aws-sdk-batch 1.161.0 → 1.162.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ad8a17d8ebfc6772f0548c8de2cfa9d0497023dc9888b5b546fbc566e6893692
-  data.tar.gz: '0508f94cfe2814bc9099c057787edc7795d09d9fca181c3e4d642109128ae142'
+  metadata.gz: e7df6466ef884dfa32626ec35fee2448aa27510bdf46faed85f925551c91da08
+  data.tar.gz: a981cc894e70ced5983d8998045ce17747ffb476d3043f688732a9670448c37f
 SHA512:
-  metadata.gz: 947abd1982010036bd0fc6cae078b4e9622db13b052b8ee56cd1e43a6c2cab5743d221dcd5f55b2a111e40a4a96ed29b6245331e6753a95d21389cab32469d3a
-  data.tar.gz: a0c20e353b890a2cb59d33d06607748c67c222c4c1a8a4ce91060ad35f42686de7d9e98920a0035f173256c63a55741cdf481dd17ff08c77a44a0d9f685f20aa
+  metadata.gz: 07fb1733c1fa201d57241babaa54be7bcb6c7b063000bb891d8979653b49e2ff0dd3826516cd0bff08f80fc2eaba3570f10cdf9c6db268d6ed3c19fed412f238
+  data.tar.gz: 6c1db09373fd54b56a9b64233d818a5d2792d4e50fe5dd3806db8fabcf58a730acf946a83f475526fdf7110aaca464e7bc7bfcd114bb8df9f0fe84b8ce9ed9c8

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.162.0 (2026-11-09)
+------------------
+
+* Feature - Adds support for additional Amazon EKS security context settings in AWS Batch. Pod-level settings include fsGroup, runAsUser, runAsGroup, runAsNonRoot, and seccompProfile. Container-level settings add Linux capabilities and seccompProfile to existing runAsUser, runAsGroup, and runAsNonRoot support.
+
 1.161.0 (2026-11-06)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.161.0
+1.162.0

