aws-sdk-batch 1.161.0 → 1.163.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ad8a17d8ebfc6772f0548c8de2cfa9d0497023dc9888b5b546fbc566e6893692
-  data.tar.gz: '0508f94cfe2814bc9099c057787edc7795d09d9fca181c3e4d642109128ae142'
+  metadata.gz: 91171531a424e136974428460cb5ebc0e40d19c565621618e7f03d478375619c
+  data.tar.gz: 26420163f658ae7b72eda98840597eb50a632993eecd88d2186863a76d4a18fc
 SHA512:
-  metadata.gz: 947abd1982010036bd0fc6cae078b4e9622db13b052b8ee56cd1e43a6c2cab5743d221dcd5f55b2a111e40a4a96ed29b6245331e6753a95d21389cab32469d3a
-  data.tar.gz: a0c20e353b890a2cb59d33d06607748c67c222c4c1a8a4ce91060ad35f42686de7d9e98920a0035f173256c63a55741cdf481dd17ff08c77a44a0d9f685f20aa
+  metadata.gz: 74e121b8f3694c6488477e939c6d91353ecad4e918836b44f4333ef16f111d4c88fe396e5aa68c22119a9859f238119de680bed34612106ffc759c6bea99ec9f
+  data.tar.gz: 5cea2e044212913d47eb25bfd31f0c890ec672f22c325145c1525b5c09c5d5294e246e4fedc04753750d383ec9c7692622879b74948a9a0a1c7717c1eea98f9f

data/CHANGELOG.md

@@ -1,6 +1,16 @@
 Unreleased Changes
 ------------------
 
+1.163.0 (2026-11-10)
+------------------
+
+* Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
+
+1.162.0 (2026-11-09)
+------------------
+
+* Feature - Adds support for additional Amazon EKS security context settings in AWS Batch. Pod-level settings include fsGroup, runAsUser, runAsGroup, runAsNonRoot, and seccompProfile. Container-level settings add Linux capabilities and seccompProfile to existing runAsUser, runAsGroup, and runAsNonRoot support.
+
 1.161.0 (2026-11-06)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.161.0
+1.163.0

