vendor: github.com/terraform-providers/terraform-provider-aws@v1.58.0

go.mod

@@ -9,18 +9,13 @@ require (
 	github.com/Unknwon/com v0.0.0-20151008135407-28b053d5a292 // indirect
 	github.com/abdullin/seq v0.0.0-20160510034733-d5467c17e7af // indirect
 	github.com/agext/levenshtein v1.2.1
-	github.com/agl/ed25519 v0.0.0-20150830182803-278e1ec8e8a6 // indirect
 	github.com/antchfx/xpath v0.0.0-20170728053731-b5c552e1acbd // indirect
 	github.com/antchfx/xquery v0.0.0-20170730121040-eb8c3c172607 // indirect
 	github.com/apparentlymart/go-cidr v1.0.0
 	github.com/apparentlymart/go-dump v0.0.0-20180507223929-23540a00eaa3
 	github.com/armon/circbuf v0.0.0-20150827004946-bbbad097214e
 	github.com/armon/go-metrics v0.0.0-20180917152333-f0300d1749da // indirect
-	github.com/armon/go-radix v0.0.0-20160115234725-4239b77079c7 // indirect
+	github.com/aws/aws-sdk-go v1.16.26
-	github.com/aws/aws-sdk-go v1.16.4
-	github.com/beevik/etree v0.0.0-20171015221209-af219c0c7ea1 // indirect
-	github.com/bgentry/go-netrc v0.0.0-20140422174119-9fd32a8b3d3d // indirect
-	github.com/bgentry/speakeasy v0.0.0-20161015143505-675b82c74c0e // indirect
 	github.com/blang/semver v3.5.1+incompatible
 	github.com/boltdb/bolt v1.3.1 // indirect
 	github.com/boombuler/barcode v1.0.0 // indirect
@@ -38,7 +33,6 @@ require (
 	github.com/dylanmei/winrmtest v0.0.0-20170819153634-c2fbb09e6c08
 	github.com/ghodss/yaml v1.0.0 // indirect
 	github.com/go-test/deep v1.0.1
-	github.com/gogo/protobuf v0.0.0-20180821102207-98f6aa8b3bcf // indirect
 	github.com/golang/groupcache v0.0.0-20180513044358-24b0969c4cb7 // indirect
 	github.com/golang/mock v1.2.0
 	github.com/golang/protobuf v1.2.0
@@ -65,7 +59,6 @@ require (
 	github.com/hashicorp/go-plugin v0.0.0-20190129155509-362c99b11937
 	github.com/hashicorp/go-retryablehttp v0.5.1
 	github.com/hashicorp/go-rootcerts v0.0.0-20160503143440-6bb64b370b90
-	github.com/hashicorp/go-safetemp v0.0.0-20180326211150-b1a1dbde6fdc // indirect
 	github.com/hashicorp/go-sockaddr v0.0.0-20180320115054-6d291a969b86 // indirect
 	github.com/hashicorp/go-tfe v0.3.7
 	github.com/hashicorp/go-uuid v1.0.0
@@ -78,20 +71,17 @@ require (
 	github.com/hashicorp/memberlist v0.1.0 // indirect
 	github.com/hashicorp/serf v0.0.0-20160124182025-e4ec8cc423bb // indirect
 	github.com/hashicorp/terraform-config-inspect v0.0.0-20190208230122-b0707673339c
-	github.com/hashicorp/vault v0.0.0-20161029210149-9a60bf2a50e4
+	github.com/hashicorp/vault v0.10.4
-	github.com/jen20/awspolicyequivalence v0.0.0-20170831201602-3d48364a137a // indirect
 	github.com/jonboulle/clockwork v0.1.0 // indirect
 	github.com/joyent/triton-go v0.0.0-20180313100802-d8f9c0314926
 	github.com/jtolds/gls v4.2.1+incompatible // indirect
 	github.com/kardianos/osext v0.0.0-20170510131534-ae77be60afb1
-	github.com/keybase/go-crypto v0.0.0-20161004153544-93f5b35093ba // indirect
 	github.com/lusis/go-artifactory v0.0.0-20160115162124-7e4ce345df82
 	github.com/marstr/guid v1.1.0 // indirect
 	github.com/masterzen/azure-sdk-for-go v0.0.0-20161014135628-ee4f0065d00c // indirect
 	github.com/masterzen/simplexml v0.0.0-20160608183007-4572e39b1ab9 // indirect
 	github.com/masterzen/winrm v0.0.0-20180224160350-7e40f93ae939
 	github.com/mattn/go-colorable v0.0.0-20160220075935-9cbef7c35391
-	github.com/mattn/go-isatty v0.0.0-20161123143637-30a891c33c7c // indirect
 	github.com/mattn/go-shellwords v1.0.1
 	github.com/miekg/dns v1.0.8 // indirect
 	github.com/mitchellh/cli v0.0.0-20171129193617-33edc47170b5
@@ -118,13 +108,12 @@ require (
 	github.com/smartystreets/goconvey v0.0.0-20180222194500-ef6db91d284a // indirect
 	github.com/soheilhy/cmux v0.1.4 // indirect
 	github.com/spf13/afero v1.0.2
-	github.com/terraform-providers/terraform-provider-aws v1.52.0
+	github.com/terraform-providers/terraform-provider-aws v1.58.0
 	github.com/terraform-providers/terraform-provider-openstack v1.15.0
 	github.com/terraform-providers/terraform-provider-template v1.0.0 // indirect
 	github.com/terraform-providers/terraform-provider-tls v1.2.0 // indirect
 	github.com/tmc/grpc-websocket-proxy v0.0.0-20171017195756-830351dc03c6 // indirect
 	github.com/ugorji/go v0.0.0-20180813092308-00b869d2f4a5 // indirect
-	github.com/ulikunitz/xz v0.5.4 // indirect
 	github.com/vmihailenco/msgpack v4.0.1+incompatible // indirect
 	github.com/xanzy/ssh-agent v0.2.0
 	github.com/xiang90/probing v0.0.0-20160813154853-07dd2e8dfe18 // indirect

go.sum

@@ -31,22 +31,23 @@ github.com/armon/circbuf v0.0.0-20150827004946-bbbad097214e h1:QEF07wC0T1rKkctt1
 github.com/armon/circbuf v0.0.0-20150827004946-bbbad097214e/go.mod h1:3U/XgcO3hCbHZ8TKRvWD2dDTCfh9M9ya+I9JpbB7O8o=
 github.com/armon/go-metrics v0.0.0-20180917152333-f0300d1749da h1:8GUt8eRujhVEGZFFEjBj46YV4rDjvGrNxb0KMWYkL2I=
 github.com/armon/go-metrics v0.0.0-20180917152333-f0300d1749da/go.mod h1:Q73ZrmVTwzkszR9V5SSuryQ31EELlFMUz1kKyl939pY=
-github.com/armon/go-radix v0.0.0-20160115234725-4239b77079c7 h1:MBXhrxjNkjdqJysfNbKMMPFNXlz6EzpOnPcsoYBeD3E=
+github.com/armon/go-radix v1.0.0 h1:F4z6KzEeeQIMeLFa97iZU6vupzoecKdU5TX24SNppXI=
-github.com/armon/go-radix v0.0.0-20160115234725-4239b77079c7/go.mod h1:ufUuZ+zHj4x4TnLV4JWEpy2hxWSpsRywHrMgIH9cCH8=
+github.com/armon/go-radix v1.0.0/go.mod h1:ufUuZ+zHj4x4TnLV4JWEpy2hxWSpsRywHrMgIH9cCH8=
-github.com/aws/aws-sdk-go v1.16.4 h1:HQaquRQLvsZ8fRBbmFw6/+RJolhtjGMkkB0IhTM+hf8=
+github.com/aws/aws-sdk-go v1.16.26 h1:GWkl3rkRO/JGRTWoLLIqwf7AWC4/W/1hMOUZqmX0js4=
-github.com/aws/aws-sdk-go v1.16.4/go.mod h1:KmX6BPdI08NWTb3/sm4ZGu5ShLoqVDhKgpiN924inxo=
+github.com/aws/aws-sdk-go v1.16.26/go.mod h1:KmX6BPdI08NWTb3/sm4ZGu5ShLoqVDhKgpiN924inxo=
-github.com/beevik/etree v0.0.0-20171015221209-af219c0c7ea1 h1:6fqkBkx5cRbd8Pq0UEMxyteIAPoE1KiPptnx1yEzJLU=
+github.com/beevik/etree v1.0.1 h1:lWzdj5v/Pj1X360EV7bUudox5SRipy4qZLjY0rhb0ck=
-github.com/beevik/etree v0.0.0-20171015221209-af219c0c7ea1/go.mod h1:r8Aw8JqVegEf0w2fDnATrX9VpkMcyFeM0FhwO62wh+A=
+github.com/beevik/etree v1.0.1/go.mod h1:r8Aw8JqVegEf0w2fDnATrX9VpkMcyFeM0FhwO62wh+A=
 github.com/beorn7/perks v0.0.0-20180321164747-3a771d992973 h1:xJ4a3vCFaGF/jqvzLMYoU8P317H5OQ+Via4RmuPwCS0=
 github.com/beorn7/perks v0.0.0-20180321164747-3a771d992973/go.mod h1:Dwedo/Wpr24TaqPxmxbtue+5NUziq4I4S80YR8gNf3Q=
 github.com/bgentry/go-netrc v0.0.0-20140422174119-9fd32a8b3d3d h1:xDfNPAt8lFiC1UJrqV3uuy861HCTo708pDMbjHHdCas=
 github.com/bgentry/go-netrc v0.0.0-20140422174119-9fd32a8b3d3d/go.mod h1:6QX/PXZ00z/TKoufEY6K/a0k6AhaJrQKdFe6OfVXsa4=
-github.com/bgentry/speakeasy v0.0.0-20161015143505-675b82c74c0e h1:giZ2nnSSH4ntzmoNPwdncPXXA2nWdlO7NiebK0gozNI=
+github.com/bgentry/speakeasy v0.1.0 h1:ByYyxL9InA1OWqxJqqp2A5pYHUrCiAL6K3J+LKSsQkY=
-github.com/bgentry/speakeasy v0.0.0-20161015143505-675b82c74c0e/go.mod h1:+zsyZBPWlz7T6j88CTgSN5bM796AkVf0kBD4zp0CCIs=
+github.com/bgentry/speakeasy v0.1.0/go.mod h1:+zsyZBPWlz7T6j88CTgSN5bM796AkVf0kBD4zp0CCIs=
 github.com/blang/semver v3.5.1+incompatible h1:cQNTCjp13qL8KC3Nbxr/y2Bqb63oX6wdnnjpJbkM4JQ=
 github.com/blang/semver v3.5.1+incompatible/go.mod h1:kRBLl5iJ+tD4TcOOxsy/0fnwebNt5EWlYSAyrTnjyyk=
 github.com/boltdb/bolt v1.3.1 h1:JQmyP4ZBrce+ZQu0dY660FMfatumYDLun9hBCUVIkF4=
 github.com/boltdb/bolt v1.3.1/go.mod h1:clJnj/oiGkjum5o1McbSZDSLxVThjynRyGBgiAx27Ps=
+github.com/boombuler/barcode v0.0.0-20180809052337-34fff276c74e/go.mod h1:paBWMcWSl3LHKBqUq+rly7CNSldXjb2rDl3JlRe0mD8=
 github.com/boombuler/barcode v1.0.0 h1:s1TvRnXwL2xJRaccrdcBQMZxq6X7DvsMogtmJeHDdrc=
 github.com/boombuler/barcode v1.0.0/go.mod h1:paBWMcWSl3LHKBqUq+rly7CNSldXjb2rDl3JlRe0mD8=
 github.com/bsm/go-vlq v0.0.0-20150828105119-ec6e8d4f5f4e/go.mod h1:N+BjUcTjSxc2mtRGSCPsat1kze3CUtvJN3/jTXlp29k=
@@ -84,23 +85,28 @@ github.com/ghodss/yaml v1.0.0 h1:wQHKEahhL6wmXdzwWG11gIVCkOv05bNOh+Rxn0yngAk=
 github.com/ghodss/yaml v1.0.0/go.mod h1:4dBDuWmgqj2HViK6kFavaiC9ZROes6MMH2rRYeMEF04=
 github.com/go-test/deep v1.0.1 h1:UQhStjbkDClarlmv0am7OXXO4/GaPdCGiUiMTvi28sg=
 github.com/go-test/deep v1.0.1/go.mod h1:wGDj63lr65AM2AQyKZd/NYHGb0R+1RLqB8NKt3aSFNA=
-github.com/gogo/protobuf v0.0.0-20180821102207-98f6aa8b3bcf h1:0nBDY6WfT0ChlHhvNcGw3BTjyDOtCom2yQTVBJv3MHg=
+github.com/gogo/protobuf v1.2.0 h1:xU6/SpYbvkNYiptHJYEDRseDLvYE7wSqhYYNy0QSUzI=
-github.com/gogo/protobuf v0.0.0-20180821102207-98f6aa8b3bcf/go.mod h1:r8qH/GZQm5c6nD/R0oafs1akxWv10x8SbQlK7atdtwQ=
+github.com/gogo/protobuf v1.2.0/go.mod h1:r8qH/GZQm5c6nD/R0oafs1akxWv10x8SbQlK7atdtwQ=
 github.com/golang/glog v0.0.0-20160126235308-23def4e6c14b h1:VKtxabqXZkF25pY9ekfRL6a582T4P37/31XEstQ5p58=
 github.com/golang/glog v0.0.0-20160126235308-23def4e6c14b/go.mod h1:SBH7ygxi8pfUlaOkMMuAQtPIUF8ecWP5IEl/CR7VP2Q=
 github.com/golang/groupcache v0.0.0-20180513044358-24b0969c4cb7 h1:u4bArs140e9+AfE52mFHOXVFnOSBJBRlzTHrOPLOIhE=
 github.com/golang/groupcache v0.0.0-20180513044358-24b0969c4cb7/go.mod h1:cIg4eruTrX1D+g88fzRXU5OdNfaM+9IcxsU14FzY7Hc=
 github.com/golang/mock v1.2.0 h1:28o5sBqPkBsMGnC6b4MvE2TzSr5/AT4c/1fLqVGIwlk=
 github.com/golang/mock v1.2.0/go.mod h1:oTYuIxOrZwtPieC+H1uAHpcLFnEyAGVDL/k47Jfbm0A=
+github.com/golang/protobuf v0.0.0-20171113180720-1e59b77b52bf/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U=
 github.com/golang/protobuf v1.1.0/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U=
 github.com/golang/protobuf v1.2.0 h1:P3YflyNX/ehuJFLhxviNdFxQPkGK5cDcApsge1SqnvM=
 github.com/golang/protobuf v1.2.0/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U=
+github.com/golang/snappy v0.0.0-20180518054509-2e65f85255db h1:woRePGFeVFfLKN/pOkfl+p/TAqKOfFu+7KPlMVpok/w=
+github.com/golang/snappy v0.0.0-20180518054509-2e65f85255db/go.mod h1:/XxbfmMg8lxefKM7IXC3fBNl/7bRcc72aCRzEWrmP2Q=
 github.com/google/btree v0.0.0-20180813153112-4030bb1f1f0c h1:964Od4U6p2jUkFxvCydnIczKteheJEzHRToSGK3Bnlw=
 github.com/google/btree v0.0.0-20180813153112-4030bb1f1f0c/go.mod h1:lNA+9X1NB3Zf8V7Ke586lFgjr2dZNuvo3lPJSGZ5JPQ=
 github.com/google/go-cmp v0.2.0 h1:+dTQ8DZQJz0Mb/HjFlkptS1FeQ4cWSnN941F8aEG4SQ=
 github.com/google/go-cmp v0.2.0/go.mod h1:oXzfMopK8JAjlY9xF4vHSVASa0yLyX7SntLO5aqRK0M=
 github.com/google/go-querystring v1.0.0 h1:Xkwi/a1rcvNg1PPYe5vI8GbeBY/jrVuDX5ASuANWTrk=
 github.com/google/go-querystring v1.0.0/go.mod h1:odCYkC5MyYFN7vkCjXpyrEuKhc/BUO6wN/zVPAxq5ck=
+github.com/google/gofuzz v0.0.0-20170612174753-24818f796faf h1:+RRA9JqSOZFfKrOeqr2z77+8R2RKyh8PG66dcu1V0ck=
+github.com/google/gofuzz v0.0.0-20170612174753-24818f796faf/go.mod h1:HP5RmnzzSNb993RKQDq4+1A4ia9nllfqcQFTQJedwGI=
 github.com/googleapis/gax-go v0.0.0-20161107002406-da06d194a00e h1:CYRpN206UTHUinz3VJoLaBdy1gEGeJNsqT0mvswDcMw=
 github.com/googleapis/gax-go v0.0.0-20161107002406-da06d194a00e/go.mod h1:SFVmujtThgffbyetf+mdk2eWhX2bMyUtNHzFKcPA9HY=
 github.com/gophercloud/gophercloud v0.0.0-20190208042652-bc37892e1968 h1:Pu+HW4kcQozw0QyrTTgLE+3RXNqFhQNNzhbnoLFL83c=
@@ -130,6 +136,7 @@ github.com/hashicorp/go-cleanhttp v0.5.0 h1:wvCrVc9TjDls6+YGAF2hAifE1E5U1+b4tH6K
 github.com/hashicorp/go-cleanhttp v0.5.0/go.mod h1:JpRdi6/HCYpAwUzNwuwqhbovhLtngrth3wmdIIUrZ80=
 github.com/hashicorp/go-getter v0.0.0-20180327010114-90bb99a48d86 h1:hLYM35twiyKH44g36g+GFYODcrZQetEAY4+zrJtGea0=
 github.com/hashicorp/go-getter v0.0.0-20180327010114-90bb99a48d86/go.mod h1:6rdJFnhkXnzGOJbvkrdv4t9nLwKcVA+tmbQeUlkIzrU=
+github.com/hashicorp/go-hclog v0.0.0-20171005151751-ca137eb4b438/go.mod h1:9bjs9uLqI8l75knNv3lV1kA55veR+WUPSiKIWcQHudI=
 github.com/hashicorp/go-hclog v0.0.0-20180709165350-ff2cf002a8dd/go.mod h1:9bjs9uLqI8l75knNv3lV1kA55veR+WUPSiKIWcQHudI=
 github.com/hashicorp/go-hclog v0.0.0-20181001195459-61d530d6c27f h1:Yv9YzBlAETjy6AOX9eLBZ3nshNVRREgerT/3nvxlGho=
 github.com/hashicorp/go-hclog v0.0.0-20181001195459-61d530d6c27f/go.mod h1:5CU+agLiy3J7N7QjHK5d05KxGsuXiQLrjA0H7acj2lQ=
@@ -140,14 +147,15 @@ github.com/hashicorp/go-msgpack v0.0.0-20150518234257-fa3f63826f7c/go.mod h1:ahL
 github.com/hashicorp/go-multierror v0.0.0-20180717150148-3d5d8f294aa0/go.mod h1:JMRHfdO9jKNzS/+BTlxCjKNQHg/jZAft8U7LloJvN7I=
 github.com/hashicorp/go-multierror v1.0.0 h1:iVjPR7a6H0tWELX5NxNe7bYopibicUzc7uPribsnS6o=
 github.com/hashicorp/go-multierror v1.0.0/go.mod h1:dHtQlpGsu+cZNNAkkCN/P3hoUDHhCYQXV3UM06sGGrk=
+github.com/hashicorp/go-plugin v0.0.0-20170816151819-a5174f84d7f8/go.mod h1:JSqWYsict+jzcj0+xElxyrBQRPNoiWQuddnxArJ7XHQ=
 github.com/hashicorp/go-plugin v0.0.0-20190129155509-362c99b11937 h1:F3biNWiyQYD6ch5Y/Kua5DKZKH3R0NtCvnv+KhZei20=
 github.com/hashicorp/go-plugin v0.0.0-20190129155509-362c99b11937/go.mod h1:++UyYGoz3o5w9ZzAdZxtQKrWWP+iqPBn3cQptSMzBuY=
 github.com/hashicorp/go-retryablehttp v0.5.1 h1:Vsx5XKPqPs3M6sM4U4GWyUqFS8aBiL9U5gkgvpkg4SE=
 github.com/hashicorp/go-retryablehttp v0.5.1/go.mod h1:9B5zBasrRhHXnJnui7y6sL7es7NDiJgTc6Er0maI1Xs=
 github.com/hashicorp/go-rootcerts v0.0.0-20160503143440-6bb64b370b90 h1:VBj0QYQ0u2MCJzBfeYXGexnAl17GsH1yidnoxCqqD9E=
 github.com/hashicorp/go-rootcerts v0.0.0-20160503143440-6bb64b370b90/go.mod h1:o4zcYY1e0GEZI6eSEr+43QDYmuGglw1qSO6qdHUHCgg=
-github.com/hashicorp/go-safetemp v0.0.0-20180326211150-b1a1dbde6fdc h1:wAa9fGALVHfjYxZuXRnmuJG2CnwRpJYOTvY6YdErAh0=
+github.com/hashicorp/go-safetemp v1.0.0 h1:2HR189eFNrjHQyENnQMMpCiBAsRxzbTMIgBhEyExpmo=
-github.com/hashicorp/go-safetemp v0.0.0-20180326211150-b1a1dbde6fdc/go.mod h1:oaerMy3BhqiTbVye6QuFhFtIceqFoDHxNAB65b+Rj1I=
+github.com/hashicorp/go-safetemp v1.0.0/go.mod h1:oaerMy3BhqiTbVye6QuFhFtIceqFoDHxNAB65b+Rj1I=
 github.com/hashicorp/go-slug v0.2.0 h1:MVdZAkTmDsUi1AT+3NQDsn8n3ssnVSIHwiM6RcUHvE8=
 github.com/hashicorp/go-slug v0.2.0/go.mod h1:+zDycQOzGqOqMW7Kn2fp9vz/NtqpMLQlgb9JUF+0km4=
 github.com/hashicorp/go-sockaddr v0.0.0-20180320115054-6d291a969b86 h1:7YOlAIO2YWnJZkQp7B5eFykaIY7C9JndqAFQyVV5BhM=
@@ -162,9 +170,11 @@ github.com/hashicorp/golang-lru v0.5.0 h1:CL2msUPvZTLb5O648aiLNJw3hnBxN2+1Jq8rCO
 github.com/hashicorp/golang-lru v0.5.0/go.mod h1:/m3WP610KZHVQ1SGc6re/UDhFvYD7pJ4Ao+sR/qLZy8=
 github.com/hashicorp/hcl v0.0.0-20170504190234-a4b07c25de5f h1:UdxlrJz4JOnY8W+DbLISwf2B8WXEolNRA8BGCwI9jws=
 github.com/hashicorp/hcl v0.0.0-20170504190234-a4b07c25de5f/go.mod h1:oZtUIOe8dh44I2q6ScRibXws4Ajl+d+nod3AaR9vL5w=
+github.com/hashicorp/hcl2 v0.0.0-20171003232734-44bad6dbf549/go.mod h1:xp1eMAxqhQKBxz+yQUTsig9bBMRRWRWw+rK3FJmHf/A=
 github.com/hashicorp/hcl2 v0.0.0-20181208003705-670926858200/go.mod h1:ShfpTh661oAaxo7VcNxg0zcZW6jvMa7Moy2oFx7e5dE=
 github.com/hashicorp/hcl2 v0.0.0-20190130225218-89dbc5eb3d9e h1:wcDATcjAY0ebgNtuyt00GxJll5fCChrevvrIdguzhQQ=
 github.com/hashicorp/hcl2 v0.0.0-20190130225218-89dbc5eb3d9e/go.mod h1:HtEzazM5AZ9fviNEof8QZB4T1Vz9UhHrGhnMPzl//Ek=
+github.com/hashicorp/hil v0.0.0-20170512213305-fac2259da677/go.mod h1:KHvg/R2/dPtaePb16oW4qIyzkMxXOL38xjRN64adsts=
 github.com/hashicorp/hil v0.0.0-20190212112733-ab17b08d6590 h1:2yzhWGdgQUWZUCNK+AoO35V+HTsgEmcM4J9IkArh7PI=
 github.com/hashicorp/hil v0.0.0-20190212112733-ab17b08d6590/go.mod h1:n2TSygSNwsLJ76m8qFXTSc7beTb+auJxYdqrnoqwZWE=
 github.com/hashicorp/logutils v1.0.0 h1:dLEQVugN8vlakKOUE3ihGLTZJRB4j+M2cdTm/ORI65Y=
@@ -173,15 +183,17 @@ github.com/hashicorp/memberlist v0.1.0 h1:qSsCiC0WYD39lbSitKNt40e30uorm2Ss/d4JGU
 github.com/hashicorp/memberlist v0.1.0/go.mod h1:ncdBp14cuox2iFOq3kDiquKU6fqsTBc3W6JvZwjxxsE=
 github.com/hashicorp/serf v0.0.0-20160124182025-e4ec8cc423bb h1:ZbgmOQt8DOg796figP87/EFCVx2v2h9yRvwHF/zceX4=
 github.com/hashicorp/serf v0.0.0-20160124182025-e4ec8cc423bb/go.mod h1:h/Ru6tmZazX7WO/GDmwdpS975F019L4t5ng5IgwbNrE=
+github.com/hashicorp/terraform v0.11.9-beta1/go.mod h1:uN1KUiT7Wdg61fPwsGXQwK3c8PmpIVZrt5Vcb1VrSoM=
 github.com/hashicorp/terraform-config-inspect v0.0.0-20190208230122-b0707673339c h1:nCnsfi66NloVlmquh5dLox5yBwQk5CV5s2roWvbstnE=
 github.com/hashicorp/terraform-config-inspect v0.0.0-20190208230122-b0707673339c/go.mod h1:ItvqtvbC3K23FFET62ZwnkwtpbKZm8t8eMcWjmVVjD8=
-github.com/hashicorp/vault v0.0.0-20161029210149-9a60bf2a50e4 h1:SGDekHLK2IRoVS7Fb4olLyWvc2VmwKgyFC05j6X3NII=
+github.com/hashicorp/vault v0.10.4 h1:4x0lHxui/ZRp/B3E0Auv1QNBJpzETqHR2kQD3mHSBJU=
-github.com/hashicorp/vault v0.0.0-20161029210149-9a60bf2a50e4/go.mod h1:KfSyffbKxoVyspOdlaGVjIuwLobi07qD1bAbosPMpP0=
+github.com/hashicorp/vault v0.10.4/go.mod h1:KfSyffbKxoVyspOdlaGVjIuwLobi07qD1bAbosPMpP0=
+github.com/hashicorp/yamux v0.0.0-20160720233140-d1caa6c97c9f/go.mod h1:+NfK9FKeTrX5uv1uIXGdwYDTeHna2qgaIlx54MXqjAM=
 github.com/hashicorp/yamux v0.0.0-20180604194846-3520598351bb h1:b5rjCoWHc7eqmAS4/qyk21ZsHyb6Mxv/jykxvNTkU4M=
 github.com/hashicorp/yamux v0.0.0-20180604194846-3520598351bb/go.mod h1:+NfK9FKeTrX5uv1uIXGdwYDTeHna2qgaIlx54MXqjAM=
 github.com/hpcloud/tail v1.0.0/go.mod h1:ab1qPbhIpdTxEkNHXyeSf5vhxWSCs/tWer42PpOxQnU=
-github.com/jen20/awspolicyequivalence v0.0.0-20170831201602-3d48364a137a h1:FyS/ubzBR5xJlnJGRTwe7GUHpJOR4ukYK3y+LFNffuA=
+github.com/jen20/awspolicyequivalence v1.0.0 h1:jLRh4GRf0IfIpMm9/m+krLnjAda4NpI9+2o5Kb/Q+G4=
-github.com/jen20/awspolicyequivalence v0.0.0-20170831201602-3d48364a137a/go.mod h1:uoIMjNxUfXi48Ci40IXkPRbghZ1vbti6v9LCbNqRgHY=
+github.com/jen20/awspolicyequivalence v1.0.0/go.mod h1:PV1fS2xyHhCLp83vbgSMFr2drM4GzG61wkz+k4pOG3E=
 github.com/jessevdk/go-flags v1.4.0/go.mod h1:4FA24M0QyGHXBuZZK/XkWh8h0e1EYbRYJSGM75WSRxI=
 github.com/jmespath/go-jmespath v0.0.0-20180206201540-c2b33e8439af h1:pmfjZENx5imkbgOkpRUYLnmbU7UEFbjtDA2hxJ1ichM=
 github.com/jmespath/go-jmespath v0.0.0-20180206201540-c2b33e8439af/go.mod h1:Nht3zPeWKUH0NzdCt2Blrr5ys8VGpn0CEB0cQHVjt7k=
@@ -189,6 +201,8 @@ github.com/jonboulle/clockwork v0.1.0 h1:VKV+ZcuP6l3yW9doeqz6ziZGgcynBVQO+obU0+0
 github.com/jonboulle/clockwork v0.1.0/go.mod h1:Ii8DK3G1RaLaWxj9trq07+26W01tbo22gdxWY5EU2bo=
 github.com/joyent/triton-go v0.0.0-20180313100802-d8f9c0314926 h1:kie3qOosvRKqwij2HGzXWffwpXvcqfPPXRUw8I4F/mg=
 github.com/joyent/triton-go v0.0.0-20180313100802-d8f9c0314926/go.mod h1:U+RSyWxWd04xTqnuOQxnai7XGS2PrPY2cfGoDKtMHjA=
+github.com/json-iterator/go v1.1.5 h1:gL2yXlmiIo4+t+y32d4WGwOjKGYcGOuyrg46vadswDE=
+github.com/json-iterator/go v1.1.5/go.mod h1:+SdeFBvtyEkXs7REEP0seUULqWtbJapLOCVDaaPEHmU=
 github.com/jtolds/gls v4.2.1+incompatible h1:fSuqC+Gmlu6l/ZYAoZzx2pyucC8Xza35fpRVWLVmUEE=
 github.com/jtolds/gls v4.2.1+incompatible/go.mod h1:QJZ7F/aHp+rZTRtaJ1ow/lLfFfVYBRgL+9YlvaHOwJU=
 github.com/kardianos/osext v0.0.0-20170510131534-ae77be60afb1 h1:PJPDf8OUfOK1bb/NeTKd4f1QXZItOX389VN3B6qC8ro=
@@ -202,6 +216,8 @@ github.com/kr/pretty v0.1.0/go.mod h1:dAy3ld7l9f0ibDNOQOHHMYYIIbhfbHSm3C4ZsoJORN
 github.com/kr/pty v1.1.1/go.mod h1:pFQYn66WHrOpPYNljwOMqo10TkYh1fy3cYio2l3bCsQ=
 github.com/kr/text v0.1.0 h1:45sCR5RtlFHMR4UwH9sdQ5TC8v0qDQCHnXt+kaKSTVE=
 github.com/kr/text v0.1.0/go.mod h1:4Jbv+DJW3UT/LiOwJeYQe1efqtUx/iVham/4vfdArNI=
+github.com/kubernetes-sigs/aws-iam-authenticator v0.3.1-0.20181019024009-82544ec86140 h1:AtXWrgewhHlLux0IAfHINCbkxkf47euklyallWlximw=
+github.com/kubernetes-sigs/aws-iam-authenticator v0.3.1-0.20181019024009-82544ec86140/go.mod h1:ItxiN33Ho7Di8wiC4S4XqbH1NLF0DNdDWOd/5MI9gJU=
 github.com/kylelemons/godebug v0.0.0-20170820004349-d65d576e9348 h1:MtvEpTB6LX3vkb4ax0b5D2DHbNAUsen0Gx5wZoq3lV4=
 github.com/kylelemons/godebug v0.0.0-20170820004349-d65d576e9348/go.mod h1:B69LEHPfb2qLo0BaaOLcbitczOKLWTsrBG9LczfCD4k=
 github.com/lusis/go-artifactory v0.0.0-20160115162124-7e4ce345df82 h1:wnfcqULT+N2seWf6y4yHzmi7GD2kNx4Ute0qArktD48=
@@ -216,14 +232,15 @@ github.com/masterzen/winrm v0.0.0-20180224160350-7e40f93ae939 h1:cRFHA33ER97Xy5j
 github.com/masterzen/winrm v0.0.0-20180224160350-7e40f93ae939/go.mod h1:CfZSN7zwz5gJiFhZJz49Uzk7mEBHIceWmbFmYx7Hf7E=
 github.com/mattn/go-colorable v0.0.0-20160220075935-9cbef7c35391 h1:x4vT4RoTH2BNkPx0LgrBKeFuPQPviK1aSAIWG6ruc+Y=
 github.com/mattn/go-colorable v0.0.0-20160220075935-9cbef7c35391/go.mod h1:9vuHe8Xs5qXnSaW/c/ABM9alt+Vo+STaOChaDxuIBZU=
-github.com/mattn/go-isatty v0.0.0-20161123143637-30a891c33c7c h1:YHHK/dEmr2Jo1cWD1VMB2waEeHJhHFp3CEylwWy/VcY=
+github.com/mattn/go-isatty v0.0.4 h1:bnP0vzxcAdeI1zdubAl5PjU6zsERjGZb7raWodagDYs=
-github.com/mattn/go-isatty v0.0.0-20161123143637-30a891c33c7c/go.mod h1:M+lRXTBqGeGNdLjl/ufCoiOlB5xdOkqRJdNxMWT7Zi4=
+github.com/mattn/go-isatty v0.0.4/go.mod h1:M+lRXTBqGeGNdLjl/ufCoiOlB5xdOkqRJdNxMWT7Zi4=
 github.com/mattn/go-shellwords v1.0.1 h1:2/mQs/EosKUge1MHnAavnrNwa0wLnWDjG4dTYMGf/kI=
 github.com/mattn/go-shellwords v1.0.1/go.mod h1:3xCvwCdWdlDJUrvuMn7Wuy9eWs4pE8vqg+NOMyg4B2o=
 github.com/matttproud/golang_protobuf_extensions v1.0.1 h1:4hp9jkHxhMHkqkrB3Ix0jegS5sx/RkqARlsWZ6pIwiU=
 github.com/matttproud/golang_protobuf_extensions v1.0.1/go.mod h1:D8He9yQNgCq6Z5Ld7szi9bcBfOoFv/3dc6xSMkL2PC0=
 github.com/miekg/dns v1.0.8 h1:Zi8HNpze3NeRWH1PQV6O71YcvJRQ6j0lORO6DAEmAAI=
 github.com/miekg/dns v1.0.8/go.mod h1:W1PPwlIAgtquWBMBEV9nkV9Cazfe8ScdGz/Lj7v3Nrg=
+github.com/mitchellh/cli v0.0.0-20170803042910-8a539dbef410/go.mod h1:oGumspjLm2kTyiT1QMGpFqRlmxnKHfCvhZEVnx+5UeE=
 github.com/mitchellh/cli v0.0.0-20171129193617-33edc47170b5 h1:OYr3N2fY3e3kP/x/d81CJXlcZrIV2hH8gPnuRLpiME4=
 github.com/mitchellh/cli v0.0.0-20171129193617-33edc47170b5/go.mod h1:oGumspjLm2kTyiT1QMGpFqRlmxnKHfCvhZEVnx+5UeE=
 github.com/mitchellh/colorstring v0.0.0-20150917214807-8631ce90f286 h1:KHyL+3mQOF9sPfs26lsefckcFNDcIZtiACQiECzIUkw=
@@ -241,6 +258,7 @@ github.com/mitchellh/go-wordwrap v1.0.0 h1:6GlHJ/LTGMrIJbwgdqdl2eEH8o+Exx/0m8ir9
 github.com/mitchellh/go-wordwrap v1.0.0/go.mod h1:ZXFpozHsX6DPmq2I0TCekCxypsnAUbP2oI0UX1GXzOo=
 github.com/mitchellh/hashstructure v1.0.0 h1:ZkRJX1CyOoTkar7p/mLS5TZU4nJ1Rn/F8u9dGS02Q3Y=
 github.com/mitchellh/hashstructure v1.0.0/go.mod h1:QjSHrPWS+BGUVBYkbTZWEnOh3G1DutKwClXU/ABz6AQ=
+github.com/mitchellh/mapstructure v1.0.0/go.mod h1:FVVH3fgwuzCH5S8UJGiWEs2h04kUh9fWfEaFds41c1Y=
 github.com/mitchellh/mapstructure v1.1.2 h1:fmNYVwqnSfB9mZU6OS2O6GsXM+wcskZDuKQzvN1EDeE=
 github.com/mitchellh/mapstructure v1.1.2/go.mod h1:FVVH3fgwuzCH5S8UJGiWEs2h04kUh9fWfEaFds41c1Y=
 github.com/mitchellh/panicwrap v0.0.0-20161208170302-ba9e1a65e0f7 h1:+PBI9A4rLQJlch3eQI/RkTY2HzX+bl2lPUf3goenBxs=
@@ -249,6 +267,10 @@ github.com/mitchellh/prefixedio v0.0.0-20151214002211-6e6954073784 h1:+DAetXqxv/
 github.com/mitchellh/prefixedio v0.0.0-20151214002211-6e6954073784/go.mod h1:kB1naBgV9ORnkiTVeyJOI1DavaJkG4oNIq0Af6ZVKUo=
 github.com/mitchellh/reflectwalk v1.0.0 h1:9D+8oIskB4VJBN5SFlmc27fSlIBZaov1Wpk/IfikLNY=
 github.com/mitchellh/reflectwalk v1.0.0/go.mod h1:mSTlrgnPZtwu0c4WaC2kGObEpuNDbx0jmZXqmk4esnw=
+github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd h1:TRLaZ9cD/w8PVh93nsPXa1VrQ6jlwL5oN8l14QlcNfg=
+github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd/go.mod h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q=
+github.com/modern-go/reflect2 v1.0.1 h1:9f412s+6RmYXLWZSEzVVgPGK7C2PphHj5RJrvfx9AWI=
+github.com/modern-go/reflect2 v1.0.1/go.mod h1:bx2lNnkwVCuqBIxFjflWJWanXIb3RllmbCylyMrvgv0=
 github.com/nu7hatch/gouuid v0.0.0-20131221200532-179d4d0c4d8d h1:VhgPp6v9qf9Agr/56bj7Y/xa04UccTW04VP0Qed4vnQ=
 github.com/nu7hatch/gouuid v0.0.0-20131221200532-179d4d0c4d8d/go.mod h1:YUTz3bUH2ZwIWBy3CJBeOBEugqcmXREj14T+iG/4k4U=
 github.com/oklog/run v1.0.0 h1:Ru7dDtJNOyC66gQ5dQmaCa0qIsAUFY3sFpK1Xk8igrw=
@@ -265,8 +287,10 @@ github.com/pkg/errors v0.0.0-20170505043639-c605e284fe17 h1:chPfVn+gpAM5CTpTyVU9
 github.com/pkg/errors v0.0.0-20170505043639-c605e284fe17/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0=
 github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
 github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
+github.com/posener/complete v0.0.0-20170730193024-f4461a52b632/go.mod h1:em0nMJCgc9GFtwrmVmEMR/ZL6WyhyjMBndrE9hABlRI=
 github.com/posener/complete v0.0.0-20171219111128-6bee943216c8 h1:lcb1zvdlaZyEbl2OXifN3uOYYyIvllofUbmp9bwbL+0=
 github.com/posener/complete v0.0.0-20171219111128-6bee943216c8/go.mod h1:em0nMJCgc9GFtwrmVmEMR/ZL6WyhyjMBndrE9hABlRI=
+github.com/pquerna/otp v0.0.0-20180813144649-be78767b3e39/go.mod h1:Zad1CMQfSQZI5KLpahDiSUX4tMMREnXw98IvL1nhgMk=
 github.com/pquerna/otp v1.0.0 h1:TBZrpfnzVbgmpYhiYBK+bJ4Ig0+ye+GGNMe2pTrvxCo=
 github.com/pquerna/otp v1.0.0/go.mod h1:Zad1CMQfSQZI5KLpahDiSUX4tMMREnXw98IvL1nhgMk=
 github.com/prometheus/client_golang v0.8.0 h1:1921Yw9Gc3iSc4VQh3PIoOqgPCZS7G/4xQNVUp8Mda8=
@@ -295,18 +319,22 @@ github.com/spf13/afero v1.0.2 h1:5bRmqmInNmNFkI9NG9O0Xc/Lgl9wOWWUUA/O8XZqTCo=
 github.com/spf13/afero v1.0.2/go.mod h1:j4pytiNVoe2o6bmDsKpLACNPDBIoEAkihy7loJ1B0CQ=
 github.com/spf13/pflag v1.0.2 h1:Fy0orTDgHdbnzHcsOgfCN4LtHf0ec3wwtiwJqwvf3Gc=
 github.com/spf13/pflag v1.0.2/go.mod h1:DYY7MBk1bdzusC3SYhjObp+wFpr4gzcvqqNjLnInEg4=
+github.com/spf13/pflag v1.0.3 h1:zPAT6CGy6wXeQ7NtTnaTerfKOsV6V6F8agHXFiazDkg=
+github.com/spf13/pflag v1.0.3/go.mod h1:DYY7MBk1bdzusC3SYhjObp+wFpr4gzcvqqNjLnInEg4=
 github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
 github.com/stretchr/testify v1.2.2/go.mod h1:a8OnRcib4nhh0OaRAV+Yts87kKdq0PP7pXfy6kDkUVs=
 github.com/stretchr/testify v1.3.0 h1:TivCn/peBQ7UY8ooIcPgZFpTNSz0Q2U6UrFlUfqbe0Q=
 github.com/stretchr/testify v1.3.0/go.mod h1:M5WIy9Dh21IEIfnGCwXGc5bZfKNJtfHm1UVUgZn+9EI=
 github.com/svanharmelen/jsonapi v0.0.0-20180618144545-0c0828c3f16d h1:Z4EH+5EffvBEhh37F0C0DnpklTMh00JOkjW5zK3ofBI=
 github.com/svanharmelen/jsonapi v0.0.0-20180618144545-0c0828c3f16d/go.mod h1:BSTlc8jOjh0niykqEGVXOLXdi9o0r0kR8tCYiMvjFgw=
-github.com/terraform-providers/terraform-provider-aws v1.52.0 h1:hfFaKOUtL/ud9Y4PFgFT7F8Ss61lMIK1P+ndPEhPA7s=
+github.com/terraform-providers/terraform-provider-aws v1.58.0 h1:EiDfGqjIZ+VYL3WXOXzWQjU6dIt7peEc6XS1gpRTEL8=
-github.com/terraform-providers/terraform-provider-aws v1.52.0/go.mod h1:uvqaeKnm2ydZ2LuKuW1NDNBu6heC/7IDGXWm36/6oKs=
+github.com/terraform-providers/terraform-provider-aws v1.58.0/go.mod h1:18ma8mS6sWjWq3Ca+ARGxNRpohH6QaDhot5WQmFtIao=
 github.com/terraform-providers/terraform-provider-openstack v1.15.0 h1:adpjqej+F8BAX9dHmuPF47sUIkgifeqBu6p7iCsyj0Y=
 github.com/terraform-providers/terraform-provider-openstack v1.15.0/go.mod h1:2aQ6n/BtChAl1y2S60vebhyJyZXBsuAI5G4+lHrT1Ew=
+github.com/terraform-providers/terraform-provider-template v0.1.1/go.mod h1:/J+B8me5DCMa0rEBH5ic2aKPjhtpWNeScmxFJWxB1EU=
 github.com/terraform-providers/terraform-provider-template v1.0.0 h1:g2pyFaAJu369iAb7qGWmVwtQ15/35lRAfW91Je8wLjE=
 github.com/terraform-providers/terraform-provider-template v1.0.0/go.mod h1:/J+B8me5DCMa0rEBH5ic2aKPjhtpWNeScmxFJWxB1EU=
+github.com/terraform-providers/terraform-provider-tls v0.1.0/go.mod h1:Mxe/v5u31LDW4m32O1z6Ursdh95dpc9Puq6otkYg7tU=
 github.com/terraform-providers/terraform-provider-tls v1.2.0 h1:wcD0InKzNh8fanUYQwim62WCd4toeD9WJnPw/RjBI4o=
 github.com/terraform-providers/terraform-provider-tls v1.2.0/go.mod h1:Mxe/v5u31LDW4m32O1z6Ursdh95dpc9Puq6otkYg7tU=
 github.com/tmc/grpc-websocket-proxy v0.0.0-20171017195756-830351dc03c6 h1:lYIiVDtZnyTWlNwiAxLj0bbpTcx1BWCFhXjfsvmPdNc=
@@ -324,6 +352,7 @@ github.com/xiang90/probing v0.0.0-20160813154853-07dd2e8dfe18 h1:MPPkRncZLN9Kh4M
 github.com/xiang90/probing v0.0.0-20160813154853-07dd2e8dfe18/go.mod h1:UETIi67q53MR2AWcXfiuqkDkRtnGDLqkBTpCHuJHxtU=
 github.com/xlab/treeprint v0.0.0-20161029104018-1d6e34225557 h1:Jpn2j6wHkC9wJv5iMfJhKqrZJx3TahFx+7sbZ7zQdxs=
 github.com/xlab/treeprint v0.0.0-20161029104018-1d6e34225557/go.mod h1:ce1O1j6UtZfjr22oyGxGLbauSBp2YVXpARAosm7dHBg=
+github.com/zclconf/go-cty v0.0.0-20180106055834-709e4033eeb0/go.mod h1:LnDKxj8gN4aatfXUqmUNooaDjvmDcLPbAN3hYBIVoJE=
 github.com/zclconf/go-cty v0.0.0-20181129180422-88fbe721e0f8/go.mod h1:xnAOWiHeOqg2nWS62VtQ7pbOu17FtxJNW8RLEih+O3s=
 github.com/zclconf/go-cty v0.0.0-20190124225737-a385d646c1e9 h1:hHCAGde+QfwbqXSAqOmBd4NlOrJ6nmjWp+Nu408ezD4=
 github.com/zclconf/go-cty v0.0.0-20190124225737-a385d646c1e9/go.mod h1:xnAOWiHeOqg2nWS62VtQ7pbOu17FtxJNW8RLEih+O3s=
@@ -337,11 +366,13 @@ go.uber.org/multierr v1.1.0 h1:HoEmRHQPVSqub6w2z2d2EOVs2fjyFRGyofhKuyDq0QI=
 go.uber.org/multierr v1.1.0/go.mod h1:wR5kodmAFQ0UK8QlbwjlSNy0Z68gJhDJUG5sjR94q/0=
 go.uber.org/zap v1.9.1 h1:XCJQEf3W6eZaVwhRBof6ImoYGJSITeKWsyeh3HFu/5o=
 go.uber.org/zap v1.9.1/go.mod h1:vwi/ZaCAaUcBkycHslxD9B2zi4UTXhF60s6SWpuDF0Q=
+golang.org/x/crypto v0.0.0-20180110145155-b3c9a1d25cfb/go.mod h1:6SG95UA2DQfeDnfUPMdvaQW0Q7yPrPDi9nlGo2tz2b4=
 golang.org/x/crypto v0.0.0-20180816225734-aabede6cba87/go.mod h1:6SG95UA2DQfeDnfUPMdvaQW0Q7yPrPDi9nlGo2tz2b4=
 golang.org/x/crypto v0.0.0-20180904163835-0709b304e793/go.mod h1:6SG95UA2DQfeDnfUPMdvaQW0Q7yPrPDi9nlGo2tz2b4=
 golang.org/x/crypto v0.0.0-20181112202954-3d3f9f413869/go.mod h1:6SG95UA2DQfeDnfUPMdvaQW0Q7yPrPDi9nlGo2tz2b4=
 golang.org/x/crypto v0.0.0-20181127143415-eb0de9b17e85 h1:et7+NAX3lLIk5qUCTA9QelBjGE/NkhzYw/mhnr0s7nI=
 golang.org/x/crypto v0.0.0-20181127143415-eb0de9b17e85/go.mod h1:6SG95UA2DQfeDnfUPMdvaQW0Q7yPrPDi9nlGo2tz2b4=
+golang.org/x/net v0.0.0-20171024115130-4b14673ba32b/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
 golang.org/x/net v0.0.0-20180724234803-3673e40ba225/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
 golang.org/x/net v0.0.0-20180811021610-c39426892332/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
 golang.org/x/net v0.0.0-20180826012351-8a410e7b638d/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
@@ -354,10 +385,12 @@ golang.org/x/sync v0.0.0-20180314180146-1d60e4601c6f/go.mod h1:RxMgew5VJxzue5/jJ
 golang.org/x/sync v0.0.0-20181108010431-42b317875d0f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20181221193216-37e7f081c4d4 h1:YUO/7uOKsKeq9UokNS62b8FYywz3ker1l1vDZRCRefw=
 golang.org/x/sync v0.0.0-20181221193216-37e7f081c4d4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
+golang.org/x/sys v0.0.0-20170803140359-d8f5ea21b929/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20180905080454-ebe1bf3edb33/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20180909124046-d0be0721c37e/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20190129075346-302c3dd5f1cc h1:WiYx1rIFmx8c0mXAFtv5D/mHyKe1+jmuP7PViuwqwuQ=
 golang.org/x/sys v0.0.0-20190129075346-302c3dd5f1cc/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
+golang.org/x/text v0.0.0-20171024115504-6eab0e8f74e8/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.0 h1:g61tztE5qeGQ89tm6NTjjM9VPIm088od1l6aSorWRWg=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/time v0.0.0-20181108054448-85acf8d2951c h1:fqgJT0MGcGpPgpWU7VRdRjuArfcOvC4AoJmILihzhDg=
@@ -368,15 +401,19 @@ google.golang.org/api v0.0.0-20181015145326-625cd1887957/go.mod h1:4mhQ8q/RsB7i+
 google.golang.org/appengine v1.1.0/go.mod h1:EbEs0AVv82hx2wNQdGPgUI5lhzA/G0D9YwlJXL52JkM=
 google.golang.org/appengine v1.3.0 h1:FBSsiFRMz3LBeXIomRnVzrQwSDj4ibvcRexLG0LZGQk=
 google.golang.org/appengine v1.3.0/go.mod h1:xpcJRLb0r/rnEns0DIKYYv+WjYCduHsrkT7/EB5XEv4=
+google.golang.org/genproto v0.0.0-20171002232614-f676e0f3ac63/go.mod h1:JiN7NxoALGmiZfu7CAH4rXhgtRTLTxftemlI0sWmxmc=
 google.golang.org/genproto v0.0.0-20180817151627-c66870c02cf8/go.mod h1:JiN7NxoALGmiZfu7CAH4rXhgtRTLTxftemlI0sWmxmc=
 google.golang.org/genproto v0.0.0-20180831171423-11092d34479b h1:lohp5blsw53GBXtLyLNaTXPXS9pJ1tiTw61ZHUoE9Qw=
 google.golang.org/genproto v0.0.0-20180831171423-11092d34479b/go.mod h1:JiN7NxoALGmiZfu7CAH4rXhgtRTLTxftemlI0sWmxmc=
+google.golang.org/grpc v0.0.0-20171025225919-b5eab4ccac6d/go.mod h1:yo6s7OP7yaDglbqo1J04qKzAhqBH6lvTonzMVmEdcZw=
 google.golang.org/grpc v1.14.0 h1:ArxJuB1NWfPY6r9Gp9gqwplT0Ge7nqv9msgu03lHLmo=
 google.golang.org/grpc v1.14.0/go.mod h1:yo6s7OP7yaDglbqo1J04qKzAhqBH6lvTonzMVmEdcZw=
 gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
 gopkg.in/check.v1 v1.0.0-20180628173108-788fd7840127 h1:qIbj1fsPNlZgppZ+VLlY7N33q108Sa+fhmuc+sWQYwY=
 gopkg.in/check.v1 v1.0.0-20180628173108-788fd7840127/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
 gopkg.in/fsnotify.v1 v1.4.7/go.mod h1:Tz8NjZHkW78fSQdbUxIjBTcgA1z1m8ZHf0WmKUhAMys=
+gopkg.in/inf.v0 v0.9.1 h1:73M5CoZyi3ZLMOyDlQh031Cx6N9NDJ2Vvfl76EDAgDc=
+gopkg.in/inf.v0 v0.9.1/go.mod h1:cWUDdTG/fYaXco+Dcufb5Vnc6Gp2YChqWtbxRZE0mXw=
 gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7/go.mod h1:dt/ZhP58zS4L8KSrWDmTeBkI65Dw0HsyUHuEVlX15mw=
 gopkg.in/vmihailenco/msgpack.v2 v2.9.1 h1:kb0VV7NuIojvRfzwslQeP3yArBqJHW9tOl4t38VS1jM=
 gopkg.in/vmihailenco/msgpack.v2 v2.9.1/go.mod h1:/3Dn1Npt9+MYyLpYYXjInO/5jvMLamn+AEGwNEOatn8=
@@ -384,7 +421,15 @@ gopkg.in/yaml.v2 v2.2.1/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
 gopkg.in/yaml.v2 v2.2.2 h1:ZCJp+EgiOT7lHqUV2J862kp8Qj64Jo6az82+3Td9dZw=
 gopkg.in/yaml.v2 v2.2.2/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI=
 howett.net/plist v0.0.0-20181124034731-591f970eefbb/go.mod h1:vMygbs4qMhSZSc4lCUl2OEE+rDiIIJAIdR4m7MiMcm0=
+k8s.io/apimachinery v0.0.0-20190204010555-a98ff070d70e h1:7HZ9Pkl78EapVMHYAVjF1128N/w6ke+aPyo64M9I2Ds=
+k8s.io/apimachinery v0.0.0-20190204010555-a98ff070d70e/go.mod h1:ccL7Eh7zubPUSh9A3USN90/OzHNSVN6zxzde07TDCL0=
+k8s.io/client-go v10.0.0+incompatible h1:F1IqCqw7oMBzDkqlcBymRq1450wD0eNqLE9jzUrIi34=
+k8s.io/client-go v10.0.0+incompatible/go.mod h1:7vJpHMYJwNQCWgzmNV+VYUl1zCObLyodBc8nIyt8L5s=
+k8s.io/klog v0.1.0 h1:I5HMfc/DtuVaGR1KPwUrTc476K8NCqNBldC7H4dYEzk=
+k8s.io/klog v0.1.0/go.mod h1:Gq+BEi5rUBO/HRz0bTSXDUcqjScdoY3a9IHpCEIOOfk=
 labix.org/v2/mgo v0.0.0-20140701140051-000000000287 h1:L0cnkNl4TfAXzvdrqsYEmxOHOCv2p5I3taaReO8BWFs=
 labix.org/v2/mgo v0.0.0-20140701140051-000000000287/go.mod h1:Lg7AYkt1uXJoR9oeSZ3W/8IXLdvOfIITgZnommstyz4=
 launchpad.net/gocheck v0.0.0-20140225173054-000000000087 h1:Izowp2XBH6Ya6rv+hqbceQyw/gSGoXfH/UPoTGduL54=
 launchpad.net/gocheck v0.0.0-20140225173054-000000000087/go.mod h1:hj7XX3B/0A+80Vse0e+BUHsHMTEhd0O4cpUHr/e/BUM=
+sigs.k8s.io/yaml v1.1.0 h1:4A07+ZFc2wgJwo8YNlQpr1rVlgUDlxXHhPJciaPY5gs=
+sigs.k8s.io/yaml v1.1.0/go.mod h1:UJmg0vDUVViEyp3mgSv9WPwZCDxu4rQW1olrI1uml+o=

vendor/github.com/armon/go-radix/go.mod

@@ -0,0 +1 @@
+module github.com/armon/go-radix

vendor/github.com/armon/go-radix/radix.go

@@ -44,13 +44,13 @@ func (n *node) addEdge(e edge) {
 	n.edges.Sort()
 }
 
-func (n *node) replaceEdge(e edge) {
+func (n *node) updateEdge(label byte, node *node) {
 	num := len(n.edges)
 	idx := sort.Search(num, func(i int) bool {
-		return n.edges[i].label >= e.label
+		return n.edges[i].label >= label
 	})
-	if idx < num && n.edges[idx].label == e.label {
+	if idx < num && n.edges[idx].label == label {
-		n.edges[idx].node = e.node
+		n.edges[idx].node = node
 		return
 	}
 	panic("replacing missing edge")
@@ -198,10 +198,7 @@ func (t *Tree) Insert(s string, v interface{}) (interface{}, bool) {
 		child := &node{
 			prefix: search[:commonPrefix],
 		}
-		parent.replaceEdge(edge{
+		parent.updateEdge(search[0], child)
-			label: search[0],
-			node:  child,
-		})
 
 		// Restore the existing node
 		child.addEdge(edge{
@@ -292,6 +289,53 @@ DELETE:
 	return leaf.val, true
 }
 
+// DeletePrefix is used to delete the subtree under a prefix
+// Returns how many nodes were deleted
+// Use this to delete large subtrees efficiently
+func (t *Tree) DeletePrefix(s string) int {
+	return t.deletePrefix(nil, t.root, s)
+}
+
+// delete does a recursive deletion
+func (t *Tree) deletePrefix(parent, n *node, prefix string) int {
+	// Check for key exhaustion
+	if len(prefix) == 0 {
+		// Remove the leaf node
+		subTreeSize := 0
+		//recursively walk from all edges of the node to be deleted
+		recursiveWalk(n, func(s string, v interface{}) bool {
+			subTreeSize++
+			return false
+		})
+		if n.isLeaf() {
+			n.leaf = nil
+		}
+		n.edges = nil // deletes the entire subtree
+
+		// Check if we should merge the parent's other child
+		if parent != nil && parent != t.root && len(parent.edges) == 1 && !parent.isLeaf() {
+			parent.mergeChild()
+		}
+		t.size -= subTreeSize
+		return subTreeSize
+	}
+
+	// Look for an edge
+	label := prefix[0]
+	child := n.getEdge(label)
+	if child == nil || (!strings.HasPrefix(child.prefix, prefix) && !strings.HasPrefix(prefix, child.prefix)) {
+		return 0
+	}
+
+	// Consume the search prefix
+	if len(child.prefix) > len(prefix) {
+		prefix = prefix[len(prefix):]
+	} else {
+		prefix = prefix[len(child.prefix):]
+	}
+	return t.deletePrefix(n, child, prefix)
+}
+
 func (n *node) mergeChild() {
 	e := n.edges[0]
 	child := e.node

vendor/github.com/aws/aws-sdk-go/aws/client/client.go

@@ -18,7 +18,7 @@ type Config struct {
 
 	// States that the signing name did not come from a modeled source but
 	// was derived based on other data. Used by service client constructors
-	// to determine if the signin name can be overriden based on metadata the
+	// to determine if the signin name can be overridden based on metadata the
 	// service has.
 	SigningNameDerived bool
 }

vendor/github.com/aws/aws-sdk-go/aws/context_1_5.go

@@ -1,8 +1,8 @@
+// +build !go1.9
+
 package aws
 
-import (
+import "time"
-	"time"
-)
 
