput struct {
 	// \u00FF). It can also include the tab (\u0009), linefeed (\u000A), and carriage
 	// return (\u000D) characters.
 	//
-	// An Amazon Web Services conversion compresses the passed session policies
+	// An Amazon Web Services conversion compresses the passed inline session policy,
-	// and session tags into a packed binary format that has a separate limit. Your
+	// managed policy ARNs, and session tags into a packed binary format that has
-	// request can fail for this limit even if your plaintext meets the other requirements.
+	// a separate limit. Your request can fail for this limit even if your plaintext
-	// The PackedPolicySize response element indicates by percentage how close the
+	// meets the other requirements. The PackedPolicySize response element indicates
-	// policies and tags for your request are to the upper size limit.
+	// by percentage how close the policies and tags for your request are to the
+	// upper size limit.
 	Policy *string `min:"1" type:"string"`
 
 	// The Amazon Resource Names (ARNs) of the IAM managed policies that you want
@@ -1441,11 +1444,12 @@ type AssumeRoleInput struct {
 	// Resource Names (ARNs) and Amazon Web Services Service Namespaces (https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html)
 	// in the Amazon Web Services General Reference.
 	//
-	// An Amazon Web Services conversion compresses the passed session policies
+	// An Amazon Web Services conversion compresses the passed inline session policy,
-	// and session tags into a packed binary format that has a separate limit. Your
+	// managed policy ARNs, and session tags into a packed binary format that has
-	// request can fail for this limit even if your plaintext meets the other requirements.
+	// a separate limit. Your request can fail for this limit even if your plaintext
-	// The PackedPolicySize response element indicates by percentage how close the
+	// meets the other requirements. The PackedPolicySize response element indicates
-	// policies and tags for your request are to the upper size limit.
+	// by percentage how close the policies and tags for your request are to the
+	// upper size limit.
 	//
 	// Passing policies to this operation returns new temporary credentials. The
 	// resulting session's permissions are the intersection of the role's identity-based
@@ -1520,11 +1524,12 @@ type AssumeRoleInput struct {
 	// Limits (https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-limits.html#reference_iam-limits-entity-length)
 	// in the IAM User Guide.
 	//
-	// An Amazon Web Services conversion compresses the passed session policies
+	// An Amazon Web Services conversion compresses the passed inline session policy,
-	// and session tags into a packed binary format that has a separate limit. Your
+	// managed policy ARNs, and session tags into a packed binary format that has
-	// request can fail for this limit even if your plaintext meets the other requirements.
+	// a separate limit. Your request can fail for this limit even if your plaintext
-	// The PackedPolicySize response element indicates by percentage how close the
+	// meets the other requirements. The PackedPolicySize response element indicates
-	// policies and tags for your request are to the upper size limit.
+	// by percentage how close the policies and tags for your request are to the
+	// upper size limit.
 	//
 	// You can pass a session tag with the same key as a tag that is already attached
 	// to the role. When you do, session tags override a role tag with the same
@@ -1843,11 +1848,12 @@ type AssumeRoleWithSAMLInput struct {
 	// \u00FF). It can also include the tab (\u0009), linefeed (\u000A), and carriage
 	// return (\u000D) characters.
 	//
-	// An Amazon Web Services conversion compresses the passed session policies
+	// An Amazon Web Services conversion compresses the passed inline session policy,
-	// and session tags into a packed binary format that has a separate limit. Your
+	// managed policy ARNs, and session tags into a packed binary format that has
-	// request can fail for this limit even if your plaintext meets the other requirements.
+	// a separate limit. Your request can fail for this limit even if your plaintext
-	// The PackedPolicySize response element indicates by percentage how close the
+	// meets the other requirements. The PackedPolicySize response element indicates
-	// policies and tags for your request are to the upper size limit.
+	// by percentage how close the policies and tags for your request are to the
+	// upper size limit.
 	Policy *string `min:"1" type:"string"`
 