data/lib/aws-sdk-batch/client.rb

@@ -264,7 +264,8 @@ module Aws::Batch
     #     An integer representing the maximum number attempts that will be made for
     #     a single request, including the initial attempt.  For example,
     #     setting this value to 5 will result in a request being retried up to
-    #     4 times. Used in `standard` and `adaptive` retry modes.
+    #     4 times. Used in `standard` and `adaptive` retry modes. Defaults to 3,
+    #     except for DynamoDB and DynamoDB Streams, which default to 4.
     #
     #   @option options [String] :profile ("default")
     #     Used when loading credentials from the shared credentials file at `HOME/.aws/credentials`.
@@ -327,15 +328,15 @@ module Aws::Batch
     #     used by the default backoff function. This option is only used in the
     #     `legacy` retry mode.
     #
-    #   @option options [String] :retry_mode ("legacy")
+    #   @option options [String] :retry_mode ("standard")
     #     Specifies which retry algorithm to use. Values are:
     #
-    #     * `legacy` - The pre-existing retry behavior. This is the default
-    #       value if no retry mode is provided.
+    #     * `legacy` - The pre-existing retry behavior.
     #
     #     * `standard` - A standardized set of retry rules across the AWS SDKs.
     #       This includes support for retry quotas, which limit the number of
-    #       unsuccessful retries a client can make.
+    #       unsuccessful retries a client can make. This is the default value
+    #       if no retry mode is provided.
     #
     #     * `adaptive` - A retry mode that includes all the functionality of
     #       `standard` mode along with automatic client side throttling.
@@ -2571,6 +2572,12 @@ module Aws::Batch
     #   resp.job_definitions[0].node_properties.node_range_properties[0].eks_properties.pod_properties.containers[0].security_context.allow_privilege_escalation #=> Boolean
     #   resp.job_definitions[0].node_properties.node_range_properties[0].eks_properties.pod_properties.containers[0].security_context.read_only_root_filesystem #=> Boolean
     #   resp.job_definitions[0].node_properties.node_range_properties[0].eks_properties.pod_properties.containers[0].security_context.run_as_non_root #=> Boolean
+    #   resp.job_definitions[0].node_properties.node_range_properties[0].eks_properties.pod_properties.containers[0].security_context.capabilities.add #=> Array
+    #   resp.job_definitions[0].node_properties.node_range_properties[0].eks_properties.pod_properties.containers[0].security_context.capabilities.add[0] #=> String
+    #   resp.job_definitions[0].node_properties.node_range_properties[0].eks_properties.pod_properties.containers[0].security_context.capabilities.drop #=> Array
+    #   resp.job_definitions[0].node_properties.node_range_properties[0].eks_properties.pod_properties.containers[0].security_context.capabilities.drop[0] #=> String
+    #   resp.job_definitions[0].node_properties.node_range_properties[0].eks_properties.pod_properties.containers[0].security_context.seccomp_profile.type #=> String, one of "RuntimeDefault", "Localhost", "Unconfined"
+    #   resp.job_definitions[0].node_properties.node_range_properties[0].eks_properties.pod_properties.containers[0].security_context.seccomp_profile.localhost_profile #=> String
     #   resp.job_definitions[0].node_properties.node_range_properties[0].eks_properties.pod_properties.init_containers #=> Array
     #   resp.job_definitions[0].node_properties.node_range_properties[0].eks_properties.pod_properties.init_containers[0].name #=> String
     #   resp.job_definitions[0].node_properties.node_range_properties[0].eks_properties.pod_properties.init_containers[0].image #=> String
@@ -2597,6 +2604,12 @@ module Aws::Batch
     #   resp.job_definitions[0].node_properties.node_range_properties[0].eks_properties.pod_properties.init_containers[0].security_context.allow_privilege_escalation #=> Boolean
     #   resp.job_definitions[0].node_properties.node_range_properties[0].eks_properties.pod_properties.init_containers[0].security_context.read_only_root_filesystem #=> Boolean
     #   resp.job_definitions[0].node_properties.node_range_properties[0].eks_properties.pod_properties.init_containers[0].security_context.run_as_non_root #=> Boolean
+    #   resp.job_definitions[0].node_properties.node_range_properties[0].eks_properties.pod_properties.init_containers[0].security_context.capabilities.add #=> Array
+    #   resp.job_definitions[0].node_properties.node_range_properties[0].eks_properties.pod_properties.init_containers[0].security_context.capabilities.add[0] #=> String
+    #   resp.job_definitions[0].node_properties.node_range_properties[0].eks_properties.pod_properties.init_containers[0].security_context.capabilities.drop #=> Array
+    #   resp.job_definitions[0].node_properties.node_range_properties[0].eks_properties.pod_properties.init_containers[0].security_context.capabilities.drop[0] #=> String
+    #   resp.job_definitions[0].node_properties.node_range_properties[0].eks_properties.pod_properties.init_containers[0].security_context.seccomp_profile.type #=> String, one of "RuntimeDefault", "Localhost", "Unconfined"
+    #   resp.job_definitions[0].node_properties.node_range_properties[0].eks_properties.pod_properties.init_containers[0].security_context.seccomp_profile.localhost_profile #=> String
     #   resp.job_definitions[0].node_properties.node_range_properties[0].eks_properties.pod_properties.volumes #=> Array
     #   resp.job_definitions[0].node_properties.node_range_properties[0].eks_properties.pod_properties.volumes[0].name #=> String
     #   resp.job_definitions[0].node_properties.node_range_properties[0].eks_properties.pod_properties.volumes[0].host_path.path #=> String
@@ -2612,6 +2625,12 @@ module Aws::Batch
     #   resp.job_definitions[0].node_properties.node_range_properties[0].eks_properties.pod_properties.metadata.annotations["String"] #=> String
     #   resp.job_definitions[0].node_properties.node_range_properties[0].eks_properties.pod_properties.metadata.namespace #=> String
     #   resp.job_definitions[0].node_properties.node_range_properties[0].eks_properties.pod_properties.share_process_namespace #=> Boolean
+    #   resp.job_definitions[0].node_properties.node_range_properties[0].eks_properties.pod_properties.security_context.run_as_user #=> Integer
+    #   resp.job_definitions[0].node_properties.node_range_properties[0].eks_properties.pod_properties.security_context.run_as_group #=> Integer
+    #   resp.job_definitions[0].node_properties.node_range_properties[0].eks_properties.pod_properties.security_context.run_as_non_root #=> Boolean
+    #   resp.job_definitions[0].node_properties.node_range_properties[0].eks_properties.pod_properties.security_context.seccomp_profile.type #=> String, one of "RuntimeDefault", "Localhost", "Unconfined"
+    #   resp.job_definitions[0].node_properties.node_range_properties[0].eks_properties.pod_properties.security_context.seccomp_profile.localhost_profile #=> String
+    #   resp.job_definitions[0].node_properties.node_range_properties[0].eks_properties.pod_properties.security_context.fs_group #=> Integer
     #   resp.job_definitions[0].node_properties.node_range_properties[0].consumable_resource_properties.consumable_resource_list #=> Array
     #   resp.job_definitions[0].node_properties.node_range_properties[0].consumable_resource_properties.consumable_resource_list[0].consumable_resource #=> String
     #   resp.job_definitions[0].node_properties.node_range_properties[0].consumable_resource_properties.consumable_resource_list[0].quantity #=> Integer
@@ -2731,6 +2750,12 @@ module Aws::Batch
     #   resp.job_definitions[0].eks_properties.pod_properties.containers[0].security_context.allow_privilege_escalation #=> Boolean
     #   resp.job_definitions[0].eks_properties.pod_properties.containers[0].security_context.read_only_root_filesystem #=> Boolean
     #   resp.job_definitions[0].eks_properties.pod_properties.containers[0].security_context.run_as_non_root #=> Boolean
+    #   resp.job_definitions[0].eks_properties.pod_properties.containers[0].security_context.capabilities.add #=> Array
+    #   resp.job_definitions[0].eks_properties.pod_properties.containers[0].security_context.capabilities.add[0] #=> String
+    #   resp.job_definitions[0].eks_properties.pod_properties.containers[0].security_context.capabilities.drop #=> Array
+    #   resp.job_definitions[0].eks_properties.pod_properties.containers[0].security_context.capabilities.drop[0] #=> String
+    #   resp.job_definitions[0].eks_properties.pod_properties.containers[0].security_context.seccomp_profile.type #=> String, one of "RuntimeDefault", "Localhost", "Unconfined"
+    #   resp.job_definitions[0].eks_properties.pod_properties.containers[0].security_context.seccomp_profile.localhost_profile #=> String
     #   resp.job_definitions[0].eks_properties.pod_properties.init_containers #=> Array
     #   resp.job_definitions[0].eks_properties.pod_properties.init_containers[0].name #=> String
     #   resp.job_definitions[0].eks_properties.pod_properties.init_containers[0].image #=> String
@@ -2757,6 +2782,12 @@ module Aws::Batch
     #   resp.job_definitions[0].eks_properties.pod_properties.init_containers[0].security_context.allow_privilege_escalation #=> Boolean
     #   resp.job_definitions[0].eks_properties.pod_properties.init_containers[0].security_context.read_only_root_filesystem #=> Boolean
     #   resp.job_definitions[0].eks_properties.pod_properties.init_containers[0].security_context.run_as_non_root #=> Boolean
+    #   resp.job_definitions[0].eks_properties.pod_properties.init_containers[0].security_context.capabilities.add #=> Array
+    #   resp.job_definitions[0].eks_properties.pod_properties.init_containers[0].security_context.capabilities.add[0] #=> String
+    #   resp.job_definitions[0].eks_properties.pod_properties.init_containers[0].security_context.capabilities.drop #=> Array
+    #   resp.job_definitions[0].eks_properties.pod_properties.init_containers[0].security_context.capabilities.drop[0] #=> String
+    #   resp.job_definitions[0].eks_properties.pod_properties.init_containers[0].security_context.seccomp_profile.type #=> String, one of "RuntimeDefault", "Localhost", "Unconfined"
+    #   resp.job_definitions[0].eks_properties.pod_properties.init_containers[0].security_context.seccomp_profile.localhost_profile #=> String
     #   resp.job_definitions[0].eks_properties.pod_properties.volumes #=> Array
     #   resp.job_definitions[0].eks_properties.pod_properties.volumes[0].name #=> String
     #   resp.job_definitions[0].eks_properties.pod_properties.volumes[0].host_path.path #=> String
@@ -2772,6 +2803,12 @@ module Aws::Batch
     #   resp.job_definitions[0].eks_properties.pod_properties.metadata.annotations["String"] #=> String
     #   resp.job_definitions[0].eks_properties.pod_properties.metadata.namespace #=> String
     #   resp.job_definitions[0].eks_properties.pod_properties.share_process_namespace #=> Boolean
+    #   resp.job_definitions[0].eks_properties.pod_properties.security_context.run_as_user #=> Integer
+    #   resp.job_definitions[0].eks_properties.pod_properties.security_context.run_as_group #=> Integer
+    #   resp.job_definitions[0].eks_properties.pod_properties.security_context.run_as_non_root #=> Boolean
+    #   resp.job_definitions[0].eks_properties.pod_properties.security_context.seccomp_profile.type #=> String, one of "RuntimeDefault", "Localhost", "Unconfined"
+    #   resp.job_definitions[0].eks_properties.pod_properties.security_context.seccomp_profile.localhost_profile #=> String
+    #   resp.job_definitions[0].eks_properties.pod_properties.security_context.fs_group #=> Integer
     #   resp.job_definitions[0].container_orchestration_type #=> String, one of "ECS", "EKS"
     #   resp.job_definitions[0].consumable_resource_properties.consumable_resource_list #=> Array
     #   resp.job_definitions[0].consumable_resource_properties.consumable_resource_list[0].consumable_resource #=> String
@@ -3276,6 +3313,12 @@ module Aws::Batch
     #   resp.jobs[0].node_properties.node_range_properties[0].eks_properties.pod_properties.containers[0].security_context.allow_privilege_escalation #=> Boolean
     #   resp.jobs[0].node_properties.node_range_properties[0].eks_properties.pod_properties.containers[0].security_context.read_only_root_filesystem #=> Boolean
     #   resp.jobs[0].node_properties.node_range_properties[0].eks_properties.pod_properties.containers[0].security_context.run_as_non_root #=> Boolean
+    #   resp.jobs[0].node_properties.node_range_properties[0].eks_properties.pod_properties.containers[0].security_context.capabilities.add #=> Array
+    #   resp.jobs[0].node_properties.node_range_properties[0].eks_properties.pod_properties.containers[0].security_context.capabilities.add[0] #=> String
+    #   resp.jobs[0].node_properties.node_range_properties[0].eks_properties.pod_properties.containers[0].security_context.capabilities.drop #=> Array
+    #   resp.jobs[0].node_properties.node_range_properties[0].eks_properties.pod_properties.containers[0].security_context.capabilities.drop[0] #=> String
+    #   resp.jobs[0].node_properties.node_range_properties[0].eks_properties.pod_properties.containers[0].security_context.seccomp_profile.type #=> String, one of "RuntimeDefault", "Localhost", "Unconfined"
+    #   resp.jobs[0].node_properties.node_range_properties[0].eks_properties.pod_properties.containers[0].security_context.seccomp_profile.localhost_profile #=> String
     #   resp.jobs[0].node_properties.node_range_properties[0].eks_properties.pod_properties.init_containers #=> Array