 // Context is an copy of the Go v1.7 stdlib's context.Context interface.
 // It is represented as a SDK interface to enable you to use the "WithContext"
@@ -35,37 +35,3 @@ type Context interface {
 	// functions.
 	Value(key interface{}) interface{}
 }
-
-// BackgroundContext returns a context that will never be canceled, has no
-// values, and no deadline. This context is used by the SDK to provide
-// backwards compatibility with non-context API operations and functionality.
-//
-// Go 1.6 and before:
-// This context function is equivalent to context.Background in the Go stdlib.
-//
-// Go 1.7 and later:
-// The context returned will be the value returned by context.Background()
-//
-// See https://golang.org/pkg/context for more information on Contexts.
-func BackgroundContext() Context {
-	return backgroundCtx
-}
-
-// SleepWithContext will wait for the timer duration to expire, or the context
-// is canceled. Which ever happens first. If the context is canceled the Context's
-// error will be returned.
-//
-// Expects Context to always return a non-nil error if the Done channel is closed.
-func SleepWithContext(ctx Context, dur time.Duration) error {
-	t := time.NewTimer(dur)
-	defer t.Stop()
-
-	select {
-	case <-t.C:
-		break
-	case <-ctx.Done():
-		return ctx.Err()
-	}
-
-	return nil
-}

vendor/github.com/aws/aws-sdk-go/aws/context_1_7.go

@@ -1,9 +0,0 @@
-// +build go1.7
-
-package aws
-
-import "context"
-
-var (
-	backgroundCtx = context.Background()
-)

vendor/github.com/aws/aws-sdk-go/aws/context_1_9.go

@@ -0,0 +1,11 @@
+// +build go1.9
+
+package aws
+
+import "context"
+
+// Context is an alias of the Go stdlib's context.Context interface.
+// It can be used within the SDK's API operation "WithContext" methods.
+//
+// See https://golang.org/pkg/context on how to use contexts.
+type Context = context.Context

vendor/github.com/aws/aws-sdk-go/aws/context_background_1_5.go

@@ -39,3 +39,18 @@ func (e *emptyCtx) String() string {
 var (
 	backgroundCtx = new(emptyCtx)
 )
+
+// BackgroundContext returns a context that will never be canceled, has no
+// values, and no deadline. This context is used by the SDK to provide
+// backwards compatibility with non-context API operations and functionality.
+//
+// Go 1.6 and before:
+// This context function is equivalent to context.Background in the Go stdlib.
+//
+// Go 1.7 and later:
+// The context returned will be the value returned by context.Background()
+//
+// See https://golang.org/pkg/context for more information on Contexts.
+func BackgroundContext() Context {
+	return backgroundCtx
+}

vendor/github.com/aws/aws-sdk-go/aws/context_background_1_7.go

@@ -0,0 +1,20 @@
+// +build go1.7
+
+package aws
+
+import "context"
+
+// BackgroundContext returns a context that will never be canceled, has no
+// values, and no deadline. This context is used by the SDK to provide
+// backwards compatibility with non-context API operations and functionality.
+//
+// Go 1.6 and before:
+// This context function is equivalent to context.Background in the Go stdlib.
+//
+// Go 1.7 and later:
+// The context returned will be the value returned by context.Background()
+//
+// See https://golang.org/pkg/context for more information on Contexts.
+func BackgroundContext() Context {
+	return context.Background()
+}

vendor/github.com/aws/aws-sdk-go/aws/context_sleep.go

@@ -0,0 +1,24 @@
+package aws
+
+import (
+	"time"
+)
+
+// SleepWithContext will wait for the timer duration to expire, or the context
+// is canceled. Which ever happens first. If the context is canceled the Context's
+// error will be returned.
+//
+// Expects Context to always return a non-nil error if the Done channel is closed.
+func SleepWithContext(ctx Context, dur time.Duration) error {
+	t := time.NewTimer(dur)
+	defer t.Stop()
+
+	select {
+	case <-t.C:
+		break
+	case <-ctx.Done():
+		return ctx.Err()
+	}
+
+	return nil
+}

vendor/github.com/aws/aws-sdk-go/aws/corehandlers/user_agent.go

@@ -17,7 +17,7 @@ var SDKVersionUserAgentHandler = request.NamedHandler{
 }
 
 const execEnvVar = `AWS_EXECUTION_ENV`
-const execEnvUAKey = `exec_env`
+const execEnvUAKey = `exec-env`
 
 // AddHostExecEnvUserAgentHander is a request handler appending the SDK's
 // execution environment to the user agent.

vendor/github.com/aws/aws-sdk-go/aws/credentials/credentials.go

@@ -49,6 +49,8 @@
 package credentials
 
 import (
+	"fmt"
+	"github.com/aws/aws-sdk-go/aws/awserr"
 	"sync"
 	"time"
 )
@@ -97,6 +99,14 @@ type Provider interface {
 	IsExpired() bool
 }
 
+// An Expirer is an interface that Providers can implement to expose the expiration
+// time, if known.  If the Provider cannot accurately provide this info,
+// it should not implement this interface.
+type Expirer interface {
+	// The time at which the credentials are no longer valid
+	ExpiresAt() time.Time
+}
+
 // An ErrorProvider is a stub credentials provider that always returns an error
 // this is used by the SDK when construction a known provider is not possible
 // due to an error.
@@ -163,6 +173,11 @@ func (e *Expiry) IsExpired() bool {
 	return e.expiration.Before(curTime())
 }
 
+// ExpiresAt returns the expiration time of the credential
+func (e *Expiry) ExpiresAt() time.Time {
+	return e.expiration
+}
+
 // A Credentials provides concurrency safe retrieval of AWS credentials Value.
 // Credentials will cache the credentials value until they expire. Once the value
 // expires the next Get will attempt to retrieve valid credentials.
@@ -255,3 +270,23 @@ func (c *Credentials) IsExpired() bool {
 func (c *Credentials) isExpired() bool {
 	return c.forceRefresh || c.provider.IsExpired()
 }
+
+// ExpiresAt provides access to the functionality of the Expirer interface of
+// the underlying Provider, if it supports that interface.  Otherwise, it returns
+// an error.
+func (c *Credentials) ExpiresAt() (time.Time, error) {
+	c.m.RLock()
+	defer c.m.RUnlock()
+
+	expirer, ok := c.provider.(Expirer)
+	if !ok {
+		return time.Time{}, awserr.New("ProviderNotExpirer",
+			fmt.Sprintf("provider %s does not support ExpiresAt()", c.creds.ProviderName),
+			nil)
+	}
+	if c.forceRefresh {
+		// set expiration time to the distant past
+		return time.Time{}, nil
+	}
+	return expirer.ExpiresAt(), nil
+}

vendor/github.com/aws/aws-sdk-go/aws/csm/metric.go

@@ -3,6 +3,8 @@ package csm
 import (
 	"strconv"
 	"time"
+
+	"github.com/aws/aws-sdk-go/aws"
 )
 
 type metricTime time.Time
@@ -39,6 +41,12 @@ type metric struct {
 	SDKException        *string `json:"SdkException,omitempty"`
 	SDKExceptionMessage *string `json:"SdkExceptionMessage,omitempty"`
 
+	FinalHTTPStatusCode      *int    `json:"FinalHttpStatusCode,omitempty"`
+	FinalAWSException        *string `json:"FinalAwsException,omitempty"`
+	FinalAWSExceptionMessage *string `json:"FinalAwsExceptionMessage,omitempty"`
+	FinalSDKException        *string `json:"FinalSdkException,omitempty"`
+	FinalSDKExceptionMessage *string `json:"FinalSdkExceptionMessage,omitempty"`
+
 	DestinationIP    *string `json:"DestinationIp,omitempty"`
 	ConnectionReused *int    `json:"ConnectionReused,omitempty"`
 
@@ -51,3 +59,51 @@ type metric struct {
 
 	MaxRetriesExceeded *int `json:"MaxRetriesExceeded,omitempty"`
 }
+
+func (m *metric) TruncateFields() {
+	m.ClientID = truncateString(m.ClientID, 255)
+	m.UserAgent = truncateString(m.UserAgent, 256)
+
+	m.AWSException = truncateString(m.AWSException, 128)
+	m.AWSExceptionMessage = truncateString(m.AWSExceptionMessage, 512)
+
+	m.SDKException = truncateString(m.SDKException, 128)
+	m.SDKExceptionMessage = truncateString(m.SDKExceptionMessage, 512)
+
+	m.FinalAWSException = truncateString(m.FinalAWSException, 128)
+	m.FinalAWSExceptionMessage = truncateString(m.FinalAWSExceptionMessage, 512)
+
+	m.FinalSDKException = truncateString(m.FinalSDKException, 128)
+	m.FinalSDKExceptionMessage = truncateString(m.FinalSDKExceptionMessage, 512)
+}
+
+func truncateString(v *string, l int) *string {
+	if v != nil && len(*v) > l {
+		nv := (*v)[:l]
+		return &nv
+	}
+
+	return v
+}
+
+func (m *metric) SetException(e metricException) {
+	switch te := e.(type) {
+	case awsException:
+		m.AWSException = aws.String(te.exception)
+		m.AWSExceptionMessage = aws.String(te.message)
+	case sdkException:
+		m.SDKException = aws.String(te.exception)
+		m.SDKExceptionMessage = aws.String(te.message)
+	}
+}
+
+func (m *metric) SetFinalException(e metricException) {
+	switch te := e.(type) {
+	case awsException:
+		m.FinalAWSException = aws.String(te.exception)
+		m.FinalAWSExceptionMessage = aws.String(te.message)
+	case sdkException:
+		m.FinalSDKException = aws.String(te.exception)
+		m.FinalSDKExceptionMessage = aws.String(te.message)
+	}
+}

vendor/github.com/aws/aws-sdk-go/aws/csm/metric_exception.go

@@ -0,0 +1,26 @@
+package csm
+
+type metricException interface {
+	Exception() string
+	Message() string
+}
+
+type requestException struct {
+	exception string
+	message   string
+}
+
+func (e requestException) Exception() string {
+	return e.exception
+}
+func (e requestException) Message() string {
+	return e.message
+}
+
+type awsException struct {
+	requestException
+}
+
+type sdkException struct {
+	requestException
+}

vendor/github.com/aws/aws-sdk-go/aws/csm/reporter.go

@@ -82,14 +82,15 @@ func (rep *Reporter) sendAPICallAttemptMetric(r *request.Request) {
 
 	if r.Error != nil {
 		if awserr, ok := r.Error.(awserr.Error); ok {
-			setError(&m, awserr)
+			m.SetException(getMetricException(awserr))
 		}
 	}
 
+	m.TruncateFields()
 	rep.metricsCh.Push(m)
 }
 
-func setError(m *metric, err awserr.Error) {
+func getMetricException(err awserr.Error) metricException {
 	msg := err.Error()
 	code := err.Code()
 
@@ -97,11 +98,13 @@ func setError(m *metric, err awserr.Error) {
 	case "RequestError",
 		"SerializationError",
 		request.CanceledErrorCode:
-		m.SDKException = &code
+		return sdkException{
-		m.SDKExceptionMessage = &msg
+			requestException{exception: code, message: msg},
+		}
 	default:
-		m.AWSException = &code
+		return awsException{
-		m.AWSExceptionMessage = &msg
+			requestException{exception: code, message: msg},
+		}
 	}
 }
 
@@ -116,6 +119,7 @@ func (rep *Reporter) sendAPICallMetric(r *request.Request) {
 		API:                aws.String(r.Operation.Name),
 		Service:            aws.String(r.ClientInfo.ServiceID),
 		Timestamp:          (*metricTime)(&now),
+		UserAgent:          aws.String(r.HTTPRequest.Header.Get("User-Agent")),
 		Type:               aws.String("ApiCall"),
 		AttemptCount:       aws.Int(r.RetryCount + 1),
 		Region:             r.Config.Region,
@@ -124,6 +128,18 @@ func (rep *Reporter) sendAPICallMetric(r *request.Request) {
 		MaxRetriesExceeded: aws.Int(boolIntValue(r.RetryCount >= r.MaxRetries())),
 	}
 
+	if r.HTTPResponse != nil {
+		m.FinalHTTPStatusCode = aws.Int(r.HTTPResponse.StatusCode)
+	}
+
+	if r.Error != nil {
+		if awserr, ok := r.Error.(awserr.Error); ok {
+			m.SetFinalException(getMetricException(awserr))
+		}
+	}
+
+	m.TruncateFields()
+
 	// TODO: Probably want to figure something out for logging dropped
 	// metrics
 	rep.metricsCh.Push(m)
@@ -223,11 +239,15 @@ func (rep *Reporter) InjectHandlers(handlers *request.Handlers) {
 		return
 	}
 
-	apiCallHandler := request.NamedHandler{Name: APICallMetricHandlerName, Fn: rep.sendAPICallMetric}
+	handlers.Complete.PushFrontNamed(request.NamedHandler{
-	apiCallAttemptHandler := request.NamedHandler{Name: APICallAttemptMetricHandlerName, Fn: rep.sendAPICallAttemptMetric}
+		Name: APICallMetricHandlerName,
+		Fn:   rep.sendAPICallMetric,
+	})
 
-	handlers.Complete.PushFrontNamed(apiCallHandler)
+	handlers.CompleteAttempt.PushFrontNamed(request.NamedHandler{
-	handlers.CompleteAttempt.PushFrontNamed(apiCallAttemptHandler)
+		Name: APICallAttemptMetricHandlerName,
+		Fn:   rep.sendAPICallAttemptMetric,
+	})
 }
 
 // boolIntValue return 1 for true and 0 for false.

vendor/github.com/aws/aws-sdk-go/aws/ec2metadata/api.go

@@ -118,6 +118,10 @@ func (c *EC2Metadata) Region() (string, error) {
 		return "", err
 	}
 
+	if len(resp) == 0 {
+		return "", awserr.New("EC2MetadataError", "invalid Region response", nil)
+	}
+
 	// returns region without the suffix. Eg: us-west-2a becomes us-west-2
 	return resp[:len(resp)-1], nil
 }

vendor/github.com/aws/aws-sdk-go/aws/ec2metadata/service.go

@@ -4,7 +4,7 @@
 // This package's client can be disabled completely by setting the environment
 // variable "AWS_EC2_METADATA_DISABLED=true". This environment variable set to
 // true instructs the SDK to disable the EC2 Metadata client. The client cannot
-// be used while the environemnt variable is set to true, (case insensitive).
+// be used while the environment variable is set to true, (case insensitive).
 package ec2metadata
 
 import (

vendor/github.com/aws/aws-sdk-go/aws/endpoints/decode.go

@@ -85,6 +85,7 @@ func decodeV3Endpoints(modelDef modelDefinition, opts DecodeModelOptions) (Resol
 		custAddS3DualStack(p)
 		custRmIotDataService(p)
 		custFixAppAutoscalingChina(p)
+		custFixAppAutoscalingUsGov(p)
 	}
 
 	return ps, nil
@@ -149,6 +150,33 @@ func custFixAppAutoscalingChina(p *partition) {
 	p.Services[serviceName] = s
 }
 
+func custFixAppAutoscalingUsGov(p *partition) {
+	if p.ID != "aws-us-gov" {
+		return
+	}
+
+	const serviceName = "application-autoscaling"
+	s, ok := p.Services[serviceName]
+	if !ok {
+		return
+	}
+
+	if a := s.Defaults.CredentialScope.Service; a != "" {
+		fmt.Printf("custFixAppAutoscalingUsGov: ignoring customization, expected empty credential scope service, got %s\n", a)
+		return
+	}
+
+	if a := s.Defaults.Hostname; a != "" {
+		fmt.Printf("custFixAppAutoscalingUsGov: ignoring customization, expected empty hostname, got %s\n", a)
+		return
+	}
+
+	s.Defaults.CredentialScope.Service = "application-autoscaling"
+	s.Defaults.Hostname = "autoscaling.{region}.amazonaws.com"
+
+	p.Services[serviceName] = s
+}
+
 type decodeModelError struct {
 	awsError
 }

vendor/github.com/aws/aws-sdk-go/aws/endpoints/defaults.go

@@ -185,6 +185,107 @@ var awsPartition = partition{
 				"us-west-2":      endpoint{},
 			},
 		},
+		"api.ecr": service{
+
+			Endpoints: endpoints{
+				"ap-northeast-1": endpoint{
+					Hostname: "api.ecr.ap-northeast-1.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "ap-northeast-1",
+					},
+				},
+				"ap-northeast-2": endpoint{
+					Hostname: "api.ecr.ap-northeast-2.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "ap-northeast-2",
+					},
+				},
+				"ap-south-1": endpoint{
+					Hostname: "api.ecr.ap-south-1.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "ap-south-1",
+					},
+				},
+				"ap-southeast-1": endpoint{
+					Hostname: "api.ecr.ap-southeast-1.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "ap-southeast-1",
+					},
+				},
+				"ap-southeast-2": endpoint{
+					Hostname: "api.ecr.ap-southeast-2.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "ap-southeast-2",
+					},
+				},
+				"ca-central-1": endpoint{
+					Hostname: "api.ecr.ca-central-1.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "ca-central-1",
+					},
+				},
+				"eu-central-1": endpoint{
+					Hostname: "api.ecr.eu-central-1.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "eu-central-1",
+					},
+				},
+				"eu-north-1": endpoint{
+					Hostname: "api.ecr.eu-north-1.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "eu-north-1",
+					},
+				},
+				"eu-west-1": endpoint{
+					Hostname: "api.ecr.eu-west-1.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "eu-west-1",
+					},
+				},
+				"eu-west-2": endpoint{
+					Hostname: "api.ecr.eu-west-2.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "eu-west-2",
+					},
+				},
+				"eu-west-3": endpoint{
+					Hostname: "api.ecr.eu-west-3.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "eu-west-3",
+					},
+				},
+				"sa-east-1": endpoint{
+					Hostname: "api.ecr.sa-east-1.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "sa-east-1",
+					},
+				},
+				"us-east-1": endpoint{
+					Hostname: "api.ecr.us-east-1.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "us-east-1",
+					},
+				},
+				"us-east-2": endpoint{
+					Hostname: "api.ecr.us-east-2.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "us-east-2",
+					},
+				},
+				"us-west-1": endpoint{
+					Hostname: "api.ecr.us-west-1.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "us-west-1",
+					},
+				},
+				"us-west-2": endpoint{
+					Hostname: "api.ecr.us-west-2.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "us-west-2",
+					},
+				},
+			},
+		},
 		"api.mediatailor": service{
 
 			Endpoints: endpoints{
@@ -193,6 +294,7 @@ var awsPartition = partition{
 				"ap-southeast-2": endpoint{},
 				"eu-west-1":      endpoint{},
 				"us-east-1":      endpoint{},
+				"us-west-2":      endpoint{},
 			},
 		},
 		"api.pricing": service{
@@ -281,6 +383,9 @@ var awsPartition = partition{
 			},
 			Endpoints: endpoints{
 				"ap-northeast-1": endpoint{},
+				"ap-southeast-1": endpoint{},
+				"ap-southeast-2": endpoint{},
+				"eu-central-1":   endpoint{},
 				"eu-west-1":      endpoint{},
 				"us-east-1":      endpoint{},
 				"us-west-2":      endpoint{},
@@ -349,10 +454,18 @@ var awsPartition = partition{
 				},
 			},
 			Endpoints: endpoints{
+				"ap-northeast-1": endpoint{},
+				"ap-northeast-2": endpoint{},
+				"ap-south-1":     endpoint{},
 				"ap-southeast-1": endpoint{},
+				"ap-southeast-2": endpoint{},
+				"ca-central-1":   endpoint{},
+				"eu-central-1":   endpoint{},
 				"eu-west-1":      endpoint{},
+				"eu-west-2":      endpoint{},
 				"us-east-1":      endpoint{},
 				"us-east-2":      endpoint{},
+				"us-west-1":      endpoint{},
 				"us-west-2":      endpoint{},
 			},
 		},
@@ -368,6 +481,7 @@ var awsPartition = partition{
 				"eu-central-1":   endpoint{},
 				"eu-west-1":      endpoint{},
 				"eu-west-2":      endpoint{},
+				"eu-west-3":      endpoint{},
 				"sa-east-1":      endpoint{},
 				"us-east-1":      endpoint{},
 				"us-east-2":      endpoint{},
@@ -506,6 +620,7 @@ var awsPartition = partition{
 				"ap-southeast-2": endpoint{},
 				"ca-central-1":   endpoint{},
 				"eu-central-1":   endpoint{},
+				"eu-north-1":     endpoint{},
 				"eu-west-1":      endpoint{},
 				"eu-west-2":      endpoint{},
 				"eu-west-3":      endpoint{},
@@ -759,6 +874,7 @@ var awsPartition = partition{
 			},
 			Endpoints: endpoints{
 				"ap-southeast-2": endpoint{},
+				"eu-central-1":   endpoint{},
 				"eu-west-1":      endpoint{},
 				"us-east-1":      endpoint{},
 				"us-east-2":      endpoint{},
@@ -802,6 +918,21 @@ var awsPartition = partition{
 				"us-west-2":      endpoint{},
 			},
 		},
+		"datasync": service{
+
+			Endpoints: endpoints{
+				"ap-northeast-1": endpoint{},
+				"ap-northeast-2": endpoint{},
+				"ap-southeast-1": endpoint{},
+				"ap-southeast-2": endpoint{},
+				"eu-central-1":   endpoint{},
+				"eu-west-1":      endpoint{},
+				"us-east-1":      endpoint{},
+				"us-east-2":      endpoint{},
+				"us-west-1":      endpoint{},
+				"us-west-2":      endpoint{},
+			},
+		},
 		"dax": service{
 
 			Endpoints: endpoints{
@@ -870,6 +1001,35 @@ var awsPartition = partition{
 				"us-west-2":      endpoint{},
 			},
 		},
+		"docdb": service{
+
+			Endpoints: endpoints{
+				"eu-west-1": endpoint{
+					Hostname: "rds.eu-west-1.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "eu-west-1",
+					},
+				},
+				"us-east-1": endpoint{
+					Hostname: "rds.us-east-1.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "us-east-1",
+					},
+				},
+				"us-east-2": endpoint{
+					Hostname: "rds.us-east-2.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "us-east-2",
+					},
+				},
+				"us-west-2": endpoint{
+					Hostname: "rds.us-west-2.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "us-west-2",
+					},
+				},
+			},
+		},
 		"ds": service{
 
 			Endpoints: endpoints{
@@ -953,27 +1113,6 @@ var awsPartition = partition{
 				},
 			},
 		},
-		"ecr": service{
-
-			Endpoints: endpoints{
-				"ap-northeast-1": endpoint{},
-				"ap-northeast-2": endpoint{},
-				"ap-south-1":     endpoint{},
-				"ap-southeast-1": endpoint{},
-				"ap-southeast-2": endpoint{},
-				"ca-central-1":   endpoint{},
-				"eu-central-1":   endpoint{},
-				"eu-north-1":     endpoint{},
-				"eu-west-1":      endpoint{},
-				"eu-west-2":      endpoint{},
-				"eu-west-3":      endpoint{},
-				"sa-east-1":      endpoint{},
-				"us-east-1":      endpoint{},
-				"us-east-2":      endpoint{},
-				"us-west-1":      endpoint{},
-				"us-west-2":      endpoint{},
-			},
-		},
 		"ecs": service{
 
 			Endpoints: endpoints{
@@ -1032,6 +1171,7 @@ var awsPartition = partition{
 				"ap-southeast-2": endpoint{},
 				"ca-central-1":   endpoint{},
 				"eu-central-1":   endpoint{},
+				"eu-north-1":     endpoint{},
 				"eu-west-1":      endpoint{},
 				"eu-west-2":      endpoint{},
 				"eu-west-3":      endpoint{},
@@ -1205,9 +1345,22 @@ var awsPartition = partition{
 			Defaults: endpoint{
 				Protocols: []string{"https"},
 			},
+			Endpoints: endpoints{
+				"ap-northeast-1": endpoint{},
+				"ap-southeast-2": endpoint{},
+				"eu-central-1":   endpoint{},
+				"eu-west-1":      endpoint{},
+				"us-east-1":      endpoint{},
+				"us-east-2":      endpoint{},
+				"us-west-2":      endpoint{},
+			},
+		},
+		"fsx": service{
+
 			Endpoints: endpoints{
 				"eu-west-1": endpoint{},
 				"us-east-1": endpoint{},
+				"us-east-2": endpoint{},
 				"us-west-2": endpoint{},
 			},
 		},
@@ -1265,8 +1418,10 @@ var awsPartition = partition{
 				"eu-central-1":   endpoint{},
 				"eu-west-1":      endpoint{},
 				"eu-west-2":      endpoint{},
+				"eu-west-3":      endpoint{},
 				"us-east-1":      endpoint{},
 				"us-east-2":      endpoint{},
+				"us-west-1":      endpoint{},
 				"us-west-2":      endpoint{},
 			},
 		},
@@ -1414,6 +1569,7 @@ var awsPartition = partition{
 				"eu-central-1": endpoint{},
 				"eu-west-1":    endpoint{},
 				"us-east-1":    endpoint{},
+				"us-east-2":    endpoint{},
 				"us-west-2":    endpoint{},
 			},
 		},
@@ -1598,6 +1754,7 @@ var awsPartition = partition{
 				"ap-southeast-2": endpoint{},
 				"ca-central-1":   endpoint{},
 				"eu-central-1":   endpoint{},
+				"eu-north-1":     endpoint{},
 				"eu-west-1":      endpoint{},
 				"eu-west-2":      endpoint{},
 				"eu-west-3":      endpoint{},
@@ -1655,6 +1812,21 @@ var awsPartition = partition{
 				"us-west-2":      endpoint{},
 			},
 		},
+		"mq": service{
+
+			Endpoints: endpoints{
+				"ap-northeast-1": endpoint{},
+				"ap-northeast-2": endpoint{},
+				"ap-southeast-1": endpoint{},
+				"ap-southeast-2": endpoint{},
+				"eu-central-1":   endpoint{},
+				"eu-west-1":      endpoint{},
+				"us-east-1":      endpoint{},
+				"us-east-2":      endpoint{},
+				"us-west-1":      endpoint{},
+				"us-west-2":      endpoint{},
+			},
+		},
 		"mturk-requester": service{
 			IsRegionalized: boxedFalse,
 
@@ -1668,6 +1840,18 @@ var awsPartition = partition{
 		"neptune": service{
 
 			Endpoints: endpoints{
+				"ap-southeast-1": endpoint{
+					Hostname: "rds.ap-southeast-1.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "ap-southeast-1",
+					},
+				},
+				"ap-southeast-2": endpoint{
+					Hostname: "rds.ap-southeast-2.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "ap-southeast-2",
+					},
+				},
 				"eu-central-1": endpoint{
 					Hostname: "rds.eu-central-1.amazonaws.com",
 					CredentialScope: credentialScope{
@@ -1760,9 +1944,10 @@ var awsPartition = partition{
 				},
 			},
 			Endpoints: endpoints{
-				"eu-west-1": endpoint{},
+				"eu-central-1": endpoint{},
-				"us-east-1": endpoint{},
+				"eu-west-1":    endpoint{},
-				"us-west-2": endpoint{},
+				"us-east-1":    endpoint{},
+				"us-west-2":    endpoint{},
 			},
 		},
 		"polly": service{
@@ -1850,6 +2035,7 @@ var awsPartition = partition{
 				"ap-southeast-2": endpoint{},
 				"ca-central-1":   endpoint{},
 				"eu-central-1":   endpoint{},
+				"eu-north-1":     endpoint{},
 				"eu-west-1":      endpoint{},
 				"eu-west-2":      endpoint{},
 				"eu-west-3":      endpoint{},
@@ -1887,6 +2073,20 @@ var awsPartition = partition{
 				"us-east-1": endpoint{},
 			},
 		},
+		"route53resolver": service{
+			Defaults: endpoint{
+				Protocols: []string{"https"},
+			},
+			Endpoints: endpoints{
+				"ap-northeast-1": endpoint{},
+				"ap-southeast-1": endpoint{},
+				"ap-southeast-2": endpoint{},
+				"eu-west-1":      endpoint{},
+				"us-east-1":      endpoint{},
+				"us-east-2":      endpoint{},
+				"us-west-2":      endpoint{},
+			},
+		},
 		"runtime.lex": service{
 			Defaults: endpoint{
 				CredentialScope: credentialScope{
@@ -2190,6 +2390,26 @@ var awsPartition = partition{
 				},
 			},
 		},
+		"securityhub": service{
+
+			Endpoints: endpoints{
+				"ap-northeast-1": endpoint{},
+				"ap-northeast-2": endpoint{},
+				"ap-south-1":     endpoint{},
+				"ap-southeast-1": endpoint{},
+				"ap-southeast-2": endpoint{},
+				"ca-central-1":   endpoint{},
+				"eu-central-1":   endpoint{},
+				"eu-west-1":      endpoint{},
+				"eu-west-2":      endpoint{},
+				"eu-west-3":      endpoint{},
+				"sa-east-1":      endpoint{},
+				"us-east-1":      endpoint{},
+				"us-east-2":      endpoint{},
+				"us-west-1":      endpoint{},
+				"us-west-2":      endpoint{},
+			},
+		},
 		"serverlessrepo": service{
 			Defaults: endpoint{
 				Protocols: []string{"https"},
@@ -2306,7 +2526,7 @@ var awsPartition = partition{
 		"shield": service{
 			IsRegionalized: boxedFalse,
 			Defaults: endpoint{
-				SSLCommonName: "Shield.us-east-1.amazonaws.com",
+				SSLCommonName: "shield.us-east-1.amazonaws.com",
 				Protocols:     []string{"https"},
 			},
 			Endpoints: endpoints{
@@ -2459,6 +2679,8 @@ var awsPartition = partition{
 				"eu-north-1":     endpoint{},
 				"eu-west-1":      endpoint{},
 				"eu-west-2":      endpoint{},
+				"eu-west-3":      endpoint{},
+				"sa-east-1":      endpoint{},
 				"us-east-1":      endpoint{},
 				"us-east-2":      endpoint{},
 				"us-west-1":      endpoint{},
@@ -2787,6 +3009,23 @@ var awscnPartition = partition{
 		},
 	},
 	Services: services{
+		"api.ecr": service{
+
+			Endpoints: endpoints{
+				"cn-north-1": endpoint{
+					Hostname: "api.ecr.cn-north-1.amazonaws.com.cn",
+					CredentialScope: credentialScope{
+						Region: "cn-north-1",
+					},
+				},
+				"cn-northwest-1": endpoint{
+					Hostname: "api.ecr.cn-northwest-1.amazonaws.com.cn",
+					CredentialScope: credentialScope{
+						Region: "cn-northwest-1",
+					},
+				},
+			},
+		},
 		"apigateway": service{
 
 			Endpoints: endpoints{
@@ -2907,13 +3146,6 @@ var awscnPartition = partition{
 				},
 			},
 		},
-		"ecr": service{
-
-			Endpoints: endpoints{
-				"cn-north-1":     endpoint{},
-				"cn-northwest-1": endpoint{},
-			},
-		},
 		"ecs": service{
 
 			Endpoints: endpoints{
@@ -2967,6 +3199,13 @@ var awscnPartition = partition{
 				"cn-northwest-1": endpoint{},
 			},
 		},
+		"firehose": service{
+
+			Endpoints: endpoints{
+				"cn-north-1":     endpoint{},
+				"cn-northwest-1": endpoint{},
+			},
+		},
 		"glacier": service{
 			Defaults: endpoint{
 				Protocols: []string{"http", "https"},
@@ -3120,6 +3359,13 @@ var awscnPartition = partition{
 				"cn-northwest-1": endpoint{},
 			},
 		},
+		"states": service{
+
+			Endpoints: endpoints{
+				"cn-north-1":     endpoint{},
+				"cn-northwest-1": endpoint{},
+			},
+		},
 		"storagegateway": service{
 
 			Endpoints: endpoints{
@@ -3198,6 +3444,23 @@ var awsusgovPartition = partition{
 				"us-gov-west-1": endpoint{},
 			},
 		},
+		"api.ecr": service{
+
+			Endpoints: endpoints{
+				"us-gov-east-1": endpoint{
+					Hostname: "api.ecr.us-gov-east-1.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "us-gov-east-1",
+					},
+				},
+				"us-gov-west-1": endpoint{
+					Hostname: "api.ecr.us-gov-west-1.amazonaws.com",
+					CredentialScope: credentialScope{
+						Region: "us-gov-west-1",
+					},
+				},
+			},
+		},
 		"api.sagemaker": service{
 
 			Endpoints: endpoints{
@@ -3212,7 +3475,12 @@ var awsusgovPartition = partition{
 			},
 		},
 		"application-autoscaling": service{
-
+			Defaults: endpoint{
+				Hostname: "autoscaling.{region}.amazonaws.com",
+				CredentialScope: credentialScope{
+					Service: "application-autoscaling",
+				},
+			},
 			Endpoints: endpoints{
 				"us-gov-east-1": endpoint{},
 				"us-gov-west-1": endpoint{},
@@ -3253,6 +3521,7 @@ var awsusgovPartition = partition{
 				},
 			},
 			Endpoints: endpoints{
+				"us-gov-east-1": endpoint{},
 				"us-gov-west-1": endpoint{},
 			},
 		},
@@ -3303,6 +3572,12 @@ var awsusgovPartition = partition{
 				"us-gov-west-1": endpoint{},
 			},
 		},
+		"ds": service{
+
+			Endpoints: endpoints{
+				"us-gov-west-1": endpoint{},
+			},
+		},
 		"dynamodb": service{
 
 			Endpoints: endpoints{
@@ -3334,13 +3609,6 @@ var awsusgovPartition = partition{
 				},
 			},
 		},
-		"ecr": service{
-
-			Endpoints: endpoints{
-				"us-gov-east-1": endpoint{},
-				"us-gov-west-1": endpoint{},
-			},
-		},
 		"ecs": service{
 
 			Endpoints: endpoints{
@@ -3368,6 +3636,12 @@ var awsusgovPartition = partition{
 				"us-gov-west-1": endpoint{},
 			},
 		},
+		"elasticfilesystem": service{
+
+			Endpoints: endpoints{
+				"us-gov-west-1": endpoint{},
+			},
+		},
 		"elasticloadbalancing": service{
 
 			Endpoints: endpoints{
@@ -3400,6 +3674,12 @@ var awsusgovPartition = partition{
 				"us-gov-west-1": endpoint{},
 			},
 		},
+		"firehose": service{
+
+			Endpoints: endpoints{
+				"us-gov-west-1": endpoint{},
+			},
+		},
 		"glacier": service{
 
 			Endpoints: endpoints{
@@ -3476,6 +3756,12 @@ var awsusgovPartition = partition{
 				"us-gov-west-1": endpoint{},
 			},
 		},
+		"mediaconvert": service{
+
+			Endpoints: endpoints{
+				"us-gov-west-1": endpoint{},
+			},
+		},
 		"metering.marketplace": service{
 			Defaults: endpoint{
 				CredentialScope: credentialScope{
@@ -3592,6 +3878,7 @@ var awsusgovPartition = partition{
 		"snowball": service{
 
 			Endpoints: endpoints{
+				"us-gov-east-1": endpoint{},
 				"us-gov-west-1": endpoint{},
 			},
 		},

vendor/github.com/aws/aws-sdk-go/aws/endpoints/endpoints.go

@@ -35,7 +35,7 @@ type Options struct {
 	//
 	// If resolving an endpoint on the partition list the provided region will
 	// be used to determine which partition's domain name pattern to the service
-	// endpoint ID with. If both the service and region are unkonwn and resolving
+	// endpoint ID with. If both the service and region are unknown and resolving
 	// the endpoint on partition list an UnknownEndpointError error will be returned.
 	//
 	// If resolving and endpoint on a partition specific resolver that partition's

vendor/github.com/aws/aws-sdk-go/aws/request/request.go

@@ -4,7 +4,6 @@ import (
 	"bytes"
 	"fmt"
 	"io"
-	"net"
 	"net/http"
 	"net/url"
 	"reflect"
@@ -266,7 +265,7 @@ func (r *Request) SetReaderBody(reader io.ReadSeeker) {
 
 // Presign returns the request's signed URL. Error will be returned
 // if the signing fails. The expire parameter is only used for presigned Amazon
-// S3 API requests. All other AWS services will use a fixed expriation
+// S3 API requests. All other AWS services will use a fixed expiration
 // time of 15 minutes.
 //
 // It is invalid to create a presigned URL with a expire duration 0 or less. An
@@ -286,7 +285,7 @@ func (r *Request) Presign(expire time.Duration) (string, error) {
 // PresignRequest behaves just like presign, with the addition of returning a
 // set of headers that were signed. The expire parameter is only used for
 // presigned Amazon S3 API requests. All other AWS services will use a fixed
-// expriation time of 15 minutes.
+// expiration time of 15 minutes.
 //
 // It is invalid to create a presigned URL with a expire duration 0 or less. An
 // error is returned if expire duration is 0 or less.
@@ -480,7 +479,7 @@ func (r *Request) Send() error {
 
 		if err := r.sendRequest(); err == nil {
 			return nil
-		} else if !shouldRetryCancel(r) {
+		} else if !shouldRetryCancel(r.Error) {
 			return err
 		} else {
 			r.Handlers.Retry.Run(r)
@@ -562,30 +561,46 @@ func AddToUserAgent(r *Request, s string) {
 	r.HTTPRequest.Header.Set("User-Agent", s)
 }
 
-func shouldRetryCancel(r *Request) bool {
+type temporary interface {
-	awsErr, ok := r.Error.(awserr.Error)
+	Temporary() bool
-	timeoutErr := false
+}
-	errStr := r.Error.Error()
+
-	if ok {
+func shouldRetryCancel(err error) bool {
-		if awsErr.Code() == CanceledErrorCode {
+	switch err := err.(type) {
+	case awserr.Error:
+		if err.Code() == CanceledErrorCode {
 			return false
 		}
-		err := awsErr.OrigErr()
+		return shouldRetryCancel(err.OrigErr())
-		netErr, netOK := err.(net.Error)
+	case *url.Error:
-		timeoutErr = netOK && netErr.Temporary()
+		if strings.Contains(err.Error(), "connection refused") {
-		if urlErr, ok := err.(*url.Error); !timeoutErr && ok {
+			// Refused connections should be retried as the service may not yet
-			errStr = urlErr.Err.Error()
+			// be running on the port. Go TCP dial considers refused
+			// connections as not temporary.
+			return true
 		}
+		// *url.Error only implements Temporary after golang 1.6 but since
+		// url.Error only wraps the error:
+		return shouldRetryCancel(err.Err)
+	case temporary:
+		// If the error is temporary, we want to allow continuation of the
+		// retry process
+		return err.Temporary()
+	case nil:
+		// `awserr.Error.OrigErr()` can be nil, meaning there was an error but
+		// because we don't know the cause, it is marked as retriable. See
+		// TestRequest4xxUnretryable for an example.
+		return true
+	default:
+		switch err.Error() {
+		case "net/http: request canceled",
+			"net/http: request canceled while waiting for connection":
+			// known 1.5 error case when an http request is cancelled
+			return false
+		}
+		// here we don't know the error; so we allow a retry.
+		return true
 	}
-
-	// There can be two types of canceled errors here.
-	// The first being a net.Error and the other being an error.
-	// If the request was timed out, we want to continue the retry
-	// process. Otherwise, return the canceled error.
-	return timeoutErr ||
-		(errStr != "net/http: request canceled" &&
-			errStr != "net/http: request canceled while waiting for connection")
-
 }
 
 // SanitizeHostForHeader removes default port from host and updates request.Host

vendor/github.com/aws/aws-sdk-go/aws/session/doc.go

@@ -183,7 +183,7 @@ be returned when creating the session.
     // from assumed role.
     svc := s3.New(sess)
 
-To setup assume role outside of a session see the stscrds.AssumeRoleProvider
+To setup assume role outside of a session see the stscreds.AssumeRoleProvider
 documentation.
 
 Environment Variables

vendor/github.com/aws/aws-sdk-go/aws/session/env_config.go

@@ -80,7 +80,7 @@ type envConfig struct {
 	//	AWS_CONFIG_FILE=$HOME/my_shared_config
 	SharedConfigFile string
 
-	// Sets the path to a custom Credentials Authroity (CA) Bundle PEM file
+	// Sets the path to a custom Credentials Authority (CA) Bundle PEM file
 	// that the SDK will use instead of the system's root CA bundle.
 	// Only use this if you want to configure the SDK to use a custom set
 	// of CAs.

vendor/github.com/aws/aws-sdk-go/aws/signer/v4/v4.go

@@ -182,7 +182,7 @@ type Signer struct {
 	// http://docs.aws.amazon.com/general/latest/gr/sigv4-create-canonical-request.html
 	DisableURIPathEscaping bool
 
-	// Disales the automatical setting of the HTTP request's Body field with the
+	// Disables the automatical setting of the HTTP request's Body field with the
 	// io.ReadSeeker passed in to the signer. This is useful if you're using a
 	// custom wrapper around the body for the io.ReadSeeker and want to preserve
 	// the Body value on the Request.Body.
@@ -754,7 +754,7 @@ func makeSha256Reader(reader io.ReadSeeker) []byte {
 const doubleSpace = "  "
 
 // stripExcessSpaces will rewrite the passed in slice's string values to not
-// contain muliple side-by-side spaces.
+// contain multiple side-by-side spaces.
 func stripExcessSpaces(vals []string) {
 	var j, k, l, m, spaces int
 	for i, str := range vals {

vendor/github.com/aws/aws-sdk-go/aws/version.go

@@ -5,4 +5,4 @@ package aws
 const SDKName = "aws-sdk-go"
 
 // SDKVersion is the version of this SDK
-const SDKVersion = "1.16.4"
+const SDKVersion = "1.16.26"

vendor/github.com/aws/aws-sdk-go/internal/ini/ini_parser.go

@@ -317,7 +317,7 @@ loop:
 		return nil, NewParseError(fmt.Sprintf("incomplete expression: %v", stack.container))
 	}
 
-	// returns a sublist which exludes the start symbol
+	// returns a sublist which excludes the start symbol
 	return stack.List(), nil
 }
 

vendor/github.com/aws/aws-sdk-go/internal/ini/statement.go

@@ -15,7 +15,7 @@ func newExprStatement(ast AST) AST {
 	return newAST(ASTKindExprStatement, ast)
 }
 
-// CommentStatement represents a comment in the ini defintion.
+// CommentStatement represents a comment in the ini definition.
 //
 //	grammar:
 //	comment -> #comment' | ;comment'

vendor/github.com/aws/aws-sdk-go/internal/shareddefaults/ecs_container.go

@@ -7,6 +7,6 @@ const (
 )
 
 // ECSContainerCredentialsURI is the endpoint to retrieve container
-// credentials. This can be overriden to test to ensure the credential process
+// credentials. This can be overridden to test to ensure the credential process
 // is behaving correctly.
 var ECSContainerCredentialsURI = "http://169.254.170.2"

vendor/github.com/aws/aws-sdk-go/service/acmpca/api.go

@@ -83,6 +83,10 @@ func (c *ACMPCA) CreateCertificateAuthorityRequest(input *CreateCertificateAutho
 //   The S3 bucket policy is not valid. The policy must give ACM PCA rights to
 //   read from and write to the bucket and find the bucket location.
 //
+//   * ErrCodeInvalidTagException "InvalidTagException"
+//   The tag associated with the CA is not valid. The invalid argument is contained
+//   in the message field.
+//
 //   * ErrCodeLimitExceededException "LimitExceededException"
 //   An ACM PCA limit has been exceeded. See the exception message returned to
 //   determine the limit that was exceeded.
@@ -183,7 +187,8 @@ func (c *ACMPCA) CreateCertificateAuthorityAuditReportRequest(input *CreateCerti
 //   One or more of the specified arguments was not valid.
 //
 //   * ErrCodeInvalidStateException "InvalidStateException"
-//   The private CA is in a state during which a report cannot be generated.
+//   The private CA is in a state during which a report or certificate cannot
+//   be generated.
 //
 // See also, https://docs.aws.amazon.com/goto/WebAPI/acm-pca-2017-08-22/CreateCertificateAuthorityAuditReport
 func (c *ACMPCA) CreateCertificateAuthorityAuditReport(input *CreateCertificateAuthorityAuditReportInput) (*CreateCertificateAuthorityAuditReportOutput, error) {
@@ -291,7 +296,8 @@ func (c *ACMPCA) DeleteCertificateAuthorityRequest(input *DeleteCertificateAutho
 //   The requested Amazon Resource Name (ARN) does not refer to an existing resource.
 //
 //   * ErrCodeInvalidStateException "InvalidStateException"
-//   The private CA is in a state during which a report cannot be generated.
+//   The private CA is in a state during which a report or certificate cannot
+//   be generated.
 //
 // See also, https://docs.aws.amazon.com/goto/WebAPI/acm-pca-2017-08-22/DeleteCertificateAuthority
 func (c *ACMPCA) DeleteCertificateAuthority(input *DeleteCertificateAuthorityInput) (*DeleteCertificateAuthorityOutput, error) {
@@ -380,8 +386,8 @@ func (c *ACMPCA) DescribeCertificateAuthorityRequest(input *DescribeCertificateA
 //    CA can never return to the pending state. You must create a new CA.
 //
 //    * DELETED - Your private CA is within the restoration period, after which
-//    it will be permanently deleted. The length of time remaining in the CA's
+//    it is permanently deleted. The length of time remaining in the CA's restoration
-//    restoration period will also be included in this operation's output.
+//    period is also included in this operation's output.
 //
 // Returns awserr.Error for service API and SDK errors. Use runtime type assertions
 // with awserr.Error's Code and Message methods to get detailed information about
@@ -583,7 +589,8 @@ func (c *ACMPCA) GetCertificateRequest(input *GetCertificateInput) (req *request
 //   The requested Amazon Resource Name (ARN) does not refer to an existing resource.
 //
 //   * ErrCodeInvalidStateException "InvalidStateException"
-//   The private CA is in a state during which a report cannot be generated.
+//   The private CA is in a state during which a report or certificate cannot
+//   be generated.
 //
 // See also, https://docs.aws.amazon.com/goto/WebAPI/acm-pca-2017-08-22/GetCertificate
 func (c *ACMPCA) GetCertificate(input *GetCertificateInput) (*GetCertificateOutput, error) {
@@ -669,7 +676,8 @@ func (c *ACMPCA) GetCertificateAuthorityCertificateRequest(input *GetCertificate
 //   cannot be found.
 //
 //   * ErrCodeInvalidStateException "InvalidStateException"
-//   The private CA is in a state during which a report cannot be generated.
+//   The private CA is in a state during which a report or certificate cannot
+//   be generated.
 //
 //   * ErrCodeInvalidArnException "InvalidArnException"
 //   The requested Amazon Resource Name (ARN) does not refer to an existing resource.
@@ -769,7 +777,8 @@ func (c *ACMPCA) GetCertificateAuthorityCsrRequest(input *GetCertificateAuthorit
 //   The requested Amazon Resource Name (ARN) does not refer to an existing resource.
 //
 //   * ErrCodeInvalidStateException "InvalidStateException"
-//   The private CA is in a state during which a report cannot be generated.
+//   The private CA is in a state during which a report or certificate cannot
+//   be generated.
 //
 // See also, https://docs.aws.amazon.com/goto/WebAPI/acm-pca-2017-08-22/GetCertificateAuthorityCsr
 func (c *ACMPCA) GetCertificateAuthorityCsr(input *GetCertificateAuthorityCsrInput) (*GetCertificateAuthorityCsrOutput, error) {
@@ -881,7 +890,8 @@ func (c *ACMPCA) ImportCertificateAuthorityCertificateRequest(input *ImportCerti
 //   The requested Amazon Resource Name (ARN) does not refer to an existing resource.
 //
 //   * ErrCodeInvalidStateException "InvalidStateException"
-//   The private CA is in a state during which a report cannot be generated.
+//   The private CA is in a state during which a report or certificate cannot
+//   be generated.
 //
 //   * ErrCodeMalformedCertificateException "MalformedCertificateException"
 //   One or more fields in the certificate are invalid.
@@ -981,7 +991,8 @@ func (c *ACMPCA) IssueCertificateRequest(input *IssueCertificateInput) (req *req
 //   cannot be found.
 //
 //   * ErrCodeInvalidStateException "InvalidStateException"
-//   The private CA is in a state during which a report cannot be generated.
+//   The private CA is in a state during which a report or certificate cannot
+//   be generated.
 //
 //   * ErrCodeInvalidArnException "InvalidArnException"
 //   The requested Amazon Resource Name (ARN) does not refer to an existing resource.
@@ -1045,6 +1056,12 @@ func (c *ACMPCA) ListCertificateAuthoritiesRequest(input *ListCertificateAuthori
 		Name:       opListCertificateAuthorities,
 		HTTPMethod: "POST",
 		HTTPPath:   "/",
+		Paginator: &request.Paginator{
+			InputTokens:     []string{"NextToken"},
+			OutputTokens:    []string{"NextToken"},
+			LimitToken:      "MaxResults",
+			TruncationToken: "",
+		},
 	}
 
 	if input == nil {
@@ -1095,6 +1112,56 @@ func (c *ACMPCA) ListCertificateAuthoritiesWithContext(ctx aws.Context, input *L
 	return out, req.Send()
 }
 
+// ListCertificateAuthoritiesPages iterates over the pages of a ListCertificateAuthorities operation,
+// calling the "fn" function with the response data for each page. To stop
+// iterating, return false from the fn function.
+//
+// See ListCertificateAuthorities method for more information on how to use this operation.
+//
+// Note: This operation can generate multiple requests to a service.
+//
+//    // Example iterating over at most 3 pages of a ListCertificateAuthorities operation.
+//    pageNum := 0
+//    err := client.ListCertificateAuthoritiesPages(params,
+//        func(page *ListCertificateAuthoritiesOutput, lastPage bool) bool {
+//            pageNum++
+//            fmt.Println(page)
+//            return pageNum <= 3
+//        })
+//
+func (c *ACMPCA) ListCertificateAuthoritiesPages(input *ListCertificateAuthoritiesInput, fn func(*ListCertificateAuthoritiesOutput, bool) bool) error {
+	return c.ListCertificateAuthoritiesPagesWithContext(aws.BackgroundContext(), input, fn)
+}
+
+// ListCertificateAuthoritiesPagesWithContext same as ListCertificateAuthoritiesPages except
+// it takes a Context and allows setting request options on the pages.
+//
+// The context must be non-nil and will be used for request cancellation. If
+// the context is nil a panic will occur. In the future the SDK may create
+// sub-contexts for http.Requests. See https://golang.org/pkg/context/
+// for more information on using Contexts.
+func (c *ACMPCA) ListCertificateAuthoritiesPagesWithContext(ctx aws.Context, input *ListCertificateAuthoritiesInput, fn func(*ListCertificateAuthoritiesOutput, bool) bool, opts ...request.Option) error {
+	p := request.Pagination{
+		NewRequest: func() (*request.Request, error) {
+			var inCpy *ListCertificateAuthoritiesInput
+			if input != nil {
+				tmp := *input
+				inCpy = &tmp
+			}
+			req, _ := c.ListCertificateAuthoritiesRequest(inCpy)
+			req.SetContext(ctx)
+			req.ApplyOptions(opts...)
+			return req, nil
+		},
+	}
+
+	cont := true
+	for p.Next() && cont {
+		cont = fn(p.Page().(*ListCertificateAuthoritiesOutput), !p.HasNextPage())
+	}
+	return p.Err()
+}
+
 const opListTags = "ListTags"
 
 // ListTagsRequest generates a "aws/request.Request" representing the
@@ -1255,7 +1322,8 @@ func (c *ACMPCA) RestoreCertificateAuthorityRequest(input *RestoreCertificateAut
 //   cannot be found.
 //
 //   * ErrCodeInvalidStateException "InvalidStateException"
-//   The private CA is in a state during which a report cannot be generated.
+//   The private CA is in a state during which a report or certificate cannot
+//   be generated.
 //
 //   * ErrCodeInvalidArnException "InvalidArnException"
 //   The requested Amazon Resource Name (ARN) does not refer to an existing resource.
@@ -1350,7 +1418,12 @@ func (c *ACMPCA) RevokeCertificateRequest(input *RevokeCertificateInput) (req *r
 //   The requested Amazon Resource Name (ARN) does not refer to an existing resource.
 //
 //   * ErrCodeInvalidStateException "InvalidStateException"
-//   The private CA is in a state during which a report cannot be generated.
+//   The private CA is in a state during which a report or certificate cannot
+//   be generated.
+//
+//   * ErrCodeLimitExceededException "LimitExceededException"
+//   An ACM PCA limit has been exceeded. See the exception message returned to
+//   determine the limit that was exceeded.
 //
 //   * ErrCodeResourceNotFoundException "ResourceNotFoundException"
 //   A resource such as a private CA, S3 bucket, certificate, or audit report
@@ -1458,7 +1531,8 @@ func (c *ACMPCA) TagCertificateAuthorityRequest(input *TagCertificateAuthorityIn
 //   The requested Amazon Resource Name (ARN) does not refer to an existing resource.
 //
 //   * ErrCodeInvalidStateException "InvalidStateException"
-//   The private CA is in a state during which a report cannot be generated.
+//   The private CA is in a state during which a report or certificate cannot
+//   be generated.
 //
 //   * ErrCodeInvalidTagException "InvalidTagException"
 //   The tag associated with the CA is not valid. The invalid argument is contained
@@ -1558,7 +1632,8 @@ func (c *ACMPCA) UntagCertificateAuthorityRequest(input *UntagCertificateAuthori
 //   The requested Amazon Resource Name (ARN) does not refer to an existing resource.
 //
 //   * ErrCodeInvalidStateException "InvalidStateException"
-//   The private CA is in a state during which a report cannot be generated.
+//   The private CA is in a state during which a report or certificate cannot
+//   be generated.
 //
 //   * ErrCodeInvalidTagException "InvalidTagException"
 //   The tag associated with the CA is not valid. The invalid argument is contained
@@ -1658,7 +1733,8 @@ func (c *ACMPCA) UpdateCertificateAuthorityRequest(input *UpdateCertificateAutho
 //   The requested Amazon Resource Name (ARN) does not refer to an existing resource.
 //
 //   * ErrCodeInvalidStateException "InvalidStateException"
-//   The private CA is in a state during which a report cannot be generated.
+//   The private CA is in a state during which a report or certificate cannot
+//   be generated.
 //
 //   * ErrCodeInvalidPolicyException "InvalidPolicyException"
 //   The S3 bucket policy is not valid. The policy must give ACM PCA rights to
@@ -2185,6 +2261,10 @@ type CreateCertificateAuthorityInput struct {
 	// your bucket in the CRL Distribution Points extension of your CA certificate.
 	// For more information, see the CrlConfiguration structure.
 	RevocationConfiguration *RevocationConfiguration `type:"structure"`
+
+	// Key-value pairs that will be attached to the new private CA. You can associate
+	// up to 50 tags with a private CA.
+	Tags []*Tag `min:"1" type:"list"`
 }
 
 // String returns the string representation
@@ -2209,6 +2289,9 @@ func (s *CreateCertificateAuthorityInput) Validate() error {
 	if s.IdempotencyToken != nil && len(*s.IdempotencyToken) < 1 {
 		invalidParams.Add(request.NewErrParamMinLen("IdempotencyToken", 1))
 	}
+	if s.Tags != nil && len(s.Tags) < 1 {
+		invalidParams.Add(request.NewErrParamMinLen("Tags", 1))
+	}
 	if s.CertificateAuthorityConfiguration != nil {
 		if err := s.CertificateAuthorityConfiguration.Validate(); err != nil {
 			invalidParams.AddNested("CertificateAuthorityConfiguration", err.(request.ErrInvalidParams))
@@ -2219,6 +2302,16 @@ func (s *CreateCertificateAuthorityInput) Validate() error {
 			invalidParams.AddNested("RevocationConfiguration", err.(request.ErrInvalidParams))
 		}
 	}
+	if s.Tags != nil {
+		for i, v := range s.Tags {
+			if v == nil {
+				continue
+			}
+			if err := v.Validate(); err != nil {
+				invalidParams.AddNested(fmt.Sprintf("%s[%v]", "Tags", i), err.(request.ErrInvalidParams))
+			}
+		}
+	}
 
 	if invalidParams.Len() > 0 {
 		return invalidParams
@@ -2250,6 +2343,12 @@ func (s *CreateCertificateAuthorityInput) SetRevocationConfiguration(v *Revocati
 	return s
 }
 
