@@ -121,6 +121,7 @@ export enum ConflictType {
121
121
ANOTHER_ACTIVE_STREAM = "ANOTHER_ACTIVE_STREAM" ,
122
122
CANNOT_CHANGE_SPEAKER_AFTER_ENROLLMENT = "CANNOT_CHANGE_SPEAKER_AFTER_ENROLLMENT" ,
123
123
CONCURRENT_CHANGES = "CONCURRENT_CHANGES" ,
124
+ DOMAIN_LOCKED_FROM_ENCRYPTION_UPDATES = "DOMAIN_LOCKED_FROM_ENCRYPTION_UPDATES" ,
124
125
DOMAIN_NOT_ACTIVE = "DOMAIN_NOT_ACTIVE" ,
125
126
ENROLLMENT_ALREADY_EXISTS = "ENROLLMENT_ALREADY_EXISTS" ,
126
127
SPEAKER_NOT_SET = "SPEAKER_NOT_SET" ,
@@ -182,12 +183,12 @@ export class ConflictException extends __BaseException {
182
183
}
183
184
184
185
/**
185
- * <p>The configuration containing information about the customer- managed KMS Key used for encrypting
186
+ * <p>The configuration containing information about the customer managed key used for encrypting
186
187
* customer data.</p>
187
188
*/
188
189
export interface ServerSideEncryptionConfiguration {
189
190
/**
190
- * <p>The identifier of the KMS Key you want Voice ID to use to encrypt your data.</p>
191
+ * <p>The identifier of the KMS key you want Voice ID to use to encrypt your data.</p>
191
192
*/
192
193
KmsKeyId : string | undefined ;
193
194
}
@@ -243,9 +244,9 @@ export interface CreateDomainRequest {
243
244
Description ?: string ;
244
245
245
246
/**
246
- * <p>The configuration, containing the KMS Key Identifier , to be used by Voice ID for
247
+ * <p>The configuration, containing the KMS key identifier , to be used by Voice ID for
247
248
* the server-side encryption of your data. Refer to <a href="https://docs.aws.amazon.com/connect/latest/adminguide/encryption-at-rest.html#encryption-at-rest-voiceid">
248
- * Amazon Connect VoiceID encryption at rest</a> for more details on how the KMS Key is used.
249
+ * Amazon Connect Voice ID encryption at rest</a> for more details on how the KMS key is used.
249
250
* </p>
250
251
*/
251
252
ServerSideEncryptionConfiguration : ServerSideEncryptionConfiguration | undefined ;
@@ -280,6 +281,49 @@ export enum DomainStatus {
280
281
SUSPENDED = "SUSPENDED" ,
281
282
}
282
283
284
+ export enum ServerSideEncryptionUpdateStatus {
285
+ COMPLETED = "COMPLETED" ,
286
+ FAILED = "FAILED" ,
287
+ IN_PROGRESS = "IN_PROGRESS" ,
288
+ }
289
+
290
+ /**
291
+ * <p>Details about the most recent server-side encryption configuration update. When the server-side
292
+ * encryption configuration is changed, dependency on the old KMS key is removed through an
293
+ * asynchronous process. When this update is complete, the domain’s data can only be accessed using the
294
+ * new KMS key.</p>
295
+ */
296
+ export interface ServerSideEncryptionUpdateDetails {
297
+ /**
298
+ * <p>The previous KMS key ID the domain was encrypted with, before
299
+ * ServerSideEncryptionConfiguration was updated to a new KMS key ID.</p>
300
+ */
301
+ OldKmsKeyId ?: string ;
302
+
303
+ /**
304
+ * <p>Status of the server-side encryption update. During an update, if there is an issue with the domain's
305
+ * current or old KMS key ID, such as an inaccessible or disabled key, then the status
306
+ * is FAILED. In order to resolve this, the key needs to be made accessible, and then an UpdateDomain call
307
+ * with the existing server-side encryption configuration will re-attempt this update process.</p>
308
+ */
309
+ UpdateStatus ?: ServerSideEncryptionUpdateStatus | string ;
310
+
311
+ /**
312
+ * <p>Message explaining the current UpdateStatus. When the UpdateStatus is FAILED, this message explains
313
+ * the cause of the failure.</p>
314
+ */
315
+ Message ?: string ;
316
+ }
317
+
318
+ export namespace ServerSideEncryptionUpdateDetails {
319
+ /**
320
+ * @internal
321
+ */
322
+ export const filterSensitiveLog = ( obj : ServerSideEncryptionUpdateDetails ) : any => ( {
323
+ ...obj ,