     #   resp.jobs[0].node_properties.node_range_properties[0].eks_properties.pod_properties.init_containers[0].name #=> String
     #   resp.jobs[0].node_properties.node_range_properties[0].eks_properties.pod_properties.init_containers[0].image #=> String
@@ -3302,6 +3345,12 @@ module Aws::Batch
     #   resp.jobs[0].node_properties.node_range_properties[0].eks_properties.pod_properties.init_containers[0].security_context.allow_privilege_escalation #=> Boolean
     #   resp.jobs[0].node_properties.node_range_properties[0].eks_properties.pod_properties.init_containers[0].security_context.read_only_root_filesystem #=> Boolean
     #   resp.jobs[0].node_properties.node_range_properties[0].eks_properties.pod_properties.init_containers[0].security_context.run_as_non_root #=> Boolean
+    #   resp.jobs[0].node_properties.node_range_properties[0].eks_properties.pod_properties.init_containers[0].security_context.capabilities.add #=> Array
+    #   resp.jobs[0].node_properties.node_range_properties[0].eks_properties.pod_properties.init_containers[0].security_context.capabilities.add[0] #=> String
+    #   resp.jobs[0].node_properties.node_range_properties[0].eks_properties.pod_properties.init_containers[0].security_context.capabilities.drop #=> Array
+    #   resp.jobs[0].node_properties.node_range_properties[0].eks_properties.pod_properties.init_containers[0].security_context.capabilities.drop[0] #=> String
+    #   resp.jobs[0].node_properties.node_range_properties[0].eks_properties.pod_properties.init_containers[0].security_context.seccomp_profile.type #=> String, one of "RuntimeDefault", "Localhost", "Unconfined"
+    #   resp.jobs[0].node_properties.node_range_properties[0].eks_properties.pod_properties.init_containers[0].security_context.seccomp_profile.localhost_profile #=> String
     #   resp.jobs[0].node_properties.node_range_properties[0].eks_properties.pod_properties.volumes #=> Array
     #   resp.jobs[0].node_properties.node_range_properties[0].eks_properties.pod_properties.volumes[0].name #=> String
     #   resp.jobs[0].node_properties.node_range_properties[0].eks_properties.pod_properties.volumes[0].host_path.path #=> String
@@ -3317,6 +3366,12 @@ module Aws::Batch
     #   resp.jobs[0].node_properties.node_range_properties[0].eks_properties.pod_properties.metadata.annotations["String"] #=> String
     #   resp.jobs[0].node_properties.node_range_properties[0].eks_properties.pod_properties.metadata.namespace #=> String
     #   resp.jobs[0].node_properties.node_range_properties[0].eks_properties.pod_properties.share_process_namespace #=> Boolean
+    #   resp.jobs[0].node_properties.node_range_properties[0].eks_properties.pod_properties.security_context.run_as_user #=> Integer
+    #   resp.jobs[0].node_properties.node_range_properties[0].eks_properties.pod_properties.security_context.run_as_group #=> Integer
+    #   resp.jobs[0].node_properties.node_range_properties[0].eks_properties.pod_properties.security_context.run_as_non_root #=> Boolean
+    #   resp.jobs[0].node_properties.node_range_properties[0].eks_properties.pod_properties.security_context.seccomp_profile.type #=> String, one of "RuntimeDefault", "Localhost", "Unconfined"
+    #   resp.jobs[0].node_properties.node_range_properties[0].eks_properties.pod_properties.security_context.seccomp_profile.localhost_profile #=> String
+    #   resp.jobs[0].node_properties.node_range_properties[0].eks_properties.pod_properties.security_context.fs_group #=> Integer
     #   resp.jobs[0].node_properties.node_range_properties[0].consumable_resource_properties.consumable_resource_list #=> Array
     #   resp.jobs[0].node_properties.node_range_properties[0].consumable_resource_properties.consumable_resource_list[0].consumable_resource #=> String
     #   resp.jobs[0].node_properties.node_range_properties[0].consumable_resource_properties.consumable_resource_list[0].quantity #=> Integer
@@ -3364,6 +3419,12 @@ module Aws::Batch
     #   resp.jobs[0].eks_properties.pod_properties.containers[0].security_context.allow_privilege_escalation #=> Boolean
     #   resp.jobs[0].eks_properties.pod_properties.containers[0].security_context.read_only_root_filesystem #=> Boolean
     #   resp.jobs[0].eks_properties.pod_properties.containers[0].security_context.run_as_non_root #=> Boolean
+    #   resp.jobs[0].eks_properties.pod_properties.containers[0].security_context.capabilities.add #=> Array
+    #   resp.jobs[0].eks_properties.pod_properties.containers[0].security_context.capabilities.add[0] #=> String
+    #   resp.jobs[0].eks_properties.pod_properties.containers[0].security_context.capabilities.drop #=> Array
+    #   resp.jobs[0].eks_properties.pod_properties.containers[0].security_context.capabilities.drop[0] #=> String
+    #   resp.jobs[0].eks_properties.pod_properties.containers[0].security_context.seccomp_profile.type #=> String, one of "RuntimeDefault", "Localhost", "Unconfined"
+    #   resp.jobs[0].eks_properties.pod_properties.containers[0].security_context.seccomp_profile.localhost_profile #=> String
     #   resp.jobs[0].eks_properties.pod_properties.init_containers #=> Array
     #   resp.jobs[0].eks_properties.pod_properties.init_containers[0].name #=> String
     #   resp.jobs[0].eks_properties.pod_properties.init_containers[0].image #=> String
@@ -3392,6 +3453,12 @@ module Aws::Batch
     #   resp.jobs[0].eks_properties.pod_properties.init_containers[0].security_context.allow_privilege_escalation #=> Boolean
     #   resp.jobs[0].eks_properties.pod_properties.init_containers[0].security_context.read_only_root_filesystem #=> Boolean
     #   resp.jobs[0].eks_properties.pod_properties.init_containers[0].security_context.run_as_non_root #=> Boolean
+    #   resp.jobs[0].eks_properties.pod_properties.init_containers[0].security_context.capabilities.add #=> Array
+    #   resp.jobs[0].eks_properties.pod_properties.init_containers[0].security_context.capabilities.add[0] #=> String
+    #   resp.jobs[0].eks_properties.pod_properties.init_containers[0].security_context.capabilities.drop #=> Array
+    #   resp.jobs[0].eks_properties.pod_properties.init_containers[0].security_context.capabilities.drop[0] #=> String
+    #   resp.jobs[0].eks_properties.pod_properties.init_containers[0].security_context.seccomp_profile.type #=> String, one of "RuntimeDefault", "Localhost", "Unconfined"
+    #   resp.jobs[0].eks_properties.pod_properties.init_containers[0].security_context.seccomp_profile.localhost_profile #=> String
     #   resp.jobs[0].eks_properties.pod_properties.volumes #=> Array
     #   resp.jobs[0].eks_properties.pod_properties.volumes[0].name #=> String
     #   resp.jobs[0].eks_properties.pod_properties.volumes[0].host_path.path #=> String
@@ -3409,6 +3476,12 @@ module Aws::Batch
     #   resp.jobs[0].eks_properties.pod_properties.metadata.annotations["String"] #=> String
     #   resp.jobs[0].eks_properties.pod_properties.metadata.namespace #=> String
     #   resp.jobs[0].eks_properties.pod_properties.share_process_namespace #=> Boolean
+    #   resp.jobs[0].eks_properties.pod_properties.security_context.run_as_user #=> Integer
+    #   resp.jobs[0].eks_properties.pod_properties.security_context.run_as_group #=> Integer
+    #   resp.jobs[0].eks_properties.pod_properties.security_context.run_as_non_root #=> Boolean
+    #   resp.jobs[0].eks_properties.pod_properties.security_context.seccomp_profile.type #=> String, one of "RuntimeDefault", "Localhost", "Unconfined"
+    #   resp.jobs[0].eks_properties.pod_properties.security_context.seccomp_profile.localhost_profile #=> String
+    #   resp.jobs[0].eks_properties.pod_properties.security_context.fs_group #=> Integer
     #   resp.jobs[0].eks_attempts #=> Array
     #   resp.jobs[0].eks_attempts[0].containers #=> Array
     #   resp.jobs[0].eks_attempts[0].containers[0].name #=> String
@@ -4672,10 +4745,17 @@ module Aws::Batch
     #   definitions.
     #
     #   <note markdown="1"> If the job runs on Fargate resources, then you must not specify
-    #   `nodeProperties`; use only `containerProperties`.
+    #   `nodeProperties`. We recommend `ecsProperties`, which supports both
+    #   single-container and multi-container jobs. `containerProperties` is
+    #   also supported for single-container jobs. For more information, see
+    #   [Multi-container jobs][1] in the *Batch User Guide*.
     #
     #    </note>
     #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/batch/latest/userguide/multi-container-jobs.html
+    #
     # @option params [Types::NodeProperties] :node_properties
     #   An object with properties specific to multi-node parallel jobs. If you
     #   specify node properties for a job, it becomes a multi-node parallel
@@ -4683,7 +4763,9 @@ module Aws::Batch
     #   *Batch User Guide*.
     #
     #   <note markdown="1"> If the job runs on Fargate resources, then you must not specify
-    #   `nodeProperties`; use `containerProperties` instead.
+    #   `nodeProperties`. We recommend `ecsProperties`, which supports both
+    #   single-container and multi-container jobs. `containerProperties` is
+    #   also supported for single-container jobs.
     #
     #    </note>
     #
@@ -5439,6 +5521,14 @@ module Aws::Batch
     #                     allow_privilege_escalation: false,
     #                     read_only_root_filesystem: false,
     #                     run_as_non_root: false,
+    #                     capabilities: {
+    #                       add: ["EksContainerLinuxCapability"],
+    #                       drop: ["EksContainerLinuxCapability"],
+    #                     },
+    #                     seccomp_profile: {
+    #                       type: "RuntimeDefault", # required, accepts RuntimeDefault, Localhost, Unconfined
+    #                       localhost_profile: "EksSeccompLocalhostProfile",
+    #                     },
     #                   },
     #                 },
     #               ],
@@ -5478,6 +5568,14 @@ module Aws::Batch
     #                     allow_privilege_escalation: false,
     #                     read_only_root_filesystem: false,
     #                     run_as_non_root: false,
+    #                     capabilities: {
+    #                       add: ["EksContainerLinuxCapability"],
+    #                       drop: ["EksContainerLinuxCapability"],
+    #                     },
+    #                     seccomp_profile: {
+    #                       type: "RuntimeDefault", # required, accepts RuntimeDefault, Localhost, Unconfined
+    #                       localhost_profile: "EksSeccompLocalhostProfile",
+    #                     },
     #                   },
     #                 },
     #               ],
@@ -5511,6 +5609,16 @@ module Aws::Batch
     #                 namespace: "String",
     #               },
     #               share_process_namespace: false,
+    #               security_context: {
+    #                 run_as_user: 1,
+    #                 run_as_group: 1,
+    #                 run_as_non_root: false,
+    #                 seccomp_profile: {
+    #                   type: "RuntimeDefault", # required, accepts RuntimeDefault, Localhost, Unconfined
+    #                   localhost_profile: "EksSeccompLocalhostProfile",
+    #                 },
+    #                 fs_group: 1,
+    #               },
     #             },
     #           },
     #           consumable_resource_properties: {
@@ -5589,6 +5697,14 @@ module Aws::Batch
     #               allow_privilege_escalation: false,
     #               read_only_root_filesystem: false,
     #               run_as_non_root: false,
+    #               capabilities: {
+    #                 add: ["EksContainerLinuxCapability"],
+    #                 drop: ["EksContainerLinuxCapability"],
+    #               },
+    #               seccomp_profile: {
+    #                 type: "RuntimeDefault", # required, accepts RuntimeDefault, Localhost, Unconfined
+    #                 localhost_profile: "EksSeccompLocalhostProfile",
+    #               },
     #             },
     #           },
     #         ],
@@ -5628,6 +5744,14 @@ module Aws::Batch
     #               allow_privilege_escalation: false,
     #               read_only_root_filesystem: false,
     #               run_as_non_root: false,
+    #               capabilities: {
+    #                 add: ["EksContainerLinuxCapability"],
+    #                 drop: ["EksContainerLinuxCapability"],
+    #               },
+    #               seccomp_profile: {
+    #                 type: "RuntimeDefault", # required, accepts RuntimeDefault, Localhost, Unconfined
+    #                 localhost_profile: "EksSeccompLocalhostProfile",
+    #               },
     #             },
     #           },
     #         ],
@@ -5661,6 +5785,16 @@ module Aws::Batch
     #           namespace: "String",
     #         },
     #         share_process_namespace: false,
+    #         security_context: {
+    #           run_as_user: 1,
+    #           run_as_group: 1,
+    #           run_as_non_root: false,
+    #           seccomp_profile: {
+    #             type: "RuntimeDefault", # required, accepts RuntimeDefault, Localhost, Unconfined
+    #             localhost_profile: "EksSeccompLocalhostProfile",
+    #           },
+    #           fs_group: 1,
+    #         },
     #       },
     #     },
     #     ecs_properties: {
@@ -7418,7 +7552,7 @@ module Aws::Batch
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-batch'
-      context[:gem_version] = '1.161.0'
+      context[:gem_version] = '1.163.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-batch/client_api.rb

