forked from aws-amplify/aws-sdk-ios
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathAWSFirehoseResources.m
3910 lines (3898 loc) · 225 KB
/
AWSFirehoseResources.m
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
//
// Copyright 2010-2024 Amazon.com, Inc. or its affiliates. All Rights Reserved.
//
// Licensed under the Apache License, Version 2.0 (the "License").
// You may not use this file except in compliance with the License.
// A copy of the License is located at
//
// http://aws.amazon.com/apache2.0
//
// or in the "license" file accompanying this file. This file is distributed
// on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either
// express or implied. See the License for the specific language governing
// permissions and limitations under the License.
//
#import "AWSFirehoseResources.h"
#import <AWSCore/AWSCocoaLumberjack.h>
@interface AWSFirehoseResources ()
@property (nonatomic, strong) NSDictionary *definitionDictionary;
@end
@implementation AWSFirehoseResources
+ (instancetype)sharedInstance {
static AWSFirehoseResources *_sharedResources = nil;
static dispatch_once_t once_token;
dispatch_once(&once_token, ^{
_sharedResources = [AWSFirehoseResources new];
});
return _sharedResources;
}
- (NSDictionary *)JSONObject {
return self.definitionDictionary;
}
- (instancetype)init {
if (self = [super init]) {
//init method
NSError *error = nil;
_definitionDictionary = [NSJSONSerialization JSONObjectWithData:[[self definitionString] dataUsingEncoding:NSUTF8StringEncoding]
options:kNilOptions
error:&error];
if (_definitionDictionary == nil) {
if (error) {
AWSDDLogError(@"Failed to parse JSON service definition: %@",error);
}
}
}
return self;
}
- (NSString *)definitionString {
return @"{\
\"version\":\"2.0\",\
\"metadata\":{\
\"apiVersion\":\"2015-08-04\",\
\"endpointPrefix\":\"firehose\",\
\"jsonVersion\":\"1.1\",\
\"protocol\":\"json\",\
\"serviceAbbreviation\":\"Firehose\",\
\"serviceFullName\":\"Amazon Kinesis Firehose\",\
\"serviceId\":\"Firehose\",\
\"signatureVersion\":\"v4\",\
\"targetPrefix\":\"Firehose_20150804\",\
\"uid\":\"firehose-2015-08-04\"\
},\
\"operations\":{\
\"CreateDeliveryStream\":{\
\"name\":\"CreateDeliveryStream\",\
\"http\":{\
\"method\":\"POST\",\
\"requestUri\":\"/\"\
},\
\"input\":{\"shape\":\"CreateDeliveryStreamInput\"},\
\"output\":{\"shape\":\"CreateDeliveryStreamOutput\"},\
\"errors\":[\
{\"shape\":\"InvalidArgumentException\"},\
{\"shape\":\"LimitExceededException\"},\
{\"shape\":\"ResourceInUseException\"},\
{\"shape\":\"InvalidKMSResourceException\"}\
],\
\"documentation\":\"<p>Creates a Firehose delivery stream.</p> <p>By default, you can create up to 50 delivery streams per Amazon Web Services Region.</p> <p>This is an asynchronous operation that immediately returns. The initial status of the delivery stream is <code>CREATING</code>. After the delivery stream is created, its status is <code>ACTIVE</code> and it now accepts data. If the delivery stream creation fails, the status transitions to <code>CREATING_FAILED</code>. Attempts to send data to a delivery stream that is not in the <code>ACTIVE</code> state cause an exception. To check the state of a delivery stream, use <a>DescribeDeliveryStream</a>.</p> <p>If the status of a delivery stream is <code>CREATING_FAILED</code>, this status doesn't change, and you can't invoke <code>CreateDeliveryStream</code> again on it. However, you can invoke the <a>DeleteDeliveryStream</a> operation to delete it.</p> <p>A Firehose delivery stream can be configured to receive records directly from providers using <a>PutRecord</a> or <a>PutRecordBatch</a>, or it can be configured to use an existing Kinesis stream as its source. To specify a Kinesis data stream as input, set the <code>DeliveryStreamType</code> parameter to <code>KinesisStreamAsSource</code>, and provide the Kinesis stream Amazon Resource Name (ARN) and role ARN in the <code>KinesisStreamSourceConfiguration</code> parameter.</p> <p>To create a delivery stream with server-side encryption (SSE) enabled, include <a>DeliveryStreamEncryptionConfigurationInput</a> in your request. This is optional. You can also invoke <a>StartDeliveryStreamEncryption</a> to turn on SSE for an existing delivery stream that doesn't have SSE enabled.</p> <p>A delivery stream is configured with a single destination, such as Amazon Simple Storage Service (Amazon S3), Amazon Redshift, Amazon OpenSearch Service, Amazon OpenSearch Serverless, Splunk, and any custom HTTP endpoint or HTTP endpoints owned by or supported by third-party service providers, including Datadog, Dynatrace, LogicMonitor, MongoDB, New Relic, and Sumo Logic. You must specify only one of the following destination configuration parameters: <code>ExtendedS3DestinationConfiguration</code>, <code>S3DestinationConfiguration</code>, <code>ElasticsearchDestinationConfiguration</code>, <code>RedshiftDestinationConfiguration</code>, or <code>SplunkDestinationConfiguration</code>.</p> <p>When you specify <code>S3DestinationConfiguration</code>, you can also provide the following optional values: BufferingHints, <code>EncryptionConfiguration</code>, and <code>CompressionFormat</code>. By default, if no <code>BufferingHints</code> value is provided, Firehose buffers data up to 5 MB or for 5 minutes, whichever condition is satisfied first. <code>BufferingHints</code> is a hint, so there are some cases where the service cannot adhere to these conditions strictly. For example, record boundaries might be such that the size is a little over or under the configured buffering size. By default, no encryption is performed. We strongly recommend that you enable encryption to ensure secure data storage in Amazon S3.</p> <p>A few notes about Amazon Redshift as a destination:</p> <ul> <li> <p>An Amazon Redshift destination requires an S3 bucket as intermediate location. Firehose first delivers data to Amazon S3 and then uses <code>COPY</code> syntax to load data into an Amazon Redshift table. This is specified in the <code>RedshiftDestinationConfiguration.S3Configuration</code> parameter.</p> </li> <li> <p>The compression formats <code>SNAPPY</code> or <code>ZIP</code> cannot be specified in <code>RedshiftDestinationConfiguration.S3Configuration</code> because the Amazon Redshift <code>COPY</code> operation that reads from the S3 bucket doesn't support these compression formats.</p> </li> <li> <p>We strongly recommend that you use the user name and password you provide exclusively with Firehose, and that the permissions for the account are restricted for Amazon Redshift <code>INSERT</code> permissions.</p> </li> </ul> <p>Firehose assumes the IAM role that is configured as part of the destination. The role should allow the Firehose principal to assume the role, and the role should have permissions that allow the service to deliver the data. For more information, see <a href=\\\"https://docs.aws.amazon.com/firehose/latest/dev/controlling-access.html#using-iam-s3\\\">Grant Firehose Access to an Amazon S3 Destination</a> in the <i>Amazon Firehose Developer Guide</i>.</p>\"\
},\
\"DeleteDeliveryStream\":{\
\"name\":\"DeleteDeliveryStream\",\
\"http\":{\
\"method\":\"POST\",\
\"requestUri\":\"/\"\
},\
\"input\":{\"shape\":\"DeleteDeliveryStreamInput\"},\
\"output\":{\"shape\":\"DeleteDeliveryStreamOutput\"},\
\"errors\":[\
{\"shape\":\"ResourceInUseException\"},\
{\"shape\":\"ResourceNotFoundException\"}\
],\
\"documentation\":\"<p>Deletes a delivery stream and its data.</p> <p>You can delete a delivery stream only if it is in one of the following states: <code>ACTIVE</code>, <code>DELETING</code>, <code>CREATING_FAILED</code>, or <code>DELETING_FAILED</code>. You can't delete a delivery stream that is in the <code>CREATING</code> state. To check the state of a delivery stream, use <a>DescribeDeliveryStream</a>. </p> <p>DeleteDeliveryStream is an asynchronous API. When an API request to DeleteDeliveryStream succeeds, the delivery stream is marked for deletion, and it goes into the <code>DELETING</code> state.While the delivery stream is in the <code>DELETING</code> state, the service might continue to accept records, but it doesn't make any guarantees with respect to delivering the data. Therefore, as a best practice, first stop any applications that are sending records before you delete a delivery stream.</p> <p>Removal of a delivery stream that is in the <code>DELETING</code> state is a low priority operation for the service. A stream may remain in the <code>DELETING</code> state for several minutes. Therefore, as a best practice, applications should not wait for streams in the <code>DELETING</code> state to be removed. </p>\"\