+// SetTags sets the Tags field's value.
+func (s *CreateCertificateAuthorityInput) SetTags(v []*Tag) *CreateCertificateAuthorityInput {
+	s.Tags = v
+	return s
+}
+
 type CreateCertificateAuthorityOutput struct {
 	_ struct{} `type:"structure"`
 

vendor/github.com/aws/aws-sdk-go/service/acmpca/doc.go

@@ -28,9 +28,13 @@
 // specify a bucket policy that grants ACM PCA write permission.
 //
 // You can also call the CreateCertificateAuthorityAuditReport to create an
-// optional audit report that lists every time the CA private key is used. The
+// optional audit report, which enumerates all of the issued, valid, expired,
-// private key is used for signing when the IssueCertificate or RevokeCertificate
+// and revoked certificates from the CA.
-// operation is called.
+//
+// Each ACM PCA API operation has a throttling limit which determines the number
+// of times the operation can be called per second. For more information, see
+// API Rate Limits in ACM PCA (acm-pca/latest/userguide/PcaLimits.html#PcaLimits-api)
+// in the ACM PCA user guide.
 //
 // See https://docs.aws.amazon.com/goto/WebAPI/acm-pca-2017-08-22 for more information on this service.
 //

vendor/github.com/aws/aws-sdk-go/service/acmpca/errors.go

@@ -46,7 +46,8 @@ const (
 	// ErrCodeInvalidStateException for service response error code
 	// "InvalidStateException".
 	//
-	// The private CA is in a state during which a report cannot be generated.
+	// The private CA is in a state during which a report or certificate cannot
+	// be generated.
 	ErrCodeInvalidStateException = "InvalidStateException"
 
 	// ErrCodeInvalidTagException for service response error code

vendor/github.com/aws/aws-sdk-go/service/acmpca/waiters.go

@@ -0,0 +1,163 @@
+// Code generated by private/model/cli/gen-api/main.go. DO NOT EDIT.
+
+package acmpca
+
+import (
+	"time"
+
+	"github.com/aws/aws-sdk-go/aws"
+	"github.com/aws/aws-sdk-go/aws/request"
+)
+
+// WaitUntilAuditReportCreated uses the ACM-PCA API operation
+// DescribeCertificateAuthorityAuditReport to wait for a condition to be met before returning.
+// If the condition is not met within the max attempt window, an error will
+// be returned.
+func (c *ACMPCA) WaitUntilAuditReportCreated(input *DescribeCertificateAuthorityAuditReportInput) error {
+	return c.WaitUntilAuditReportCreatedWithContext(aws.BackgroundContext(), input)
+}
+
+// WaitUntilAuditReportCreatedWithContext is an extended version of WaitUntilAuditReportCreated.
+// With the support for passing in a context and options to configure the
+// Waiter and the underlying request options.
+//
+// The context must be non-nil and will be used for request cancellation. If
+// the context is nil a panic will occur. In the future the SDK may create
+// sub-contexts for http.Requests. See https://golang.org/pkg/context/
+// for more information on using Contexts.
+func (c *ACMPCA) WaitUntilAuditReportCreatedWithContext(ctx aws.Context, input *DescribeCertificateAuthorityAuditReportInput, opts ...request.WaiterOption) error {
+	w := request.Waiter{
+		Name:        "WaitUntilAuditReportCreated",
+		MaxAttempts: 60,
+		Delay:       request.ConstantWaiterDelay(3 * time.Second),
+		Acceptors: []request.WaiterAcceptor{
+			{
+				State:   request.SuccessWaiterState,
+				Matcher: request.PathWaiterMatch, Argument: "AuditReportStatus",
+				Expected: "SUCCESS",
+			},
+			{
+				State:   request.FailureWaiterState,
+				Matcher: request.PathWaiterMatch, Argument: "AuditReportStatus",
+				Expected: "FAILED",
+			},
+		},
+		Logger: c.Config.Logger,
+		NewRequest: func(opts []request.Option) (*request.Request, error) {
+			var inCpy *DescribeCertificateAuthorityAuditReportInput
+			if input != nil {
+				tmp := *input
+				inCpy = &tmp
+			}
+			req, _ := c.DescribeCertificateAuthorityAuditReportRequest(inCpy)
+			req.SetContext(ctx)
+			req.ApplyOptions(opts...)
+			return req, nil
+		},
+	}
+	w.ApplyOptions(opts...)
+
+	return w.WaitWithContext(ctx)
+}
+
+// WaitUntilCertificateAuthorityCSRCreated uses the ACM-PCA API operation
+// GetCertificateAuthorityCsr to wait for a condition to be met before returning.
+// If the condition is not met within the max attempt window, an error will
+// be returned.
+func (c *ACMPCA) WaitUntilCertificateAuthorityCSRCreated(input *GetCertificateAuthorityCsrInput) error {
+	return c.WaitUntilCertificateAuthorityCSRCreatedWithContext(aws.BackgroundContext(), input)
+}
+
+// WaitUntilCertificateAuthorityCSRCreatedWithContext is an extended version of WaitUntilCertificateAuthorityCSRCreated.
+// With the support for passing in a context and options to configure the
+// Waiter and the underlying request options.
+//
+// The context must be non-nil and will be used for request cancellation. If
+// the context is nil a panic will occur. In the future the SDK may create
+// sub-contexts for http.Requests. See https://golang.org/pkg/context/
+// for more information on using Contexts.
+func (c *ACMPCA) WaitUntilCertificateAuthorityCSRCreatedWithContext(ctx aws.Context, input *GetCertificateAuthorityCsrInput, opts ...request.WaiterOption) error {
+	w := request.Waiter{
+		Name:        "WaitUntilCertificateAuthorityCSRCreated",
+		MaxAttempts: 60,
+		Delay:       request.ConstantWaiterDelay(3 * time.Second),
+		Acceptors: []request.WaiterAcceptor{
+			{
+				State:    request.SuccessWaiterState,
+				Matcher:  request.StatusWaiterMatch,
+				Expected: 200,
+			},
+			{
+				State:    request.RetryWaiterState,
+				Matcher:  request.ErrorWaiterMatch,
+				Expected: "RequestInProgressException",
+			},
+		},
+		Logger: c.Config.Logger,
+		NewRequest: func(opts []request.Option) (*request.Request, error) {
+			var inCpy *GetCertificateAuthorityCsrInput
+			if input != nil {
+				tmp := *input
+				inCpy = &tmp
+			}
+			req, _ := c.GetCertificateAuthorityCsrRequest(inCpy)
+			req.SetContext(ctx)
+			req.ApplyOptions(opts...)
+			return req, nil
+		},
+	}
+	w.ApplyOptions(opts...)
+
+	return w.WaitWithContext(ctx)
+}
+
+// WaitUntilCertificateIssued uses the ACM-PCA API operation
+// GetCertificate to wait for a condition to be met before returning.
+// If the condition is not met within the max attempt window, an error will
+// be returned.
+func (c *ACMPCA) WaitUntilCertificateIssued(input *GetCertificateInput) error {
+	return c.WaitUntilCertificateIssuedWithContext(aws.BackgroundContext(), input)
+}
+
+// WaitUntilCertificateIssuedWithContext is an extended version of WaitUntilCertificateIssued.
+// With the support for passing in a context and options to configure the
+// Waiter and the underlying request options.
+//
+// The context must be non-nil and will be used for request cancellation. If
+// the context is nil a panic will occur. In the future the SDK may create
+// sub-contexts for http.Requests. See https://golang.org/pkg/context/
+// for more information on using Contexts.
+func (c *ACMPCA) WaitUntilCertificateIssuedWithContext(ctx aws.Context, input *GetCertificateInput, opts ...request.WaiterOption) error {
+	w := request.Waiter{
+		Name:        "WaitUntilCertificateIssued",
+		MaxAttempts: 60,
+		Delay:       request.ConstantWaiterDelay(3 * time.Second),
+		Acceptors: []request.WaiterAcceptor{
+			{
+				State:    request.SuccessWaiterState,
+				Matcher:  request.StatusWaiterMatch,
+				Expected: 200,
+			},
+			{
+				State:    request.RetryWaiterState,
+				Matcher:  request.ErrorWaiterMatch,
+				Expected: "RequestInProgressException",
+			},
+		},
+		Logger: c.Config.Logger,
+		NewRequest: func(opts []request.Option) (*request.Request, error) {
+			var inCpy *GetCertificateInput
+			if input != nil {
+				tmp := *input
+				inCpy = &tmp
+			}
+			req, _ := c.GetCertificateRequest(inCpy)
+			req.SetContext(ctx)
+			req.ApplyOptions(opts...)
+			return req, nil
+		},
+	}
+	w.ApplyOptions(opts...)
+
+	return w.WaitWithContext(ctx)
+}

vendor/github.com/aws/aws-sdk-go/service/apigatewayv2/doc.go

@@ -0,0 +1,28 @@
+// Code generated by private/model/cli/gen-api/main.go. DO NOT EDIT.
+
+// Package apigatewayv2 provides the client and types for making API
+// requests to AmazonApiGatewayV2.
+//
+// Amazon API Gateway V2
+//
+// See https://docs.aws.amazon.com/goto/WebAPI/apigatewayv2-2018-11-29 for more information on this service.
+//
+// See apigatewayv2 package documentation for more information.
+// https://docs.aws.amazon.com/sdk-for-go/api/service/apigatewayv2/
+//
+// Using the Client
+//
+// To contact AmazonApiGatewayV2 with the SDK use the New function to create
+// a new service client. With that client you can make API requests to the service.
+// These clients are safe to use concurrently.
+//
+// See the SDK's documentation for more information on how to use the SDK.
+// https://docs.aws.amazon.com/sdk-for-go/api/
+//
+// See aws.Config documentation for more information on configuring SDK clients.
+// https://docs.aws.amazon.com/sdk-for-go/api/aws/#Config
+//
+// See the AmazonApiGatewayV2 client ApiGatewayV2 for more
+// information on creating client for this service.
+// https://docs.aws.amazon.com/sdk-for-go/api/service/apigatewayv2/#New
+package apigatewayv2

vendor/github.com/aws/aws-sdk-go/service/apigatewayv2/errors.go

@@ -0,0 +1,34 @@
+// Code generated by private/model/cli/gen-api/main.go. DO NOT EDIT.
+
+package apigatewayv2
+
+const (
+
+	// ErrCodeBadRequestException for service response error code
+	// "BadRequestException".
+	//
+	// The request is not valid, for example, the input is incomplete or incorrect.
+	// See the accompanying error message for details.
+	ErrCodeBadRequestException = "BadRequestException"
+
+	// ErrCodeConflictException for service response error code
+	// "ConflictException".
+	//
+	// The requested operation would cause a conflict with the current state of
+	// a service resource associated with the request. Resolve the conflict before
+	// retrying this request. See the accompanying error message for details.
+	ErrCodeConflictException = "ConflictException"
+
+	// ErrCodeNotFoundException for service response error code
+	// "NotFoundException".
+	//
+	// The resource specified in the request was not found. See the message field
+	// for more information.
+	ErrCodeNotFoundException = "NotFoundException"
+
+	// ErrCodeTooManyRequestsException for service response error code
+	// "TooManyRequestsException".
+	//
+	// A limit has been exceeded. See the accompanying error message for details.
+	ErrCodeTooManyRequestsException = "TooManyRequestsException"
+)

vendor/github.com/aws/aws-sdk-go/service/apigatewayv2/service.go

@@ -0,0 +1,99 @@
+// Code generated by private/model/cli/gen-api/main.go. DO NOT EDIT.
+
+package apigatewayv2
+
+import (
+	"github.com/aws/aws-sdk-go/aws"
+	"github.com/aws/aws-sdk-go/aws/client"
+	"github.com/aws/aws-sdk-go/aws/client/metadata"
+	"github.com/aws/aws-sdk-go/aws/request"
+	"github.com/aws/aws-sdk-go/aws/signer/v4"
+	"github.com/aws/aws-sdk-go/private/protocol/restjson"
+)
+
+// ApiGatewayV2 provides the API operation methods for making requests to
+// AmazonApiGatewayV2. See this package's package overview docs
+// for details on the service.
+//
+// ApiGatewayV2 methods are safe to use concurrently. It is not safe to
+// modify mutate any of the struct's properties though.
+type ApiGatewayV2 struct {
+	*client.Client
+}
+
+// Used for custom client initialization logic
+var initClient func(*client.Client)
+
+// Used for custom request initialization logic
+var initRequest func(*request.Request)
+
+// Service information constants
+const (
+	ServiceName = "ApiGatewayV2" // Name of service.
+	EndpointsID = "apigateway"   // ID to lookup a service endpoint with.
+	ServiceID   = "ApiGatewayV2" // ServiceID is a unique identifer of a specific service.
+)
+
+// New creates a new instance of the ApiGatewayV2 client with a session.
+// If additional configuration is needed for the client instance use the optional
+// aws.Config parameter to add your extra config.
+//
+// Example:
+//     // Create a ApiGatewayV2 client from just a session.
+//     svc := apigatewayv2.New(mySession)
+//
+//     // Create a ApiGatewayV2 client with additional configuration
+//     svc := apigatewayv2.New(mySession, aws.NewConfig().WithRegion("us-west-2"))
+func New(p client.ConfigProvider, cfgs ...*aws.Config) *ApiGatewayV2 {
+	c := p.ClientConfig(EndpointsID, cfgs...)
+	if c.SigningNameDerived || len(c.SigningName) == 0 {
+		c.SigningName = "apigateway"
+	}
+	return newClient(*c.Config, c.Handlers, c.Endpoint, c.SigningRegion, c.SigningName)
+}
+
+// newClient creates, initializes and returns a new service client instance.
+func newClient(cfg aws.Config, handlers request.Handlers, endpoint, signingRegion, signingName string) *ApiGatewayV2 {
+	svc := &ApiGatewayV2{
+		Client: client.New(
+			cfg,
+			metadata.ClientInfo{
+				ServiceName:   ServiceName,
+				ServiceID:     ServiceID,
+				SigningName:   signingName,
+				SigningRegion: signingRegion,
+				Endpoint:      endpoint,
+				APIVersion:    "2018-11-29",
+				JSONVersion:   "1.1",
+			},
+			handlers,
+		),
+	}
+
+	// Handlers
+	svc.Handlers.Sign.PushBackNamed(v4.SignRequestHandler)
+	svc.Handlers.Build.PushBackNamed(restjson.BuildHandler)
+	svc.Handlers.Unmarshal.PushBackNamed(restjson.UnmarshalHandler)
+	svc.Handlers.UnmarshalMeta.PushBackNamed(restjson.UnmarshalMetaHandler)
+	svc.Handlers.UnmarshalError.PushBackNamed(restjson.UnmarshalErrorHandler)
+
+	// Run custom client initialization if present
+	if initClient != nil {
+		initClient(svc.Client)
+	}
+
+	return svc
+}
+
+// newRequest creates a new request for a ApiGatewayV2 operation and runs any
+// custom request initialization.
+func (c *ApiGatewayV2) newRequest(op *request.Operation, params, data interface{}) *request.Request {
+	req := c.NewRequest(op, params, data)
+
+	// Run custom request initialization if present
+	if initRequest != nil {
+		initRequest(req)
+	}
+
+	return req
+}

vendor/github.com/aws/aws-sdk-go/service/appmesh/api.go

@@ -937,7 +937,7 @@ func (c *AppMesh) DescribeMeshRequest(input *DescribeMeshInput) (req *request.Re
 
 // DescribeMesh API operation for AWS App Mesh.
 //
-// Describes an existing cluster.
+// Describes an existing service mesh.
 //
 // Returns awserr.Error for service API and SDK errors. Use runtime type assertions
 // with awserr.Error's Code and Message methods to get detailed information about
@@ -3314,34 +3314,45 @@ func (s *DnsServiceDiscovery) SetServiceName(v string) *DnsServiceDiscovery {
 }
 
 // An object representing the health check policy for a virtual node's listener.
-//
-// Listener health checks are not available during the App Mesh preview.
 type HealthCheckPolicy struct {
 	_ struct{} `type:"structure"`
 
 	// The number of consecutive successful health checks that must occur before
 	// declaring listener healthy.
-	HealthyThreshold *int64 `locationName:"healthyThreshold" type:"integer"`
+	//
+	// HealthyThreshold is a required field
+	HealthyThreshold *int64 `locationName:"healthyThreshold" min:"2" type:"integer" required:"true"`
 
 	// The time period in milliseconds between each health check execution.
-	IntervalMillis *int64 `locationName:"intervalMillis" type:"long"`
+	//
+	// IntervalMillis is a required field
+	IntervalMillis *int64 `locationName:"intervalMillis" min:"5000" type:"long" required:"true"`
 
-	// The destination path for the health check request.
+	// The destination path for the health check request. This is only required
+	// if the specified protocol is HTTP; if the protocol is TCP, then this parameter
+	// is ignored.
 	Path *string `locationName:"path" type:"string"`
 
-	// The destination port for the health check request.
+	// The destination port for the health check request. This port must match the
+	// port defined in the PortMapping for the listener.
 	Port *int64 `locationName:"port" min:"1" type:"integer"`
 
 	// The protocol for the health check request.
-	Protocol *string `locationName:"protocol" type:"string" enum:"PortProtocol"`
+	//
+	// Protocol is a required field
+	Protocol *string `locationName:"protocol" type:"string" required:"true" enum:"PortProtocol"`
 
 	// The amount of time to wait when receiving a response from the health check,
 	// in milliseconds.
-	TimeoutMillis *int64 `locationName:"timeoutMillis" type:"long"`
+	//
+	// TimeoutMillis is a required field
+	TimeoutMillis *int64 `locationName:"timeoutMillis" min:"2000" type:"long" required:"true"`
 
 	// The number of consecutive failed health checks that must occur before declaring
 	// a virtual node unhealthy.
-	UnhealthyThreshold *int64 `locationName:"unhealthyThreshold" type:"integer"`
+	//
+	// UnhealthyThreshold is a required field
+	UnhealthyThreshold *int64 `locationName:"unhealthyThreshold" min:"2" type:"integer" required:"true"`
 }
 
 // String returns the string representation
@@ -3357,9 +3368,36 @@ func (s HealthCheckPolicy) GoString() string {
 // Validate inspects the fields of the type to determine if they are valid.
 func (s *HealthCheckPolicy) Validate() error {
 	invalidParams := request.ErrInvalidParams{Context: "HealthCheckPolicy"}
+	if s.HealthyThreshold == nil {
+		invalidParams.Add(request.NewErrParamRequired("HealthyThreshold"))
+	}
+	if s.HealthyThreshold != nil && *s.HealthyThreshold < 2 {
+		invalidParams.Add(request.NewErrParamMinValue("HealthyThreshold", 2))
+	}
+	if s.IntervalMillis == nil {
+		invalidParams.Add(request.NewErrParamRequired("IntervalMillis"))
+	}
+	if s.IntervalMillis != nil && *s.IntervalMillis < 5000 {
+		invalidParams.Add(request.NewErrParamMinValue("IntervalMillis", 5000))
+	}
 	if s.Port != nil && *s.Port < 1 {
 		invalidParams.Add(request.NewErrParamMinValue("Port", 1))
 	}
+	if s.Protocol == nil {
+		invalidParams.Add(request.NewErrParamRequired("Protocol"))
+	}
+	if s.TimeoutMillis == nil {
+		invalidParams.Add(request.NewErrParamRequired("TimeoutMillis"))
+	}
+	if s.TimeoutMillis != nil && *s.TimeoutMillis < 2000 {
+		invalidParams.Add(request.NewErrParamMinValue("TimeoutMillis", 2000))
+	}
+	if s.UnhealthyThreshold == nil {
+		invalidParams.Add(request.NewErrParamRequired("UnhealthyThreshold"))
+	}
+	if s.UnhealthyThreshold != nil && *s.UnhealthyThreshold < 2 {
+		invalidParams.Add(request.NewErrParamMinValue("UnhealthyThreshold", 2))
+	}
 
 	if invalidParams.Len() > 0 {
 		return invalidParams
@@ -3974,8 +4012,6 @@ type Listener struct {
 	_ struct{} `type:"structure"`
 
 	// The health check information for the listener.
-	//
-	// Listener health checks are not available during the App Mesh preview.
 	HealthCheck *HealthCheckPolicy `locationName:"healthCheck" type:"structure"`
 
 	// The port mapping information for the listener.
@@ -4190,10 +4226,10 @@ type ResourceMetadata struct {
 	// with the APPMESH_VIRTUAL_NODE_CLUSTER environment variable.
 	Arn *string `locationName:"arn" type:"string"`
 
-	// The Unix epoch timestamp in seconds for when the cluster was created.
+	// The Unix epoch timestamp in seconds for when the resource was created.
 	CreatedAt *time.Time `locationName:"createdAt" type:"timestamp"`
 
-	// The Unix epoch timestamp in seconds for when the cluster was last updated.
+	// The Unix epoch timestamp in seconds for when the resource was last updated.
 	LastUpdatedAt *time.Time `locationName:"lastUpdatedAt" type:"timestamp"`
 
 	// The unique identifier for the resource.

vendor/github.com/aws/aws-sdk-go/service/appmesh/doc.go

@@ -16,7 +16,7 @@
 // discovery naming for their components. To use App Mesh, you must have a containerized
 // application running on Amazon EC2 instances, hosted in either Amazon ECS,
 // Amazon EKS, or Kubernetes on AWS. For more information about service discovery
-// on Amazon ECS, see Service Discovery (http://docs.aws.amazon.com/AmazonECS/latest/developerguideservice-discovery.html)
+// on Amazon ECS, see Service Discovery (http://docs.aws.amazon.com/AmazonECS/latest/developerguide/service-discovery.html)
 // in the Amazon Elastic Container Service Developer Guide. Kubernetes kube-dns
 // is supported. For more information, see DNS for Services and Pods (https://kubernetes.io/docs/concepts/services-networking/dns-pod-service/)
 // in the Kubernetes documentation.

vendor/github.com/aws/aws-sdk-go/service/athena/api.go

@@ -1561,9 +1561,7 @@ type DeleteNamedQueryInput struct {
 	_ struct{} `type:"structure"`
 
 	// The unique ID of the query to delete.
-	//
+	NamedQueryId *string `type:"string" idempotencyToken:"true"`
-	// NamedQueryId is a required field
-	NamedQueryId *string `type:"string" required:"true" idempotencyToken:"true"`
 }
 
 // String returns the string representation
@@ -1576,19 +1574,6 @@ func (s DeleteNamedQueryInput) GoString() string {
 	return s.String()
 }
 
-// Validate inspects the fields of the type to determine if they are valid.
-func (s *DeleteNamedQueryInput) Validate() error {
-	invalidParams := request.ErrInvalidParams{Context: "DeleteNamedQueryInput"}
-	if s.NamedQueryId == nil {
-		invalidParams.Add(request.NewErrParamRequired("NamedQueryId"))
-	}
-
-	if invalidParams.Len() > 0 {
-		return invalidParams
-	}
-	return nil
-}
-
 // SetNamedQueryId sets the NamedQueryId field's value.
 func (s *DeleteNamedQueryInput) SetNamedQueryId(v string) *DeleteNamedQueryInput {
 	s.NamedQueryId = &v
@@ -2550,9 +2535,7 @@ type StopQueryExecutionInput struct {
 	_ struct{} `type:"structure"`
 
 	// The unique ID of the query execution to stop.
-	//
+	QueryExecutionId *string `type:"string" idempotencyToken:"true"`
-	// QueryExecutionId is a required field
-	QueryExecutionId *string `type:"string" required:"true" idempotencyToken:"true"`
 }
 
 // String returns the string representation
@@ -2565,19 +2548,6 @@ func (s StopQueryExecutionInput) GoString() string {
 	return s.String()
 }
 
-// Validate inspects the fields of the type to determine if they are valid.
-func (s *StopQueryExecutionInput) Validate() error {
-	invalidParams := request.ErrInvalidParams{Context: "StopQueryExecutionInput"}
-	if s.QueryExecutionId == nil {
-		invalidParams.Add(request.NewErrParamRequired("QueryExecutionId"))
-	}
-
-	if invalidParams.Len() > 0 {
-		return invalidParams
-	}
-	return nil
-}
-
 // SetQueryExecutionId sets the QueryExecutionId field's value.
 func (s *StopQueryExecutionInput) SetQueryExecutionId(v string) *StopQueryExecutionInput {
 	s.QueryExecutionId = &v

vendor/github.com/aws/aws-sdk-go/service/backup/doc.go

@@ -0,0 +1,30 @@
+// Code generated by private/model/cli/gen-api/main.go. DO NOT EDIT.
+
+// Package backup provides the client and types for making API
+// requests to AWS Backup.
+//
+// AWS Backup is a unified backup service designed to protect AWS services and
+// their associated data. AWS Backup simplifies the creation, migration, restoration,
+// and deletion of backups, while also providing reporting and auditing.
+//
+// See https://docs.aws.amazon.com/goto/WebAPI/backup-2018-11-15 for more information on this service.
+//
+// See backup package documentation for more information.
+// https://docs.aws.amazon.com/sdk-for-go/api/service/backup/
+//
+// Using the Client
+//
+// To contact AWS Backup with the SDK use the New function to create
+// a new service client. With that client you can make API requests to the service.
+// These clients are safe to use concurrently.
+//
+// See the SDK's documentation for more information on how to use the SDK.
+// https://docs.aws.amazon.com/sdk-for-go/api/
+//
+// See aws.Config documentation for more information on configuring SDK clients.
+// https://docs.aws.amazon.com/sdk-for-go/api/aws/#Config
+//
+// See the AWS Backup client Backup for more
+// information on creating client for this service.
+// https://docs.aws.amazon.com/sdk-for-go/api/service/backup/#New
+package backup

vendor/github.com/aws/aws-sdk-go/service/backup/errors.go

@@ -0,0 +1,58 @@
+// Code generated by private/model/cli/gen-api/main.go. DO NOT EDIT.
+
+package backup
+
+const (
+
+	// ErrCodeAlreadyExistsException for service response error code
+	// "AlreadyExistsException".
+	//
+	// The required resource already exists.
+	ErrCodeAlreadyExistsException = "AlreadyExistsException"
+
+	// ErrCodeDependencyFailureException for service response error code
+	// "DependencyFailureException".
+	//
+	// A dependent AWS service or resource returned an error to the AWS Backup service,
+	// and the action cannot be completed.
+	ErrCodeDependencyFailureException = "DependencyFailureException"
+
+	// ErrCodeInvalidParameterValueException for service response error code
+	// "InvalidParameterValueException".
+	//
+	// Indicates that something is wrong with a parameter's value. For example,
+	// the value is out of range.
+	ErrCodeInvalidParameterValueException = "InvalidParameterValueException"
+
+	// ErrCodeInvalidRequestException for service response error code
+	// "InvalidRequestException".
+	//
+	// Indicates that something is wrong with the input to the request. For example,
+	// a parameter is of the wrong type.
+	ErrCodeInvalidRequestException = "InvalidRequestException"
+
+	// ErrCodeLimitExceededException for service response error code
+	// "LimitExceededException".
+	//
+	// A limit in the request has been exceeded; for example, a maximum number of
+	// items allowed in a request.
+	ErrCodeLimitExceededException = "LimitExceededException"
+
+	// ErrCodeMissingParameterValueException for service response error code
+	// "MissingParameterValueException".
+	//
+	// Indicates that a required parameter is missing.
+	ErrCodeMissingParameterValueException = "MissingParameterValueException"
+
+	// ErrCodeResourceNotFoundException for service response error code
+	// "ResourceNotFoundException".
+	//
+	// A resource that is required for the action doesn't exist.
+	ErrCodeResourceNotFoundException = "ResourceNotFoundException"
+
+	// ErrCodeServiceUnavailableException for service response error code
+	// "ServiceUnavailableException".
+	//
+	// The request failed due to a temporary failure of the server.
+	ErrCodeServiceUnavailableException = "ServiceUnavailableException"
+)

vendor/github.com/aws/aws-sdk-go/service/backup/service.go

@@ -0,0 +1,96 @@
+// Code generated by private/model/cli/gen-api/main.go. DO NOT EDIT.
+
+package backup
+
+import (
+	"github.com/aws/aws-sdk-go/aws"
+	"github.com/aws/aws-sdk-go/aws/client"
+	"github.com/aws/aws-sdk-go/aws/client/metadata"
+	"github.com/aws/aws-sdk-go/aws/request"
+	"github.com/aws/aws-sdk-go/aws/signer/v4"
+	"github.com/aws/aws-sdk-go/private/protocol/restjson"
+)
+
+// Backup provides the API operation methods for making requests to
+// AWS Backup. See this package's package overview docs
+// for details on the service.
+//
+// Backup methods are safe to use concurrently. It is not safe to
+// modify mutate any of the struct's properties though.
+type Backup struct {
+	*client.Client
+}
+
+// Used for custom client initialization logic
+var initClient func(*client.Client)
+
+// Used for custom request initialization logic
+var initRequest func(*request.Request)
+
+// Service information constants
+const (
+	ServiceName = "Backup" // Name of service.
+	EndpointsID = "backup" // ID to lookup a service endpoint with.
+	ServiceID   = "Backup" // ServiceID is a unique identifer of a specific service.
+)
+
+// New creates a new instance of the Backup client with a session.
+// If additional configuration is needed for the client instance use the optional
+// aws.Config parameter to add your extra config.
+//
+// Example:
+//     // Create a Backup client from just a session.
+//     svc := backup.New(mySession)
+//
+//     // Create a Backup client with additional configuration
+//     svc := backup.New(mySession, aws.NewConfig().WithRegion("us-west-2"))
+func New(p client.ConfigProvider, cfgs ...*aws.Config) *Backup {
+	c := p.ClientConfig(EndpointsID, cfgs...)
+	return newClient(*c.Config, c.Handlers, c.Endpoint, c.SigningRegion, c.SigningName)
+}
+
+// newClient creates, initializes and returns a new service client instance.
+func newClient(cfg aws.Config, handlers request.Handlers, endpoint, signingRegion, signingName string) *Backup {
+	svc := &Backup{
+		Client: client.New(
+			cfg,
+			metadata.ClientInfo{
+				ServiceName:   ServiceName,
+				ServiceID:     ServiceID,
+				SigningName:   signingName,
+				SigningRegion: signingRegion,
+				Endpoint:      endpoint,
+				APIVersion:    "2018-11-15",
+				JSONVersion:   "1.1",
+			},
+			handlers,
+		),
+	}
+
+	// Handlers
+	svc.Handlers.Sign.PushBackNamed(v4.SignRequestHandler)
+	svc.Handlers.Build.PushBackNamed(restjson.BuildHandler)
+	svc.Handlers.Unmarshal.PushBackNamed(restjson.UnmarshalHandler)
+	svc.Handlers.UnmarshalMeta.PushBackNamed(restjson.UnmarshalMetaHandler)
+	svc.Handlers.UnmarshalError.PushBackNamed(restjson.UnmarshalErrorHandler)
+
+	// Run custom client initialization if present
+	if initClient != nil {
+		initClient(svc.Client)
+	}
+
+	return svc
+}
+
+// newRequest creates a new request for a Backup operation and runs any
+// custom request initialization.
+func (c *Backup) newRequest(op *request.Operation, params, data interface{}) *request.Request {
+	req := c.NewRequest(op, params, data)
+
+	// Run custom request initialization if present
+	if initRequest != nil {
+		initRequest(req)
+	}
+
+	return req
+}

vendor/github.com/aws/aws-sdk-go/service/cloudformation/api.go

@@ -4706,30 +4706,71 @@ func (s ContinueUpdateRollbackOutput) GoString() string {
 type CreateChangeSetInput struct {
 	_ struct{} `type:"structure"`
 
-	// A list of values that you must specify before AWS CloudFormation can update
+	// In some cases, you must explicity acknowledge that your stack template contains
-	// certain stacks. Some stack templates might include resources that can affect
+	// certain capabilities in order for AWS CloudFormation to create the stack.
-	// permissions in your AWS account, for example, by creating new AWS Identity
+	//
-	// and Access Management (IAM) users. For those stacks, you must explicitly
+	//    * CAPABILITY_IAM and CAPABILITY_NAMED_IAM
-	// acknowledge their capabilities by specifying this parameter.
+	//
+	// Some stack templates might include resources that can affect permissions
+	//    in your AWS account; for example, by creating new AWS Identity and Access
+	//    Management (IAM) users. For those stacks, you must explicitly acknowledge
+	//    this by specifying one of these capabilities.
+	//
+	// The following IAM resources require you to specify either the CAPABILITY_IAM
+	//    or CAPABILITY_NAMED_IAM capability.
+	//
+	// If you have IAM resources, you can specify either capability.
+	//
+	// If you have IAM resources with custom names, you must specify CAPABILITY_NAMED_IAM.
+	//
+	//
+	// If you don't specify either of these capabilities, AWS CloudFormation returns
+	//    an InsufficientCapabilities error.
 	//
-	// The only valid values are CAPABILITY_IAM and CAPABILITY_NAMED_IAM. The following
-	// resources require you to specify this parameter:  AWS::IAM::AccessKey (http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iam-accesskey.html),
-	//  AWS::IAM::Group (http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iam-group.html),
-	//  AWS::IAM::InstanceProfile (http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-instanceprofile.html),
-	//  AWS::IAM::Policy (http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iam-policy.html),
-	//  AWS::IAM::Role (http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-role.html),
-	//  AWS::IAM::User (http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iam-user.html),
-	// and  AWS::IAM::UserToGroupAddition (http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iam-addusertogroup.html).
 	// If your stack template contains these resources, we recommend that you review
-	// all permissions associated with them and edit their permissions if necessary.
+	//    all permissions associated with them and edit their permissions if necessary.
 	//
-	// If you have IAM resources, you can specify either capability. If you have
+	//  AWS::IAM::AccessKey (http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iam-accesskey.html)
-	// IAM resources with custom names, you must specify CAPABILITY_NAMED_IAM. If
+	//
-	// you don't specify this parameter, this action returns an InsufficientCapabilities
+	//  AWS::IAM::Group (http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iam-group.html)
-	// error.
+	//
+	//  AWS::IAM::InstanceProfile (http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-instanceprofile.html)
+	//
+	//  AWS::IAM::Policy (http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iam-policy.html)
+	//
+	//  AWS::IAM::Role (http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-role.html)
+	//
+	//  AWS::IAM::User (http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iam-user.html)
+	//
+	//  AWS::IAM::UserToGroupAddition (http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iam-addusertogroup.html)
 	//
 	// For more information, see Acknowledging IAM Resources in AWS CloudFormation
-	// Templates (http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-iam-template.html#capabilities).
+	//    Templates (http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-iam-template.html#capabilities).
+	//
+	//    * CAPABILITY_AUTO_EXPAND
+	//
+	// Some template contain macros. Macros perform custom processing on templates;
+	//    this can include simple actions like find-and-replace operations, all
+	//    the way to extensive transformations of entire templates. Because of this,
+	//    users typically create a change set from the processed template, so that
+	//    they can review the changes resulting from the macros before actually
+	//    creating the stack. If your stack template contains one or more macros,
+	//    and you choose to create a stack directly from the processed template,
+	//    without first reviewing the resulting changes in a change set, you must
+	//    acknowledge this capability. This includes the AWS::Include (http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/create-reusable-transform-function-snippets-and-add-to-your-template-with-aws-include-transform.html)
+	//    and AWS::Serverless (http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/transform-aws-serverless.html)
+	//    transforms, which are macros hosted by AWS CloudFormation.
+	//
+	// This capacity does not apply to creating change sets, and specifying it when
+	//    creating change sets has no effect.
+	//
+	// Also, change sets do not currently support nested stacks. If you want to
+	//    create a stack from a stack template that contains macros and nested stacks,
+	//    you must create or update the stack directly from the template using the
+	//    CreateStack or UpdateStack action, and specifying this capability.
+	//
+	// For more information on macros, see Using AWS CloudFormation Macros to Perform
+	//    Custom Processing on Templates (http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/template-macros.html).
 	Capabilities []*string `type:"list"`
 
 	// The name of the change set. The name must be unique among all change sets
@@ -5064,7 +5105,7 @@ type CreateStackInput struct {
 	//  AWS::IAM::UserToGroupAddition (http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iam-addusertogroup.html)
 	//
 	// For more information, see Acknowledging IAM Resources in AWS CloudFormation
-	//    Templates (http://docs.aws.amazon.com/http:/docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-iam-template.html#capabilities).
+	//    Templates (http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-iam-template.html#capabilities).
 	//
 	//    * CAPABILITY_AUTO_EXPAND
 	//
@@ -5076,8 +5117,8 @@ type CreateStackInput struct {
 	//    creating the stack. If your stack template contains one or more macros,
 	//    and you choose to create a stack directly from the processed template,
 	//    without first reviewing the resulting changes in a change set, you must
-	//    acknowledge this capability. This includes the AWS::Include (http://docs.aws.amazon.com/http:/docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/create-reusable-transform-function-snippets-and-add-to-your-template-with-aws-include-transform.html)
+	//    acknowledge this capability. This includes the AWS::Include (http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/create-reusable-transform-function-snippets-and-add-to-your-template-with-aws-include-transform.html)
-	//    and AWS::Serverless (http://docs.aws.amazon.com/http:/docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/transform-aws-serverless.html)
+	//    and AWS::Serverless (http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/transform-aws-serverless.html)
 	//    transforms, which are macros hosted by AWS CloudFormation.
 	//
 	// Change sets do not currently support nested stacks. If you want to create
@@ -5092,7 +5133,7 @@ type CreateStackInput struct {
 	//    function operation without AWS CloudFormation being notified.
 	//
 	// For more information, see Using AWS CloudFormation Macros to Perform Custom
-	//    Processing on Templates (http://docs.aws.amazon.com/http:/docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/template-macros.html).
+	//    Processing on Templates (http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/template-macros.html).
 	Capabilities []*string `type:"list"`
 
 	// A unique identifier for this CreateStack request. Specify this token if you
@@ -5596,40 +5637,62 @@ type CreateStackSetInput struct {
 	// in the AWS CloudFormation User Guide.
 	AdministrationRoleARN *string `min:"20" type:"string"`
 
-	// A list of values that you must specify before AWS CloudFormation can create
+	// In some cases, you must explicity acknowledge that your stack set template
-	// certain stack sets. Some stack set templates might include resources that
+	// contains certain capabilities in order for AWS CloudFormation to create the
-	// can affect permissions in your AWS account—for example, by creating new AWS
+	// stack set and related stack instances.
-	// Identity and Access Management (IAM) users. For those stack sets, you must
-	// explicitly acknowledge their capabilities by specifying this parameter.
 	//
-	// The only valid values are CAPABILITY_IAM and CAPABILITY_NAMED_IAM. The following
+	//    * CAPABILITY_IAM and CAPABILITY_NAMED_IAM
-	// resources require you to specify this parameter:
 	//
-	//    * AWS::IAM::AccessKey
+	// Some stack templates might include resources that can affect permissions
+	//    in your AWS account; for example, by creating new AWS Identity and Access
+	//    Management (IAM) users. For those stack sets, you must explicitly acknowledge
+	//    this by specifying one of these capabilities.
 	//
-	//    * AWS::IAM::Group
+	// The following IAM resources require you to specify either the CAPABILITY_IAM
+	//    or CAPABILITY_NAMED_IAM capability.
 	//
-	//    * AWS::IAM::InstanceProfile
+	// If you have IAM resources, you can specify either capability.
 	//
-	//    * AWS::IAM::Policy
+	// If you have IAM resources with custom names, you must specify CAPABILITY_NAMED_IAM.
 	//
-	//    * AWS::IAM::Role
 	//
-	//    * AWS::IAM::User
+	// If you don't specify either of these capabilities, AWS CloudFormation returns
-	//
+	//    an InsufficientCapabilities error.
-	//    * AWS::IAM::UserToGroupAddition
 	//
 	// If your stack template contains these resources, we recommend that you review
-	// all permissions that are associated with them and edit their permissions
+	//    all permissions associated with them and edit their permissions if necessary.
-	// if necessary.
 	//
-	// If you have IAM resources, you can specify either capability. If you have
+	//  AWS::IAM::AccessKey (http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iam-accesskey.html)
-	// IAM resources with custom names, you must specify CAPABILITY_NAMED_IAM. If
+	//
-	// you don't specify this parameter, this action returns an InsufficientCapabilities
+	//  AWS::IAM::Group (http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iam-group.html)
-	// error.
+	//
+	//  AWS::IAM::InstanceProfile (http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-instanceprofile.html)
+	//
+	//  AWS::IAM::Policy (http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iam-policy.html)
+	//
+	//  AWS::IAM::Role (http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-role.html)
+	//
+	//  AWS::IAM::User (http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iam-user.html)
+	//
+	//  AWS::IAM::UserToGroupAddition (http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iam-addusertogroup.html)
 	//
 	// For more information, see Acknowledging IAM Resources in AWS CloudFormation
-	// Templates. (http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-iam-template.html#capabilities)
+	//    Templates (http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-iam-template.html#capabilities).
+	//
+	//    * CAPABILITY_AUTO_EXPAND
+	//
+	// Some templates contain macros. If your stack template contains one or more
+	//    macros, and you choose to create a stack directly from the processed template,
+	//    without first reviewing the resulting changes in a change set, you must
+	//    acknowledge this capability. For more information, see Using AWS CloudFormation
+	//    Macros to Perform Custom Processing on Templates (http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/template-macros.html).
+	//
+	// Stack sets do not currently support macros in stack templates. (This includes
+	//    the AWS::Include (http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/create-reusable-transform-function-snippets-and-add-to-your-template-with-aws-include-transform.html)
+	//    and AWS::Serverless (http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/transform-aws-serverless.html)
+	//    transforms, which are macros hosted by AWS CloudFormation.) Even if you
+	//    specify this capability, if you include a macro in your template the stack
+	//    set operation will fail.
 	Capabilities []*string `type:"list"`
 
 	// A unique identifier for this CreateStackSet request. Specify this token if
@@ -9975,7 +10038,7 @@ type Stack struct {
 	// Information on whether a stack's actual configuration differs, or has drifted,
 	// from it's expected configuration, as defined in the stack template and any
 	// values specified as template parameters. For more information, see Detecting
-	// Unregulated Configuration Changes to Stacks and Resources (http://docs.aws.amazon.com/http:/docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-stack-drift.html).
+	// Unregulated Configuration Changes to Stacks and Resources (http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-stack-drift.html).
 	DriftInformation *StackDriftInformation `type:"structure"`
 
 	// Whether termination protection is enabled for the stack.
@@ -10630,7 +10693,7 @@ type StackResource struct {
 	// Information about whether the resource's actual configuration differs, or
 	// has drifted, from its expected configuration, as defined in the stack template
 	// and any values specified as template parameters. For more information, see
-	// Detecting Unregulated Configuration Changes to Stacks and Resources (http://docs.aws.amazon.com/http:/docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-stack-drift.html).
+	// Detecting Unregulated Configuration Changes to Stacks and Resources (http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-stack-drift.html).
 	DriftInformation *StackResourceDriftInformation `type:"structure"`
 
 	// The logical name of the resource specified in the template.
@@ -10749,7 +10812,7 @@ type StackResourceDetail struct {
 	// Information about whether the resource's actual configuration differs, or
 	// has drifted, from its expected configuration, as defined in the stack template
 	// and any values specified as template parameters. For more information, see
-	// Detecting Unregulated Configuration Changes to Stacks and Resources (http://docs.aws.amazon.com/http:/docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-stack-drift.html).
+	// Detecting Unregulated Configuration Changes to Stacks and Resources (http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-stack-drift.html).
 	DriftInformation *StackResourceDriftInformation `type:"structure"`
 
 	// Time the status was updated.
@@ -10877,7 +10940,7 @@ func (s *StackResourceDetail) SetStackName(v string) *StackResourceDetail {
 //
 // Resources that do not currently support drift detection cannot be checked.
 // For a list of resources that support drift detection, see Resources that
-// Support Drift Detection (http://docs.aws.amazon.com/http:/docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-stack-drift-resource-list.html).
+// Support Drift Detection (http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-stack-drift-resource-list.html).
 //
 // Use DetectStackResourceDrift to detect drift on individual resources, or
 // DetectStackDrift to detect drift on all resources in a given stack that support
@@ -11137,7 +11200,7 @@ type StackResourceSummary struct {
 	// Information about whether the resource's actual configuration differs, or
 	// has drifted, from its expected configuration, as defined in the stack template
 	// and any values specified as template parameters. For more information, see
-	// Detecting Unregulated Configuration Changes to Stacks and Resources (http://docs.aws.amazon.com/http:/docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-stack-drift.html).
+	// Detecting Unregulated Configuration Changes to Stacks and Resources (http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-stack-drift.html).
 	DriftInformation *StackResourceDriftInformationSummary `type:"structure"`
 
 	// Time the status was updated.
@@ -11853,7 +11916,7 @@ type StackSummary struct {
 	// Summarizes information on whether a stack's actual configuration differs,
 	// or has drifted, from it's expected configuration, as defined in the stack
 	// template and any values specified as template parameters. For more information,
-	// see Detecting Unregulated Configuration Changes to Stacks and Resources (http://docs.aws.amazon.com/http:/docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-stack-drift.html).
+	// see Detecting Unregulated Configuration Changes to Stacks and Resources (http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-stack-drift.html).
 	DriftInformation *StackDriftInformationSummary `type:"structure"`
 
 	// The time the stack was last updated. This field will only be returned if
@@ -12199,7 +12262,7 @@ type UpdateStackInput struct {
 	//  AWS::IAM::UserToGroupAddition (http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iam-addusertogroup.html)
 	//
 	// For more information, see Acknowledging IAM Resources in AWS CloudFormation
-	//    Templates (http://docs.aws.amazon.com/http:/docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-iam-template.html#capabilities).
+	//    Templates (http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-iam-template.html#capabilities).
 	//
 	//    * CAPABILITY_AUTO_EXPAND
 	//
@@ -12211,8 +12274,8 @@ type UpdateStackInput struct {
 	//    updating the stack. If your stack template contains one or more macros,
 	//    and you choose to update a stack directly from the processed template,
 	//    without first reviewing the resulting changes in a change set, you must
-	//    acknowledge this capability. This includes the AWS::Include (http://docs.aws.amazon.com/http:/docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/create-reusable-transform-function-snippets-and-add-to-your-template-with-aws-include-transform.html)
+	//    acknowledge this capability. This includes the AWS::Include (http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/create-reusable-transform-function-snippets-and-add-to-your-template-with-aws-include-transform.html)
-	//    and AWS::Serverless (http://docs.aws.amazon.com/http:/docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/transform-aws-serverless.html)
+	//    and AWS::Serverless (http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/transform-aws-serverless.html)
 	//    transforms, which are macros hosted by AWS CloudFormation.
 	//
 	// Change sets do not currently support nested stacks. If you want to update
@@ -12227,7 +12290,7 @@ type UpdateStackInput struct {
 	//    function operation without AWS CloudFormation being notified.
 	//
 	// For more information, see Using AWS CloudFormation Macros to Perform Custom
-	//    Processing on Templates (http://docs.aws.amazon.com/http:/docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/template-macros.html).
+	//    Processing on Templates (http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/template-macros.html).
 	Capabilities []*string `type:"list"`
 
 	// A unique identifier for this UpdateStack request. Specify this token if you
@@ -12750,40 +12813,62 @@ type UpdateStackSetInput struct {
 	// on the stack set.
 	AdministrationRoleARN *string `min:"20" type:"string"`
 
-	// A list of values that you must specify before AWS CloudFormation can create
+	// In some cases, you must explicity acknowledge that your stack template contains
-	// certain stack sets. Some stack set templates might include resources that
+	// certain capabilities in order for AWS CloudFormation to update the stack
-	// can affect permissions in your AWS account—for example, by creating new AWS
+	// set and its associated stack instances.
-	// Identity and Access Management (IAM) users. For those stack sets, you must
-	// explicitly acknowledge their capabilities by specifying this parameter.
 	//
-	// The only valid values are CAPABILITY_IAM and CAPABILITY_NAMED_IAM. The following
+	//    * CAPABILITY_IAM and CAPABILITY_NAMED_IAM
-	// resources require you to specify this parameter:
 	//
-	//    * AWS::IAM::AccessKey
+	// Some stack templates might include resources that can affect permissions
+	//    in your AWS account; for example, by creating new AWS Identity and Access
+	//    Management (IAM) users. For those stacks sets, you must explicitly acknowledge
+	//    this by specifying one of these capabilities.
 	//
-	//    * AWS::IAM::Group
+	// The following IAM resources require you to specify either the CAPABILITY_IAM
+	//    or CAPABILITY_NAMED_IAM capability.
 	//
-	//    * AWS::IAM::InstanceProfile
+	// If you have IAM resources, you can specify either capability.
 	//
-	//    * AWS::IAM::Policy
+	// If you have IAM resources with custom names, you must specify CAPABILITY_NAMED_IAM.
 	//
-	//    * AWS::IAM::Role
 	//
-	//    * AWS::IAM::User
+	// If you don't specify either of these capabilities, AWS CloudFormation returns
-	//
+	//    an InsufficientCapabilities error.
-	//    * AWS::IAM::UserToGroupAddition
 	//
 	// If your stack template contains these resources, we recommend that you review
-	// all permissions that are associated with them and edit their permissions
+	//    all permissions associated with them and edit their permissions if necessary.
-	// if necessary.
 	//
-	// If you have IAM resources, you can specify either capability. If you have
+	//  AWS::IAM::AccessKey (http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iam-accesskey.html)
-	// IAM resources with custom names, you must specify CAPABILITY_NAMED_IAM. If
+	//
-	// you don't specify this parameter, this action returns an InsufficientCapabilities
+	//  AWS::IAM::Group (http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iam-group.html)
-	// error.
+	//
+	//  AWS::IAM::InstanceProfile (http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-instanceprofile.html)
+	//
+	//  AWS::IAM::Policy (http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iam-policy.html)
+	//
+	//  AWS::IAM::Role (http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-iam-role.html)
+	//
+	//  AWS::IAM::User (http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iam-user.html)
+	//
+	//  AWS::IAM::UserToGroupAddition (http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-iam-addusertogroup.html)
 	//
 	// For more information, see Acknowledging IAM Resources in AWS CloudFormation
-	// Templates. (http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-iam-template.html#capabilities)
+	//    Templates (http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-iam-template.html#capabilities).
+	//
+	//    * CAPABILITY_AUTO_EXPAND
+	//
+	// Some templates contain macros. If your stack template contains one or more
+	//    macros, and you choose to update a stack directly from the processed template,
+	//    without first reviewing the resulting changes in a change set, you must
+	//    acknowledge this capability. For more information, see Using AWS CloudFormation
+	//    Macros to Perform Custom Processing on Templates (http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/template-macros.html).
+	//
+	// Stack sets do not currently support macros in stack templates. (This includes
+	//    the AWS::Include (http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/create-reusable-transform-function-snippets-and-add-to-your-template-with-aws-include-transform.html)
+	//    and AWS::Serverless (http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/transform-aws-serverless.html)
+	//    transforms, which are macros hosted by AWS CloudFormation.) Even if you
+	//    specify this capability, if you include a macro in your template the stack
+	//    set operation will fail.
 	Capabilities []*string `type:"list"`
 
 	// A brief description of updates that you are making.

vendor/github.com/aws/aws-sdk-go/service/cloudsearch/doc.go

@@ -0,0 +1,33 @@
+// Code generated by private/model/cli/gen-api/main.go. DO NOT EDIT.
+
+// Package cloudsearch provides the client and types for making API
+// requests to Amazon CloudSearch.
+//
+// You use the Amazon CloudSearch configuration service to create, configure,
+// and manage search domains. Configuration service requests are submitted using
+// the AWS Query protocol. AWS Query requests are HTTP or HTTPS requests submitted
+// via HTTP GET or POST with a query parameter named Action.
+//
+// The endpoint for configuration service requests is region-specific: cloudsearch.region.amazonaws.com.
+// For example, cloudsearch.us-east-1.amazonaws.com. For a current list of supported
+// regions and endpoints, see Regions and Endpoints (http://docs.aws.amazon.com/general/latest/gr/rande.html#cloudsearch_region).
+//
+// See cloudsearch package documentation for more information.
+// https://docs.aws.amazon.com/sdk-for-go/api/service/cloudsearch/
+//
+// Using the Client
+//
+// To contact Amazon CloudSearch with the SDK use the New function to create
+// a new service client. With that client you can make API requests to the service.
+// These clients are safe to use concurrently.
+//
+// See the SDK's documentation for more information on how to use the SDK.
+// https://docs.aws.amazon.com/sdk-for-go/api/
+//
+// See aws.Config documentation for more information on configuring SDK clients.
+// https://docs.aws.amazon.com/sdk-for-go/api/aws/#Config
+//
+// See the Amazon CloudSearch client CloudSearch for more
+// information on creating client for this service.
+// https://docs.aws.amazon.com/sdk-for-go/api/service/cloudsearch/#New
+package cloudsearch

vendor/github.com/aws/aws-sdk-go/service/cloudsearch/errors.go

@@ -0,0 +1,44 @@
+// Code generated by private/model/cli/gen-api/main.go. DO NOT EDIT.
+
+package cloudsearch
+
+const (
+
+	// ErrCodeBaseException for service response error code
+	// "BaseException".
+	//
+	// An error occurred while processing the request.
+	ErrCodeBaseException = "BaseException"
+
+	// ErrCodeDisabledOperationException for service response error code
+	// "DisabledAction".
+	//
+	// The request was rejected because it attempted an operation which is not enabled.
+	ErrCodeDisabledOperationException = "DisabledAction"
+
+	// ErrCodeInternalException for service response error code
+	// "InternalException".
+	//
+	// An internal error occurred while processing the request. If this problem
+	// persists, report an issue from the Service Health Dashboard (http://status.aws.amazon.com/).
+	ErrCodeInternalException = "InternalException"
+
+	// ErrCodeInvalidTypeException for service response error code
+	// "InvalidType".
+	//
+	// The request was rejected because it specified an invalid type definition.
+	ErrCodeInvalidTypeException = "InvalidType"
+
+	// ErrCodeLimitExceededException for service response error code
+	// "LimitExceeded".
+	//
+	// The request was rejected because a resource limit has already been met.
+	ErrCodeLimitExceededException = "LimitExceeded"
+
+	// ErrCodeResourceNotFoundException for service response error code
+	// "ResourceNotFound".
+	//
+	// The request was rejected because it attempted to reference a resource that
+	// does not exist.
+	ErrCodeResourceNotFoundException = "ResourceNotFound"
+)

vendor/github.com/aws/aws-sdk-go/service/cloudsearch/service.go

@@ -0,0 +1,95 @@
+// Code generated by private/model/cli/gen-api/main.go. DO NOT EDIT.
+
+package cloudsearch
+
+import (
+	"github.com/aws/aws-sdk-go/aws"
+	"github.com/aws/aws-sdk-go/aws/client"
+	"github.com/aws/aws-sdk-go/aws/client/metadata"
+	"github.com/aws/aws-sdk-go/aws/request"
+	"github.com/aws/aws-sdk-go/aws/signer/v4"
+	"github.com/aws/aws-sdk-go/private/protocol/query"
+)
+
+// CloudSearch provides the API operation methods for making requests to
+// Amazon CloudSearch. See this package's package overview docs
+// for details on the service.
+//
+// CloudSearch methods are safe to use concurrently. It is not safe to
+// modify mutate any of the struct's properties though.
+type CloudSearch struct {
+	*client.Client
+}
+
+// Used for custom client initialization logic
+var initClient func(*client.Client)
+
+// Used for custom request initialization logic
+var initRequest func(*request.Request)
+
+// Service information constants
+const (
+	ServiceName = "cloudsearch" // Name of service.
+	EndpointsID = ServiceName   // ID to lookup a service endpoint with.
+	ServiceID   = "CloudSearch" // ServiceID is a unique identifer of a specific service.
+)
+
+// New creates a new instance of the CloudSearch client with a session.
+// If additional configuration is needed for the client instance use the optional
+// aws.Config parameter to add your extra config.
+//
+// Example:
+//     // Create a CloudSearch client from just a session.
+//     svc := cloudsearch.New(mySession)
+//
+//     // Create a CloudSearch client with additional configuration
+//     svc := cloudsearch.New(mySession, aws.NewConfig().WithRegion("us-west-2"))
+func New(p client.ConfigProvider, cfgs ...*aws.Config) *CloudSearch {
+	c := p.ClientConfig(EndpointsID, cfgs...)
+	return newClient(*c.Config, c.Handlers, c.Endpoint, c.SigningRegion, c.SigningName)
+}
+
+// newClient creates, initializes and returns a new service client instance.
+func newClient(cfg aws.Config, handlers request.Handlers, endpoint, signingRegion, signingName string) *CloudSearch {
+	svc := &CloudSearch{
+		Client: client.New(
+			cfg,
+			metadata.ClientInfo{
+				ServiceName:   ServiceName,
+				ServiceID:     ServiceID,
+				SigningName:   signingName,
+				SigningRegion: signingRegion,
+				Endpoint:      endpoint,
+				APIVersion:    "2013-01-01",
+			},
+			handlers,
+		),
+	}
+
+	// Handlers
+	svc.Handlers.Sign.PushBackNamed(v4.SignRequestHandler)
+	svc.Handlers.Build.PushBackNamed(query.BuildHandler)
+	svc.Handlers.Unmarshal.PushBackNamed(query.UnmarshalHandler)
+	svc.Handlers.UnmarshalMeta.PushBackNamed(query.UnmarshalMetaHandler)
+	svc.Handlers.UnmarshalError.PushBackNamed(query.UnmarshalErrorHandler)
+
+	// Run custom client initialization if present
+	if initClient != nil {
+		initClient(svc.Client)
+	}
+
+	return svc
+}
+
+// newRequest creates a new request for a CloudSearch operation and runs any
+// custom request initialization.
+func (c *CloudSearch) newRequest(op *request.Operation, params, data interface{}) *request.Request {
+	req := c.NewRequest(op, params, data)
+
+	// Run custom request initialization if present
+	if initRequest != nil {
+		initRequest(req)
+	}
+
+	return req
+}

vendor/github.com/aws/aws-sdk-go/service/cloudwatchlogs/api.go

@@ -3615,7 +3615,7 @@ func (c *CloudWatchLogs) StartQueryRequest(input *StartQueryInput) (req *request
 // StartQuery API operation for Amazon CloudWatch Logs.
 //
 // Schedules a query of a log group using CloudWatch Logs Insights. You specify
-// the log group to query, the query string to use, and the time to query.
+// the log group and time range to query, and the query string to use.
 //
 // For more information, see CloudWatch Logs Insights Query Syntax (http://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/CWL_QuerySyntax.html).
 //
@@ -8265,8 +8265,8 @@ func (s *SearchedLogStream) SetSearchedCompletely(v bool) *SearchedLogStream {
 type StartQueryInput struct {
 	_ struct{} `type:"structure"`
 
