rebase: bump github.com/aws/aws-sdk-go from 1.44.82 to 1.44.96

Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) from 1.44.82 to 1.44.96.
- [Release notes](https://github.com/aws/aws-sdk-go/releases)
- [Changelog](https://github.com/aws/aws-sdk-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-go/compare/v1.44.82...v1.44.96)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

go.mod

@@ -4,7 +4,7 @@ go 1.17
 
 require (
 	github.com/IBM/keyprotect-go-client v0.8.0
-	github.com/aws/aws-sdk-go v1.44.82
+	github.com/aws/aws-sdk-go v1.44.96
 	github.com/aws/aws-sdk-go-v2/service/sts v1.16.13
 	github.com/ceph/ceph-csi/api v0.0.0-00010101000000-000000000000
 	// TODO: API for managing subvolume metadata and snapshot metadata requires `ceph_ci_untested` build-tag

go.sum

@@ -160,8 +160,8 @@ github.com/aws/aws-sdk-go v1.25.41/go.mod h1:KmX6BPdI08NWTb3/sm4ZGu5ShLoqVDhKgpi
 github.com/aws/aws-sdk-go v1.35.24/go.mod h1:tlPOdRjfxPBpNIwqDj61rmsnA85v9jc0Ps9+muhnW+k=
 github.com/aws/aws-sdk-go v1.38.49/go.mod h1:hcU610XS61/+aQV88ixoOzUoG7v3b31pl2zKMmprdro=
 github.com/aws/aws-sdk-go v1.44.67/go.mod h1:y4AeaBuwd2Lk+GepC1E9v0qOiTws0MIWAX4oIKwKHZo=
-github.com/aws/aws-sdk-go v1.44.82 h1:Miji7nHIMxTWfa831nZf8XAcMWGLaT+PvsS6CdbMG7M=
+github.com/aws/aws-sdk-go v1.44.96 h1:S9paaqnJ0AJ95t5AB+iK8RM6YNZN0W0Lek1gOVJsEr8=
-github.com/aws/aws-sdk-go v1.44.82/go.mod h1:y4AeaBuwd2Lk+GepC1E9v0qOiTws0MIWAX4oIKwKHZo=
+github.com/aws/aws-sdk-go v1.44.96/go.mod h1:y4AeaBuwd2Lk+GepC1E9v0qOiTws0MIWAX4oIKwKHZo=
 github.com/aws/aws-sdk-go-v2 v1.16.11 h1:xM1ZPSvty3xVmdxiGr7ay/wlqv+MWhH0rMlyLdbC0YQ=
 github.com/aws/aws-sdk-go-v2 v1.16.11/go.mod h1:WTACcleLz6VZTp7fak4EO5b9Q4foxbn+8PIz3PmyKlo=
 github.com/aws/aws-sdk-go-v2/internal/configsources v1.1.18 h1:OmiwoVyLKEqqD5GvB683dbSqxiOfvx4U2lDZhG2Esc4=

vendor/github.com/aws/aws-sdk-go/aws/version.go

@@ -5,4 +5,4 @@ package aws
 const SDKName = "aws-sdk-go"
 
 // SDKVersion is the version of this SDK
-const SDKVersion = "1.44.82"
+const SDKVersion = "1.44.96"

vendor/github.com/aws/aws-sdk-go/service/ec2/api.go

@@ -2182,9 +2182,8 @@ func (c *EC2) AttachClassicLinkVpcRequest(input *AttachClassicLinkVpcInput) (req
 
 // AttachClassicLinkVpc API operation for Amazon Elastic Compute Cloud.
 //
-// We are retiring EC2-Classic on August 15, 2022. We recommend that you migrate
+// We are retiring EC2-Classic. We recommend that you migrate from EC2-Classic
-// from EC2-Classic to a VPC. For more information, see Migrate from EC2-Classic
+// to a VPC. For more information, see Migrate from EC2-Classic to a VPC (https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/vpc-migrate.html)
-// to a VPC (https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/vpc-migrate.html)
 // in the Amazon Elastic Compute Cloud User Guide.
 //
 // Links an EC2-Classic instance to a ClassicLink-enabled VPC through one or
@@ -4553,9 +4552,8 @@ func (c *EC2) CreateDefaultVpcRequest(input *CreateDefaultVpcInput) (req *reques
 // VPC in a Region that supports EC2-Classic, see "I really want a default VPC
 // for my existing EC2 account. Is that possible?" in the Default VPCs FAQ (http://aws.amazon.com/vpc/faqs/#Default_VPCs).
 //
-// We are retiring EC2-Classic on August 15, 2022. We recommend that you migrate
+// We are retiring EC2-Classic. We recommend that you migrate from EC2-Classic
-// from EC2-Classic to a VPC. For more information, see Migrate from EC2-Classic
+// to a VPC. For more information, see Migrate from EC2-Classic to a VPC (https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/vpc-migrate.html)
-// to a VPC (https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/vpc-migrate.html)
 // in the Amazon Elastic Compute Cloud User Guide.
 //
 // Returns awserr.Error for service API and SDK errors. Use runtime type assertions
@@ -16412,9 +16410,8 @@ func (c *EC2) DescribeClassicLinkInstancesRequest(input *DescribeClassicLinkInst
 // ClassicLink. You cannot use this request to return information about other
 // instances.
 //
-// We are retiring EC2-Classic on August 15, 2022. We recommend that you migrate
+// We are retiring EC2-Classic. We recommend that you migrate from EC2-Classic
-// from EC2-Classic to a VPC. For more information, see Migrate from EC2-Classic
+// to a VPC. For more information, see Migrate from EC2-Classic to a VPC (https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/vpc-migrate.html)
-// to a VPC (https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/vpc-migrate.html)
 // in the Amazon Elastic Compute Cloud User Guide.
 //
 // Returns awserr.Error for service API and SDK errors. Use runtime type assertions
@@ -18571,9 +18568,11 @@ func (c *EC2) DescribeFlowLogsRequest(input *DescribeFlowLogsInput) (req *reques
 