},\
\"DescribeDeliveryStream\":{\
\"name\":\"DescribeDeliveryStream\",\
\"http\":{\
\"method\":\"POST\",\
\"requestUri\":\"/\"\
},\
\"input\":{\"shape\":\"DescribeDeliveryStreamInput\"},\
\"output\":{\"shape\":\"DescribeDeliveryStreamOutput\"},\
\"errors\":[\
{\"shape\":\"ResourceNotFoundException\"}\
],\
\"documentation\":\"<p>Describes the specified delivery stream and its status. For example, after your delivery stream is created, call <code>DescribeDeliveryStream</code> to see whether the delivery stream is <code>ACTIVE</code> and therefore ready for data to be sent to it. </p> <p>If the status of a delivery stream is <code>CREATING_FAILED</code>, this status doesn't change, and you can't invoke <a>CreateDeliveryStream</a> again on it. However, you can invoke the <a>DeleteDeliveryStream</a> operation to delete it. If the status is <code>DELETING_FAILED</code>, you can force deletion by invoking <a>DeleteDeliveryStream</a> again but with <a>DeleteDeliveryStreamInput$AllowForceDelete</a> set to true.</p>\"\
},\
\"ListDeliveryStreams\":{\
\"name\":\"ListDeliveryStreams\",\
\"http\":{\
\"method\":\"POST\",\
\"requestUri\":\"/\"\
},\
\"input\":{\"shape\":\"ListDeliveryStreamsInput\"},\
\"output\":{\"shape\":\"ListDeliveryStreamsOutput\"},\
\"documentation\":\"<p>Lists your delivery streams in alphabetical order of their names.</p> <p>The number of delivery streams might be too large to return using a single call to <code>ListDeliveryStreams</code>. You can limit the number of delivery streams returned, using the <code>Limit</code> parameter. To determine whether there are more delivery streams to list, check the value of <code>HasMoreDeliveryStreams</code> in the output. If there are more delivery streams to list, you can request them by calling this operation again and setting the <code>ExclusiveStartDeliveryStreamName</code> parameter to the name of the last delivery stream returned in the last call.</p>\"\
},\
\"ListTagsForDeliveryStream\":{\
\"name\":\"ListTagsForDeliveryStream\",\
\"http\":{\
\"method\":\"POST\",\
\"requestUri\":\"/\"\
},\
\"input\":{\"shape\":\"ListTagsForDeliveryStreamInput\"},\
\"output\":{\"shape\":\"ListTagsForDeliveryStreamOutput\"},\
\"errors\":[\
{\"shape\":\"ResourceNotFoundException\"},\
{\"shape\":\"InvalidArgumentException\"},\
{\"shape\":\"LimitExceededException\"}\
],\
\"documentation\":\"<p>Lists the tags for the specified delivery stream. This operation has a limit of five transactions per second per account. </p>\"\
},\
\"PutRecord\":{\
\"name\":\"PutRecord\",\
\"http\":{\
\"method\":\"POST\",\
\"requestUri\":\"/\"\
},\
\"input\":{\"shape\":\"PutRecordInput\"},\
\"output\":{\"shape\":\"PutRecordOutput\"},\
\"errors\":[\
{\"shape\":\"ResourceNotFoundException\"},\
{\"shape\":\"InvalidArgumentException\"},\
{\"shape\":\"InvalidKMSResourceException\"},\
{\"shape\":\"InvalidSourceException\"},\
{\"shape\":\"ServiceUnavailableException\"}\
],\
\"documentation\":\"<p>Writes a single data record into an Amazon Firehose delivery stream. To write multiple data records into a delivery stream, use <a>PutRecordBatch</a>. Applications using these operations are referred to as producers.</p> <p>By default, each delivery stream can take in up to 2,000 transactions per second, 5,000 records per second, or 5 MB per second. If you use <a>PutRecord</a> and <a>PutRecordBatch</a>, the limits are an aggregate across these two operations for each delivery stream. For more information about limits and how to request an increase, see <a href=\\\"https://docs.aws.amazon.com/firehose/latest/dev/limits.html\\\">Amazon Firehose Limits</a>. </p> <p>Firehose accumulates and publishes a particular metric for a customer account in one minute intervals. It is possible that the bursts of incoming bytes/records ingested to a delivery stream last only for a few seconds. Due to this, the actual spikes in the traffic might not be fully visible in the customer's 1 minute CloudWatch metrics.</p> <p>You must specify the name of the delivery stream and the data record when using <a>PutRecord</a>. The data record consists of a data blob that can be up to 1,000 KiB in size, and any kind of data. For example, it can be a segment from a log file, geographic location data, website clickstream data, and so on.</p> <p>Firehose buffers records before delivering them to the destination. To disambiguate the data blobs at the destination, a common solution is to use delimiters in the data, such as a newline (<code>\\\\n</code>) or some other character unique within the data. This allows the consumer application to parse individual data items when reading the data from the destination.</p> <p>The <code>PutRecord</code> operation returns a <code>RecordId</code>, which is a unique string assigned to each record. Producer applications can use this ID for purposes such as auditability and investigation.</p> <p>If the <code>PutRecord</code> operation throws a <code>ServiceUnavailableException</code>, the API is automatically reinvoked (retried) 3 times. If the exception persists, it is possible that the throughput limits have been exceeded for the delivery stream. </p> <p>Re-invoking the Put API operations (for example, PutRecord and PutRecordBatch) can result in data duplicates. For larger data assets, allow for a longer time out before retrying Put API operations.</p> <p>Data records sent to Firehose are stored for 24 hours from the time they are added to a delivery stream as it tries to send the records to the destination. If the destination is unreachable for more than 24 hours, the data is no longer available.</p> <important> <p>Don't concatenate two or more base64 strings to form the data fields of your records. Instead, concatenate the raw data, then perform base64 encoding.</p> </important>\"\
},\
\"PutRecordBatch\":{\
\"name\":\"PutRecordBatch\",\
\"http\":{\
\"method\":\"POST\",\
\"requestUri\":\"/\"\
},\
\"input\":{\"shape\":\"PutRecordBatchInput\"},\
\"output\":{\"shape\":\"PutRecordBatchOutput\"},\
\"errors\":[\
{\"shape\":\"ResourceNotFoundException\"},\
{\"shape\":\"InvalidArgumentException\"},\
{\"shape\":\"InvalidKMSResourceException\"},\
{\"shape\":\"InvalidSourceException\"},\
{\"shape\":\"ServiceUnavailableException\"}\
],\
\"documentation\":\"<p>Writes multiple data records into a delivery stream in a single call, which can achieve higher throughput per producer than when writing single records. To write single data records into a delivery stream, use <a>PutRecord</a>. Applications using these operations are referred to as producers.</p> <p>Firehose accumulates and publishes a particular metric for a customer account in one minute intervals. It is possible that the bursts of incoming bytes/records ingested to a delivery stream last only for a few seconds. Due to this, the actual spikes in the traffic might not be fully visible in the customer's 1 minute CloudWatch metrics.</p> <p>For information about service quota, see <a href=\\\"https://docs.aws.amazon.com/firehose/latest/dev/limits.html\\\">Amazon Firehose Quota</a>.</p> <p>Each <a>PutRecordBatch</a> request supports up to 500 records. Each record in the request can be as large as 1,000 KB (before base64 encoding), up to a limit of 4 MB for the entire request. These limits cannot be changed.</p> <p>You must specify the name of the delivery stream and the data record when using <a>PutRecord</a>. The data record consists of a data blob that can be up to 1,000 KB in size, and any kind of data. For example, it could be a segment from a log file, geographic location data, website clickstream data, and so on.