324
+ } ) ;
325
+ }
326
+
283
327
/**
284
328
* <p>Contains all the information about a domain.</p>
285
329
*/
@@ -310,7 +354,7 @@ export interface Domain {
310
354
DomainStatus ?: DomainStatus | string ;
311
355
312
356
/**
313
- * <p>The server-side encryption configuration containing the KMS Key Identifier you want Voice ID to use
357
+ * <p>The server-side encryption configuration containing the KMS key identifier you want Voice ID to use
314
358
* to encrypt your data.</p>
315
359
*/
316
360
ServerSideEncryptionConfiguration ?: ServerSideEncryptionConfiguration ;
@@ -324,6 +368,14 @@ export interface Domain {
324
368
* <p>The timestamp showing the domain's last update.</p>
325
369
*/
326
370
UpdatedAt ?: Date ;
371
+
372
+ /**
373
+ * <p>Details about the most recent server-side encryption configuration update. When the server-side
374
+ * encryption configuration is changed, dependency on the old KMS key is removed through an
375
+ * asynchronous process. When this update is complete, the domain's data can only be accessed using the
376
+ * new KMS key.</p>
377
+ */
378
+ ServerSideEncryptionUpdateDetails ?: ServerSideEncryptionUpdateDetails ;
327
379
}
328
380
329
381
export namespace Domain {
@@ -736,7 +788,7 @@ export enum FraudsterRegistrationJobStatus {
736
788
*/
737
789
export interface OutputDataConfig {
738
790
/**
739
- * <p>The S3 path of the folder to which Voice ID writes the job output file, which has a
791
+ * <p>The S3 path of the folder where Voice ID writes the job output file. It has a
740
792
* <code>*.out</code> extension. For example, if the input file name is <code>input-file.json</code> and
741
793
* the output folder path is <code>s3://output-bucket/output-folder</code>, the full output file path is
742
794
* <code>s3://output-bucket/output-folder/job-Id/input-file.json.out</code>.</p>
@@ -765,7 +817,7 @@ export enum DuplicateRegistrationAction {
765
817
}
766
818
767
819
/**
768
- * <p>The configuration definining the action to take when a duplicate fraudster is detected, and the
820
+ * <p>The configuration defining the action to take when a duplicate fraudster is detected, and the
769
821
* similarity threshold to use for detecting a duplicate fraudster during a batch fraudster registration job.</p>
770
822
*/
771
823
export interface RegistrationConfig {
@@ -797,7 +849,7 @@ export namespace RegistrationConfig {
797
849
*/
798
850
export interface FraudsterRegistrationJob {
799
851
/**
800
- * <p>The client-provied name for the fraudster registration job.</p>
852
+ * <p>The client-provided name for the fraudster registration job.</p>
801
853
*/
802
854
JobName ?: string ;
803
855
@@ -836,7 +888,7 @@ export interface FraudsterRegistrationJob {
836
888
837
889
/**
838
890
* <p>The output data config containing the S3 location where you want Voice ID to write your job output
839
- * file; you must also include a KMS Key ID in order to encrypt the file.</p>
891
+ * file; you must also include a KMS key iD in order to encrypt the file.</p>
840
892
*/
841
893
OutputDataConfig ?: OutputDataConfig ;
842
894
@@ -1125,7 +1177,7 @@ export interface SpeakerEnrollmentJob {
1125
1177
1126
1178
/**
1127
1179
* <p>The output data config containing the S3 location where Voice ID writes the job output file; you must
1128
- * also include a KMS Key ID to encrypt the file.</p>
1180
+ * also include a KMS key ID to encrypt the file.</p>
1129
1181
*/
1130
1182
OutputDataConfig ?: OutputDataConfig ;
1131
1183
@@ -1211,8 +1263,8 @@ export interface DomainSummary {
1211
1263
DomainStatus ?: DomainStatus | string ;
1212
1264
1213
1265
/**
1214
- * <p>The server-side encryption configuration containing the KMS Key Identifier you want Voice ID to use
1215
- * to encrypt your data.. </p>
1266