 // DescribeFlowLogs API operation for Amazon Elastic Compute Cloud.
 //
-// Describes one or more flow logs. To view the information in your flow logs
+// Describes one or more flow logs.
-// (the log streams for the network interfaces), you must use the CloudWatch
+//
-// Logs console or the CloudWatch Logs API.
+// To view the published flow log records, you must view the log destination.
+// For example, the CloudWatch Logs log group, the Amazon S3 bucket, or the
+// Kinesis Data Firehose delivery stream.
 //
 // Returns awserr.Error for service API and SDK errors. Use runtime type assertions
 // with awserr.Error's Code and Message methods to get detailed information about
@@ -30128,9 +30127,8 @@ func (c *EC2) DescribeVpcClassicLinkRequest(input *DescribeVpcClassicLinkInput)
 //
 // Describes the ClassicLink status of one or more VPCs.
 //
-// We are retiring EC2-Classic on August 15, 2022. We recommend that you migrate
+// We are retiring EC2-Classic. We recommend that you migrate from EC2-Classic
-// from EC2-Classic to a VPC. For more information, see Migrate from EC2-Classic
+// to a VPC. For more information, see Migrate from EC2-Classic to a VPC (https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/vpc-migrate.html)
-// to a VPC (https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/vpc-migrate.html)
 // in the Amazon Elastic Compute Cloud User Guide.
 //
 // Returns awserr.Error for service API and SDK errors. Use runtime type assertions
@@ -30210,9 +30208,8 @@ func (c *EC2) DescribeVpcClassicLinkDnsSupportRequest(input *DescribeVpcClassicL
 
 // DescribeVpcClassicLinkDnsSupport API operation for Amazon Elastic Compute Cloud.
 //
-// We are retiring EC2-Classic on August 15, 2022. We recommend that you migrate
+// We are retiring EC2-Classic. We recommend that you migrate from EC2-Classic
-// from EC2-Classic to a VPC. For more information, see Migrate from EC2-Classic
+// to a VPC. For more information, see Migrate from EC2-Classic to a VPC (https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/vpc-migrate.html)
-// to a VPC (https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/vpc-migrate.html)
 // in the Amazon Elastic Compute Cloud User Guide.
 //
 // Describes the ClassicLink DNS support status of one or more VPCs. If enabled,
@@ -31490,9 +31487,8 @@ func (c *EC2) DetachClassicLinkVpcRequest(input *DetachClassicLinkVpcInput) (req
 
 // DetachClassicLinkVpc API operation for Amazon Elastic Compute Cloud.
 //
-// We are retiring EC2-Classic on August 15, 2022. We recommend that you migrate
+// We are retiring EC2-Classic. We recommend that you migrate from EC2-Classic
-// from EC2-Classic to a VPC. For more information, see Migrate from EC2-Classic
+// to a VPC. For more information, see Migrate from EC2-Classic to a VPC (https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/vpc-migrate.html)
-// to a VPC (https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/vpc-migrate.html)
 // in the Amazon Elastic Compute Cloud User Guide.
 //
 // Unlinks (detaches) a linked EC2-Classic instance from a VPC. After the instance
@@ -32501,9 +32497,8 @@ func (c *EC2) DisableVpcClassicLinkRequest(input *DisableVpcClassicLinkInput) (r
 // Disables ClassicLink for a VPC. You cannot disable ClassicLink for a VPC
 // that has EC2-Classic instances linked to it.
 //
-// We are retiring EC2-Classic on August 15, 2022. We recommend that you migrate
+// We are retiring EC2-Classic. We recommend that you migrate from EC2-Classic
-// from EC2-Classic to a VPC. For more information, see Migrate from EC2-Classic
+// to a VPC. For more information, see Migrate from EC2-Classic to a VPC (https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/vpc-migrate.html)
-// to a VPC (https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/vpc-migrate.html)
 // in the Amazon Elastic Compute Cloud User Guide.
 //
 // Returns awserr.Error for service API and SDK errors. Use runtime type assertions
@@ -32585,9 +32580,8 @@ func (c *EC2) DisableVpcClassicLinkDnsSupportRequest(input *DisableVpcClassicLin
 //
 // You must specify a VPC ID in the request.
 //
-// We are retiring EC2-Classic on August 15, 2022. We recommend that you migrate
+// We are retiring EC2-Classic. We recommend that you migrate from EC2-Classic
-// from EC2-Classic to a VPC. For more information, see Migrate from EC2-Classic
+// to a VPC. For more information, see Migrate from EC2-Classic to a VPC (https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/vpc-migrate.html)
-// to a VPC (https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/vpc-migrate.html)
 // in the Amazon Elastic Compute Cloud User Guide.
 //
 // Returns awserr.Error for service API and SDK errors. Use runtime type assertions
@@ -34292,9 +34286,8 @@ func (c *EC2) EnableVpcClassicLinkRequest(input *EnableVpcClassicLinkInput) (req
 