</p> <p>Firehose buffers records before delivering them to the destination. To disambiguate the data blobs at the destination, a common solution is to use delimiters in the data, such as a newline (<code>\\\\n</code>) or some other character unique within the data. This allows the consumer application to parse individual data items when reading the data from the destination.</p> <p>The <a>PutRecordBatch</a> response includes a count of failed records, <code>FailedPutCount</code>, and an array of responses, <code>RequestResponses</code>. Even if the <a>PutRecordBatch</a> call succeeds, the value of <code>FailedPutCount</code> may be greater than 0, indicating that there are records for which the operation didn't succeed. Each entry in the <code>RequestResponses</code> array provides additional information about the processed record. It directly correlates with a record in the request array using the same ordering, from the top to the bottom. The response array always includes the same number of records as the request array. <code>RequestResponses</code> includes both successfully and unsuccessfully processed records. Firehose tries to process all records in each <a>PutRecordBatch</a> request. A single record failure does not stop the processing of subsequent records. </p> <p>A successfully processed record includes a <code>RecordId</code> value, which is unique for the record. An unsuccessfully processed record includes <code>ErrorCode</code> and <code>ErrorMessage</code> values. <code>ErrorCode</code> reflects the type of error, and is one of the following values: <code>ServiceUnavailableException</code> or <code>InternalFailure</code>. <code>ErrorMessage</code> provides more detailed information about the error.</p> <p>If there is an internal server error or a timeout, the write might have completed or it might have failed. If <code>FailedPutCount</code> is greater than 0, retry the request, resending only those records that might have failed processing. This minimizes the possible duplicate records and also reduces the total bytes sent (and corresponding charges). We recommend that you handle any duplicates at the destination.</p> <p>If <a>PutRecordBatch</a> throws <code>ServiceUnavailableException</code>, the API is automatically reinvoked (retried) 3 times. If the exception persists, it is possible that the throughput limits have been exceeded for the delivery stream.</p> <p>Re-invoking the Put API operations (for example, PutRecord and PutRecordBatch) can result in data duplicates. For larger data assets, allow for a longer time out before retrying Put API operations.</p> <p>Data records sent to Firehose are stored for 24 hours from the time they are added to a delivery stream as it attempts to send the records to the destination. If the destination is unreachable for more than 24 hours, the data is no longer available.</p> <important> <p>Don't concatenate two or more base64 strings to form the data fields of your records. Instead, concatenate the raw data, then perform base64 encoding.</p> </important>\"\
},\
\"StartDeliveryStreamEncryption\":{\
\"name\":\"StartDeliveryStreamEncryption\",\
\"http\":{\
\"method\":\"POST\",\
\"requestUri\":\"/\"\
},\
\"input\":{\"shape\":\"StartDeliveryStreamEncryptionInput\"},\
\"output\":{\"shape\":\"StartDeliveryStreamEncryptionOutput\"},\
\"errors\":[\
{\"shape\":\"ResourceNotFoundException\"},\
{\"shape\":\"ResourceInUseException\"},\
{\"shape\":\"InvalidArgumentException\"},\
{\"shape\":\"LimitExceededException\"},\
{\"shape\":\"InvalidKMSResourceException\"}\
],\
\"documentation\":\"<p>Enables server-side encryption (SSE) for the delivery stream. </p> <p>This operation is asynchronous. It returns immediately. When you invoke it, Firehose first sets the encryption status of the stream to <code>ENABLING</code>, and then to <code>ENABLED</code>. The encryption status of a delivery stream is the <code>Status</code> property in <a>DeliveryStreamEncryptionConfiguration</a>. If the operation fails, the encryption status changes to <code>ENABLING_FAILED</code>. You can continue to read and write data to your delivery stream while the encryption status is <code>ENABLING</code>, but the data is not encrypted. It can take up to 5 seconds after the encryption status changes to <code>ENABLED</code> before all records written to the delivery stream are encrypted. To find out whether a record or a batch of records was encrypted, check the response elements <a>PutRecordOutput$Encrypted</a> and <a>PutRecordBatchOutput$Encrypted</a>, respectively.</p> <p>To check the encryption status of a delivery stream, use <a>DescribeDeliveryStream</a>.</p> <p>Even if encryption is currently enabled for a delivery stream, you can still invoke this operation on it to change the ARN of the CMK or both its type and ARN. If you invoke this method to change the CMK, and the old CMK is of type <code>CUSTOMER_MANAGED_CMK</code>, Firehose schedules the grant it had on the old CMK for retirement. If the new CMK is of type <code>CUSTOMER_MANAGED_CMK</code>, Firehose creates a grant that enables it to use the new CMK to encrypt and decrypt data and to manage the grant.</p> <p>For the KMS grant creation to be successful, Firehose APIs <code>StartDeliveryStreamEncryption</code> and <code>CreateDeliveryStream</code> should not be called with session credentials that are more than 6 hours old.</p> <p>If a delivery stream already has encryption enabled and then you invoke this operation to change the ARN of the CMK or both its type and ARN and you get <code>ENABLING_FAILED</code>, this only means that the attempt to change the CMK failed. In this case, encryption remains enabled with the old CMK.</p> <p>If the encryption status of your delivery stream is <code>ENABLING_FAILED</code>, you can invoke this operation again with a valid CMK. The CMK must be enabled and the key policy mustn't explicitly deny the permission for Firehose to invoke KMS encrypt and decrypt operations.</p> <p>You can enable SSE for a delivery stream only if it's a delivery stream that uses <code>DirectPut</code> as its source. </p> <p>The <code>StartDeliveryStreamEncryption</code> and <code>StopDeliveryStreamEncryption</code> operations have a combined limit of 25 calls per delivery stream per 24 hours. For example, you reach the limit if you call <code>StartDeliveryStreamEncryption</code> 13 times and <code>StopDeliveryStreamEncryption</code> 12 times for the same delivery stream in a 24-hour period.</p>\"\
},\
\"StopDeliveryStreamEncryption\":{\
\"name\":\"StopDeliveryStreamEncryption\",\
\"http\":{\
\"method\":\"POST\",\
\"requestUri\":\"/\"\
},\
\"input\":{\"shape\":\"StopDeliveryStreamEncryptionInput\"},\
\"output\":{\"shape\":\"StopDeliveryStreamEncryptionOutput\"},\
\"errors\":[\
{\"shape\":\"ResourceNotFoundException\"},\
{\"shape\":\"ResourceInUseException\"},\
{\"shape\":\"InvalidArgumentException\"},\
{\"shape\":\"LimitExceededException\"}\
],\
\"documentation\":\"<p>Disables server-side encryption (SSE) for the delivery stream. </p> <p>This operation is asynchronous. It returns immediately. When you invoke it, Firehose first sets the encryption status of the stream to <code>DISABLING</code>, and then to <code>DISABLED</code>. You can continue to read and write data to your stream while its status is <code>DISABLING</code>. It can take up to 5 seconds after the encryption status changes to <code>DISABLED</code> before all records written to the delivery stream are no longer subject to encryption. To find out whether a record or a batch of records was encrypted, check the response elements <a>PutRecordOutput$Encrypted</a> and <a>PutRecordBatchOutput$Encrypted</a>, respectively.</p> <p>To check the encryption state of a delivery stream, use <a>DescribeDeliveryStream</a>. </p> <p>If SSE is enabled using a customer managed CMK and then you invoke <code>StopDeliveryStreamEncryption</code>, Firehose schedules the related KMS grant for retirement and then retires it after it ensures that it is finished delivering records to the destination.</p> <p>The <code>StartDeliveryStreamEncryption</code> and <code>StopDeliveryStreamEncryption</code> operations have a combined limit of 25 calls per delivery stream per 24 hours. For example, you reach the limit if you call <code>StartDeliveryStreamEncryption</code> 13 times and <code>StopDeliveryStreamEncryption</code> 12 times for the same delivery stream in a 24-hour period.</p>\"\