-	// The time to end this query, if it is still running. Specified as epoch time,
+	// The end of the time range to query. Specified as epoch time, the number of
-	// the number of seconds since January 1, 1970, 00:00:00 UTC.
+	// seconds since January 1, 1970, 00:00:00 UTC.
 	//
 	// EndTime is a required field
 	EndTime *int64 `locationName:"endTime" type:"long" required:"true"`
@@ -8286,8 +8286,8 @@ type StartQueryInput struct {
 	// QueryString is a required field
 	QueryString *string `locationName:"queryString" type:"string" required:"true"`
 
-	// The time to start the query. Specified as epoch time, the number of seconds
+	// The beginning of the time range to query. Specified as epoch time, the number
-	// since January 1, 1970, 00:00:00 UTC.
+	// of seconds since January 1, 1970, 00:00:00 UTC.
 	//
 	// StartTime is a required field
 	StartTime *int64 `locationName:"startTime" type:"long" required:"true"`

vendor/github.com/aws/aws-sdk-go/service/codebuild/api.go

@@ -4390,11 +4390,34 @@ type ProjectEnvironment struct {
 	// project.
 	EnvironmentVariables []*EnvironmentVariable `locationName:"environmentVariables" type:"list"`
 
-	// The ID of the Docker image to use for this build project.
+	// The image tag or image digest that identifies the Docker image to use for
+	// this build project. Use the following formats:
+	//
+	//    * For an image tag: registry/repository:tag. For example, to specify an
+	//    image with the tag "latest," use registry/repository:latest.
+	//
+	//    * For an image digest: registry/repository@digest. For example, to specify
+	//    an image with the digest "sha256:cbbf2f9a99b47fc460d422812b6a5adff7dfee951d8fa2e4a98caa0382cfbdbf,"
+	//    use registry/repository@sha256:cbbf2f9a99b47fc460d422812b6a5adff7dfee951d8fa2e4a98caa0382cfbdbf.
 	//
 	// Image is a required field
 	Image *string `locationName:"image" min:"1" type:"string" required:"true"`
 
+	// The type of credentials AWS CodeBuild uses to pull images in your build.
+	// There are two valid values:
+	//
+	//    * CODEBUILD specifies that AWS CodeBuild uses its own credentials. This
+	//    requires that you modify your ECR repository policy to trust AWS CodeBuild's
+	//    service principal.
+	//
+	//    * SERVICE_ROLE specifies that AWS CodeBuild uses your build project's
+	//    service role.
+	//
+	// When you use a cross-account or private registry image, you must use SERVICE_ROLE
+	// credentials. When you use an AWS CodeBuild curated image, you must use CODEBUILD
+	// credentials.
+	ImagePullCredentialsType *string `locationName:"imagePullCredentialsType" type:"string" enum:"ImagePullCredentialsType"`
+
 	// Enables running the Docker daemon inside a Docker container. Set to true
 	// only if the build project is be used to build Docker images, and the specified
 	// build environment image is not provided by AWS CodeBuild with Docker support.
@@ -4419,6 +4442,9 @@ type ProjectEnvironment struct {
 	// .; sleep 1; done"
 	PrivilegedMode *bool `locationName:"privilegedMode" type:"boolean"`
 
+	// The credentials for access to a private registry.
+	RegistryCredential *RegistryCredential `locationName:"registryCredential" type:"structure"`
+
 	// The type of build environment to use for related builds.
 	//
 	// Type is a required field
@@ -4460,6 +4486,11 @@ func (s *ProjectEnvironment) Validate() error {
 			}
 		}
 	}
+	if s.RegistryCredential != nil {
+		if err := s.RegistryCredential.Validate(); err != nil {
+			invalidParams.AddNested("RegistryCredential", err.(request.ErrInvalidParams))
+		}
+	}
 
 	if invalidParams.Len() > 0 {
 		return invalidParams
@@ -4491,12 +4522,24 @@ func (s *ProjectEnvironment) SetImage(v string) *ProjectEnvironment {
 	return s
 }
 
+// SetImagePullCredentialsType sets the ImagePullCredentialsType field's value.
+func (s *ProjectEnvironment) SetImagePullCredentialsType(v string) *ProjectEnvironment {
+	s.ImagePullCredentialsType = &v
+	return s
+}
+
 // SetPrivilegedMode sets the PrivilegedMode field's value.
 func (s *ProjectEnvironment) SetPrivilegedMode(v bool) *ProjectEnvironment {
 	s.PrivilegedMode = &v
 	return s
 }
 
+// SetRegistryCredential sets the RegistryCredential field's value.
+func (s *ProjectEnvironment) SetRegistryCredential(v *RegistryCredential) *ProjectEnvironment {
+	s.RegistryCredential = v
+	return s
+}
+
 // SetType sets the Type field's value.
 func (s *ProjectEnvironment) SetType(v string) *ProjectEnvironment {
 	s.Type = &v
@@ -4749,6 +4792,75 @@ func (s *ProjectSourceVersion) SetSourceVersion(v string) *ProjectSourceVersion
 	return s
 }
 
+// Information about credentials that provide access to a private Docker registry.
+// When this is set:
+//
+//    * imagePullCredentialsType must be set to SERVICE_ROLE.
+//
+//    *  images cannot be curated or an Amazon ECR image.
+//
+// For more information, see Private Registry with AWS Secrets Manager Samle
+// for AWS CodeBuild (http://docs.aws.amazon.com/codebuild/latest/userguide/sample-private-registry.html).
+type RegistryCredential struct {
+	_ struct{} `type:"structure"`
+
+	// The Amazon Resource Name (ARN) or name of credentials created using AWS Secrets
+	// Manager.
+	//
+	// The credential can use the name of the credentials only if they exist in
+	// your current region.
+	//
+	// Credential is a required field
+	Credential *string `locationName:"credential" min:"1" type:"string" required:"true"`
+
+	// The service that created the credentials to access a private Docker registry.
+	// The valid value, SECRETS_MANAGER, is for AWS Secrets Manager.
+	//
+	// CredentialProvider is a required field
+	CredentialProvider *string `locationName:"credentialProvider" type:"string" required:"true" enum:"CredentialProviderType"`
+}
+
+// String returns the string representation
+func (s RegistryCredential) String() string {
+	return awsutil.Prettify(s)
+}
+
+// GoString returns the string representation
+func (s RegistryCredential) GoString() string {
+	return s.String()
+}
+
+// Validate inspects the fields of the type to determine if they are valid.
+func (s *RegistryCredential) Validate() error {
+	invalidParams := request.ErrInvalidParams{Context: "RegistryCredential"}
+	if s.Credential == nil {
+		invalidParams.Add(request.NewErrParamRequired("Credential"))
+	}
+	if s.Credential != nil && len(*s.Credential) < 1 {
+		invalidParams.Add(request.NewErrParamMinLen("Credential", 1))
+	}
+	if s.CredentialProvider == nil {
+		invalidParams.Add(request.NewErrParamRequired("CredentialProvider"))
+	}
+
+	if invalidParams.Len() > 0 {
+		return invalidParams
+	}
+	return nil
+}
+
+// SetCredential sets the Credential field's value.
+func (s *RegistryCredential) SetCredential(v string) *RegistryCredential {
+	s.Credential = &v
+	return s
+}
+
+// SetCredentialProvider sets the CredentialProvider field's value.
+func (s *RegistryCredential) SetCredentialProvider(v string) *RegistryCredential {
+	s.CredentialProvider = &v
+	return s
+}
+
 // Information about S3 logs for a build project.
 type S3LogsConfig struct {
 	_ struct{} `type:"structure"`
@@ -4949,6 +5061,21 @@ type StartBuildInput struct {
 	// build project.
 	ImageOverride *string `locationName:"imageOverride" min:"1" type:"string"`
 
+	// The type of credentials AWS CodeBuild uses to pull images in your build.
+	// There are two valid values:
+	//
+	//    * CODEBUILD specifies that AWS CodeBuild uses its own credentials. This
+	//    requires that you modify your ECR repository policy to trust AWS CodeBuild's
+	//    service principal.
+	//
+	//    * SERVICE_ROLE specifies that AWS CodeBuild uses your build project's
+	//    service role.
+	//
+	// When using a cross-account or private registry image, you must use SERVICE_ROLE
+	// credentials. When using an AWS CodeBuild curated image, you must use CODEBUILD
+	// credentials.
+	ImagePullCredentialsTypeOverride *string `locationName:"imagePullCredentialsTypeOverride" type:"string" enum:"ImagePullCredentialsType"`
+
 	// Enable this flag to override the insecure SSL setting that is specified in
 	// the build project. The insecure SSL setting determines whether to ignore
 	// SSL warnings while connecting to the project source code. This override applies
@@ -4970,6 +5097,9 @@ type StartBuildInput struct {
 	// The number of minutes a build is allowed to be queued before it times out.
 	QueuedTimeoutInMinutesOverride *int64 `locationName:"queuedTimeoutInMinutesOverride" min:"5" type:"integer"`
 
+	// The credentials for access to a private registry.
+	RegistryCredentialOverride *RegistryCredential `locationName:"registryCredentialOverride" type:"structure"`
+
 	// Set to true to report to your source provider the status of a build's start
 	// and completion. If you use this option with a source provider other than
 	// GitHub, GitHub Enterprise, or Bitbucket, an invalidInputException is thrown.
@@ -5084,6 +5214,11 @@ func (s *StartBuildInput) Validate() error {
 			invalidParams.AddNested("LogsConfigOverride", err.(request.ErrInvalidParams))
 		}
 	}
+	if s.RegistryCredentialOverride != nil {
+		if err := s.RegistryCredentialOverride.Validate(); err != nil {
+			invalidParams.AddNested("RegistryCredentialOverride", err.(request.ErrInvalidParams))
+		}
+	}
 	if s.SecondaryArtifactsOverride != nil {
 		for i, v := range s.SecondaryArtifactsOverride {
 			if v == nil {
@@ -5186,6 +5321,12 @@ func (s *StartBuildInput) SetImageOverride(v string) *StartBuildInput {
 	return s
 }
 
+// SetImagePullCredentialsTypeOverride sets the ImagePullCredentialsTypeOverride field's value.
+func (s *StartBuildInput) SetImagePullCredentialsTypeOverride(v string) *StartBuildInput {
+	s.ImagePullCredentialsTypeOverride = &v
+	return s
+}
+
 // SetInsecureSslOverride sets the InsecureSslOverride field's value.
 func (s *StartBuildInput) SetInsecureSslOverride(v bool) *StartBuildInput {
 	s.InsecureSslOverride = &v
@@ -5216,6 +5357,12 @@ func (s *StartBuildInput) SetQueuedTimeoutInMinutesOverride(v int64) *StartBuild
 	return s
 }
 
+// SetRegistryCredentialOverride sets the RegistryCredentialOverride field's value.
+func (s *StartBuildInput) SetRegistryCredentialOverride(v *RegistryCredential) *StartBuildInput {
+	s.RegistryCredentialOverride = v
+	return s
+}
+
 // SetReportBuildStatusOverride sets the ReportBuildStatusOverride field's value.
 func (s *StartBuildInput) SetReportBuildStatusOverride(v bool) *StartBuildInput {
 	s.ReportBuildStatusOverride = &v
@@ -6004,6 +6151,11 @@ const (
 	ComputeTypeBuildGeneral1Large = "BUILD_GENERAL1_LARGE"
 )
 
+const (
+	// CredentialProviderTypeSecretsManager is a CredentialProviderType enum value
+	CredentialProviderTypeSecretsManager = "SECRETS_MANAGER"
+)
+
 const (
 	// EnvironmentTypeWindowsContainer is a EnvironmentType enum value
 	EnvironmentTypeWindowsContainer = "WINDOWS_CONTAINER"
@@ -6020,6 +6172,14 @@ const (
 	EnvironmentVariableTypeParameterStore = "PARAMETER_STORE"
 )
 
+const (
+	// ImagePullCredentialsTypeCodebuild is a ImagePullCredentialsType enum value
+	ImagePullCredentialsTypeCodebuild = "CODEBUILD"
+
+	// ImagePullCredentialsTypeServiceRole is a ImagePullCredentialsType enum value
+	ImagePullCredentialsTypeServiceRole = "SERVICE_ROLE"
+)
+
 const (
 	// LanguageTypeJava is a LanguageType enum value
 	LanguageTypeJava = "JAVA"

vendor/github.com/aws/aws-sdk-go/service/codecommit/api.go

@@ -4043,6 +4043,13 @@ func (c *CodeCommit) PutFileRequest(input *PutFileInput) (req *request.Request,
 //   can be added using PutFile is 6 MB. For files larger than 6 MB but smaller
 //   than 2 GB, add them using a Git client.
 //
+//   * ErrCodeFolderContentSizeLimitExceededException "FolderContentSizeLimitExceededException"
+//   The specified file is in a folder that exceeds the folder content size limit.
+//   Either save the file in a folder that has less content, or remove files or
+//   subfolders from the folder so it does not exceed the size limit. For more
+//   information about limits in AWS CodeCommit, see AWS CodeCommit User Guide
+//   (http://docs.aws.amazon.com/codecommit/latest/userguide/limits.html).
+//
 //   * ErrCodePathRequiredException "PathRequiredException"
 //   The folderPath for a location cannot be null.
 //
@@ -4115,6 +4122,11 @@ func (c *CodeCommit) PutFileRequest(input *PutFileInput) (req *request.Request,
 //   provide a different name for the file, or specify a different path for the
 //   file.
 //
+//   * ErrCodeFilePathConflictsWithSubmodulePathException "FilePathConflictsWithSubmodulePathException"
+//   The specified file path or folder has the same path as a submodule in this
+//   repository. Either provide a different name for the file, or save the file
+//   in a directory that does not conflict with the submodule path.
+//
 // See also, https://docs.aws.amazon.com/goto/WebAPI/codecommit-2015-04-13/PutFile
 func (c *CodeCommit) PutFile(input *PutFileInput) (*PutFileOutput, error) {
 	req, out := c.PutFileRequest(input)

vendor/github.com/aws/aws-sdk-go/service/codecommit/errors.go

@@ -220,6 +220,14 @@ const (
 	// file name.
 	ErrCodeFileNameConflictsWithDirectoryNameException = "FileNameConflictsWithDirectoryNameException"
 
+	// ErrCodeFilePathConflictsWithSubmodulePathException for service response error code
+	// "FilePathConflictsWithSubmodulePathException".
+	//
+	// The specified file path or folder has the same path as a submodule in this
+	// repository. Either provide a different name for the file, or save the file
+	// in a directory that does not conflict with the submodule path.
+	ErrCodeFilePathConflictsWithSubmodulePathException = "FilePathConflictsWithSubmodulePathException"
+
 	// ErrCodeFileTooLargeException for service response error code
 	// "FileTooLargeException".
 	//
@@ -228,6 +236,16 @@ const (
 	// (http://docs.aws.amazon.com/codecommit/latest/userguide/limits.html).
 	ErrCodeFileTooLargeException = "FileTooLargeException"
 
+	// ErrCodeFolderContentSizeLimitExceededException for service response error code
+	// "FolderContentSizeLimitExceededException".
+	//
+	// The specified file is in a folder that exceeds the folder content size limit.
+	// Either save the file in a folder that has less content, or remove files or
+	// subfolders from the folder so it does not exceed the size limit. For more
+	// information about limits in AWS CodeCommit, see AWS CodeCommit User Guide
+	// (http://docs.aws.amazon.com/codecommit/latest/userguide/limits.html).
+	ErrCodeFolderContentSizeLimitExceededException = "FolderContentSizeLimitExceededException"
+
 	// ErrCodeFolderDoesNotExistException for service response error code
 	// "FolderDoesNotExistException".
 	//

vendor/github.com/aws/aws-sdk-go/service/codedeploy/doc.go

@@ -5,14 +5,14 @@
 //
 // AWS CodeDeploy is a deployment service that automates application deployments
 // to Amazon EC2 instances, on-premises instances running in your own facility,
-// or serverless AWS Lambda functions.
+// serverless AWS Lambda functions, or applications in an Amazon ECS service.
 //
 // You can deploy a nearly unlimited variety of application content, such as
-// an updated Lambda function, code, web and configuration files, executables,
+// an updated Lambda function, updated applications in an Amazon ECS service,
-// packages, scripts, multimedia files, and so on. AWS CodeDeploy can deploy
+// code, web and configuration files, executables, packages, scripts, multimedia
-// application content stored in Amazon S3 buckets, GitHub repositories, or
+// files, and so on. AWS CodeDeploy can deploy application content stored in
-// Bitbucket repositories. You do not need to make changes to your existing
+// Amazon S3 buckets, GitHub repositories, or Bitbucket repositories. You do
-// code before you can use AWS CodeDeploy.
+// not need to make changes to your existing code before you can use AWS CodeDeploy.
 //
 // AWS CodeDeploy makes it easier for you to rapidly release new features, helps
 // you avoid downtime during application deployment, and handles the complexity
@@ -29,30 +29,39 @@
 //    to ensure the correct combination of revision, deployment configuration,
 //    and deployment group are referenced during a deployment.
 //
-//    * Deployment group: A set of individual instances or CodeDeploy Lambda
+//    * Deployment group: A set of individual instances, CodeDeploy Lambda deployment
-//    applications. A Lambda deployment group contains a group of applications.
+//    configuration settings, or an Amazon ECS service and network details.
-//    An EC2/On-premises deployment group contains individually tagged instances,
+//    A Lambda deployment group specifies how to route traffic to a new version
-//    Amazon EC2 instances in Auto Scaling groups, or both.
+//    of a Lambda function. An Amazon ECS deployment group specifies the service
+//    created in Amazon ECS to deploy, a load balancer, and a listener to reroute
+//    production traffic to an updated containerized application. An EC2/On-premises
+//    deployment group contains individually tagged instances, Amazon EC2 instances
+//    in Amazon EC2 Auto Scaling groups, or both. All deployment groups can
+//    specify optional trigger, alarm, and rollback settings.
 //
 //    * Deployment configuration: A set of deployment rules and deployment success
 //    and failure conditions used by AWS CodeDeploy during a deployment.
 //
-//    * Deployment: The process and the components used in the process of updating
+//    * Deployment: The process and the components used when updating a Lambda
-//    a Lambda function or of installing content on one or more instances.
+//    function, a containerized application in an Amazon ECS service, or of
+//    installing content on one or more instances.
 //
 //    * Application revisions: For an AWS Lambda deployment, this is an AppSpec
-//    file that specifies the Lambda function to update and one or more functions
+//    file that specifies the Lambda function to be updated and one or more
-//    to validate deployment lifecycle events. For an EC2/On-premises deployment,
+//    functions to validate deployment lifecycle events. For an Amazon ECS deployment,
-//    this is an archive file containing source content—source code, web pages,
+//    this is an AppSpec file that specifies the Amazon ECS task definition,
-//    executable files, and deployment scripts—along with an AppSpec file. Revisions
+//    container, and port where production traffic is rerouted. For an EC2/On-premises
-//    are stored in Amazon S3 buckets or GitHub repositories. For Amazon S3,
+//    deployment, this is an archive file that contains source content—source
-//    a revision is uniquely identified by its Amazon S3 object key and its
+//    code, webpages, executable files, and deployment scripts—along with an
-//    ETag, version, or both. For GitHub, a revision is uniquely identified
+//    AppSpec file. Revisions are stored in Amazon S3 buckets or GitHub repositories.
-//    by its commit ID.
+//    For Amazon S3, a revision is uniquely identified by its Amazon S3 object
+//    key and its ETag, version, or both. For GitHub, a revision is uniquely
+//    identified by its commit ID.
 //
 // This guide also contains information to help you get details about the instances
 // in your deployments, to make on-premises instances available for AWS CodeDeploy
-// deployments, and to get details about a Lambda function deployment.
+// deployments, to get details about a Lambda function deployment, and to get
+// details about Amazon ECS service deployments.
 //
 // AWS CodeDeploy Information Resources
 //

vendor/github.com/aws/aws-sdk-go/service/codedeploy/errors.go

@@ -13,14 +13,14 @@ const (
 	// ErrCodeApplicationAlreadyExistsException for service response error code
 	// "ApplicationAlreadyExistsException".
 	//
-	// An application with the specified name already exists with the applicable
+	// An application with the specified name with the IAM user or AWS account already
-	// IAM user or AWS account.
+	// exists.
 	ErrCodeApplicationAlreadyExistsException = "ApplicationAlreadyExistsException"
 
 	// ErrCodeApplicationDoesNotExistException for service response error code
 	// "ApplicationDoesNotExistException".
 	//
-	// The application does not exist with the applicable IAM user or AWS account.
+	// The application does not exist with the IAM user or AWS account.
 	ErrCodeApplicationDoesNotExistException = "ApplicationDoesNotExistException"
 
 	// ErrCodeApplicationLimitExceededException for service response error code
@@ -56,15 +56,14 @@ const (
 	// ErrCodeDeploymentConfigAlreadyExistsException for service response error code
 	// "DeploymentConfigAlreadyExistsException".
 	//
-	// A deployment configuration with the specified name already exists with the
+	// A deployment configuration with the specified name with the IAM user or AWS
-	// applicable IAM user or AWS account.
+	// account already exists .
 	ErrCodeDeploymentConfigAlreadyExistsException = "DeploymentConfigAlreadyExistsException"
 
 	// ErrCodeDeploymentConfigDoesNotExistException for service response error code
 	// "DeploymentConfigDoesNotExistException".
 	//
-	// The deployment configuration does not exist with the applicable IAM user
+	// The deployment configuration does not exist with the IAM user or AWS account.
-	// or AWS account.
 	ErrCodeDeploymentConfigDoesNotExistException = "DeploymentConfigDoesNotExistException"
 
 	// ErrCodeDeploymentConfigInUseException for service response error code
@@ -88,21 +87,20 @@ const (
 	// ErrCodeDeploymentDoesNotExistException for service response error code
 	// "DeploymentDoesNotExistException".
 	//
-	// The deployment does not exist with the applicable IAM user or AWS account.
+	// The deployment with the IAM user or AWS account does not exist.
 	ErrCodeDeploymentDoesNotExistException = "DeploymentDoesNotExistException"
 
 	// ErrCodeDeploymentGroupAlreadyExistsException for service response error code
 	// "DeploymentGroupAlreadyExistsException".
 	//
-	// A deployment group with the specified name already exists with the applicable
+	// A deployment group with the specified name with the IAM user or AWS account
-	// IAM user or AWS account.
+	// already exists.
 	ErrCodeDeploymentGroupAlreadyExistsException = "DeploymentGroupAlreadyExistsException"
 
 	// ErrCodeDeploymentGroupDoesNotExistException for service response error code
 	// "DeploymentGroupDoesNotExistException".
 	//
-	// The named deployment group does not exist with the applicable IAM user or
+	// The named deployment group with the IAM user or AWS account does not exist.
-	// AWS account.
 	ErrCodeDeploymentGroupDoesNotExistException = "DeploymentGroupDoesNotExistException"
 
 	// ErrCodeDeploymentGroupLimitExceededException for service response error code
@@ -172,7 +170,7 @@ const (
 	// "ECSServiceMappingLimitExceededException".
 	//
 	// The Amazon ECS service is associated with more than one deployment groups.
-	// An ECS service can only be associated with one deployment group.
+	// An Amazon ECS service can be associated with only one deployment group.
 	ErrCodeECSServiceMappingLimitExceededException = "ECSServiceMappingLimitExceededException"
 
 	// ErrCodeGitHubAccountTokenDoesNotExistException for service response error code
@@ -259,11 +257,11 @@ const (
 	//
 	//    * The alarm object is null.
 	//
-	//    * The alarm name is empty or null or exceeds the 255 character limit.
+	//    * The alarm name is empty or null or exceeds the limit of 255 characters.
 	//
 	//    * Two alarms with the same name have been specified.
 	//
-	//    * The alarm configuration is enabled but the alarm list is empty.
+	//    * The alarm configuration is enabled, but the alarm list is empty.
 	ErrCodeInvalidAlarmConfigException = "InvalidAlarmConfigException"
 
 	// ErrCodeInvalidApplicationNameException for service response error code
@@ -276,7 +274,7 @@ const (
 	// "InvalidAutoRollbackConfigException".
 	//
 	// The automatic rollback configuration was specified in an invalid format.
-	// For example, automatic rollback is enabled but an invalid triggering event
+	// For example, automatic rollback is enabled, but an invalid triggering event
 	// type or no event types were listed.
 	ErrCodeInvalidAutoRollbackConfigException = "InvalidAutoRollbackConfigException"
 
@@ -347,14 +345,14 @@ const (
 	// "InvalidDeploymentStyleException".
 	//
 	// An invalid deployment style was specified. Valid deployment types include
-	// "IN_PLACE" and "BLUE_GREEN". Valid deployment options include "WITH_TRAFFIC_CONTROL"
+	// "IN_PLACE" and "BLUE_GREEN." Valid deployment options include "WITH_TRAFFIC_CONTROL"
-	// and "WITHOUT_TRAFFIC_CONTROL".
+	// and "WITHOUT_TRAFFIC_CONTROL."
 	ErrCodeInvalidDeploymentStyleException = "InvalidDeploymentStyleException"
 
 	// ErrCodeInvalidDeploymentTargetIdException for service response error code
 	// "InvalidDeploymentTargetIdException".
 	//
-	// The target ID provide was not valid.
+	// The target ID provided was not valid.
 	ErrCodeInvalidDeploymentTargetIdException = "InvalidDeploymentTargetIdException"
 
 	// ErrCodeInvalidDeploymentWaitTypeException for service response error code
@@ -386,9 +384,9 @@ const (
 	// "InvalidFileExistsBehaviorException".
 	//
 	// An invalid fileExistsBehavior option was specified to determine how AWS CodeDeploy
-	// handles files or directories that already exist in a deployment target location
+	// handles files or directories that already exist in a deployment target location,
 	// but weren't part of the previous successful deployment. Valid values include
-	// "DISALLOW", "OVERWRITE", and "RETAIN".
+	// "DISALLOW," "OVERWRITE," and "RETAIN."
 	ErrCodeInvalidFileExistsBehaviorException = "InvalidFileExistsBehaviorException"
 
 	// ErrCodeInvalidGitHubAccountTokenException for service response error code
@@ -425,13 +423,13 @@ const (
 	// ErrCodeInvalidInputException for service response error code
 	// "InvalidInputException".
 	//
-	// The specified input was specified in an invalid format.
+	// The input was specified in an invalid format.
 	ErrCodeInvalidInputException = "InvalidInputException"
 
 	// ErrCodeInvalidInstanceNameException for service response error code
 	// "InvalidInstanceNameException".
 	//
-	// The specified on-premises instance name was specified in an invalid format.
+	// The on-premises instance name was specified in an invalid format.
 	ErrCodeInvalidInstanceNameException = "InvalidInstanceNameException"
 
 	// ErrCodeInvalidInstanceStatusException for service response error code
@@ -516,7 +514,7 @@ const (
 	//
 	// The service role ARN was specified in an invalid format. Or, if an Auto Scaling
 	// group was specified, the specified service role does not grant the appropriate
-	// permissions to Auto Scaling.
+	// permissions to Amazon EC2 Auto Scaling.
 	ErrCodeInvalidRoleException = "InvalidRoleException"
 
 	// ErrCodeInvalidSortByException for service response error code
@@ -535,13 +533,13 @@ const (
 	// ErrCodeInvalidTagException for service response error code
 	// "InvalidTagException".
 	//
-	// The specified tag was specified in an invalid format.
+	// The tag was specified in an invalid format.
 	ErrCodeInvalidTagException = "InvalidTagException"
 
 	// ErrCodeInvalidTagFilterException for service response error code
 	// "InvalidTagFilterException".
 	//
-	// The specified tag filter was specified in an invalid format.
+	// The tag filter was specified in an invalid format.
 	ErrCodeInvalidTagFilterException = "InvalidTagFilterException"
 
 	// ErrCodeInvalidTargetFilterNameException for service response error code
@@ -631,7 +629,7 @@ const (
 	// ErrCodeRevisionDoesNotExistException for service response error code
 	// "RevisionDoesNotExistException".
 	//
-	// The named revision does not exist with the applicable IAM user or AWS account.
+	// The named revision does not exist with the IAM user or AWS account.
 	ErrCodeRevisionDoesNotExistException = "RevisionDoesNotExistException"
 
 	// ErrCodeRevisionRequiredException for service response error code

vendor/github.com/aws/aws-sdk-go/service/cognitoidentityprovider/api.go

@@ -9888,6 +9888,128 @@ func (c *CognitoIdentityProvider) UpdateUserPoolClientWithContext(ctx aws.Contex
 	return out, req.Send()
 }
 
+const opUpdateUserPoolDomain = "UpdateUserPoolDomain"
+
+// UpdateUserPoolDomainRequest generates a "aws/request.Request" representing the
+// client's request for the UpdateUserPoolDomain operation. The "output" return
+// value will be populated with the request's response once the request completes
+// successfully.
+//
+// Use "Send" method on the returned Request to send the API call to the service.
+// the "output" return value is not valid until after Send returns without error.
+//
+// See UpdateUserPoolDomain for more information on using the UpdateUserPoolDomain
+// API call, and error handling.
+//
+// This method is useful when you want to inject custom logic or configuration
+// into the SDK's request lifecycle. Such as custom headers, or retry logic.
+//
+//
+//    // Example sending a request using the UpdateUserPoolDomainRequest method.
+//    req, resp := client.UpdateUserPoolDomainRequest(params)
+//
+//    err := req.Send()
+//    if err == nil { // resp is now filled
+//        fmt.Println(resp)
+//    }
+//
+// See also, https://docs.aws.amazon.com/goto/WebAPI/cognito-idp-2016-04-18/UpdateUserPoolDomain
+func (c *CognitoIdentityProvider) UpdateUserPoolDomainRequest(input *UpdateUserPoolDomainInput) (req *request.Request, output *UpdateUserPoolDomainOutput) {
+	op := &request.Operation{
+		Name:       opUpdateUserPoolDomain,
+		HTTPMethod: "POST",
+		HTTPPath:   "/",
+	}
+
+	if input == nil {
+		input = &UpdateUserPoolDomainInput{}
+	}
+
+	output = &UpdateUserPoolDomainOutput{}
+	req = c.newRequest(op, input, output)
+	return
+}
+
+// UpdateUserPoolDomain API operation for Amazon Cognito Identity Provider.
+//
+// Updates the Secure Sockets Layer (SSL) certificate for the custom domain
+// for your user pool.
+//
+// You can use this operation to provide the Amazon Resource Name (ARN) of a
+// new certificate to Amazon Cognito. You cannot use it to change the domain
+// for a user pool.
+//
+// A custom domain is used to host the Amazon Cognito hosted UI, which provides
+// sign-up and sign-in pages for your application. When you set up a custom
+// domain, you provide a certificate that you manage with AWS Certificate Manager
+// (ACM). When necessary, you can use this operation to change the certificate
+// that you applied to your custom domain.
+//
+// Usually, this is unnecessary following routine certificate renewal with ACM.
+// When you renew your existing certificate in ACM, the ARN for your certificate
+// remains the same, and your custom domain uses the new certificate automatically.
+//
+// However, if you replace your existing certificate with a new one, ACM gives
+// the new certificate a new ARN. To apply the new certificate to your custom
+// domain, you must provide this ARN to Amazon Cognito.
+//
+// When you add your new certificate in ACM, you must choose US East (N. Virginia)
+// as the AWS Region.
+//
+// After you submit your request, Amazon Cognito requires up to 1 hour to distribute
+// your new certificate to your custom domain.
+//
+// For more information about adding a custom domain to your user pool, see
+// Using Your Own Domain for the Hosted UI (http://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-add-custom-domain.html).
+//
+// Returns awserr.Error for service API and SDK errors. Use runtime type assertions
+// with awserr.Error's Code and Message methods to get detailed information about
+// the error.
+//
+// See the AWS API reference guide for Amazon Cognito Identity Provider's
+// API operation UpdateUserPoolDomain for usage and error information.
+//
+// Returned Error Codes:
+//   * ErrCodeInvalidParameterException "InvalidParameterException"
+//   This exception is thrown when the Amazon Cognito service encounters an invalid
+//   parameter.
+//
+//   * ErrCodeNotAuthorizedException "NotAuthorizedException"
+//   This exception is thrown when a user is not authorized.
+//
+//   * ErrCodeResourceNotFoundException "ResourceNotFoundException"
+//   This exception is thrown when the Amazon Cognito service cannot find the
+//   requested resource.
+//
+//   * ErrCodeTooManyRequestsException "TooManyRequestsException"
+//   This exception is thrown when the user has made too many requests for a given
+//   operation.
+//
+//   * ErrCodeInternalErrorException "InternalErrorException"
+//   This exception is thrown when Amazon Cognito encounters an internal error.
+//
+// See also, https://docs.aws.amazon.com/goto/WebAPI/cognito-idp-2016-04-18/UpdateUserPoolDomain
+func (c *CognitoIdentityProvider) UpdateUserPoolDomain(input *UpdateUserPoolDomainInput) (*UpdateUserPoolDomainOutput, error) {
+	req, out := c.UpdateUserPoolDomainRequest(input)
+	return out, req.Send()
+}
+
+// UpdateUserPoolDomainWithContext is the same as UpdateUserPoolDomain with the addition of
+// the ability to pass a context and additional request options.
+//
+// See UpdateUserPoolDomain for details on how to use this API operation.
+//
+// The context must be non-nil and will be used for request cancellation. If
+// the context is nil a panic will occur. In the future the SDK may create
+// sub-contexts for http.Requests. See https://golang.org/pkg/context/
+// for more information on using Contexts.
+func (c *CognitoIdentityProvider) UpdateUserPoolDomainWithContext(ctx aws.Context, input *UpdateUserPoolDomainInput, opts ...request.Option) (*UpdateUserPoolDomainOutput, error) {
+	req, out := c.UpdateUserPoolDomainRequest(input)
+	req.SetContext(ctx)
+	req.ApplyOptions(opts...)
+	return out, req.Send()
+}
+
 const opVerifySoftwareToken = "VerifySoftwareToken"
 
 // VerifySoftwareTokenRequest generates a "aws/request.Request" representing the
@@ -14949,7 +15071,15 @@ type CreateUserPoolClientInput struct {
 	// UserPoolId is a required field
 	UserPoolId *string `min:"1" type:"string" required:"true"`
 
-	// The write attributes.
+	// The user pool attributes that the app client can write to.
+	//
+	// If your app client allows users to sign in through an identity provider,
+	// this array must include all attributes that are mapped to identity provider
+	// attributes. Amazon Cognito updates mapped attributes when users sign in to
+	// your application through an identity provider. If your app client lacks write
+	// access to a mapped attribute, Amazon Cognito throws an error when it attempts
+	// to update the attribute. For more information, see Specifying Identity Provider
+	// Attribute Mappings for Your User Pool (http://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-specifying-attribute-mapping.html).
 	WriteAttributes []*string `type:"list"`
 }
 
@@ -15113,8 +15243,8 @@ type CreateUserPoolDomainInput struct {
 	// The configuration for a custom domain that hosts the sign-up and sign-in
 	// webpages for your application.
 	//
-	// Provide this parameter only if you want to use own custom domain for your
+	// Provide this parameter only if you want to use a custom domain for your user
-	// user pool. Otherwise, you can exclude this parameter and use the Amazon Cognito
+	// pool. Otherwise, you can exclude this parameter and use the Amazon Cognito
 	// hosted domain instead.
 	//
 	// For more information about the hosted domain and custom domains, see Configuring
@@ -20636,6 +20766,13 @@ type SchemaAttributeType struct {
 	DeveloperOnlyAttribute *bool `type:"boolean"`
 
 	// Specifies whether the value of the attribute can be changed.
+	//
+	// For any user pool attribute that's mapped to an identity provider attribute,
+	// you must set this parameter to true. Amazon Cognito updates mapped attributes
+	// when users sign in to your application through an identity provider. If an
+	// attribute is immutable, Amazon Cognito throws an error when it attempts to
+	// update the attribute. For more information, see Specifying Identity Provider
+	// Attribute Mappings for Your User Pool (http://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pools-specifying-attribute-mapping.html).
 	Mutable *bool `type:"boolean"`
 
 	// A schema attribute of the name type.
@@ -22721,6 +22858,117 @@ func (s *UpdateUserPoolClientOutput) SetUserPoolClient(v *UserPoolClientType) *U
 	return s
 }
 
+// The UpdateUserPoolDomain request input.
+type UpdateUserPoolDomainInput struct {
+	_ struct{} `type:"structure"`
+
+	// The configuration for a custom domain that hosts the sign-up and sign-in
+	// pages for your application. Use this object to specify an SSL certificate
+	// that is managed by ACM.
+	//
+	// CustomDomainConfig is a required field
+	CustomDomainConfig *CustomDomainConfigType `type:"structure" required:"true"`
+
+	// The domain name for the custom domain that hosts the sign-up and sign-in
+	// pages for your application. For example: auth.example.com.
+	//
+	// This string can include only lowercase letters, numbers, and hyphens. Do
+	// not use a hyphen for the first or last character. Use periods to separate
+	// subdomain names.
+	//
+	// Domain is a required field
+	Domain *string `min:"1" type:"string" required:"true"`
+
+	// The ID of the user pool that is associated with the custom domain that you
+	// are updating the certificate for.
+	//
+	// UserPoolId is a required field
+	UserPoolId *string `min:"1" type:"string" required:"true"`
+}
+
+// String returns the string representation
+func (s UpdateUserPoolDomainInput) String() string {
+	return awsutil.Prettify(s)
+}
+
+// GoString returns the string representation
+func (s UpdateUserPoolDomainInput) GoString() string {
+	return s.String()
+}
+
+// Validate inspects the fields of the type to determine if they are valid.
+func (s *UpdateUserPoolDomainInput) Validate() error {
+	invalidParams := request.ErrInvalidParams{Context: "UpdateUserPoolDomainInput"}
+	if s.CustomDomainConfig == nil {
+		invalidParams.Add(request.NewErrParamRequired("CustomDomainConfig"))
+	}
+	if s.Domain == nil {
+		invalidParams.Add(request.NewErrParamRequired("Domain"))
+	}
+	if s.Domain != nil && len(*s.Domain) < 1 {
+		invalidParams.Add(request.NewErrParamMinLen("Domain", 1))
+	}
+	if s.UserPoolId == nil {
+		invalidParams.Add(request.NewErrParamRequired("UserPoolId"))
+	}
+	if s.UserPoolId != nil && len(*s.UserPoolId) < 1 {
+		invalidParams.Add(request.NewErrParamMinLen("UserPoolId", 1))
+	}
+	if s.CustomDomainConfig != nil {
+		if err := s.CustomDomainConfig.Validate(); err != nil {
+			invalidParams.AddNested("CustomDomainConfig", err.(request.ErrInvalidParams))
+		}
+	}
+
+	if invalidParams.Len() > 0 {
+		return invalidParams
+	}
+	return nil
+}
+
+// SetCustomDomainConfig sets the CustomDomainConfig field's value.
+func (s *UpdateUserPoolDomainInput) SetCustomDomainConfig(v *CustomDomainConfigType) *UpdateUserPoolDomainInput {
+	s.CustomDomainConfig = v
+	return s
+}
+
+// SetDomain sets the Domain field's value.
+func (s *UpdateUserPoolDomainInput) SetDomain(v string) *UpdateUserPoolDomainInput {
+	s.Domain = &v
+	return s
+}
+
+// SetUserPoolId sets the UserPoolId field's value.
+func (s *UpdateUserPoolDomainInput) SetUserPoolId(v string) *UpdateUserPoolDomainInput {
+	s.UserPoolId = &v
+	return s
+}
+
+// The UpdateUserPoolDomain response output.
+type UpdateUserPoolDomainOutput struct {
+	_ struct{} `type:"structure"`
+
+	// The Amazon CloudFront endpoint that Amazon Cognito set up when you added
+	// the custom domain to your user pool.
+	CloudFrontDomain *string `min:"1" type:"string"`
+}
+
+// String returns the string representation
+func (s UpdateUserPoolDomainOutput) String() string {
+	return awsutil.Prettify(s)
+}
+
+// GoString returns the string representation
+func (s UpdateUserPoolDomainOutput) GoString() string {
+	return s.String()
+}
+
+// SetCloudFrontDomain sets the CloudFrontDomain field's value.
+func (s *UpdateUserPoolDomainOutput) SetCloudFrontDomain(v string) *UpdateUserPoolDomainOutput {
+	s.CloudFrontDomain = &v
+	return s
+}
+
 // Represents the request to update the user pool.
 type UpdateUserPoolInput struct {
 	_ struct{} `type:"structure"`

vendor/github.com/aws/aws-sdk-go/service/costandusagereportservice/api.go

@@ -0,0 +1,728 @@
+// Code generated by private/model/cli/gen-api/main.go. DO NOT EDIT.
+
+package costandusagereportservice
+
+import (
+	"github.com/aws/aws-sdk-go/aws"
+	"github.com/aws/aws-sdk-go/aws/awsutil"
+	"github.com/aws/aws-sdk-go/aws/request"
+	"github.com/aws/aws-sdk-go/private/protocol"
+	"github.com/aws/aws-sdk-go/private/protocol/jsonrpc"
+)
+
+const opDeleteReportDefinition = "DeleteReportDefinition"
+
+// DeleteReportDefinitionRequest generates a "aws/request.Request" representing the
+// client's request for the DeleteReportDefinition operation. The "output" return
+// value will be populated with the request's response once the request completes
+// successfully.
+//
+// Use "Send" method on the returned Request to send the API call to the service.
+// the "output" return value is not valid until after Send returns without error.
+//
+// See DeleteReportDefinition for more information on using the DeleteReportDefinition
+// API call, and error handling.
+//
+// This method is useful when you want to inject custom logic or configuration
+// into the SDK's request lifecycle. Such as custom headers, or retry logic.
+//
+//
+//    // Example sending a request using the DeleteReportDefinitionRequest method.
+//    req, resp := client.DeleteReportDefinitionRequest(params)
+//
+//    err := req.Send()
+//    if err == nil { // resp is now filled
+//        fmt.Println(resp)
+//    }
+//
+// See also, https://docs.aws.amazon.com/goto/WebAPI/cur-2017-01-06/DeleteReportDefinition
+func (c *CostandUsageReportService) DeleteReportDefinitionRequest(input *DeleteReportDefinitionInput) (req *request.Request, output *DeleteReportDefinitionOutput) {
+	op := &request.Operation{
+		Name:       opDeleteReportDefinition,
+		HTTPMethod: "POST",
+		HTTPPath:   "/",
+	}
+
+	if input == nil {
+		input = &DeleteReportDefinitionInput{}
+	}
+
+	output = &DeleteReportDefinitionOutput{}
+	req = c.newRequest(op, input, output)
+	return
+}
+
+// DeleteReportDefinition API operation for AWS Cost and Usage Report Service.
+//
+// Delete a specified report definition
+//
+// Returns awserr.Error for service API and SDK errors. Use runtime type assertions
+// with awserr.Error's Code and Message methods to get detailed information about
+// the error.
+//
+// See the AWS API reference guide for AWS Cost and Usage Report Service's
+// API operation DeleteReportDefinition for usage and error information.
+//
+// Returned Error Codes:
+//   * ErrCodeInternalErrorException "InternalErrorException"
+//   This exception is thrown on a known dependency failure.
+//
+//   * ErrCodeValidationException "ValidationException"
+//   This exception is thrown when providing an invalid input. eg. Put a report
+//   preference with an invalid report name, or Delete a report preference with
+//   an empty report name.
+//
+// See also, https://docs.aws.amazon.com/goto/WebAPI/cur-2017-01-06/DeleteReportDefinition
+func (c *CostandUsageReportService) DeleteReportDefinition(input *DeleteReportDefinitionInput) (*DeleteReportDefinitionOutput, error) {
+	req, out := c.DeleteReportDefinitionRequest(input)
+	return out, req.Send()
+}
+
+// DeleteReportDefinitionWithContext is the same as DeleteReportDefinition with the addition of
+// the ability to pass a context and additional request options.
+//
+// See DeleteReportDefinition for details on how to use this API operation.
+//
+// The context must be non-nil and will be used for request cancellation. If
+// the context is nil a panic will occur. In the future the SDK may create
+// sub-contexts for http.Requests. See https://golang.org/pkg/context/
+// for more information on using Contexts.
+func (c *CostandUsageReportService) DeleteReportDefinitionWithContext(ctx aws.Context, input *DeleteReportDefinitionInput, opts ...request.Option) (*DeleteReportDefinitionOutput, error) {
+	req, out := c.DeleteReportDefinitionRequest(input)
+	req.SetContext(ctx)
+	req.ApplyOptions(opts...)
+	return out, req.Send()
+}
+
+const opDescribeReportDefinitions = "DescribeReportDefinitions"
+
+// DescribeReportDefinitionsRequest generates a "aws/request.Request" representing the
+// client's request for the DescribeReportDefinitions operation. The "output" return
+// value will be populated with the request's response once the request completes
+// successfully.
+//
+// Use "Send" method on the returned Request to send the API call to the service.
+// the "output" return value is not valid until after Send returns without error.
+//
+// See DescribeReportDefinitions for more information on using the DescribeReportDefinitions
+// API call, and error handling.
+//
+// This method is useful when you want to inject custom logic or configuration
+// into the SDK's request lifecycle. Such as custom headers, or retry logic.
+//
+//
+//    // Example sending a request using the DescribeReportDefinitionsRequest method.
+//    req, resp := client.DescribeReportDefinitionsRequest(params)
+//
+//    err := req.Send()
+//    if err == nil { // resp is now filled
+//        fmt.Println(resp)
+//    }
+//
+// See also, https://docs.aws.amazon.com/goto/WebAPI/cur-2017-01-06/DescribeReportDefinitions
+func (c *CostandUsageReportService) DescribeReportDefinitionsRequest(input *DescribeReportDefinitionsInput) (req *request.Request, output *DescribeReportDefinitionsOutput) {
+	op := &request.Operation{
+		Name:       opDescribeReportDefinitions,
+		HTTPMethod: "POST",
+		HTTPPath:   "/",
+		Paginator: &request.Paginator{
+			InputTokens:     []string{"NextToken"},
+			OutputTokens:    []string{"NextToken"},
+			LimitToken:      "MaxResults",
+			TruncationToken: "",
+		},
+	}
+
+	if input == nil {
+		input = &DescribeReportDefinitionsInput{}
+	}
+
+	output = &DescribeReportDefinitionsOutput{}
+	req = c.newRequest(op, input, output)
+	return
+}
+
+// DescribeReportDefinitions API operation for AWS Cost and Usage Report Service.
+//
+// Describe a list of report definitions owned by the account
+//
+// Returns awserr.Error for service API and SDK errors. Use runtime type assertions
+// with awserr.Error's Code and Message methods to get detailed information about
+// the error.
+//
+// See the AWS API reference guide for AWS Cost and Usage Report Service's
+// API operation DescribeReportDefinitions for usage and error information.
+//
+// Returned Error Codes:
+//   * ErrCodeInternalErrorException "InternalErrorException"
+//   This exception is thrown on a known dependency failure.
+//
+// See also, https://docs.aws.amazon.com/goto/WebAPI/cur-2017-01-06/DescribeReportDefinitions
+func (c *CostandUsageReportService) DescribeReportDefinitions(input *DescribeReportDefinitionsInput) (*DescribeReportDefinitionsOutput, error) {
+	req, out := c.DescribeReportDefinitionsRequest(input)
+	return out, req.Send()
+}
+
+// DescribeReportDefinitionsWithContext is the same as DescribeReportDefinitions with the addition of
+// the ability to pass a context and additional request options.
+//
+// See DescribeReportDefinitions for details on how to use this API operation.
+//
+// The context must be non-nil and will be used for request cancellation. If
+// the context is nil a panic will occur. In the future the SDK may create
+// sub-contexts for http.Requests. See https://golang.org/pkg/context/
+// for more information on using Contexts.
+func (c *CostandUsageReportService) DescribeReportDefinitionsWithContext(ctx aws.Context, input *DescribeReportDefinitionsInput, opts ...request.Option) (*DescribeReportDefinitionsOutput, error) {
+	req, out := c.DescribeReportDefinitionsRequest(input)
+	req.SetContext(ctx)
+	req.ApplyOptions(opts...)
+	return out, req.Send()
+}
+
+// DescribeReportDefinitionsPages iterates over the pages of a DescribeReportDefinitions operation,
+// calling the "fn" function with the response data for each page. To stop
+// iterating, return false from the fn function.
+//
+// See DescribeReportDefinitions method for more information on how to use this operation.
+//
+// Note: This operation can generate multiple requests to a service.
+//
+//    // Example iterating over at most 3 pages of a DescribeReportDefinitions operation.
+//    pageNum := 0
+//    err := client.DescribeReportDefinitionsPages(params,
+//        func(page *DescribeReportDefinitionsOutput, lastPage bool) bool {
+//            pageNum++
+//            fmt.Println(page)
+//            return pageNum <= 3
+//        })
+//
+func (c *CostandUsageReportService) DescribeReportDefinitionsPages(input *DescribeReportDefinitionsInput, fn func(*DescribeReportDefinitionsOutput, bool) bool) error {
+	return c.DescribeReportDefinitionsPagesWithContext(aws.BackgroundContext(), input, fn)
+}
+
+// DescribeReportDefinitionsPagesWithContext same as DescribeReportDefinitionsPages except
+// it takes a Context and allows setting request options on the pages.
+//
+// The context must be non-nil and will be used for request cancellation. If
+// the context is nil a panic will occur. In the future the SDK may create
+// sub-contexts for http.Requests. See https://golang.org/pkg/context/
+// for more information on using Contexts.
+func (c *CostandUsageReportService) DescribeReportDefinitionsPagesWithContext(ctx aws.Context, input *DescribeReportDefinitionsInput, fn func(*DescribeReportDefinitionsOutput, bool) bool, opts ...request.Option) error {
+	p := request.Pagination{
+		NewRequest: func() (*request.Request, error) {
+			var inCpy *DescribeReportDefinitionsInput
+			if input != nil {
+				tmp := *input
+				inCpy = &tmp
+			}
+			req, _ := c.DescribeReportDefinitionsRequest(inCpy)
+			req.SetContext(ctx)
+			req.ApplyOptions(opts...)
+			return req, nil
+		},
+	}
+
+	cont := true
+	for p.Next() && cont {
+		cont = fn(p.Page().(*DescribeReportDefinitionsOutput), !p.HasNextPage())
+	}
+	return p.Err()
+}
+
+const opPutReportDefinition = "PutReportDefinition"
+
+// PutReportDefinitionRequest generates a "aws/request.Request" representing the
+// client's request for the PutReportDefinition operation. The "output" return
+// value will be populated with the request's response once the request completes
+// successfully.
+//
+// Use "Send" method on the returned Request to send the API call to the service.
+// the "output" return value is not valid until after Send returns without error.
+//
+// See PutReportDefinition for more information on using the PutReportDefinition
+// API call, and error handling.
+//
+// This method is useful when you want to inject custom logic or configuration
+// into the SDK's request lifecycle. Such as custom headers, or retry logic.
+//
+//
+//    // Example sending a request using the PutReportDefinitionRequest method.
+//    req, resp := client.PutReportDefinitionRequest(params)
+//
+//    err := req.Send()
+//    if err == nil { // resp is now filled
+//        fmt.Println(resp)
+//    }
+//
+// See also, https://docs.aws.amazon.com/goto/WebAPI/cur-2017-01-06/PutReportDefinition
+func (c *CostandUsageReportService) PutReportDefinitionRequest(input *PutReportDefinitionInput) (req *request.Request, output *PutReportDefinitionOutput) {
+	op := &request.Operation{
+		Name:       opPutReportDefinition,
+		HTTPMethod: "POST",
+		HTTPPath:   "/",
+	}
+
+	if input == nil {
+		input = &PutReportDefinitionInput{}
+	}
+
+	output = &PutReportDefinitionOutput{}
+	req = c.newRequest(op, input, output)
+	req.Handlers.Unmarshal.Swap(jsonrpc.UnmarshalHandler.Name, protocol.UnmarshalDiscardBodyHandler)
+	return
+}
+
+// PutReportDefinition API operation for AWS Cost and Usage Report Service.
+//
+// Create a new report definition
+//
+// Returns awserr.Error for service API and SDK errors. Use runtime type assertions
+// with awserr.Error's Code and Message methods to get detailed information about
+// the error.
+//
+// See the AWS API reference guide for AWS Cost and Usage Report Service's
+// API operation PutReportDefinition for usage and error information.
+//
+// Returned Error Codes:
+//   * ErrCodeDuplicateReportNameException "DuplicateReportNameException"
+//   This exception is thrown when putting a report preference with a name that
+//   already exists.
+//
+//   * ErrCodeReportLimitReachedException "ReportLimitReachedException"
+//   This exception is thrown when the number of report preference reaches max
+//   limit. The max number is 5.
+//
+//   * ErrCodeInternalErrorException "InternalErrorException"
+//   This exception is thrown on a known dependency failure.
+//
+//   * ErrCodeValidationException "ValidationException"
+//   This exception is thrown when providing an invalid input. eg. Put a report
+//   preference with an invalid report name, or Delete a report preference with
+//   an empty report name.
+//
+// See also, https://docs.aws.amazon.com/goto/WebAPI/cur-2017-01-06/PutReportDefinition
+func (c *CostandUsageReportService) PutReportDefinition(input *PutReportDefinitionInput) (*PutReportDefinitionOutput, error) {
+	req, out := c.PutReportDefinitionRequest(input)
+	return out, req.Send()
+}
+
+// PutReportDefinitionWithContext is the same as PutReportDefinition with the addition of
+// the ability to pass a context and additional request options.
+//
+// See PutReportDefinition for details on how to use this API operation.
+//
+// The context must be non-nil and will be used for request cancellation. If
+// the context is nil a panic will occur. In the future the SDK may create
+// sub-contexts for http.Requests. See https://golang.org/pkg/context/
+// for more information on using Contexts.
+func (c *CostandUsageReportService) PutReportDefinitionWithContext(ctx aws.Context, input *PutReportDefinitionInput, opts ...request.Option) (*PutReportDefinitionOutput, error) {
+	req, out := c.PutReportDefinitionRequest(input)
+	req.SetContext(ctx)
+	req.ApplyOptions(opts...)
+	return out, req.Send()
+}
+
+// Request of DeleteReportDefinition
+type DeleteReportDefinitionInput struct {
+	_ struct{} `type:"structure"`
+
+	// Preferred name for a report, it has to be unique. Must starts with a number/letter,
+	// case sensitive. Limited to 256 characters.
+	ReportName *string `type:"string"`
+}
+
+// String returns the string representation
+func (s DeleteReportDefinitionInput) String() string {
+	return awsutil.Prettify(s)
+}
+
+// GoString returns the string representation
+func (s DeleteReportDefinitionInput) GoString() string {
+	return s.String()
+}
+
+// SetReportName sets the ReportName field's value.
+func (s *DeleteReportDefinitionInput) SetReportName(v string) *DeleteReportDefinitionInput {
+	s.ReportName = &v
+	return s
+}
+
+// Response of DeleteReportDefinition
+type DeleteReportDefinitionOutput struct {
+	_ struct{} `type:"structure"`
+
+	// A message indicates if the deletion is successful.
+	ResponseMessage *string `type:"string"`
+}
+
+// String returns the string representation
+func (s DeleteReportDefinitionOutput) String() string {
+	return awsutil.Prettify(s)
+}
+
+// GoString returns the string representation
+func (s DeleteReportDefinitionOutput) GoString() string {
+	return s.String()
+}
+
+// SetResponseMessage sets the ResponseMessage field's value.
+func (s *DeleteReportDefinitionOutput) SetResponseMessage(v string) *DeleteReportDefinitionOutput {
+	s.ResponseMessage = &v
+	return s
+}
+
+// Request of DescribeReportDefinitions
+type DescribeReportDefinitionsInput struct {
+	_ struct{} `type:"structure"`
+
+	// The max number of results returned by the operation.
+	MaxResults *int64 `min:"5" type:"integer"`
+
+	// A generic string.
+	NextToken *string `type:"string"`
+}
+
+// String returns the string representation
+func (s DescribeReportDefinitionsInput) String() string {
+	return awsutil.Prettify(s)
+}
+
+// GoString returns the string representation
+func (s DescribeReportDefinitionsInput) GoString() string {
+	return s.String()
+}
+
+// Validate inspects the fields of the type to determine if they are valid.
+func (s *DescribeReportDefinitionsInput) Validate() error {
+	invalidParams := request.ErrInvalidParams{Context: "DescribeReportDefinitionsInput"}
+	if s.MaxResults != nil && *s.MaxResults < 5 {
+		invalidParams.Add(request.NewErrParamMinValue("MaxResults", 5))
+	}
+
+	if invalidParams.Len() > 0 {
+		return invalidParams
+	}
+	return nil
+}
+
+// SetMaxResults sets the MaxResults field's value.
+func (s *DescribeReportDefinitionsInput) SetMaxResults(v int64) *DescribeReportDefinitionsInput {
+	s.MaxResults = &v
+	return s
+}
+
+// SetNextToken sets the NextToken field's value.
+func (s *DescribeReportDefinitionsInput) SetNextToken(v string) *DescribeReportDefinitionsInput {
+	s.NextToken = &v
+	return s
+}
+
+// Response of DescribeReportDefinitions
+type DescribeReportDefinitionsOutput struct {
+	_ struct{} `type:"structure"`
+
+	// A generic string.
+	NextToken *string `type:"string"`
+
+	// A list of report definitions.
+	ReportDefinitions []*ReportDefinition `type:"list"`
+}
+
+// String returns the string representation
+func (s DescribeReportDefinitionsOutput) String() string {
+	return awsutil.Prettify(s)
+}
+
+// GoString returns the string representation
+func (s DescribeReportDefinitionsOutput) GoString() string {
+	return s.String()
+}
+
+// SetNextToken sets the NextToken field's value.
+func (s *DescribeReportDefinitionsOutput) SetNextToken(v string) *DescribeReportDefinitionsOutput {
+	s.NextToken = &v
+	return s
+}
+
+// SetReportDefinitions sets the ReportDefinitions field's value.
+func (s *DescribeReportDefinitionsOutput) SetReportDefinitions(v []*ReportDefinition) *DescribeReportDefinitionsOutput {
+	s.ReportDefinitions = v
+	return s
+}
+
+// Request of PutReportDefinition
+type PutReportDefinitionInput struct {
+	_ struct{} `type:"structure"`
+
+	// The definition of AWS Cost and Usage Report. Customer can specify the report
+	// name, time unit, report format, compression format, S3 bucket and additional
+	// artifacts and schema elements in the definition.
+	//
+	// ReportDefinition is a required field
+	ReportDefinition *ReportDefinition `type:"structure" required:"true"`
+}
+
+// String returns the string representation
+func (s PutReportDefinitionInput) String() string {
+	return awsutil.Prettify(s)
+}
+
+// GoString returns the string representation
+func (s PutReportDefinitionInput) GoString() string {
+	return s.String()
+}
+
+// Validate inspects the fields of the type to determine if they are valid.
+func (s *PutReportDefinitionInput) Validate() error {
+	invalidParams := request.ErrInvalidParams{Context: "PutReportDefinitionInput"}
+	if s.ReportDefinition == nil {
+		invalidParams.Add(request.NewErrParamRequired("ReportDefinition"))
+	}
+	if s.ReportDefinition != nil {
+		if err := s.ReportDefinition.Validate(); err != nil {
+			invalidParams.AddNested("ReportDefinition", err.(request.ErrInvalidParams))
+		}
+	}
+
+	if invalidParams.Len() > 0 {
+		return invalidParams
+	}
+	return nil
+}
+
+// SetReportDefinition sets the ReportDefinition field's value.
+func (s *PutReportDefinitionInput) SetReportDefinition(v *ReportDefinition) *PutReportDefinitionInput {
+	s.ReportDefinition = v
+	return s
+}
+
+// Response of PutReportDefinition
+type PutReportDefinitionOutput struct {
+	_ struct{} `type:"structure"`
+}
+
+// String returns the string representation
+func (s PutReportDefinitionOutput) String() string {
+	return awsutil.Prettify(s)
+}
+
+// GoString returns the string representation
+func (s PutReportDefinitionOutput) GoString() string {
+	return s.String()
+}
+
+// The definition of AWS Cost and Usage Report. Customer can specify the report
+// name, time unit, report format, compression format, S3 bucket and additional
+// artifacts and schema elements in the definition.
+type ReportDefinition struct {
+	_ struct{} `type:"structure"`
+
+	// A list of additional artifacts.
+	AdditionalArtifacts []*string `type:"list"`
+
+	// A list of schema elements.
+	//
+	// AdditionalSchemaElements is a required field
+	AdditionalSchemaElements []*string `type:"list" required:"true"`
+
+	// Preferred compression format for report.
+	//
+	// Compression is a required field
+	Compression *string `type:"string" required:"true" enum:"CompressionFormat"`
+
+	// Preferred format for report.
+	//
+	// Format is a required field
+	Format *string `type:"string" required:"true" enum:"ReportFormat"`
+
+	// Preferred name for a report, it has to be unique. Must starts with a number/letter,
+	// case sensitive. Limited to 256 characters.
+	//
+	// ReportName is a required field
+	ReportName *string `type:"string" required:"true"`
+
+	// Name of customer S3 bucket.
+	//
+	// S3Bucket is a required field
+	S3Bucket *string `type:"string" required:"true"`
+
+	// Preferred report path prefix. Limited to 256 characters.
+	//
+	// S3Prefix is a required field
+	S3Prefix *string `type:"string" required:"true"`
+
+	// Region of customer S3 bucket.
+	//
+	// S3Region is a required field
+	S3Region *string `type:"string" required:"true" enum:"AWSRegion"`
+
+	// The frequency on which report data are measured and displayed.
+	//
+	// TimeUnit is a required field
+	TimeUnit *string `type:"string" required:"true" enum:"TimeUnit"`
+}
+
+// String returns the string representation
+func (s ReportDefinition) String() string {
+	return awsutil.Prettify(s)
+}
+
+// GoString returns the string representation
+func (s ReportDefinition) GoString() string {
+	return s.String()
+}
+
+// Validate inspects the fields of the type to determine if they are valid.
+func (s *ReportDefinition) Validate() error {
+	invalidParams := request.ErrInvalidParams{Context: "ReportDefinition"}
+	if s.AdditionalSchemaElements == nil {
+		invalidParams.Add(request.NewErrParamRequired("AdditionalSchemaElements"))
+	}
+	if s.Compression == nil {
+		invalidParams.Add(request.NewErrParamRequired("Compression"))
+	}
+	if s.Format == nil {
+		invalidParams.Add(request.NewErrParamRequired("Format"))
+	}
+	if s.ReportName == nil {
+		invalidParams.Add(request.NewErrParamRequired("ReportName"))
+	}
+	if s.S3Bucket == nil {
+		invalidParams.Add(request.NewErrParamRequired("S3Bucket"))
+	}
+	if s.S3Prefix == nil {
+		invalidParams.Add(request.NewErrParamRequired("S3Prefix"))
+	}
+	if s.S3Region == nil {
+		invalidParams.Add(request.NewErrParamRequired("S3Region"))
+	}
+	if s.TimeUnit == nil {
+		invalidParams.Add(request.NewErrParamRequired("TimeUnit"))
+	}
+
+	if invalidParams.Len() > 0 {
+		return invalidParams
+	}
+	return nil
+}
+
+// SetAdditionalArtifacts sets the AdditionalArtifacts field's value.
+func (s *ReportDefinition) SetAdditionalArtifacts(v []*string) *ReportDefinition {
+	s.AdditionalArtifacts = v
+	return s
+}
+
+// SetAdditionalSchemaElements sets the AdditionalSchemaElements field's value.
+func (s *ReportDefinition) SetAdditionalSchemaElements(v []*string) *ReportDefinition {
+	s.AdditionalSchemaElements = v
+	return s
+}
+
+// SetCompression sets the Compression field's value.
+func (s *ReportDefinition) SetCompression(v string) *ReportDefinition {
+	s.Compression = &v
+	return s
+}
+
+// SetFormat sets the Format field's value.
+func (s *ReportDefinition) SetFormat(v string) *ReportDefinition {
+	s.Format = &v
+	return s
+}
+
+// SetReportName sets the ReportName field's value.
+func (s *ReportDefinition) SetReportName(v string) *ReportDefinition {
+	s.ReportName = &v
+	return s
+}
+
+// SetS3Bucket sets the S3Bucket field's value.
+func (s *ReportDefinition) SetS3Bucket(v string) *ReportDefinition {
+	s.S3Bucket = &v
+	return s
+}
+
+// SetS3Prefix sets the S3Prefix field's value.
+func (s *ReportDefinition) SetS3Prefix(v string) *ReportDefinition {
+	s.S3Prefix = &v
+	return s
+}
+
+// SetS3Region sets the S3Region field's value.
+func (s *ReportDefinition) SetS3Region(v string) *ReportDefinition {
+	s.S3Region = &v
+	return s
+}
+
+// SetTimeUnit sets the TimeUnit field's value.
+func (s *ReportDefinition) SetTimeUnit(v string) *ReportDefinition {
+	s.TimeUnit = &v
+	return s
+}
+
+// Region of customer S3 bucket.
+const (
+	// AWSRegionUsEast1 is a AWSRegion enum value
+	AWSRegionUsEast1 = "us-east-1"
+
+	// AWSRegionUsWest1 is a AWSRegion enum value
+	AWSRegionUsWest1 = "us-west-1"
+
+	// AWSRegionUsWest2 is a AWSRegion enum value
+	AWSRegionUsWest2 = "us-west-2"
+
+	// AWSRegionEuCentral1 is a AWSRegion enum value
+	AWSRegionEuCentral1 = "eu-central-1"
+
+	// AWSRegionEuWest1 is a AWSRegion enum value
+	AWSRegionEuWest1 = "eu-west-1"
+
+	// AWSRegionApSoutheast1 is a AWSRegion enum value
+	AWSRegionApSoutheast1 = "ap-southeast-1"
+
+	// AWSRegionApSoutheast2 is a AWSRegion enum value
+	AWSRegionApSoutheast2 = "ap-southeast-2"
+
+	// AWSRegionApNortheast1 is a AWSRegion enum value
+	AWSRegionApNortheast1 = "ap-northeast-1"
+)
+
+// Enable support for Redshift and/or QuickSight.
+const (
+	// AdditionalArtifactRedshift is a AdditionalArtifact enum value
+	AdditionalArtifactRedshift = "REDSHIFT"
+
+	// AdditionalArtifactQuicksight is a AdditionalArtifact enum value
+	AdditionalArtifactQuicksight = "QUICKSIGHT"
+)
+
+// Preferred compression format for report.
+const (
+	// CompressionFormatZip is a CompressionFormat enum value
+	CompressionFormatZip = "ZIP"
+
+	// CompressionFormatGzip is a CompressionFormat enum value
+	CompressionFormatGzip = "GZIP"
+)
+
+// Preferred format for report.
+const (
+	// ReportFormatTextOrcsv is a ReportFormat enum value
+	ReportFormatTextOrcsv = "textORcsv"
+)
+
+// Preference of including Resource IDs. You can include additional details
+// about individual resource IDs in your report.
+const (
+	// SchemaElementResources is a SchemaElement enum value
+	SchemaElementResources = "RESOURCES"
+)
+
+// The frequency on which report data are measured and displayed.
+const (
+	// TimeUnitHourly is a TimeUnit enum value
+	TimeUnitHourly = "HOURLY"
+
+	// TimeUnitDaily is a TimeUnit enum value
+	TimeUnitDaily = "DAILY"
+)