data/lib/aws-sdk-batch/client.rb

@@ -2571,6 +2571,12 @@ module Aws::Batch
     #   resp.job_definitions[0].node_properties.node_range_properties[0].eks_properties.pod_properties.containers[0].security_context.allow_privilege_escalation #=> Boolean
     #   resp.job_definitions[0].node_properties.node_range_properties[0].eks_properties.pod_properties.containers[0].security_context.read_only_root_filesystem #=> Boolean
     #   resp.job_definitions[0].node_properties.node_range_properties[0].eks_properties.pod_properties.containers[0].security_context.run_as_non_root #=> Boolean
+    #   resp.job_definitions[0].node_properties.node_range_properties[0].eks_properties.pod_properties.containers[0].security_context.capabilities.add #=> Array
+    #   resp.job_definitions[0].node_properties.node_range_properties[0].eks_properties.pod_properties.containers[0].security_context.capabilities.add[0] #=> String
+    #   resp.job_definitions[0].node_properties.node_range_properties[0].eks_properties.pod_properties.containers[0].security_context.capabilities.drop #=> Array
+    #   resp.job_definitions[0].node_properties.node_range_properties[0].eks_properties.pod_properties.containers[0].security_context.capabilities.drop[0] #=> String
+    #   resp.job_definitions[0].node_properties.node_range_properties[0].eks_properties.pod_properties.containers[0].security_context.seccomp_profile.type #=> String, one of "RuntimeDefault", "Localhost", "Unconfined"
+    #   resp.job_definitions[0].node_properties.node_range_properties[0].eks_properties.pod_properties.containers[0].security_context.seccomp_profile.localhost_profile #=> String
     #   resp.job_definitions[0].node_properties.node_range_properties[0].eks_properties.pod_properties.init_containers #=> Array
     #   resp.job_definitions[0].node_properties.node_range_properties[0].eks_properties.pod_properties.init_containers[0].name #=> String
     #   resp.job_definitions[0].node_properties.node_range_properties[0].eks_properties.pod_properties.init_containers[0].image #=> String
@@ -2597,6 +2603,12 @@ module Aws::Batch
     #   resp.job_definitions[0].node_properties.node_range_properties[0].eks_properties.pod_properties.init_containers[0].security_context.allow_privilege_escalation #=> Boolean
     #   resp.job_definitions[0].node_properties.node_range_properties[0].eks_properties.pod_properties.init_containers[0].security_context.read_only_root_filesystem #=> Boolean
     #   resp.job_definitions[0].node_properties.node_range_properties[0].eks_properties.pod_properties.init_containers[0].security_context.run_as_non_root #=> Boolean
+    #   resp.job_definitions[0].node_properties.node_range_properties[0].eks_properties.pod_properties.init_containers[0].security_context.capabilities.add #=> Array
+    #   resp.job_definitions[0].node_properties.node_range_properties[0].eks_properties.pod_properties.init_containers[0].security_context.capabilities.add[0] #=> String
+    #   resp.job_definitions[0].node_properties.node_range_properties[0].eks_properties.pod_properties.init_containers[0].security_context.capabilities.drop #=> Array
+    #   resp.job_definitions[0].node_properties.node_range_properties[0].eks_properties.pod_properties.init_containers[0].security_context.capabilities.drop[0] #=> String
+    #   resp.job_definitions[0].node_properties.node_range_properties[0].eks_properties.pod_properties.init_containers[0].security_context.seccomp_profile.type #=> String, one of "RuntimeDefault", "Localhost", "Unconfined"
+    #   resp.job_definitions[0].node_properties.node_range_properties[0].eks_properties.pod_properties.init_containers[0].security_context.seccomp_profile.localhost_profile #=> String
     #   resp.job_definitions[0].node_properties.node_range_properties[0].eks_properties.pod_properties.volumes #=> Array
     #   resp.job_definitions[0].node_properties.node_range_properties[0].eks_properties.pod_properties.volumes[0].name #=> String
     #   resp.job_definitions[0].node_properties.node_range_properties[0].eks_properties.pod_properties.volumes[0].host_path.path #=> String
@@ -2612,6 +2624,12 @@ module Aws::Batch
     #   resp.job_definitions[0].node_properties.node_range_properties[0].eks_properties.pod_properties.metadata.annotations["String"] #=> String
     #   resp.job_definitions[0].node_properties.node_range_properties[0].eks_properties.pod_properties.metadata.namespace #=> String
     #   resp.job_definitions[0].node_properties.node_range_properties[0].eks_properties.pod_properties.share_process_namespace #=> Boolean
+    #   resp.job_definitions[0].node_properties.node_range_properties[0].eks_properties.pod_properties.security_context.run_as_user #=> Integer
+    #   resp.job_definitions[0].node_properties.node_range_properties[0].eks_properties.pod_properties.security_context.run_as_group #=> Integer
+    #   resp.job_definitions[0].node_properties.node_range_properties[0].eks_properties.pod_properties.security_context.run_as_non_root #=> Boolean
+    #   resp.job_definitions[0].node_properties.node_range_properties[0].eks_properties.pod_properties.security_context.seccomp_profile.type #=> String, one of "RuntimeDefault", "Localhost", "Unconfined"
+    #   resp.job_definitions[0].node_properties.node_range_properties[0].eks_properties.pod_properties.security_context.seccomp_profile.localhost_profile #=> String
+    #   resp.job_definitions[0].node_properties.node_range_properties[0].eks_properties.pod_properties.security_context.fs_group #=> Integer
     #   resp.job_definitions[0].node_properties.node_range_properties[0].consumable_resource_properties.consumable_resource_list #=> Array
     #   resp.job_definitions[0].node_properties.node_range_properties[0].consumable_resource_properties.consumable_resource_list[0].consumable_resource #=> String
     #   resp.job_definitions[0].node_properties.node_range_properties[0].consumable_resource_properties.consumable_resource_list[0].quantity #=> Integer
@@ -2731,6 +2749,12 @@ module Aws::Batch
     #   resp.job_definitions[0].eks_properties.pod_properties.containers[0].security_context.allow_privilege_escalation #=> Boolean
     #   resp.job_definitions[0].eks_properties.pod_properties.containers[0].security_context.read_only_root_filesystem #=> Boolean
     #   resp.job_definitions[0].eks_properties.pod_properties.containers[0].security_context.run_as_non_root #=> Boolean
+    #   resp.job_definitions[0].eks_properties.pod_properties.containers[0].security_context.capabilities.add #=> Array
+    #   resp.job_definitions[0].eks_properties.pod_properties.containers[0].security_context.capabilities.add[0] #=> String
+    #   resp.job_definitions[0].eks_properties.pod_properties.containers[0].security_context.capabilities.drop #=> Array
+    #   resp.job_definitions[0].eks_properties.pod_properties.containers[0].security_context.capabilities.drop[0] #=> String
+    #   resp.job_definitions[0].eks_properties.pod_properties.containers[0].security_context.seccomp_profile.type #=> String, one of "RuntimeDefault", "Localhost", "Unconfined"
+    #   resp.job_definitions[0].eks_properties.pod_properties.containers[0].security_context.seccomp_profile.localhost_profile #=> String
     #   resp.job_definitions[0].eks_properties.pod_properties.init_containers #=> Array
     #   resp.job_definitions[0].eks_properties.pod_properties.init_containers[0].name #=> String
     #   resp.job_definitions[0].eks_properties.pod_properties.init_containers[0].image #=> String
@@ -2757,6 +2781,12 @@ module Aws::Batch
     #   resp.job_definitions[0].eks_properties.pod_properties.init_containers[0].security_context.allow_privilege_escalation #=> Boolean
     #   resp.job_definitions[0].eks_properties.pod_properties.init_containers[0].security_context.read_only_root_filesystem #=> Boolean
     #   resp.job_definitions[0].eks_properties.pod_properties.init_containers[0].security_context.run_as_non_root #=> Boolean
+    #   resp.job_definitions[0].eks_properties.pod_properties.init_containers[0].security_context.capabilities.add #=> Array
+    #   resp.job_definitions[0].eks_properties.pod_properties.init_containers[0].security_context.capabilities.add[0] #=> String
+    #   resp.job_definitions[0].eks_properties.pod_properties.init_containers[0].security_context.capabilities.drop #=> Array
+    #   resp.job_definitions[0].eks_properties.pod_properties.init_containers[0].security_context.capabilities.drop[0] #=> String
+    #   resp.job_definitions[0].eks_properties.pod_properties.init_containers[0].security_context.seccomp_profile.type #=> String, one of "RuntimeDefault", "Localhost", "Unconfined"
+    #   resp.job_definitions[0].eks_properties.pod_properties.init_containers[0].security_context.seccomp_profile.localhost_profile #=> String
     #   resp.job_definitions[0].eks_properties.pod_properties.volumes #=> Array
     #   resp.job_definitions[0].eks_properties.pod_properties.volumes[0].name #=> String
     #   resp.job_definitions[0].eks_properties.pod_properties.volumes[0].host_path.path #=> String
@@ -2772,6 +2802,12 @@ module Aws::Batch
     #   resp.job_definitions[0].eks_properties.pod_properties.metadata.annotations["String"] #=> String
     #   resp.job_definitions[0].eks_properties.pod_properties.metadata.namespace #=> String
     #   resp.job_definitions[0].eks_properties.pod_properties.share_process_namespace #=> Boolean
+    #   resp.job_definitions[0].eks_properties.pod_properties.security_context.run_as_user #=> Integer
+    #   resp.job_definitions[0].eks_properties.pod_properties.security_context.run_as_group #=> Integer
+    #   resp.job_definitions[0].eks_properties.pod_properties.security_context.run_as_non_root #=> Boolean
+    #   resp.job_definitions[0].eks_properties.pod_properties.security_context.seccomp_profile.type #=> String, one of "RuntimeDefault", "Localhost", "Unconfined"
+    #   resp.job_definitions[0].eks_properties.pod_properties.security_context.seccomp_profile.localhost_profile #=> String
+    #   resp.job_definitions[0].eks_properties.pod_properties.security_context.fs_group #=> Integer
     #   resp.job_definitions[0].container_orchestration_type #=> String, one of "ECS", "EKS"
     #   resp.job_definitions[0].consumable_resource_properties.consumable_resource_list #=> Array
     #   resp.job_definitions[0].consumable_resource_properties.consumable_resource_list[0].consumable_resource #=> String
@@ -3276,6 +3312,12 @@ module Aws::Batch
     #   resp.jobs[0].node_properties.node_range_properties[0].eks_properties.pod_properties.containers[0].security_context.allow_privilege_escalation #=> Boolean
     #   resp.jobs[0].node_properties.node_range_properties[0].eks_properties.pod_properties.containers[0].security_context.read_only_root_filesystem #=> Boolean
     #   resp.jobs[0].node_properties.node_range_properties[0].eks_properties.pod_properties.containers[0].security_context.run_as_non_root #=> Boolean
+    #   resp.jobs[0].node_properties.node_range_properties[0].eks_properties.pod_properties.containers[0].security_context.capabilities.add #=> Array
+    #   resp.jobs[0].node_properties.node_range_properties[0].eks_properties.pod_properties.containers[0].security_context.capabilities.add[0] #=> String
+    #   resp.jobs[0].node_properties.node_range_properties[0].eks_properties.pod_properties.containers[0].security_context.capabilities.drop #=> Array
+    #   resp.jobs[0].node_properties.node_range_properties[0].eks_properties.pod_properties.containers[0].security_context.capabilities.drop[0] #=> String
+    #   resp.jobs[0].node_properties.node_range_properties[0].eks_properties.pod_properties.containers[0].security_context.seccomp_profile.type #=> String, one of "RuntimeDefault", "Localhost", "Unconfined"
+    #   resp.jobs[0].node_properties.node_range_properties[0].eks_properties.pod_properties.containers[0].security_context.seccomp_profile.localhost_profile #=> String
     #   resp.jobs[0].node_properties.node_range_properties[0].eks_properties.pod_properties.init_containers #=> Array
     #   resp.jobs[0].node_properties.node_range_properties[0].eks_properties.pod_properties.init_containers[0].name #=> String
     #   resp.jobs[0].node_properties.node_range_properties[0].eks_properties.pod_properties.init_containers[0].image #=> String
@@ -3302,6 +3344,12 @@ module Aws::Batch
     #   resp.jobs[0].node_properties.node_range_properties[0].eks_properties.pod_properties.init_containers[0].security_context.allow_privilege_escalation #=> Boolean
     #   resp.jobs[0].node_properties.node_range_properties[0].eks_properties.pod_properties.init_containers[0].security_context.read_only_root_filesystem #=> Boolean
     #   resp.jobs[0].node_properties.node_range_properties[0].eks_properties.pod_properties.init_containers[0].security_context.run_as_non_root #=> Boolean