@@ -136,6 +136,9 @@ module Aws::Batch
     EksContainerDetails = Shapes::ListShape.new(name: 'EksContainerDetails')
     EksContainerEnvironmentVariable = Shapes::StructureShape.new(name: 'EksContainerEnvironmentVariable')
     EksContainerEnvironmentVariables = Shapes::ListShape.new(name: 'EksContainerEnvironmentVariables')
+    EksContainerLinuxCapabilities = Shapes::StructureShape.new(name: 'EksContainerLinuxCapabilities')
+    EksContainerLinuxCapability = Shapes::StringShape.new(name: 'EksContainerLinuxCapability')
+    EksContainerLinuxCapabilityList = Shapes::ListShape.new(name: 'EksContainerLinuxCapabilityList')
     EksContainerOverride = Shapes::StructureShape.new(name: 'EksContainerOverride')
     EksContainerOverrideList = Shapes::ListShape.new(name: 'EksContainerOverrideList')
     EksContainerResourceRequirements = Shapes::StructureShape.new(name: 'EksContainerResourceRequirements')
@@ -152,10 +155,14 @@ module Aws::Batch
     EksPodProperties = Shapes::StructureShape.new(name: 'EksPodProperties')
     EksPodPropertiesDetail = Shapes::StructureShape.new(name: 'EksPodPropertiesDetail')
     EksPodPropertiesOverride = Shapes::StructureShape.new(name: 'EksPodPropertiesOverride')
+    EksPodSecurityContext = Shapes::StructureShape.new(name: 'EksPodSecurityContext')
     EksProperties = Shapes::StructureShape.new(name: 'EksProperties')
     EksPropertiesDetail = Shapes::StructureShape.new(name: 'EksPropertiesDetail')
     EksPropertiesOverride = Shapes::StructureShape.new(name: 'EksPropertiesOverride')
     EksRequests = Shapes::MapShape.new(name: 'EksRequests')
+    EksSeccompLocalhostProfile = Shapes::StringShape.new(name: 'EksSeccompLocalhostProfile')
+    EksSeccompProfile = Shapes::StructureShape.new(name: 'EksSeccompProfile')
+    EksSeccompProfileType = Shapes::StringShape.new(name: 'EksSeccompProfileType')
     EksSecret = Shapes::StructureShape.new(name: 'EksSecret')
     EksVolume = Shapes::StructureShape.new(name: 'EksVolume')
     EksVolumes = Shapes::ListShape.new(name: 'EksVolumes')
@@ -998,6 +1005,12 @@ module Aws::Batch
 