vendor/github.com/aws/aws-sdk-go/service/costandusagereportservice/doc.go

@@ -0,0 +1,28 @@
+// Code generated by private/model/cli/gen-api/main.go. DO NOT EDIT.
+
+// Package costandusagereportservice provides the client and types for making API
+// requests to AWS Cost and Usage Report Service.
+//
+// All public APIs for AWS Cost and Usage Report service
+//
+// See https://docs.aws.amazon.com/goto/WebAPI/cur-2017-01-06 for more information on this service.
+//
+// See costandusagereportservice package documentation for more information.
+// https://docs.aws.amazon.com/sdk-for-go/api/service/costandusagereportservice/
+//
+// Using the Client
+//
+// To contact AWS Cost and Usage Report Service with the SDK use the New function to create
+// a new service client. With that client you can make API requests to the service.
+// These clients are safe to use concurrently.
+//
+// See the SDK's documentation for more information on how to use the SDK.
+// https://docs.aws.amazon.com/sdk-for-go/api/
+//
+// See aws.Config documentation for more information on configuring SDK clients.
+// https://docs.aws.amazon.com/sdk-for-go/api/aws/#Config
+//
+// See the AWS Cost and Usage Report Service client CostandUsageReportService for more
+// information on creating client for this service.
+// https://docs.aws.amazon.com/sdk-for-go/api/service/costandusagereportservice/#New
+package costandusagereportservice

vendor/github.com/aws/aws-sdk-go/service/costandusagereportservice/errors.go

@@ -0,0 +1,34 @@
+// Code generated by private/model/cli/gen-api/main.go. DO NOT EDIT.
+
+package costandusagereportservice
+
+const (
+
+	// ErrCodeDuplicateReportNameException for service response error code
+	// "DuplicateReportNameException".
+	//
+	// This exception is thrown when putting a report preference with a name that
+	// already exists.
+	ErrCodeDuplicateReportNameException = "DuplicateReportNameException"
+
+	// ErrCodeInternalErrorException for service response error code
+	// "InternalErrorException".
+	//
+	// This exception is thrown on a known dependency failure.
+	ErrCodeInternalErrorException = "InternalErrorException"
+
+	// ErrCodeReportLimitReachedException for service response error code
+	// "ReportLimitReachedException".
+	//
+	// This exception is thrown when the number of report preference reaches max
+	// limit. The max number is 5.
+	ErrCodeReportLimitReachedException = "ReportLimitReachedException"
+
+	// ErrCodeValidationException for service response error code
+	// "ValidationException".
+	//
+	// This exception is thrown when providing an invalid input. eg. Put a report
+	// preference with an invalid report name, or Delete a report preference with
+	// an empty report name.
+	ErrCodeValidationException = "ValidationException"
+)

vendor/github.com/aws/aws-sdk-go/service/costandusagereportservice/service.go

@@ -0,0 +1,100 @@
+// Code generated by private/model/cli/gen-api/main.go. DO NOT EDIT.
+
+package costandusagereportservice
+
+import (
+	"github.com/aws/aws-sdk-go/aws"
+	"github.com/aws/aws-sdk-go/aws/client"
+	"github.com/aws/aws-sdk-go/aws/client/metadata"
+	"github.com/aws/aws-sdk-go/aws/request"
+	"github.com/aws/aws-sdk-go/aws/signer/v4"
+	"github.com/aws/aws-sdk-go/private/protocol/jsonrpc"
+)
+
+// CostandUsageReportService provides the API operation methods for making requests to
+// AWS Cost and Usage Report Service. See this package's package overview docs
+// for details on the service.
+//
+// CostandUsageReportService methods are safe to use concurrently. It is not safe to
+// modify mutate any of the struct's properties though.
+type CostandUsageReportService struct {
+	*client.Client
+}
+
+// Used for custom client initialization logic
+var initClient func(*client.Client)
+
+// Used for custom request initialization logic
+var initRequest func(*request.Request)
+
+// Service information constants
+const (
+	ServiceName = "cur"                           // Name of service.
+	EndpointsID = ServiceName                     // ID to lookup a service endpoint with.
+	ServiceID   = "Cost and Usage Report Service" // ServiceID is a unique identifer of a specific service.
+)
+
+// New creates a new instance of the CostandUsageReportService client with a session.
+// If additional configuration is needed for the client instance use the optional
+// aws.Config parameter to add your extra config.
+//
+// Example:
+//     // Create a CostandUsageReportService client from just a session.
+//     svc := costandusagereportservice.New(mySession)
+//
+//     // Create a CostandUsageReportService client with additional configuration
+//     svc := costandusagereportservice.New(mySession, aws.NewConfig().WithRegion("us-west-2"))
+func New(p client.ConfigProvider, cfgs ...*aws.Config) *CostandUsageReportService {
+	c := p.ClientConfig(EndpointsID, cfgs...)
+	if c.SigningNameDerived || len(c.SigningName) == 0 {
+		c.SigningName = "cur"
+	}
+	return newClient(*c.Config, c.Handlers, c.Endpoint, c.SigningRegion, c.SigningName)
+}
+
+// newClient creates, initializes and returns a new service client instance.
+func newClient(cfg aws.Config, handlers request.Handlers, endpoint, signingRegion, signingName string) *CostandUsageReportService {
+	svc := &CostandUsageReportService{
+		Client: client.New(
+			cfg,
+			metadata.ClientInfo{
+				ServiceName:   ServiceName,
+				ServiceID:     ServiceID,
+				SigningName:   signingName,
+				SigningRegion: signingRegion,
+				Endpoint:      endpoint,
+				APIVersion:    "2017-01-06",
+				JSONVersion:   "1.1",
+				TargetPrefix:  "AWSOrigamiServiceGatewayService",
+			},
+			handlers,
+		),
+	}
+
+	// Handlers
+	svc.Handlers.Sign.PushBackNamed(v4.SignRequestHandler)
+	svc.Handlers.Build.PushBackNamed(jsonrpc.BuildHandler)
+	svc.Handlers.Unmarshal.PushBackNamed(jsonrpc.UnmarshalHandler)
+	svc.Handlers.UnmarshalMeta.PushBackNamed(jsonrpc.UnmarshalMetaHandler)
+	svc.Handlers.UnmarshalError.PushBackNamed(jsonrpc.UnmarshalErrorHandler)
+
+	// Run custom client initialization if present
+	if initClient != nil {
+		initClient(svc.Client)
+	}
+
+	return svc
+}
+
+// newRequest creates a new request for a CostandUsageReportService operation and runs any
+// custom request initialization.
+func (c *CostandUsageReportService) newRequest(op *request.Operation, params, data interface{}) *request.Request {
+	req := c.NewRequest(op, params, data)
+
+	// Run custom request initialization if present
+	if initRequest != nil {
+		initRequest(req)
+	}
+
+	return req
+}

vendor/github.com/aws/aws-sdk-go/service/databasemigrationservice/waiters.go

@@ -512,10 +512,10 @@ func (c *DatabaseMigrationService) WaitUntilReplicationTaskStoppedWithContext(ct
 }
 
 // WaitUntilTestConnectionSucceeds uses the AWS Database Migration Service API operation
-// TestConnection to wait for a condition to be met before returning.
+// DescribeConnections to wait for a condition to be met before returning.
 // If the condition is not met within the max attempt window, an error will
 // be returned.
-func (c *DatabaseMigrationService) WaitUntilTestConnectionSucceeds(input *TestConnectionInput) error {
+func (c *DatabaseMigrationService) WaitUntilTestConnectionSucceeds(input *DescribeConnectionsInput) error {
 	return c.WaitUntilTestConnectionSucceedsWithContext(aws.BackgroundContext(), input)
 }
 
@@ -527,7 +527,7 @@ func (c *DatabaseMigrationService) WaitUntilTestConnectionSucceeds(input *TestCo
 // the context is nil a panic will occur. In the future the SDK may create
 // sub-contexts for http.Requests. See https://golang.org/pkg/context/
 // for more information on using Contexts.
-func (c *DatabaseMigrationService) WaitUntilTestConnectionSucceedsWithContext(ctx aws.Context, input *TestConnectionInput, opts ...request.WaiterOption) error {
+func (c *DatabaseMigrationService) WaitUntilTestConnectionSucceedsWithContext(ctx aws.Context, input *DescribeConnectionsInput, opts ...request.WaiterOption) error {
 	w := request.Waiter{
 		Name:        "WaitUntilTestConnectionSucceeds",
 		MaxAttempts: 60,
@@ -535,23 +535,23 @@ func (c *DatabaseMigrationService) WaitUntilTestConnectionSucceedsWithContext(ct
 		Acceptors: []request.WaiterAcceptor{
 			{
 				State:   request.SuccessWaiterState,
-				Matcher: request.PathWaiterMatch, Argument: "Connection.Status",
+				Matcher: request.PathAllWaiterMatch, Argument: "Connections[].Status",
 				Expected: "successful",
 			},
 			{
 				State:   request.FailureWaiterState,
-				Matcher: request.PathWaiterMatch, Argument: "Connection.Status",
+				Matcher: request.PathAnyWaiterMatch, Argument: "Connections[].Status",
 				Expected: "failed",
 			},
 		},
 		Logger: c.Config.Logger,
 		NewRequest: func(opts []request.Option) (*request.Request, error) {
-			var inCpy *TestConnectionInput
+			var inCpy *DescribeConnectionsInput
 			if input != nil {
 				tmp := *input
 				inCpy = &tmp
 			}
-			req, _ := c.TestConnectionRequest(inCpy)
+			req, _ := c.DescribeConnectionsRequest(inCpy)
 			req.SetContext(ctx)
 			req.ApplyOptions(opts...)
 			return req, nil

vendor/github.com/aws/aws-sdk-go/service/datapipeline/doc.go

@@ -0,0 +1,49 @@
+// Code generated by private/model/cli/gen-api/main.go. DO NOT EDIT.
+
+// Package datapipeline provides the client and types for making API
+// requests to AWS Data Pipeline.
+//
+// AWS Data Pipeline configures and manages a data-driven workflow called a
+// pipeline. AWS Data Pipeline handles the details of scheduling and ensuring
+// that data dependencies are met so that your application can focus on processing
+// the data.
+//
+// AWS Data Pipeline provides a JAR implementation of a task runner called AWS
+// Data Pipeline Task Runner. AWS Data Pipeline Task Runner provides logic for
+// common data management scenarios, such as performing database queries and
+// running data analysis using Amazon Elastic MapReduce (Amazon EMR). You can
+// use AWS Data Pipeline Task Runner as your task runner, or you can write your
+// own task runner to provide custom data management.
+//
+// AWS Data Pipeline implements two main sets of functionality. Use the first
+// set to create a pipeline and define data sources, schedules, dependencies,
+// and the transforms to be performed on the data. Use the second set in your
+// task runner application to receive the next task ready for processing. The
+// logic for performing the task, such as querying the data, running data analysis,
+// or converting the data from one format to another, is contained within the
+// task runner. The task runner performs the task assigned to it by the web
+// service, reporting progress to the web service as it does so. When the task
+// is done, the task runner reports the final success or failure of the task
+// to the web service.
+//
+// See https://docs.aws.amazon.com/goto/WebAPI/datapipeline-2012-10-29 for more information on this service.
+//
+// See datapipeline package documentation for more information.
+// https://docs.aws.amazon.com/sdk-for-go/api/service/datapipeline/
+//
+// Using the Client
+//
+// To contact AWS Data Pipeline with the SDK use the New function to create
+// a new service client. With that client you can make API requests to the service.
+// These clients are safe to use concurrently.
+//
+// See the SDK's documentation for more information on how to use the SDK.
+// https://docs.aws.amazon.com/sdk-for-go/api/
+//
+// See aws.Config documentation for more information on configuring SDK clients.
+// https://docs.aws.amazon.com/sdk-for-go/api/aws/#Config
+//
+// See the AWS Data Pipeline client DataPipeline for more
+// information on creating client for this service.
+// https://docs.aws.amazon.com/sdk-for-go/api/service/datapipeline/#New
+package datapipeline

vendor/github.com/aws/aws-sdk-go/service/datapipeline/errors.go

@@ -0,0 +1,39 @@
+// Code generated by private/model/cli/gen-api/main.go. DO NOT EDIT.
+
+package datapipeline
+
+const (
+
+	// ErrCodeInternalServiceError for service response error code
+	// "InternalServiceError".
+	//
+	// An internal service error occurred.
+	ErrCodeInternalServiceError = "InternalServiceError"
+
+	// ErrCodeInvalidRequestException for service response error code
+	// "InvalidRequestException".
+	//
+	// The request was not valid. Verify that your request was properly formatted,
+	// that the signature was generated with the correct credentials, and that you
+	// haven't exceeded any of the service limits for your account.
+	ErrCodeInvalidRequestException = "InvalidRequestException"
+
+	// ErrCodePipelineDeletedException for service response error code
+	// "PipelineDeletedException".
+	//
+	// The specified pipeline has been deleted.
+	ErrCodePipelineDeletedException = "PipelineDeletedException"
+
+	// ErrCodePipelineNotFoundException for service response error code
+	// "PipelineNotFoundException".
+	//
+	// The specified pipeline was not found. Verify that you used the correct user
+	// and account identifiers.
+	ErrCodePipelineNotFoundException = "PipelineNotFoundException"
+
+	// ErrCodeTaskNotFoundException for service response error code
+	// "TaskNotFoundException".
+	//
+	// The specified task was not found.
+	ErrCodeTaskNotFoundException = "TaskNotFoundException"
+)

vendor/github.com/aws/aws-sdk-go/service/datapipeline/service.go

@@ -0,0 +1,97 @@
+// Code generated by private/model/cli/gen-api/main.go. DO NOT EDIT.
+
+package datapipeline
+
+import (
+	"github.com/aws/aws-sdk-go/aws"
+	"github.com/aws/aws-sdk-go/aws/client"
+	"github.com/aws/aws-sdk-go/aws/client/metadata"
+	"github.com/aws/aws-sdk-go/aws/request"
+	"github.com/aws/aws-sdk-go/aws/signer/v4"
+	"github.com/aws/aws-sdk-go/private/protocol/jsonrpc"
+)
+
+// DataPipeline provides the API operation methods for making requests to
+// AWS Data Pipeline. See this package's package overview docs
+// for details on the service.
+//
+// DataPipeline methods are safe to use concurrently. It is not safe to
+// modify mutate any of the struct's properties though.
+type DataPipeline struct {
+	*client.Client
+}
+
+// Used for custom client initialization logic
+var initClient func(*client.Client)
+
+// Used for custom request initialization logic
+var initRequest func(*request.Request)
+
+// Service information constants
+const (
+	ServiceName = "datapipeline"  // Name of service.
+	EndpointsID = ServiceName     // ID to lookup a service endpoint with.
+	ServiceID   = "Data Pipeline" // ServiceID is a unique identifer of a specific service.
+)
+
+// New creates a new instance of the DataPipeline client with a session.
+// If additional configuration is needed for the client instance use the optional
+// aws.Config parameter to add your extra config.
+//
+// Example:
+//     // Create a DataPipeline client from just a session.
+//     svc := datapipeline.New(mySession)
+//
+//     // Create a DataPipeline client with additional configuration
+//     svc := datapipeline.New(mySession, aws.NewConfig().WithRegion("us-west-2"))
+func New(p client.ConfigProvider, cfgs ...*aws.Config) *DataPipeline {
+	c := p.ClientConfig(EndpointsID, cfgs...)
+	return newClient(*c.Config, c.Handlers, c.Endpoint, c.SigningRegion, c.SigningName)
+}
+
+// newClient creates, initializes and returns a new service client instance.
+func newClient(cfg aws.Config, handlers request.Handlers, endpoint, signingRegion, signingName string) *DataPipeline {
+	svc := &DataPipeline{
+		Client: client.New(
+			cfg,
+			metadata.ClientInfo{
+				ServiceName:   ServiceName,
+				ServiceID:     ServiceID,
+				SigningName:   signingName,
+				SigningRegion: signingRegion,
+				Endpoint:      endpoint,
+				APIVersion:    "2012-10-29",
+				JSONVersion:   "1.1",
+				TargetPrefix:  "DataPipeline",
+			},
+			handlers,
+		),
+	}
+
+	// Handlers
+	svc.Handlers.Sign.PushBackNamed(v4.SignRequestHandler)
+	svc.Handlers.Build.PushBackNamed(jsonrpc.BuildHandler)
+	svc.Handlers.Unmarshal.PushBackNamed(jsonrpc.UnmarshalHandler)
+	svc.Handlers.UnmarshalMeta.PushBackNamed(jsonrpc.UnmarshalMetaHandler)
+	svc.Handlers.UnmarshalError.PushBackNamed(jsonrpc.UnmarshalErrorHandler)
+
+	// Run custom client initialization if present
+	if initClient != nil {
+		initClient(svc.Client)
+	}
+
+	return svc
+}
+
+// newRequest creates a new request for a DataPipeline operation and runs any
+// custom request initialization.
+func (c *DataPipeline) newRequest(op *request.Operation, params, data interface{}) *request.Request {
+	req := c.NewRequest(op, params, data)
+
+	// Run custom request initialization if present
+	if initRequest != nil {
+		initRequest(req)
+	}
+
+	return req
+}

vendor/github.com/aws/aws-sdk-go/service/devicefarm/api.go

@@ -6630,6 +6630,8 @@ type Artifact struct {
 	//
 	//    * MESSAGE_LOG: The message log type.
 	//
+	//    * VIDEO_LOG: The video log type.
+	//
 	//    * RESULT_LOG: The result log type.
 	//
 	//    * SERVICE_LOG: The service log type.
@@ -6668,6 +6670,14 @@ type Artifact struct {
 	//    * APPLICATION_CRASH_REPORT: The application crash report output type.
 	//
 	//    * XCTEST_LOG: The XCode test output type.
+	//
+	//    * VIDEO: The Video output type.
+	//
+	//    * CUSTOMER_ARTIFACT:The Customer Artifact output type.
+	//
+	//    * CUSTOMER_ARTIFACT_LOG: The Customer Artifact Log output type.
+	//
+	//    * TESTSPEC_OUTPUT: The Test Spec Output type.
 	Type *string `locationName:"type" type:"string" enum:"ArtifactType"`
 
 	// The pre-signed Amazon S3 URL that can be used with a corresponding GET request
@@ -6845,6 +6855,16 @@ type CreateDevicePoolInput struct {
 	// The device pool's description.
 	Description *string `locationName:"description" type:"string"`
 
+	// The number of devices that Device Farm can add to your device pool. Device
+	// Farm adds devices that are available and that meet the criteria that you
+	// assign for the rules parameter. Depending on how many devices meet these
+	// constraints, your device pool might contain fewer devices than the value
+	// for this parameter.
+	//
+	// By specifying the maximum number of devices, you can control the costs that
+	// you incur by running tests.
+	MaxDevices *int64 `locationName:"maxDevices" type:"integer"`
+
 	// The device pool's name.
 	//
 	// Name is a required field
@@ -6899,6 +6919,12 @@ func (s *CreateDevicePoolInput) SetDescription(v string) *CreateDevicePoolInput
 	return s
 }
 
+// SetMaxDevices sets the MaxDevices field's value.
+func (s *CreateDevicePoolInput) SetMaxDevices(v int64) *CreateDevicePoolInput {
+	s.MaxDevices = &v
+	return s
+}
+
 // SetName sets the Name field's value.
 func (s *CreateDevicePoolInput) SetName(v string) *CreateDevicePoolInput {
 	s.Name = &v
@@ -7569,13 +7595,24 @@ type CreateUploadInput struct {
 	//
 	//    * APPIUM_PYTHON_TEST_PACKAGE: An Appium Python test package upload.
 	//
+	//    * APPIUM_NODE_TEST_PACKAGE: An Appium Node.js test package upload.
+	//
+	//    * APPIUM_RUBY_TEST_PACKAGE: An Appium Ruby test package upload.
+	//
 	//    * APPIUM_WEB_JAVA_JUNIT_TEST_PACKAGE: An Appium Java JUnit test package
-	//    upload.
+	//    upload for a web app.
 	//
 	//    * APPIUM_WEB_JAVA_TESTNG_TEST_PACKAGE: An Appium Java TestNG test package
-	//    upload.
+	//    upload for a web app.
 	//
-	//    * APPIUM_WEB_PYTHON_TEST_PACKAGE: An Appium Python test package upload.
+	//    * APPIUM_WEB_PYTHON_TEST_PACKAGE: An Appium Python test package upload
+	//    for a web app.
+	//
+	//    * APPIUM_WEB_NODE_TEST_PACKAGE: An Appium Node.js test package upload
+	//    for a web app.
+	//
+	//    * APPIUM_WEB_RUBY_TEST_PACKAGE: An Appium Ruby test package upload for
+	//    a web app.
 	//
 	//    * CALABASH_TEST_PACKAGE: A Calabash test package upload.
 	//
@@ -7595,11 +7632,24 @@ type CreateUploadInput struct {
 	//
 	//    * APPIUM_PYTHON_TEST_SPEC: An Appium Python test spec upload.
 	//
-	//    * APPIUM_WEB_JAVA_JUNIT_TEST_SPEC: An Appium Java JUnit test spec upload.
+	//    * APPIUM_NODE_TEST_SPEC: An Appium Node.js test spec upload.
 	//
-	//    * APPIUM_WEB_JAVA_TESTNG_TEST_SPEC: An Appium Java TestNG test spec upload.
+	//    * APPIUM_RUBY_TEST_SPEC: An Appium Ruby test spec upload.
 	//
-	//    * APPIUM_WEB_PYTHON_TEST_SPEC: An Appium Python test spec upload.
+	//    * APPIUM_WEB_JAVA_JUNIT_TEST_SPEC: An Appium Java JUnit test spec upload
+	//    for a web app.
+	//
+	//    * APPIUM_WEB_JAVA_TESTNG_TEST_SPEC: An Appium Java TestNG test spec upload
+	//    for a web app.
+	//
+	//    * APPIUM_WEB_PYTHON_TEST_SPEC: An Appium Python test spec upload for a
+	//    web app.
+	//
+	//    * APPIUM_WEB_NODE_TEST_SPEC: An Appium Node.js test spec upload for a
+	//    web app.
+	//
+	//    * APPIUM_WEB_RUBY_TEST_SPEC: An Appium Ruby test spec upload for a web
+	//    app.
 	//
 	//    * INSTRUMENTATION_TEST_SPEC: An instrumentation test spec upload.
 	//
@@ -8307,7 +8357,8 @@ type Device struct {
 	// The device's ARN.
 	Arn *string `locationName:"arn" min:"32" type:"string"`
 
-	// Reflects how likely a device will be available for a test run.
+	// Reflects how likely a device will be available for a test run. It is currently
+	// available in the ListDevices and GetDevice API methods.
 	Availability *string `locationName:"availability" type:"string" enum:"DeviceAvailability"`
 
 	// The device's carrier.
@@ -8518,11 +8569,11 @@ func (s *Device) SetResolution(v *Resolution) *Device {
 }
 
 // Represents a device filter used to select a set of devices to be included
-// in a test run. This data structure is passed in as the "deviceSelectionConfiguration"
+// in a test run. This data structure is passed in as the deviceSelectionConfiguration
 // parameter to ScheduleRun. For an example of the JSON request syntax, see
 // ScheduleRun.
 //
-// It is also passed in as the "filters" parameter to ListDevices. For an example
+// It is also passed in as the filters parameter to ListDevices. For an example
 // of the JSON request syntax, see ListDevices.
 type DeviceFilter struct {
 	_ struct{} `type:"structure"`
@@ -8530,53 +8581,71 @@ type DeviceFilter struct {
 	// The aspect of a device such as platform or model used as the selection criteria
 	// in a device filter.
 	//
-	// Allowed values include:
+	// The supported operators for each attribute are provided in the following
+	// list.
 	//
-	//    * ARN: The Amazon Resource Name (ARN) of the device. For example, "arn:aws:devicefarm:us-west-2::device:12345Example".
+	// ARNThe Amazon Resource Name (ARN) of the device. For example, "arn:aws:devicefarm:us-west-2::device:12345Example".
 	//
-	//    * PLATFORM: The device platform. Valid values are "ANDROID" or "IOS".
+	// Supported operators: EQUALS, IN, NOT_IN
 	//
-	//    * OS_VERSION: The operating system version. For example, "10.3.2".
+	// PLATFORMThe device platform. Valid values are "ANDROID" or "IOS".
 	//
-	//    * MODEL: The device model. For example, "iPad 5th Gen".
+	// Supported operators: EQUALS
 	//
-	//    * AVAILABILITY: The current availability of the device. Valid values are
+	// OS_VERSIONThe operating system version. For example, "10.3.2".
-	//    "AVAILABLE", "HIGHLY_AVAILABLE", "BUSY", or "TEMPORARY_NOT_AVAILABLE".
 	//
-	//    * FORM_FACTOR: The device form factor. Valid values are "PHONE" or "TABLET".
+	// Supported operators: EQUALS, GREATER_THAN, GREATER_THAN_OR_EQUALS, IN, LESS_THAN,
+	// LESS_THAN_OR_EQUALS, NOT_IN
 	//
-	//    * MANUFACTURER: The device manufacturer. For example, "Apple".
+	// MODELThe device model. For example, "iPad 5th Gen".
 	//
-	//    * REMOTE_ACCESS_ENABLED: Whether the device is enabled for remote access.
+	// Supported operators: CONTAINS, EQUALS, IN, NOT_IN
 	//
-	//    * REMOTE_DEBUG_ENABLED: Whether the device is enabled for remote debugging.
+	// AVAILABILITYThe current availability of the device. Valid values are "AVAILABLE",
+	// "HIGHLY_AVAILABLE", "BUSY", or "TEMPORARY_NOT_AVAILABLE".
 	//
-	//    * INSTANCE_ARN: The Amazon Resource Name (ARN) of the device instance.
+	// Supported operators: EQUALS
 	//
-	//    * INSTANCE_LABELS: The label of the device instance.
+	// FORM_FACTORThe device form factor. Valid values are "PHONE" or "TABLET".
 	//
-	//    * FLEET_TYPE: The fleet type. Valid values are "PUBLIC" or "PRIVATE".
+	// Supported operators: EQUALS
+	//
+	// MANUFACTURERThe device manufacturer. For example, "Apple".
+	//
+	// Supported operators: EQUALS, IN, NOT_IN
+	//
+	// REMOTE_ACCESS_ENABLEDWhether the device is enabled for remote access. Valid
+	// values are "TRUE" or "FALSE".
+	//
+	// Supported operators: EQUALS
+	//
+	// REMOTE_DEBUG_ENABLEDWhether the device is enabled for remote debugging. Valid
+	// values are "TRUE" or "FALSE".
+	//
+	// Supported operators: EQUALS
+	//
+	// INSTANCE_ARNThe Amazon Resource Name (ARN) of the device instance.
+	//
+	// Supported operators: EQUALS, IN, NOT_IN
+	//
+	// INSTANCE_LABELSThe label of the device instance.
+	//
+	// Supported operators: CONTAINS
+	//
+	// FLEET_TYPEThe fleet type. Valid values are "PUBLIC" or "PRIVATE".
+	//
+	// Supported operators: EQUALS
 	Attribute *string `locationName:"attribute" type:"string" enum:"DeviceFilterAttribute"`
 
-	// The filter operator.
+	// Specifies how Device Farm compares the filter's attribute to the value. For
-	//
+	// the operators that are supported by each attribute, see the attribute descriptions.
-	//    * The EQUALS operator is available for every attribute except INSTANCE_LABELS.
+	Operator *string `locationName:"operator" type:"string" enum:"RuleOperator"`
-	//
-	//    * The CONTAINS operator is available for the INSTANCE_LABELS and MODEL
-	//    attributes.
-	//
-	//    * The IN and NOT_IN operators are available for the ARN, OS_VERSION, MODEL,
-	//    MANUFACTURER, and INSTANCE_ARN attributes.
-	//
-	//    * The LESS_THAN, GREATER_THAN, LESS_THAN_OR_EQUALS, and GREATER_THAN_OR_EQUALS
-	//    operators are also available for the OS_VERSION attribute.
-	Operator *string `locationName:"operator" type:"string" enum:"DeviceFilterOperator"`
 
 	// An array of one or more filter values used in a device filter.
 	//
 	// Operator Values
 	//
-	//    * The IN and NOT operators can take a values array that has more than
+	//    * The IN and NOT_IN operators can take a values array that has more than
 	//    one element.
 	//
 	//    * The other operators require an array with a single element.
@@ -8747,6 +8816,16 @@ type DevicePool struct {
 	// The device pool's description.
 	Description *string `locationName:"description" type:"string"`
 
+	// The number of devices that Device Farm can add to your device pool. Device
+	// Farm adds devices that are available and that meet the criteria that you
+	// assign for the rules parameter. Depending on how many devices meet these
+	// constraints, your device pool might contain fewer devices than the value
+	// for this parameter.
+	//
+	// By specifying the maximum number of devices, you can control the costs that
+	// you incur by running tests.
+	MaxDevices *int64 `locationName:"maxDevices" type:"integer"`
+
 	// The device pool's name.
 	Name *string `locationName:"name" type:"string"`
 
@@ -8786,6 +8865,12 @@ func (s *DevicePool) SetDescription(v string) *DevicePool {
 	return s
 }
 
+// SetMaxDevices sets the MaxDevices field's value.
+func (s *DevicePool) SetMaxDevices(v int64) *DevicePool {
+	s.MaxDevices = &v
+	return s
+}
+
 // SetName sets the Name field's value.
 func (s *DevicePool) SetName(v string) *DevicePool {
 	s.Name = &v
@@ -8855,8 +8940,10 @@ type DeviceSelectionConfiguration struct {
 	// Used to dynamically select a set of devices for a test run. A filter is made
 	// up of an attribute, an operator, and one or more values.
 	//
-	//    * Attribute: The aspect of a device such as platform or model used as
+	//    * Attribute
-	//    the selection criteria in a device filter.
+	//
+	// The aspect of a device such as platform or model used as the selection criteria
+	//    in a device filter.
 	//
 	// Allowed values include:
 	//
@@ -8875,9 +8962,11 @@ type DeviceSelectionConfiguration struct {
 	//
 	// MANUFACTURER: The device manufacturer. For example, "Apple".
 	//
-	// REMOTE_ACCESS_ENABLED: Whether the device is enabled for remote access.
+	// REMOTE_ACCESS_ENABLED: Whether the device is enabled for remote access. Valid
+	//    values are "TRUE" or "FALSE".
 	//
 	// REMOTE_DEBUG_ENABLED: Whether the device is enabled for remote debugging.
+	//    Valid values are "TRUE" or "FALSE".
 	//
 	// INSTANCE_ARN: The Amazon Resource Name (ARN) of the device instance.
 	//
@@ -8885,7 +8974,9 @@ type DeviceSelectionConfiguration struct {
 	//
 	// FLEET_TYPE: The fleet type. Valid values are "PUBLIC" or "PRIVATE".
 	//
-	//    * Operator: The filter operator.
+	//    * Operator
+	//
+	// The filter operator.
 	//
 	// The EQUALS operator is available for every attribute except INSTANCE_LABELS.
 	//
@@ -8897,14 +8988,27 @@ type DeviceSelectionConfiguration struct {
 	// The LESS_THAN, GREATER_THAN, LESS_THAN_OR_EQUALS, and GREATER_THAN_OR_EQUALS
 	//    operators are also available for the OS_VERSION attribute.
 	//
-	//    * Values: An array of one or more filter values.
+	//    * Values
 	//
-	// The IN and NOT operators can take a values array that has more than one element.
+	// An array of one or more filter values.
+	//
+	// Operator Values
+	//
+	// The IN and NOT_IN operators can take a values array that has more than one
+	//    element.
 	//
 	// The other operators require an array with a single element.
 	//
-	// In a request, the AVAILABILITY attribute takes "AVAILABLE", "HIGHLY_AVAILABLE",
+	// Attribute Values
-	//    "BUSY", or "TEMPORARY_NOT_AVAILABLE" as values.
+	//
+	// The PLATFORM attribute can be set to "ANDROID" or "IOS".
+	//
+	// The AVAILABILITY attribute can be set to "AVAILABLE", "HIGHLY_AVAILABLE",
+	//    "BUSY", or "TEMPORARY_NOT_AVAILABLE".
+	//
+	// The FORM_FACTOR attribute can be set to "PHONE" or "TABLET".
+	//
+	// The FLEET_TYPE attribute can be set to "PUBLIC" or "PRIVATE".
 	//
 	// Filters is a required field
 	Filters []*DeviceFilter `locationName:"filters" type:"list" required:"true"`
@@ -9273,11 +9377,19 @@ type GetDevicePoolCompatibilityInput struct {
 	//
 	//    * APPIUM_PYTHON: The Appium Python type.
 	//
-	//    * APPIUM_WEB_JAVA_JUNIT: The Appium Java JUnit type for Web apps.
+	//    * APPIUM_NODE: The Appium Node.js type.
 	//
-	//    * APPIUM_WEB_JAVA_TESTNG: The Appium Java TestNG type for Web apps.
+	//    * APPIUM_RUBY: The Appium Ruby type.
 	//
-	//    * APPIUM_WEB_PYTHON: The Appium Python type for Web apps.
+	//    * APPIUM_WEB_JAVA_JUNIT: The Appium Java JUnit type for web apps.
+	//
+	//    * APPIUM_WEB_JAVA_TESTNG: The Appium Java TestNG type for web apps.
+	//
+	//    * APPIUM_WEB_PYTHON: The Appium Python type for web apps.
+	//
+	//    * APPIUM_WEB_NODE: The Appium Node.js type for web apps.
+	//
+	//    * APPIUM_WEB_RUBY: The Appium Ruby type for web apps.
 	//
 	//    * CALABASH: The Calabash type.
 	//
@@ -10502,11 +10614,19 @@ type Job struct {
 	//
 	//    * APPIUM_PYTHON: The Appium Python type.
 	//
-	//    * APPIUM_WEB_JAVA_JUNIT: The Appium Java JUnit type for Web apps.
+	//    * APPIUM_NODE: The Appium Node.js type.
 	//
-	//    * APPIUM_WEB_JAVA_TESTNG: The Appium Java TestNG type for Web apps.
+	//    * APPIUM_RUBY: The Appium Ruby type.
 	//
-	//    * APPIUM_WEB_PYTHON: The Appium Python type for Web apps.
+	//    * APPIUM_WEB_JAVA_JUNIT: The Appium Java JUnit type for web apps.
+	//
+	//    * APPIUM_WEB_JAVA_TESTNG: The Appium Java TestNG type for web apps.
+	//
+	//    * APPIUM_WEB_PYTHON: The Appium Python type for web apps.
+	//
+	//    * APPIUM_WEB_NODE: The Appium Node.js type for web apps.
+	//
+	//    * APPIUM_WEB_RUBY: The Appium Ruby test type for web apps.
 	//
 	//    * CALABASH: The Calabash type.
 	//
@@ -10957,9 +11077,11 @@ type ListDevicesInput struct {
 	//
 	// MANUFACTURER: The device manufacturer. For example, "Apple".
 	//
-	// REMOTE_ACCESS_ENABLED: Whether the device is enabled for remote access.
+	// REMOTE_ACCESS_ENABLED: Whether the device is enabled for remote access. Valid
+	//    values are "TRUE" or "FALSE".
 	//
 	// REMOTE_DEBUG_ENABLED: Whether the device is enabled for remote debugging.
+	//    Valid values are "TRUE" or "FALSE".
 	//
 	// INSTANCE_ARN: The Amazon Resource Name (ARN) of the device instance.
 	//
@@ -10981,7 +11103,7 @@ type ListDevicesInput struct {
 	//
 	//    * Values: An array of one or more filter values.
 	//
-	// The IN and NOT operators can take a values array that has more than one element.
+	// The IN and NOT_IN operators take a values array that has one or more elements.
 	//
 	// The other operators require an array with a single element.
 	//
@@ -12235,13 +12357,24 @@ type ListUploadsInput struct {
 	//
 	//    * APPIUM_PYTHON_TEST_PACKAGE: An Appium Python test package upload.
 	//
+	//    * APPIUM_NODE_TEST_PACKAGE: An Appium Node.js test package upload.
+	//
+	//    * APPIUM_RUBY_TEST_PACKAGE: An Appium Ruby test package upload.
+	//
 	//    * APPIUM_WEB_JAVA_JUNIT_TEST_PACKAGE: An Appium Java JUnit test package
-	//    upload.
+	//    upload for a web app.
 	//
 	//    * APPIUM_WEB_JAVA_TESTNG_TEST_PACKAGE: An Appium Java TestNG test package
-	//    upload.
+	//    upload for a web app.
 	//
-	//    * APPIUM_WEB_PYTHON_TEST_PACKAGE: An Appium Python test package upload.
+	//    * APPIUM_WEB_PYTHON_TEST_PACKAGE: An Appium Python test package upload
+	//    for a web app.
+	//
+	//    * APPIUM_WEB_NODE_TEST_PACKAGE: An Appium Node.js test package upload
+	//    for a web app.
+	//
+	//    * APPIUM_WEB_RUBY_TEST_PACKAGE: An Appium Ruby test package upload for
+	//    a web app.
 	//
 	//    * CALABASH_TEST_PACKAGE: A Calabash test package upload.
 	//
@@ -12261,11 +12394,24 @@ type ListUploadsInput struct {
 	//
 	//    * APPIUM_PYTHON_TEST_SPEC: An Appium Python test spec upload.
 	//
-	//    * APPIUM_WEB_JAVA_JUNIT_TEST_SPEC: An Appium Java JUnit test spec upload.
+	//    * APPIUM_NODE_TEST_SPEC: An Appium Node.js test spec upload.
 	//
-	//    * APPIUM_WEB_JAVA_TESTNG_TEST_SPEC: An Appium Java TestNG test spec upload.
+	//    *  APPIUM_RUBY_TEST_SPEC: An Appium Ruby test spec upload.
 	//
-	//    * APPIUM_WEB_PYTHON_TEST_SPEC: An Appium Python test spec upload.
+	//    * APPIUM_WEB_JAVA_JUNIT_TEST_SPEC: An Appium Java JUnit test spec upload
+	//    for a web app.
+	//
+	//    * APPIUM_WEB_JAVA_TESTNG_TEST_SPEC: An Appium Java TestNG test spec upload
+	//    for a web app.
+	//
+	//    * APPIUM_WEB_PYTHON_TEST_SPEC: An Appium Python test spec upload for a
+	//    web app.
+	//
+	//    * APPIUM_WEB_NODE_TEST_SPEC: An Appium Node.js test spec upload for a
+	//    web app.
+	//
+	//    * APPIUM_WEB_RUBY_TEST_SPEC: An Appium Ruby test spec upload for a web
+	//    app.
 	//
 	//    * INSTRUMENTATION_TEST_SPEC: An instrumentation test spec upload.
 	//
@@ -13212,7 +13358,7 @@ type RemoteAccessSession struct {
 
 	// The billing method of the remote access session. Possible values include
 	// METERED or UNMETERED. For more information about metered devices, see AWS
-	// Device Farm terminology (http://docs.aws.amazon.com/devicefarm/latest/developerguide/welcome.html#welcome-terminology)."
+	// Device Farm terminology (https://docs.aws.amazon.com/devicefarm/latest/developerguide/welcome.html#welcome-terminology)."
 	BillingMethod *string `locationName:"billingMethod" type:"string" enum:"BillingMethod"`
 
 	// Unique identifier of your client for the remote access session. Only returned
@@ -13569,59 +13715,77 @@ func (s *Resolution) SetWidth(v int64) *Resolution {
 	return s
 }
 
-// Represents a condition for a device pool. It is passed in as the rules parameter
+// Represents a condition for a device pool.
-// to CreateDevicePool and UpdateDevicePool.
 type Rule struct {
 	_ struct{} `type:"structure"`
 
-	// The rule's attribute. It is the aspect of a device such as platform or model
+	// The rule's stringified attribute. For example, specify the value as "\"abc\"".
-	// used as selection criteria to create or update a device pool.
 	//
-	// Allowed values include:
+	// The supported operators for each attribute are provided in the following
+	// list.
 	//
-	//    * ARN: The Amazon Resource Name (ARN) of a device. For example, "arn:aws:devicefarm:us-west-2::device:12345Example".
+	// APPIUM_VERSIONThe Appium version for the test.
 	//
-	//    * PLATFORM: The device platform. Valid values are "ANDROID" or "IOS".
+	// Supported operators: CONTAINS
 	//
-	//    * FORM_FACTOR: The device form factor. Valid values are "PHONE" or "TABLET".
+	// ARNThe Amazon Resource Name (ARN) of the device. For example, "arn:aws:devicefarm:us-west-2::device:12345Example".
 	//
-	//    * MANUFACTURER: The device manufacturer. For example, "Apple".
+	// Supported operators: EQUALS, IN, NOT_IN
 	//
-	//    * REMOTE_ACCESS_ENABLED: Whether the device is enabled for remote access.
+	// AVAILABILITYThe current availability of the device. Valid values are "AVAILABLE",
+	// "HIGHLY_AVAILABLE", "BUSY", or "TEMPORARY_NOT_AVAILABLE".
 	//
-	//    * REMOTE_DEBUG_ENABLED: Whether the device is enabled for remote debugging.
+	// Supported operators: EQUALS
 	//
-	//    * APPIUM_VERSION: The Appium version for the test.
+	// FLEET_TYPEThe fleet type. Valid values are "PUBLIC" or "PRIVATE".
 	//
-	//    * INSTANCE_ARN: The Amazon Resource Name (ARN) of the device instance.
+	// Supported operators: EQUALS
 	//
-	//    * INSTANCE_LABELS: The label of the device instance.
+	// FORM_FACTORThe device form factor. Valid values are "PHONE" or "TABLET".
 	//
-	//    * FLEET_TYPE: The fleet type. Valid values are "PUBLIC" or "PRIVATE".
+	// Supported operators: EQUALS, IN, NOT_IN
+	//
+	// INSTANCE_ARNThe Amazon Resource Name (ARN) of the device instance.
+	//
+	// Supported operators: IN, NOT_IN
+	//
+	// INSTANCE_LABELSThe label of the device instance.
+	//
+	// Supported operators: CONTAINS
+	//
+	// MANUFACTURERThe device manufacturer. For example, "Apple".
+	//
+	// Supported operators: EQUALS, IN, NOT_IN
+	//
+	// MODELThe device model, such as "Apple iPad Air 2" or "Google Pixel".
+	//
+	// Supported operators: CONTAINS, EQUALS, IN, NOT_IN
+	//
+	// OS_VERSIONThe operating system version. For example, "10.3.2".
+	//
+	// Supported operators: EQUALS, GREATER_THAN, GREATER_THAN_OR_EQUALS, IN, LESS_THAN,
+	// LESS_THAN_OR_EQUALS, NOT_IN
+	//
+	// PLATFORMThe device platform. Valid values are "ANDROID" or "IOS".
+	//
+	// Supported operators: EQUALS, IN, NOT_IN
+	//
+	// REMOTE_ACCESS_ENABLEDWhether the device is enabled for remote access. Valid
+	// values are "TRUE" or "FALSE".
+	//
+	// Supported operators: EQUALS
+	//
+	// REMOTE_DEBUG_ENABLEDWhether the device is enabled for remote debugging. Valid
+	// values are "TRUE" or "FALSE".
+	//
+	// Supported operators: EQUALS
 	Attribute *string `locationName:"attribute" type:"string" enum:"DeviceAttribute"`
 
-	// The rule's operator.
+	// Specifies how Device Farm compares the rule's attribute to the value. For
-	//
+	// the operators that are supported by each attribute, see the attribute descriptions.
-	//    * EQUALS: The equals operator.
-	//
-	//    * GREATER_THAN: The greater-than operator.
-	//
-	//    * IN: The in operator.
-	//
-	//    * LESS_THAN: The less-than operator.
-	//
-	//    * NOT_IN: The not-in operator.
-	//
-	//    * CONTAINS: The contains operator.
 	Operator *string `locationName:"operator" type:"string" enum:"RuleOperator"`
 
 	// The rule's value.
-	//
-	// The value must be passed in as a string using escaped quotes.
-	//
-	// For example:
-	//
-	// "value": "\"ANDROID\""
 	Value *string `locationName:"value" type:"string"`
 }
 
@@ -13815,11 +13979,19 @@ type Run struct {
 	//
 	//    * APPIUM_PYTHON: The Appium Python type.
 	//
-	//    * APPIUM_WEB_JAVA_JUNIT: The Appium Java JUnit type for Web apps.
+	//    * APPIUM_NODE: The Appium Node.js type.
 	//
-	//    * APPIUM_WEB_JAVA_TESTNG: The Appium Java TestNG type for Web apps.
+	//    * APPIUM_RUBY: The Appium Ruby type.
 	//
-	//    * APPIUM_WEB_PYTHON: The Appium Python type for Web apps.
+	//    * APPIUM_WEB_JAVA_JUNIT: The Appium Java JUnit type for web apps.
+	//
+	//    * APPIUM_WEB_JAVA_TESTNG: The Appium Java TestNG type for web apps.
+	//
+	//    * APPIUM_WEB_PYTHON: The Appium Python type for web apps.
+	//
+	//    * APPIUM_WEB_NODE: The Appium Node.js type for web apps.
+	//
+	//    * APPIUM_WEB_RUBY: The Appium Ruby type for web apps.
 	//
 	//    * CALABASH: The Calabash type.
 	//
@@ -14250,14 +14422,12 @@ type ScheduleRunInput struct {
 	Configuration *ScheduleRunConfiguration `locationName:"configuration" type:"structure"`
 
 	// The ARN of the device pool for the run to be scheduled.
-	//
-	// Either devicePoolArn or deviceSelectionConfiguration are required in a request.
 	DevicePoolArn *string `locationName:"devicePoolArn" min:"32" type:"string"`
 
 	// The filter criteria used to dynamically select a set of devices for a test
 	// run, as well as the maximum number of devices to be included in the run.
 	//
-	// Either devicePoolArn or deviceSelectionConfiguration are required in a request.
+	// Either devicePoolArn or deviceSelectionConfiguration is required in a request.
 	DeviceSelectionConfiguration *DeviceSelectionConfiguration `locationName:"deviceSelectionConfiguration" type:"structure"`
 