+    #   resp.jobs[0].node_properties.node_range_properties[0].eks_properties.pod_properties.init_containers[0].security_context.capabilities.add #=> Array
+    #   resp.jobs[0].node_properties.node_range_properties[0].eks_properties.pod_properties.init_containers[0].security_context.capabilities.add[0] #=> String
+    #   resp.jobs[0].node_properties.node_range_properties[0].eks_properties.pod_properties.init_containers[0].security_context.capabilities.drop #=> Array
+    #   resp.jobs[0].node_properties.node_range_properties[0].eks_properties.pod_properties.init_containers[0].security_context.capabilities.drop[0] #=> String
+    #   resp.jobs[0].node_properties.node_range_properties[0].eks_properties.pod_properties.init_containers[0].security_context.seccomp_profile.type #=> String, one of "RuntimeDefault", "Localhost", "Unconfined"
+    #   resp.jobs[0].node_properties.node_range_properties[0].eks_properties.pod_properties.init_containers[0].security_context.seccomp_profile.localhost_profile #=> String
     #   resp.jobs[0].node_properties.node_range_properties[0].eks_properties.pod_properties.volumes #=> Array
     #   resp.jobs[0].node_properties.node_range_properties[0].eks_properties.pod_properties.volumes[0].name #=> String
     #   resp.jobs[0].node_properties.node_range_properties[0].eks_properties.pod_properties.volumes[0].host_path.path #=> String
@@ -3317,6 +3365,12 @@ module Aws::Batch
     #   resp.jobs[0].node_properties.node_range_properties[0].eks_properties.pod_properties.metadata.annotations["String"] #=> String
     #   resp.jobs[0].node_properties.node_range_properties[0].eks_properties.pod_properties.metadata.namespace #=> String
     #   resp.jobs[0].node_properties.node_range_properties[0].eks_properties.pod_properties.share_process_namespace #=> Boolean
+    #   resp.jobs[0].node_properties.node_range_properties[0].eks_properties.pod_properties.security_context.run_as_user #=> Integer
+    #   resp.jobs[0].node_properties.node_range_properties[0].eks_properties.pod_properties.security_context.run_as_group #=> Integer
+    #   resp.jobs[0].node_properties.node_range_properties[0].eks_properties.pod_properties.security_context.run_as_non_root #=> Boolean
+    #   resp.jobs[0].node_properties.node_range_properties[0].eks_properties.pod_properties.security_context.seccomp_profile.type #=> String, one of "RuntimeDefault", "Localhost", "Unconfined"
+    #   resp.jobs[0].node_properties.node_range_properties[0].eks_properties.pod_properties.security_context.seccomp_profile.localhost_profile #=> String
+    #   resp.jobs[0].node_properties.node_range_properties[0].eks_properties.pod_properties.security_context.fs_group #=> Integer
     #   resp.jobs[0].node_properties.node_range_properties[0].consumable_resource_properties.consumable_resource_list #=> Array
     #   resp.jobs[0].node_properties.node_range_properties[0].consumable_resource_properties.consumable_resource_list[0].consumable_resource #=> String
     #   resp.jobs[0].node_properties.node_range_properties[0].consumable_resource_properties.consumable_resource_list[0].quantity #=> Integer
@@ -3364,6 +3418,12 @@ module Aws::Batch
     #   resp.jobs[0].eks_properties.pod_properties.containers[0].security_context.allow_privilege_escalation #=> Boolean
     #   resp.jobs[0].eks_properties.pod_properties.containers[0].security_context.read_only_root_filesystem #=> Boolean
     #   resp.jobs[0].eks_properties.pod_properties.containers[0].security_context.run_as_non_root #=> Boolean
+    #   resp.jobs[0].eks_properties.pod_properties.containers[0].security_context.capabilities.add #=> Array
+    #   resp.jobs[0].eks_properties.pod_properties.containers[0].security_context.capabilities.add[0] #=> String
+    #   resp.jobs[0].eks_properties.pod_properties.containers[0].security_context.capabilities.drop #=> Array
+    #   resp.jobs[0].eks_properties.pod_properties.containers[0].security_context.capabilities.drop[0] #=> String
+    #   resp.jobs[0].eks_properties.pod_properties.containers[0].security_context.seccomp_profile.type #=> String, one of "RuntimeDefault", "Localhost", "Unconfined"
+    #   resp.jobs[0].eks_properties.pod_properties.containers[0].security_context.seccomp_profile.localhost_profile #=> String
     #   resp.jobs[0].eks_properties.pod_properties.init_containers #=> Array
     #   resp.jobs[0].eks_properties.pod_properties.init_containers[0].name #=> String
     #   resp.jobs[0].eks_properties.pod_properties.init_containers[0].image #=> String
@@ -3392,6 +3452,12 @@ module Aws::Batch
     #   resp.jobs[0].eks_properties.pod_properties.init_containers[0].security_context.allow_privilege_escalation #=> Boolean
     #   resp.jobs[0].eks_properties.pod_properties.init_containers[0].security_context.read_only_root_filesystem #=> Boolean
     #   resp.jobs[0].eks_properties.pod_properties.init_containers[0].security_context.run_as_non_root #=> Boolean
+    #   resp.jobs[0].eks_properties.pod_properties.init_containers[0].security_context.capabilities.add #=> Array
+    #   resp.jobs[0].eks_properties.pod_properties.init_containers[0].security_context.capabilities.add[0] #=> String
+    #   resp.jobs[0].eks_properties.pod_properties.init_containers[0].security_context.capabilities.drop #=> Array
+    #   resp.jobs[0].eks_properties.pod_properties.init_containers[0].security_context.capabilities.drop[0] #=> String
+    #   resp.jobs[0].eks_properties.pod_properties.init_containers[0].security_context.seccomp_profile.type #=> String, one of "RuntimeDefault", "Localhost", "Unconfined"
+    #   resp.jobs[0].eks_properties.pod_properties.init_containers[0].security_context.seccomp_profile.localhost_profile #=> String
     #   resp.jobs[0].eks_properties.pod_properties.volumes #=> Array
     #   resp.jobs[0].eks_properties.pod_properties.volumes[0].name #=> String
     #   resp.jobs[0].eks_properties.pod_properties.volumes[0].host_path.path #=> String
@@ -3409,6 +3475,12 @@ module Aws::Batch
     #   resp.jobs[0].eks_properties.pod_properties.metadata.annotations["String"] #=> String
     #   resp.jobs[0].eks_properties.pod_properties.metadata.namespace #=> String
     #   resp.jobs[0].eks_properties.pod_properties.share_process_namespace #=> Boolean
+    #   resp.jobs[0].eks_properties.pod_properties.security_context.run_as_user #=> Integer
+    #   resp.jobs[0].eks_properties.pod_properties.security_context.run_as_group #=> Integer
+    #   resp.jobs[0].eks_properties.pod_properties.security_context.run_as_non_root #=> Boolean
+    #   resp.jobs[0].eks_properties.pod_properties.security_context.seccomp_profile.type #=> String, one of "RuntimeDefault", "Localhost", "Unconfined"
+    #   resp.jobs[0].eks_properties.pod_properties.security_context.seccomp_profile.localhost_profile #=> String
+    #   resp.jobs[0].eks_properties.pod_properties.security_context.fs_group #=> Integer
     #   resp.jobs[0].eks_attempts #=> Array
     #   resp.jobs[0].eks_attempts[0].containers #=> Array
     #   resp.jobs[0].eks_attempts[0].containers[0].name #=> String
@@ -4672,10 +4744,17 @@ module Aws::Batch
     #   definitions.
     #
     #   <note markdown="1"> If the job runs on Fargate resources, then you must not specify
-    #   `nodeProperties`; use only `containerProperties`.
+    #   `nodeProperties`. We recommend `ecsProperties`, which supports both
+    #   single-container and multi-container jobs. `containerProperties` is
+    #   also supported for single-container jobs. For more information, see
+    #   [Multi-container jobs][1] in the *Batch User Guide*.
     #
     #    </note>
     #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/batch/latest/userguide/multi-container-jobs.html
+    #
     # @option params [Types::NodeProperties] :node_properties
     #   An object with properties specific to multi-node parallel jobs. If you
     #   specify node properties for a job, it becomes a multi-node parallel
@@ -4683,7 +4762,9 @@ module Aws::Batch
     #   *Batch User Guide*.
     #
     #   <note markdown="1"> If the job runs on Fargate resources, then you must not specify
-    #   `nodeProperties`; use `containerProperties` instead.
+    #   `nodeProperties`. We recommend `ecsProperties`, which supports both
+    #   single-container and multi-container jobs. `containerProperties` is
+    #   also supported for single-container jobs.
     #
     #    </note>
     #
@@ -5439,6 +5520,14 @@ module Aws::Batch
     #                     allow_privilege_escalation: false,
     #                     read_only_root_filesystem: false,
     #                     run_as_non_root: false,
+    #                     capabilities: {
+    #                       add: ["EksContainerLinuxCapability"],
+    #                       drop: ["EksContainerLinuxCapability"],
+    #                     },
+    #                     seccomp_profile: {
+    #                       type: "RuntimeDefault", # required, accepts RuntimeDefault, Localhost, Unconfined
+    #                       localhost_profile: "EksSeccompLocalhostProfile",
+    #                     },
     #                   },
     #                 },
     #               ],
@@ -5478,6 +5567,14 @@ module Aws::Batch
     #                     allow_privilege_escalation: false,
     #                     read_only_root_filesystem: false,
     #                     run_as_non_root: false,
+    #                     capabilities: {
+    #                       add: ["EksContainerLinuxCapability"],
+    #                       drop: ["EksContainerLinuxCapability"],
+    #                     },
+    #                     seccomp_profile: {
+    #                       type: "RuntimeDefault", # required, accepts RuntimeDefault, Localhost, Unconfined
+    #                       localhost_profile: "EksSeccompLocalhostProfile",
+    #                     },
     #                   },
     #                 },
     #               ],
@@ -5511,6 +5608,16 @@ module Aws::Batch
     #                 namespace: "String",
     #               },
     #               share_process_namespace: false,
+    #               security_context: {
+    #                 run_as_user: 1,
+    #                 run_as_group: 1,
+    #                 run_as_non_root: false,
+    #                 seccomp_profile: {
+    #                   type: "RuntimeDefault", # required, accepts RuntimeDefault, Localhost, Unconfined
+    #                   localhost_profile: "EksSeccompLocalhostProfile",
+    #                 },
+    #                 fs_group: 1,
+    #               },
     #             },
     #           },
     #           consumable_resource_properties: {
@@ -5589,6 +5696,14 @@ module Aws::Batch
     #               allow_privilege_escalation: false,
     #               read_only_root_filesystem: false,
     #               run_as_non_root: false,
+    #               capabilities: {
+    #                 add: ["EksContainerLinuxCapability"],
+    #                 drop: ["EksContainerLinuxCapability"],
+    #               },
+    #               seccomp_profile: {
+    #                 type: "RuntimeDefault", # required, accepts RuntimeDefault, Localhost, Unconfined
+    #                 localhost_profile: "EksSeccompLocalhostProfile",
+    #               },
     #             },
     #           },
     #         ],
@@ -5628,6 +5743,14 @@ module Aws::Batch
     #               allow_privilege_escalation: false,
     #               read_only_root_filesystem: false,
     #               run_as_non_root: false,
+    #               capabilities: {
+    #                 add: ["EksContainerLinuxCapability"],
+    #                 drop: ["EksContainerLinuxCapability"],
+    #               },
+    #               seccomp_profile: {
+    #                 type: "RuntimeDefault", # required, accepts RuntimeDefault, Localhost, Unconfined
+    #                 localhost_profile: "EksSeccompLocalhostProfile",
+    #               },
     #             },
     #           },
     #         ],
@@ -5661,6 +5784,16 @@ module Aws::Batch
     #           namespace: "String",
     #         },
     #         share_process_namespace: false,
+    #         security_context: {
+    #           run_as_user: 1,
+    #           run_as_group: 1,
+    #           run_as_non_root: false,
+    #           seccomp_profile: {
+    #             type: "RuntimeDefault", # required, accepts RuntimeDefault, Localhost, Unconfined
+    #             localhost_profile: "EksSeccompLocalhostProfile",
+    #           },
+    #           fs_group: 1,
+    #         },
     #       },
     #     },
     #     ecs_properties: {
@@ -7418,7 +7551,7 @@ module Aws::Batch
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-batch'
-      context[:gem_version] = '1.161.0'
+      context[:gem_version] = '1.162.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-batch/client_api.rb