 // EnableVpcClassicLink API operation for Amazon Elastic Compute Cloud.
 //
-// We are retiring EC2-Classic on August 15, 2022. We recommend that you migrate
+// We are retiring EC2-Classic. We recommend that you migrate from EC2-Classic
-// from EC2-Classic to a VPC. For more information, see Migrate from EC2-Classic
+// to a VPC. For more information, see Migrate from EC2-Classic to a VPC (https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/vpc-migrate.html)
-// to a VPC (https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/vpc-migrate.html)
 // in the Amazon Elastic Compute Cloud User Guide.
 //
 // Enables a VPC for ClassicLink. You can then link EC2-Classic instances to
@@ -34376,9 +34369,8 @@ func (c *EC2) EnableVpcClassicLinkDnsSupportRequest(input *EnableVpcClassicLinkD
 
 // EnableVpcClassicLinkDnsSupport API operation for Amazon Elastic Compute Cloud.
 //
-// We are retiring EC2-Classic on August 15, 2022. We recommend that you migrate
+// We are retiring EC2-Classic. We recommend that you migrate from EC2-Classic
-// from EC2-Classic to a VPC. For more information, see Migrate from EC2-Classic
+// to a VPC. For more information, see Migrate from EC2-Classic to a VPC (https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/vpc-migrate.html)
-// to a VPC (https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/vpc-migrate.html)
 // in the Amazon Elastic Compute Cloud User Guide.
 //
 // Enables a VPC to support DNS hostname resolution for ClassicLink. If enabled,
@@ -43261,9 +43253,8 @@ func (c *EC2) ModifyVpcPeeringConnectionOptionsRequest(input *ModifyVpcPeeringCo
 
 // ModifyVpcPeeringConnectionOptions API operation for Amazon Elastic Compute Cloud.
 //
-// We are retiring EC2-Classic on August 15, 2022. We recommend that you migrate
+// We are retiring EC2-Classic. We recommend that you migrate from EC2-Classic
-// from EC2-Classic to a VPC. For more information, see Migrate from EC2-Classic
+// to a VPC. For more information, see Migrate from EC2-Classic to a VPC (https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/vpc-migrate.html)
-// to a VPC (https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/vpc-migrate.html)
 // in the Amazon Elastic Compute Cloud User Guide.
 //
 // Modifies the VPC peering connection options on one side of a VPC peering
@@ -58074,9 +58065,8 @@ func (s *ClassicLinkDnsSupport) SetVpcId(v string) *ClassicLinkDnsSupport {
 	return s
 }
 
-// We are retiring EC2-Classic on August 15, 2022. We recommend that you migrate
+// We are retiring EC2-Classic. We recommend that you migrate from EC2-Classic
-// from EC2-Classic to a VPC. For more information, see Migrate from EC2-Classic
+// to a VPC. For more information, see Migrate from EC2-Classic to a VPC (https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/vpc-migrate.html)
-// to a VPC (https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/vpc-migrate.html)
 // in the Amazon Elastic Compute Cloud User Guide.
 //
 // Describes a linked EC2-Classic instance.
@@ -62689,11 +62679,15 @@ type CreateFlowLogsInput struct {
 	// of the request. For more information, see How to ensure idempotency (https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Run_Instance_Idempotency.html).
 	ClientToken *string `type:"string"`
 
-	// The ARN for the IAM role that permits Amazon EC2 to publish flow logs to
+	// The ARN of the IAM role that allows Amazon EC2 to publish flow logs across
-	// a CloudWatch Logs log group in your account.
+	// accounts.
+	DeliverCrossAccountRole *string `type:"string"`
+
+	// The ARN of the IAM role that allows Amazon EC2 to publish flow logs to a
+	// CloudWatch Logs log group in your account.
 	//
-	// If you specify LogDestinationType as s3, do not specify DeliverLogsPermissionArn
+	// This parameter is required if the destination type is cloud-watch-logs and
-	// or LogGroupName.
+	// unsupported otherwise.
 	DeliverLogsPermissionArn *string `type:"string"`
 
 	// The destination options.
@@ -62705,38 +62699,31 @@ type CreateFlowLogsInput struct {
 	// it is UnauthorizedOperation.
 	DryRun *bool `type:"boolean"`
 
