Adds support for cross account investigations for CloudWatch investigations AI Operations (AIOps).

Author: aws-sdk-dotnet-automation

generator/ServiceModels/aiops/aiops-2018-05-10.api.json

@@ -288,7 +288,8 @@
         "tags":{"shape":"Tags"},
         "tagKeyBoundaries":{"shape":"TagKeyBoundaries"},
         "chatbotNotificationChannel":{"shape":"ChatbotNotificationChannel"},
-        "isCloudTrailEventHistoryEnabled":{"shape":"Boolean"}
+        "isCloudTrailEventHistoryEnabled":{"shape":"Boolean"},
+        "crossAccountConfigurations":{"shape":"CrossAccountConfigurations"}
       }
     },
     "CreateInvestigationGroupOutput":{
@@ -297,6 +298,18 @@
         "arn":{"shape":"InvestigationGroupArn"}
       }
     },
+    "CrossAccountConfiguration":{
+      "type":"structure",
+      "members":{
+        "sourceRoleArn":{"shape":"RoleArn"}
+      }
+    },
+    "CrossAccountConfigurations":{
+      "type":"list",
+      "member":{"shape":"CrossAccountConfiguration"},
+      "max":25,
+      "min":0
+    },
     "DeleteInvestigationGroupPolicyOutput":{
       "type":"structure",
       "members":{
@@ -392,7 +405,8 @@
         "retentionInDays":{"shape":"Retention"},
         "chatbotNotificationChannel":{"shape":"ChatbotNotificationChannel"},
         "tagKeyBoundaries":{"shape":"TagKeyBoundaries"},
-        "isCloudTrailEventHistoryEnabled":{"shape":"Boolean"}
+        "isCloudTrailEventHistoryEnabled":{"shape":"Boolean"},
+        "crossAccountConfigurations":{"shape":"CrossAccountConfigurations"}
       }
     },
     "IdentifierStringWithPatternAndLengthLimits":{
@@ -665,7 +679,8 @@
         "encryptionConfiguration":{"shape":"EncryptionConfiguration"},
         "tagKeyBoundaries":{"shape":"TagKeyBoundaries"},
         "chatbotNotificationChannel":{"shape":"ChatbotNotificationChannel"},
-        "isCloudTrailEventHistoryEnabled":{"shape":"Boolean"}
+        "isCloudTrailEventHistoryEnabled":{"shape":"Boolean"},
+        "crossAccountConfigurations":{"shape":"CrossAccountConfigurations"}
       }
     },
     "ValidationException":{

generator/ServiceModels/aiops/aiops-2018-05-10.docs.json

@@ -119,6 +119,12 @@
     <max>2048</max>
     <pattern>arn:.*</pattern>
   </property-value-rule>
+  <property-value-rule>
+    <property>Amazon.AIOps.Model.CrossAccountConfiguration.SourceRoleArn</property>
+    <min>20</min>
+    <max>2048</max>
+    <pattern>arn:.*</pattern>
+  </property-value-rule>
   <property-value-rule>
     <property>Amazon.AIOps.Model.EncryptionConfiguration.KmsKeyId</property>
     <min>1</min>