     EksContainerEnvironmentVariables.member = Shapes::ShapeRef.new(shape: EksContainerEnvironmentVariable)
 
+    EksContainerLinuxCapabilities.add_member(:add, Shapes::ShapeRef.new(shape: EksContainerLinuxCapabilityList, location_name: "add"))
+    EksContainerLinuxCapabilities.add_member(:drop, Shapes::ShapeRef.new(shape: EksContainerLinuxCapabilityList, location_name: "drop"))
+    EksContainerLinuxCapabilities.struct_class = Types::EksContainerLinuxCapabilities
+
+    EksContainerLinuxCapabilityList.member = Shapes::ShapeRef.new(shape: EksContainerLinuxCapability)
+
     EksContainerOverride.add_member(:name, Shapes::ShapeRef.new(shape: String, location_name: "name"))
     EksContainerOverride.add_member(:image, Shapes::ShapeRef.new(shape: String, location_name: "image"))
     EksContainerOverride.add_member(:command, Shapes::ShapeRef.new(shape: StringList, location_name: "command"))
@@ -1018,6 +1031,8 @@ module Aws::Batch
     EksContainerSecurityContext.add_member(:allow_privilege_escalation, Shapes::ShapeRef.new(shape: Boolean, location_name: "allowPrivilegeEscalation"))
     EksContainerSecurityContext.add_member(:read_only_root_filesystem, Shapes::ShapeRef.new(shape: Boolean, location_name: "readOnlyRootFilesystem"))
     EksContainerSecurityContext.add_member(:run_as_non_root, Shapes::ShapeRef.new(shape: Boolean, location_name: "runAsNonRoot"))
+    EksContainerSecurityContext.add_member(:capabilities, Shapes::ShapeRef.new(shape: EksContainerLinuxCapabilities, location_name: "capabilities"))
+    EksContainerSecurityContext.add_member(:seccomp_profile, Shapes::ShapeRef.new(shape: EksSeccompProfile, location_name: "seccompProfile"))
     EksContainerSecurityContext.struct_class = Types::EksContainerSecurityContext
 