-	// The destination to which the flow log data is to be published. Flow log data
+	// The destination for the flow log data. The meaning of this parameter depends
-	// can be published to a CloudWatch Logs log group or an Amazon S3 bucket. The
+	// on the destination type.
-	// value specified for this parameter depends on the value specified for LogDestinationType.
 	//
-	// If LogDestinationType is not specified or cloud-watch-logs, specify the Amazon
+	//    * If the destination type is cloud-watch-logs, specify the ARN of a CloudWatch
-	// Resource Name (ARN) of the CloudWatch Logs log group. For example, to publish
+	//    Logs log group. For example: arn:aws:logs:region:account_id:log-group:my_group
-	// to a log group called my-logs, specify arn:aws:logs:us-east-1:123456789012:log-group:my-logs.
+	//    Alternatively, use the LogGroupName parameter.
-	// Alternatively, use LogGroupName instead.
 	//
-	// If LogDestinationType is s3, specify the ARN of the Amazon S3 bucket. You
+	//    * If the destination type is s3, specify the ARN of an S3 bucket. For
-	// can also specify a subfolder in the bucket. To specify a subfolder in the
+	//    example: arn:aws:s3:::my_bucket/my_subfolder/ The subfolder is optional.
-	// bucket, use the following ARN format: bucket_ARN/subfolder_name/. For example,
+	//    Note that you can't use AWSLogs as a subfolder name.
-	// to specify a subfolder named my-logs in a bucket named my-bucket, use the
+	//
-	// following ARN: arn:aws:s3:::my-bucket/my-logs/. You cannot use AWSLogs as
+	//    * If the destination type is kinesis-data-firehose, specify the ARN of
-	// a subfolder name. This is a reserved term.
+	//    a Kinesis Data Firehose delivery stream. For example: arn:aws:firehose:region:account_id:deliverystream:my_stream
 	LogDestination *string `type:"string"`
 
-	// The type of destination to which the flow log data is to be published. Flow
+	// The type of destination for the flow log data.
-	// log data can be published to CloudWatch Logs or Amazon S3. To publish flow
-	// log data to CloudWatch Logs, specify cloud-watch-logs. To publish flow log
-	// data to Amazon S3, specify s3.
-	//
-	// If you specify LogDestinationType as s3, do not specify DeliverLogsPermissionArn
-	// or LogGroupName.
 	//
 	// Default: cloud-watch-logs
 	LogDestinationType *string `type:"string" enum:"LogDestinationType"`
 
-	// The fields to include in the flow log record, in the order in which they
+	// The fields to include in the flow log record. List the fields in the order
-	// should appear. For a list of available fields, see Flow log records (https://docs.aws.amazon.com/vpc/latest/userguide/flow-logs.html#flow-log-records).
+	// in which they should appear. For more information about the available fields,
+	// see Flow log records (https://docs.aws.amazon.com/vpc/latest/userguide/flow-logs.html#flow-log-records).
 	// If you omit this parameter, the flow log is created using the default format.
-	// If you specify this parameter, you must specify at least one field.
+	// If you specify this parameter, you must include at least one field.
 	//
 	// Specify the fields using the ${field-id} format, separated by spaces. For
 	// the CLI, surround this parameter value with single quotes on Linux or double
@@ -62746,8 +62733,7 @@ type CreateFlowLogsInput struct {
 	// The name of a new or existing CloudWatch Logs log group where Amazon EC2
 	// publishes your flow logs.
 	//
-	// If you specify LogDestinationType as s3, do not specify DeliverLogsPermissionArn
+	// This parameter is valid only if the destination type is cloud-watch-logs.
-	// or LogGroupName.
 	LogGroupName *string `type:"string"`
 
 	// The maximum interval of time during which a flow of packets is captured and
@@ -62761,16 +62747,15 @@ type CreateFlowLogsInput struct {
 	// Default: 600
 	MaxAggregationInterval *int64 `type:"integer"`
 
-	// The ID of the subnet, network interface, or VPC for which you want to create
+	// The IDs of the resources to monitor. For example, if the resource type is
-	// a flow log.
+	// VPC, specify the IDs of the VPCs.
 	//
 	// Constraints: Maximum of 1000 resources
 	//
 	// ResourceIds is a required field
 	ResourceIds []*string `locationName:"ResourceId" locationNameList:"item" type:"list" required:"true"`
 
-	// The type of resource for which to create the flow log. For example, if you
+	// The type of resource to monitor.
-	// specified a VPC ID for the ResourceId property, specify VPC for this property.
 	//
 	// ResourceType is a required field
 	ResourceType *string `type:"string" required:"true" enum:"FlowLogsResourceType"`
@@ -62778,8 +62763,8 @@ type CreateFlowLogsInput struct {
 	// The tags to apply to the flow logs.
 	TagSpecifications []*TagSpecification `locationName:"TagSpecification" locationNameList:"item" type:"list"`
 
-	// The type of traffic to log. You can log traffic that the resource accepts
+	// The type of traffic to monitor (accepted traffic, rejected traffic, or all
-	// or rejects, or all traffic.
+	// traffic).
 	TrafficType *string `type:"string" enum:"TrafficType"`
 }
 
@@ -62823,6 +62808,12 @@ func (s *CreateFlowLogsInput) SetClientToken(v string) *CreateFlowLogsInput {
 	return s
 }
 
+// SetDeliverCrossAccountRole sets the DeliverCrossAccountRole field's value.
+func (s *CreateFlowLogsInput) SetDeliverCrossAccountRole(v string) *CreateFlowLogsInput {
+	s.DeliverCrossAccountRole = &v
+	return s
+}
+
 // SetDeliverLogsPermissionArn sets the DeliverLogsPermissionArn field's value.
 func (s *CreateFlowLogsInput) SetDeliverLogsPermissionArn(v string) *CreateFlowLogsInput {
 	s.DeliverLogsPermissionArn = &v
@@ -82579,9 +82570,8 @@ type DescribeFlowLogsInput struct {
 	//
 	//    * deliver-log-status - The status of the logs delivery (SUCCESS | FAILED).
 	//
-	//    * log-destination-type - The type of destination to which the flow log
+	//    * log-destination-type - The type of destination for the flow log data
-	//    publishes data. Possible destination types include cloud-watch-logs and
+	//    (cloud-watch-logs | s3 | kinesis-data-firehose).
-	//    s3.
 	//
 	//    * flow-log-id - The ID of the flow log.
 	//
@@ -106776,6 +106766,10 @@ type FlowLog struct {
 	// The date and time the flow log was created.
 	CreationTime *time.Time `locationName:"creationTime" type:"timestamp"`
 
