anthropic 1.78.0 → 1.80.0

data/rbi/anthropic/internal/transport/base_client.rbi

@@ -59,6 +59,13 @@ module Anthropic
                   ]
                 ),
               model: T.nilable(Anthropic::Internal::Type::Converter::Input),
+              span_name: T.nilable(String),
+              span_attributes: T.nilable(T::Hash[String, T.anything]),
+              span_created_id:
+                T.nilable(T.any(String, T::Hash[String, Symbol])),
+              span_route: T.nilable(String),
+              span_query: T.nilable(T::Array[String]),
+              span_content_query: T.nilable(T::Array[String]),
               options: T.nilable(Anthropic::RequestOptions::OrHash)
             }
           end
@@ -84,6 +91,8 @@ module Anthropic
                     T.proc.params(arg0: T.anything).returns(T.anything)
                   )
                 ),
+              span_query: T.nilable(T::Array[String]),
+              span_content_query: T.nilable(T::Array[String]),
               options: T::Hash[Symbol, T.anything],
               middleware: T::Array[Anthropic::Middleware::Entry],
               metadata: T::Hash[Symbol, T.anything]
@@ -119,10 +128,17 @@ module Anthropic
             params(
               request: Anthropic::Internal::Transport::BaseClient::RequestInput,
               status: Integer,
-              response_headers: T::Hash[String, String]
+              response_headers: T::Hash[String, String],
+              span: T.nilable(T.anything)
             ).returns(Anthropic::Internal::Transport::BaseClient::RequestInput)
           end
-          def follow_redirect(request, status:, response_headers:)
+          def follow_redirect(
+            request,
+            status:,
+            response_headers:,
+            # the span of the API call
+            span: nil
+          )
           end
 
           # @api private
@@ -173,6 +189,8 @@ module Anthropic
             max_retries: Integer,
             initial_retry_delay: Float,
             max_retry_delay: Float,
+            open_telemetry:
+              T.nilable(T.any(T::Boolean, Anthropic::Internal::AnyHash)),
             headers:
               T::Hash[
                 String,
@@ -197,6 +215,7 @@ module Anthropic
           max_retries: 0,
           initial_retry_delay: 0.0,
           max_retry_delay: 0.0,
+          open_telemetry: nil,
           headers: {},
           idempotency_header: nil,
           middleware: nil,
@@ -209,6 +228,41 @@ module Anthropic
         private def auth_headers
         end
 
+        # @api private
+        #
+        # What every span of this client starts with. A client for another platform
+        # overrides it.
+        sig { overridable.returns(T::Hash[String, String]) }
+        def open_telemetry_attributes
+        end
+
+        # @api private
+        #
+        # Whether this client's spans have the `content` attributes.
+        sig { overridable.returns(T::Boolean) }
+        def open_telemetry_content?
+        end
+
+        # @api private
+        # The most bytes the `content` attributes of one of this client's spans hold.
+        sig { returns(Integer) }
+        attr_reader :open_telemetry_max_content_bytes
+
+        # @api private
+        #
+        # The tracer of this client's spans, or `nil` when they are disabled.
+        sig { returns(T.nilable(T.anything)) }
+        def open_telemetry_tracer
+        end
+
+        # @api private
+        #
+        # The instrumentation scope of this client's spans. A client for another platform
+        # overrides it.
+        sig { overridable.returns(String) }
+        private def open_telemetry_scope
+        end
+
         # @api private
         sig { returns(String) }
         private def user_agent
@@ -262,7 +316,8 @@ module Anthropic
             request: Anthropic::Internal::Transport::BaseClient::RequestInput,
             redirect_count: Integer,
             retry_count: Integer,
-            send_retry_header: T::Boolean
+            send_retry_header: T::Boolean,
+            span: T.nilable(T.anything)
           ).returns(
             [
               Integer,
@@ -276,14 +331,16 @@ module Anthropic
           request,
           redirect_count:,
           retry_count:,
-          send_retry_header:
+          send_retry_header:,
+          # the span of the API call
+          span: nil
         )
         end
 