     EksContainerVolumeMount.add_member(:name, Shapes::ShapeRef.new(shape: String, location_name: "name"))
@@ -1061,6 +1076,7 @@ module Aws::Batch
     EksPodProperties.add_member(:volumes, Shapes::ShapeRef.new(shape: EksVolumes, location_name: "volumes"))
     EksPodProperties.add_member(:metadata, Shapes::ShapeRef.new(shape: EksMetadata, location_name: "metadata"))
     EksPodProperties.add_member(:share_process_namespace, Shapes::ShapeRef.new(shape: Boolean, location_name: "shareProcessNamespace"))
+    EksPodProperties.add_member(:security_context, Shapes::ShapeRef.new(shape: EksPodSecurityContext, location_name: "securityContext"))
     EksPodProperties.struct_class = Types::EksPodProperties
 
     EksPodPropertiesDetail.add_member(:service_account_name, Shapes::ShapeRef.new(shape: String, location_name: "serviceAccountName"))
@@ -1074,6 +1090,7 @@ module Aws::Batch
     EksPodPropertiesDetail.add_member(:node_name, Shapes::ShapeRef.new(shape: String, location_name: "nodeName"))
     EksPodPropertiesDetail.add_member(:metadata, Shapes::ShapeRef.new(shape: EksMetadata, location_name: "metadata"))
     EksPodPropertiesDetail.add_member(:share_process_namespace, Shapes::ShapeRef.new(shape: Boolean, location_name: "shareProcessNamespace"))
+    EksPodPropertiesDetail.add_member(:security_context, Shapes::ShapeRef.new(shape: EksPodSecurityContext, location_name: "securityContext"))
     EksPodPropertiesDetail.struct_class = Types::EksPodPropertiesDetail
 
     EksPodPropertiesOverride.add_member(:containers, Shapes::ShapeRef.new(shape: EksContainerOverrideList, location_name: "containers"))
@@ -1081,6 +1098,13 @@ module Aws::Batch
     EksPodPropertiesOverride.add_member(:metadata, Shapes::ShapeRef.new(shape: EksMetadata, location_name: "metadata"))
     EksPodPropertiesOverride.struct_class = Types::EksPodPropertiesOverride
 
+    EksPodSecurityContext.add_member(:run_as_user, Shapes::ShapeRef.new(shape: Long, location_name: "runAsUser"))
+    EksPodSecurityContext.add_member(:run_as_group, Shapes::ShapeRef.new(shape: Long, location_name: "runAsGroup"))
+    EksPodSecurityContext.add_member(:run_as_non_root, Shapes::ShapeRef.new(shape: Boolean, location_name: "runAsNonRoot"))
+    EksPodSecurityContext.add_member(:seccomp_profile, Shapes::ShapeRef.new(shape: EksSeccompProfile, location_name: "seccompProfile"))
+    EksPodSecurityContext.add_member(:fs_group, Shapes::ShapeRef.new(shape: Long, location_name: "fsGroup"))
+    EksPodSecurityContext.struct_class = Types::EksPodSecurityContext
+
     EksProperties.add_member(:pod_properties, Shapes::ShapeRef.new(shape: EksPodProperties, location_name: "podProperties"))
     EksProperties.struct_class = Types::EksProperties
 
@@ -1093,6 +1117,10 @@ module Aws::Batch
     EksRequests.key = Shapes::ShapeRef.new(shape: String)
     EksRequests.value = Shapes::ShapeRef.new(shape: Quantity)
 
+    EksSeccompProfile.add_member(:type, Shapes::ShapeRef.new(shape: EksSeccompProfileType, required: true, location_name: "type"))
+    EksSeccompProfile.add_member(:localhost_profile, Shapes::ShapeRef.new(shape: EksSeccompLocalhostProfile, location_name: "localhostProfile"))
+    EksSeccompProfile.struct_class = Types::EksSeccompProfile
+
     EksSecret.add_member(:secret_name, Shapes::ShapeRef.new(shape: String, required: true, location_name: "secretName"))
     EksSecret.add_member(:optional, Shapes::ShapeRef.new(shape: Boolean, location_name: "optional"))
     EksSecret.struct_class = Types::EksSecret