+	// The ARN of the IAM role that allows the service to publish flow logs across
+	// accounts.
+	DeliverCrossAccountRole *string `locationName:"deliverCrossAccountRole" type:"string"`
+
 	// Information about the error that occurred. Rate limited indicates that CloudWatch
 	// Logs throttling has been applied for one or more network interfaces, or that
 	// you've reached the limit on the number of log groups that you can create.
@@ -106784,7 +106778,8 @@ type FlowLog struct {
 	// indicates an internal error.
 	DeliverLogsErrorMessage *string `locationName:"deliverLogsErrorMessage" type:"string"`
 
-	// The ARN of the IAM role that posts logs to CloudWatch Logs.
+	// The ARN of the IAM role allows the service to publish logs to CloudWatch
+	// Logs.
 	DeliverLogsPermissionArn *string `locationName:"deliverLogsPermissionArn" type:"string"`
 
 	// The status of the logs delivery (SUCCESS | FAILED).
@@ -106793,22 +106788,16 @@ type FlowLog struct {
 	// The destination options.
 	DestinationOptions *DestinationOptionsResponse `locationName:"destinationOptions" type:"structure"`
 
-	// The flow log ID.
+	// The ID of the flow log.
 	FlowLogId *string `locationName:"flowLogId" type:"string"`
 
 	// The status of the flow log (ACTIVE).
 	FlowLogStatus *string `locationName:"flowLogStatus" type:"string"`
 
-	// The destination to which the flow log data is published. Flow log data can
+	// The Amazon Resource Name (ARN) of the destination for the flow log data.
-	// be published to an CloudWatch Logs log group or an Amazon S3 bucket. If the
-	// flow log publishes to CloudWatch Logs, this element indicates the Amazon
-	// Resource Name (ARN) of the CloudWatch Logs log group to which the data is
-	// published. If the flow log publishes to Amazon S3, this element indicates
-	// the ARN of the Amazon S3 bucket to which the data is published.
 	LogDestination *string `locationName:"logDestination" type:"string"`
 
-	// The type of destination to which the flow log data is published. Flow log
+	// The type of destination for the flow log data.
-	// data can be published to CloudWatch Logs or Amazon S3.
 	LogDestinationType *string `locationName:"logDestinationType" type:"string" enum:"LogDestinationType"`
 
 	// The format of the flow log record.
@@ -106827,7 +106816,7 @@ type FlowLog struct {
 	// Valid Values: 60 | 600
 	MaxAggregationInterval *int64 `locationName:"maxAggregationInterval" type:"integer"`
 
-	// The ID of the resource on which the flow log was created.
+	// The ID of the resource being monitored.
 	ResourceId *string `locationName:"resourceId" type:"string"`
 
 	// The tags for the flow log.
@@ -106861,6 +106850,12 @@ func (s *FlowLog) SetCreationTime(v time.Time) *FlowLog {
 	return s
 }
 
+// SetDeliverCrossAccountRole sets the DeliverCrossAccountRole field's value.
+func (s *FlowLog) SetDeliverCrossAccountRole(v string) *FlowLog {
+	s.DeliverCrossAccountRole = &v
+	return s
+}
+
 // SetDeliverLogsErrorMessage sets the DeliverLogsErrorMessage field's value.
 func (s *FlowLog) SetDeliverLogsErrorMessage(v string) *FlowLog {
 	s.DeliverLogsErrorMessage = &v
@@ -136995,9 +136990,8 @@ func (s *PeeringAttachmentStatus) SetMessage(v string) *PeeringAttachmentStatus
 	return s
 }
 
-// We are retiring EC2-Classic on August 15, 2022. We recommend that you migrate
+// We are retiring EC2-Classic. We recommend that you migrate from EC2-Classic
-// from EC2-Classic to a VPC. For more information, see Migrate from EC2-Classic
+// to a VPC. For more information, see Migrate from EC2-Classic to a VPC (https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/vpc-migrate.html)
-// to a VPC (https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/vpc-migrate.html)
 // in the Amazon Elastic Compute Cloud User Guide.
 //
 // Describes the VPC peering connection options.
@@ -137053,9 +137047,8 @@ func (s *PeeringConnectionOptions) SetAllowEgressFromLocalVpcToRemoteClassicLink
 	return s
 }
 
-// We are retiring EC2-Classic on August 15, 2022. We recommend that you migrate
+// We are retiring EC2-Classic. We recommend that you migrate from EC2-Classic
-// from EC2-Classic to a VPC. For more information, see Migrate from EC2-Classic
+// to a VPC. For more information, see Migrate from EC2-Classic to a VPC (https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/vpc-migrate.html)
-// to a VPC (https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/vpc-migrate.html)
 // in the Amazon Elastic Compute Cloud User Guide.
 //
 // The VPC peering connection options.
@@ -161962,9 +161955,8 @@ func (s *VpcCidrBlockState) SetStatusMessage(v string) *VpcCidrBlockState {
 	return s
 }
 