generator/ServiceModels/aiops/aiops-2018-05-10.normal.json

@@ -60,8 +60,8 @@ namespace Amazon.AIOps.Model
     /// </para>
     ///  
     /// <para>
-    /// To create an investigation group and set up Amazon Q Developer operational investigations,
-    /// you must be signed in to an IAM principal that has the either the <c>AIOpsConsoleAdminPolicy</c>
+    /// To create an investigation group and set up CloudWatch investigations, you must be
+    /// signed in to an IAM principal that has the either the <c>AIOpsConsoleAdminPolicy</c>
     /// or the <c>AdministratorAccess</c> IAM policy attached, or to an account that has similar
     /// permissions.
     /// </para>
@@ -74,14 +74,15 @@ namespace Amazon.AIOps.Model
     /// </para>
     ///  
     /// <para>
-    /// For more information about configuring CloudWatch alarms to work with Amazon Q Developer
-    /// operational investigations, see 
+    /// For more information about configuring CloudWatch alarms to work with CloudWatch investigations,
+    /// see 
     /// </para>
     ///  </important>
     /// </summary>
     public partial class CreateInvestigationGroupRequest : AmazonAIOpsRequest
     {
         private Dictionary<string, List<string>> _chatbotNotificationChannel = AWSConfigs.InitializeCollections ? new Dictionary<string, List<string>>() : null;
+        private List<CrossAccountConfiguration> _crossAccountConfigurations = AWSConfigs.InitializeCollections ? new List<CrossAccountConfiguration>() : null;
         private EncryptionConfiguration _encryptionConfiguration;
         private bool? _isCloudTrailEventHistoryEnabled;
         private string _name;
@@ -93,11 +94,11 @@ public partial class CreateInvestigationGroupRequest : AmazonAIOpsRequest
         /// <summary>
         /// Gets and sets the property ChatbotNotificationChannel. 
         /// <para>
-        /// Use this structure to integrate Amazon Q Developer operational investigations with
-        /// Amazon Q in chat applications. This structure is a string array. For the first string,
-        /// specify the ARN of an Amazon SNS topic. For the array of strings, specify the ARNs
-        /// of one or more Amazon Q in chat applications configurations that you want to associate
-        /// with that topic. For more information about these configuration ARNs, see <a href="https://docs.aws.amazon.com/chatbot/latest/adminguide/getting-started.html">Getting
+        /// Use this structure to integrate CloudWatch investigations with Amazon Q in chat applications.
+        /// This structure is a string array. For the first string, specify the ARN of an Amazon
+        /// SNS topic. For the array of strings, specify the ARNs of one or more Amazon Q in chat
+        /// applications configurations that you want to associate with that topic. For more information
+        /// about these configuration ARNs, see <a href="https://docs.aws.amazon.com/chatbot/latest/adminguide/getting-started.html">Getting
         /// started with Amazon Q in chat applications</a> and <a href="https://docs.aws.amazon.com/service-authorization/latest/reference/list_awschatbot.html#awschatbot-resources-for-iam-policies">Resource
         /// type defined by Amazon Web Services Chatbot</a>.
         /// </para>
@@ -119,12 +120,37 @@ internal bool IsSetChatbotNotificationChannel()
             return this._chatbotNotificationChannel != null && (this._chatbotNotificationChannel.Count > 0 || !AWSConfigs.InitializeCollections); 
         }
 
+        /// <summary>
+        /// Gets and sets the property CrossAccountConfigurations. 
+        /// <para>
+        /// Number of <c>sourceAccountId</c> values that have been configured for cross-account
+        /// access.
+        /// </para>
+        /// <para />
+        /// Starting with version 4 of the SDK this property will default to null. If no data for this property is returned
+        /// from the service the property will also be null. This was changed to improve performance and allow the SDK and caller
+        /// to distinguish between a property not set or a property being empty to clear out a value. To retain the previous
+        /// SDK behavior set the AWSConfigs.InitializeCollections static property to true.
+        /// </summary>
+        [AWSProperty(Min=0, Max=25)]
+        public List<CrossAccountConfiguration> CrossAccountConfigurations
+        {
+            get { return this._crossAccountConfigurations; }
+            set { this._crossAccountConfigurations = value; }
+        }
+
+        // Check to see if CrossAccountConfigurations property is set
+        internal bool IsSetCrossAccountConfigurations()
+        {
+            return this._crossAccountConfigurations != null && (this._crossAccountConfigurations.Count > 0 || !AWSConfigs.InitializeCollections); 
+        }
+
         /// <summary>
         /// Gets and sets the property EncryptionConfiguration. 
         /// <para>
         /// Use this structure if you want to use a customer managed KMS key to encrypt your investigation
-        /// data. If you omit this parameter, Amazon Q Developer operational investigations will
-        /// use an Amazon Web Services key to encrypt the data. For more information, see <a href="https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/Investigations-Security.html#Investigations-KMS">Encryption
+        /// data. If you omit this parameter, CloudWatch investigations will use an Amazon Web
+        /// Services key to encrypt the data. For more information, see <a href="https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/Investigations-Security.html#Investigations-KMS">Encryption
         /// of investigation data</a>.
         /// </para>
         /// </summary>
@@ -143,8 +169,8 @@ internal bool IsSetEncryptionConfiguration()
         /// <summary>
         /// Gets and sets the property IsCloudTrailEventHistoryEnabled. 
         /// <para>
-        /// Specify <c>true</c> to enable Amazon Q Developer operational investigations to have
-        /// access to change events that are recorded by CloudTrail. The default is <c>true</c>.
+        /// Specify <c>true</c> to enable CloudWatch investigations to have access to change events
+        /// that are recorded by CloudTrail. The default is <c>true</c>.
         /// </para>
         /// </summary>
         public bool? IsCloudTrailEventHistoryEnabled
@@ -162,7 +188,7 @@ internal bool IsSetIsCloudTrailEventHistoryEnabled()
         /// <summary>
         /// Gets and sets the property Name. 
         /// <para>
-        /// A name for the investigation group.
+        /// Provides a name for the investigation group.
         /// </para>
         /// </summary>
         [AWSProperty(Required=true, Min=1, Max=512)]
@@ -205,10 +231,9 @@ internal bool IsSetRetentionInDays()
         /// <summary>
         /// Gets and sets the property RoleArn. 
         /// <para>
-        /// Specify the ARN of the IAM role that Amazon Q Developer operational investigations
-        /// will use when it gathers investigation data. The permissions in this role determine
-        /// which of your resources that Amazon Q Developer operational investigations will have
-        /// access to during investigations.
+        /// Specify the ARN of the IAM role that CloudWatch investigations will use when it gathers
+        /// investigation data. The permissions in this role determine which of your resources
+        /// that CloudWatch investigations will have access to during investigations.
         /// </para>
         ///  
         /// <para>