@@ -136,6 +136,9 @@ module Aws::Batch
     EksContainerDetails = Shapes::ListShape.new(name: 'EksContainerDetails')
     EksContainerEnvironmentVariable = Shapes::StructureShape.new(name: 'EksContainerEnvironmentVariable')
     EksContainerEnvironmentVariables = Shapes::ListShape.new(name: 'EksContainerEnvironmentVariables')
+    EksContainerLinuxCapabilities = Shapes::StructureShape.new(name: 'EksContainerLinuxCapabilities')
+    EksContainerLinuxCapability = Shapes::StringShape.new(name: 'EksContainerLinuxCapability')
+    EksContainerLinuxCapabilityList = Shapes::ListShape.new(name: 'EksContainerLinuxCapabilityList')
     EksContainerOverride = Shapes::StructureShape.new(name: 'EksContainerOverride')
     EksContainerOverrideList = Shapes::ListShape.new(name: 'EksContainerOverrideList')
     EksContainerResourceRequirements = Shapes::StructureShape.new(name: 'EksContainerResourceRequirements')
@@ -152,10 +155,14 @@ module Aws::Batch
     EksPodProperties = Shapes::StructureShape.new(name: 'EksPodProperties')
     EksPodPropertiesDetail = Shapes::StructureShape.new(name: 'EksPodPropertiesDetail')
     EksPodPropertiesOverride = Shapes::StructureShape.new(name: 'EksPodPropertiesOverride')
+    EksPodSecurityContext = Shapes::StructureShape.new(name: 'EksPodSecurityContext')
     EksProperties = Shapes::StructureShape.new(name: 'EksProperties')
     EksPropertiesDetail = Shapes::StructureShape.new(name: 'EksPropertiesDetail')
     EksPropertiesOverride = Shapes::StructureShape.new(name: 'EksPropertiesOverride')
     EksRequests = Shapes::MapShape.new(name: 'EksRequests')
+    EksSeccompLocalhostProfile = Shapes::StringShape.new(name: 'EksSeccompLocalhostProfile')
+    EksSeccompProfile = Shapes::StructureShape.new(name: 'EksSeccompProfile')
+    EksSeccompProfileType = Shapes::StringShape.new(name: 'EksSeccompProfileType')
     EksSecret = Shapes::StructureShape.new(name: 'EksSecret')
     EksVolume = Shapes::StructureShape.new(name: 'EksVolume')
     EksVolumes = Shapes::ListShape.new(name: 'EksVolumes')
@@ -998,6 +1005,12 @@ module Aws::Batch
 