         # Execute the request specified by `req`. This is the method that all resource
         # methods call into.
         #
-        # @overload request(method, path, query: {}, headers: {}, body: nil, unwrap: nil, page: nil, stream: nil, model: Anthropic::Internal::Type::Unknown, options: {})
+        # @overload request(method, path, query: {}, headers: {}, body: nil, unwrap: nil, page: nil, stream: nil, model: Anthropic::Internal::Type::Unknown, span_name: nil, span_attributes: nil, span_created_id: nil, span_route: nil, span_query: nil, span_content_query: nil, options: {})
         sig do
           params(
             method: Symbol,
@@ -333,6 +390,12 @@ module Anthropic
                 ]
               ),
             model: T.nilable(Anthropic::Internal::Type::Converter::Input),
+            span_name: T.nilable(String),
+            span_attributes: T.nilable(T::Hash[String, T.anything]),
+            span_created_id: T.nilable(T.any(String, T::Hash[String, Symbol])),
+            span_route: T.nilable(String),
+            span_query: T.nilable(T::Array[String]),
+            span_content_query: T.nilable(T::Array[String]),
             options: T.nilable(Anthropic::RequestOptions::OrHash)
           ).returns(T.anything)
         end
@@ -346,10 +409,35 @@ module Anthropic
           page: nil,
           stream: nil,
           model: Anthropic::Internal::Type::Unknown,
+          span_name: nil,
+          span_attributes: nil,
+          span_created_id: nil,
+          span_route: nil,
+          span_query: nil,
+          span_content_query: nil,
           options: {}
         )
         end
 
+        # @api private
+        #
+        # Yields the final response's status and headers before the body is decoded.
+        sig do
+          params(
+            req: Anthropic::Internal::Transport::BaseClient::RequestComponents,
+            span: T.nilable(T.anything),
+            blk:
+              T.nilable(
+                T
+                  .proc
+                  .params(status: Integer, headers: T::Hash[String, String])
+                  .void
+              )
+          ).returns(T.anything)
+        end
+        private def execute_request(req, span: nil, &blk)
+        end
+
         # @api private
         sig { returns(String) }
         def inspect

data/rbi/anthropic/internal/type/base_stream.rbi

@@ -7,6 +7,8 @@ module Anthropic
       #
       # This module provides a base implementation for streaming responses in the SDK.
       module BaseStream
+        # Before `Enumerable`, so that `Enumerable#select` stays ahead of `Kernel#select`, as it is at run time.
+        include Kernel
         include Enumerable
 
         Message = type_member(:in)

data/rbi/anthropic/models/anthropic_beta.rbi

@@ -220,6 +220,11 @@ module Anthropic
           :"spend-limit-reads-2026-09-26",
           Anthropic::AnthropicBeta::TaggedSymbol
         )
+      TELEMETRY_DESTINATIONS_2026_08_11 =
+        T.let(
+          :"telemetry-destinations-2026-08-11",
+          Anthropic::AnthropicBeta::TaggedSymbol
+        )
     end
   end
 end

data/rbi/anthropic/models/beta/agent_archive_params.rbi

@@ -19,7 +19,8 @@ module Anthropic
         sig { returns(String) }
         attr_accessor :agent_id
 
-        # Optional header to specify the beta version(s) you want to use.
+        # This endpoint is in beta: requests must send `managed-agents-2026-04-01` in this
+        # header.
         sig do
           returns(
             T.nilable(
@@ -59,7 +60,8 @@ module Anthropic
         def self.new(
           # Unique identifier of the agent to archive.
           agent_id:,
-          # Optional header to specify the beta version(s) you want to use.
+          # This endpoint is in beta: requests must send `managed-agents-2026-04-01` in this
+          # header.
           betas: nil,
           # Optional header to select the Workspace for this request. The value is a
           # Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).

data/rbi/anthropic/models/beta/agent_create_params.rbi

@@ -17,7 +17,7 @@ module Anthropic
 
         # Model identifier. Accepts the
         # [model string](https://platform.claude.com/docs/en/about-claude/models/overview#latest-models-comparison),
-        # e.g. `claude-opus-5`, or a `model_config` object for additional configuration
+        # e.g. `claude-opus-5-5`, or a `model_config` object for additional configuration
         # control
         sig do
           returns(
@@ -38,6 +38,20 @@ module Anthropic
         sig { returns(T.nilable(String)) }
         attr_accessor :description
 