},\
\"TagDeliveryStream\":{\
\"name\":\"TagDeliveryStream\",\
\"http\":{\
\"method\":\"POST\",\
\"requestUri\":\"/\"\
},\
\"input\":{\"shape\":\"TagDeliveryStreamInput\"},\
\"output\":{\"shape\":\"TagDeliveryStreamOutput\"},\
\"errors\":[\
{\"shape\":\"ResourceNotFoundException\"},\
{\"shape\":\"ResourceInUseException\"},\
{\"shape\":\"InvalidArgumentException\"},\
{\"shape\":\"LimitExceededException\"}\
],\
\"documentation\":\"<p>Adds or updates tags for the specified delivery stream. A tag is a key-value pair that you can define and assign to Amazon Web Services resources. If you specify a tag that already exists, the tag value is replaced with the value that you specify in the request. Tags are metadata. For example, you can add friendly names and descriptions or other types of information that can help you distinguish the delivery stream. For more information about tags, see <a href=\\\"https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/cost-alloc-tags.html\\\">Using Cost Allocation Tags</a> in the <i>Amazon Web Services Billing and Cost Management User Guide</i>. </p> <p>Each delivery stream can have up to 50 tags. </p> <p>This operation has a limit of five transactions per second per account. </p>\"\
},\
\"UntagDeliveryStream\":{\
\"name\":\"UntagDeliveryStream\",\
\"http\":{\
\"method\":\"POST\",\
\"requestUri\":\"/\"\
},\
\"input\":{\"shape\":\"UntagDeliveryStreamInput\"},\
\"output\":{\"shape\":\"UntagDeliveryStreamOutput\"},\
\"errors\":[\
{\"shape\":\"ResourceNotFoundException\"},\
{\"shape\":\"ResourceInUseException\"},\
{\"shape\":\"InvalidArgumentException\"},\
{\"shape\":\"LimitExceededException\"}\
],\
\"documentation\":\"<p>Removes tags from the specified delivery stream. Removed tags are deleted, and you can't recover them after this operation successfully completes.</p> <p>If you specify a tag that doesn't exist, the operation ignores it.</p> <p>This operation has a limit of five transactions per second per account. </p>\"\
},\
\"UpdateDestination\":{\
\"name\":\"UpdateDestination\",\
\"http\":{\
\"method\":\"POST\",\
\"requestUri\":\"/\"\
},\
\"input\":{\"shape\":\"UpdateDestinationInput\"},\
\"output\":{\"shape\":\"UpdateDestinationOutput\"},\
\"errors\":[\
{\"shape\":\"InvalidArgumentException\"},\
{\"shape\":\"ResourceInUseException\"},\
{\"shape\":\"ResourceNotFoundException\"},\
{\"shape\":\"ConcurrentModificationException\"}\
],\
\"documentation\":\"<p>Updates the specified destination of the specified delivery stream.</p> <p>Use this operation to change the destination type (for example, to replace the Amazon S3 destination with Amazon Redshift) or change the parameters associated with a destination (for example, to change the bucket name of the Amazon S3 destination). The update might not occur immediately. The target delivery stream remains active while the configurations are updated, so data writes to the delivery stream can continue during this process. The updated configurations are usually effective within a few minutes.</p> <p>Switching between Amazon OpenSearch Service and other services is not supported. For an Amazon OpenSearch Service destination, you can only update to another Amazon OpenSearch Service destination.</p> <p>If the destination type is the same, Firehose merges the configuration parameters specified with the destination configuration that already exists on the delivery stream. If any of the parameters are not specified in the call, the existing values are retained. For example, in the Amazon S3 destination, if <a>EncryptionConfiguration</a> is not specified, then the existing <code>EncryptionConfiguration</code> is maintained on the destination.</p> <p>If the destination type is not the same, for example, changing the destination from Amazon S3 to Amazon Redshift, Firehose does not merge any parameters. In this case, all parameters must be specified.</p> <p>Firehose uses <code>CurrentDeliveryStreamVersionId</code> to avoid race conditions and conflicting merges. This is a required field, and the service updates the configuration only if the existing configuration has a version ID that matches. After the update is applied successfully, the version ID is updated, and can be retrieved using <a>DescribeDeliveryStream</a>. Use the new version ID to set <code>CurrentDeliveryStreamVersionId</code> in the next call.</p>\"\
}\
},\
\"shapes\":{\
\"AWSKMSKeyARN\":{\
\"type\":\"string\",\
\"max\":512,\
\"min\":1,\
\"pattern\":\"arn:.*\"\
},\
\"AmazonOpenSearchServerlessBufferingHints\":{\
\"type\":\"structure\",\
\"members\":{\
\"IntervalInSeconds\":{\
\"shape\":\"AmazonOpenSearchServerlessBufferingIntervalInSeconds\",\
\"documentation\":\"<p>Buffer incoming data for the specified period of time, in seconds, before delivering it to the destination. The default value is 300 (5 minutes).</p>\"\
},\
\"SizeInMBs\":{\
\"shape\":\"AmazonOpenSearchServerlessBufferingSizeInMBs\",\
\"documentation\":\"<p>Buffer incoming data to the specified size, in MBs, before delivering it to the destination. The default value is 5. </p> <p>We recommend setting this parameter to a value greater than the amount of data you typically ingest into the delivery stream in 10 seconds. For example, if you typically ingest data at 1 MB/sec, the value should be 10 MB or higher.</p>\"\
}\
},\
\"documentation\":\"<p>Describes the buffering to perform before delivering data to the Serverless offering for Amazon OpenSearch Service destination.</p>\"\
},\
\"AmazonOpenSearchServerlessBufferingIntervalInSeconds\":{\
\"type\":\"integer\",\
\"max\":900,\
\"min\":0\
},\
\"AmazonOpenSearchServerlessBufferingSizeInMBs\":{\
\"type\":\"integer\",\
\"max\":100,\
\"min\":1\
},\
\"AmazonOpenSearchServerlessCollectionEndpoint\":{\
\"type\":\"string\",\
\"max\":512,\
\"min\":1,\
\"pattern\":\"https:.*\"\
},\
\"AmazonOpenSearchServerlessDestinationConfiguration\":{\
\"type\":\"structure\",\
\"required\":[\
\"RoleARN\",\
\"IndexName\",\
\"S3Configuration\"\
],\
\"members\":{\
\"RoleARN\":{\
\"shape\":\"RoleARN\",\
\"documentation\":\"<p>The Amazon Resource Name (ARN) of the IAM role to be assumed by Firehose for calling the Serverless offering for Amazon OpenSearch Service Configuration API and for indexing documents.</p>\"\
},\
\"CollectionEndpoint\":{\
\"shape\":\"AmazonOpenSearchServerlessCollectionEndpoint\",\
\"documentation\":\"<p>The endpoint to use when communicating with the collection in the Serverless offering for Amazon OpenSearch Service.</p>\"\
},\
\"IndexName\":{\
\"shape\":\"AmazonOpenSearchServerlessIndexName\",\
\"documentation\":\"<p>The Serverless offering for Amazon OpenSearch Service index name.</p>\"\
},\
\"BufferingHints\":{\
\"shape\":\"AmazonOpenSearchServerlessBufferingHints\",\
\"documentation\":\"<p>The buffering options. If no value is specified, the default values for AmazonopensearchserviceBufferingHints are used.</p>\"\
},\
\"RetryOptions\":{\
\"shape\":\"AmazonOpenSearchServerlessRetryOptions\",\
\"documentation\":\"<p>The retry behavior in case Firehose is unable to deliver documents to the Serverless offering for Amazon OpenSearch Service. The default value is 300 (5 minutes).</p>\"\
},\
\"S3BackupMode\":{\
\"shape\":\"AmazonOpenSearchServerlessS3BackupMode\",\
\"documentation\":\"<p>Defines how documents should be delivered to Amazon S3. When it is set to FailedDocumentsOnly, Firehose writes any documents that could not be indexed to the configured Amazon S3 destination, with AmazonOpenSearchService-failed/ appended to the key prefix. When set to AllDocuments, Firehose delivers all incoming records to Amazon S3, and also writes failed documents with AmazonOpenSearchService-failed/ appended to the prefix.</p>\"\
},\
\"S3Configuration\":{\"shape\":\"S3DestinationConfiguration\"},\
\"ProcessingConfiguration\":{\"shape\":\"ProcessingConfiguration\"},\
\"CloudWatchLoggingOptions\":{\"shape\":\"CloudWatchLoggingOptions\"},\
\"VpcConfiguration\":{\"shape\":\"VpcConfiguration\"}\
},\
\"documentation\":\"<p>Describes the configuration of a destination in the Serverless offering for Amazon OpenSearch Service.</p>\"\
},\
\"AmazonOpenSearchServerlessDestinationDescription\":{\