data/lib/aws-sdk-batch/types.rb

@@ -5215,6 +5215,35 @@ module Aws::Batch
       include Aws::Structure
     end
 
+    # The Linux capabilities for the container. For more information, see
+    # [Set capabilities for a container][1] in the *Kubernetes
+    # documentation*.
+    #
+    #
+    #
+    # [1]: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-capabilities-for-a-container
+    #
+    # @!attribute [rw] add
+    #   The Linux capabilities to add to the default capability set for the
+    #   container. This parameter contains up to 64 values. Specify
+    #   capability names without the `CAP_` prefix.
+    #   @return [Array<String>]
+    #
+    # @!attribute [rw] drop
+    #   The Linux capabilities to remove from the default capability set for
+    #   the container. This parameter contains up to 64 values. Specify
+    #   capability names without the `CAP_` prefix.
+    #   @return [Array<String>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/batch-2016-08-10/EksContainerLinuxCapabilities AWS API Documentation
+    #
+    class EksContainerLinuxCapabilities < Struct.new(
+      :add,
+      :drop)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Object representing any Kubernetes overrides to a job definition
     # that's used in a [SubmitJob][1] API operation.
     #
@@ -5403,10 +5432,10 @@ module Aws::Batch
     # @!attribute [rw] run_as_user
     #   When this parameter is specified, the container is run as the
     #   specified user ID (`uid`). If this parameter isn't specified, the
-    #   default is the user that's specified in the image metadata. This
-    #   parameter maps to `RunAsUser` and `MustRanAs` policy in the [Users
-    #   and groups pod security policies][1] in the *Kubernetes
-    #   documentation*.
+    #   default is the user that's specified in the image metadata. The
+    #   supported value range is `0` through `2147483647`. This parameter
+    #   maps to `RunAsUser` and `MustRunAs` policy in the [Users and groups
+    #   pod security policies][1] in the *Kubernetes documentation*.
     #
     #
     #
@@ -5416,10 +5445,10 @@ module Aws::Batch
     # @!attribute [rw] run_as_group
     #   When this parameter is specified, the container is run as the
     #   specified group ID (`gid`). If this parameter isn't specified, the
-    #   default is the group that's specified in the image metadata. This
-    #   parameter maps to `RunAsGroup` and `MustRunAs` policy in the [Users
-    #   and groups pod security policies][1] in the *Kubernetes
-    #   documentation*.
+    #   default is the group that's specified in the image metadata. The
+    #   supported value range is `0` through `2147483647`. This parameter
+    #   maps to `RunAsGroup` and `MustRunAs` policy in the [Users and groups
+    #   pod security policies][1] in the *Kubernetes documentation*.
     #
     #
     #
@@ -5469,6 +5498,21 @@ module Aws::Batch
     #   [1]: https://kubernetes.io/docs/concepts/security/pod-security-policy/#users-and-groups
     #   @return [Boolean]
     #
+    # @!attribute [rw] capabilities
+    #   Adds or removes Linux capabilities from the container's default
+    #   capability set. With Linux capabilities, you can grant specific
+    #   privileges without granting full root permissions.
+    #   @return [Types::EksContainerLinuxCapabilities]
+    #
+    # @!attribute [rw] seccomp_profile
+    #   The seccomp profile for the container. A container-level seccomp
+    #   profile overrides the profile in the pod security context, which
+    #   defines security settings that apply to all containers in the pod
+    #   unless a container overrides them. If this parameter isn't
+    #   specified, the container uses the pod security context's seccomp
+    #   profile when one is specified.
+    #   @return [Types::EksSeccompProfile]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/batch-2016-08-10/EksContainerSecurityContext AWS API Documentation
     #
     class EksContainerSecurityContext < Struct.new(
@@ -5477,7 +5521,9 @@ module Aws::Batch
       :privileged,
       :allow_privilege_escalation,
       :read_only_root_filesystem,
-      :run_as_non_root)
+      :run_as_non_root,
+      :capabilities,
+      :seccomp_profile)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -5810,6 +5856,12 @@ module Aws::Batch
     #   [1]: https://kubernetes.io/docs/tasks/configure-pod-container/share-process-namespace/
     #   @return [Boolean]
     #
+    # @!attribute [rw] security_context
+    #   The security context to apply to the pod. The settings apply to all
+    #   containers in the pod unless an individual container specifies an
+    #   overriding value.
+    #   @return [Types::EksPodSecurityContext]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/batch-2016-08-10/EksPodProperties AWS API Documentation
     #
     class EksPodProperties < Struct.new(
@@ -5821,7 +5873,8 @@ module Aws::Batch
       :init_containers,
       :volumes,
       :metadata,
-      :share_process_namespace)
+      :share_process_namespace,
+      :security_context)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -5932,6 +5985,12 @@ module Aws::Batch
     #   [1]: https://kubernetes.io/docs/tasks/configure-pod-container/share-process-namespace/
     #   @return [Boolean]
     #
+    # @!attribute [rw] security_context
+    #   The security context applied to the pod. The settings apply to all
+    #   containers in the pod unless an individual container specifies an
+    #   overriding value.
+    #   @return [Types::EksPodSecurityContext]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/batch-2016-08-10/EksPodPropertiesDetail AWS API Documentation
     #
     class EksPodPropertiesDetail < Struct.new(
@@ -5945,7 +6004,8 @@ module Aws::Batch
       :pod_name,
       :node_name,
       :metadata,
-      :share_process_namespace)
+      :share_process_namespace,
+      :security_context)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -5986,6 +6046,57 @@ module Aws::Batch
       include Aws::Structure
     end
 
+    # The security context for the pod. The settings apply to all containers
+    # in the pod when the container does not specify an overriding value.
+    # For more information, see [Set the security context for a Pod][1] in
+    # the *Kubernetes documentation*.
+    #
+    #
+    #
+    # [1]: https://kubernetes.io/docs/tasks/configure-pod-container/security-context/#set-the-security-context-for-a-pod
+    #
+    # @!attribute [rw] run_as_user
+    #   The user ID that runs containers in the pod when a container does
+    #   not specify its own user ID. The supported value range is `0`
+    #   through `2147483647`.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] run_as_group
+    #   The primary group ID that runs containers in the pod when a
+    #   container does not specify its own group ID. The supported value
+    #   range is `0` through `2147483647`.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] run_as_non_root
+    #   Specifies whether Kubernetes validates that containers in the pod
+    #   don't run as the root user unless a container specifies an
+    #   overriding value.
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] seccomp_profile
+    #   The default seccomp profile for containers in the pod. A
+    #   container-level seccomp profile overrides this value.
+    #   @return [Types::EksSeccompProfile]
+    #
+    # @!attribute [rw] fs_group
+    #   A special supplemental group that is applied to all containers in
+    #   the pod. Some volume types allow Kubernetes to change the ownership
+    #   and permissions of the volume contents to this group when the volume
+    #   is mounted. The supported value range is `0` through `2147483647`.
+    #   @return [Integer]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/batch-2016-08-10/EksPodSecurityContext AWS API Documentation
+    #
+    class EksPodSecurityContext < Struct.new(
+      :run_as_user,
+      :run_as_group,
+      :run_as_non_root,
+      :seccomp_profile,
+      :fs_group)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # An object that contains the properties for the Kubernetes resources of
     # a job.
     #
@@ -6031,6 +6142,55 @@ module Aws::Batch
       include Aws::Structure
     end
 