-// We are retiring EC2-Classic on August 15, 2022. We recommend that you migrate
+// We are retiring EC2-Classic. We recommend that you migrate from EC2-Classic
-// from EC2-Classic to a VPC. For more information, see Migrate from EC2-Classic
+// to a VPC. For more information, see Migrate from EC2-Classic to a VPC (https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/vpc-migrate.html)
-// to a VPC (https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/vpc-migrate.html)
 // in the Amazon Elastic Compute Cloud User Guide.
 //
 // Describes whether a VPC is enabled for ClassicLink.
@@ -162466,9 +162458,8 @@ func (s *VpcPeeringConnection) SetVpcPeeringConnectionId(v string) *VpcPeeringCo
 	return s
 }
 
-// We are retiring EC2-Classic on August 15, 2022. We recommend that you migrate
+// We are retiring EC2-Classic. We recommend that you migrate from EC2-Classic
-// from EC2-Classic to a VPC. For more information, see Migrate from EC2-Classic
+// to a VPC. For more information, see Migrate from EC2-Classic to a VPC (https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/vpc-migrate.html)
-// to a VPC (https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/vpc-migrate.html)
 // in the Amazon Elastic Compute Cloud User Guide.
 //
 // Describes the VPC peering connection options.
@@ -169439,6 +169430,9 @@ const (
 
 	// LogDestinationTypeS3 is a LogDestinationType enum value
 	LogDestinationTypeS3 = "s3"
+
+	// LogDestinationTypeKinesisDataFirehose is a LogDestinationType enum value
+	LogDestinationTypeKinesisDataFirehose = "kinesis-data-firehose"
 )
 
 // LogDestinationType_Values returns all elements of the LogDestinationType enum
@@ -169446,6 +169440,7 @@ func LogDestinationType_Values() []string {
 	return []string{
 		LogDestinationTypeCloudWatchLogs,
 		LogDestinationTypeS3,
+		LogDestinationTypeKinesisDataFirehose,
 	}
 }
 
@@ -170548,6 +170543,9 @@ const (
 
 	// ResourceTypeVpcEndpointConnectionDeviceType is a ResourceType enum value
 	ResourceTypeVpcEndpointConnectionDeviceType = "vpc-endpoint-connection-device-type"
+
+	// ResourceTypeVpnConnectionDeviceType is a ResourceType enum value
+	ResourceTypeVpnConnectionDeviceType = "vpn-connection-device-type"
 )
 
 // ResourceType_Values returns all elements of the ResourceType enum
@@ -170626,6 +170624,7 @@ func ResourceType_Values() []string {
 		ResourceTypeCapacityReservationFleet,
 		ResourceTypeTrafficMirrorFilterRule,
 		ResourceTypeVpcEndpointConnectionDeviceType,
+		ResourceTypeVpnConnectionDeviceType,
 	}
 }
 

vendor/github.com/aws/aws-sdk-go/service/sso/api.go

@@ -156,8 +156,7 @@ func (c *SSO) ListAccountRolesRequest(input *ListAccountRolesInput) (req *reques
 
 // ListAccountRoles API operation for AWS Single Sign-On.
 //
-// Lists all roles that are assigned to the user for a given Amazon Web Services
+// Lists all roles that are assigned to the user for a given AWS account.
-// account.
 //
 // Returns awserr.Error for service API and SDK errors. Use runtime type assertions
 // with awserr.Error's Code and Message methods to get detailed information about
@@ -306,10 +305,10 @@ func (c *SSO) ListAccountsRequest(input *ListAccountsInput) (req *request.Reques
 
 // ListAccounts API operation for AWS Single Sign-On.
 //
-// Lists all Amazon Web Services accounts assigned to the user. These Amazon
+// Lists all AWS accounts assigned to the user. These AWS accounts are assigned
-// Web Services accounts are assigned by the administrator of the account. For
+// by the administrator of the account. For more information, see Assign User
-// more information, see Assign User Access (https://docs.aws.amazon.com/singlesignon/latest/userguide/useraccess.html#assignusers)
+// Access (https://docs.aws.amazon.com/singlesignon/latest/userguide/useraccess.html#assignusers)
-// in the Amazon Web Services SSO User Guide. This operation returns a paginated
+// in the IAM Identity Center User Guide. This operation returns a paginated
 // response.
 //
 // Returns awserr.Error for service API and SDK errors. Use runtime type assertions
@@ -455,20 +454,20 @@ func (c *SSO) LogoutRequest(input *LogoutInput) (req *request.Request, output *L
 // Logout API operation for AWS Single Sign-On.
 //
 // Removes the locally stored SSO tokens from the client-side cache and sends
-// an API call to the Amazon Web Services SSO service to invalidate the corresponding
+// an API call to the IAM Identity Center service to invalidate the corresponding
-// server-side Amazon Web Services SSO sign in session.
+// server-side IAM Identity Center sign in session.
 //
-// If a user uses Amazon Web Services SSO to access the AWS CLI, the user’s
+// If a user uses IAM Identity Center to access the AWS CLI, the user’s IAM
-// Amazon Web Services SSO sign in session is used to obtain an IAM session,
+// Identity Center sign in session is used to obtain an IAM session, as specified
-// as specified in the corresponding Amazon Web Services SSO permission set.
+// in the corresponding IAM Identity Center permission set. More specifically,
-// More specifically, Amazon Web Services SSO assumes an IAM role in the target
+// IAM Identity Center assumes an IAM role in the target account on behalf of
-// account on behalf of the user, and the corresponding temporary Amazon Web
+// the user, and the corresponding temporary AWS credentials are returned to
-// Services credentials are returned to the client.
+// the client.
 //
 // After user logout, any existing IAM role sessions that were created by using
-// Amazon Web Services SSO permission sets continue based on the duration configured
+// IAM Identity Center permission sets continue based on the duration configured
 // in the permission set. For more information, see User authentications (https://docs.aws.amazon.com/singlesignon/latest/userguide/authconcept.html)
-// in the Amazon Web Services SSO User Guide.
+// in the IAM Identity Center User Guide.
 //
 // Returns awserr.Error for service API and SDK errors. Use runtime type assertions
 // with awserr.Error's Code and Message methods to get detailed information about
@@ -513,20 +512,17 @@ func (c *SSO) LogoutWithContext(ctx aws.Context, input *LogoutInput, opts ...req
 	return out, req.Send()
 }
 