\"type\":\"structure\",\
\"members\":{\
\"RoleARN\":{\
\"shape\":\"RoleARN\",\
\"documentation\":\"<p>The Amazon Resource Name (ARN) of the Amazon Web Services credentials.</p>\"\
},\
\"CollectionEndpoint\":{\
\"shape\":\"AmazonOpenSearchServerlessCollectionEndpoint\",\
\"documentation\":\"<p>The endpoint to use when communicating with the collection in the Serverless offering for Amazon OpenSearch Service.</p>\"\
},\
\"IndexName\":{\
\"shape\":\"AmazonOpenSearchServerlessIndexName\",\
\"documentation\":\"<p>The Serverless offering for Amazon OpenSearch Service index name.</p>\"\
},\
\"BufferingHints\":{\
\"shape\":\"AmazonOpenSearchServerlessBufferingHints\",\
\"documentation\":\"<p>The buffering options.</p>\"\
},\
\"RetryOptions\":{\
\"shape\":\"AmazonOpenSearchServerlessRetryOptions\",\
\"documentation\":\"<p>The Serverless offering for Amazon OpenSearch Service retry options.</p>\"\
},\
\"S3BackupMode\":{\
\"shape\":\"AmazonOpenSearchServerlessS3BackupMode\",\
\"documentation\":\"<p>The Amazon S3 backup mode.</p>\"\
},\
\"S3DestinationDescription\":{\"shape\":\"S3DestinationDescription\"},\
\"ProcessingConfiguration\":{\"shape\":\"ProcessingConfiguration\"},\
\"CloudWatchLoggingOptions\":{\"shape\":\"CloudWatchLoggingOptions\"},\
\"VpcConfigurationDescription\":{\"shape\":\"VpcConfigurationDescription\"}\
},\
\"documentation\":\"<p>The destination description in the Serverless offering for Amazon OpenSearch Service.</p>\"\
},\
\"AmazonOpenSearchServerlessDestinationUpdate\":{\
\"type\":\"structure\",\
\"members\":{\
\"RoleARN\":{\
\"shape\":\"RoleARN\",\
\"documentation\":\"<p>The Amazon Resource Name (ARN) of the IAM role to be assumed by Firehose for calling the Serverless offering for Amazon OpenSearch Service Configuration API and for indexing documents.</p>\"\
},\
\"CollectionEndpoint\":{\
\"shape\":\"AmazonOpenSearchServerlessCollectionEndpoint\",\
\"documentation\":\"<p>The endpoint to use when communicating with the collection in the Serverless offering for Amazon OpenSearch Service.</p>\"\
},\
\"IndexName\":{\
\"shape\":\"AmazonOpenSearchServerlessIndexName\",\
\"documentation\":\"<p>The Serverless offering for Amazon OpenSearch Service index name.</p>\"\
},\
\"BufferingHints\":{\
\"shape\":\"AmazonOpenSearchServerlessBufferingHints\",\
\"documentation\":\"<p>The buffering options. If no value is specified, AmazonopensearchBufferingHints object default values are used.</p>\"\
},\
\"RetryOptions\":{\
\"shape\":\"AmazonOpenSearchServerlessRetryOptions\",\
\"documentation\":\"<p>The retry behavior in case Firehose is unable to deliver documents to the Serverless offering for Amazon OpenSearch Service. The default value is 300 (5 minutes).</p>\"\
},\
\"S3Update\":{\"shape\":\"S3DestinationUpdate\"},\
\"ProcessingConfiguration\":{\"shape\":\"ProcessingConfiguration\"},\
\"CloudWatchLoggingOptions\":{\"shape\":\"CloudWatchLoggingOptions\"}\
},\
\"documentation\":\"<p>Describes an update for a destination in the Serverless offering for Amazon OpenSearch Service.</p>\"\
},\
\"AmazonOpenSearchServerlessIndexName\":{\
\"type\":\"string\",\
\"max\":80,\
\"min\":1,\
\"pattern\":\".*\"\
},\
\"AmazonOpenSearchServerlessRetryDurationInSeconds\":{\
\"type\":\"integer\",\
\"max\":7200,\
\"min\":0\
},\
\"AmazonOpenSearchServerlessRetryOptions\":{\
\"type\":\"structure\",\
\"members\":{\
\"DurationInSeconds\":{\
\"shape\":\"AmazonOpenSearchServerlessRetryDurationInSeconds\",\
\"documentation\":\"<p>After an initial failure to deliver to the Serverless offering for Amazon OpenSearch Service, the total amount of time during which Firehose retries delivery (including the first attempt). After this time has elapsed, the failed documents are written to Amazon S3. Default value is 300 seconds (5 minutes). A value of 0 (zero) results in no retries.</p>\"\
}\
},\
\"documentation\":\"<p>Configures retry behavior in case Firehose is unable to deliver documents to the Serverless offering for Amazon OpenSearch Service.</p>\"\
},\
\"AmazonOpenSearchServerlessS3BackupMode\":{\
\"type\":\"string\",\
\"enum\":[\
\"FailedDocumentsOnly\",\
\"AllDocuments\"\
]\
},\
\"AmazonopensearchserviceBufferingHints\":{\
\"type\":\"structure\",\
\"members\":{\
\"IntervalInSeconds\":{\
\"shape\":\"AmazonopensearchserviceBufferingIntervalInSeconds\",\
\"documentation\":\"<p>Buffer incoming data for the specified period of time, in seconds, before delivering it to the destination. The default value is 300 (5 minutes). </p>\"\
},\
\"SizeInMBs\":{\
\"shape\":\"AmazonopensearchserviceBufferingSizeInMBs\",\
\"documentation\":\"<p>Buffer incoming data to the specified size, in MBs, before delivering it to the destination. The default value is 5.</p> <p>We recommend setting this parameter to a value greater than the amount of data you typically ingest into the delivery stream in 10 seconds. For example, if you typically ingest data at 1 MB/sec, the value should be 10 MB or higher. </p>\"\
}\
},\
\"documentation\":\"<p>Describes the buffering to perform before delivering data to the Amazon OpenSearch Service destination. </p>\"\
},\
\"AmazonopensearchserviceBufferingIntervalInSeconds\":{\
\"type\":\"integer\",\
\"max\":900,\
\"min\":0\
},\
\"AmazonopensearchserviceBufferingSizeInMBs\":{\
\"type\":\"integer\",\
\"max\":100,\
\"min\":1\
},\
\"AmazonopensearchserviceClusterEndpoint\":{\
\"type\":\"string\",\
\"max\":512,\
\"min\":1,\
\"pattern\":\"https:.*\"\
},\
\"AmazonopensearchserviceDestinationConfiguration\":{\
\"type\":\"structure\",\
\"required\":[\
\"RoleARN\",\
\"IndexName\",\
\"S3Configuration\"\
],\
\"members\":{\
\"RoleARN\":{\
\"shape\":\"RoleARN\",\
\"documentation\":\"<p>The Amazon Resource Name (ARN) of the IAM role to be assumed by Firehose for calling the Amazon OpenSearch Service Configuration API and for indexing documents.</p>\"\
},\
\"DomainARN\":{\
\"shape\":\"AmazonopensearchserviceDomainARN\",\
\"documentation\":\"<p>The ARN of the Amazon OpenSearch Service domain. The IAM role must have permissions for DescribeElasticsearchDomain, DescribeElasticsearchDomains, and DescribeElasticsearchDomainConfig after assuming the role specified in RoleARN. </p>\"\
},\
\"ClusterEndpoint\":{\
\"shape\":\"AmazonopensearchserviceClusterEndpoint\",\
\"documentation\":\"<p>The endpoint to use when communicating with the cluster. Specify either this ClusterEndpoint or the DomainARN field. </p>\"\
},\
\"IndexName\":{\
\"shape\":\"AmazonopensearchserviceIndexName\",\
\"documentation\":\"<p>The ElasticsearAmazon OpenSearch Service index name.</p>\"\
},\
\"TypeName\":{\
\"shape\":\"AmazonopensearchserviceTypeName\",\
\"documentation\":\"<p>The Amazon OpenSearch Service type name. For Elasticsearch 6.x, there can be only one type per index. If you try to specify a new type for an existing index that already has another type, Firehose returns an error during run time. </p>\"\
},\
\"IndexRotationPeriod\":{\
\"shape\":\"AmazonopensearchserviceIndexRotationPeriod\",\
\"documentation\":\"<p>The Amazon OpenSearch Service index rotation period. Index rotation appends a timestamp to the IndexName to facilitate the expiration of old data.</p>\"\
},\
\"BufferingHints\":{\
\"shape\":\"AmazonopensearchserviceBufferingHints\",\
\"documentation\":\"<p>The buffering options. If no value is specified, the default values for AmazonopensearchserviceBufferingHints are used. </p>\"\
},\
\"RetryOptions\":{\
\"shape\":\"AmazonopensearchserviceRetryOptions\",\
\"documentation\":\"<p>The retry behavior in case Firehose is unable to deliver documents to Amazon OpenSearch Service. The default value is 300 (5 minutes). </p>\"\
},\
\"S3BackupMode\":{\
\"shape\":\"AmazonopensearchserviceS3BackupMode\",\
\"documentation\":\"<p>Defines how documents should be delivered to Amazon S3. When it is set to FailedDocumentsOnly, Firehose writes any documents that could not be indexed to the configured Amazon S3 destination, with AmazonOpenSearchService-failed/ appended to the key prefix. When set to AllDocuments, Firehose delivers all incoming records to Amazon S3, and also writes failed documents with AmazonOpenSearchService-failed/ appended to the prefix. </p>\"\
},\
\"S3Configuration\":{\"shape\":\"S3DestinationConfiguration\"},\