 	// Specifies configuration information about a test run, such as the execution
@@ -14426,10 +14596,10 @@ type ScheduleRunTest struct {
 	//
 	// For Appium tests (all types):
 	//
-	//    * appium_version: The Appium version. Currently supported values are "1.7.2",
+	//    * appium_version: The Appium version. Currently supported values are "1.6.5"
-	//    "1.7.1", "1.6.5", "latest", and "default".
+	//    (and higher), "latest", and "default".
 	//
-	// “latest” will run the latest Appium version supported by Device Farm (1.7.2).
+	// “latest” will run the latest Appium version supported by Device Farm (1.9.1).
 	//
 	// For “default”, Device Farm will choose a compatible version of Appium for
 	//    the device. The current behavior is to run 1.7.2 on Android devices and
@@ -14511,11 +14681,19 @@ type ScheduleRunTest struct {
 	//
 	//    * APPIUM_PYTHON: The Appium Python type.
 	//
-	//    * APPIUM_WEB_JAVA_JUNIT: The Appium Java JUnit type for Web apps.
+	//    * APPIUM_NODE: The Appium Node.js type.
 	//
-	//    * APPIUM_WEB_JAVA_TESTNG: The Appium Java TestNG type for Web apps.
+	//    * APPIUM_RUBY: The Appium Ruby type.
 	//
-	//    * APPIUM_WEB_PYTHON: The Appium Python type for Web apps.
+	//    * APPIUM_WEB_JAVA_JUNIT: The Appium Java JUnit type for web apps.
+	//
+	//    * APPIUM_WEB_JAVA_TESTNG: The Appium Java TestNG type for web apps.
+	//
+	//    * APPIUM_WEB_PYTHON: The Appium Python type for web apps.
+	//
+	//    * APPIUM_WEB_NODE: The Appium Node.js type for web apps.
+	//
+	//    * APPIUM_WEB_RUBY: The Appium Ruby type for web apps.
 	//
 	//    * CALABASH: The Calabash type.
 	//
@@ -14878,11 +15056,19 @@ type Suite struct {
 	//
 	//    * APPIUM_PYTHON: The Appium Python type.
 	//
-	//    * APPIUM_WEB_JAVA_JUNIT: The Appium Java JUnit type for Web apps.
+	//    * APPIUM_NODE: The Appium Node.js type.
 	//
-	//    * APPIUM_WEB_JAVA_TESTNG: The Appium Java TestNG type for Web apps.
+	//    * APPIUM_RUBY: The Appium Ruby type.
 	//
-	//    * APPIUM_WEB_PYTHON: The Appium Python type for Web apps.
+	//    * APPIUM_WEB_JAVA_JUNIT: The Appium Java JUnit type for web apps.
+	//
+	//    * APPIUM_WEB_JAVA_TESTNG: The Appium Java TestNG type for web apps.
+	//
+	//    * APPIUM_WEB_PYTHON: The Appium Python type for web apps.
+	//
+	//    * APPIUM_WEB_NODE: The Appium Node.js type for web apps.
+	//
+	//    * APPIUM_WEB_RUBY: The Appium Ruby type for web apps.
 	//
 	//    * CALABASH: The Calabash type.
 	//
@@ -15060,11 +15246,19 @@ type Test struct {
 	//
 	//    * APPIUM_PYTHON: The Appium Python type.
 	//
-	//    * APPIUM_WEB_JAVA_JUNIT: The Appium Java JUnit type for Web apps.
+	//    * APPIUM_NODE: The Appium Node.js type.
 	//
-	//    * APPIUM_WEB_JAVA_TESTNG: The Appium Java TestNG type for Web apps.
+	//    * APPIUM_RUBY: The Appium Ruby type.
 	//
-	//    * APPIUM_WEB_PYTHON: The Appium Python type for Web apps.
+	//    * APPIUM_WEB_JAVA_JUNIT: The Appium Java JUnit type for web apps.
+	//
+	//    * APPIUM_WEB_JAVA_TESTNG: The Appium Java TestNG type for web apps.
+	//
+	//    * APPIUM_WEB_PYTHON: The Appium Python type for web apps.
+	//
+	//    * APPIUM_WEB_NODE: The Appium Node.js type for web apps.
+	//
+	//    * APPIUM_WEB_RUBY: The Appium Ruby type for web apps.
 	//
 	//    * CALABASH: The Calabash type.
 	//
@@ -15318,9 +15512,32 @@ type UpdateDevicePoolInput struct {
 	// Arn is a required field
 	Arn *string `locationName:"arn" min:"32" type:"string" required:"true"`
 
+	// Sets whether the maxDevices parameter applies to your device pool. If you
+	// set this parameter to true, the maxDevices parameter does not apply, and
+	// Device Farm does not limit the number of devices that it adds to your device
+	// pool. In this case, Device Farm adds all available devices that meet the
+	// criteria that are specified for the rules parameter.
+	//
+	// If you use this parameter in your request, you cannot use the maxDevices
+	// parameter in the same request.
+	ClearMaxDevices *bool `locationName:"clearMaxDevices" type:"boolean"`
+
 	// A description of the device pool you wish to update.
 	Description *string `locationName:"description" type:"string"`
 
+	// The number of devices that Device Farm can add to your device pool. Device
+	// Farm adds devices that are available and that meet the criteria that you
+	// assign for the rules parameter. Depending on how many devices meet these
+	// constraints, your device pool might contain fewer devices than the value
+	// for this parameter.
+	//
+	// By specifying the maximum number of devices, you can control the costs that
+	// you incur by running tests.
+	//
+	// If you use this parameter in your request, you cannot use the clearMaxDevices
+	// parameter in the same request.
+	MaxDevices *int64 `locationName:"maxDevices" type:"integer"`
+
 	// A string representing the name of the device pool you wish to update.
 	Name *string `locationName:"name" type:"string"`
 
@@ -15362,12 +15579,24 @@ func (s *UpdateDevicePoolInput) SetArn(v string) *UpdateDevicePoolInput {
 	return s
 }
 
+// SetClearMaxDevices sets the ClearMaxDevices field's value.
+func (s *UpdateDevicePoolInput) SetClearMaxDevices(v bool) *UpdateDevicePoolInput {
+	s.ClearMaxDevices = &v
+	return s
+}
+
 // SetDescription sets the Description field's value.
 func (s *UpdateDevicePoolInput) SetDescription(v string) *UpdateDevicePoolInput {
 	s.Description = &v
 	return s
 }
 
+// SetMaxDevices sets the MaxDevices field's value.
+func (s *UpdateDevicePoolInput) SetMaxDevices(v int64) *UpdateDevicePoolInput {
+	s.MaxDevices = &v
+	return s
+}
+
 // SetName sets the Name field's value.
 func (s *UpdateDevicePoolInput) SetName(v string) *UpdateDevicePoolInput {
 	s.Name = &v
@@ -16032,13 +16261,24 @@ type Upload struct {
 	//
 	//    * APPIUM_PYTHON_TEST_PACKAGE: An Appium Python test package upload.
 	//
+	//    * APPIUM_NODE_TEST_PACKAGE: An Appium Node.js test package upload.
+	//
+	//    * APPIUM_RUBY_TEST_PACKAGE: An Appium Ruby test package upload.
+	//
 	//    * APPIUM_WEB_JAVA_JUNIT_TEST_PACKAGE: An Appium Java JUnit test package
-	//    upload.
+	//    upload for web apps.
 	//
 	//    * APPIUM_WEB_JAVA_TESTNG_TEST_PACKAGE: An Appium Java TestNG test package
-	//    upload.
+	//    upload for web apps.
 	//
-	//    * APPIUM_WEB_PYTHON_TEST_PACKAGE: An Appium Python test package upload.
+	//    * APPIUM_WEB_PYTHON_TEST_PACKAGE: An Appium Python test package upload
+	//    for web apps.
+	//
+	//    * APPIUM_WEB_NODE_TEST_PACKAGE: An Appium Node.js test package upload
+	//    for web apps.
+	//
+	//    * APPIUM_WEB_RUBY_TEST_PACKAGE: An Appium Ruby test package upload for
+	//    web apps.
 	//
 	//    * CALABASH_TEST_PACKAGE: A Calabash test package upload.
 	//
@@ -16058,11 +16298,24 @@ type Upload struct {
 	//
 	//    * APPIUM_PYTHON_TEST_SPEC: An Appium Python test spec upload.
 	//
-	//    * APPIUM_WEB_JAVA_JUNIT_TEST_SPEC: An Appium Java JUnit test spec upload.
+	//    * APPIUM_NODE_TEST_SPEC: An Appium Node.js test spec upload.
 	//
-	//    * APPIUM_WEB_JAVA_TESTNG_TEST_SPEC: An Appium Java TestNG test spec upload.
+	//    * APPIUM_RUBY_TEST_SPEC: An Appium Ruby test spec upload.
 	//
-	//    * APPIUM_WEB_PYTHON_TEST_SPEC: An Appium Python test spec upload.
+	//    * APPIUM_WEB_JAVA_JUNIT_TEST_SPEC: An Appium Java JUnit test spec upload
+	//    for a web app.
+	//
+	//    * APPIUM_WEB_JAVA_TESTNG_TEST_SPEC: An Appium Java TestNG test spec upload
+	//    for a web app.
+	//
+	//    * APPIUM_WEB_PYTHON_TEST_SPEC: An Appium Python test spec upload for a
+	//    web app.
+	//
+	//    * APPIUM_WEB_NODE_TEST_SPEC: An Appium Node.js test spec upload for a
+	//    web app.
+	//
+	//    * APPIUM_WEB_RUBY_TEST_SPEC: An Appium Ruby test spec upload for a web
+	//    app.
 	//
 	//    * INSTRUMENTATION_TEST_SPEC: An instrumentation test spec upload.
 	//
@@ -16347,6 +16600,15 @@ const (
 
 	// DeviceAttributeFleetType is a DeviceAttribute enum value
 	DeviceAttributeFleetType = "FLEET_TYPE"
+
+	// DeviceAttributeOsVersion is a DeviceAttribute enum value
+	DeviceAttributeOsVersion = "OS_VERSION"
+
+	// DeviceAttributeModel is a DeviceAttribute enum value
+	DeviceAttributeModel = "MODEL"
+
+	// DeviceAttributeAvailability is a DeviceAttribute enum value
+	DeviceAttributeAvailability = "AVAILABILITY"
 )
 
 const (
@@ -16401,32 +16663,6 @@ const (
 	DeviceFilterAttributeFleetType = "FLEET_TYPE"
 )
 
-const (
-	// DeviceFilterOperatorEquals is a DeviceFilterOperator enum value
-	DeviceFilterOperatorEquals = "EQUALS"
-
-	// DeviceFilterOperatorLessThan is a DeviceFilterOperator enum value
-	DeviceFilterOperatorLessThan = "LESS_THAN"
-
-	// DeviceFilterOperatorLessThanOrEquals is a DeviceFilterOperator enum value
-	DeviceFilterOperatorLessThanOrEquals = "LESS_THAN_OR_EQUALS"
-
-	// DeviceFilterOperatorGreaterThan is a DeviceFilterOperator enum value
-	DeviceFilterOperatorGreaterThan = "GREATER_THAN"
-
-	// DeviceFilterOperatorGreaterThanOrEquals is a DeviceFilterOperator enum value
-	DeviceFilterOperatorGreaterThanOrEquals = "GREATER_THAN_OR_EQUALS"
-
-	// DeviceFilterOperatorIn is a DeviceFilterOperator enum value
-	DeviceFilterOperatorIn = "IN"
-
-	// DeviceFilterOperatorNotIn is a DeviceFilterOperator enum value
-	DeviceFilterOperatorNotIn = "NOT_IN"
-
-	// DeviceFilterOperatorContains is a DeviceFilterOperator enum value
-	DeviceFilterOperatorContains = "CONTAINS"
-)
-
 const (
 	// DeviceFormFactorPhone is a DeviceFormFactor enum value
 	DeviceFormFactorPhone = "PHONE"
@@ -16572,9 +16808,15 @@ const (
 	// RuleOperatorLessThan is a RuleOperator enum value
 	RuleOperatorLessThan = "LESS_THAN"
 
+	// RuleOperatorLessThanOrEquals is a RuleOperator enum value
+	RuleOperatorLessThanOrEquals = "LESS_THAN_OR_EQUALS"
+
 	// RuleOperatorGreaterThan is a RuleOperator enum value
 	RuleOperatorGreaterThan = "GREATER_THAN"
 
+	// RuleOperatorGreaterThanOrEquals is a RuleOperator enum value
+	RuleOperatorGreaterThanOrEquals = "GREATER_THAN_OR_EQUALS"
+
 	// RuleOperatorIn is a RuleOperator enum value
 	RuleOperatorIn = "IN"
 
@@ -16657,6 +16899,12 @@ const (
 	// TestTypeAppiumPython is a TestType enum value
 	TestTypeAppiumPython = "APPIUM_PYTHON"
 
+	// TestTypeAppiumNode is a TestType enum value
+	TestTypeAppiumNode = "APPIUM_NODE"
+
+	// TestTypeAppiumRuby is a TestType enum value
+	TestTypeAppiumRuby = "APPIUM_RUBY"
+
 	// TestTypeAppiumWebJavaJunit is a TestType enum value
 	TestTypeAppiumWebJavaJunit = "APPIUM_WEB_JAVA_JUNIT"
 
@@ -16666,6 +16914,12 @@ const (
 	// TestTypeAppiumWebPython is a TestType enum value
 	TestTypeAppiumWebPython = "APPIUM_WEB_PYTHON"
 
+	// TestTypeAppiumWebNode is a TestType enum value
+	TestTypeAppiumWebNode = "APPIUM_WEB_NODE"
+
+	// TestTypeAppiumWebRuby is a TestType enum value
+	TestTypeAppiumWebRuby = "APPIUM_WEB_RUBY"
+
 	// TestTypeCalabash is a TestType enum value
 	TestTypeCalabash = "CALABASH"
 
@@ -16735,6 +16989,12 @@ const (
 	// UploadTypeAppiumPythonTestPackage is a UploadType enum value
 	UploadTypeAppiumPythonTestPackage = "APPIUM_PYTHON_TEST_PACKAGE"
 
+	// UploadTypeAppiumNodeTestPackage is a UploadType enum value
+	UploadTypeAppiumNodeTestPackage = "APPIUM_NODE_TEST_PACKAGE"
+
+	// UploadTypeAppiumRubyTestPackage is a UploadType enum value
+	UploadTypeAppiumRubyTestPackage = "APPIUM_RUBY_TEST_PACKAGE"
+
 	// UploadTypeAppiumWebJavaJunitTestPackage is a UploadType enum value
 	UploadTypeAppiumWebJavaJunitTestPackage = "APPIUM_WEB_JAVA_JUNIT_TEST_PACKAGE"
 
@@ -16744,6 +17004,12 @@ const (
 	// UploadTypeAppiumWebPythonTestPackage is a UploadType enum value
 	UploadTypeAppiumWebPythonTestPackage = "APPIUM_WEB_PYTHON_TEST_PACKAGE"
 
+	// UploadTypeAppiumWebNodeTestPackage is a UploadType enum value
+	UploadTypeAppiumWebNodeTestPackage = "APPIUM_WEB_NODE_TEST_PACKAGE"
+
+	// UploadTypeAppiumWebRubyTestPackage is a UploadType enum value
+	UploadTypeAppiumWebRubyTestPackage = "APPIUM_WEB_RUBY_TEST_PACKAGE"
+
 	// UploadTypeCalabashTestPackage is a UploadType enum value
 	UploadTypeCalabashTestPackage = "CALABASH_TEST_PACKAGE"
 
@@ -16771,6 +17037,12 @@ const (
 	// UploadTypeAppiumPythonTestSpec is a UploadType enum value
 	UploadTypeAppiumPythonTestSpec = "APPIUM_PYTHON_TEST_SPEC"
 
+	// UploadTypeAppiumNodeTestSpec is a UploadType enum value
+	UploadTypeAppiumNodeTestSpec = "APPIUM_NODE_TEST_SPEC"
+
+	// UploadTypeAppiumRubyTestSpec is a UploadType enum value
+	UploadTypeAppiumRubyTestSpec = "APPIUM_RUBY_TEST_SPEC"
+
 	// UploadTypeAppiumWebJavaJunitTestSpec is a UploadType enum value
 	UploadTypeAppiumWebJavaJunitTestSpec = "APPIUM_WEB_JAVA_JUNIT_TEST_SPEC"
 
@@ -16780,6 +17052,12 @@ const (
 	// UploadTypeAppiumWebPythonTestSpec is a UploadType enum value
 	UploadTypeAppiumWebPythonTestSpec = "APPIUM_WEB_PYTHON_TEST_SPEC"
 
+	// UploadTypeAppiumWebNodeTestSpec is a UploadType enum value
+	UploadTypeAppiumWebNodeTestSpec = "APPIUM_WEB_NODE_TEST_SPEC"
+
+	// UploadTypeAppiumWebRubyTestSpec is a UploadType enum value
+	UploadTypeAppiumWebRubyTestSpec = "APPIUM_WEB_RUBY_TEST_SPEC"
+
 	// UploadTypeInstrumentationTestSpec is a UploadType enum value
 	UploadTypeInstrumentationTestSpec = "INSTRUMENTATION_TEST_SPEC"
 

vendor/github.com/aws/aws-sdk-go/service/docdb/doc.go

@@ -0,0 +1,28 @@
+// Code generated by private/model/cli/gen-api/main.go. DO NOT EDIT.
+
+// Package docdb provides the client and types for making API
+// requests to Amazon DocumentDB with MongoDB compatibility.
+//
+// Amazon DocumentDB API documentation
+//
+// See https://docs.aws.amazon.com/goto/WebAPI/docdb-2014-10-31 for more information on this service.
+//
+// See docdb package documentation for more information.
+// https://docs.aws.amazon.com/sdk-for-go/api/service/docdb/
+//
+// Using the Client
+//
+// To contact Amazon DocumentDB with MongoDB compatibility with the SDK use the New function to create
+// a new service client. With that client you can make API requests to the service.
+// These clients are safe to use concurrently.
+//
+// See the SDK's documentation for more information on how to use the SDK.
+// https://docs.aws.amazon.com/sdk-for-go/api/
+//
+// See aws.Config documentation for more information on configuring SDK clients.
+// https://docs.aws.amazon.com/sdk-for-go/api/aws/#Config
+//
+// See the Amazon DocumentDB with MongoDB compatibility client DocDB for more
+// information on creating client for this service.
+// https://docs.aws.amazon.com/sdk-for-go/api/service/docdb/#New
+package docdb

vendor/github.com/aws/aws-sdk-go/service/docdb/errors.go

@@ -0,0 +1,290 @@
+// Code generated by private/model/cli/gen-api/main.go. DO NOT EDIT.
+
+package docdb
+
+const (
+
+	// ErrCodeAuthorizationNotFoundFault for service response error code
+	// "AuthorizationNotFound".
+	//
+	// The specified CIDR IP or Amazon EC2 security group isn't authorized for the
+	// specified DB security group.
+	//
+	// Amazon DocumentDB also might not be authorized to perform necessary actions
+	// on your behalf using IAM.
+	ErrCodeAuthorizationNotFoundFault = "AuthorizationNotFound"
+
+	// ErrCodeCertificateNotFoundFault for service response error code
+	// "CertificateNotFound".
+	//
+	// CertificateIdentifier doesn't refer to an existing certificate.
+	ErrCodeCertificateNotFoundFault = "CertificateNotFound"
+
+	// ErrCodeDBClusterAlreadyExistsFault for service response error code
+	// "DBClusterAlreadyExistsFault".
+	//
+	// You already have a DB cluster with the given identifier.
+	ErrCodeDBClusterAlreadyExistsFault = "DBClusterAlreadyExistsFault"
+
+	// ErrCodeDBClusterNotFoundFault for service response error code
+	// "DBClusterNotFoundFault".
+	//
+	// DBClusterIdentifier doesn't refer to an existing DB cluster.
+	ErrCodeDBClusterNotFoundFault = "DBClusterNotFoundFault"
+
+	// ErrCodeDBClusterParameterGroupNotFoundFault for service response error code
+	// "DBClusterParameterGroupNotFound".
+	//
+	// DBClusterParameterGroupName doesn't refer to an existing DB cluster parameter
+	// group.
+	ErrCodeDBClusterParameterGroupNotFoundFault = "DBClusterParameterGroupNotFound"
+
+	// ErrCodeDBClusterQuotaExceededFault for service response error code
+	// "DBClusterQuotaExceededFault".
+	//
+	// The DB cluster can't be created because you have reached the maximum allowed
+	// quota of DB clusters.
+	ErrCodeDBClusterQuotaExceededFault = "DBClusterQuotaExceededFault"
+
+	// ErrCodeDBClusterSnapshotAlreadyExistsFault for service response error code
+	// "DBClusterSnapshotAlreadyExistsFault".
+	//
+	// You already have a DB cluster snapshot with the given identifier.
+	ErrCodeDBClusterSnapshotAlreadyExistsFault = "DBClusterSnapshotAlreadyExistsFault"
+
+	// ErrCodeDBClusterSnapshotNotFoundFault for service response error code
+	// "DBClusterSnapshotNotFoundFault".
+	//
+	// DBClusterSnapshotIdentifier doesn't refer to an existing DB cluster snapshot.
+	ErrCodeDBClusterSnapshotNotFoundFault = "DBClusterSnapshotNotFoundFault"
+
+	// ErrCodeDBInstanceAlreadyExistsFault for service response error code
+	// "DBInstanceAlreadyExists".
+	//
+	// You already have a DB instance with the given identifier.
+	ErrCodeDBInstanceAlreadyExistsFault = "DBInstanceAlreadyExists"
+
+	// ErrCodeDBInstanceNotFoundFault for service response error code
+	// "DBInstanceNotFound".
+	//
+	// DBInstanceIdentifier doesn't refer to an existing DB instance.
+	ErrCodeDBInstanceNotFoundFault = "DBInstanceNotFound"
+
+	// ErrCodeDBParameterGroupAlreadyExistsFault for service response error code
+	// "DBParameterGroupAlreadyExists".
+	//
+	// A DB parameter group with the same name already exists.
+	ErrCodeDBParameterGroupAlreadyExistsFault = "DBParameterGroupAlreadyExists"
+
+	// ErrCodeDBParameterGroupNotFoundFault for service response error code
+	// "DBParameterGroupNotFound".
+	//
+	// DBParameterGroupName doesn't refer to an existing DB parameter group.
+	ErrCodeDBParameterGroupNotFoundFault = "DBParameterGroupNotFound"
+
+	// ErrCodeDBParameterGroupQuotaExceededFault for service response error code
+	// "DBParameterGroupQuotaExceeded".
+	//
+	// This request would cause you to exceed the allowed number of DB parameter
+	// groups.
+	ErrCodeDBParameterGroupQuotaExceededFault = "DBParameterGroupQuotaExceeded"
+
+	// ErrCodeDBSecurityGroupNotFoundFault for service response error code
+	// "DBSecurityGroupNotFound".
+	//
+	// DBSecurityGroupName doesn't refer to an existing DB security group.
+	ErrCodeDBSecurityGroupNotFoundFault = "DBSecurityGroupNotFound"
+
+	// ErrCodeDBSnapshotAlreadyExistsFault for service response error code
+	// "DBSnapshotAlreadyExists".
+	//
+	// DBSnapshotIdentifier is already being used by an existing snapshot.
+	ErrCodeDBSnapshotAlreadyExistsFault = "DBSnapshotAlreadyExists"
+
+	// ErrCodeDBSnapshotNotFoundFault for service response error code
+	// "DBSnapshotNotFound".
+	//
+	// DBSnapshotIdentifier doesn't refer to an existing DB snapshot.
+	ErrCodeDBSnapshotNotFoundFault = "DBSnapshotNotFound"
+
+	// ErrCodeDBSubnetGroupAlreadyExistsFault for service response error code
+	// "DBSubnetGroupAlreadyExists".
+	//
+	// DBSubnetGroupName is already being used by an existing DB subnet group.
+	ErrCodeDBSubnetGroupAlreadyExistsFault = "DBSubnetGroupAlreadyExists"
+
+	// ErrCodeDBSubnetGroupDoesNotCoverEnoughAZs for service response error code
+	// "DBSubnetGroupDoesNotCoverEnoughAZs".
+	//
+	// Subnets in the DB subnet group should cover at least two Availability Zones
+	// unless there is only one Availability Zone.
+	ErrCodeDBSubnetGroupDoesNotCoverEnoughAZs = "DBSubnetGroupDoesNotCoverEnoughAZs"
+
+	// ErrCodeDBSubnetGroupNotFoundFault for service response error code
+	// "DBSubnetGroupNotFoundFault".
+	//
+	// DBSubnetGroupName doesn't refer to an existing DB subnet group.
+	ErrCodeDBSubnetGroupNotFoundFault = "DBSubnetGroupNotFoundFault"
+
+	// ErrCodeDBSubnetGroupQuotaExceededFault for service response error code
+	// "DBSubnetGroupQuotaExceeded".
+	//
+	// The request would cause you to exceed the allowed number of DB subnet groups.
+	ErrCodeDBSubnetGroupQuotaExceededFault = "DBSubnetGroupQuotaExceeded"
+
+	// ErrCodeDBSubnetQuotaExceededFault for service response error code
+	// "DBSubnetQuotaExceededFault".
+	//
+	// The request would cause you to exceed the allowed number of subnets in a
+	// DB subnet group.
+	ErrCodeDBSubnetQuotaExceededFault = "DBSubnetQuotaExceededFault"
+
+	// ErrCodeDBUpgradeDependencyFailureFault for service response error code
+	// "DBUpgradeDependencyFailure".
+	//
+	// The DB upgrade failed because a resource that the DB depends on can't be
+	// modified.
+	ErrCodeDBUpgradeDependencyFailureFault = "DBUpgradeDependencyFailure"
+
+	// ErrCodeInstanceQuotaExceededFault for service response error code
+	// "InstanceQuotaExceeded".
+	//
+	// The request would cause you to exceed the allowed number of DB instances.
+	ErrCodeInstanceQuotaExceededFault = "InstanceQuotaExceeded"
+
+	// ErrCodeInsufficientDBClusterCapacityFault for service response error code
+	// "InsufficientDBClusterCapacityFault".
+	//
+	// The DB cluster doesn't have enough capacity for the current operation.
+	ErrCodeInsufficientDBClusterCapacityFault = "InsufficientDBClusterCapacityFault"
+
+	// ErrCodeInsufficientDBInstanceCapacityFault for service response error code
+	// "InsufficientDBInstanceCapacity".
+	//
+	// The specified DB instance class isn't available in the specified Availability
+	// Zone.
+	ErrCodeInsufficientDBInstanceCapacityFault = "InsufficientDBInstanceCapacity"
+
+	// ErrCodeInsufficientStorageClusterCapacityFault for service response error code
+	// "InsufficientStorageClusterCapacity".
+	//
+	// There is not enough storage available for the current action. You might be
+	// able to resolve this error by updating your subnet group to use different
+	// Availability Zones that have more storage available.
+	ErrCodeInsufficientStorageClusterCapacityFault = "InsufficientStorageClusterCapacity"
+
+	// ErrCodeInvalidDBClusterSnapshotStateFault for service response error code
+	// "InvalidDBClusterSnapshotStateFault".
+	//
+	// The provided value isn't a valid DB cluster snapshot state.
+	ErrCodeInvalidDBClusterSnapshotStateFault = "InvalidDBClusterSnapshotStateFault"
+
+	// ErrCodeInvalidDBClusterStateFault for service response error code
+	// "InvalidDBClusterStateFault".
+	//
+	// The DB cluster isn't in a valid state.
+	ErrCodeInvalidDBClusterStateFault = "InvalidDBClusterStateFault"
+
+	// ErrCodeInvalidDBInstanceStateFault for service response error code
+	// "InvalidDBInstanceState".
+	//
+	// The specified DB instance isn't in the available state.
+	ErrCodeInvalidDBInstanceStateFault = "InvalidDBInstanceState"
+
+	// ErrCodeInvalidDBParameterGroupStateFault for service response error code
+	// "InvalidDBParameterGroupState".
+	//
+	// The DB parameter group is in use, or it is in a state that is not valid.
+	// If you are trying to delete the parameter group, you can't delete it when
+	// the parameter group is in this state.
+	ErrCodeInvalidDBParameterGroupStateFault = "InvalidDBParameterGroupState"
+
+	// ErrCodeInvalidDBSecurityGroupStateFault for service response error code
+	// "InvalidDBSecurityGroupState".
+	//
+	// The state of the DB security group doesn't allow deletion.
+	ErrCodeInvalidDBSecurityGroupStateFault = "InvalidDBSecurityGroupState"
+
+	// ErrCodeInvalidDBSnapshotStateFault for service response error code
+	// "InvalidDBSnapshotState".
+	//
+	// The state of the DB snapshot doesn't allow deletion.
+	ErrCodeInvalidDBSnapshotStateFault = "InvalidDBSnapshotState"
+
+	// ErrCodeInvalidDBSubnetGroupStateFault for service response error code
+	// "InvalidDBSubnetGroupStateFault".
+	//
+	// The DB subnet group can't be deleted because it's in use.
+	ErrCodeInvalidDBSubnetGroupStateFault = "InvalidDBSubnetGroupStateFault"
+
+	// ErrCodeInvalidDBSubnetStateFault for service response error code
+	// "InvalidDBSubnetStateFault".
+	//
+	// The DB subnet isn't in the available state.
+	ErrCodeInvalidDBSubnetStateFault = "InvalidDBSubnetStateFault"
+
+	// ErrCodeInvalidRestoreFault for service response error code
+	// "InvalidRestoreFault".
+	//
+	// You cannot restore from a virtual private cloud (VPC) backup to a non-VPC
+	// DB instance.
+	ErrCodeInvalidRestoreFault = "InvalidRestoreFault"
+
+	// ErrCodeInvalidSubnet for service response error code
+	// "InvalidSubnet".
+	//
+	// The requested subnet is not valid, or multiple subnets were requested that
+	// are not all in a common virtual private cloud (VPC).
+	ErrCodeInvalidSubnet = "InvalidSubnet"
+
+	// ErrCodeInvalidVPCNetworkStateFault for service response error code
+	// "InvalidVPCNetworkStateFault".
+	//
+	// The DB subnet group doesn't cover all Availability Zones after it is created
+	// because of changes that were made.
+	ErrCodeInvalidVPCNetworkStateFault = "InvalidVPCNetworkStateFault"
+
+	// ErrCodeKMSKeyNotAccessibleFault for service response error code
+	// "KMSKeyNotAccessibleFault".
+	//
+	// An error occurred when accessing an AWS KMS key.
+	ErrCodeKMSKeyNotAccessibleFault = "KMSKeyNotAccessibleFault"
+
+	// ErrCodeResourceNotFoundFault for service response error code
+	// "ResourceNotFoundFault".
+	//
+	// The specified resource ID was not found.
+	ErrCodeResourceNotFoundFault = "ResourceNotFoundFault"
+
+	// ErrCodeSharedSnapshotQuotaExceededFault for service response error code
+	// "SharedSnapshotQuotaExceeded".
+	//
+	// You have exceeded the maximum number of accounts that you can share a manual
+	// DB snapshot with.
+	ErrCodeSharedSnapshotQuotaExceededFault = "SharedSnapshotQuotaExceeded"
+
+	// ErrCodeSnapshotQuotaExceededFault for service response error code
+	// "SnapshotQuotaExceeded".
+	//
+	// The request would cause you to exceed the allowed number of DB snapshots.
+	ErrCodeSnapshotQuotaExceededFault = "SnapshotQuotaExceeded"
+
+	// ErrCodeStorageQuotaExceededFault for service response error code
+	// "StorageQuotaExceeded".
+	//
+	// The request would cause you to exceed the allowed amount of storage available
+	// across all DB instances.
+	ErrCodeStorageQuotaExceededFault = "StorageQuotaExceeded"
+
+	// ErrCodeStorageTypeNotSupportedFault for service response error code
+	// "StorageTypeNotSupported".
+	//
+	// Storage of the specified StorageType can't be associated with the DB instance.
+	ErrCodeStorageTypeNotSupportedFault = "StorageTypeNotSupported"
+
+	// ErrCodeSubnetAlreadyInUse for service response error code
+	// "SubnetAlreadyInUse".
+	//
+	// The DB subnet is already in use in the Availability Zone.
+	ErrCodeSubnetAlreadyInUse = "SubnetAlreadyInUse"
+)

vendor/github.com/aws/aws-sdk-go/service/docdb/service.go

@@ -0,0 +1,98 @@
+// Code generated by private/model/cli/gen-api/main.go. DO NOT EDIT.
+
+package docdb
+
+import (
+	"github.com/aws/aws-sdk-go/aws"
+	"github.com/aws/aws-sdk-go/aws/client"
+	"github.com/aws/aws-sdk-go/aws/client/metadata"
+	"github.com/aws/aws-sdk-go/aws/request"
+	"github.com/aws/aws-sdk-go/aws/signer/v4"
+	"github.com/aws/aws-sdk-go/private/protocol/query"
+)
+
+// DocDB provides the API operation methods for making requests to
+// Amazon DocumentDB with MongoDB compatibility. See this package's package overview docs
+// for details on the service.
+//
+// DocDB methods are safe to use concurrently. It is not safe to
+// modify mutate any of the struct's properties though.
+type DocDB struct {
+	*client.Client
+}
+
+// Used for custom client initialization logic
+var initClient func(*client.Client)
+
+// Used for custom request initialization logic
+var initRequest func(*request.Request)
+
+// Service information constants
+const (
+	ServiceName = "DocDB" // Name of service.
+	EndpointsID = "rds"   // ID to lookup a service endpoint with.
+	ServiceID   = "DocDB" // ServiceID is a unique identifer of a specific service.
+)
+
+// New creates a new instance of the DocDB client with a session.
+// If additional configuration is needed for the client instance use the optional
+// aws.Config parameter to add your extra config.
+//
+// Example:
+//     // Create a DocDB client from just a session.
+//     svc := docdb.New(mySession)
+//
+//     // Create a DocDB client with additional configuration
+//     svc := docdb.New(mySession, aws.NewConfig().WithRegion("us-west-2"))
+func New(p client.ConfigProvider, cfgs ...*aws.Config) *DocDB {
+	c := p.ClientConfig(EndpointsID, cfgs...)
+	if c.SigningNameDerived || len(c.SigningName) == 0 {
+		c.SigningName = "rds"
+	}
+	return newClient(*c.Config, c.Handlers, c.Endpoint, c.SigningRegion, c.SigningName)
+}
+
+// newClient creates, initializes and returns a new service client instance.
+func newClient(cfg aws.Config, handlers request.Handlers, endpoint, signingRegion, signingName string) *DocDB {
+	svc := &DocDB{
+		Client: client.New(
+			cfg,
+			metadata.ClientInfo{
+				ServiceName:   ServiceName,
+				ServiceID:     ServiceID,
+				SigningName:   signingName,
+				SigningRegion: signingRegion,
+				Endpoint:      endpoint,
+				APIVersion:    "2014-10-31",
+			},
+			handlers,
+		),
+	}
+
+	// Handlers
+	svc.Handlers.Sign.PushBackNamed(v4.SignRequestHandler)
+	svc.Handlers.Build.PushBackNamed(query.BuildHandler)
+	svc.Handlers.Unmarshal.PushBackNamed(query.UnmarshalHandler)
+	svc.Handlers.UnmarshalMeta.PushBackNamed(query.UnmarshalMetaHandler)
+	svc.Handlers.UnmarshalError.PushBackNamed(query.UnmarshalErrorHandler)
+
+	// Run custom client initialization if present
+	if initClient != nil {
+		initClient(svc.Client)
+	}
+
+	return svc
+}
+
+// newRequest creates a new request for a DocDB operation and runs any
+// custom request initialization.
+func (c *DocDB) newRequest(op *request.Operation, params, data interface{}) *request.Request {
+	req := c.NewRequest(op, params, data)
+
+	// Run custom request initialization if present
+	if initRequest != nil {
+		initRequest(req)
+	}
+
+	return req
+}

vendor/github.com/aws/aws-sdk-go/service/docdb/waiters.go

@@ -0,0 +1,152 @@
+// Code generated by private/model/cli/gen-api/main.go. DO NOT EDIT.
+
+package docdb
+
+import (
+	"time"
+
+	"github.com/aws/aws-sdk-go/aws"
+	"github.com/aws/aws-sdk-go/aws/request"
+)
+
+// WaitUntilDBInstanceAvailable uses the Amazon DocDB API operation
+// DescribeDBInstances to wait for a condition to be met before returning.
+// If the condition is not met within the max attempt window, an error will
+// be returned.
+func (c *DocDB) WaitUntilDBInstanceAvailable(input *DescribeDBInstancesInput) error {
+	return c.WaitUntilDBInstanceAvailableWithContext(aws.BackgroundContext(), input)
+}
+
+// WaitUntilDBInstanceAvailableWithContext is an extended version of WaitUntilDBInstanceAvailable.
+// With the support for passing in a context and options to configure the
+// Waiter and the underlying request options.
+//
+// The context must be non-nil and will be used for request cancellation. If
+// the context is nil a panic will occur. In the future the SDK may create
+// sub-contexts for http.Requests. See https://golang.org/pkg/context/
+// for more information on using Contexts.
+func (c *DocDB) WaitUntilDBInstanceAvailableWithContext(ctx aws.Context, input *DescribeDBInstancesInput, opts ...request.WaiterOption) error {
+	w := request.Waiter{
+		Name:        "WaitUntilDBInstanceAvailable",
+		MaxAttempts: 60,
+		Delay:       request.ConstantWaiterDelay(30 * time.Second),
+		Acceptors: []request.WaiterAcceptor{
+			{
+				State:   request.SuccessWaiterState,
+				Matcher: request.PathAllWaiterMatch, Argument: "DBInstances[].DBInstanceStatus",
+				Expected: "available",
+			},
+			{
+				State:   request.FailureWaiterState,
+				Matcher: request.PathAnyWaiterMatch, Argument: "DBInstances[].DBInstanceStatus",
+				Expected: "deleted",
+			},
+			{
+				State:   request.FailureWaiterState,
+				Matcher: request.PathAnyWaiterMatch, Argument: "DBInstances[].DBInstanceStatus",
+				Expected: "deleting",
+			},
+			{
+				State:   request.FailureWaiterState,
+				Matcher: request.PathAnyWaiterMatch, Argument: "DBInstances[].DBInstanceStatus",
+				Expected: "failed",
+			},
+			{
+				State:   request.FailureWaiterState,
+				Matcher: request.PathAnyWaiterMatch, Argument: "DBInstances[].DBInstanceStatus",
+				Expected: "incompatible-restore",
+			},
+			{
+				State:   request.FailureWaiterState,
+				Matcher: request.PathAnyWaiterMatch, Argument: "DBInstances[].DBInstanceStatus",
+				Expected: "incompatible-parameters",
+			},
+		},
+		Logger: c.Config.Logger,
+		NewRequest: func(opts []request.Option) (*request.Request, error) {
+			var inCpy *DescribeDBInstancesInput
+			if input != nil {
+				tmp := *input
+				inCpy = &tmp
+			}
+			req, _ := c.DescribeDBInstancesRequest(inCpy)
+			req.SetContext(ctx)
+			req.ApplyOptions(opts...)
+			return req, nil
+		},
+	}
+	w.ApplyOptions(opts...)
+
+	return w.WaitWithContext(ctx)
+}
+
+// WaitUntilDBInstanceDeleted uses the Amazon DocDB API operation
+// DescribeDBInstances to wait for a condition to be met before returning.
+// If the condition is not met within the max attempt window, an error will
+// be returned.
+func (c *DocDB) WaitUntilDBInstanceDeleted(input *DescribeDBInstancesInput) error {
+	return c.WaitUntilDBInstanceDeletedWithContext(aws.BackgroundContext(), input)
+}
+
+// WaitUntilDBInstanceDeletedWithContext is an extended version of WaitUntilDBInstanceDeleted.
+// With the support for passing in a context and options to configure the
+// Waiter and the underlying request options.
+//
+// The context must be non-nil and will be used for request cancellation. If
+// the context is nil a panic will occur. In the future the SDK may create
+// sub-contexts for http.Requests. See https://golang.org/pkg/context/
+// for more information on using Contexts.
+func (c *DocDB) WaitUntilDBInstanceDeletedWithContext(ctx aws.Context, input *DescribeDBInstancesInput, opts ...request.WaiterOption) error {
+	w := request.Waiter{
+		Name:        "WaitUntilDBInstanceDeleted",
+		MaxAttempts: 60,
+		Delay:       request.ConstantWaiterDelay(30 * time.Second),
+		Acceptors: []request.WaiterAcceptor{
+			{
+				State:   request.SuccessWaiterState,
+				Matcher: request.PathAllWaiterMatch, Argument: "DBInstances[].DBInstanceStatus",
+				Expected: "deleted",
+			},
+			{
+				State:    request.SuccessWaiterState,
+				Matcher:  request.ErrorWaiterMatch,
+				Expected: "DBInstanceNotFound",
+			},
+			{
+				State:   request.FailureWaiterState,
+				Matcher: request.PathAnyWaiterMatch, Argument: "DBInstances[].DBInstanceStatus",
+				Expected: "creating",
+			},
+			{
+				State:   request.FailureWaiterState,
+				Matcher: request.PathAnyWaiterMatch, Argument: "DBInstances[].DBInstanceStatus",
+				Expected: "modifying",
+			},
+			{
+				State:   request.FailureWaiterState,
+				Matcher: request.PathAnyWaiterMatch, Argument: "DBInstances[].DBInstanceStatus",
+				Expected: "rebooting",
+			},
+			{
+				State:   request.FailureWaiterState,
+				Matcher: request.PathAnyWaiterMatch, Argument: "DBInstances[].DBInstanceStatus",
+				Expected: "resetting-master-credentials",
+			},
+		},
+		Logger: c.Config.Logger,
+		NewRequest: func(opts []request.Option) (*request.Request, error) {
+			var inCpy *DescribeDBInstancesInput
+			if input != nil {
+				tmp := *input
+				inCpy = &tmp
+			}
+			req, _ := c.DescribeDBInstancesRequest(inCpy)
+			req.SetContext(ctx)
+			req.ApplyOptions(opts...)
+			return req, nil
+		},
+	}
+	w.ApplyOptions(opts...)
+
+	return w.WaitWithContext(ctx)
+}

vendor/github.com/aws/aws-sdk-go/service/dynamodb/api.go

@@ -1534,6 +1534,8 @@ func (c *DynamoDB) DescribeEndpointsRequest(input *DescribeEndpointsInput) (req
 
 // DescribeEndpoints API operation for Amazon DynamoDB.
 //
+// Returns the regional endpoint information.
+//
 // Returns awserr.Error for service API and SDK errors. Use runtime type assertions
 // with awserr.Error's Code and Message methods to get detailed information about
 // the error.
@@ -3924,29 +3926,46 @@ func (c *DynamoDB) TransactGetItemsRequest(input *TransactGetItemsInput) (req *r
 //   * ErrCodeTransactionCanceledException "TransactionCanceledException"
 //   The entire transaction request was rejected.
 //
-//   DynamoDB will reject the entire TransactWriteItems request if any of the
+//   DynamoDB rejects a TransactWriteItems request under the following circumstances:
-//   following is true:
 //
-//      *  A table in the TransactWriteItems request does not exist.
+//      * A condition in one of the condition expressions is not met.
 //
-//      *  A table in the TransactWriteItems request is on a different account
+//      * A table in the TransactWriteItems request is in a different account
 //      or region.
 //
-//      *  Operations contain item schema violations.
+//      * More than one action in the TransactWriteItems operation targets the
+//      same item.
 //
-//      *  More than one write operation (UpdateItem, PutItem, DeleteItem) operates
+//      * There is insufficient provisioned capacity for the transaction to be
-//      on the same item.
+//      completed.
 //
-//      *  More than one check operation operates on the same item.
+//      * An item size becomes too large (larger than 400 KB), or a local secondary
+//      index (LSI) becomes too large, or a similar validation error occurs because
+//      of changes made by the transaction.
 //
-//      *  The number of operations sent in the TransactWriteItems request is
+//      * There is a user error, such as an invalid data format.
-//      0 or greater than 10.
 //
-//      *  A TransactWriteItems request exceeds the maximum 4 MB request size.
+//   DynamoDB rejects a TransactGetItems request under the following circumstances:
 //
+//      * There is an ongoing TransactGetItems operation that conflicts with a
+//      concurrent PutItem, UpdateItem, DeleteItem or TransactWriteItems request.
+//      In this case the TransactGetItems operation fails with a TransactionCanceledException.
 //
-//      *  Any operation in the TransactWriteItems request would cause an item
+//      * A table in the TransactGetItems request is in a different account or
-//      to become larger than 400KB.
+//      region.
+//
+//      * There is insufficient provisioned capacity for the transaction to be
+//      completed.
+//
+//      * There is a user error, such as an invalid data format.
+//
+//   * ErrCodeProvisionedThroughputExceededException "ProvisionedThroughputExceededException"
+//   Your request rate is too high. The AWS SDKs for DynamoDB automatically retry
+//   requests that receive this exception. Your request is eventually successful,
+//   unless your retry queue is too large to finish. Reduce the frequency of requests
+//   and use exponential backoff. For more information, go to Error Retries and
+//   Exponential Backoff (http://docs.aws.amazon.com/amazondynamodb/latest/developerguide/Programming.Errors.html#Programming.Errors.RetryAndBackoff)
+//   in the Amazon DynamoDB Developer Guide.
 //
 //   * ErrCodeInternalServerError "InternalServerError"
 //   An error occurred on the server side.
@@ -4106,29 +4125,38 @@ func (c *DynamoDB) TransactWriteItemsRequest(input *TransactWriteItemsInput) (re
 //   * ErrCodeTransactionCanceledException "TransactionCanceledException"
 //   The entire transaction request was rejected.
 //
-//   DynamoDB will reject the entire TransactWriteItems request if any of the
+//   DynamoDB rejects a TransactWriteItems request under the following circumstances:
-//   following is true:
 //
-//      *  A table in the TransactWriteItems request does not exist.
+//      * A condition in one of the condition expressions is not met.
 //
-//      *  A table in the TransactWriteItems request is on a different account
+//      * A table in the TransactWriteItems request is in a different account
 //      or region.
 //
-//      *  Operations contain item schema violations.
+//      * More than one action in the TransactWriteItems operation targets the
+//      same item.
 //
-//      *  More than one write operation (UpdateItem, PutItem, DeleteItem) operates
+//      * There is insufficient provisioned capacity for the transaction to be
-//      on the same item.
+//      completed.
 //
-//      *  More than one check operation operates on the same item.
+//      * An item size becomes too large (larger than 400 KB), or a local secondary
+//      index (LSI) becomes too large, or a similar validation error occurs because
+//      of changes made by the transaction.
 //
-//      *  The number of operations sent in the TransactWriteItems request is
+//      * There is a user error, such as an invalid data format.
-//      0 or greater than 10.
 //
-//      *  A TransactWriteItems request exceeds the maximum 4 MB request size.
+//   DynamoDB rejects a TransactGetItems request under the following circumstances:
 //
+//      * There is an ongoing TransactGetItems operation that conflicts with a
+//      concurrent PutItem, UpdateItem, DeleteItem or TransactWriteItems request.
+//      In this case the TransactGetItems operation fails with a TransactionCanceledException.
 //
-//      *  Any operation in the TransactWriteItems request would cause an item
+//      * A table in the TransactGetItems request is in a different account or
-//      to become larger than 400KB.
+//      region.
+//
+//      * There is insufficient provisioned capacity for the transaction to be
+//      completed.
+//
+//      * There is a user error, such as an invalid data format.
 //
 //   * ErrCodeTransactionInProgressException "TransactionInProgressException"
 //   The transaction with the given request token is already in progress.
@@ -4137,6 +4165,14 @@ func (c *DynamoDB) TransactWriteItemsRequest(input *TransactWriteItemsInput) (re
 //   DynamoDB rejected the request because you retried a request with a different
 //   payload but with an idempotent token that was already used.
 //
+//   * ErrCodeProvisionedThroughputExceededException "ProvisionedThroughputExceededException"
+//   Your request rate is too high. The AWS SDKs for DynamoDB automatically retry
+//   requests that receive this exception. Your request is eventually successful,
+//   unless your retry queue is too large to finish. Reduce the frequency of requests
+//   and use exponential backoff. For more information, go to Error Retries and
+//   Exponential Backoff (http://docs.aws.amazon.com/amazondynamodb/latest/developerguide/Programming.Errors.html#Programming.Errors.RetryAndBackoff)
+//   in the Amazon DynamoDB Developer Guide.
+//
 //   * ErrCodeInternalServerError "InternalServerError"
 //   An error occurred on the server side.
 //
@@ -5178,7 +5214,7 @@ type AttributeValue struct {
 
 	// An attribute of type List. For example:
 	//
-	// "L": ["Cookies", "Coffee", 3.14159]
+	// "L": [ {"S": "Cookies"} , {"S": "Coffee"}, {"N", "3.14159"}]
 	L []*AttributeValue `type:"list"`
 
 	// An attribute of type Map. For example:
@@ -5871,6 +5907,8 @@ type BackupDetails struct {
 	//    no additional cost). System backups allow you to restore the deleted table
 	//    to the state it was in just before the point of deletion.
 	//
+	//    * AWS_BACKUP - On-demand backup created by you from AWS Backup service.
+	//
 	// BackupType is a required field
 	BackupType *string `type:"string" required:"true" enum:"BackupType"`
 }
@@ -5958,6 +5996,8 @@ type BackupSummary struct {
 	//    a SYSTEM backup is automatically created and is retained for 35 days (at
 	//    no additional cost). System backups allow you to restore the deleted table
 	//    to the state it was in just before the point of deletion.
+	//
+	//    * AWS_BACKUP - On-demand backup created by you from AWS Backup service.
 	BackupType *string `type:"string" enum:"BackupType"`
 
 	// ARN associated with the table.
@@ -7231,8 +7271,8 @@ type CreateTableInput struct {
 	//    using PAY_PER_REQUEST for unpredictable workloads.
 	BillingMode *string `type:"string" enum:"BillingMode"`
 
-	// One or more global secondary indexes (the maximum is five) to be created
+	// One or more global secondary indexes (the maximum is 20) to be created on
-	// on the table. Each global secondary index in the array includes the following:
+	// the table. Each global secondary index in the array includes the following:
 	//
 	//    * IndexName - The name of the global secondary index. Must be unique only
 	//    for this table.
@@ -7256,7 +7296,7 @@ type CreateTableInput struct {
 	// NonKeyAttributes - A list of one or more non-key attribute names that are
 	//    projected into the secondary index. The total count of attributes provided
 	//    in NonKeyAttributes, summed across all of the secondary indexes, must
-	//    not exceed 20. If you project the same attribute into two different indexes,
+	//    not exceed 100. If you project the same attribute into two different indexes,
 	//    this counts as two distinct attributes when determining the total.
 	//
 	//    * ProvisionedThroughput - The provisioned throughput settings for the
@@ -7300,10 +7340,10 @@ type CreateTableInput struct {
 	// KeySchema is a required field
 	KeySchema []*KeySchemaElement `min:"1" type:"list" required:"true"`
 
-	// One or more local secondary indexes (the maximum is five) to be created on
+	// One or more local secondary indexes (the maximum is 5) to be created on the
-	// the table. Each index is scoped to a given partition key value. There is
+	// table. Each index is scoped to a given partition key value. There is a 10
-	// a 10 GB size limit per partition key value; otherwise, the size of a local
+	// GB size limit per partition key value; otherwise, the size of a local secondary
-	// secondary index is unconstrained.
+	// index is unconstrained.
 	//
 	// Each local secondary index in the array includes the following:
 	//
@@ -7330,7 +7370,7 @@ type CreateTableInput struct {
 	// NonKeyAttributes - A list of one or more non-key attribute names that are
 	//    projected into the secondary index. The total count of attributes provided
 	//    in NonKeyAttributes, summed across all of the secondary indexes, must
-	//    not exceed 20. If you project the same attribute into two different indexes,
+	//    not exceed 100. If you project the same attribute into two different indexes,
 	//    this counts as two distinct attributes when determining the total.
 	LocalSecondaryIndexes []*LocalSecondaryIndex `type:"list"`
 
@@ -8315,6 +8355,8 @@ func (s DescribeEndpointsInput) GoString() string {
 type DescribeEndpointsOutput struct {
 	_ struct{} `type:"structure"`
 
+	// List of endpoints.
+	//
 	// Endpoints is a required field
 	Endpoints []*Endpoint `type:"list" required:"true"`
 }
@@ -8674,12 +8716,17 @@ func (s *DescribeTimeToLiveOutput) SetTimeToLiveDescription(v *TimeToLiveDescrip
 	return s
 }
 
+// An endpoint information details.
 type Endpoint struct {
 	_ struct{} `type:"structure"`
 
+	// IP address of the endpoint.
+	//
 	// Address is a required field
 	Address *string `type:"string" required:"true"`
 
+	// Endpoint cache time to live (TTL) value.
+	//
 	// CachePeriodInMinutes is a required field
 	CachePeriodInMinutes *int64 `type:"long" required:"true"`
 }
@@ -14285,7 +14332,7 @@ type TransactWriteItemsInput struct {
 	// If you submit a request with the same client token but a change in other
 	// parameters within the 10 minute idempotency window, DynamoDB returns an IdempotentParameterMismatch
 	// exception.
-	ClientRequestToken *string `type:"string" idempotencyToken:"true"`
+	ClientRequestToken *string `min:"1" type:"string" idempotencyToken:"true"`
 
 	// Determines the level of detail about provisioned throughput consumption that
 	// is returned in the response:
@@ -14332,6 +14379,9 @@ func (s TransactWriteItemsInput) GoString() string {
 // Validate inspects the fields of the type to determine if they are valid.
 func (s *TransactWriteItemsInput) Validate() error {
 	invalidParams := request.ErrInvalidParams{Context: "TransactWriteItemsInput"}
+	if s.ClientRequestToken != nil && len(*s.ClientRequestToken) < 1 {
+		invalidParams.Add(request.NewErrParamMinLen("ClientRequestToken", 1))
+	}
 	if s.TransactItems == nil {
 		invalidParams.Add(request.NewErrParamRequired("TransactItems"))
 	}
@@ -15718,6 +15768,9 @@ const (
 
 	// BackupTypeSystem is a BackupType enum value
 	BackupTypeSystem = "SYSTEM"
+
+	// BackupTypeAwsBackup is a BackupType enum value
+	BackupTypeAwsBackup = "AWS_BACKUP"
 )
 
 const (
@@ -15727,6 +15780,9 @@ const (
 	// BackupTypeFilterSystem is a BackupTypeFilter enum value
 	BackupTypeFilterSystem = "SYSTEM"
 
+	// BackupTypeFilterAwsBackup is a BackupTypeFilter enum value
+	BackupTypeFilterAwsBackup = "AWS_BACKUP"
+
 	// BackupTypeFilterAll is a BackupTypeFilter enum value
 	BackupTypeFilterAll = "ALL"
 )

vendor/github.com/aws/aws-sdk-go/service/dynamodb/errors.go

@@ -166,29 +166,38 @@ const (
 	//
 	// The entire transaction request was rejected.
 	//
-	// DynamoDB will reject the entire TransactWriteItems request if any of the
+	// DynamoDB rejects a TransactWriteItems request under the following circumstances:
-	// following is true:
 	//
-	//    *  A table in the TransactWriteItems request does not exist.
+	//    * A condition in one of the condition expressions is not met.
 	//
-	//    *  A table in the TransactWriteItems request is on a different account
+	//    * A table in the TransactWriteItems request is in a different account
 	//    or region.
 	//
-	//    *  Operations contain item schema violations.
+	//    * More than one action in the TransactWriteItems operation targets the
+	//    same item.
 	//
-	//    *  More than one write operation (UpdateItem, PutItem, DeleteItem) operates
+	//    * There is insufficient provisioned capacity for the transaction to be
-	//    on the same item.
+	//    completed.
 	//
-	//    *  More than one check operation operates on the same item.
+	//    * An item size becomes too large (larger than 400 KB), or a local secondary
+	//    index (LSI) becomes too large, or a similar validation error occurs because
+	//    of changes made by the transaction.
 	//
-	//    *  The number of operations sent in the TransactWriteItems request is
+	//    * There is a user error, such as an invalid data format.
-	//    0 or greater than 10.
 	//
-	//    *  A TransactWriteItems request exceeds the maximum 4 MB request size.
+	// DynamoDB rejects a TransactGetItems request under the following circumstances:
 	//
+	//    * There is an ongoing TransactGetItems operation that conflicts with a
+	//    concurrent PutItem, UpdateItem, DeleteItem or TransactWriteItems request.
+	//    In this case the TransactGetItems operation fails with a TransactionCanceledException.
 	//
-	//    *  Any operation in the TransactWriteItems request would cause an item
+	//    * A table in the TransactGetItems request is in a different account or
-	//    to become larger than 400KB.
+	//    region.
+	//
+	//    * There is insufficient provisioned capacity for the transaction to be
+	//    completed.
+	//
+	//    * There is a user error, such as an invalid data format.
 	ErrCodeTransactionCanceledException = "TransactionCanceledException"
 
 	// ErrCodeTransactionConflictException for service response error code

vendor/github.com/aws/aws-sdk-go/service/ecr/api.go

@@ -8,6 +8,8 @@ import (
 	"github.com/aws/aws-sdk-go/aws"
 	"github.com/aws/aws-sdk-go/aws/awsutil"
 	"github.com/aws/aws-sdk-go/aws/request"
+	"github.com/aws/aws-sdk-go/private/protocol"
+	"github.com/aws/aws-sdk-go/private/protocol/jsonrpc"
 )
 
 const opBatchCheckLayerAvailability = "BatchCheckLayerAvailability"
@@ -456,6 +458,15 @@ func (c *ECR) CreateRepositoryRequest(input *CreateRepositoryInput) (req *reques
 //   The specified parameter is invalid. Review the available parameters for the
 //   API request.
 //
+//   * ErrCodeInvalidTagParameterException "InvalidTagParameterException"
+//   An invalid parameter has been specified. Tag keys can have a maximum character
+//   length of 128 characters, and tag values can have a maximum length of 256
+//   characters.
+//
+//   * ErrCodeTooManyTagsException "TooManyTagsException"
+//   The list of tags on the repository is over the limit. The maximum number
+//   of tags that can be applied to a repository is 50.
+//
 //   * ErrCodeRepositoryAlreadyExistsException "RepositoryAlreadyExistsException"
 //   The specified repository already exists in the specified registry.
 //
@@ -1756,6 +1767,93 @@ func (c *ECR) ListImagesPagesWithContext(ctx aws.Context, input *ListImagesInput
 	return p.Err()
 }
 