 	// The Amazon Resource Names (ARNs) of the IAM managed policies that you want
@@ -1860,11 +1866,12 @@ type AssumeRoleWithSAMLInput struct {
 	// Resource Names (ARNs) and Amazon Web Services Service Namespaces (https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html)
 	// in the Amazon Web Services General Reference.
 	//
-	// An Amazon Web Services conversion compresses the passed session policies
+	// An Amazon Web Services conversion compresses the passed inline session policy,
-	// and session tags into a packed binary format that has a separate limit. Your
+	// managed policy ARNs, and session tags into a packed binary format that has
-	// request can fail for this limit even if your plaintext meets the other requirements.
+	// a separate limit. Your request can fail for this limit even if your plaintext
-	// The PackedPolicySize response element indicates by percentage how close the
+	// meets the other requirements. The PackedPolicySize response element indicates
-	// policies and tags for your request are to the upper size limit.
+	// by percentage how close the policies and tags for your request are to the
+	// upper size limit.
 	//
 	// Passing policies to this operation returns new temporary credentials. The
 	// resulting session's permissions are the intersection of the role's identity-based
@@ -2190,11 +2197,12 @@ type AssumeRoleWithWebIdentityInput struct {
 	// \u00FF). It can also include the tab (\u0009), linefeed (\u000A), and carriage
 	// return (\u000D) characters.
 	//
-	// An Amazon Web Services conversion compresses the passed session policies
+	// An Amazon Web Services conversion compresses the passed inline session policy,
-	// and session tags into a packed binary format that has a separate limit. Your
+	// managed policy ARNs, and session tags into a packed binary format that has
-	// request can fail for this limit even if your plaintext meets the other requirements.
+	// a separate limit. Your request can fail for this limit even if your plaintext
-	// The PackedPolicySize response element indicates by percentage how close the
+	// meets the other requirements. The PackedPolicySize response element indicates
-	// policies and tags for your request are to the upper size limit.
+	// by percentage how close the policies and tags for your request are to the
+	// upper size limit.
 	Policy *string `min:"1" type:"string"`
 
 	// The Amazon Resource Names (ARNs) of the IAM managed policies that you want
@@ -2207,11 +2215,12 @@ type AssumeRoleWithWebIdentityInput struct {
 	// Resource Names (ARNs) and Amazon Web Services Service Namespaces (https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html)
 	// in the Amazon Web Services General Reference.
 	//
-	// An Amazon Web Services conversion compresses the passed session policies
+	// An Amazon Web Services conversion compresses the passed inline session policy,
-	// and session tags into a packed binary format that has a separate limit. Your
+	// managed policy ARNs, and session tags into a packed binary format that has
-	// request can fail for this limit even if your plaintext meets the other requirements.
+	// a separate limit. Your request can fail for this limit even if your plaintext
-	// The PackedPolicySize response element indicates by percentage how close the
+	// meets the other requirements. The PackedPolicySize response element indicates
-	// policies and tags for your request are to the upper size limit.
+	// by percentage how close the policies and tags for your request are to the
+	// upper size limit.
 	//
 	// Passing policies to this operation returns new temporary credentials. The
 	// resulting session's permissions are the intersection of the role's identity-based
@@ -2934,8 +2943,8 @@ type GetFederationTokenInput struct {
 	//
 	// You must pass an inline or managed session policy (https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html#policies_session)
 	// to this operation. You can pass a single JSON policy document to use as an
-	// inline session policy. You can also specify up to 10 managed policies to
+	// inline session policy. You can also specify up to 10 managed policy Amazon
-	// use as managed session policies.
+	// Resource Names (ARNs) to use as managed session policies.
 	//
 	// This parameter is optional. However, if you do not pass any session policies,
 	// then the resulting federated user session has no permissions.
@@ -2960,11 +2969,12 @@ type GetFederationTokenInput struct {
 	// \u00FF). It can also include the tab (\u0009), linefeed (\u000A), and carriage
 	// return (\u000D) characters.
 	//
-	// An Amazon Web Services conversion compresses the passed session policies
+	// An Amazon Web Services conversion compresses the passed inline session policy,
-	// and session tags into a packed binary format that has a separate limit. Your
+	// managed policy ARNs, and session tags into a packed binary format that has
-	// request can fail for this limit even if your plaintext meets the other requirements.
+	// a separate limit. Your request can fail for this limit even if your plaintext
-	// The PackedPolicySize response element indicates by percentage how close the
+	// meets the other requirements. The PackedPolicySize response element indicates
-	// policies and tags for your request are to the upper size limit.
+	// by percentage how close the policies and tags for your request are to the
+	// upper size limit.
 	Policy *string `min:"1" type:"string"`
 