+        # Execution principal for runs of this agent. Omitting it, sending null, or
+        # sending `{"type": "service_account"}` stores the default.
+        sig do
+          returns(
+            T.nilable(
+              T.any(
+                Anthropic::Beta::BetaManagedAgentsAWSRoleExecutionIdentityParams,
+                Anthropic::Beta::BetaManagedAgentsServiceAccountExecutionIdentityParams
+              )
+            )
+          )
+        end
+        attr_accessor :execution_identity
+
         # MCP servers this agent connects to. Maximum 20. Names must be unique within the
         # array. Every server must be referenced by an `mcp_toolset` in `tools`;
         # unreferenced servers are rejected. See the
@@ -145,7 +159,8 @@ module Anthropic
         end
         attr_writer :tools
 
-        # Optional header to specify the beta version(s) you want to use.
+        # This endpoint is in beta: requests must send `managed-agents-2026-04-01` in this
+        # header.
         sig do
           returns(
             T.nilable(
@@ -184,6 +199,13 @@ module Anthropic
               ),
             name: String,
             description: T.nilable(String),
+            execution_identity:
+              T.nilable(
+                T.any(
+                  Anthropic::Beta::BetaManagedAgentsAWSRoleExecutionIdentityParams::OrHash,
+                  Anthropic::Beta::BetaManagedAgentsServiceAccountExecutionIdentityParams::OrHash
+                )
+              ),
             mcp_servers:
               T::Array[
                 Anthropic::Beta::BetaManagedAgentsURLMCPServerParams::OrHash
@@ -220,13 +242,16 @@ module Anthropic
         def self.new(
           # Model identifier. Accepts the
           # [model string](https://platform.claude.com/docs/en/about-claude/models/overview#latest-models-comparison),
-          # e.g. `claude-opus-5`, or a `model_config` object for additional configuration
+          # e.g. `claude-opus-5-5`, or a `model_config` object for additional configuration
           # control
           model:,
           # Human-readable name for the agent.
           name:,
           # Description of what the agent does.
           description: nil,
+          # Execution principal for runs of this agent. Omitting it, sending null, or
+          # sending `{"type": "service_account"}` stores the default.
+          execution_identity: nil,
           # MCP servers this agent connects to. Maximum 20. Names must be unique within the
           # array. Every server must be referenced by an `mcp_toolset` in `tools`;
           # unreferenced servers are rejected. See the
@@ -244,7 +269,8 @@ module Anthropic
           # Tool configurations available to the agent. Maximum of 256 tools across all
           # toolsets allowed.
           tools: nil,
-          # Optional header to specify the beta version(s) you want to use.
+          # This endpoint is in beta: requests must send `managed-agents-2026-04-01` in this
+          # header.
           betas: nil,
           # Optional header to select the Workspace for this request. The value is a
           # Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
@@ -268,6 +294,13 @@ module Anthropic
                 ),
               name: String,
               description: T.nilable(String),
+              execution_identity:
+                T.nilable(
+                  T.any(
+                    Anthropic::Beta::BetaManagedAgentsAWSRoleExecutionIdentityParams,
+                    Anthropic::Beta::BetaManagedAgentsServiceAccountExecutionIdentityParams
+                  )
+                ),
               mcp_servers:
                 T::Array[Anthropic::Beta::BetaManagedAgentsURLMCPServerParams],
               metadata: T::Hash[Symbol, String],
@@ -306,7 +339,7 @@ module Anthropic
 
         # Model identifier. Accepts the
         # [model string](https://platform.claude.com/docs/en/about-claude/models/overview#latest-models-comparison),
-        # e.g. `claude-opus-5`, or a `model_config` object for additional configuration
+        # e.g. `claude-opus-5-5`, or a `model_config` object for additional configuration
         # control
         module Model
           extend Anthropic::Internal::Type::Union

data/rbi/anthropic/models/beta/agent_list_params.rbi

@@ -50,7 +50,8 @@ module Anthropic
         sig { params(page: String).void }
         attr_writer :page
 
-        # Optional header to specify the beta version(s) you want to use.
+        # This endpoint is in beta: requests must send `managed-agents-2026-04-01` in this
+        # header.
         sig do
           returns(
             T.nilable(
@@ -102,7 +103,8 @@ module Anthropic
           limit: nil,
           # Opaque pagination cursor from a previous response.
           page: nil,
-          # Optional header to specify the beta version(s) you want to use.
+          # This endpoint is in beta: requests must send `managed-agents-2026-04-01` in this
+          # header.
           betas: nil,
           # Optional header to select the Workspace for this request. The value is a
           # Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).