+const opListTagsForResource = "ListTagsForResource"
+
+// ListTagsForResourceRequest generates a "aws/request.Request" representing the
+// client's request for the ListTagsForResource operation. The "output" return
+// value will be populated with the request's response once the request completes
+// successfully.
+//
+// Use "Send" method on the returned Request to send the API call to the service.
+// the "output" return value is not valid until after Send returns without error.
+//
+// See ListTagsForResource for more information on using the ListTagsForResource
+// API call, and error handling.
+//
+// This method is useful when you want to inject custom logic or configuration
+// into the SDK's request lifecycle. Such as custom headers, or retry logic.
+//
+//
+//    // Example sending a request using the ListTagsForResourceRequest method.
+//    req, resp := client.ListTagsForResourceRequest(params)
+//
+//    err := req.Send()
+//    if err == nil { // resp is now filled
+//        fmt.Println(resp)
+//    }
+//
+// See also, https://docs.aws.amazon.com/goto/WebAPI/ecr-2015-09-21/ListTagsForResource
+func (c *ECR) ListTagsForResourceRequest(input *ListTagsForResourceInput) (req *request.Request, output *ListTagsForResourceOutput) {
+	op := &request.Operation{
+		Name:       opListTagsForResource,
+		HTTPMethod: "POST",
+		HTTPPath:   "/",
+	}
+
+	if input == nil {
+		input = &ListTagsForResourceInput{}
+	}
+
+	output = &ListTagsForResourceOutput{}
+	req = c.newRequest(op, input, output)
+	return
+}
+
+// ListTagsForResource API operation for Amazon EC2 Container Registry.
+//
+// List the tags for an Amazon ECR resource.
+//
+// Returns awserr.Error for service API and SDK errors. Use runtime type assertions
+// with awserr.Error's Code and Message methods to get detailed information about
+// the error.
+//
+// See the AWS API reference guide for Amazon EC2 Container Registry's
+// API operation ListTagsForResource for usage and error information.
+//
+// Returned Error Codes:
+//   * ErrCodeInvalidParameterException "InvalidParameterException"
+//   The specified parameter is invalid. Review the available parameters for the
+//   API request.
+//
+//   * ErrCodeRepositoryNotFoundException "RepositoryNotFoundException"
+//   The specified repository could not be found. Check the spelling of the specified
+//   repository and ensure that you are performing operations on the correct registry.
+//
+//   * ErrCodeServerException "ServerException"
+//   These errors are usually caused by a server-side issue.
+//
+// See also, https://docs.aws.amazon.com/goto/WebAPI/ecr-2015-09-21/ListTagsForResource
+func (c *ECR) ListTagsForResource(input *ListTagsForResourceInput) (*ListTagsForResourceOutput, error) {
+	req, out := c.ListTagsForResourceRequest(input)
+	return out, req.Send()
+}
+
+// ListTagsForResourceWithContext is the same as ListTagsForResource with the addition of
+// the ability to pass a context and additional request options.
+//
+// See ListTagsForResource for details on how to use this API operation.
+//
+// The context must be non-nil and will be used for request cancellation. If
+// the context is nil a panic will occur. In the future the SDK may create
+// sub-contexts for http.Requests. See https://golang.org/pkg/context/
+// for more information on using Contexts.
+func (c *ECR) ListTagsForResourceWithContext(ctx aws.Context, input *ListTagsForResourceInput, opts ...request.Option) (*ListTagsForResourceOutput, error) {
+	req, out := c.ListTagsForResourceRequest(input)
+	req.SetContext(ctx)
+	req.ApplyOptions(opts...)
+	return out, req.Send()
+}
+
 const opPutImage = "PutImage"
 
 // PutImageRequest generates a "aws/request.Request" representing the
@@ -2131,6 +2229,201 @@ func (c *ECR) StartLifecyclePolicyPreviewWithContext(ctx aws.Context, input *Sta
 	return out, req.Send()
 }
 
+const opTagResource = "TagResource"
+
+// TagResourceRequest generates a "aws/request.Request" representing the
+// client's request for the TagResource operation. The "output" return
+// value will be populated with the request's response once the request completes
+// successfully.
+//
+// Use "Send" method on the returned Request to send the API call to the service.
+// the "output" return value is not valid until after Send returns without error.
+//
+// See TagResource for more information on using the TagResource
+// API call, and error handling.
+//
+// This method is useful when you want to inject custom logic or configuration
+// into the SDK's request lifecycle. Such as custom headers, or retry logic.
+//
+//
+//    // Example sending a request using the TagResourceRequest method.
+//    req, resp := client.TagResourceRequest(params)
+//
+//    err := req.Send()
+//    if err == nil { // resp is now filled
+//        fmt.Println(resp)
+//    }
+//
+// See also, https://docs.aws.amazon.com/goto/WebAPI/ecr-2015-09-21/TagResource
+func (c *ECR) TagResourceRequest(input *TagResourceInput) (req *request.Request, output *TagResourceOutput) {
+	op := &request.Operation{
+		Name:       opTagResource,
+		HTTPMethod: "POST",
+		HTTPPath:   "/",
+	}
+
+	if input == nil {
+		input = &TagResourceInput{}
+	}
+
+	output = &TagResourceOutput{}
+	req = c.newRequest(op, input, output)
+	req.Handlers.Unmarshal.Swap(jsonrpc.UnmarshalHandler.Name, protocol.UnmarshalDiscardBodyHandler)
+	return
+}
+
+// TagResource API operation for Amazon EC2 Container Registry.
+//
+// Adds specified tags to a resource with the specified ARN. Existing tags on
+// a resource are not changed if they are not specified in the request parameters.
+//
+// Returns awserr.Error for service API and SDK errors. Use runtime type assertions
+// with awserr.Error's Code and Message methods to get detailed information about
+// the error.
+//
+// See the AWS API reference guide for Amazon EC2 Container Registry's
+// API operation TagResource for usage and error information.
+//
+// Returned Error Codes:
+//   * ErrCodeInvalidParameterException "InvalidParameterException"
+//   The specified parameter is invalid. Review the available parameters for the
+//   API request.
+//
+//   * ErrCodeInvalidTagParameterException "InvalidTagParameterException"
+//   An invalid parameter has been specified. Tag keys can have a maximum character
+//   length of 128 characters, and tag values can have a maximum length of 256
+//   characters.
+//
+//   * ErrCodeTooManyTagsException "TooManyTagsException"
+//   The list of tags on the repository is over the limit. The maximum number
+//   of tags that can be applied to a repository is 50.
+//
+//   * ErrCodeRepositoryNotFoundException "RepositoryNotFoundException"
+//   The specified repository could not be found. Check the spelling of the specified
+//   repository and ensure that you are performing operations on the correct registry.
+//
+//   * ErrCodeServerException "ServerException"
+//   These errors are usually caused by a server-side issue.
+//
+// See also, https://docs.aws.amazon.com/goto/WebAPI/ecr-2015-09-21/TagResource
+func (c *ECR) TagResource(input *TagResourceInput) (*TagResourceOutput, error) {
+	req, out := c.TagResourceRequest(input)
+	return out, req.Send()
+}
+
+// TagResourceWithContext is the same as TagResource with the addition of
+// the ability to pass a context and additional request options.
+//
+// See TagResource for details on how to use this API operation.
+//
+// The context must be non-nil and will be used for request cancellation. If
+// the context is nil a panic will occur. In the future the SDK may create
+// sub-contexts for http.Requests. See https://golang.org/pkg/context/
+// for more information on using Contexts.
+func (c *ECR) TagResourceWithContext(ctx aws.Context, input *TagResourceInput, opts ...request.Option) (*TagResourceOutput, error) {
+	req, out := c.TagResourceRequest(input)
+	req.SetContext(ctx)
+	req.ApplyOptions(opts...)
+	return out, req.Send()
+}
+
+const opUntagResource = "UntagResource"
+
+// UntagResourceRequest generates a "aws/request.Request" representing the
+// client's request for the UntagResource operation. The "output" return
+// value will be populated with the request's response once the request completes
+// successfully.
+//
+// Use "Send" method on the returned Request to send the API call to the service.
+// the "output" return value is not valid until after Send returns without error.
+//
+// See UntagResource for more information on using the UntagResource
+// API call, and error handling.
+//
+// This method is useful when you want to inject custom logic or configuration
+// into the SDK's request lifecycle. Such as custom headers, or retry logic.
+//
+//
+//    // Example sending a request using the UntagResourceRequest method.
+//    req, resp := client.UntagResourceRequest(params)
+//
+//    err := req.Send()
+//    if err == nil { // resp is now filled
+//        fmt.Println(resp)
+//    }
+//
+// See also, https://docs.aws.amazon.com/goto/WebAPI/ecr-2015-09-21/UntagResource
+func (c *ECR) UntagResourceRequest(input *UntagResourceInput) (req *request.Request, output *UntagResourceOutput) {
+	op := &request.Operation{
+		Name:       opUntagResource,
+		HTTPMethod: "POST",
+		HTTPPath:   "/",
+	}
+
+	if input == nil {
+		input = &UntagResourceInput{}
+	}
+
+	output = &UntagResourceOutput{}
+	req = c.newRequest(op, input, output)
+	req.Handlers.Unmarshal.Swap(jsonrpc.UnmarshalHandler.Name, protocol.UnmarshalDiscardBodyHandler)
+	return
+}
+
+// UntagResource API operation for Amazon EC2 Container Registry.
+//
+// Deletes specified tags from a resource.
+//
+// Returns awserr.Error for service API and SDK errors. Use runtime type assertions
+// with awserr.Error's Code and Message methods to get detailed information about
+// the error.
+//
+// See the AWS API reference guide for Amazon EC2 Container Registry's
+// API operation UntagResource for usage and error information.
+//
+// Returned Error Codes:
+//   * ErrCodeInvalidParameterException "InvalidParameterException"
+//   The specified parameter is invalid. Review the available parameters for the
+//   API request.
+//
+//   * ErrCodeInvalidTagParameterException "InvalidTagParameterException"
+//   An invalid parameter has been specified. Tag keys can have a maximum character
+//   length of 128 characters, and tag values can have a maximum length of 256
+//   characters.
+//
+//   * ErrCodeTooManyTagsException "TooManyTagsException"
+//   The list of tags on the repository is over the limit. The maximum number
+//   of tags that can be applied to a repository is 50.
+//
+//   * ErrCodeRepositoryNotFoundException "RepositoryNotFoundException"
+//   The specified repository could not be found. Check the spelling of the specified
+//   repository and ensure that you are performing operations on the correct registry.
+//
+//   * ErrCodeServerException "ServerException"
+//   These errors are usually caused by a server-side issue.
+//
+// See also, https://docs.aws.amazon.com/goto/WebAPI/ecr-2015-09-21/UntagResource
+func (c *ECR) UntagResource(input *UntagResourceInput) (*UntagResourceOutput, error) {
+	req, out := c.UntagResourceRequest(input)
+	return out, req.Send()
+}
+
+// UntagResourceWithContext is the same as UntagResource with the addition of
+// the ability to pass a context and additional request options.
+//
+// See UntagResource for details on how to use this API operation.
+//
+// The context must be non-nil and will be used for request cancellation. If
+// the context is nil a panic will occur. In the future the SDK may create
+// sub-contexts for http.Requests. See https://golang.org/pkg/context/
+// for more information on using Contexts.
+func (c *ECR) UntagResourceWithContext(ctx aws.Context, input *UntagResourceInput, opts ...request.Option) (*UntagResourceOutput, error) {
+	req, out := c.UntagResourceRequest(input)
+	req.SetContext(ctx)
+	req.ApplyOptions(opts...)
+	return out, req.Send()
+}
+
 const opUploadLayerPart = "UploadLayerPart"
 
 // UploadLayerPartRequest generates a "aws/request.Request" representing the
@@ -2745,6 +3038,8 @@ type CreateRepositoryInput struct {
 	//
 	// RepositoryName is a required field
 	RepositoryName *string `locationName:"repositoryName" min:"2" type:"string" required:"true"`
+
+	Tags []*Tag `locationName:"tags" type:"list"`
 }
 
 // String returns the string representation
@@ -2779,6 +3074,12 @@ func (s *CreateRepositoryInput) SetRepositoryName(v string) *CreateRepositoryInp
 	return s
 }
 
+// SetTags sets the Tags field's value.
+func (s *CreateRepositoryInput) SetTags(v []*Tag) *CreateRepositoryInput {
+	s.Tags = v
+	return s
+}
+
 type CreateRepositoryOutput struct {
 	_ struct{} `type:"structure"`
 
@@ -3119,7 +3420,7 @@ type DescribeImagesInput struct {
 	// results in a single page along with a nextToken response element. The remaining
 	// results of the initial request can be seen by sending another DescribeImages
 	// request with the returned nextToken value. This value can be between 1 and
-	// 100. If this parameter is not used, then DescribeImages returns up to 100
+	// 1000. If this parameter is not used, then DescribeImages returns up to 100
 	// results and a nextToken value, if applicable. This option cannot be used
 	// when you specify images with imageIds.
 	MaxResults *int64 `locationName:"maxResults" min:"1" type:"integer"`
@@ -3136,8 +3437,7 @@ type DescribeImagesInput struct {
 	// registry is assumed.
 	RegistryId *string `locationName:"registryId" type:"string"`
 
-	// A list of repositories to describe. If this parameter is omitted, then all
+	// A list of repositories to describe.
-	// repositories in a registry are described.
 	//
 	// RepositoryName is a required field
 	RepositoryName *string `locationName:"repositoryName" min:"2" type:"string" required:"true"`
@@ -3254,7 +3554,7 @@ type DescribeRepositoriesInput struct {
 	// returns maxResults results in a single page along with a nextToken response
 	// element. The remaining results of the initial request can be seen by sending
 	// another DescribeRepositories request with the returned nextToken value. This
-	// value can be between 1 and 100. If this parameter is not used, then DescribeRepositories
+	// value can be between 1 and 1000. If this parameter is not used, then DescribeRepositories
 	// returns up to 100 results and a nextToken value, if applicable. This option
 	// cannot be used when you specify repositories with repositoryNames.
 	MaxResults *int64 `locationName:"maxResults" min:"1" type:"integer"`
@@ -3640,7 +3940,7 @@ type GetLifecyclePolicyPreviewInput struct {
 	// only returns
 maxResults results in a single page along with a nextToken
 	// response element. The remaining results of the initial request can be seen
 	// by sending
 another GetLifecyclePolicyPreviewRequest request with the returned
-	// nextToken
 value. This value can be between 1 and 100. If this
 parameter
+	// nextToken
 value. This value can be between 1 and 1000. If this
 parameter
 	// is not used, then GetLifecyclePolicyPreviewRequest returns up to
 100 results
 	// and a nextToken value, if
 applicable. This option cannot be used when you
 	// specify images with imageIds.
@@ -4452,9 +4752,9 @@ type ListImagesInput struct {
 	// When this parameter is used, ListImages only returns maxResults results in
 	// a single page along with a nextToken response element. The remaining results
 	// of the initial request can be seen by sending another ListImages request
-	// with the returned nextToken value. This value can be between 1 and 100. If
+	// with the returned nextToken value. This value can be between 1 and 1000.
-	// this parameter is not used, then ListImages returns up to 100 results and
+	// If this parameter is not used, then ListImages returns up to 100 results
-	// a nextToken value, if applicable.
+	// and a nextToken value, if applicable.
 	MaxResults *int64 `locationName:"maxResults" min:"1" type:"integer"`
 
 	// The nextToken value returned from a previous paginated ListImages request
@@ -4571,6 +4871,68 @@ func (s *ListImagesOutput) SetNextToken(v string) *ListImagesOutput {
 	return s
 }
 
+type ListTagsForResourceInput struct {
+	_ struct{} `type:"structure"`
+
+	// The Amazon Resource Name (ARN) that identifies the resource for which to
+	// list the tags. Currently, the only supported resource is an Amazon ECR repository.
+	//
+	// ResourceArn is a required field
+	ResourceArn *string `locationName:"resourceArn" type:"string" required:"true"`
+}
+
+// String returns the string representation
+func (s ListTagsForResourceInput) String() string {
+	return awsutil.Prettify(s)
+}
+
+// GoString returns the string representation
+func (s ListTagsForResourceInput) GoString() string {
+	return s.String()
+}
+
+// Validate inspects the fields of the type to determine if they are valid.
+func (s *ListTagsForResourceInput) Validate() error {
+	invalidParams := request.ErrInvalidParams{Context: "ListTagsForResourceInput"}
+	if s.ResourceArn == nil {
+		invalidParams.Add(request.NewErrParamRequired("ResourceArn"))
+	}
+
+	if invalidParams.Len() > 0 {
+		return invalidParams
+	}
+	return nil
+}
+
+// SetResourceArn sets the ResourceArn field's value.
+func (s *ListTagsForResourceInput) SetResourceArn(v string) *ListTagsForResourceInput {
+	s.ResourceArn = &v
+	return s
+}
+
+type ListTagsForResourceOutput struct {
+	_ struct{} `type:"structure"`
+
+	// The tags for the resource.
+	Tags []*Tag `locationName:"tags" type:"list"`
+}
+
+// String returns the string representation
+func (s ListTagsForResourceOutput) String() string {
+	return awsutil.Prettify(s)
+}
+
+// GoString returns the string representation
+func (s ListTagsForResourceOutput) GoString() string {
+	return s.String()
+}
+
+// SetTags sets the Tags field's value.
+func (s *ListTagsForResourceOutput) SetTags(v []*Tag) *ListTagsForResourceOutput {
+	s.Tags = v
+	return s
+}
+
 type PutImageInput struct {
 	_ struct{} `type:"structure"`
 
@@ -5074,6 +5436,180 @@ func (s *StartLifecyclePolicyPreviewOutput) SetStatus(v string) *StartLifecycleP
 	return s
 }
 
+// The metadata that you apply to a resource to help you categorize and organize
+// them. Each tag consists of a key and an optional value, both of which you
+// define. Tag keys can have a maximum character length of 128 characters, and
+// tag values can have a maximum length of 256 characters.
+type Tag struct {
+	_ struct{} `type:"structure"`
+
+	// One part of a key-value pair that make up a tag. A key is a general label
+	// that acts like a category for more specific tag values.
+	Key *string `type:"string"`
+
+	// The optional part of a key-value pair that make up a tag. A value acts as
+	// a descriptor within a tag category (key).
+	Value *string `type:"string"`
+}
+
+// String returns the string representation
+func (s Tag) String() string {
+	return awsutil.Prettify(s)
+}
+
+// GoString returns the string representation
+func (s Tag) GoString() string {
+	return s.String()
+}
+
+// SetKey sets the Key field's value.
+func (s *Tag) SetKey(v string) *Tag {
+	s.Key = &v
+	return s
+}
+
+// SetValue sets the Value field's value.
+func (s *Tag) SetValue(v string) *Tag {
+	s.Value = &v
+	return s
+}
+
+type TagResourceInput struct {
+	_ struct{} `type:"structure"`
+
+	// The Amazon Resource Name (ARN) of the the resource to which to add tags.
+	// Currently, the only supported resource is an Amazon ECR repository.
+	//
+	// ResourceArn is a required field
+	ResourceArn *string `locationName:"resourceArn" type:"string" required:"true"`
+
+	// The tags to add to the resource. A tag is an array of key-value pairs. Tag
+	// keys can have a maximum character length of 128 characters, and tag values
+	// can have a maximum length of 256 characters.
+	//
+	// Tags is a required field
+	Tags []*Tag `locationName:"tags" type:"list" required:"true"`
+}
+
+// String returns the string representation
+func (s TagResourceInput) String() string {
+	return awsutil.Prettify(s)
+}
+
+// GoString returns the string representation
+func (s TagResourceInput) GoString() string {
+	return s.String()
+}
+
+// Validate inspects the fields of the type to determine if they are valid.
+func (s *TagResourceInput) Validate() error {
+	invalidParams := request.ErrInvalidParams{Context: "TagResourceInput"}
+	if s.ResourceArn == nil {
+		invalidParams.Add(request.NewErrParamRequired("ResourceArn"))
+	}
+	if s.Tags == nil {
+		invalidParams.Add(request.NewErrParamRequired("Tags"))
+	}
+
+	if invalidParams.Len() > 0 {
+		return invalidParams
+	}
+	return nil
+}
+
+// SetResourceArn sets the ResourceArn field's value.
+func (s *TagResourceInput) SetResourceArn(v string) *TagResourceInput {
+	s.ResourceArn = &v
+	return s
+}
+
+// SetTags sets the Tags field's value.
+func (s *TagResourceInput) SetTags(v []*Tag) *TagResourceInput {
+	s.Tags = v
+	return s
+}
+
+type TagResourceOutput struct {
+	_ struct{} `type:"structure"`
+}
+
+// String returns the string representation
+func (s TagResourceOutput) String() string {
+	return awsutil.Prettify(s)
+}
+
+// GoString returns the string representation
+func (s TagResourceOutput) GoString() string {
+	return s.String()
+}
+
+type UntagResourceInput struct {
+	_ struct{} `type:"structure"`
+
+	// The Amazon Resource Name (ARN) of the resource from which to remove tags.
+	// Currently, the only supported resource is an Amazon ECR repository.
+	//
+	// ResourceArn is a required field
+	ResourceArn *string `locationName:"resourceArn" type:"string" required:"true"`
+
+	// The keys of the tags to be removed.
+	//
+	// TagKeys is a required field
+	TagKeys []*string `locationName:"tagKeys" type:"list" required:"true"`
+}
+
+// String returns the string representation
+func (s UntagResourceInput) String() string {
+	return awsutil.Prettify(s)
+}
+
+// GoString returns the string representation
+func (s UntagResourceInput) GoString() string {
+	return s.String()
+}
+
+// Validate inspects the fields of the type to determine if they are valid.
+func (s *UntagResourceInput) Validate() error {
+	invalidParams := request.ErrInvalidParams{Context: "UntagResourceInput"}
+	if s.ResourceArn == nil {
+		invalidParams.Add(request.NewErrParamRequired("ResourceArn"))
+	}
+	if s.TagKeys == nil {
+		invalidParams.Add(request.NewErrParamRequired("TagKeys"))
+	}
+
+	if invalidParams.Len() > 0 {
+		return invalidParams
+	}
+	return nil
+}
+
+// SetResourceArn sets the ResourceArn field's value.
+func (s *UntagResourceInput) SetResourceArn(v string) *UntagResourceInput {
+	s.ResourceArn = &v
+	return s
+}
+
+// SetTagKeys sets the TagKeys field's value.
+func (s *UntagResourceInput) SetTagKeys(v []*string) *UntagResourceInput {
+	s.TagKeys = v
+	return s
+}
+
+type UntagResourceOutput struct {
+	_ struct{} `type:"structure"`
+}
+
+// String returns the string representation
+func (s UntagResourceOutput) String() string {
+	return awsutil.Prettify(s)
+}
+
+// GoString returns the string representation
+func (s UntagResourceOutput) GoString() string {
+	return s.String()
+}
+
 type UploadLayerPartInput struct {
 	_ struct{} `type:"structure"`
 
@@ -5292,4 +5828,7 @@ const (
 
 	// TagStatusUntagged is a TagStatus enum value
 	TagStatusUntagged = "UNTAGGED"
+
+	// TagStatusAny is a TagStatus enum value
+	TagStatusAny = "ANY"
 )

vendor/github.com/aws/aws-sdk-go/service/ecr/errors.go

@@ -44,6 +44,14 @@ const (
 	// API request.
 	ErrCodeInvalidParameterException = "InvalidParameterException"
 
+	// ErrCodeInvalidTagParameterException for service response error code
+	// "InvalidTagParameterException".
+	//
+	// An invalid parameter has been specified. Tag keys can have a maximum character
+	// length of 128 characters, and tag values can have a maximum length of 256
+	// characters.
+	ErrCodeInvalidTagParameterException = "InvalidTagParameterException"
+
 	// ErrCodeLayerAlreadyExistsException for service response error code
 	// "LayerAlreadyExistsException".
 	//
@@ -131,6 +139,13 @@ const (
 	// These errors are usually caused by a server-side issue.
 	ErrCodeServerException = "ServerException"
 
+	// ErrCodeTooManyTagsException for service response error code
+	// "TooManyTagsException".
+	//
+	// The list of tags on the repository is over the limit. The maximum number
+	// of tags that can be applied to a repository is 50.
+	ErrCodeTooManyTagsException = "TooManyTagsException"
+
 	// ErrCodeUploadNotFoundException for service response error code
 	// "UploadNotFoundException".
 	//

vendor/github.com/aws/aws-sdk-go/service/ecr/service.go

@@ -29,9 +29,9 @@ var initRequest func(*request.Request)
 
 // Service information constants
 const (
-	ServiceName = "ecr"       // Name of service.
+	ServiceName = "ecr"     // Name of service.
-	EndpointsID = ServiceName // ID to lookup a service endpoint with.
+	EndpointsID = "api.ecr" // ID to lookup a service endpoint with.
-	ServiceID   = "ECR"       // ServiceID is a unique identifer of a specific service.
+	ServiceID   = "ECR"     // ServiceID is a unique identifer of a specific service.
 )
 
 // New creates a new instance of the ECR client with a session.
@@ -46,6 +46,9 @@ const (
 //     svc := ecr.New(mySession, aws.NewConfig().WithRegion("us-west-2"))
 func New(p client.ConfigProvider, cfgs ...*aws.Config) *ECR {
 	c := p.ClientConfig(EndpointsID, cfgs...)
+	if c.SigningNameDerived || len(c.SigningName) == 0 {
+		c.SigningName = "ecr"
+	}
 	return newClient(*c.Config, c.Handlers, c.Endpoint, c.SigningRegion, c.SigningName)
 }
 

vendor/github.com/aws/aws-sdk-go/service/ecs/api.go

@@ -5784,7 +5784,7 @@ type CreateServiceInput struct {
 
 	// Specifies whether to enable Amazon ECS managed tags for the tasks within
 	// the service. For more information, see Tagging Your Amazon ECS Resources
-	// (http://docs.aws.amazon.com/AmazonECS/latest/developerguide/Using_Tags.html)
+	// (http://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-using-tags.html)
 	// in the Amazon Elastic Container Service Developer Guide.
 	EnableECSManagedTags *bool `locationName:"enableECSManagedTags" type:"boolean"`
 
@@ -10297,7 +10297,7 @@ type RunTaskInput struct {
 	Count *int64 `locationName:"count" type:"integer"`
 
 	// Specifies whether to enable Amazon ECS managed tags for the task. For more
-	// information, see Tagging Your Amazon ECS Resources (http://docs.aws.amazon.com/AmazonECS/latest/developerguide/Using_Tags.html)
+	// information, see Tagging Your Amazon ECS Resources (http://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-using-tags.html)
 	// in the Amazon Elastic Container Service Developer Guide.
 	EnableECSManagedTags *bool `locationName:"enableECSManagedTags" type:"boolean"`
 
@@ -10647,7 +10647,7 @@ type Service struct {
 	DesiredCount *int64 `locationName:"desiredCount" type:"integer"`
 
 	// Specifies whether to enable Amazon ECS managed tags for the tasks in the
-	// service. For more information, see Tagging Your Amazon ECS Resources (http://docs.aws.amazon.com/AmazonECS/latest/developerguide/Using_Tags.html)
+	// service. For more information, see Tagging Your Amazon ECS Resources (http://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-using-tags.html)
 	// in the Amazon Elastic Container Service Developer Guide.
 	EnableECSManagedTags *bool `locationName:"enableECSManagedTags" type:"boolean"`
 
@@ -11108,7 +11108,7 @@ type StartTaskInput struct {
 	ContainerInstances []*string `locationName:"containerInstances" type:"list" required:"true"`
 
 	// Specifies whether to enable Amazon ECS managed tags for the task. For more
-	// information, see Tagging Your Amazon ECS Resources (http://docs.aws.amazon.com/AmazonECS/latest/developerguide/Using_Tags.html)
+	// information, see Tagging Your Amazon ECS Resources (http://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-using-tags.html)
 	// in the Amazon Elastic Container Service Developer Guide.
 	EnableECSManagedTags *bool `locationName:"enableECSManagedTags" type:"boolean"`
 

vendor/github.com/aws/aws-sdk-go/service/elasticbeanstalk/api.go

@@ -7707,7 +7707,7 @@ type EnvironmentDescription struct {
 	//
 	//    * Grey: Default health for a new environment. The environment is not fully
 	//    launched and health checks have not started or health checks are suspended
-	//    during an UpdateEnvironment or RestartEnvironement request.
+	//    during an UpdateEnvironment or RestartEnvironment request.
 	//
 	// Default: Grey
 	Health *string `type:"string" enum:"EnvironmentHealth"`
@@ -7924,7 +7924,11 @@ type EnvironmentInfoDescription struct {
 	// The type of information retrieved.
 	InfoType *string `type:"string" enum:"EnvironmentInfoType"`
 
-	// The retrieved information.
+	// The retrieved information. Currently contains a presigned Amazon S3 URL.
+	// The files are deleted after 15 minutes.
+	//
+	// Anyone in possession of this URL can access the files before they are deleted.
+	// Make the URL available only to trusted parties.
 	Message *string `type:"string"`
 
 	// The time stamp when this information was retrieved.
@@ -8018,6 +8022,9 @@ type EnvironmentResourceDescription struct {
 	// The Auto Scaling launch configurations in use by this environment.
 	LaunchConfigurations []*LaunchConfiguration `type:"list"`
 
+	// The Amazon EC2 launch templates in use by this environment.
+	LaunchTemplates []*LaunchTemplate `type:"list"`
+
 	// The LoadBalancers in use by this environment.
 	LoadBalancers []*LoadBalancer `type:"list"`
 
@@ -8062,6 +8069,12 @@ func (s *EnvironmentResourceDescription) SetLaunchConfigurations(v []*LaunchConf
 	return s
 }
 
+// SetLaunchTemplates sets the LaunchTemplates field's value.
+func (s *EnvironmentResourceDescription) SetLaunchTemplates(v []*LaunchTemplate) *EnvironmentResourceDescription {
+	s.LaunchTemplates = v
+	return s
+}
+
 // SetLoadBalancers sets the LoadBalancers field's value.
 func (s *EnvironmentResourceDescription) SetLoadBalancers(v []*LoadBalancer) *EnvironmentResourceDescription {
 	s.LoadBalancers = v
@@ -8110,9 +8123,21 @@ type EnvironmentTier struct {
 	_ struct{} `type:"structure"`
 
 	// The name of this environment tier.
+	//
+	// Valid values:
+	//
+	//    * For Web server tier – WebServer
+	//
+	//    * For Worker tier – Worker
 	Name *string `type:"string"`
 
 	// The type of this environment tier.
+	//
+	// Valid values:
+	//
+	//    * For Web server tier – Standard
+	//
+	//    * For Worker tier – SQS/HTTP
 	Type *string `type:"string"`
 
 	// The version of this environment tier. When you don't set a value to it, Elastic
@@ -8485,6 +8510,30 @@ func (s *LaunchConfiguration) SetName(v string) *LaunchConfiguration {
 	return s
 }
 
+// Describes an Amazon EC2 launch template.
+type LaunchTemplate struct {
+	_ struct{} `type:"structure"`
+
+	// The ID of the launch template.
+	Id *string `type:"string"`
+}
+
+// String returns the string representation
+func (s LaunchTemplate) String() string {
+	return awsutil.Prettify(s)
+}
+
+// GoString returns the string representation
+func (s LaunchTemplate) GoString() string {
+	return s.String()
+}
+
+// SetId sets the Id field's value.
+func (s *LaunchTemplate) SetId(v string) *LaunchTemplate {
+	s.Id = &v
+	return s
+}
+
 type ListAvailableSolutionStacksInput struct {
 	_ struct{} `type:"structure"`
 }

vendor/github.com/aws/aws-sdk-go/service/elbv2/api.go

@@ -57,7 +57,7 @@ func (c *ELBV2) AddListenerCertificatesRequest(input *AddListenerCertificatesInp
 
 // AddListenerCertificates API operation for Elastic Load Balancing.
 //
-// Adds the specified certificate to the specified secure listener.
+// Adds the specified certificate to the specified HTTPS listener.
 //
 // If the certificate was already added, the call is successful but the certificate
 // is not added again.
@@ -1259,7 +1259,7 @@ func (c *ELBV2) DescribeListenerCertificatesRequest(input *DescribeListenerCerti
 
 // DescribeListenerCertificates API operation for Elastic Load Balancing.
 //
-// Describes the certificates for the specified secure listener.
+// Describes the certificates for the specified HTTPS listener.
 //
 // Returns awserr.Error for service API and SDK errors. Use runtime type assertions
 // with awserr.Error's Code and Message methods to get detailed information about
@@ -2278,9 +2278,10 @@ func (c *ELBV2) ModifyListenerRequest(input *ModifyListenerInput) (req *request.
 // Modifies the specified properties of the specified listener.
 //
 // Any properties that you do not specify retain their current values. However,
-// changing the protocol from HTTPS to HTTP removes the security policy and
+// changing the protocol from HTTPS to HTTP, or from TLS to TCP, removes the
-// SSL certificate properties. If you change the protocol from HTTP to HTTPS,
+// security policy and server certificate properties. If you change the protocol
-// you must add the security policy and server certificate.
+// from HTTP to HTTPS, or from TCP to TLS, you must add the security policy
+// and server certificate properties.
 //
 // Returns awserr.Error for service API and SDK errors. Use runtime type assertions
 // with awserr.Error's Code and Message methods to get detailed information about
@@ -2874,7 +2875,7 @@ func (c *ELBV2) RemoveListenerCertificatesRequest(input *RemoveListenerCertifica
 
 // RemoveListenerCertificates API operation for Elastic Load Balancing.
 //
-// Removes the specified certificate from the specified secure listener.
+// Removes the specified certificate from the specified HTTPS listener.
 //
 // You can't remove the default certificate for a listener. To replace the default
 // certificate, call ModifyListener.
@@ -3379,11 +3380,11 @@ func (c *ELBV2) SetSubnetsWithContext(ctx aws.Context, input *SetSubnetsInput, o
 type Action struct {
 	_ struct{} `type:"structure"`
 
-	// [HTTPS listener] Information for using Amazon Cognito to authenticate users.
+	// [HTTPS listeners] Information for using Amazon Cognito to authenticate users.
 	// Specify only when Type is authenticate-cognito.
 	AuthenticateCognitoConfig *AuthenticateCognitoActionConfig `type:"structure"`
 
-	// [HTTPS listener] Information about an identity provider that is compliant
+	// [HTTPS listeners] Information about an identity provider that is compliant
 	// with OpenID Connect (OIDC). Specify only when Type is authenticate-oidc.
 	AuthenticateOidcConfig *AuthenticateOidcActionConfig `type:"structure"`
 
@@ -4065,9 +4066,9 @@ func (s *Cipher) SetPriority(v int64) *Cipher {
 type CreateListenerInput struct {
 	_ struct{} `type:"structure"`
 
-	// [HTTPS listeners] The default SSL server certificate. You must provide exactly
+	// [HTTPS and TLS listeners] The default SSL server certificate. You must provide
-	// one certificate. Set CertificateArn to the certificate ARN but do not set
+	// exactly one certificate. Set CertificateArn to the certificate ARN but do
-	// IsDefault.
+	// not set IsDefault.
 	//
 	// To create a certificate list, use AddListenerCertificates.
 	Certificates []*Certificate `type:"list"`
@@ -4076,13 +4077,13 @@ type CreateListenerInput struct {
 	// or one or more fixed-response actions.
 	//
 	// If the action type is forward, you specify a target group. The protocol of
-	// the target group must be HTTP or HTTPS for an Application Load Balancer or
+	// the target group must be HTTP or HTTPS for an Application Load Balancer.
-	// TCP for a Network Load Balancer.
+	// The protocol of the target group must be TCP or TLS for a Network Load Balancer.
 	//
-	// [HTTPS listener] If the action type is authenticate-oidc, you authenticate
+	// [HTTPS listeners] If the action type is authenticate-oidc, you authenticate
 	// users through an identity provider that is OpenID Connect (OIDC) compliant.
 	//
-	// [HTTPS listener] If the action type is authenticate-cognito, you authenticate
+	// [HTTPS listeners] If the action type is authenticate-cognito, you authenticate
 	// users through the user pools supported by Amazon Cognito.
 	//
 	// [Application Load Balancer] If the action type is redirect, you redirect
@@ -4106,13 +4107,14 @@ type CreateListenerInput struct {
 
 	// The protocol for connections from clients to the load balancer. For Application
 	// Load Balancers, the supported protocols are HTTP and HTTPS. For Network Load
-	// Balancers, the supported protocol is TCP.
+	// Balancers, the supported protocols are TCP and TLS.
 	//
 	// Protocol is a required field
 	Protocol *string `type:"string" required:"true" enum:"ProtocolEnum"`
 
-	// [HTTPS listeners] The security policy that defines which ciphers and protocols
+	// [HTTPS and TLS listeners] The security policy that defines which ciphers
-	// are supported. The default is the current predefined security policy.
+	// and protocols are supported. The default is the current predefined security
+	// policy.
 	SslPolicy *string `type:"string"`
 }
 
@@ -4396,13 +4398,13 @@ type CreateRuleInput struct {
 	// actions: forward, fixed-response, or redirect.
 	//
 	// If the action type is forward, you specify a target group. The protocol of
-	// the target group must be HTTP or HTTPS for an Application Load Balancer or
+	// the target group must be HTTP or HTTPS for an Application Load Balancer.
-	// TCP for a Network Load Balancer.
+	// The protocol of the target group must be TCP or TLS for a Network Load Balancer.
 	//
-	// [HTTPS listener] If the action type is authenticate-oidc, you authenticate
+	// [HTTPS listeners] If the action type is authenticate-oidc, you authenticate
 	// users through an identity provider that is OpenID Connect (OIDC) compliant.
 	//
-	// [HTTPS listener] If the action type is authenticate-cognito, you authenticate
+	// [HTTPS listeners] If the action type is authenticate-cognito, you authenticate
 	// users through the user pools supported by Amazon Cognito.
 	//
 	// [Application Load Balancer] If the action type is redirect, you redirect
@@ -4575,9 +4577,10 @@ type CreateTargetGroupInput struct {
 	HealthCheckPort *string `type:"string"`
 
 	// The protocol the load balancer uses when performing health checks on targets.
-	// The TCP protocol is supported only if the protocol of the target group is
+	// For Application Load Balancers, the default is HTTP. For Network Load Balancers,
-	// TCP. For Application Load Balancers, the default is HTTP. For Network Load
+	// the default is TCP. The TCP protocol is supported for health checks only
-	// Balancers, the default is TCP.
+	// if the protocol of the target group is TCP or TLS. The TLS protocol is not
+	// supported for health checks.
 	HealthCheckProtocol *string `type:"string" enum:"ProtocolEnum"`
 
 	// The amount of time, in seconds, during which no response from a target means
@@ -4613,8 +4616,8 @@ type CreateTargetGroupInput struct {
 
 	// The protocol to use for routing traffic to the targets. For Application Load
 	// Balancers, the supported protocols are HTTP and HTTPS. For Network Load Balancers,
-	// the supported protocol is TCP. If the target is a Lambda function, this parameter
+	// the supported protocols are TCP and TLS. If the target is a Lambda function,
-	// does not apply.
+	// this parameter does not apply.
 	Protocol *string `type:"string" enum:"ProtocolEnum"`
 
 	// The type of target that you must specify when registering targets with this
@@ -6119,7 +6122,7 @@ type Listener struct {
 	_ struct{} `type:"structure"`
 
 	// The SSL server certificate. You must provide a certificate if the protocol
-	// is HTTPS.
+	// is HTTPS or TLS.
 	Certificates []*Certificate `type:"list"`
 
 	// The default actions for the listener.
@@ -6506,9 +6509,9 @@ func (s *Matcher) SetHttpCode(v string) *Matcher {
 type ModifyListenerInput struct {
 	_ struct{} `type:"structure"`
 
-	// [HTTPS listeners] The default SSL server certificate. You must provide exactly
+	// [HTTPS and TLS listeners] The default SSL server certificate. You must provide
-	// one certificate. Set CertificateArn to the certificate ARN but do not set
+	// exactly one certificate. Set CertificateArn to the certificate ARN but do
-	// IsDefault.
+	// not set IsDefault.
 	//
 	// To create a certificate list, use AddListenerCertificates.
 	Certificates []*Certificate `type:"list"`
@@ -6517,13 +6520,13 @@ type ModifyListenerInput struct {
 	// or one or more fixed-response actions.
 	//
 	// If the action type is forward, you specify a target group. The protocol of
-	// the target group must be HTTP or HTTPS for an Application Load Balancer or
+	// the target group must be HTTP or HTTPS for an Application Load Balancer.
-	// TCP for a Network Load Balancer.
+	// The protocol of the target group must be TCP or TLS for a Network Load Balancer.
 	//
-	// [HTTPS listener] If the action type is authenticate-oidc, you authenticate
+	// [HTTPS listeners] If the action type is authenticate-oidc, you authenticate
 	// users through an identity provider that is OpenID Connect (OIDC) compliant.
 	//
-	// [HTTPS listener] If the action type is authenticate-cognito, you authenticate
+	// [HTTPS listeners] If the action type is authenticate-cognito, you authenticate
 	// users through the user pools supported by Amazon Cognito.
 	//
 	// [Application Load Balancer] If the action type is redirect, you redirect
@@ -6542,12 +6545,12 @@ type ModifyListenerInput struct {
 	Port *int64 `min:"1" type:"integer"`
 
 	// The protocol for connections from clients to the load balancer. Application
-	// Load Balancers support HTTP and HTTPS and Network Load Balancers support
+	// Load Balancers support the HTTP and HTTPS protocols. Network Load Balancers
-	// TCP.
+	// support the TCP and TLS protocols.
 	Protocol *string `type:"string" enum:"ProtocolEnum"`
 
-	// [HTTPS listeners] The security policy that defines which protocols and ciphers
+	// [HTTPS and TLS listeners] The security policy that defines which protocols
-	// are supported. For more information, see Security Policies (http://docs.aws.amazon.com/elasticloadbalancing/latest/application/create-https-listener.html#describe-ssl-policies)
+	// and ciphers are supported. For more information, see Security Policies (http://docs.aws.amazon.com/elasticloadbalancing/latest/application/create-https-listener.html#describe-ssl-policies)
 	// in the Application Load Balancers Guide.
 	SslPolicy *string `type:"string"`
 }
@@ -6728,13 +6731,13 @@ type ModifyRuleInput struct {
 	// The actions.
 	//
 	// If the action type is forward, you specify a target group. The protocol of
-	// the target group must be HTTP or HTTPS for an Application Load Balancer or
+	// the target group must be HTTP or HTTPS for an Application Load Balancer.
-	// TCP for a Network Load Balancer.
+	// The protocol of the target group must be TCP or TLS for a Network Load Balancer.
 	//
-	// [HTTPS listener] If the action type is authenticate-oidc, you authenticate
+	// [HTTPS listeners] If the action type is authenticate-oidc, you authenticate
 	// users through an identity provider that is OpenID Connect (OIDC) compliant.
 	//
-	// [HTTPS listener] If the action type is authenticate-cognito, you authenticate
+	// [HTTPS listeners] If the action type is authenticate-cognito, you authenticate
 	// users through the user pools supported by Amazon Cognito.
 	//
 	// [Application Load Balancer] If the action type is redirect, you redirect
@@ -6951,8 +6954,9 @@ type ModifyTargetGroupInput struct {
 	HealthCheckPort *string `type:"string"`
 
 	// The protocol the load balancer uses when performing health checks on targets.
-	// The TCP protocol is supported only if the protocol of the target group is
+	// The TCP protocol is supported for health checks only if the protocol of the
-	// TCP.
+	// target group is TCP or TLS. The TLS protocol is not supported for health
+	// checks.
 	//
 	// If the protocol of the target group is TCP, you can't modify this setting.
 	HealthCheckProtocol *string `type:"string" enum:"ProtocolEnum"`
@@ -8617,6 +8621,9 @@ const (
 
 	// ProtocolEnumTcp is a ProtocolEnum enum value
 	ProtocolEnumTcp = "TCP"
+
+	// ProtocolEnumTls is a ProtocolEnum enum value
+	ProtocolEnumTls = "TLS"
 )
 
 const (

vendor/github.com/aws/aws-sdk-go/service/elbv2/doc.go

@@ -19,7 +19,7 @@
 //
 // An Application Load Balancer makes routing and load balancing decisions at
 // the application layer (HTTP/HTTPS). A Network Load Balancer makes routing
-// and load balancing decisions at the transport layer (TCP). Both Application
+// and load balancing decisions at the transport layer (TCP/TLS). Both Application
 // Load Balancers and Network Load Balancers can route requests to one or more
 // ports on each EC2 instance or container instance in your virtual private
 // cloud (VPC).

vendor/github.com/aws/aws-sdk-go/service/emr/api.go

@@ -3034,24 +3034,16 @@ func (s AddTagsOutput) GoString() string {
 	return s.String()
 }
 
-// An application is any Amazon or third-party software that you can add to
+// With Amazon EMR release version 4.0 and later, the only accepted parameter
-// the cluster. This structure contains a list of strings that indicates the
+// is the application name. To pass arguments to applications, you use configuration
-// software to use with the cluster and accepts a user argument list. Amazon
+// classifications specified using configuration JSON objects. For more information,
-// EMR accepts and forwards the argument list to the corresponding installation
+// see Configuring Applications (http://docs.aws.amazon.com/emr/latest/ReleaseGuide/emr-configure-apps.html).
-// script as bootstrap action argument. For more information, see Using the
-// MapR Distribution for Hadoop (http://docs.aws.amazon.com/emr/latest/ManagementGuide/emr-mapr.html).
-// Currently supported values are:
 //
-//    * "mapr-m3" - launch the cluster using MapR M3 Edition.
+// With earlier Amazon EMR releases, the application is any Amazon or third-party
-//
+// software that you can add to the cluster. This structure contains a list
-//    * "mapr-m5" - launch the cluster using MapR M5 Edition.
+// of strings that indicates the software to use with the cluster and accepts
-//
+// a user argument list. Amazon EMR accepts and forwards the argument list to
-//    * "mapr" with the user arguments specifying "--edition,m3" or "--edition,m5"
+// the corresponding installation script as bootstrap action argument.
-//    - launch the cluster using MapR M3 or M5 Edition, respectively.
-//
-// In Amazon EMR releases 4.x and later, the only accepted parameter is the
-// application name. To pass arguments to applications, you supply a configuration
-// for each application.
 type Application struct {
 	_ struct{} `type:"structure"`
 
@@ -4788,7 +4780,8 @@ type Ec2InstanceAttributes struct {
 	// A list of additional Amazon EC2 security group IDs for the master node.
 	AdditionalMasterSecurityGroups []*string `type:"list"`
 
-	// A list of additional Amazon EC2 security group IDs for the slave nodes.
+	// A list of additional Amazon EC2 security group IDs for the core and task
+	// nodes.
 	AdditionalSlaveSecurityGroups []*string `type:"list"`
 
 	// The Availability Zone in which the cluster will run.
@@ -4811,7 +4804,7 @@ type Ec2InstanceAttributes struct {
 	// The identifier of the Amazon EC2 security group for the master node.
 	EmrManagedMasterSecurityGroup *string `type:"string"`
 
-	// The identifier of the Amazon EC2 security group for the slave nodes.
+	// The identifier of the Amazon EC2 security group for the core and task nodes.
 	EmrManagedSlaveSecurityGroup *string `type:"string"`
 
 	// The IAM role that was specified when the cluster was launched. The EC2 instances
@@ -7028,7 +7021,8 @@ type JobFlowInstancesConfig struct {
 	// A list of additional Amazon EC2 security group IDs for the master node.
 	AdditionalMasterSecurityGroups []*string `type:"list"`
 
-	// A list of additional Amazon EC2 security group IDs for the slave nodes.
+	// A list of additional Amazon EC2 security group IDs for the core and task
+	// nodes.
 	AdditionalSlaveSecurityGroups []*string `type:"list"`
 
 	// The name of the EC2 key pair that can be used to ssh to the master node as
@@ -7059,7 +7053,7 @@ type JobFlowInstancesConfig struct {
 	// The identifier of the Amazon EC2 security group for the master node.
 	EmrManagedMasterSecurityGroup *string `type:"string"`
 
-	// The identifier of the Amazon EC2 security group for the slave nodes.
+	// The identifier of the Amazon EC2 security group for the core and task nodes.
 	EmrManagedSlaveSecurityGroup *string `type:"string"`
 
 	// Applies only to Amazon EMR release versions earlier than 4.0. The Hadoop
@@ -7097,7 +7091,7 @@ type JobFlowInstancesConfig struct {
 	// to access clusters in VPC private subnets.
 	ServiceAccessSecurityGroup *string `type:"string"`
 
-	// The EC2 instance type of the slave nodes.
+	// The EC2 instance type of the core and task nodes.
 	SlaveInstanceType *string `min:"1" type:"string"`
 
 	// Specifies whether to lock the cluster to prevent the Amazon EC2 instances
@@ -7271,8 +7265,9 @@ type JobFlowInstancesDetail struct {
 	HadoopVersion *string `type:"string"`
 
 	// The number of Amazon EC2 instances in the cluster. If the value is 1, the
-	// same instance serves as both the master and slave node. If the value is greater
+	// same instance serves as both the master and core and task node. If the value
-	// than 1, one instance is the master node and all others are slave nodes.
+	// is greater than 1, one instance is the master node and all others are core
+	// and task nodes.
 	//
 	// InstanceCount is a required field
 	InstanceCount *int64 `type:"integer" required:"true"`
@@ -7307,7 +7302,7 @@ type JobFlowInstancesDetail struct {
 	// The Amazon EC2 Availability Zone for the cluster.
 	Placement *PlacementType `type:"structure"`
 
-	// The Amazon EC2 slave node instance type.
+	// The Amazon EC2 core and task node instance type.
 	//
 	// SlaveInstanceType is a required field
 	SlaveInstanceType *string `min:"1" type:"string" required:"true"`
@@ -8617,9 +8612,10 @@ type RunJobFlowInput struct {
 	// 4.0 and later, ReleaseLabel is used. To specify a custom AMI, use CustomAmiID.
 	AmiVersion *string `type:"string"`
 
-	// For Amazon EMR releases 4.0 and later. A list of applications for the cluster.
+	// Applies to Amazon EMR releases 4.0 and later. A case-insensitive list of
-	// Valid values are: "Hadoop", "Hive", "Mahout", "Pig", and "Spark." They are
+	// applications for Amazon EMR to install and configure when launching the cluster.
-	// case insensitive.
+	// For a list of applications available for each Amazon EMR release version,
+	// see the Amazon EMR Release Guide (http://docs.aws.amazon.com/emr/latest/ReleaseGuide/).
 	Applications []*Application `type:"list"`
 
 	// An IAM role for automatic scaling policies. The default role is EMR_AutoScaling_DefaultRole.
@@ -9595,10 +9591,11 @@ type SpotProvisioningSpecification struct {
 	BlockDurationMinutes *int64 `type:"integer"`
 
 	// The action to take when TargetSpotCapacity has not been fulfilled when the
-	// TimeoutDurationMinutes has expired. Spot instances are not uprovisioned within
+	// TimeoutDurationMinutes has expired; that is, when all Spot instances could
-	// the Spot provisioining timeout. Valid values are TERMINATE_CLUSTER and SWITCH_TO_ON_DEMAND.
+	// not be provisioned within the Spot provisioning timeout. Valid values are
-	// SWITCH_TO_ON_DEMAND specifies that if no Spot instances are available, On-Demand
+	// TERMINATE_CLUSTER and SWITCH_TO_ON_DEMAND. SWITCH_TO_ON_DEMAND specifies
-	// Instances should be provisioned to fulfill any remaining Spot capacity.
+	// that if no Spot instances are available, On-Demand Instances should be provisioned
+	// to fulfill any remaining Spot capacity.
 	//
 	// TimeoutAction is a required field
 	TimeoutAction *string `type:"string" required:"true" enum:"SpotProvisioningTimeoutAction"`
@@ -9660,8 +9657,9 @@ func (s *SpotProvisioningSpecification) SetTimeoutDurationMinutes(v int64) *Spot
 type Step struct {
 	_ struct{} `type:"structure"`
 
-	// This specifies what action to take when the cluster step fails. Possible
+	// The action to take when the cluster step fails. Possible values are TERMINATE_CLUSTER,
-	// values are TERMINATE_CLUSTER, CANCEL_AND_WAIT, and CONTINUE.
+	// CANCEL_AND_WAIT, and CONTINUE. TERMINATE_JOB_FLOW is provided for backward
+	// compatibility. We recommend using TERMINATE_CLUSTER instead.
 	ActionOnFailure *string `type:"string" enum:"ActionOnFailure"`
 
 	// The Hadoop job configuration of the cluster step.
@@ -9721,7 +9719,9 @@ func (s *Step) SetStatus(v *StepStatus) *Step {
 type StepConfig struct {
 	_ struct{} `type:"structure"`
 
-	// The action to take if the step fails.
+	// The action to take when the cluster step fails. Possible values are TERMINATE_CLUSTER,
+	// CANCEL_AND_WAIT, and CONTINUE. TERMINATE_JOB_FLOW is provided for backward
+	// compatibility. We recommend using TERMINATE_CLUSTER instead.
 	ActionOnFailure *string `type:"string" enum:"ActionOnFailure"`
 
 	// The JAR file used for the step.
@@ -9975,8 +9975,9 @@ func (s *StepStatus) SetTimeline(v *StepTimeline) *StepStatus {
 type StepSummary struct {
 	_ struct{} `type:"structure"`
 
-	// This specifies what action to take when the cluster step fails. Possible
+	// The action to take when the cluster step fails. Possible values are TERMINATE_CLUSTER,
-	// values are TERMINATE_CLUSTER, CANCEL_AND_WAIT, and CONTINUE.
+	// CANCEL_AND_WAIT, and CONTINUE. TERMINATE_JOB_FLOW is available for backward
+	// compatibility. We recommend using TERMINATE_CLUSTER instead.
 	ActionOnFailure *string `type:"string" enum:"ActionOnFailure"`
 
 	// The Hadoop job configuration of the cluster step.

vendor/github.com/aws/aws-sdk-go/service/firehose/api.go

@@ -814,13 +814,16 @@ func (c *Firehose) StartDeliveryStreamEncryptionRequest(input *StartDeliveryStre
 
 // StartDeliveryStreamEncryption API operation for Amazon Kinesis Firehose.
 //
-// Enables server-side encryption (SSE) for the delivery stream. This operation
+// Enables server-side encryption (SSE) for the delivery stream.
-// is asynchronous. It returns immediately. When you invoke it, Kinesis Firehose
+//
-// first sets the status of the stream to ENABLING then to ENABLED. You can
+// This operation is asynchronous. It returns immediately. When you invoke it,
-// continue to read and write data to your stream while its status is ENABLING
+// Kinesis Data Firehose first sets the status of the stream to ENABLING, and
-// but they won't get encrypted. It can take up to 5 seconds after the encryption
+// then to ENABLED. You can continue to read and write data to your stream while
-// status changes to ENABLED before all records written to the delivery stream
+// its status is ENABLING, but the data is not encrypted. It can take up to
-// are encrypted.
+// 5 seconds after the encryption status changes to ENABLED before all records
+// written to the delivery stream are encrypted. To find out whether a record
+// or a batch of records was encrypted, check the response elements PutRecordOutput$Encrypted
+// and PutRecordBatchOutput$Encrypted, respectively.
 //
 // To check the encryption state of a delivery stream, use DescribeDeliveryStream.
 //
@@ -829,8 +832,8 @@ func (c *Firehose) StartDeliveryStreamEncryptionRequest(input *StartDeliveryStre
 //
 // The StartDeliveryStreamEncryption and StopDeliveryStreamEncryption operations
 // have a combined limit of 25 calls per delivery stream per 24 hours. For example,
-// you reach the limit if you call StartDeliveryStreamEncryption thirteen times
+// you reach the limit if you call StartDeliveryStreamEncryption 13 times and
-// and StopDeliveryStreamEncryption twelve times for the same stream in a 24-hour
+// StopDeliveryStreamEncryption 12 times for the same delivery stream in a 24-hour
 // period.
 //
 // Returns awserr.Error for service API and SDK errors. Use runtime type assertions
@@ -920,20 +923,23 @@ func (c *Firehose) StopDeliveryStreamEncryptionRequest(input *StopDeliveryStream
 