     EksContainerEnvironmentVariables.member = Shapes::ShapeRef.new(shape: EksContainerEnvironmentVariable)
 
+    EksContainerLinuxCapabilities.add_member(:add, Shapes::ShapeRef.new(shape: EksContainerLinuxCapabilityList, location_name: "add"))
+    EksContainerLinuxCapabilities.add_member(:drop, Shapes::ShapeRef.new(shape: EksContainerLinuxCapabilityList, location_name: "drop"))
+    EksContainerLinuxCapabilities.struct_class = Types::EksContainerLinuxCapabilities
+
+    EksContainerLinuxCapabilityList.member = Shapes::ShapeRef.new(shape: EksContainerLinuxCapability)
+
     EksContainerOverride.add_member(:name, Shapes::ShapeRef.new(shape: String, location_name: "name"))
     EksContainerOverride.add_member(:image, Shapes::ShapeRef.new(shape: String, location_name: "image"))
     EksContainerOverride.add_member(:command, Shapes::ShapeRef.new(shape: StringList, location_name: "command"))
@@ -1018,6 +1031,8 @@ module Aws::Batch
     EksContainerSecurityContext.add_member(:allow_privilege_escalation, Shapes::ShapeRef.new(shape: Boolean, location_name: "allowPrivilegeEscalation"))
     EksContainerSecurityContext.add_member(:read_only_root_filesystem, Shapes::ShapeRef.new(shape: Boolean, location_name: "readOnlyRootFilesystem"))
     EksContainerSecurityContext.add_member(:run_as_non_root, Shapes::ShapeRef.new(shape: Boolean, location_name: "runAsNonRoot"))
+    EksContainerSecurityContext.add_member(:capabilities, Shapes::ShapeRef.new(shape: EksContainerLinuxCapabilities, location_name: "capabilities"))
+    EksContainerSecurityContext.add_member(:seccomp_profile, Shapes::ShapeRef.new(shape: EksSeccompProfile, location_name: "seccompProfile"))
     EksContainerSecurityContext.struct_class = Types::EksContainerSecurityContext
 