sdk/code-analysis/ServiceAnalysis/AIOps/Generated/PropertyValueRules.xml

@@ -0,0 +1,60 @@
+/*
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * 
+ * Licensed under the Apache License, Version 2.0 (the "License").
+ * You may not use this file except in compliance with the License.
+ * A copy of the License is located at
+ * 
+ *  http://aws.amazon.com/apache2.0
+ * 
+ * or in the "license" file accompanying this file. This file is distributed
+ * on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either
+ * express or implied. See the License for the specific language governing
+ * permissions and limitations under the License.
+ */
+
+/*
+ * Do not modify this file. This file is generated from the aiops-2018-05-10.normal.json service model.
+ */
+using System;
+using System.Collections.Generic;
+using System.Xml.Serialization;
+using System.Text;
+using System.IO;
+using System.Net;
+
+using Amazon.Runtime;
+using Amazon.Runtime.Internal;
+
+#pragma warning disable CS0612,CS0618,CS1570
+namespace Amazon.AIOps.Model
+{
+    /// <summary>
+    /// This structure contains information about the cross-account configuration in the account.
+    /// </summary>
+    public partial class CrossAccountConfiguration
+    {
+        private string _sourceRoleArn;
+
+        /// <summary>
+        /// Gets and sets the property SourceRoleArn. 
+        /// <para>
+        /// The ARN of an existing role which will be used to do investigations on your behalf.
+        /// 
+        /// </para>
+        /// </summary>
+        [AWSProperty(Min=20, Max=2048)]
+        public string SourceRoleArn
+        {
+            get { return this._sourceRoleArn; }
+            set { this._sourceRoleArn = value; }
+        }
+
+        // Check to see if SourceRoleArn property is set
+        internal bool IsSetSourceRoleArn()
+        {
+            return this._sourceRoleArn != null;
+        }
+
+    }
+}

sdk/src/Services/AIOps/Generated/Model/CreateInvestigationGroupRequest.cs

@@ -38,6 +38,7 @@ public partial class GetInvestigationGroupResponse : AmazonWebServiceResponse
         private Dictionary<string, List<string>> _chatbotNotificationChannel = AWSConfigs.InitializeCollections ? new Dictionary<string, List<string>>() : null;
         private DateTime? _createdAt;
         private string _createdBy;
+        private List<CrossAccountConfiguration> _crossAccountConfigurations = AWSConfigs.InitializeCollections ? new List<CrossAccountConfiguration>() : null;
         private EncryptionConfiguration _encryptionConfiguration;
         private bool? _isCloudTrailEventHistoryEnabled;
         private DateTime? _lastModifiedAt;
@@ -130,6 +131,31 @@ internal bool IsSetCreatedBy()
             return this._createdBy != null;
         }
 