 // StopDeliveryStreamEncryption API operation for Amazon Kinesis Firehose.
 //
-// Disables server-side encryption (SSE) for the delivery stream. This operation
+// Disables server-side encryption (SSE) for the delivery stream.
-// is asynchronous. It returns immediately. When you invoke it, Kinesis Firehose
+//
-// first sets the status of the stream to DISABLING then to DISABLED. You can
+// This operation is asynchronous. It returns immediately. When you invoke it,
-// continue to read and write data to your stream while its status is DISABLING.
+// Kinesis Data Firehose first sets the status of the stream to DISABLING, and
-// It can take up to 5 seconds after the encryption status changes to DISABLED
+// then to DISABLED. You can continue to read and write data to your stream
-// before all records written to the delivery stream are no longer subject to
+// while its status is DISABLING. It can take up to 5 seconds after the encryption
-// encryption.
+// status changes to DISABLED before all records written to the delivery stream
+// are no longer subject to encryption. To find out whether a record or a batch
+// of records was encrypted, check the response elements PutRecordOutput$Encrypted
+// and PutRecordBatchOutput$Encrypted, respectively.
 //
 // To check the encryption state of a delivery stream, use DescribeDeliveryStream.
 //
 // The StartDeliveryStreamEncryption and StopDeliveryStreamEncryption operations
 // have a combined limit of 25 calls per delivery stream per 24 hours. For example,
-// you reach the limit if you call StartDeliveryStreamEncryption thirteen times
+// you reach the limit if you call StartDeliveryStreamEncryption 13 times and
-// and StopDeliveryStreamEncryption twelve times for the same stream in a 24-hour
+// StopDeliveryStreamEncryption 12 times for the same delivery stream in a 24-hour
 // period.
 //
 // Returns awserr.Error for service API and SDK errors. Use runtime type assertions
@@ -1024,12 +1030,12 @@ func (c *Firehose) TagDeliveryStreamRequest(input *TagDeliveryStreamInput) (req
 // TagDeliveryStream API operation for Amazon Kinesis Firehose.
 //
 // Adds or updates tags for the specified delivery stream. A tag is a key-value
-// pair (the value is optional) that you can define and assign to AWS resources.
+// pair that you can define and assign to AWS resources. If you specify a tag
-// If you specify a tag that already exists, the tag value is replaced with
+// that already exists, the tag value is replaced with the value that you specify
-// the value that you specify in the request. Tags are metadata. For example,
+// in the request. Tags are metadata. For example, you can add friendly names
-// you can add friendly names and descriptions or other types of information
+// and descriptions or other types of information that can help you distinguish
-// that can help you distinguish the delivery stream. For more information about
+// the delivery stream. For more information about tags, see Using Cost Allocation
-// tags, see Using Cost Allocation Tags (https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/cost-alloc-tags.html)
+// Tags (https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/cost-alloc-tags.html)
 // in the AWS Billing and Cost Management User Guide.
 //
 // Each delivery stream can have up to 50 tags.
@@ -2249,7 +2255,7 @@ type ElasticsearchDestinationConfiguration struct {
 	// IndexName is a required field
 	IndexName *string `min:"1" type:"string" required:"true"`
 
-	// The Elasticsearch index rotation period. Index rotation appends a time stamp
+	// The Elasticsearch index rotation period. Index rotation appends a timestamp
 	// to the IndexName to facilitate the expiration of old data. For more information,
 	// see Index Rotation for the Amazon ES Destination (http://docs.aws.amazon.com/firehose/latest/dev/basic-deliver.html#es-index-rotation).
 	// The default value is OneDay.
@@ -2559,7 +2565,7 @@ type ElasticsearchDestinationUpdate struct {
 	// The Elasticsearch index name.
 	IndexName *string `min:"1" type:"string"`
 
-	// The Elasticsearch index rotation period. Index rotation appends a time stamp
+	// The Elasticsearch index rotation period. Index rotation appends a timestamp
 	// to IndexName to facilitate the expiration of old data. For more information,
 	// see Index Rotation for the Amazon ES Destination (http://docs.aws.amazon.com/firehose/latest/dev/basic-deliver.html#es-index-rotation).
 	// Default value is OneDay.
@@ -2800,6 +2806,11 @@ type ExtendedS3DestinationConfiguration struct {
 	// encryption.
 	EncryptionConfiguration *EncryptionConfiguration `type:"structure"`
 
+	// A prefix that Kinesis Data Firehose evaluates and adds to failed records
+	// before writing them to S3. This prefix appears immediately following the
+	// bucket name.
+	ErrorOutputPrefix *string `type:"string"`
+
 	// The "YYYY/MM/DD/HH" time format prefix is automatically used for delivered
 	// Amazon S3 files. You can specify an extra prefix to be added in front of
 	// the time format prefix. If the prefix ends with a slash, it appears as a
@@ -2917,6 +2928,12 @@ func (s *ExtendedS3DestinationConfiguration) SetEncryptionConfiguration(v *Encry
 	return s
 }
 
+// SetErrorOutputPrefix sets the ErrorOutputPrefix field's value.
+func (s *ExtendedS3DestinationConfiguration) SetErrorOutputPrefix(v string) *ExtendedS3DestinationConfiguration {
+	s.ErrorOutputPrefix = &v
+	return s
+}
+
 // SetPrefix sets the Prefix field's value.
 func (s *ExtendedS3DestinationConfiguration) SetPrefix(v string) *ExtendedS3DestinationConfiguration {
 	s.Prefix = &v
@@ -2980,6 +2997,11 @@ type ExtendedS3DestinationDescription struct {
 	// EncryptionConfiguration is a required field
 	EncryptionConfiguration *EncryptionConfiguration `type:"structure" required:"true"`
 
+	// A prefix that Kinesis Data Firehose evaluates and adds to failed records
+	// before writing them to S3. This prefix appears immediately following the
+	// bucket name.
+	ErrorOutputPrefix *string `type:"string"`
+
 	// The "YYYY/MM/DD/HH" time format prefix is automatically used for delivered
 	// Amazon S3 files. You can specify an extra prefix to be added in front of
 	// the time format prefix. If the prefix ends with a slash, it appears as a
@@ -3050,6 +3072,12 @@ func (s *ExtendedS3DestinationDescription) SetEncryptionConfiguration(v *Encrypt
 	return s
 }
 
+// SetErrorOutputPrefix sets the ErrorOutputPrefix field's value.
+func (s *ExtendedS3DestinationDescription) SetErrorOutputPrefix(v string) *ExtendedS3DestinationDescription {
+	s.ErrorOutputPrefix = &v
+	return s
+}
+
 // SetPrefix sets the Prefix field's value.
 func (s *ExtendedS3DestinationDescription) SetPrefix(v string) *ExtendedS3DestinationDescription {
 	s.Prefix = &v
@@ -3105,6 +3133,11 @@ type ExtendedS3DestinationUpdate struct {
 	// encryption.
 	EncryptionConfiguration *EncryptionConfiguration `type:"structure"`
 
+	// A prefix that Kinesis Data Firehose evaluates and adds to failed records
+	// before writing them to S3. This prefix appears immediately following the
+	// bucket name.
+	ErrorOutputPrefix *string `type:"string"`
+
 	// The "YYYY/MM/DD/HH" time format prefix is automatically used for delivered
 	// Amazon S3 files. You can specify an extra prefix to be added in front of
 	// the time format prefix. If the prefix ends with a slash, it appears as a
@@ -3214,6 +3247,12 @@ func (s *ExtendedS3DestinationUpdate) SetEncryptionConfiguration(v *EncryptionCo
 	return s
 }
 
+// SetErrorOutputPrefix sets the ErrorOutputPrefix field's value.
+func (s *ExtendedS3DestinationUpdate) SetErrorOutputPrefix(v string) *ExtendedS3DestinationUpdate {
+	s.ErrorOutputPrefix = &v
+	return s
+}
+
 // SetPrefix sets the Prefix field's value.
 func (s *ExtendedS3DestinationUpdate) SetPrefix(v string) *ExtendedS3DestinationUpdate {
 	s.Prefix = &v
@@ -3252,11 +3291,11 @@ func (s *ExtendedS3DestinationUpdate) SetS3BackupUpdate(v *S3DestinationUpdate)
 type HiveJsonSerDe struct {
 	_ struct{} `type:"structure"`
 
-	// Indicates how you want Kinesis Data Firehose to parse the date and time stamps
+	// Indicates how you want Kinesis Data Firehose to parse the date and timestamps
 	// that may be present in your input data JSON. To specify these format strings,
 	// follow the pattern syntax of JodaTime's DateTimeFormat format strings. For
 	// more information, see Class DateTimeFormat (https://www.joda.org/joda-time/apidocs/org/joda/time/format/DateTimeFormat.html).
-	// You can also use the special value millis to parse time stamps in epoch milliseconds.
+	// You can also use the special value millis to parse timestamps in epoch milliseconds.
 	// If you don't specify a format, Kinesis Data Firehose uses java.sql.Timestamp::valueOf
 	// by default.
 	TimestampFormats []*string `type:"list"`
@@ -3418,7 +3457,7 @@ type KinesisStreamSourceDescription struct {
 	_ struct{} `type:"structure"`
 
 	// Kinesis Data Firehose starts retrieving records from the Kinesis data stream
-	// starting with this time stamp.
+	// starting with this timestamp.
 	DeliveryStartTimestamp *time.Time `type:"timestamp"`
 
 	// The Amazon Resource Name (ARN) of the source Kinesis data stream. For more
@@ -5005,6 +5044,11 @@ type S3DestinationConfiguration struct {
 	// encryption.
 	EncryptionConfiguration *EncryptionConfiguration `type:"structure"`
 
+	// A prefix that Kinesis Data Firehose evaluates and adds to failed records
+	// before writing them to S3. This prefix appears immediately following the
+	// bucket name.
+	ErrorOutputPrefix *string `type:"string"`
+
 	// The "YYYY/MM/DD/HH" time format prefix is automatically used for delivered
 	// Amazon S3 files. You can specify an extra prefix to be added in front of
 	// the time format prefix. If the prefix ends with a slash, it appears as a
@@ -5092,6 +5136,12 @@ func (s *S3DestinationConfiguration) SetEncryptionConfiguration(v *EncryptionCon
 	return s
 }
 
+// SetErrorOutputPrefix sets the ErrorOutputPrefix field's value.
+func (s *S3DestinationConfiguration) SetErrorOutputPrefix(v string) *S3DestinationConfiguration {
+	s.ErrorOutputPrefix = &v
+	return s
+}
+
 // SetPrefix sets the Prefix field's value.
 func (s *S3DestinationConfiguration) SetPrefix(v string) *S3DestinationConfiguration {
 	s.Prefix = &v
@@ -5134,6 +5184,11 @@ type S3DestinationDescription struct {
 	// EncryptionConfiguration is a required field
 	EncryptionConfiguration *EncryptionConfiguration `type:"structure" required:"true"`
 
+	// A prefix that Kinesis Data Firehose evaluates and adds to failed records
+	// before writing them to S3. This prefix appears immediately following the
+	// bucket name.
+	ErrorOutputPrefix *string `type:"string"`
+
 	// The "YYYY/MM/DD/HH" time format prefix is automatically used for delivered
 	// Amazon S3 files. You can specify an extra prefix to be added in front of
 	// the time format prefix. If the prefix ends with a slash, it appears as a
@@ -5189,6 +5244,12 @@ func (s *S3DestinationDescription) SetEncryptionConfiguration(v *EncryptionConfi
 	return s
 }
 
+// SetErrorOutputPrefix sets the ErrorOutputPrefix field's value.
+func (s *S3DestinationDescription) SetErrorOutputPrefix(v string) *S3DestinationDescription {
+	s.ErrorOutputPrefix = &v
+	return s
+}
+
 // SetPrefix sets the Prefix field's value.
 func (s *S3DestinationDescription) SetPrefix(v string) *S3DestinationDescription {
 	s.Prefix = &v
@@ -5227,6 +5288,11 @@ type S3DestinationUpdate struct {
 	// encryption.
 	EncryptionConfiguration *EncryptionConfiguration `type:"structure"`
 
+	// A prefix that Kinesis Data Firehose evaluates and adds to failed records
+	// before writing them to S3. This prefix appears immediately following the
+	// bucket name.
+	ErrorOutputPrefix *string `type:"string"`
+
 	// The "YYYY/MM/DD/HH" time format prefix is automatically used for delivered
 	// Amazon S3 files. You can specify an extra prefix to be added in front of
 	// the time format prefix. If the prefix ends with a slash, it appears as a
@@ -5306,6 +5372,12 @@ func (s *S3DestinationUpdate) SetEncryptionConfiguration(v *EncryptionConfigurat
 	return s
 }
 
+// SetErrorOutputPrefix sets the ErrorOutputPrefix field's value.
+func (s *S3DestinationUpdate) SetErrorOutputPrefix(v string) *S3DestinationUpdate {
+	s.ErrorOutputPrefix = &v
+	return s
+}
+
 // SetPrefix sets the Prefix field's value.
 func (s *S3DestinationUpdate) SetPrefix(v string) *S3DestinationUpdate {
 	s.Prefix = &v

vendor/github.com/aws/aws-sdk-go/service/fms/api.go

@@ -338,8 +338,8 @@ func (c *FMS) DisassociateAdminAccountRequest(input *DisassociateAdminAccountInp
 // DisassociateAdminAccount API operation for Firewall Management Service.
 //
 // Disassociates the account that has been set as the AWS Firewall Manager administrator
-// account. You will need to submit an AssociateAdminAccount request to set
+// account. To set a different account as the administrator account, you must
-// a new account as the AWS Firewall administrator.
+// submit an AssociateAdminAccount request .
 //
 // Returns awserr.Error for service API and SDK errors. Use runtime type assertions
 // with awserr.Error's Code and Message methods to get detailed information about
@@ -1327,6 +1327,10 @@ func (s DeleteNotificationChannelOutput) GoString() string {
 type DeletePolicyInput struct {
 	_ struct{} `type:"structure"`
 
+	// If True, the request will also delete all web ACLs in this policy. Associated
+	// resources will no longer be protected by web ACLs in this policy.
+	DeleteAllPolicyResources *bool `type:"boolean"`
+
 	// The ID of the policy that you want to delete. PolicyId is returned by PutPolicy
 	// and by ListPolicies.
 	//
@@ -1360,6 +1364,12 @@ func (s *DeletePolicyInput) Validate() error {
 	return nil
 }
 
+// SetDeleteAllPolicyResources sets the DeleteAllPolicyResources field's value.
+func (s *DeletePolicyInput) SetDeleteAllPolicyResources(v bool) *DeletePolicyInput {
+	s.DeleteAllPolicyResources = &v
+	return s
+}
+
 // SetPolicyId sets the PolicyId field's value.
 func (s *DeletePolicyInput) SetPolicyId(v string) *DeletePolicyInput {
 	s.PolicyId = &v
@@ -1819,8 +1829,7 @@ type ListMemberAccountsInput struct {
 	// Specifies the number of member account IDs that you want AWS Firewall Manager
 	// to return for this request. If you have more IDs than the number that you
 	// specify for MaxResults, the response includes a NextToken value that you
-	// can use to get another batch of member account IDs. The maximum value for
+	// can use to get another batch of member account IDs.
-	// MaxResults is 100.
 	MaxResults *int64 `min:"1" type:"integer"`
 
 	// If you specify a value for MaxResults and you have more account IDs than
@@ -2002,8 +2011,8 @@ type Policy struct {
 	_ struct{} `type:"structure"`
 
 	// Specifies the AWS account IDs to exclude from the policy. The IncludeMap
-	// values are evaluated first, with all of the appropriate account IDs added
+	// values are evaluated first, with all the appropriate account IDs added to
-	// to the policy. Then the accounts listed in ExcludeMap are removed, resulting
+	// the policy. Then the accounts listed in ExcludeMap are removed, resulting
 	// in the final list of accounts to add to the policy.
 	//
 	// The key to the map is ACCOUNT. For example, a valid ExcludeMap would be {“ACCOUNT”
@@ -2019,9 +2028,9 @@ type Policy struct {
 	ExcludeResourceTags *bool `type:"boolean" required:"true"`
 
 	// Specifies the AWS account IDs to include in the policy. If IncludeMap is
-	// null, all accounts in the AWS Organization are included in the policy. If
+	// null, all accounts in the organization in AWS Organizations are included
-	// IncludeMap is not null, only values listed in IncludeMap will be included
+	// in the policy. If IncludeMap is not null, only values listed in IncludeMap
-	// in the policy.
+	// are included in the policy.
 	//
 	// The key to the map is ACCOUNT. For example, a valid IncludeMap would be {“ACCOUNT”
 	// : [“accountID1”, “accountID2”]}.
@@ -2201,8 +2210,8 @@ type PolicyComplianceDetail struct {
 
 	// Details about problems with dependent services, such as AWS WAF or AWS Config,
 	// that are causing a resource to be non-compliant. The details include the
-	// name of the dependent service and the error message recieved indicating the
+	// name of the dependent service and the error message received that indicates
-	// problem with the service.
+	// the problem with the service.
 	IssueInfoMap map[string]*string `type:"map"`
 
 	// The AWS account ID.
@@ -2281,8 +2290,8 @@ type PolicyComplianceStatus struct {
 
 	// Details about problems with dependent services, such as AWS WAF or AWS Config,
 	// that are causing a resource to be non-compliant. The details include the
-	// name of the dependent service and the error message recieved indicating the
+	// name of the dependent service and the error message received that indicates
-	// problem with the service.
+	// the problem with the service.
 	IssueInfoMap map[string]*string `type:"map"`
 
 	// Time stamp of the last update to the EvaluationResult objects.

vendor/github.com/aws/aws-sdk-go/service/fsx/doc.go

@@ -0,0 +1,29 @@
+// Code generated by private/model/cli/gen-api/main.go. DO NOT EDIT.
+
+// Package fsx provides the client and types for making API
+// requests to Amazon FSx.
+//
+// Amazon FSx is a fully managed service that makes it easy for storage and
+// application administrators to launch and use shared file storage.
+//
+// See https://docs.aws.amazon.com/goto/WebAPI/fsx-2018-03-01 for more information on this service.
+//
+// See fsx package documentation for more information.
+// https://docs.aws.amazon.com/sdk-for-go/api/service/fsx/
+//
+// Using the Client
+//
+// To contact Amazon FSx with the SDK use the New function to create
+// a new service client. With that client you can make API requests to the service.
+// These clients are safe to use concurrently.
+//
+// See the SDK's documentation for more information on how to use the SDK.
+// https://docs.aws.amazon.com/sdk-for-go/api/
+//
+// See aws.Config documentation for more information on configuring SDK clients.
+// https://docs.aws.amazon.com/sdk-for-go/api/aws/#Config
+//
+// See the Amazon FSx client FSx for more
+// information on creating client for this service.
+// https://docs.aws.amazon.com/sdk-for-go/api/service/fsx/#New
+package fsx

vendor/github.com/aws/aws-sdk-go/service/fsx/errors.go

@@ -0,0 +1,106 @@
+// Code generated by private/model/cli/gen-api/main.go. DO NOT EDIT.
+
+package fsx
+
+const (
+
+	// ErrCodeActiveDirectoryError for service response error code
+	// "ActiveDirectoryError".
+	//
+	// An Active Directory error.
+	ErrCodeActiveDirectoryError = "ActiveDirectoryError"
+
+	// ErrCodeBackupInProgress for service response error code
+	// "BackupInProgress".
+	//
+	// Another backup is already under way. Wait for completion before initiating
+	// additional backups of this file system.
+	ErrCodeBackupInProgress = "BackupInProgress"
+
+	// ErrCodeBackupNotFound for service response error code
+	// "BackupNotFound".
+	//
+	// No Amazon FSx backups were found based upon the supplied parameters.
+	ErrCodeBackupNotFound = "BackupNotFound"
+
+	// ErrCodeBackupRestoring for service response error code
+	// "BackupRestoring".
+	//
+	// You can't delete a backup while it's being used to restore a file system.
+	ErrCodeBackupRestoring = "BackupRestoring"
+
+	// ErrCodeBadRequest for service response error code
+	// "BadRequest".
+	//
+	// A generic error indicating a failure with a client request.
+	ErrCodeBadRequest = "BadRequest"
+
+	// ErrCodeFileSystemNotFound for service response error code
+	// "FileSystemNotFound".
+	//
+	// No Amazon FSx file systems were found based upon supplied parameters.
+	ErrCodeFileSystemNotFound = "FileSystemNotFound"
+
+	// ErrCodeIncompatibleParameterError for service response error code
+	// "IncompatibleParameterError".
+	//
+	// The error returned when a second request is received with the same client
+	// request token but different parameters settings. A client request token should
+	// always uniquely identify a single request.
+	ErrCodeIncompatibleParameterError = "IncompatibleParameterError"
+
+	// ErrCodeInternalServerError for service response error code
+	// "InternalServerError".
+	//
+	// A generic error indicating a server-side failure.
+	ErrCodeInternalServerError = "InternalServerError"
+
+	// ErrCodeInvalidImportPath for service response error code
+	// "InvalidImportPath".
+	//
+	// The path provided for data repository import isn't valid.
+	ErrCodeInvalidImportPath = "InvalidImportPath"
+
+	// ErrCodeInvalidNetworkSettings for service response error code
+	// "InvalidNetworkSettings".
+	//
+	// One or more network settings specified in the request are invalid. InvalidVpcId
+	// means that the ID passed for the virtual private cloud (VPC) is invalid.
+	// InvalidSubnetIds returns the list of IDs for subnets that are either invalid
+	// or not part of the VPC specified. InvalidSecurityGroupIds returns the list
+	// of IDs for security groups that are either invalid or not part of the VPC
+	// specified.
+	ErrCodeInvalidNetworkSettings = "InvalidNetworkSettings"
+
+	// ErrCodeMissingFileSystemConfiguration for service response error code
+	// "MissingFileSystemConfiguration".
+	//
+	// File system configuration is required for this operation.
+	ErrCodeMissingFileSystemConfiguration = "MissingFileSystemConfiguration"
+
+	// ErrCodeNotServiceResourceError for service response error code
+	// "NotServiceResourceError".
+	//
+	// The resource specified for the tagging operation is not a resource type owned
+	// by Amazon FSx. Use the API of the relevant service to perform the operation.
+	ErrCodeNotServiceResourceError = "NotServiceResourceError"
+
+	// ErrCodeResourceDoesNotSupportTagging for service response error code
+	// "ResourceDoesNotSupportTagging".
+	//
+	// The resource specified does not support tagging.
+	ErrCodeResourceDoesNotSupportTagging = "ResourceDoesNotSupportTagging"
+
+	// ErrCodeResourceNotFound for service response error code
+	// "ResourceNotFound".
+	//
+	// The resource specified by the Amazon Resource Name (ARN) can't be found.
+	ErrCodeResourceNotFound = "ResourceNotFound"
+
+	// ErrCodeServiceLimitExceeded for service response error code
+	// "ServiceLimitExceeded".
+	//
+	// An error indicating that a particular service limit was exceeded. You can
+	// increase some service limits by contacting AWS Support.
+	ErrCodeServiceLimitExceeded = "ServiceLimitExceeded"
+)

vendor/github.com/aws/aws-sdk-go/service/fsx/service.go

@@ -0,0 +1,97 @@
+// Code generated by private/model/cli/gen-api/main.go. DO NOT EDIT.
+
+package fsx
+
+import (
+	"github.com/aws/aws-sdk-go/aws"
+	"github.com/aws/aws-sdk-go/aws/client"
+	"github.com/aws/aws-sdk-go/aws/client/metadata"
+	"github.com/aws/aws-sdk-go/aws/request"
+	"github.com/aws/aws-sdk-go/aws/signer/v4"
+	"github.com/aws/aws-sdk-go/private/protocol/jsonrpc"
+)
+
+// FSx provides the API operation methods for making requests to
+// Amazon FSx. See this package's package overview docs
+// for details on the service.
+//
+// FSx methods are safe to use concurrently. It is not safe to
+// modify mutate any of the struct's properties though.
+type FSx struct {
+	*client.Client
+}
+
+// Used for custom client initialization logic
+var initClient func(*client.Client)
+
+// Used for custom request initialization logic
+var initRequest func(*request.Request)
+
+// Service information constants
+const (
+	ServiceName = "FSx" // Name of service.
+	EndpointsID = "fsx" // ID to lookup a service endpoint with.
+	ServiceID   = "FSx" // ServiceID is a unique identifer of a specific service.
+)
+
+// New creates a new instance of the FSx client with a session.
+// If additional configuration is needed for the client instance use the optional
+// aws.Config parameter to add your extra config.
+//
+// Example:
+//     // Create a FSx client from just a session.
+//     svc := fsx.New(mySession)
+//
+//     // Create a FSx client with additional configuration
+//     svc := fsx.New(mySession, aws.NewConfig().WithRegion("us-west-2"))
+func New(p client.ConfigProvider, cfgs ...*aws.Config) *FSx {
+	c := p.ClientConfig(EndpointsID, cfgs...)
+	return newClient(*c.Config, c.Handlers, c.Endpoint, c.SigningRegion, c.SigningName)
+}
+
+// newClient creates, initializes and returns a new service client instance.
+func newClient(cfg aws.Config, handlers request.Handlers, endpoint, signingRegion, signingName string) *FSx {
+	svc := &FSx{
+		Client: client.New(
+			cfg,
+			metadata.ClientInfo{
+				ServiceName:   ServiceName,
+				ServiceID:     ServiceID,
+				SigningName:   signingName,
+				SigningRegion: signingRegion,
+				Endpoint:      endpoint,
+				APIVersion:    "2018-03-01",
+				JSONVersion:   "1.1",
+				TargetPrefix:  "AWSSimbaAPIService_v20180301",
+			},
+			handlers,
+		),
+	}
+
+	// Handlers
+	svc.Handlers.Sign.PushBackNamed(v4.SignRequestHandler)
+	svc.Handlers.Build.PushBackNamed(jsonrpc.BuildHandler)
+	svc.Handlers.Unmarshal.PushBackNamed(jsonrpc.UnmarshalHandler)
+	svc.Handlers.UnmarshalMeta.PushBackNamed(jsonrpc.UnmarshalMetaHandler)
+	svc.Handlers.UnmarshalError.PushBackNamed(jsonrpc.UnmarshalErrorHandler)
+
+	// Run custom client initialization if present
+	if initClient != nil {
+		initClient(svc.Client)
+	}
+
+	return svc
+}
+
+// newRequest creates a new request for a FSx operation and runs any
+// custom request initialization.
+func (c *FSx) newRequest(op *request.Operation, params, data interface{}) *request.Request {
+	req := c.NewRequest(op, params, data)
+
+	// Run custom request initialization if present
+	if initRequest != nil {
+		initRequest(req)
+	}
+
+	return req
+}

vendor/github.com/aws/aws-sdk-go/service/globalaccelerator/doc.go

@@ -0,0 +1,94 @@
+// Code generated by private/model/cli/gen-api/main.go. DO NOT EDIT.
+
+// Package globalaccelerator provides the client and types for making API
+// requests to AWS Global Accelerator.
+//
+// This is the AWS Global Accelerator API Reference. This guide is for developers
+// who need detailed information about AWS Global Accelerator API actions, data
+// types, and errors. For more information about Global Accelerator features,
+// see the AWS Global Accelerator Developer Guide (https://docs.aws.amazon.com/global-accelerator/latest/dg/Welcome.html).
+//
+// AWS Global Accelerator is a network layer service in which you create accelerators
+// to improve availability and performance for internet applications used by
+// a global audience.
+//
+// Global Accelerator provides you with static IP addresses that you associate
+// with your accelerator. These IP addresses are anycast from the AWS edge network
+// and distribute incoming application traffic across multiple endpoint resources
+// in multiple AWS Regions, which increases the availability of your applications.
+// Endpoints can be Elastic IP addresses, Network Load Balancers, and Application
+// Load Balancers that are located in one AWS Region or multiple Regions.
+//
+// Global Accelerator uses the AWS global network to route traffic to the optimal
+// regional endpoint based on health, client location, and policies that you
+// configure. The service reacts instantly to changes in health or configuration
+// to ensure that internet traffic from clients is directed to only healthy
+// endpoints.
+//
+// Global Accelerator includes components that work together to help you improve
+// performance and availability for your applications:
+//
+// Static IP addressAWS Global Accelerator provides you with a set of static
+// IP addresses which are anycast from the AWS edge network and serve as the
+// single fixed entry points for your clients. If you already have Elastic Load
+// Balancing or Elastic IP address resources set up for your applications, you
+// can easily add those to Global Accelerator to allow the resources to be accessed
+// by a Global Accelerator static IP address.
+//
+// AcceleratorAn accelerator directs traffic to optimal endpoints over the AWS
+// global network to improve availability and performance for your internet
+// applications that have a global audience. Each accelerator includes one or
+// more listeners.
+//
+// Network zoneA network zone services the static IP addresses for your accelerator
+// from a unique IP subnet. Similar to an AWS Availability Zone, a network zone
+// is an isolated unit with its own set of physical infrastructure. When you
+// configure an accelerator, Global Accelerator allocates two IPv4 addresses
+// for it. If one IP address from a network zone becomes unavailable due to
+// IP address blocking by certain client networks, or network disruptions, then
+// client applications can retry on the healthy static IP address from the other
+// isolated network zone.
+//
+// ListenerA listener processes inbound connections from clients to Global Accelerator,
+// based on the protocol and port that you configure. Each listener has one
+// or more endpoint groups associated with it, and traffic is forwarded to endpoints
+// in one of the groups. You associate endpoint groups with listeners by specifying
+// the Regions that you want to distribute traffic to. Traffic is distributed
+// to optimal endpoints within the endpoint groups associated with a listener.
+//
+// Endpoint groupEach endpoint group is associated with a specific AWS Region.
+// Endpoint groups include one or more endpoints in the Region. You can increase
+// or reduce the percentage of traffic that would be otherwise directed to an
+// endpoint group by adjusting a setting called a traffic dial. The traffic
+// dial lets you easily do performance testing or blue/green deployment testing
+// for new releases across different AWS Regions, for example.
+//
+// EndpointAn endpoint is an Elastic IP address, Network Load Balancer, or Application
+// Load Balancer. Traffic is routed to endpoints based on several factors, including
+// the geo-proximity to the user, the health of the endpoint, and the configuration
+// options that you choose, such as endpoint weights. For each endpoint, you
+// can configure weights, which are numbers that you can use to specify the
+// proportion of traffic to route to each one. This can be useful, for example,
+// to do performance testing within a Region.
+//
+// See https://docs.aws.amazon.com/goto/WebAPI/globalaccelerator-2018-08-08 for more information on this service.
+//
+// See globalaccelerator package documentation for more information.
+// https://docs.aws.amazon.com/sdk-for-go/api/service/globalaccelerator/
+//
+// Using the Client
+//
+// To contact AWS Global Accelerator with the SDK use the New function to create
+// a new service client. With that client you can make API requests to the service.
+// These clients are safe to use concurrently.
+//
+// See the SDK's documentation for more information on how to use the SDK.
+// https://docs.aws.amazon.com/sdk-for-go/api/
+//
+// See aws.Config documentation for more information on configuring SDK clients.
+// https://docs.aws.amazon.com/sdk-for-go/api/aws/#Config
+//
+// See the AWS Global Accelerator client GlobalAccelerator for more
+// information on creating client for this service.
+// https://docs.aws.amazon.com/sdk-for-go/api/service/globalaccelerator/#New
+package globalaccelerator

vendor/github.com/aws/aws-sdk-go/service/globalaccelerator/errors.go

@@ -0,0 +1,84 @@
+// Code generated by private/model/cli/gen-api/main.go. DO NOT EDIT.
+
+package globalaccelerator
+
+const (
+
+	// ErrCodeAcceleratorNotDisabledException for service response error code
+	// "AcceleratorNotDisabledException".
+	//
+	// The accelerator that you specified could not be disabled.
+	ErrCodeAcceleratorNotDisabledException = "AcceleratorNotDisabledException"
+
+	// ErrCodeAcceleratorNotFoundException for service response error code
+	// "AcceleratorNotFoundException".
+	//
+	// The accelerator that you specified doesn't exist.
+	ErrCodeAcceleratorNotFoundException = "AcceleratorNotFoundException"
+
+	// ErrCodeAssociatedEndpointGroupFoundException for service response error code
+	// "AssociatedEndpointGroupFoundException".
+	//
+	// The listener that you specified has an endpoint group associated with it.
+	// You must remove all dependent resources from a listener before you can delete
+	// it.
+	ErrCodeAssociatedEndpointGroupFoundException = "AssociatedEndpointGroupFoundException"
+
+	// ErrCodeAssociatedListenerFoundException for service response error code
+	// "AssociatedListenerFoundException".
+	//
+	// The accelerator that you specified has a listener associated with it. You
+	// must remove all dependent resources from an accelerator before you can delete
+	// it.
+	ErrCodeAssociatedListenerFoundException = "AssociatedListenerFoundException"
+
+	// ErrCodeEndpointGroupAlreadyExistsException for service response error code
+	// "EndpointGroupAlreadyExistsException".
+	//
+	// The endpoint group that you specified already exists.
+	ErrCodeEndpointGroupAlreadyExistsException = "EndpointGroupAlreadyExistsException"
+
+	// ErrCodeEndpointGroupNotFoundException for service response error code
+	// "EndpointGroupNotFoundException".
+	//
+	// The endpoint group that you specified doesn't exist.
+	ErrCodeEndpointGroupNotFoundException = "EndpointGroupNotFoundException"
+
+	// ErrCodeInternalServiceErrorException for service response error code
+	// "InternalServiceErrorException".
+	//
+	// There was an internal error for AWS Global Accelerator.
+	ErrCodeInternalServiceErrorException = "InternalServiceErrorException"
+
+	// ErrCodeInvalidArgumentException for service response error code
+	// "InvalidArgumentException".
+	//
+	// An argument that you specified is invalid.
+	ErrCodeInvalidArgumentException = "InvalidArgumentException"
+
+	// ErrCodeInvalidNextTokenException for service response error code
+	// "InvalidNextTokenException".
+	//
+	// There isn't another item to return.
+	ErrCodeInvalidNextTokenException = "InvalidNextTokenException"
+
+	// ErrCodeInvalidPortRangeException for service response error code
+	// "InvalidPortRangeException".
+	//
+	// The port numbers that you specified are not valid numbers or are not unique
+	// for this accelerator.
+	ErrCodeInvalidPortRangeException = "InvalidPortRangeException"
+
+	// ErrCodeLimitExceededException for service response error code
+	// "LimitExceededException".
+	//
+	// Processing your request would cause you to exceed an AWS Global Accelerator
+	// limit.
+	ErrCodeLimitExceededException = "LimitExceededException"
+
+	// ErrCodeListenerNotFoundException for service response error code
+	// "ListenerNotFoundException".
+	//
+	// The listener that you specified doesn't exist.
+	ErrCodeListenerNotFoundException = "ListenerNotFoundException"
+)

vendor/github.com/aws/aws-sdk-go/service/globalaccelerator/service.go

@@ -0,0 +1,100 @@
+// Code generated by private/model/cli/gen-api/main.go. DO NOT EDIT.
+
+package globalaccelerator
+
+import (
+	"github.com/aws/aws-sdk-go/aws"
+	"github.com/aws/aws-sdk-go/aws/client"
+	"github.com/aws/aws-sdk-go/aws/client/metadata"
+	"github.com/aws/aws-sdk-go/aws/request"
+	"github.com/aws/aws-sdk-go/aws/signer/v4"
+	"github.com/aws/aws-sdk-go/private/protocol/jsonrpc"
+)
+
+// GlobalAccelerator provides the API operation methods for making requests to
+// AWS Global Accelerator. See this package's package overview docs
+// for details on the service.
+//
+// GlobalAccelerator methods are safe to use concurrently. It is not safe to
+// modify mutate any of the struct's properties though.
+type GlobalAccelerator struct {
+	*client.Client
+}
+
+// Used for custom client initialization logic
+var initClient func(*client.Client)
+
+// Used for custom request initialization logic
+var initRequest func(*request.Request)
+
+// Service information constants
+const (
+	ServiceName = "Global Accelerator" // Name of service.
+	EndpointsID = "globalaccelerator"  // ID to lookup a service endpoint with.
+	ServiceID   = "Global Accelerator" // ServiceID is a unique identifer of a specific service.
+)
+
+// New creates a new instance of the GlobalAccelerator client with a session.
+// If additional configuration is needed for the client instance use the optional
+// aws.Config parameter to add your extra config.
+//
+// Example:
+//     // Create a GlobalAccelerator client from just a session.
+//     svc := globalaccelerator.New(mySession)
+//
+//     // Create a GlobalAccelerator client with additional configuration
+//     svc := globalaccelerator.New(mySession, aws.NewConfig().WithRegion("us-west-2"))
+func New(p client.ConfigProvider, cfgs ...*aws.Config) *GlobalAccelerator {
+	c := p.ClientConfig(EndpointsID, cfgs...)
+	if c.SigningNameDerived || len(c.SigningName) == 0 {
+		c.SigningName = "globalaccelerator"
+	}
+	return newClient(*c.Config, c.Handlers, c.Endpoint, c.SigningRegion, c.SigningName)
+}
+
+// newClient creates, initializes and returns a new service client instance.
+func newClient(cfg aws.Config, handlers request.Handlers, endpoint, signingRegion, signingName string) *GlobalAccelerator {
+	svc := &GlobalAccelerator{
+		Client: client.New(
+			cfg,
+			metadata.ClientInfo{
+				ServiceName:   ServiceName,
+				ServiceID:     ServiceID,
+				SigningName:   signingName,
+				SigningRegion: signingRegion,
+				Endpoint:      endpoint,
+				APIVersion:    "2018-08-08",
+				JSONVersion:   "1.1",
+				TargetPrefix:  "GlobalAccelerator_V20180706",
+			},
+			handlers,
+		),
+	}
+
+	// Handlers
+	svc.Handlers.Sign.PushBackNamed(v4.SignRequestHandler)
+	svc.Handlers.Build.PushBackNamed(jsonrpc.BuildHandler)
+	svc.Handlers.Unmarshal.PushBackNamed(jsonrpc.UnmarshalHandler)
+	svc.Handlers.UnmarshalMeta.PushBackNamed(jsonrpc.UnmarshalMetaHandler)
+	svc.Handlers.UnmarshalError.PushBackNamed(jsonrpc.UnmarshalErrorHandler)
+
+	// Run custom client initialization if present
+	if initClient != nil {
+		initClient(svc.Client)
+	}
+
+	return svc
+}
+
+// newRequest creates a new request for a GlobalAccelerator operation and runs any
+// custom request initialization.
+func (c *GlobalAccelerator) newRequest(op *request.Operation, params, data interface{}) *request.Request {
+	req := c.NewRequest(op, params, data)
+
+	// Run custom request initialization if present
+	if initRequest != nil {
+		initRequest(req)
+	}
+
+	return req
+}

vendor/github.com/aws/aws-sdk-go/service/glue/api.go

@@ -11396,12 +11396,16 @@ func (s *CreateGrokClassifierRequest) SetName(v string) *CreateGrokClassifierReq
 type CreateJobInput struct {
 	_ struct{} `type:"structure"`
 
+	// This parameter is deprecated. Use MaxCapacity instead.
+	//
 	// The number of AWS Glue data processing units (DPUs) to allocate to this Job.
 	// From 2 to 100 DPUs can be allocated; the default is 10. A DPU is a relative
 	// measure of processing power that consists of 4 vCPUs of compute capacity
 	// and 16 GB of memory. For more information, see the AWS Glue pricing page
 	// (https://aws.amazon.com/glue/pricing/).
-	AllocatedCapacity *int64 `type:"integer"`
+	//
+	// Deprecated: This property is deprecated, use MaxCapacity instead.
+	AllocatedCapacity *int64 `deprecated:"true" type:"integer"`
 
 	// The JobCommand that executes this job.
 	//
@@ -11435,6 +11439,11 @@ type CreateJobInput struct {
 	// This field is reserved for future use.
 	LogUri *string `type:"string"`
 
+	// AWS Glue supports running jobs on a JobCommand.Name="pythonshell" with allocated
+	// processing as low as 0.0625 DPU, which can be specified using MaxCapacity.
+	// Glue ETL jobs running in any other way cannot have fractional DPU allocations.
+	MaxCapacity *float64 `type:"double"`
+
 	// The maximum number of times to retry this job if it fails.
 	MaxRetries *int64 `type:"integer"`
 
@@ -11545,6 +11554,12 @@ func (s *CreateJobInput) SetLogUri(v string) *CreateJobInput {
 	return s
 }
 
+// SetMaxCapacity sets the MaxCapacity field's value.
+func (s *CreateJobInput) SetMaxCapacity(v float64) *CreateJobInput {
+	s.MaxCapacity = &v
+	return s
+}
+
 // SetMaxRetries sets the MaxRetries field's value.
 func (s *CreateJobInput) SetMaxRetries(v int64) *CreateJobInput {
 	s.MaxRetries = &v
@@ -17086,12 +17101,16 @@ func (s *JdbcTarget) SetPath(v string) *JdbcTarget {
 type Job struct {
 	_ struct{} `type:"structure"`
 
+	// This field is deprecated, use MaxCapacity instead.
+	//
 	// The number of AWS Glue data processing units (DPUs) allocated to runs of
 	// this job. From 2 to 100 DPUs can be allocated; the default is 10. A DPU is
 	// a relative measure of processing power that consists of 4 vCPUs of compute
 	// capacity and 16 GB of memory. For more information, see the AWS Glue pricing
 	// page (https://aws.amazon.com/glue/pricing/).
-	AllocatedCapacity *int64 `type:"integer"`
+	//
+	// Deprecated: This property is deprecated, use MaxCapacity instead.
+	AllocatedCapacity *int64 `deprecated:"true" type:"integer"`
 
 	// The JobCommand that executes this job.
 	Command *JobCommand `type:"structure"`
@@ -17129,6 +17148,11 @@ type Job struct {
 	// This field is reserved for future use.
 	LogUri *string `type:"string"`
 
+	// AWS Glue supports running jobs on a JobCommand.Name="pythonshell" with allocated
+	// processing as low as 0.0625 DPU, which can be specified using MaxCapacity.
+	// Glue ETL jobs running in any other way cannot have fractional DPU allocations.
+	MaxCapacity *float64 `type:"double"`
+
 	// The maximum number of times to retry this job after a JobRun fails.
 	MaxRetries *int64 `type:"integer"`
 
@@ -17214,6 +17238,12 @@ func (s *Job) SetLogUri(v string) *Job {
 	return s
 }
 
+// SetMaxCapacity sets the MaxCapacity field's value.
+func (s *Job) SetMaxCapacity(v float64) *Job {
+	s.MaxCapacity = &v
+	return s
+}
+
 // SetMaxRetries sets the MaxRetries field's value.
 func (s *Job) SetMaxRetries(v int64) *Job {
 	s.MaxRetries = &v
@@ -17347,7 +17377,8 @@ func (s *JobBookmarksEncryption) SetKmsKeyArn(v string) *JobBookmarksEncryption
 type JobCommand struct {
 	_ struct{} `type:"structure"`
 
-	// The name of the job command: this must be glueetl.
+	// The name of the job command: this must be glueetl, for an Apache Spark ETL
+	// job, or pythonshell, for a Python shell job.
 	Name *string `type:"string"`
 
 	// Specifies the S3 path to a script that executes a job (required).
@@ -17380,12 +17411,16 @@ func (s *JobCommand) SetScriptLocation(v string) *JobCommand {
 type JobRun struct {
 	_ struct{} `type:"structure"`
 
+	// This field is deprecated, use MaxCapacity instead.
+	//
 	// The number of AWS Glue data processing units (DPUs) allocated to this JobRun.
 	// From 2 to 100 DPUs can be allocated; the default is 10. A DPU is a relative
 	// measure of processing power that consists of 4 vCPUs of compute capacity
 	// and 16 GB of memory. For more information, see the AWS Glue pricing page
 	// (https://aws.amazon.com/glue/pricing/).
-	AllocatedCapacity *int64 `type:"integer"`
+	//
+	// Deprecated: This property is deprecated, use MaxCapacity instead.
+	AllocatedCapacity *int64 `deprecated:"true" type:"integer"`
 
 	// The job arguments associated with this run. These override equivalent default
 	// arguments set for the job.
@@ -17433,6 +17468,11 @@ type JobRun struct {
 	// then that security configuration will be used to encrypt the log group.
 	LogGroupName *string `type:"string"`
 
+	// AWS Glue supports running jobs on a JobCommand.Name="pythonshell" with allocated
+	// processing as low as 0.0625 DPU, which can be specified using MaxCapacity.
+	// Glue ETL jobs running in any other way cannot have fractional DPU allocations.
+	MaxCapacity *float64 `type:"double"`
+
 	// Specifies configuration properties of a job run notification.
 	NotificationProperty *NotificationProperty `type:"structure"`
 
@@ -17536,6 +17576,12 @@ func (s *JobRun) SetLogGroupName(v string) *JobRun {
 	return s
 }
 
+// SetMaxCapacity sets the MaxCapacity field's value.
+func (s *JobRun) SetMaxCapacity(v float64) *JobRun {
+	s.MaxCapacity = &v
+	return s
+}
+
 // SetNotificationProperty sets the NotificationProperty field's value.
 func (s *JobRun) SetNotificationProperty(v *NotificationProperty) *JobRun {
 	s.NotificationProperty = v
@@ -17583,12 +17629,16 @@ func (s *JobRun) SetTriggerName(v string) *JobRun {
 type JobUpdate struct {
 	_ struct{} `type:"structure"`
 
+	// This field is deprecated. Use MaxCapacity instead.
+	//
 	// The number of AWS Glue data processing units (DPUs) to allocate to this Job.
 	// From 2 to 100 DPUs can be allocated; the default is 10. A DPU is a relative
 	// measure of processing power that consists of 4 vCPUs of compute capacity
 	// and 16 GB of memory. For more information, see the AWS Glue pricing page
 	// (https://aws.amazon.com/glue/pricing/).
-	AllocatedCapacity *int64 `type:"integer"`
+	//
+	// Deprecated: This property is deprecated, use MaxCapacity instead.
+	AllocatedCapacity *int64 `deprecated:"true" type:"integer"`
 
 	// The JobCommand that executes this job (required).
 	Command *JobCommand `type:"structure"`
@@ -17620,6 +17670,11 @@ type JobUpdate struct {
 	// This field is reserved for future use.
 	LogUri *string `type:"string"`
 
+	// AWS Glue supports running jobs on a JobCommand.Name="pythonshell" with allocated
+	// processing as low as 0.0625 DPU, which can be specified using MaxCapacity.
+	// Glue ETL jobs running in any other way cannot have fractional DPU allocations.
+	MaxCapacity *float64 `type:"double"`
+
 	// The maximum number of times to retry this job if it fails.
 	MaxRetries *int64 `type:"integer"`
 
@@ -17711,6 +17766,12 @@ func (s *JobUpdate) SetLogUri(v string) *JobUpdate {
 	return s
 }
 
+// SetMaxCapacity sets the MaxCapacity field's value.
+func (s *JobUpdate) SetMaxCapacity(v float64) *JobUpdate {
+	s.MaxCapacity = &v
+	return s
+}
+
 // SetMaxRetries sets the MaxRetries field's value.
 func (s *JobUpdate) SetMaxRetries(v int64) *JobUpdate {
 	s.MaxRetries = &v
@@ -19223,12 +19284,16 @@ func (s StartCrawlerScheduleOutput) GoString() string {
 type StartJobRunInput struct {
 	_ struct{} `type:"structure"`
 
+	// This field is deprecated, use MaxCapacity instead.
+	//
 	// The number of AWS Glue data processing units (DPUs) to allocate to this JobRun.
 	// From 2 to 100 DPUs can be allocated; the default is 10. A DPU is a relative
 	// measure of processing power that consists of 4 vCPUs of compute capacity
 	// and 16 GB of memory. For more information, see the AWS Glue pricing page
 	// (https://aws.amazon.com/glue/pricing/).
-	AllocatedCapacity *int64 `type:"integer"`
+	//
+	// Deprecated: This property is deprecated, use MaxCapacity instead.
+	AllocatedCapacity *int64 `deprecated:"true" type:"integer"`
 
 	// The job arguments specifically for this run. They override the equivalent
 	// default arguments set for in the job definition itself.
@@ -19253,6 +19318,11 @@ type StartJobRunInput struct {
 	// The ID of a previous JobRun to retry.
 	JobRunId *string `min:"1" type:"string"`
 
+	// AWS Glue supports running jobs on a JobCommand.Name="pythonshell" with allocated
+	// processing as low as 0.0625 DPU, which can be specified using MaxCapacity.
+	// Glue ETL jobs running in any other way cannot have fractional DPU allocations.
+	MaxCapacity *float64 `type:"double"`
+
 	// Specifies configuration properties of a job run notification.
 	NotificationProperty *NotificationProperty `type:"structure"`
 
@@ -19331,6 +19401,12 @@ func (s *StartJobRunInput) SetJobRunId(v string) *StartJobRunInput {
 	return s
 }
 
+// SetMaxCapacity sets the MaxCapacity field's value.
+func (s *StartJobRunInput) SetMaxCapacity(v float64) *StartJobRunInput {
+	s.MaxCapacity = &v
+	return s
+}
+
 // SetNotificationProperty sets the NotificationProperty field's value.
 func (s *StartJobRunInput) SetNotificationProperty(v *NotificationProperty) *StartJobRunInput {
 	s.NotificationProperty = v

vendor/github.com/aws/aws-sdk-go/service/iot/api.go

@@ -20126,6 +20126,15 @@ type CreateTopicRuleInput struct {
 	// RuleName is a required field
 	RuleName *string `location:"uri" locationName:"ruleName" min:"1" type:"string" required:"true"`
 
+	// Metadata which can be used to manage the topic rule.
+	//
+	// For URI Request parameters use format: ...key1=value1&key2=value2...
+	//
+	// For the CLI command-line parameter use format: --tags "key1=value1&key2=value2..."
+	//
+	// For the cli-input-json file use format: "tags": "key1=value1&key2=value2..."
+	Tags *string `location:"header" locationName:"x-amz-tagging" type:"string"`
+
 	// The rule payload.
 	//
 	// TopicRulePayload is a required field
@@ -20172,6 +20181,12 @@ func (s *CreateTopicRuleInput) SetRuleName(v string) *CreateTopicRuleInput {
 	return s
 }
 
+// SetTags sets the Tags field's value.
+func (s *CreateTopicRuleInput) SetTags(v string) *CreateTopicRuleInput {
+	s.Tags = &v
+	return s
+}
+
 // SetTopicRulePayload sets the TopicRulePayload field's value.
 func (s *CreateTopicRuleInput) SetTopicRulePayload(v *TopicRulePayload) *CreateTopicRuleInput {
 	s.TopicRulePayload = v
@@ -24007,10 +24022,14 @@ type DynamoDBv2Action struct {
 	//
 	// Each attribute in the message payload will be written to a separate column
 	// in the DynamoDB database.
-	PutItem *PutItemInput `locationName:"putItem" type:"structure"`
+	//
+	// PutItem is a required field
+	PutItem *PutItemInput `locationName:"putItem" type:"structure" required:"true"`
 
 	// The ARN of the IAM role that grants access to the DynamoDB table.
-	RoleArn *string `locationName:"roleArn" type:"string"`
+	//
+	// RoleArn is a required field
+	RoleArn *string `locationName:"roleArn" type:"string" required:"true"`
 }
 
 // String returns the string representation
@@ -24026,6 +24045,12 @@ func (s DynamoDBv2Action) GoString() string {
 // Validate inspects the fields of the type to determine if they are valid.
 func (s *DynamoDBv2Action) Validate() error {
 	invalidParams := request.ErrInvalidParams{Context: "DynamoDBv2Action"}
+	if s.PutItem == nil {
+		invalidParams.Add(request.NewErrParamRequired("PutItem"))
+	}
+	if s.RoleArn == nil {
+		invalidParams.Add(request.NewErrParamRequired("RoleArn"))
+	}
 	if s.PutItem != nil {
 		if err := s.PutItem.Validate(); err != nil {
 			invalidParams.AddNested("PutItem", err.(request.ErrInvalidParams))

vendor/github.com/aws/aws-sdk-go/service/kafka/doc.go

@@ -0,0 +1,28 @@
+// Code generated by private/model/cli/gen-api/main.go. DO NOT EDIT.
+
+// Package kafka provides the client and types for making API
+// requests to Managed Streaming for Kafka.
+//
+// The operations for managing an Amazon MSK cluster.
+//
+// See https://docs.aws.amazon.com/goto/WebAPI/kafka-2018-11-14 for more information on this service.
+//
+// See kafka package documentation for more information.
+// https://docs.aws.amazon.com/sdk-for-go/api/service/kafka/
+//
+// Using the Client
+//
+// To contact Managed Streaming for Kafka with the SDK use the New function to create
+// a new service client. With that client you can make API requests to the service.
+// These clients are safe to use concurrently.
+//
+// See the SDK's documentation for more information on how to use the SDK.
+// https://docs.aws.amazon.com/sdk-for-go/api/
+//
+// See aws.Config documentation for more information on configuring SDK clients.
+// https://docs.aws.amazon.com/sdk-for-go/api/aws/#Config
+//
+// See the Managed Streaming for Kafka client Kafka for more
+// information on creating client for this service.
+// https://docs.aws.amazon.com/sdk-for-go/api/service/kafka/#New
+package kafka

vendor/github.com/aws/aws-sdk-go/service/kafka/errors.go

@@ -0,0 +1,54 @@
+// Code generated by private/model/cli/gen-api/main.go. DO NOT EDIT.
+
+package kafka
+
+const (
+
+	// ErrCodeBadRequestException for service response error code
+	// "BadRequestException".
+	//
+	// Returns information about an error.
+	ErrCodeBadRequestException = "BadRequestException"
+
+	// ErrCodeConflictException for service response error code
+	// "ConflictException".
+	//
+	// Returns information about an error.
+	ErrCodeConflictException = "ConflictException"
+
+	// ErrCodeForbiddenException for service response error code
+	// "ForbiddenException".
+	//
+	// Returns information about an error.
+	ErrCodeForbiddenException = "ForbiddenException"
+
+	// ErrCodeInternalServerErrorException for service response error code
+	// "InternalServerErrorException".
+	//
+	// Returns information about an error.
+	ErrCodeInternalServerErrorException = "InternalServerErrorException"
+
+	// ErrCodeNotFoundException for service response error code
+	// "NotFoundException".
+	//
+	// Returns information about an error.
+	ErrCodeNotFoundException = "NotFoundException"
+
+	// ErrCodeServiceUnavailableException for service response error code
+	// "ServiceUnavailableException".
+	//
+	// Returns information about an error.
+	ErrCodeServiceUnavailableException = "ServiceUnavailableException"
+
+	// ErrCodeTooManyRequestsException for service response error code
+	// "TooManyRequestsException".
+	//
+	// Returns information about an error.
+	ErrCodeTooManyRequestsException = "TooManyRequestsException"
+
+	// ErrCodeUnauthorizedException for service response error code
+	// "UnauthorizedException".
+	//
+	// Returns information about an error.
+	ErrCodeUnauthorizedException = "UnauthorizedException"
+)

vendor/github.com/aws/aws-sdk-go/service/kafka/service.go

@@ -0,0 +1,99 @@
+// Code generated by private/model/cli/gen-api/main.go. DO NOT EDIT.
+
+package kafka
+
+import (
+	"github.com/aws/aws-sdk-go/aws"
+	"github.com/aws/aws-sdk-go/aws/client"
+	"github.com/aws/aws-sdk-go/aws/client/metadata"
+	"github.com/aws/aws-sdk-go/aws/request"
+	"github.com/aws/aws-sdk-go/aws/signer/v4"
+	"github.com/aws/aws-sdk-go/private/protocol/restjson"
+)
+
+// Kafka provides the API operation methods for making requests to
+// Managed Streaming for Kafka. See this package's package overview docs
+// for details on the service.
+//
+// Kafka methods are safe to use concurrently. It is not safe to
+// modify mutate any of the struct's properties though.
+type Kafka struct {
+	*client.Client
+}
+
+// Used for custom client initialization logic
+var initClient func(*client.Client)
+
+// Used for custom request initialization logic
+var initRequest func(*request.Request)
+
+// Service information constants
+const (
+	ServiceName = "Kafka" // Name of service.
+	EndpointsID = "kafka" // ID to lookup a service endpoint with.
+	ServiceID   = "Kafka" // ServiceID is a unique identifer of a specific service.
+)
+
+// New creates a new instance of the Kafka client with a session.
+// If additional configuration is needed for the client instance use the optional
+// aws.Config parameter to add your extra config.
+//
+// Example:
+//     // Create a Kafka client from just a session.
+//     svc := kafka.New(mySession)
+//
+//     // Create a Kafka client with additional configuration
+//     svc := kafka.New(mySession, aws.NewConfig().WithRegion("us-west-2"))
+func New(p client.ConfigProvider, cfgs ...*aws.Config) *Kafka {
+	c := p.ClientConfig(EndpointsID, cfgs...)
+	if c.SigningNameDerived || len(c.SigningName) == 0 {
+		c.SigningName = "kafka"
+	}
+	return newClient(*c.Config, c.Handlers, c.Endpoint, c.SigningRegion, c.SigningName)
+}
+
+// newClient creates, initializes and returns a new service client instance.
+func newClient(cfg aws.Config, handlers request.Handlers, endpoint, signingRegion, signingName string) *Kafka {
+	svc := &Kafka{
+		Client: client.New(
+			cfg,
+			metadata.ClientInfo{
+				ServiceName:   ServiceName,
+				ServiceID:     ServiceID,
+				SigningName:   signingName,
+				SigningRegion: signingRegion,
+				Endpoint:      endpoint,
+				APIVersion:    "2018-11-14",
+				JSONVersion:   "1.1",
+			},
+			handlers,
+		),
+	}
+
+	// Handlers
+	svc.Handlers.Sign.PushBackNamed(v4.SignRequestHandler)
+	svc.Handlers.Build.PushBackNamed(restjson.BuildHandler)
+	svc.Handlers.Unmarshal.PushBackNamed(restjson.UnmarshalHandler)
+	svc.Handlers.UnmarshalMeta.PushBackNamed(restjson.UnmarshalMetaHandler)
+	svc.Handlers.UnmarshalError.PushBackNamed(restjson.UnmarshalErrorHandler)
+
+	// Run custom client initialization if present
+	if initClient != nil {
+		initClient(svc.Client)
+	}
+
+	return svc
+}
+
+// newRequest creates a new request for a Kafka operation and runs any
+// custom request initialization.
+func (c *Kafka) newRequest(op *request.Operation, params, data interface{}) *request.Request {
+	req := c.NewRequest(op, params, data)
+
+	// Run custom request initialization if present
+	if initRequest != nil {
+		initRequest(req)
+	}
+
+	return req
+}