Amazon EC2 Image Builder CreateImagePipeline API

openapi: 3.1.0
info:
  title: EC2 Image Builder Createimagepipeline API
  version: '2019-12-02'
  description: Generated from AWS's published Smithy model for EC2 Image Builder. 1 operation(s).
  contact:
    name: Amazon Web Services
    url: https://aws.amazon.com/contact-us/
  license:
    name: Apache 2.0
    identifier: Apache-2.0
    url: https://github.com/aws/api-models-aws/blob/main/LICENSE
servers:
- url: https://imagebuilder.{region}.amazonaws.com
  variables:
    region:
      default: us-east-1
security:
- sigv4: []
paths:
  /CreateImagePipeline:
    put:
      operationId: CreateImagePipeline
      summary: Create Image Pipeline
      description: Creates a new image pipeline. Use image pipelines to automate the creation and distribution of images.
        You must specify exactly one recipe for the pipeline, using either a containerRecipeArn or an imageRecipeArn.
      responses:
        '200':
          description: Success
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/CreateImagePipelineResponse'
              example:
                requestId: db0a9329-35ef-4b53-98d0-a34385e44e28
                clientToken: a1b2c3d4-5678-90ab-cdef-EXAMPLE55555
                imagePipelineArn: arn:aws:imagebuilder:us-west-2:111122223333:image-pipeline/my-example-pipeline
        '429':
          description: CallRateLimitExceededException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/CallRateLimitExceededException'
        '400':
          description: ClientException; IdempotentParameterMismatchException; InvalidRequestException; ResourceAlreadyExistsException;
            ResourceInUseException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ClientException'
        '412':
          description: DryRunOperationException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/DryRunOperationException'
        '403':
          description: ForbiddenException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ForbiddenException'
        '500':
          description: ServiceException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ServiceException'
        '402':
          description: ServiceQuotaExceededException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ServiceQuotaExceededException'
        '503':
          description: ServiceUnavailableException
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ServiceUnavailableException'
      requestBody:
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/CreateImagePipelineRequest'
            example:
              name: my-example-pipeline
              description: Builds a new version of my image every Sunday
              imageRecipeArn: arn:aws:imagebuilder:us-west-2:111122223333:image-recipe/my-example-recipe/1.0.0
              infrastructureConfigurationArn: arn:aws:imagebuilder:us-west-2:111122223333:infrastructure-configuration/my-example-infrastructure
              distributionConfigurationArn: arn:aws:imagebuilder:us-west-2:111122223333:distribution-configuration/my-example-distribution
              schedule:
                scheduleExpression: cron(0 9 ? * SUN *)
                pipelineExecutionStartCondition: EXPRESSION_MATCH_AND_DEPENDENCY_UPDATES_AVAILABLE
              status: ENABLED
              clientToken: a1b2c3d4-5678-90ab-cdef-EXAMPLE55555
      tags:
      - Createimagepipeline
components:
  securitySchemes:
    sigv4:
      type: apiKey
      in: header
      name: Authorization
      description: AWS Signature Version 4. The Authorization header carries an AWS4-HMAC-SHA256 signature over the canonical
        request, with X-Amz-Date (and X-Amz-Security-Token for temporary credentials). Not a bearer token.
      x-aws-sigv4:
        signingName: imagebuilder
  schemas:
    AutoDisablePolicy:
      type: object
      properties:
        failureCount:
          type: integer
          description: The number of consecutive scheduled image pipeline executions that must fail before Image Builder automatically
            disables the pipeline.
      required:
      - failureCount
    CallRateLimitExceededException:
      type: object
      properties:
        message:
          type: string
    ClientException:
      type: object
      properties:
        message:
          type: string
    CreateImagePipelineRequest:
      type: object
      properties:
        name:
          type: string
          description: The name of the image pipeline. Pipeline names must be unique to your account in each Amazon Web Services
            Region. Image Builder generates the pipeline ARN from a normalized form of the name, so names that differ only
            in case, spaces, or underscores count as the same name.
        description:
          type: string
          description: The description of the image pipeline.
        imageRecipeArn:
          type: string
          description: The Amazon Resource Name (ARN) of the image recipe that configures images created by this image pipeline.
            You must specify either this property or containerRecipeArn, but not both.
        containerRecipeArn:
          type: string
          description: The Amazon Resource Name (ARN) of the container recipe that is used to configure images created by
            this container pipeline. You must specify either this property or imageRecipeArn, but not both.
        infrastructureConfigurationArn:
          type: string
          description: The Amazon Resource Name (ARN) of the infrastructure configuration that builds images created by this
            image pipeline.
        distributionConfigurationArn:
          type: string
          description: The Amazon Resource Name (ARN) of the distribution configuration that configures and distributes images
            created by this image pipeline.
        imageTestsConfiguration:
          $ref: '#/components/schemas/ImageTestsConfiguration'
        enhancedImageMetadataEnabled:
          type: boolean
          description: Specifies whether to collect additional information about the image being created, including the operating
            system (OS) version and package list. Defaults to true.