-// Provides information about your Amazon Web Services account.
+// Provides information about your AWS account.
 type AccountInfo struct {
 	_ struct{} `type:"structure"`
 
-	// The identifier of the Amazon Web Services account that is assigned to the
+	// The identifier of the AWS account that is assigned to the user.
-	// user.
 	AccountId *string `locationName:"accountId" type:"string"`
 
-	// The display name of the Amazon Web Services account that is assigned to the
+	// The display name of the AWS account that is assigned to the user.
-	// user.
 	AccountName *string `locationName:"accountName" type:"string"`
 
-	// The email address of the Amazon Web Services account that is assigned to
+	// The email address of the AWS account that is assigned to the user.
-	// the user.
 	EmailAddress *string `locationName:"emailAddress" min:"1" type:"string"`
 }
 
@@ -571,7 +567,7 @@ type GetRoleCredentialsInput struct {
 
 	// The token issued by the CreateToken API call. For more information, see CreateToken
 	// (https://docs.aws.amazon.com/singlesignon/latest/OIDCAPIReference/API_CreateToken.html)
-	// in the Amazon Web Services SSO OIDC API Reference Guide.
+	// in the IAM Identity Center OIDC API Reference Guide.
 	//
 	// AccessToken is a sensitive parameter and its value will be
 	// replaced with "sensitive" in string returned by GetRoleCredentialsInput's
@@ -580,8 +576,7 @@ type GetRoleCredentialsInput struct {
 	// AccessToken is a required field
 	AccessToken *string `location:"header" locationName:"x-amz-sso_bearer_token" type:"string" required:"true" sensitive:"true"`
 
-	// The identifier for the Amazon Web Services account that is assigned to the
+	// The identifier for the AWS account that is assigned to the user.
-	// user.
 	//
 	// AccountId is a required field
 	AccountId *string `location:"querystring" locationName:"account_id" type:"string" required:"true"`
@@ -748,7 +743,7 @@ type ListAccountRolesInput struct {
 
 	// The token issued by the CreateToken API call. For more information, see CreateToken
 	// (https://docs.aws.amazon.com/singlesignon/latest/OIDCAPIReference/API_CreateToken.html)
-	// in the Amazon Web Services SSO OIDC API Reference Guide.
+	// in the IAM Identity Center OIDC API Reference Guide.
 	//
 	// AccessToken is a sensitive parameter and its value will be
 	// replaced with "sensitive" in string returned by ListAccountRolesInput's
@@ -757,8 +752,7 @@ type ListAccountRolesInput struct {
 	// AccessToken is a required field
 	AccessToken *string `location:"header" locationName:"x-amz-sso_bearer_token" type:"string" required:"true" sensitive:"true"`
 
-	// The identifier for the Amazon Web Services account that is assigned to the
+	// The identifier for the AWS account that is assigned to the user.
-	// user.
 	//
 	// AccountId is a required field
 	AccountId *string `location:"querystring" locationName:"account_id" type:"string" required:"true"`
@@ -878,7 +872,7 @@ type ListAccountsInput struct {
 
 	// The token issued by the CreateToken API call. For more information, see CreateToken
 	// (https://docs.aws.amazon.com/singlesignon/latest/OIDCAPIReference/API_CreateToken.html)
-	// in the Amazon Web Services SSO OIDC API Reference Guide.
+	// in the IAM Identity Center OIDC API Reference Guide.
 	//
 	// AccessToken is a sensitive parameter and its value will be
 	// replaced with "sensitive" in string returned by ListAccountsInput's
@@ -993,7 +987,7 @@ type LogoutInput struct {
 
 	// The token issued by the CreateToken API call. For more information, see CreateToken
 	// (https://docs.aws.amazon.com/singlesignon/latest/OIDCAPIReference/API_CreateToken.html)
-	// in the Amazon Web Services SSO OIDC API Reference Guide.
+	// in the IAM Identity Center OIDC API Reference Guide.
 	//
 	// AccessToken is a sensitive parameter and its value will be
 	// replaced with "sensitive" in string returned by LogoutInput's
@@ -1132,18 +1126,17 @@ type RoleCredentials struct {
 	_ struct{} `type:"structure"`
 