\"ProcessingConfiguration\":{\"shape\":\"ProcessingConfiguration\"},\
\"CloudWatchLoggingOptions\":{\"shape\":\"CloudWatchLoggingOptions\"},\
\"VpcConfiguration\":{\"shape\":\"VpcConfiguration\"},\
\"DocumentIdOptions\":{\
\"shape\":\"DocumentIdOptions\",\
\"documentation\":\"<p>Indicates the method for setting up document ID. The supported methods are Firehose generated document ID and OpenSearch Service generated document ID.</p>\"\
}\
},\
\"documentation\":\"<p>Describes the configuration of a destination in Amazon OpenSearch Service</p>\"\
},\
\"AmazonopensearchserviceDestinationDescription\":{\
\"type\":\"structure\",\
\"members\":{\
\"RoleARN\":{\
\"shape\":\"RoleARN\",\
\"documentation\":\"<p>The Amazon Resource Name (ARN) of the Amazon Web Services credentials. </p>\"\
},\
\"DomainARN\":{\
\"shape\":\"AmazonopensearchserviceDomainARN\",\
\"documentation\":\"<p>The ARN of the Amazon OpenSearch Service domain.</p>\"\
},\
\"ClusterEndpoint\":{\
\"shape\":\"AmazonopensearchserviceClusterEndpoint\",\
\"documentation\":\"<p>The endpoint to use when communicating with the cluster. Firehose uses either this ClusterEndpoint or the DomainARN field to send data to Amazon OpenSearch Service. </p>\"\
},\
\"IndexName\":{\
\"shape\":\"AmazonopensearchserviceIndexName\",\
\"documentation\":\"<p>The Amazon OpenSearch Service index name.</p>\"\
},\
\"TypeName\":{\
\"shape\":\"AmazonopensearchserviceTypeName\",\
\"documentation\":\"<p>The Amazon OpenSearch Service type name. This applies to Elasticsearch 6.x and lower versions. For Elasticsearch 7.x and OpenSearch Service 1.x, there's no value for TypeName. </p>\"\
},\
\"IndexRotationPeriod\":{\
\"shape\":\"AmazonopensearchserviceIndexRotationPeriod\",\
\"documentation\":\"<p>The Amazon OpenSearch Service index rotation period</p>\"\
},\
\"BufferingHints\":{\
\"shape\":\"AmazonopensearchserviceBufferingHints\",\
\"documentation\":\"<p>The buffering options.</p>\"\
},\
\"RetryOptions\":{\
\"shape\":\"AmazonopensearchserviceRetryOptions\",\
\"documentation\":\"<p>The Amazon OpenSearch Service retry options.</p>\"\
},\
\"S3BackupMode\":{\
\"shape\":\"AmazonopensearchserviceS3BackupMode\",\
\"documentation\":\"<p>The Amazon S3 backup mode.</p>\"\
},\
\"S3DestinationDescription\":{\"shape\":\"S3DestinationDescription\"},\
\"ProcessingConfiguration\":{\"shape\":\"ProcessingConfiguration\"},\
\"CloudWatchLoggingOptions\":{\"shape\":\"CloudWatchLoggingOptions\"},\
\"VpcConfigurationDescription\":{\"shape\":\"VpcConfigurationDescription\"},\
\"DocumentIdOptions\":{\
\"shape\":\"DocumentIdOptions\",\
\"documentation\":\"<p>Indicates the method for setting up document ID. The supported methods are Firehose generated document ID and OpenSearch Service generated document ID.</p>\"\
}\
},\
\"documentation\":\"<p>The destination description in Amazon OpenSearch Service.</p>\"\
},\
\"AmazonopensearchserviceDestinationUpdate\":{\
\"type\":\"structure\",\
\"members\":{\
\"RoleARN\":{\
\"shape\":\"RoleARN\",\
\"documentation\":\"<p>The Amazon Resource Name (ARN) of the IAM role to be assumed by Firehose for calling the Amazon OpenSearch Service Configuration API and for indexing documents. </p>\"\
},\
\"DomainARN\":{\
\"shape\":\"AmazonopensearchserviceDomainARN\",\
\"documentation\":\"<p>The ARN of the Amazon OpenSearch Service domain. The IAM role must have permissions for DescribeDomain, DescribeDomains, and DescribeDomainConfig after assuming the IAM role specified in RoleARN.</p>\"\
},\
\"ClusterEndpoint\":{\
\"shape\":\"AmazonopensearchserviceClusterEndpoint\",\
\"documentation\":\"<p>The endpoint to use when communicating with the cluster. Specify either this ClusterEndpoint or the DomainARN field. </p>\"\
},\
\"IndexName\":{\
\"shape\":\"AmazonopensearchserviceIndexName\",\
\"documentation\":\"<p>The Amazon OpenSearch Service index name.</p>\"\
},\
\"TypeName\":{\
\"shape\":\"AmazonopensearchserviceTypeName\",\
\"documentation\":\"<p>The Amazon OpenSearch Service type name. For Elasticsearch 6.x, there can be only one type per index. If you try to specify a new type for an existing index that already has another type, Firehose returns an error during runtime. </p> <p>If you upgrade Elasticsearch from 6.x to 7.x and donât update your delivery stream, Firehose still delivers data to Elasticsearch with the old index name and type name. If you want to update your delivery stream with a new index name, provide an empty string for TypeName. </p>\"\
},\
\"IndexRotationPeriod\":{\
\"shape\":\"AmazonopensearchserviceIndexRotationPeriod\",\
\"documentation\":\"<p>The Amazon OpenSearch Service index rotation period. Index rotation appends a timestamp to IndexName to facilitate the expiration of old data.</p>\"\
},\
\"BufferingHints\":{\
\"shape\":\"AmazonopensearchserviceBufferingHints\",\
\"documentation\":\"<p>The buffering options. If no value is specified, AmazonopensearchBufferingHints object default values are used. </p>\"\
},\
\"RetryOptions\":{\
\"shape\":\"AmazonopensearchserviceRetryOptions\",\
\"documentation\":\"<p>The retry behavior in case Firehose is unable to deliver documents to Amazon OpenSearch Service. The default value is 300 (5 minutes). </p>\"\
},\
\"S3Update\":{\"shape\":\"S3DestinationUpdate\"},\
\"ProcessingConfiguration\":{\"shape\":\"ProcessingConfiguration\"},\
\"CloudWatchLoggingOptions\":{\"shape\":\"CloudWatchLoggingOptions\"},\
\"DocumentIdOptions\":{\
\"shape\":\"DocumentIdOptions\",\
\"documentation\":\"<p>Indicates the method for setting up document ID. The supported methods are Firehose generated document ID and OpenSearch Service generated document ID.</p>\"\
}\
},\
\"documentation\":\"<p>Describes an update for a destination in Amazon OpenSearch Service.</p>\"\
},\
\"AmazonopensearchserviceDomainARN\":{\
\"type\":\"string\",\
\"max\":512,\
\"min\":1,\
\"pattern\":\"arn:.*\"\
},\
\"AmazonopensearchserviceIndexName\":{\
\"type\":\"string\",\
\"max\":80,\
\"min\":1,\
\"pattern\":\".*\"\
},\
\"AmazonopensearchserviceIndexRotationPeriod\":{\
\"type\":\"string\",\
\"enum\":[\
\"NoRotation\",\
\"OneHour\",\
\"OneDay\",\
\"OneWeek\",\
\"OneMonth\"\
]\
},\
\"AmazonopensearchserviceRetryDurationInSeconds\":{\
\"type\":\"integer\",\
\"max\":7200,\
\"min\":0\
},\
\"AmazonopensearchserviceRetryOptions\":{\
\"type\":\"structure\",\
\"members\":{\
\"DurationInSeconds\":{\
\"shape\":\"AmazonopensearchserviceRetryDurationInSeconds\",\
\"documentation\":\"<p>After an initial failure to deliver to Amazon OpenSearch Service, the total amount of time during which Firehose retries delivery (including the first attempt). After this time has elapsed, the failed documents are written to Amazon S3. Default value is 300 seconds (5 minutes). A value of 0 (zero) results in no retries. </p>\"\
}\
},\
\"documentation\":\"<p>Configures retry behavior in case Firehose is unable to deliver documents to Amazon OpenSearch Service. </p>\"\
},\
\"AmazonopensearchserviceS3BackupMode\":{\
\"type\":\"string\",\
\"enum\":[\
\"FailedDocumentsOnly\",\
\"AllDocuments\"\
]\
},\
\"AmazonopensearchserviceTypeName\":{\
\"type\":\"string\",\
\"max\":100,\
\"min\":0,\
\"pattern\":\".*\"\
},\
\"AuthenticationConfiguration\":{\
\"type\":\"structure\",\
\"required\":[\
\"RoleARN\",\
\"Connectivity\"\
],\
\"members\":{\
\"RoleARN\":{\
\"shape\":\"RoleARN\",\
\"documentation\":\"<p>The ARN of the role used to access the Amazon MSK cluster.</p>\"\
},\
\"Connectivity\":{\
\"shape\":\"Connectivity\",\
\"documentation\":\"<p>The type of connectivity used to access the Amazon MSK cluster.</p>\"\
}\
},\
\"documentation\":\"<p>The authentication configuration of the Amazon MSK cluster.</p>\"\
},\
\"BlockSizeBytes\":{\
\"type\":\"integer\",\
\"min\":67108864\
},\
\"BooleanObject\":{\"type\":\"boolean\"},\
\"BucketARN\":{\
\"type\":\"string\",\
\"max\":2048,\
\"min\":1,\
\"pattern\":\"arn:.*\"\
},\
\"BufferingHints\":{\
\"type\":\"structure\",\
\"members\":{\
\"SizeInMBs\":{\
\"shape\":\"SizeInMBs\",\