data/rbi/anthropic/models/beta/agent_retrieve_params.rbi

@@ -27,7 +27,8 @@ module Anthropic
         sig { params(version: Integer).void }
         attr_writer :version
 
-        # Optional header to specify the beta version(s) you want to use.
+        # This endpoint is in beta: requests must send `managed-agents-2026-04-01` in this
+        # header.
         sig do
           returns(
             T.nilable(
@@ -71,7 +72,8 @@ module Anthropic
           # Agent version. Omit for the most recent version. Must be at least 1 if
           # specified.
           version: nil,
-          # Optional header to specify the beta version(s) you want to use.
+          # This endpoint is in beta: requests must send `managed-agents-2026-04-01` in this
+          # header.
           betas: nil,
           # Optional header to select the Workspace for this request. The value is a
           # Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).

data/rbi/anthropic/models/beta/agent_update_params.rbi

@@ -23,6 +23,20 @@ module Anthropic
         sig { returns(T.nilable(String)) }
         attr_accessor :description
 
+        # Execution principal for runs of this agent. Full replacement. Omit to preserve;
+        # send null or `{"type": "service_account"}` to restore the default.
+        sig do
+          returns(
+            T.nilable(
+              T.any(
+                Anthropic::Beta::BetaManagedAgentsAWSRoleExecutionIdentityParams,
+                Anthropic::Beta::BetaManagedAgentsServiceAccountExecutionIdentityParams
+              )
+            )
+          )
+        end
+        attr_accessor :execution_identity
+
         # MCP servers. Full replacement. Omit to preserve; send empty array or `null` to
         # clear. Names must be unique. Maximum 20. Every server must be referenced by an
         # `mcp_toolset` in the agent's resulting `tools`; unreferenced servers are
@@ -45,7 +59,7 @@ module Anthropic
 
         # Model identifier. Accepts the
         # [model string](https://platform.claude.com/docs/en/about-claude/models/overview#latest-models-comparison),
-        # e.g. `claude-opus-5`, or a `model_config` object for additional configuration
+        # e.g. `claude-opus-5-5`, or a `model_config` object for additional configuration
         # control. Omit to preserve. Cannot be cleared.
         sig do
           returns(
@@ -140,7 +154,8 @@ module Anthropic
         sig { params(version: Integer).void }
         attr_writer :version
 
-        # Optional header to specify the beta version(s) you want to use.
+        # This endpoint is in beta: requests must send `managed-agents-2026-04-01` in this
+        # header.
         sig do
           returns(
             T.nilable(
@@ -173,6 +188,13 @@ module Anthropic
           params(
             agent_id: String,
             description: T.nilable(String),
+            execution_identity:
+              T.nilable(
+                T.any(
+                  Anthropic::Beta::BetaManagedAgentsAWSRoleExecutionIdentityParams::OrHash,
+                  Anthropic::Beta::BetaManagedAgentsServiceAccountExecutionIdentityParams::OrHash
+                )
+              ),
             mcp_servers:
               T.nilable(
                 T::Array[
@@ -225,6 +247,9 @@ module Anthropic
           agent_id:,
           # Description. Omit to preserve; send empty string or null to clear.
           description: nil,
+          # Execution principal for runs of this agent. Full replacement. Omit to preserve;
+          # send null or `{"type": "service_account"}` to restore the default.
+          execution_identity: nil,
           # MCP servers. Full replacement. Omit to preserve; send empty array or `null` to
           # clear. Names must be unique. Maximum 20. Every server must be referenced by an
           # `mcp_toolset` in the agent's resulting `tools`; unreferenced servers are
@@ -237,7 +262,7 @@ module Anthropic
           metadata: nil,
           # Model identifier. Accepts the
           # [model string](https://platform.claude.com/docs/en/about-claude/models/overview#latest-models-comparison),
-          # e.g. `claude-opus-5`, or a `model_config` object for additional configuration
+          # e.g. `claude-opus-5-5`, or a `model_config` object for additional configuration
           # control. Omit to preserve. Cannot be cleared.
           model: nil,
           # Multiagent orchestration configuration. Full replacement. Omit to preserve; send
@@ -258,7 +283,8 @@ module Anthropic
           # supplied, the request fails if it does not match the server's current version;
           # omit to apply the update unconditionally.
           version: nil,
-          # Optional header to specify the beta version(s) you want to use.
+          # This endpoint is in beta: requests must send `managed-agents-2026-04-01` in this
+          # header.
           betas: nil,
           # Optional header to select the Workspace for this request. The value is a
           # Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).
@@ -276,6 +302,13 @@ module Anthropic
             {
               agent_id: String,
               description: T.nilable(String),
+              execution_identity:
+                T.nilable(
+                  T.any(
+                    Anthropic::Beta::BetaManagedAgentsAWSRoleExecutionIdentityParams,
+                    Anthropic::Beta::BetaManagedAgentsServiceAccountExecutionIdentityParams
+                  )
+                ),
               mcp_servers:
                 T.nilable(
                   T::Array[Anthropic::Beta::BetaManagedAgentsURLMCPServerParams]
@@ -328,7 +361,7 @@ module Anthropic
 