        schedule:
          $ref: '#/components/schemas/Schedule'
        status:
          type: string
          enum:
          - DISABLED
          - ENABLED
          description: The status of the image pipeline. If you don't specify a status, it defaults to ENABLED. A disabled
            pipeline doesn't run on its schedule, but you can still start builds manually.
        tags:
          type: object
          additionalProperties:
            type: string
          description: The tags of the image pipeline.
        imageTags:
          type: object
          additionalProperties:
            type: string
          description: The tags that Image Builder applies to the Image Builder image resource that this pipeline's scheduled
            executions create. These tags don't apply to the output AMI. To tag output AMIs, use amiTags in the pipeline's
            distribution configuration.
        clientToken:
          type: string
          description: A unique, case-sensitive identifier you provide to ensure that the operation runs no more than one
            time. If you retry a request with the same client token, Image Builder returns the original response without running
            the operation again. For more information, see Ensuring idempotency in the Amazon EC2 API Reference.
        imageScanningConfiguration:
          $ref: '#/components/schemas/ImageScanningConfiguration'
        workflows:
          type: array
          items:
            $ref: '#/components/schemas/WorkflowConfiguration'
          description: The array of workflow configuration objects for builds that this pipeline starts. You must also specify
            executionRole when you provide workflows.
        executionRole:
          type: string
          description: The name or Amazon Resource Name (ARN) for the IAM role you create that grants Image Builder access
            to perform workflow actions.
        loggingConfiguration:
          $ref: '#/components/schemas/PipelineLoggingConfiguration'
        dryRun:
          type: boolean
          description: Validates the required permissions and request parameters without performing the operation. If validation
            succeeds, the operation returns a DryRunOperationException error response.
      required:
      - name
      - infrastructureConfigurationArn
      - clientToken
    CreateImagePipelineResponse:
      type: object
      properties:
        requestId:
          type: string
          description: The request ID that uniquely identifies this request.
        clientToken:
          type: string
          description: The client token that uniquely identifies the request.
        imagePipelineArn:
          type: string
          description: The Amazon Resource Name (ARN) of the image pipeline that was created by this request.
    DryRunOperationException:
      type: object
      properties:
        message:
          type: string
    EcrConfiguration:
      type: object
      properties:
        repositoryName:
          type: string
          description: The name of the container repository where Image Builder pushes the container image for the vulnerability
            scan. Provide the repository name only (a namespace path is allowed, but not the registry hostname); the repository
            must already exist in your account. If you don't specify a repository name, Image Builder creates the default
            repository image-builder-image-scanning-repository in your account.
        containerTags:
          type: array
          items:
            type: string
          description: Tags for Image Builder to apply to the output container image that Amazon Inspector scans. Tags can
            help you identify and manage your scanned images.
    ForbiddenException:
      type: object
      properties:
        message:
          type: string
    ImageScanningConfiguration:
      type: object
      properties:
        imageScanningEnabled:
          type: boolean
          description: Specifies whether Amazon Inspector scans for vulnerabilities when you create a new image. You must
            also enable image tests. For AMI output, imageScanningTypes sets whether Amazon Inspector scans the test instance
            or the output AMI. For container output, Amazon Inspector scans the container image that Image Builder pushes
            to the Amazon ECR repository from your ecrConfiguration settings. To use container image scans, you must activate
            Amazon Inspector for Amazon ECR scanning in your account. The Image Builder ListImageScanFindings operation returns
            the findings of these scans.
        ecrConfiguration:
          $ref: '#/components/schemas/EcrConfiguration'
        imageScanningTypes:
          type: array
          items:
            type: string
            enum:
            - TEST_INSTANCE_CVE
            - ON_DEMAND_AMI_CVE
          description: 'The type of vulnerability scan that Image Builder runs for AMI output when imageScanningEnabled is
            true. Specify a single value. If you omit imageScanningTypes, Image Builder uses TEST_INSTANCE_CVE. The scan types
            work as follows: With TEST_INSTANCE_CVE, Amazon Inspector scans the test instance during image tests. To use this
            scan, you must activate Amazon Inspector for Amazon EC2 scanning in your account. The Image Builder ListImageScanFindings
            operation returns the findings. With ON_DEMAND_AMI_CVE, Amazon Inspector starts an on-demand scan of the output
            AMI during image tests. To use this sc'
        scanResultCondition:
          $ref: '#/components/schemas/ScanResultCondition'
    ImageTestsConfiguration:
      type: object
      properties:
        imageTestsEnabled:
          type: boolean
          description: Specifies whether tests run after building the image. When enabled, tests run after the image build
            and before image distribution. Defaults to true.
        timeoutMinutes:
          type: integer
          description: The maximum time in minutes that tests are permitted to run. If you don't specify a value, Image Builder
            stores and returns 720. The timeout property is not currently active. This value is ignored.