+ * <p>The server-side encryption configuration containing the KMS key identifier you want Voice ID to use
1267
+ * to encrypt your data.</p>
1216
1268
*/
1217
1269
ServerSideEncryptionConfiguration ?: ServerSideEncryptionConfiguration ;
1218
1270
@@ -1225,6 +1277,14 @@ export interface DomainSummary {
1225
1277
* <p>The timestamp showing the domain's last update.</p>
1226
1278
*/
1227
1279
UpdatedAt ?: Date ;
1280
+
1281
+ /**
1282
+ * <p>Details about the most recent server-side encryption configuration update. When the server-side
1283
+ * encryption configuration is changed, dependency on the old KMS key is removed through an
1284
+ * asynchronous process. When this update is complete, the domain’s data can only be accessed using the
1285
+ * new KMS key.</p>
1286
+ */
1287
+ ServerSideEncryptionUpdateDetails ?: ServerSideEncryptionUpdateDetails ;
1228
1288
}
1229
1289
1230
1290
export namespace DomainSummary {
@@ -1418,7 +1478,7 @@ export interface EvaluateSessionResponse {
1418
1478
* <p>The current status of audio streaming for this session. This field is useful to infer next steps when
1419
1479
* the Authentication or Fraud Detection results are empty or the decision is <code>NOT_ENOUGH_SPEECH</code>.
1420
1480
* In this situation, if the <code>StreamingStatus</code> is <code>ONGOING/PENDING_CONFIGURATION</code>, it can
1421
- * mean that the client should call the API again later, once Voice ID has enough audio to produce a result.
1481
+ * mean that the client should call the API again later, after Voice ID has enough audio to produce a result.
1422
1482
* If the decision remains <code>NOT_ENOUGH_SPEECH</code> even after <code>StreamingStatus</code> is <code>ENDED</code>,
1423
1483
* it means that the previously streamed session did not have enough speech to perform evaluation, and a new
1424
1484
* streaming session is needed to try again.</p>
@@ -1966,7 +2026,7 @@ export interface StartFraudsterRegistrationJobRequest {
1966
2026
1967
2027
/**
1968
2028
* <p>The output data config containing the S3 location where Voice ID writes the job output file; you must
1969
- * also include a KMS Key ID to encrypt the file.</p>
2029
+ * also include a KMS key ID to encrypt the file.</p>
1970
2030
*/
1971
2031
OutputDataConfig : OutputDataConfig | undefined ;
1972
2032
}
@@ -2026,7 +2086,7 @@ export interface StartSpeakerEnrollmentJobRequest {
2026
2086
2027
2087
/**
2028
2088
* <p>The enrollment config that contains details such as the action to take when a speaker is already
2029
- * enrolled in the Voice ID system or when a speaker is identified as a fraudster.</p>
2089
+ * enrolled in Voice ID or when a speaker is identified as a fraudster.</p>
2030
2090
*/
2031
2091
EnrollmentConfig ?: EnrollmentConfig ;
2032
2092
@@ -2038,7 +2098,7 @@ export interface StartSpeakerEnrollmentJobRequest {
2038
2098
2039
2099
/**
2040
2100
* <p>The output data config containing the S3 location where Voice ID writes the job output file; you must
2041
- * also include a KMS Key ID to encrypt the file.</p>
2101
+ * also include a KMS key ID to encrypt the file.</p>
2042
2102
*/
2043
2103
OutputDataConfig : OutputDataConfig | undefined ;
2044
2104
}
@@ -2153,7 +2213,7 @@ export interface UpdateDomainRequest {
2153
2213
Description ?: string ;
2154
2214
2155
2215
/**
2156
- * <p>The configuration, containing the KMS Key Identifier , to be used by Voice ID for the server-side
2216
+ * <p>The configuration, containing the KMS key identifier , to be used by Voice ID for the server-side
2157
2217
* encryption of your data. Note that all the existing data in the domain are still encrypted using the
2158
2218
* existing key, only the data added to domain after updating the key is encrypted using the new key. </p>
2159
2219
*/
0 commit comments