\"documentation\":\"<p>Buffer incoming data to the specified size, in MiBs, before delivering it to the destination. The default value is 5. This parameter is optional but if you specify a value for it, you must also specify a value for <code>IntervalInSeconds</code>, and vice versa.</p> <p>We recommend setting this parameter to a value greater than the amount of data you typically ingest into the delivery stream in 10 seconds. For example, if you typically ingest data at 1 MiB/sec, the value should be 10 MiB or higher.</p>\"\
},\
\"IntervalInSeconds\":{\
\"shape\":\"IntervalInSeconds\",\
\"documentation\":\"<p>Buffer incoming data for the specified period of time, in seconds, before delivering it to the destination. The default value is 300. This parameter is optional but if you specify a value for it, you must also specify a value for <code>SizeInMBs</code>, and vice versa.</p>\"\
}\
},\
\"documentation\":\"<p>Describes hints for the buffering to perform before delivering data to the destination. These options are treated as hints, and therefore Firehose might choose to use different values when it is optimal. The <code>SizeInMBs</code> and <code>IntervalInSeconds</code> parameters are optional. However, if specify a value for one of them, you must also provide a value for the other.</p>\"\
},\
\"CloudWatchLoggingOptions\":{\
\"type\":\"structure\",\
\"members\":{\
\"Enabled\":{\
\"shape\":\"BooleanObject\",\
\"documentation\":\"<p>Enables or disables CloudWatch logging.</p>\"\
},\
\"LogGroupName\":{\
\"shape\":\"LogGroupName\",\
\"documentation\":\"<p>The CloudWatch group name for logging. This value is required if CloudWatch logging is enabled.</p>\"\
},\
\"LogStreamName\":{\
\"shape\":\"LogStreamName\",\
\"documentation\":\"<p>The CloudWatch log stream name for logging. This value is required if CloudWatch logging is enabled.</p>\"\
}\
},\
\"documentation\":\"<p>Describes the Amazon CloudWatch logging options for your delivery stream.</p>\"\
},\
\"ClusterJDBCURL\":{\
\"type\":\"string\",\
\"max\":512,\
\"min\":1,\
\"pattern\":\"jdbc:(redshift|postgresql)://((?!-)[A-Za-z0-9-]{1,63}(?<!-)\\\\.)+(redshift(-serverless)?)\\\\.([a-zA-Z0-9\\\\.]+):\\\\d{1,5}/[a-zA-Z0-9_$-]+\"\
},\
\"ColumnToJsonKeyMappings\":{\
\"type\":\"map\",\
\"key\":{\"shape\":\"NonEmptyStringWithoutWhitespace\"},\
\"value\":{\"shape\":\"NonEmptyString\"}\
},\
\"CompressionFormat\":{\
\"type\":\"string\",\
\"enum\":[\
\"UNCOMPRESSED\",\
\"GZIP\",\
\"ZIP\",\
\"Snappy\",\
\"HADOOP_SNAPPY\"\
]\
},\
\"ConcurrentModificationException\":{\
\"type\":\"structure\",\
\"members\":{\
\"message\":{\
\"shape\":\"ErrorMessage\",\
\"documentation\":\"<p>A message that provides information about the error.</p>\"\
}\
},\
\"documentation\":\"<p>Another modification has already happened. Fetch <code>VersionId</code> again and use it to update the destination.</p>\",\
\"exception\":true\
},\
\"Connectivity\":{\
\"type\":\"string\",\
\"enum\":[\
\"PUBLIC\",\
\"PRIVATE\"\
]\
},\
\"ContentEncoding\":{\
\"type\":\"string\",\
\"enum\":[\
\"NONE\",\
\"GZIP\"\
]\
},\
\"CopyCommand\":{\
\"type\":\"structure\",\
\"required\":[\"DataTableName\"],\
\"members\":{\
\"DataTableName\":{\
\"shape\":\"DataTableName\",\
\"documentation\":\"<p>The name of the target table. The table must already exist in the database.</p>\"\
},\
\"DataTableColumns\":{\
\"shape\":\"DataTableColumns\",\
\"documentation\":\"<p>A comma-separated list of column names.</p>\"\
},\
\"CopyOptions\":{\
\"shape\":\"CopyOptions\",\
\"documentation\":\"<p>Optional parameters to use with the Amazon Redshift <code>COPY</code> command. For more information, see the \\\"Optional Parameters\\\" section of <a href=\\\"https://docs.aws.amazon.com/redshift/latest/dg/r_COPY.html\\\">Amazon Redshift COPY command</a>. Some possible examples that would apply to Firehose are as follows:</p> <p> <code>delimiter '\\\\t' lzop;</code> - fields are delimited with \\\"\\\\t\\\" (TAB character) and compressed using lzop.</p> <p> <code>delimiter '|'</code> - fields are delimited with \\\"|\\\" (this is the default delimiter).</p> <p> <code>delimiter '|' escape</code> - the delimiter should be escaped.</p> <p> <code>fixedwidth 'venueid:3,venuename:25,venuecity:12,venuestate:2,venueseats:6'</code> - fields are fixed width in the source, with each width specified after every column in the table.</p> <p> <code>JSON 's3://mybucket/jsonpaths.txt'</code> - data is in JSON format, and the path specified is the format of the data.</p> <p>For more examples, see <a href=\\\"https://docs.aws.amazon.com/redshift/latest/dg/r_COPY_command_examples.html\\\">Amazon Redshift COPY command examples</a>.</p>\"\
}\
},\
\"documentation\":\"<p>Describes a <code>COPY</code> command for Amazon Redshift.</p>\"\
},\
\"CopyOptions\":{\
\"type\":\"string\",\
\"max\":204800,\
\"min\":0,\
\"pattern\":\".*\"\
},\
\"CreateDeliveryStreamInput\":{\
\"type\":\"structure\",\
\"required\":[\"DeliveryStreamName\"],\
\"members\":{\
\"DeliveryStreamName\":{\
\"shape\":\"DeliveryStreamName\",\
\"documentation\":\"<p>The name of the delivery stream. This name must be unique per Amazon Web Services account in the same Amazon Web Services Region. If the delivery streams are in different accounts or different Regions, you can have multiple delivery streams with the same name.</p>\"\
},\
\"DeliveryStreamType\":{\
\"shape\":\"DeliveryStreamType\",\
\"documentation\":\"<p>The delivery stream type. This parameter can be one of the following values:</p> <ul> <li> <p> <code>DirectPut</code>: Provider applications access the delivery stream directly.</p> </li> <li> <p> <code>KinesisStreamAsSource</code>: The delivery stream uses a Kinesis data stream as a source.</p> </li> </ul>\"\
},\
\"KinesisStreamSourceConfiguration\":{\
\"shape\":\"KinesisStreamSourceConfiguration\",\
\"documentation\":\"<p>When a Kinesis data stream is used as the source for the delivery stream, a <a>KinesisStreamSourceConfiguration</a> containing the Kinesis data stream Amazon Resource Name (ARN) and the role ARN for the source stream.</p>\"\
},\
\"DeliveryStreamEncryptionConfigurationInput\":{\
\"shape\":\"DeliveryStreamEncryptionConfigurationInput\",\
\"documentation\":\"<p>Used to specify the type and Amazon Resource Name (ARN) of the KMS key needed for Server-Side Encryption (SSE).</p>\"\
},\
\"S3DestinationConfiguration\":{\
\"shape\":\"S3DestinationConfiguration\",\
\"documentation\":\"<p>[Deprecated] The destination in Amazon S3. You can specify only one destination.</p>\",\
\"deprecated\":true\
},\
\"ExtendedS3DestinationConfiguration\":{\
\"shape\":\"ExtendedS3DestinationConfiguration\",\
\"documentation\":\"<p>The destination in Amazon S3. You can specify only one destination.</p>\"\
},\
\"RedshiftDestinationConfiguration\":{\
\"shape\":\"RedshiftDestinationConfiguration\",\
\"documentation\":\"<p>The destination in Amazon Redshift. You can specify only one destination.</p>\"\
},\
\"ElasticsearchDestinationConfiguration\":{\
\"shape\":\"ElasticsearchDestinationConfiguration\",\
\"documentation\":\"<p>The destination in Amazon ES. You can specify only one destination.</p>\"\
},\
\"AmazonopensearchserviceDestinationConfiguration\":{\
\"shape\":\"AmazonopensearchserviceDestinationConfiguration\",\
\"documentation\":\"<p>The destination in Amazon OpenSearch Service. You can specify only one destination.</p>\"\
},\
\"SplunkDestinationConfiguration\":{\
\"shape\":\"SplunkDestinationConfiguration\",\
\"documentation\":\"<p>The destination in Splunk. You can specify only one destination.</p>\"\
},\
\"HttpEndpointDestinationConfiguration\":{\
\"shape\":\"HttpEndpointDestinationConfiguration\",\
\"documentation\":\"<p>Enables configuring Kinesis Firehose to deliver data to any HTTP endpoint destination. You can specify only one destination.</p>\"\
},\
\"Tags\":{\
\"shape\":\"TagDeliveryStreamInputTagList\",\