+        /// <summary>
+        /// Gets and sets the property CrossAccountConfigurations. 
+        /// <para>
+        /// Lists the <c>AWSAccountId</c> of the accounts configured for cross-account access
+        /// and the results of the last scan performed on each account.
+        /// </para>
+        /// <para />
+        /// Starting with version 4 of the SDK this property will default to null. If no data for this property is returned
+        /// from the service the property will also be null. This was changed to improve performance and allow the SDK and caller
+        /// to distinguish between a property not set or a property being empty to clear out a value. To retain the previous
+        /// SDK behavior set the AWSConfigs.InitializeCollections static property to true.
+        /// </summary>
+        [AWSProperty(Min=0, Max=25)]
+        public List<CrossAccountConfiguration> CrossAccountConfigurations
+        {
+            get { return this._crossAccountConfigurations; }
+            set { this._crossAccountConfigurations = value; }
+        }
+
+        // Check to see if CrossAccountConfigurations property is set
+        internal bool IsSetCrossAccountConfigurations()
+        {
+            return this._crossAccountConfigurations != null && (this._crossAccountConfigurations.Count > 0 || !AWSConfigs.InitializeCollections); 
+        }
+
         /// <summary>
         /// Gets and sets the property EncryptionConfiguration. 
         /// <para>
@@ -153,8 +179,8 @@ internal bool IsSetEncryptionConfiguration()
         /// <summary>
         /// Gets and sets the property IsCloudTrailEventHistoryEnabled. 
         /// <para>
-        /// Specifies whether Amazon Q Developer operational investigationshas access to change
-        /// events that are recorded by CloudTrail.
+        /// Specifies whether CloudWatch investigationshas access to change events that are recorded
+        /// by CloudTrail.
         /// </para>
         /// </summary>
         public bool? IsCloudTrailEventHistoryEnabled

sdk/src/Services/AIOps/Generated/Model/CrossAccountConfiguration.cs

@@ -92,6 +92,22 @@ public IRequest Marshall(CreateInvestigationGroupRequest publicRequest)
                 context.Writer.WriteEndObject();
             }
 
+            if(publicRequest.IsSetCrossAccountConfigurations())
+            {
+                context.Writer.WritePropertyName("crossAccountConfigurations");
+                context.Writer.WriteStartArray();
+                foreach(var publicRequestCrossAccountConfigurationsListValue in publicRequest.CrossAccountConfigurations)
+                {
+                    context.Writer.WriteStartObject();
+
+                    var marshaller = CrossAccountConfigurationMarshaller.Instance;
+                    marshaller.Marshall(publicRequestCrossAccountConfigurationsListValue, context);
+
+                    context.Writer.WriteEndObject();
+                }
+                context.Writer.WriteEndArray();
+            }
+
             if(publicRequest.IsSetEncryptionConfiguration())
             {
                 context.Writer.WritePropertyName("encryptionConfiguration");

sdk/src/Services/AIOps/Generated/Model/GetInvestigationGroupResponse.cs

@@ -0,0 +1,63 @@
+/*
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * 
+ * Licensed under the Apache License, Version 2.0 (the "License").
+ * You may not use this file except in compliance with the License.
+ * A copy of the License is located at
+ * 
+ *  http://aws.amazon.com/apache2.0
+ * 
+ * or in the "license" file accompanying this file. This file is distributed
+ * on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either
+ * express or implied. See the License for the specific language governing
+ * permissions and limitations under the License.
+ */
+
+/*
+ * Do not modify this file. This file is generated from the aiops-2018-05-10.normal.json service model.
+ */
+using System;
+using System.Collections.Generic;
+using System.Globalization;
+using System.IO;
+using System.Text;
+using System.Xml.Serialization;
+
+using Amazon.AIOps.Model;
+using Amazon.Runtime;
+using Amazon.Runtime.Internal;
+using Amazon.Runtime.Internal.Transform;
+using Amazon.Runtime.Internal.Util;
+#pragma warning disable CS0612,CS0618
+namespace Amazon.AIOps.Model.Internal.MarshallTransformations
+{
+    /// <summary>
+    /// CrossAccountConfiguration Marshaller
+    /// </summary>
+    public class CrossAccountConfigurationMarshaller : IRequestMarshaller<CrossAccountConfiguration, JsonMarshallerContext> 
+    {
+        /// <summary>
+        /// Unmarshaller the response from the service to the response class.
+        /// </summary>  
+        /// <param name="requestObject"></param>
+        /// <param name="context"></param>
+        /// <returns></returns>
+        public void Marshall(CrossAccountConfiguration requestObject, JsonMarshallerContext context)
+        {
+            if(requestObject == null)
+                return;
+            if(requestObject.IsSetSourceRoleArn())
+            {
+                context.Writer.WritePropertyName("sourceRoleArn");
+                context.Writer.WriteStringValue(requestObject.SourceRoleArn);
+            }
+
+        }
+
+        /// <summary>
+        /// Singleton Marshaller.
+        /// </summary>
+        public readonly static CrossAccountConfigurationMarshaller Instance = new CrossAccountConfigurationMarshaller();
+
+    }
+}