 	// The identifier used for the temporary security credentials. For more information,
-	// see Using Temporary Security Credentials to Request Access to Amazon Web
+	// see Using Temporary Security Credentials to Request Access to AWS Resources
-	// Services Resources (https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html)
+	// (https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html)
-	// in the Amazon Web Services IAM User Guide.
+	// in the AWS IAM User Guide.
 	AccessKeyId *string `locationName:"accessKeyId" type:"string"`
 
 	// The date on which temporary security credentials expire.
 	Expiration *int64 `locationName:"expiration" type:"long"`
 
 	// The key that is used to sign the request. For more information, see Using
-	// Temporary Security Credentials to Request Access to Amazon Web Services Resources
+	// Temporary Security Credentials to Request Access to AWS Resources (https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html)
-	// (https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html)
+	// in the AWS IAM User Guide.
-	// in the Amazon Web Services IAM User Guide.
 	//
 	// SecretAccessKey is a sensitive parameter and its value will be
 	// replaced with "sensitive" in string returned by RoleCredentials's
@@ -1151,9 +1144,8 @@ type RoleCredentials struct {
 	SecretAccessKey *string `locationName:"secretAccessKey" type:"string" sensitive:"true"`
 
 	// The token used for temporary credentials. For more information, see Using
-	// Temporary Security Credentials to Request Access to Amazon Web Services Resources
+	// Temporary Security Credentials to Request Access to AWS Resources (https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html)
-	// (https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_use-resources.html)
+	// in the AWS IAM User Guide.
-	// in the Amazon Web Services IAM User Guide.
 	//
 	// SessionToken is a sensitive parameter and its value will be
 	// replaced with "sensitive" in string returned by RoleCredentials's
@@ -1207,7 +1199,7 @@ func (s *RoleCredentials) SetSessionToken(v string) *RoleCredentials {
 type RoleInfo struct {
 	_ struct{} `type:"structure"`
 
-	// The identifier of the Amazon Web Services account assigned to the user.
+	// The identifier of the AWS account assigned to the user.
 	AccountId *string `locationName:"accountId" type:"string"`
 
 	// The friendly name of the role that is assigned to the user.

vendor/github.com/aws/aws-sdk-go/service/sso/doc.go

@@ -3,25 +3,24 @@
 // Package sso provides the client and types for making API
 // requests to AWS Single Sign-On.
 //
-// Amazon Web Services Single Sign On Portal is a web service that makes it
+// AWS IAM Identity Center (successor to AWS Single Sign-On) Portal is a web
-// easy for you to assign user access to Amazon Web Services SSO resources such
+// service that makes it easy for you to assign user access to IAM Identity
-// as the AWS access portal. Users can get Amazon Web Services account applications
+// Center resources such as the AWS access portal. Users can get AWS account
-// and roles assigned to them and get federated into the application.
+// applications and roles assigned to them and get federated into the application.
 //
-// Although Amazon Web Services Single Sign-On was renamed, the sso and identitystore
+// Although AWS Single Sign-On was renamed, the sso and identitystore API namespaces
-// API namespaces will continue to retain their original name for backward compatibility
+// will continue to retain their original name for backward compatibility purposes.
-// purposes. For more information, see Amazon Web Services SSO rename (https://docs.aws.amazon.com/singlesignon/latest/userguide/what-is.html#renamed).
+// For more information, see IAM Identity Center rename (https://docs.aws.amazon.com/singlesignon/latest/userguide/what-is.html#renamed).
 //
-// This reference guide describes the Amazon Web Services SSO Portal operations
+// This reference guide describes the IAM Identity Center Portal operations
 // that you can call programatically and includes detailed information on data
 // types and errors.
 //
-// Amazon Web Services provides SDKs that consist of libraries and sample code
+// AWS provides SDKs that consist of libraries and sample code for various programming
-// for various programming languages and platforms, such as Java, Ruby, .Net,
+// languages and platforms, such as Java, Ruby, .Net, iOS, or Android. The SDKs
-// iOS, or Android. The SDKs provide a convenient way to create programmatic
+// provide a convenient way to create programmatic access to IAM Identity Center
-// access to Amazon Web Services SSO and other Amazon Web Services services.
+// and other AWS services. For more information about the AWS SDKs, including
-// For more information about the Amazon Web Services SDKs, including how to
+// how to download and install them, see Tools for Amazon Web Services (http://aws.amazon.com/tools/).
-// download and install them, see Tools for Amazon Web Services (http://aws.amazon.com/tools/).
 //
 // See https://docs.aws.amazon.com/goto/WebAPI/sso-2019-06-10 for more information on this service.
 //

vendor/modules.txt

@@ -20,7 +20,7 @@ github.com/armon/go-metrics
 # github.com/armon/go-radix v1.0.0
 ## explicit
 github.com/armon/go-radix
-# github.com/aws/aws-sdk-go v1.44.82
+# github.com/aws/aws-sdk-go v1.44.96
 ## explicit; go 1.11
 github.com/aws/aws-sdk-go/aws
 github.com/aws/aws-sdk-go/aws/awserr