    PipelineLoggingConfiguration:
      type: object
      properties:
        imageLogGroupName:
          type: string
          description: Specifies the CloudWatch Logs log group name for image build logs. The log group name can contain alphanumeric
            characters, hyphens, underscores, forward slashes, and periods, up to 512 characters. Log group names not starting
            with /aws/imagebuilder/ require an executionRole with CloudWatch Logs write permissions. If not specified, defaults
            to /aws/imagebuilder/image-name.
        pipelineLogGroupName:
          type: string
          description: Specifies the CloudWatch Logs log group name for pipeline execution logs. The log group name can contain
            alphanumeric characters, hyphens, underscores, forward slashes, and periods, up to 512 characters. Log group names
            not starting with /aws/imagebuilder/ require an executionRole with CloudWatch Logs write permissions. If not specified,
            defaults to /aws/imagebuilder/pipeline/pipeline-name.
    ScanResultCondition:
      type: object
      properties:
        maximumSeverityLabel:
          type: string
          enum:
          - INFORMATIONAL
          - LOW
          - MEDIUM
          - HIGH
          description: The maximum severity allowed for findings on the output AMI. A finding above this severity fails the
            image, unless fixAvailable excludes it. Valid values are INFORMATIONAL, LOW, MEDIUM, and HIGH. A CRITICAL finding
            that counts always fails the image.
        fixAvailable:
          type: boolean
          description: Specifies whether only findings that have a fix available count toward maximumSeverityLabel. When false,
            Image Builder counts every finding. The default is true.
      required:
      - maximumSeverityLabel
    Schedule:
      type: object
      properties:
        scheduleExpression:
          type: string
          description: The expression determines how often EC2 Image Builder evaluates your pipelineExecutionStartCondition.
            You can specify a cron expression, or a rate expression such as rate(1 day). For information on how to format
            a cron expression in Image Builder, see Use cron expressions in EC2 Image Builder.
        timezone:
          type: string
          description: The timezone that applies to the scheduling expression. Specify a value in IANA timezone format, for
            example Etc/UTC or America/Los_Angeles. If not specified, this defaults to UTC.
        pipelineExecutionStartCondition:
          type: string
          enum:
          - EXPRESSION_MATCH_ONLY
          - EXPRESSION_MATCH_AND_DEPENDENCY_UPDATES_AVAILABLE
          description: The start condition configures when the pipeline should trigger a new image build, as follows. If no
            value is set Image Builder defaults to EXPRESSION_MATCH_AND_DEPENDENCY_UPDATES_AVAILABLE. EXPRESSION_MATCH_AND_DEPENDENCY_UPDATES_AVAILABLE
            (default) – When you use semantic version filters on the base image or components in your image recipe, EC2 Image
            Builder builds a new image only when there are new versions of the base image or components in your recipe that
            match the filter. For semantic version syntax, see CreateComponent. EXPRESSION_MATCH_ONLY – This condition builds
            a new image every t
        autoDisablePolicy:
          $ref: '#/components/schemas/AutoDisablePolicy'
    ServiceException:
      type: object
      properties:
        message:
          type: string
    ServiceQuotaExceededException:
      type: object
      properties:
        message:
          type: string
    ServiceUnavailableException:
      type: object
      properties:
        message:
          type: string
    WorkflowConfiguration:
      type: object
      properties:
        workflowArn:
          type: string
          description: The Amazon Resource Name (ARN) of the workflow resource.
        parameters:
          type: array
          items:
            $ref: '#/components/schemas/WorkflowParameter'
          description: Contains parameter values for each of the parameters that the workflow document defined for the workflow
            resource.
        parallelGroup:
          type: string
          description: Test workflows are defined within named runtime groups called parallel groups. The parallel group is
            the named group that contains this test workflow. Test workflows within a parallel group can run at the same time.
            Image Builder starts up to five test workflows in the group at the same time, and starts additional workflows
            as others complete, until all workflows in the group have completed. This field only applies for test workflows.
        onFailure:
          type: string
          enum:
          - CONTINUE
          - ABORT
          description: The action to take if the workflow fails. With CONTINUE, a failed workflow is logged and image creation
            proceeds to the next workflow. If you don't set a value, the image build fails when the workflow fails. You can
            only set this property for test workflows.
      required:
      - workflowArn
    WorkflowParameter:
      type: object
      properties:
        name:
          type: string
          description: The name of the workflow parameter to set.
        value:
          type: array
          items:
            type: string
          description: Sets the value for the named workflow parameter.
      required:
      - name
      - value
x-provenance:
  method: harvested
  publisher: Amazon Web Services
  source: https://raw.githubusercontent.com/aws/api-models-aws/3cd98287b471c106254abd89279cc87308d38bfd/models/imagebuilder/service/2019-12-02/imagebuilder-2019-12-02.json
  note: converted by smithy-to-openapi.py from AWS's Smithy model (roadmap#1001)