     EksContainerVolumeMount.add_member(:name, Shapes::ShapeRef.new(shape: String, location_name: "name"))
@@ -1061,6 +1076,7 @@ module Aws::Batch
     EksPodProperties.add_member(:volumes, Shapes::ShapeRef.new(shape: EksVolumes, location_name: "volumes"))
     EksPodProperties.add_member(:metadata, Shapes::ShapeRef.new(shape: EksMetadata, location_name: "metadata"))
     EksPodProperties.add_member(:share_process_namespace, Shapes::ShapeRef.new(shape: Boolean, location_name: "shareProcessNamespace"))
+    EksPodProperties.add_member(:security_context, Shapes::ShapeRef.new(shape: EksPodSecurityContext, location_name: "securityContext"))
     EksPodProperties.struct_class = Types::EksPodProperties
 
     EksPodPropertiesDetail.add_member(:service_account_name, Shapes::ShapeRef.new(shape: String, location_name: "serviceAccountName"))
@@ -1074,6 +1090,7 @@ module Aws::Batch
     EksPodPropertiesDetail.add_member(:node_name, Shapes::ShapeRef.new(shape: String, location_name: "nodeName"))
     EksPodPropertiesDetail.add_member(:metadata, Shapes::ShapeRef.new(shape: EksMetadata, location_name: "metadata"))
     EksPodPropertiesDetail.add_member(:share_process_namespace, Shapes::ShapeRef.new(shape: Boolean, location_name: "shareProcessNamespace"))
+    EksPodPropertiesDetail.add_member(:security_context, Shapes::ShapeRef.new(shape: EksPodSecurityContext, location_name: "securityContext"))
     EksPodPropertiesDetail.struct_class = Types::EksPodPropertiesDetail
 
     EksPodPropertiesOverride.add_member(:containers, Shapes::ShapeRef.new(shape: EksContainerOverrideList, location_name: "containers"))
@@ -1081,6 +1098,13 @@ module Aws::Batch
     EksPodPropertiesOverride.add_member(:metadata, Shapes::ShapeRef.new(shape: EksMetadata, location_name: "metadata"))
     EksPodPropertiesOverride.struct_class = Types::EksPodPropertiesOverride
 
+    EksPodSecurityContext.add_member(:run_as_user, Shapes::ShapeRef.new(shape: Long, location_name: "runAsUser"))
+    EksPodSecurityContext.add_member(:run_as_group, Shapes::ShapeRef.new(shape: Long, location_name: "runAsGroup"))
+    EksPodSecurityContext.add_member(:run_as_non_root, Shapes::ShapeRef.new(shape: Boolean, location_name: "runAsNonRoot"))
+    EksPodSecurityContext.add_member(:seccomp_profile, Shapes::ShapeRef.new(shape: EksSeccompProfile, location_name: "seccompProfile"))
+    EksPodSecurityContext.add_member(:fs_group, Shapes::ShapeRef.new(shape: Long, location_name: "fsGroup"))
+    EksPodSecurityContext.struct_class = Types::EksPodSecurityContext
+
     EksProperties.add_member(:pod_properties, Shapes::ShapeRef.new(shape: EksPodProperties, location_name: "podProperties"))
     EksProperties.struct_class = Types::EksProperties
 
@@ -1093,6 +1117,10 @@ module Aws::Batch
     EksRequests.key = Shapes::ShapeRef.new(shape: String)
     EksRequests.value = Shapes::ShapeRef.new(shape: Quantity)
 
+    EksSeccompProfile.add_member(:type, Shapes::ShapeRef.new(shape: EksSeccompProfileType, required: true, location_name: "type"))
+    EksSeccompProfile.add_member(:localhost_profile, Shapes::ShapeRef.new(shape: EksSeccompLocalhostProfile, location_name: "localhostProfile"))
+    EksSeccompProfile.struct_class = Types::EksSeccompProfile
+
     EksSecret.add_member(:secret_name, Shapes::ShapeRef.new(shape: String, required: true, location_name: "secretName"))
     EksSecret.add_member(:optional, Shapes::ShapeRef.new(shape: Boolean, location_name: "optional"))
     EksSecret.struct_class = Types::EksSecret