\"documentation\":\"<p>A set of tags to assign to the delivery stream. A tag is a key-value pair that you can define and assign to Amazon Web Services resources. Tags are metadata. For example, you can add friendly names and descriptions or other types of information that can help you distinguish the delivery stream. For more information about tags, see <a href=\\\"https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/cost-alloc-tags.html\\\">Using Cost Allocation Tags</a> in the Amazon Web Services Billing and Cost Management User Guide.</p> <p>You can specify up to 50 tags when creating a delivery stream.</p> <p>If you specify tags in the <code>CreateDeliveryStream</code> action, Amazon Data Firehose performs an additional authorization on the <code>firehose:TagDeliveryStream</code> action to verify if users have permissions to create tags. If you do not provide this permission, requests to create new Firehose delivery streams with IAM resource tags will fail with an <code>AccessDeniedException</code> such as following.</p> <p> <b>AccessDeniedException</b> </p> <p>User: arn:aws:sts::x:assumed-role/x/x is not authorized to perform: firehose:TagDeliveryStream on resource: arn:aws:firehose:us-east-1:x:deliverystream/x with an explicit deny in an identity-based policy.</p> <p>For an example IAM policy, see <a href=\\\"https://docs.aws.amazon.com/firehose/latest/APIReference/API_CreateDeliveryStream.html#API_CreateDeliveryStream_Examples\\\">Tag example.</a> </p>\"\
},\
\"AmazonOpenSearchServerlessDestinationConfiguration\":{\
\"shape\":\"AmazonOpenSearchServerlessDestinationConfiguration\",\
\"documentation\":\"<p>The destination in the Serverless offering for Amazon OpenSearch Service. You can specify only one destination.</p>\"\
},\
\"MSKSourceConfiguration\":{\"shape\":\"MSKSourceConfiguration\"},\
\"SnowflakeDestinationConfiguration\":{\
\"shape\":\"SnowflakeDestinationConfiguration\",\
\"documentation\":\"<p>Configure Snowflake destination</p>\"\
}\
}\
},\
\"CreateDeliveryStreamOutput\":{\
\"type\":\"structure\",\
\"members\":{\
\"DeliveryStreamARN\":{\
\"shape\":\"DeliveryStreamARN\",\
\"documentation\":\"<p>The ARN of the delivery stream.</p>\"\
}\
}\
},\
\"CustomTimeZone\":{\
\"type\":\"string\",\
\"max\":50,\
\"min\":0\
},\
\"Data\":{\
\"type\":\"blob\",\
\"max\":1024000,\
\"min\":0\
},\
\"DataFormatConversionConfiguration\":{\
\"type\":\"structure\",\
\"members\":{\
\"SchemaConfiguration\":{\
\"shape\":\"SchemaConfiguration\",\
\"documentation\":\"<p>Specifies the Amazon Web Services Glue Data Catalog table that contains the column information. This parameter is required if <code>Enabled</code> is set to true.</p>\"\
},\
\"InputFormatConfiguration\":{\
\"shape\":\"InputFormatConfiguration\",\
\"documentation\":\"<p>Specifies the deserializer that you want Firehose to use to convert the format of your data from JSON. This parameter is required if <code>Enabled</code> is set to true.</p>\"\
},\
\"OutputFormatConfiguration\":{\
\"shape\":\"OutputFormatConfiguration\",\
\"documentation\":\"<p>Specifies the serializer that you want Firehose to use to convert the format of your data to the Parquet or ORC format. This parameter is required if <code>Enabled</code> is set to true.</p>\"\
},\
\"Enabled\":{\
\"shape\":\"BooleanObject\",\
\"documentation\":\"<p>Defaults to <code>true</code>. Set it to <code>false</code> if you want to disable format conversion while preserving the configuration details.</p>\"\
}\
},\
\"documentation\":\"<p>Specifies that you want Firehose to convert data from the JSON format to the Parquet or ORC format before writing it to Amazon S3. Firehose uses the serializer and deserializer that you specify, in addition to the column information from the Amazon Web Services Glue table, to deserialize your input data from JSON and then serialize it to the Parquet or ORC format. For more information, see <a href=\\\"https://docs.aws.amazon.com/firehose/latest/dev/record-format-conversion.html\\\">Firehose Record Format Conversion</a>.</p>\"\
},\
\"DataTableColumns\":{\
\"type\":\"string\",\
\"max\":204800,\
\"min\":0,\
\"pattern\":\".*\"\
},\
\"DataTableName\":{\
\"type\":\"string\",\
\"max\":512,\
\"min\":1,\
\"pattern\":\".*\"\
},\
\"DefaultDocumentIdFormat\":{\
\"type\":\"string\",\
\"enum\":[\
\"FIREHOSE_DEFAULT\",\
\"NO_DOCUMENT_ID\"\
]\
},\
\"DeleteDeliveryStreamInput\":{\
\"type\":\"structure\",\
\"required\":[\"DeliveryStreamName\"],\
\"members\":{\
\"DeliveryStreamName\":{\
\"shape\":\"DeliveryStreamName\",\
\"documentation\":\"<p>The name of the delivery stream.</p>\"\
},\
\"AllowForceDelete\":{\
\"shape\":\"BooleanObject\",\
\"documentation\":\"<p>Set this to true if you want to delete the delivery stream even if Firehose is unable to retire the grant for the CMK. Firehose might be unable to retire the grant due to a customer error, such as when the CMK or the grant are in an invalid state. If you force deletion, you can then use the <a href=\\\"https://docs.aws.amazon.com/kms/latest/APIReference/API_RevokeGrant.html\\\">RevokeGrant</a> operation to revoke the grant you gave to Firehose. If a failure to retire the grant happens due to an Amazon Web Services KMS issue, Firehose keeps retrying the delete operation.</p> <p>The default value is false.</p>\"\
}\
}\
},\
\"DeleteDeliveryStreamOutput\":{\
\"type\":\"structure\",\
\"members\":{\
}\
},\
\"DeliveryStartTimestamp\":{\"type\":\"timestamp\"},\
\"DeliveryStreamARN\":{\
\"type\":\"string\",\
\"max\":512,\
\"min\":1,\
\"pattern\":\"arn:.*\"\
},\
\"DeliveryStreamDescription\":{\
\"type\":\"structure\",\
\"required\":[\
\"DeliveryStreamName\",\
\"DeliveryStreamARN\",\
\"DeliveryStreamStatus\",\
\"DeliveryStreamType\",\
\"VersionId\",\
\"Destinations\",\
\"HasMoreDestinations\"\
],\
\"members\":{\
\"DeliveryStreamName\":{\
\"shape\":\"DeliveryStreamName\",\
\"documentation\":\"<p>The name of the delivery stream.</p>\"\
},\
\"DeliveryStreamARN\":{\
\"shape\":\"DeliveryStreamARN\",\
\"documentation\":\"<p>The Amazon Resource Name (ARN) of the delivery stream. For more information, see <a href=\\\"https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html\\\">Amazon Resource Names (ARNs) and Amazon Web Services Service Namespaces</a>.</p>\"\
},\
\"DeliveryStreamStatus\":{\
\"shape\":\"DeliveryStreamStatus\",\
\"documentation\":\"<p>The status of the delivery stream. If the status of a delivery stream is <code>CREATING_FAILED</code>, this status doesn't change, and you can't invoke <code>CreateDeliveryStream</code> again on it. However, you can invoke the <a>DeleteDeliveryStream</a> operation to delete it.</p>\"\
},\
\"FailureDescription\":{\
\"shape\":\"FailureDescription\",\
\"documentation\":\"<p>Provides details in case one of the following operations fails due to an error related to KMS: <a>CreateDeliveryStream</a>, <a>DeleteDeliveryStream</a>, <a>StartDeliveryStreamEncryption</a>, <a>StopDeliveryStreamEncryption</a>.</p>\"\
},\
\"DeliveryStreamEncryptionConfiguration\":{\
\"shape\":\"DeliveryStreamEncryptionConfiguration\",\
\"documentation\":\"<p>Indicates the server-side encryption (SSE) status for the delivery stream.</p>\"\
},\
\"DeliveryStreamType\":{\
\"shape\":\"DeliveryStreamType\",\
\"documentation\":\"<p>The delivery stream type. This can be one of the following values:</p> <ul> <li> <p> <code>DirectPut</code>: Provider applications access the delivery stream directly.</p> </li> <li> <p> <code>KinesisStreamAsSource</code>: The delivery stream uses a Kinesis data stream as a source.</p> </li> </ul>\"\
},\
\"VersionId\":{\
\"shape\":\"DeliveryStreamVersionId\",\
\"documentation\":\"<p>Each time the destination is updated for a delivery stream, the version ID is changed, and the current version ID is required when updating the destination. This is so that the service knows it is applying the changes to the correct version of the delivery stream.</p>\"\
},\
\"CreateTimestamp\":{\
\"shape\":\"Timestamp\",\
\"documentation\":\"<p>The date and time that the delivery stream was created.</p>\"\
},\
\"LastUpdateTimestamp\":{\
\"shape\":\"Timestamp\",\
\"documentation\":\"<p>The date and time that the delivery stream was last updated.</p>\"\
},\
\"Source\":{\
\"shape\":\"SourceDescription\",\
\"documentation\":\"<p>If the <code>DeliveryStreamType</code> parameter is <code>KinesisStreamAsSource</code>, a <a>SourceDescription</a> object describing the source Kinesis data stream.</p>\"\
},\
\"Destinations\":{\
\"shape\":\"DestinationDescriptionList\",\
\"documentation\":\"<p>The destinations.</p>\"\
},\
\"HasMoreDestinations\":{\
\"shape\":\"BooleanObject\",\
\"documentation\":\"<p>Indicates whether there are more destinations available to list.</p>\"\
}\
},\
\"documentation\":\"<p>Contains information about a delivery stream.</p>\"\
},\
\"DeliveryStreamEncryptionConfiguration\":{\