         # Model identifier. Accepts the
         # [model string](https://platform.claude.com/docs/en/about-claude/models/overview#latest-models-comparison),
-        # e.g. `claude-opus-5`, or a `model_config` object for additional configuration
+        # e.g. `claude-opus-5-5`, or a `model_config` object for additional configuration
         # control. Omit to preserve. Cannot be cleared.
         module Model
           extend Anthropic::Internal::Type::Union

data/rbi/anthropic/models/beta/agents/version_list_params.rbi

@@ -34,7 +34,8 @@ module Anthropic
           sig { params(page: String).void }
           attr_writer :page
 
-          # Optional header to specify the beta version(s) you want to use.
+          # This endpoint is in beta: requests must send `managed-agents-2026-04-01` in this
+          # header.
           sig do
             returns(
               T.nilable(
@@ -81,7 +82,8 @@ module Anthropic
             limit: nil,
             # Opaque pagination cursor.
             page: nil,
-            # Optional header to specify the beta version(s) you want to use.
+            # This endpoint is in beta: requests must send `managed-agents-2026-04-01` in this
+            # header.
             betas: nil,
             # Optional header to select the Workspace for this request. The value is a
             # Workspace ID (for example, `wrkspc_011CZkZaBF1tNoB5wlCeusgy`).

data/rbi/anthropic/models/beta/beta_fallback_param.rbi

@@ -256,8 +256,9 @@ module Anthropic
             block_binding: nil,
             # Controls how thinking content appears in the response. When set to `summarized`,
             # thinking is returned normally. When set to `omitted`, thinking content is
-            # redacted but a signature is returned for multi-turn continuity. Defaults to
-            # `summarized`.
+            # redacted but a signature is returned for multi-turn continuity. The default
+            # depends on the model; see
+            # [Controlling thinking display](https://platform.claude.com/docs/en/build-with-claude/thinking#controlling-thinking-display).
             display_: nil
           )
           end

data/rbi/anthropic/models/beta/beta_fallbacks_param.rbi

@@ -7,8 +7,12 @@ module Anthropic
     module Beta
       # Opt-in server-side retry on one or more substitute models when the requested
       # model declines for policy reasons. Tried in order: if the first entry also
-      # declines, the second is tried, and so on. The string "default" requests the
-      # requested model's server-defined default fallback configuration.
+      # declines, the second is tried, and so on. Some models don't support fallbacks;
+      # on those models, a list of fallback models returns a 400 error. See
+      # [Server-side fallback](https://platform.claude.com/docs/en/build-with-claude/refusals-and-fallback#server-side-fallback).
+      # The string "default" requests the requested model's server-defined default
+      # fallback configuration. On a model that doesn't support fallbacks, the request
+      # runs on the requested model alone, so a declined request stays declined.
       module BetaFallbacksParam
         extend Anthropic::Internal::Type::Union
 

data/rbi/anthropic/models/beta/beta_managed_agents_agent.rbi

@@ -28,6 +28,13 @@ module Anthropic
         sig { returns(T.nilable(String)) }
         attr_accessor :description
 