data/lib/aws-sdk-batch/types.rb

@@ -5215,6 +5215,35 @@ module Aws::Batch
       include Aws::Structure
     end
 
+    # The Linux capabilities for the container. For more information, see
+    # [Set capabilities for a container][1] in the *Kubernetes
+    # documentation*.
+    #
+    #
+    #
+    # [1]: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-capabilities-for-a-container
+    #
+    # @!attribute [rw] add
+    #   The Linux capabilities to add to the default capability set for the
+    #   container. This parameter contains up to 64 values. Specify
+    #   capability names without the `CAP_` prefix.
+    #   @return [Array<String>]
+    #
+    # @!attribute [rw] drop
+    #   The Linux capabilities to remove from the default capability set for
+    #   the container. This parameter contains up to 64 values. Specify
+    #   capability names without the `CAP_` prefix.
+    #   @return [Array<String>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/batch-2016-08-10/EksContainerLinuxCapabilities AWS API Documentation
+    #
+    class EksContainerLinuxCapabilities < Struct.new(
+      :add,
+      :drop)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Object representing any Kubernetes overrides to a job definition
     # that's used in a [SubmitJob][1] API operation.
     #
@@ -5403,10 +5432,10 @@ module Aws::Batch
     # @!attribute [rw] run_as_user
     #   When this parameter is specified, the container is run as the
     #   specified user ID (`uid`). If this parameter isn't specified, the
-    #   default is the user that's specified in the image metadata. This
-    #   parameter maps to `RunAsUser` and `MustRanAs` policy in the [Users
-    #   and groups pod security policies][1] in the *Kubernetes
-    #   documentation*.
+    #   default is the user that's specified in the image metadata. The
+    #   supported value range is `0` through `2147483647`. This parameter
+    #   maps to `RunAsUser` and `MustRunAs` policy in the [Users and groups
+    #   pod security policies][1] in the *Kubernetes documentation*.
     #
     #
     #
@@ -5416,10 +5445,10 @@ module Aws::Batch
     # @!attribute [rw] run_as_group
     #   When this parameter is specified, the container is run as the
     #   specified group ID (`gid`). If this parameter isn't specified, the
-    #   default is the group that's specified in the image metadata. This
-    #   parameter maps to `RunAsGroup` and `MustRunAs` policy in the [Users
-    #   and groups pod security policies][1] in the *Kubernetes
-    #   documentation*.
+    #   default is the group that's specified in the image metadata. The
+    #   supported value range is `0` through `2147483647`. This parameter
+    #   maps to `RunAsGroup` and `MustRunAs` policy in the [Users and groups
+    #   pod security policies][1] in the *Kubernetes documentation*.
     #
     #
     #
@@ -5469,6 +5498,21 @@ module Aws::Batch
     #   [1]: https://kubernetes.io/docs/concepts/security/pod-security-policy/#users-and-groups
     #   @return [Boolean]
     #
+    # @!attribute [rw] capabilities
+    #   Adds or removes Linux capabilities from the container's default
+    #   capability set. With Linux capabilities, you can grant specific
+    #   privileges without granting full root permissions.
+    #   @return [Types::EksContainerLinuxCapabilities]
+    #
+    # @!attribute [rw] seccomp_profile
+    #   The seccomp profile for the container. A container-level seccomp
+    #   profile overrides the profile in the pod security context, which
+    #   defines security settings that apply to all containers in the pod
+    #   unless a container overrides them. If this parameter isn't
+    #   specified, the container uses the pod security context's seccomp
+    #   profile when one is specified.
+    #   @return [Types::EksSeccompProfile]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/batch-2016-08-10/EksContainerSecurityContext AWS API Documentation
     #
     class EksContainerSecurityContext < Struct.new(
@@ -5477,7 +5521,9 @@ module Aws::Batch
       :privileged,
       :allow_privilege_escalation,
       :read_only_root_filesystem,
-      :run_as_non_root)
+      :run_as_non_root,
+      :capabilities,
+      :seccomp_profile)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -5810,6 +5856,12 @@ module Aws::Batch
     #   [1]: https://kubernetes.io/docs/tasks/configure-pod-container/share-process-namespace/
     #   @return [Boolean]
     #
+    # @!attribute [rw] security_context
+    #   The security context to apply to the pod. The settings apply to all
+    #   containers in the pod unless an individual container specifies an
+    #   overriding value.
+    #   @return [Types::EksPodSecurityContext]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/batch-2016-08-10/EksPodProperties AWS API Documentation
     #
     class EksPodProperties < Struct.new(
@@ -5821,7 +5873,8 @@ module Aws::Batch
       :init_containers,
       :volumes,
       :metadata,
-      :share_process_namespace)
+      :share_process_namespace,
+      :security_context)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -5932,6 +5985,12 @@ module Aws::Batch
     #   [1]: https://kubernetes.io/docs/tasks/configure-pod-container/share-process-namespace/
     #   @return [Boolean]
     #
+    # @!attribute [rw] security_context
+    #   The security context applied to the pod. The settings apply to all
+    #   containers in the pod unless an individual container specifies an
+    #   overriding value.
+    #   @return [Types::EksPodSecurityContext]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/batch-2016-08-10/EksPodPropertiesDetail AWS API Documentation
     #
     class EksPodPropertiesDetail < Struct.new(
@@ -5945,7 +6004,8 @@ module Aws::Batch
       :pod_name,
       :node_name,
       :metadata,
-      :share_process_namespace)
+      :share_process_namespace,
+      :security_context)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -5986,6 +6046,57 @@ module Aws::Batch
       include Aws::Structure
     end
 
+    # The security context for the pod. The settings apply to all containers
+    # in the pod when the container does not specify an overriding value.
+    # For more information, see [Set the security context for a Pod][1] in
+    # the *Kubernetes documentation*.
+    #
+    #
+    #
+    # [1]: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod
+    #
+    # @!attribute [rw] run_as_user
+    #   The user ID that runs containers in the pod when a container does
+    #   not specify its own user ID. The supported value range is `0`
+    #   through `2147483647`.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] run_as_group
+    #   The primary group ID that runs containers in the pod when a
+    #   container does not specify its own group ID. The supported value
+    #   range is `0` through `2147483647`.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] run_as_non_root
+    #   Specifies whether Kubernetes validates that containers in the pod
+    #   don't run as the root user unless a container specifies an
+    #   overriding value.
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] seccomp_profile
+    #   The default seccomp profile for containers in the pod. A
+    #   container-level seccomp profile overrides this value.
+    #   @return [Types::EksSeccompProfile]
+    #
+    # @!attribute [rw] fs_group
+    #   A special supplemental group that is applied to all containers in
+    #   the pod. Some volume types allow Kubernetes to change the ownership
+    #   and permissions of the volume contents to this group when the volume
+    #   is mounted. The supported value range is `0` through `2147483647`.
+    #   @return [Integer]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/batch-2016-08-10/EksPodSecurityContext AWS API Documentation
+    #
+    class EksPodSecurityContext < Struct.new(
+      :run_as_user,
+      :run_as_group,
+      :run_as_non_root,
+      :seccomp_profile,
+      :fs_group)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # An object that contains the properties for the Kubernetes resources of
     # a job.
     #
@@ -6031,6 +6142,55 @@ module Aws::Batch
       include Aws::Structure
     end
 