 	// The Amazon Resource Names (ARNs) of the IAM managed policies that you want
@@ -2973,11 +2983,12 @@ type GetFederationTokenInput struct {
 	//
 	// You must pass an inline or managed session policy (https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies.html#policies_session)
 	// to this operation. You can pass a single JSON policy document to use as an
-	// inline session policy. You can also specify up to 10 managed policies to
+	// inline session policy. You can also specify up to 10 managed policy Amazon
-	// use as managed session policies. The plaintext that you use for both inline
+	// Resource Names (ARNs) to use as managed session policies. The plaintext that
-	// and managed session policies can't exceed 2,048 characters. You can provide
+	// you use for both inline and managed session policies can't exceed 2,048 characters.
-	// up to 10 managed policy ARNs. For more information about ARNs, see Amazon
+	// You can provide up to 10 managed policy ARNs. For more information about
-	// Resource Names (ARNs) and Amazon Web Services Service Namespaces (https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html)
+	// ARNs, see Amazon Resource Names (ARNs) and Amazon Web Services Service Namespaces
+	// (https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html)
 	// in the Amazon Web Services General Reference.
 	//
 	// This parameter is optional. However, if you do not pass any session policies,
@@ -2997,11 +3008,12 @@ type GetFederationTokenInput struct {
 	// by the policy. These permissions are granted in addition to the permissions
 	// that are granted by the session policies.
 	//
-	// An Amazon Web Services conversion compresses the passed session policies
+	// An Amazon Web Services conversion compresses the passed inline session policy,
-	// and session tags into a packed binary format that has a separate limit. Your
+	// managed policy ARNs, and session tags into a packed binary format that has
-	// request can fail for this limit even if your plaintext meets the other requirements.
+	// a separate limit. Your request can fail for this limit even if your plaintext
-	// The PackedPolicySize response element indicates by percentage how close the
+	// meets the other requirements. The PackedPolicySize response element indicates
-	// policies and tags for your request are to the upper size limit.
+	// by percentage how close the policies and tags for your request are to the
+	// upper size limit.
 	PolicyArns []*PolicyDescriptorType `type:"list"`
 
 	// A list of session tags. Each session tag consists of a key name and an associated
@@ -3015,11 +3027,12 @@ type GetFederationTokenInput struct {
 	// Limits (https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-limits.html#reference_iam-limits-entity-length)
 	// in the IAM User Guide.
 	//
-	// An Amazon Web Services conversion compresses the passed session policies
+	// An Amazon Web Services conversion compresses the passed inline session policy,
-	// and session tags into a packed binary format that has a separate limit. Your
+	// managed policy ARNs, and session tags into a packed binary format that has
-	// request can fail for this limit even if your plaintext meets the other requirements.
+	// a separate limit. Your request can fail for this limit even if your plaintext
-	// The PackedPolicySize response element indicates by percentage how close the
+	// meets the other requirements. The PackedPolicySize response element indicates
-	// policies and tags for your request are to the upper size limit.
+	// by percentage how close the policies and tags for your request are to the
+	// upper size limit.
 	//
 	// You can pass a session tag with the same key as a tag that is already attached
 	// to the user you are federating. When you do, session tags override a user

vendor/modules.txt

@@ -14,7 +14,7 @@ github.com/armon/go-metrics
 # github.com/armon/go-radix v1.0.0
 ## explicit
 github.com/armon/go-radix
-# github.com/aws/aws-sdk-go v1.44.132
+# github.com/aws/aws-sdk-go v1.44.143
 ## explicit; go 1.11
 github.com/aws/aws-sdk-go/aws
 github.com/aws/aws-sdk-go/aws/awserr