+        # Execution principal for runs of this agent. Always present;
+        # `{"type": "service_account"}` when runs carry no customer-named principal.
+        sig do
+          returns(Anthropic::Beta::BetaManagedAgentsExecutionIdentity::Variants)
+        end
+        attr_accessor :execution_identity
+
         sig do
           returns(
             T::Array[Anthropic::Beta::BetaManagedAgentsMCPServerURLDefinition]
@@ -98,6 +105,11 @@ module Anthropic
             archived_at: T.nilable(Time),
             created_at: Time,
             description: T.nilable(String),
+            execution_identity:
+              T.any(
+                Anthropic::Beta::BetaManagedAgentsAWSRoleExecutionIdentity::OrHash,
+                Anthropic::Beta::BetaManagedAgentsServiceAccountExecutionIdentity::OrHash
+              ),
             mcp_servers:
               T::Array[
                 Anthropic::Beta::BetaManagedAgentsMCPServerURLDefinition::OrHash
@@ -140,6 +152,9 @@ module Anthropic
           # A timestamp in RFC 3339 format
           created_at:,
           description:,
+          # Execution principal for runs of this agent. Always present;
+          # `{"type": "service_account"}` when runs carry no customer-named principal.
+          execution_identity:,
           mcp_servers:,
           metadata:,
           # Model identifier and configuration.
@@ -166,6 +181,8 @@ module Anthropic
               archived_at: T.nilable(Time),
               created_at: Time,
               description: T.nilable(String),
+              execution_identity:
+                Anthropic::Beta::BetaManagedAgentsExecutionIdentity::Variants,
               mcp_servers:
                 T::Array[
                   Anthropic::Beta::BetaManagedAgentsMCPServerURLDefinition

data/rbi/anthropic/models/beta/beta_managed_agents_agent_with_overrides_params.rbi

@@ -47,7 +47,7 @@ module Anthropic
         end
         attr_writer :mcp_servers
 
-        # Replacement model. Accepts the model string, e.g. `claude-opus-5`, or a
+        # Replacement model. Accepts the model string, e.g. `claude-opus-5-5`, or a
         # `model_config` object. Omit to use the agent's model.
         sig do
           returns(
@@ -190,7 +190,7 @@ module Anthropic
           # Replacement MCP server list. Full replacement: the provided array becomes the
           # MCP servers. Send an empty array to clear; omit to preserve the agent's servers.
           mcp_servers: nil,
-          # Replacement model. Accepts the model string, e.g. `claude-opus-5`, or a
+          # Replacement model. Accepts the model string, e.g. `claude-opus-5-5`, or a
           # `model_config` object. Omit to use the agent's model.
           model: nil,
           # Replacement skill list. Full replacement: the provided array becomes the skills.
@@ -273,7 +273,7 @@ module Anthropic
           end
         end
 
-        # Replacement model. Accepts the model string, e.g. `claude-opus-5`, or a
+        # Replacement model. Accepts the model string, e.g. `claude-opus-5-5`, or a
         # `model_config` object. Omit to use the agent's model.
         module Model
           extend Anthropic::Internal::Type::Union

data/rbi/anthropic/models/beta/beta_managed_agents_aws_role_execution_identity.rbi

@@ -0,0 +1,40 @@
+# typed: strong
+
+module Anthropic
+  module Models
+    BetaManagedAgentsAWSRoleExecutionIdentity =
+      Beta::BetaManagedAgentsAWSRoleExecutionIdentity
+
+    module Beta
+      class BetaManagedAgentsAWSRoleExecutionIdentity < Anthropic::Internal::Type::BaseModel
+        OrHash =
+          T.type_alias do
+            T.any(
+              Anthropic::Beta::BetaManagedAgentsAWSRoleExecutionIdentity,
+              Anthropic::Internal::AnyHash
+            )
+          end
+
+        # The IAM role's ARN.
+        sig { returns(String) }
+        attr_accessor :role_arn
+
+        sig { returns(Symbol) }
+        attr_accessor :type
+
+        # An AWS IAM role principal as returned in API responses.
+        sig { params(role_arn: String, type: Symbol).returns(T.attached_class) }
+        def self.new(
+          # The IAM role's ARN.
+          role_arn:,
+          type: :aws_role
+        )
+        end
+
+        sig { override.returns({ role_arn: String, type: Symbol }) }
+        def to_hash
+        end
+      end
+    end
+  end
+end