+    # The Linux seccomp profile for a pod or container. For more
+    # information, see [Restrict a Container's Syscalls with seccomp][1] in
+    # the *Kubernetes documentation*.
+    #
+    #
+    #
+    # [1]: https://kubernetes.io/docs/tutorials/security/seccomp/
+    #
+    # @!attribute [rw] type
+    #   The seccomp profile type can be one of the following values:
+    #
+    #   RuntimeDefault
+    #
+    #   : The `RuntimeDefault` value uses the container runtime's default
+    #     seccomp profile.
+    #
+    #   Unconfined
+    #
+    #   : The `Unconfined` value doesn't filter the container with seccomp.
+    #
+    #   Localhost
+    #
+    #   : The `Localhost` value uses a custom profile at the path specified
+    #     by `localhostProfile`.
+    #   @return [String]
+    #
+    # @!attribute [rw] localhost_profile
+    #   The path of the profile on the node, relative to the configured
+    #   seccomp profile location. You must specify this parameter when
+    #   `type` is `Localhost`. Don't set this parameter for any other type.
+    #   You are responsible for ensuring that the profile exists on every
+    #   eligible worker node. For information about providing files to
+    #   Amazon EKS nodes, see [Use a launch template with Batch on Amazon
+    #   EKS][1] in the *Batch User Guide*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/batch/latest/userguide/eks-launch-templates.html
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/batch-2016-08-10/EksSeccompProfile AWS API Documentation
+    #
+    class EksSeccompProfile < Struct.new(
+      :type,
+      :localhost_profile)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Specifies the configuration of a Kubernetes `secret` volume. For more
     # information, see [secret][1] in the *Kubernetes documentation*.
     #
@@ -6822,7 +6982,9 @@ module Aws::Batch
     #   `eksProperties`.
     #
     #   <note markdown="1"> If the job runs on Fargate resources, don't specify
-    #   `nodeProperties`. Use `containerProperties` instead.
+    #   `nodeProperties`. We recommend `ecsProperties`, which supports both
+    #   single-container and multi-container jobs. `containerProperties` is
+    #   also supported for single-container jobs.
     #
     #    </note>
     #   @return [Types::NodeProperties]
@@ -9394,9 +9556,16 @@ module Aws::Batch
     #   job definitions.
     #
     #   <note markdown="1"> If the job runs on Fargate resources, then you must not specify
-    #   `nodeProperties`; use only `containerProperties`.
+    #   `nodeProperties`. We recommend `ecsProperties`, which supports both
+    #   single-container and multi-container jobs. `containerProperties` is
+    #   also supported for single-container jobs. For more information, see
+    #   [Multi-container jobs][1] in the *Batch User Guide*.
     #
     #    </note>
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/batch/latest/userguide/multi-container-jobs.html
     #   @return [Types::ContainerProperties]
     #
     # @!attribute [rw] node_properties
@@ -9406,7 +9575,9 @@ module Aws::Batch
     #   Jobs][1] in the *Batch User Guide*.
     #
     #   <note markdown="1"> If the job runs on Fargate resources, then you must not specify
-    #   `nodeProperties`; use `containerProperties` instead.
+    #   `nodeProperties`. We recommend `ecsProperties`, which supports both
+    #   single-container and multi-container jobs. `containerProperties` is
+    #   also supported for single-container jobs.
     #
     #    </note>
     #

data/lib/aws-sdk-batch.rb

@@ -54,7 +54,7 @@ module Aws::Batch
   autoload :EndpointProvider, 'aws-sdk-batch/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-batch/endpoints'
 
-  GEM_VERSION = '1.161.0'
+  GEM_VERSION = '1.162.0'
 
 end
 

data/sig/params.rbs

@@ -250,6 +250,17 @@ module Aws
       stop_timeout: ::Integer?
     }
 
+      type eks_pod_security_context = {
+      run_as_user: ::Integer?,
+      run_as_group: ::Integer?,
+      run_as_non_root: bool?,
+      seccomp_profile: {
+        type: ("RuntimeDefault" | "Localhost" | "Unconfined"),
+        localhost_profile: ::String?
+      }?,
+      fs_group: ::Integer?
+    }
+
       type eks_pod_properties = {
       service_account_name: ::String?,
       host_network: bool?,
@@ -273,7 +284,8 @@ module Aws
         annotations: Hash[::String, ::String]?,
         namespace: ::String?
       }?,
-      share_process_namespace: bool?
+      share_process_namespace: bool?,
+      security_context: Params::eks_pod_security_context?
     }
 
       type eks_properties = {
@@ -286,7 +298,15 @@ module Aws
       privileged: bool?,
       allow_privilege_escalation: bool?,
       read_only_root_filesystem: bool?,
-      run_as_non_root: bool?
+      run_as_non_root: bool?,
+      capabilities: {
+        add: Array[::String]?,
+        drop: Array[::String]?
+      }?,
+      seccomp_profile: {
+        type: ("RuntimeDefault" | "Localhost" | "Unconfined"),
+        localhost_profile: ::String?
+      }?
     }
 
       type eks_container = {

data/sig/types.rbs

@@ -741,6 +741,12 @@ module Aws::Batch
       SENSITIVE: []
     end
 
+    class EksContainerLinuxCapabilities
+      attr_accessor add: ::Array[::String]
+      attr_accessor drop: ::Array[::String]
+      SENSITIVE: []
+    end
+
     class EksContainerOverride
       attr_accessor name: ::String
       attr_accessor image: ::String
@@ -764,6 +770,8 @@ module Aws::Batch
       attr_accessor allow_privilege_escalation: bool
       attr_accessor read_only_root_filesystem: bool
       attr_accessor run_as_non_root: bool
+      attr_accessor capabilities: Types::EksContainerLinuxCapabilities
+      attr_accessor seccomp_profile: Types::EksSeccompProfile
       SENSITIVE: []
     end
 
@@ -809,6 +817,7 @@ module Aws::Batch
       attr_accessor volumes: ::Array[Types::EksVolume]
       attr_accessor metadata: Types::EksMetadata
       attr_accessor share_process_namespace: bool
+      attr_accessor security_context: Types::EksPodSecurityContext
       SENSITIVE: []
     end
 
@@ -824,6 +833,7 @@ module Aws::Batch
       attr_accessor node_name: ::String
       attr_accessor metadata: Types::EksMetadata
       attr_accessor share_process_namespace: bool
+      attr_accessor security_context: Types::EksPodSecurityContext
       SENSITIVE: []
     end
 
@@ -834,6 +844,15 @@ module Aws::Batch
       SENSITIVE: []
     end
 
+    class EksPodSecurityContext
+      attr_accessor run_as_user: ::Integer
+      attr_accessor run_as_group: ::Integer
+      attr_accessor run_as_non_root: bool
+      attr_accessor seccomp_profile: Types::EksSeccompProfile
+      attr_accessor fs_group: ::Integer
+      SENSITIVE: []
+    end
+
     class EksProperties
       attr_accessor pod_properties: Types::EksPodProperties
       SENSITIVE: []
@@ -849,6 +868,12 @@ module Aws::Batch
       SENSITIVE: []
     end
 
+    class EksSeccompProfile
+      attr_accessor type: ("RuntimeDefault" | "Localhost" | "Unconfined")
+      attr_accessor localhost_profile: ::String
+      SENSITIVE: []
+    end
+
     class EksSecret
       attr_accessor secret_name: ::String
       attr_accessor optional: bool

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-batch
 version: !ruby/object:Gem::Version
-  version: 1.161.0
+  version: 1.162.0
 platform: ruby
 authors:
 - Amazon Web Services
@@ -18,7 +18,7 @@ dependencies:
         version: '3'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.265.0
+        version: 3.266.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -28,7 +28,7 @@ dependencies:
         version: '3'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.265.0
+        version: 3.266.0
 - !ruby/object:Gem::Dependency
   name: aws-sigv4
   requirement: !ruby/object:Gem::Requirement