+    # The Linux seccomp profile for a pod or container. For more
+    # information, see [Restrict a Container's Syscalls with seccomp][1] in
+    # the *Kubernetes documentation*.
+    #
+    #
+    #
+    # [1]: https://kubernetes.io/docs/tutorials/security/seccomp/
+    #
+    # @!attribute [rw] type
+    #   The seccomp profile type can be one of the following values:
+    #
+    #   RuntimeDefault
+    #
+    #   : The `RuntimeDefault` value uses the container runtime's default
+    #     seccomp profile.
+    #
+    #   Unconfined
+    #
+    #   : The `Unconfined` value doesn't filter the container with seccomp.
+    #
+    #   Localhost
+    #
+    #   : The `Localhost` value uses a custom profile at the path specified
+    #     by `localhostProfile`.
+    #   @return [String]
+    #
+    # @!attribute [rw] localhost_profile
+    #   The path of the profile on the node, relative to the configured
+    #   seccomp profile location. You must specify this parameter when
+    #   `type` is `Localhost`. Don't set this parameter for any other type.
+    #   You are responsible for ensuring that the profile exists on every
+    #   eligible worker node. For information about providing files to
+    #   Amazon EKS nodes, see [Use a launch template with Batch on Amazon
+    #   EKS][1] in the *Batch User Guide*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/batch/latest/userguide/eks-launch-templates.html
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/batch-2016-08-10/EksSeccompProfile AWS API Documentation
+    #
+    class EksSeccompProfile < Struct.new(
+      :type,
+      :localhost_profile)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Specifies the configuration of a Kubernetes `secret` volume. For more
     # information, see [secret][1] in the *Kubernetes documentation*.
     #
@@ -6822,7 +6982,9 @@ module Aws::Batch
     #   `eksProperties`.
     #
     #   <note markdown="1"> If the job runs on Fargate resources, don't specify
-    #   `nodeProperties`. Use `containerProperties` instead.
+    #   `nodeProperties`. We recommend `ecsProperties`, which supports both
+    #   single-container and multi-container jobs. `containerProperties` is
+    #   also supported for single-container jobs.
     #
     #    </note>
     #   @return [Types::NodeProperties]
@@ -9394,9 +9556,16 @@ module Aws::Batch
     #   job definitions.
     #
     #   <note markdown="1"> If the job runs on Fargate resources, then you must not specify
-    #   `nodeProperties`; use only `containerProperties`.
+    #   `nodeProperties`. We recommend `ecsProperties`, which supports both
+    #   single-container and multi-container jobs. `containerProperties` is
+    #   also supported for single-container jobs. For more information, see
+    #   [Multi-container jobs][1] in the *Batch User Guide*.
     #
     #    </note>
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/batch/latest/userguide/multi-container-jobs.html
     #   @return [Types::ContainerProperties]
     #
     # @!attribute [rw] node_properties
@@ -9406,7 +9575,9 @@ module Aws::Batch
     #   Jobs][1] in the *Batch User Guide*.
     #
     #   <note markdown="1"> If the job runs on Fargate resources, then you must not specify
-    #   `nodeProperties`; use `containerProperties` instead.
+    #   `nodeProperties`. We recommend `ecsProperties`, which supports both
+    #   single-container and multi-container jobs. `containerProperties` is
+    #   also supported for single-container jobs.
     #
     #    </note>
     #

data/lib/aws-sdk-batch.rb

@@ -54,7 +54,7 @@ module Aws::Batch
   autoload :EndpointProvider, 'aws-sdk-batch/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-batch/endpoints'
 
-  GEM_VERSION = '1.161.0'
+  GEM_VERSION = '1.163.0'
 
 end
 

data/sig/params.rbs

@@ -250,6 +250,17 @@ module Aws
       stop_timeout: ::Integer?
     }
 
+      type eks_pod_security_context = {
+      run_as_user: ::Integer?,
+      run_as_group: ::Integer?,
+      run_as_non_root: bool?,
+      seccomp_profile: {
+        type: ("RuntimeDefault" | "Localhost" | "Unconfined"),
+        localhost_profile: ::String?
+      }?,
+      fs_group: ::Integer?
+    }
+
       type eks_pod_properties = {
       service_account_name: ::String?,
       host_network: bool?,
@@ -273,7 +284,8 @@ module Aws
         annotations: Hash[::String, ::String]?,
         namespace: ::String?
       }?,
-      share_process_namespace: bool?
+      share_process_namespace: bool?,
+      security_context: Params::eks_pod_security_context?
     }
 
       type eks_properties = {
@@ -286,7 +298,15 @@ module Aws
       privileged: bool?,
       allow_privilege_escalation: bool?,
       read_only_root_filesystem: bool?,
-      run_as_non_root: bool?
+      run_as_non_root: bool?,
+      capabilities: {
+        add: Array[::String]?,
+        drop: Array[::String]?
+      }?,
+      seccomp_profile: {
+        type: ("RuntimeDefault" | "Localhost" | "Unconfined"),
+        localhost_profile: ::String?
+      }?
     }
 
       type eks_container = {

data/sig/types.rbs

@@ -741,6 +741,12 @@ module Aws::Batch
       SENSITIVE: []
     end
 
+    class EksContainerLinuxCapabilities
+      attr_accessor add: ::Array[::String]
+      attr_accessor drop: ::Array[::String]
+      SENSITIVE: []
+    end
+
     class EksContainerOverride
       attr_accessor name: ::String
       attr_accessor image: ::String
@@ -764,6 +770,8 @@ module Aws::Batch
       attr_accessor allow_privilege_escalation: bool
       attr_accessor read_only_root_filesystem: bool
       attr_accessor run_as_non_root: bool
+      attr_accessor capabilities: Types::EksContainerLinuxCapabilities
+      attr_accessor seccomp_profile: Types::EksSeccompProfile
       SENSITIVE: []
     end
 
@@ -809,6 +817,7 @@ module Aws::Batch
       attr_accessor volumes: ::Array[Types::EksVolume]
       attr_accessor metadata: Types::EksMetadata
       attr_accessor share_process_namespace: bool
+      attr_accessor security_context: Types::EksPodSecurityContext
       SENSITIVE: []
     end
 
@@ -824,6 +833,7 @@ module Aws::Batch
       attr_accessor node_name: ::String
       attr_accessor metadata: Types::EksMetadata
       attr_accessor share_process_namespace: bool
+      attr_accessor security_context: Types::EksPodSecurityContext
       SENSITIVE: []
     end
 
@@ -834,6 +844,15 @@ module Aws::Batch
       SENSITIVE: []
     end
 
+    class EksPodSecurityContext
+      attr_accessor run_as_user: ::Integer
+      attr_accessor run_as_group: ::Integer
+      attr_accessor run_as_non_root: bool
+      attr_accessor seccomp_profile: Types::EksSeccompProfile
+      attr_accessor fs_group: ::Integer
+      SENSITIVE: []
+    end
+
     class EksProperties
       attr_accessor pod_properties: Types::EksPodProperties
       SENSITIVE: []
@@ -849,6 +868,12 @@ module Aws::Batch
       SENSITIVE: []
     end
 
+    class EksSeccompProfile
+      attr_accessor type: ("RuntimeDefault" | "Localhost" | "Unconfined")
+      attr_accessor localhost_profile: ::String
+      SENSITIVE: []
+    end
+
     class EksSecret
       attr_accessor secret_name: ::String
       attr_accessor optional: bool

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-batch
 version: !ruby/object:Gem::Version
-  version: 1.161.0
+  version: 1.163.0
 platform: ruby
 authors:
 - Amazon Web Services
@@ -18,7 +18,7 @@ dependencies:
         version: '3'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.265.0
+        version: 3.267.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -28,7 +28,7 @@ dependencies:
         version: '3'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.265.0
+        version: 3.267.0
 - !ruby/object:Gem::Dependency
   name: aws-sigv4
   requirement: !ruby/object:Gem::Requirement