aws-sdk-chimesdkmediapipelines 1.33.0 → 1.34.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c554e43788fabb0b6cd1b23769c8c7a79a28e3b6f8c1f2311ce3c2e38a8b7a00
-  data.tar.gz: 5c6f9fd83886cccdd7cf22cf533ea6992bfcba990f8556b2c7b755dc0ca5c8a2
+  metadata.gz: a0c6dbf995d6e640db60b6adebccd9be752924d6485241d2828288c2730eec53
+  data.tar.gz: 1cb09d6a054fc3ccf60fdaf3a76b0cde27d936a134860b78ac7f461f36865795
 SHA512:
-  metadata.gz: '08c56bdb916c108eb5f89635032097964ab089c74da76a686b4bfe084751529b6f60be64eb3bed2ca49b69196b5796bcf47f23a583e8ee96e380ea9a2c03aaa0'
-  data.tar.gz: 913c09a26eb594b2706e58854875b21a7b7e6e9da8901cca4f497a1fe3aa3226b4bb95d23cab1aabb2fcc6a0d39cfe6b6307387904b4008f82c0f2e7f60b2c58
+  metadata.gz: bb946c99afa7c9e055dfd9de0aa5b2f08872981e9711c01888b76e96dcf9cb238813354b942c36bd2a5c2bab50db80db0711048fbceb148f95882f8922159243
+  data.tar.gz: 1c9572c790f35848bc52c014af8ed25aa9484c0129f1b9a9b8ffa004ab95decfad21c00f5e262d11ac84fcafe775fcad9397cbce7166694cd75ec66d733e835d

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.34.0 (2024-11-08)
+------------------
+
+* Feature - Added support for Media Capture Pipeline and Media Concatenation Pipeline for customer managed server side encryption. Now Media Capture Pipeline can use IAM sink role to get access to KMS key and encrypt/decrypt recorded artifacts. KMS key ID can also be supplied with encryption context.
+
 1.33.0 (2024-10-18)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.33.0
+1.34.0

data/lib/aws-sdk-chimesdkmediapipelines/client.rb

@@ -475,6 +475,26 @@ module Aws::ChimeSDKMediaPipelines
     #   The configuration for a specified media pipeline. `SourceType` must be
     #   `ChimeSdkMeeting`.
     #
+    # @option params [Types::SseAwsKeyManagementParams] :sse_aws_key_management_params
+    #   An object that contains server side encryption parameters to be used
+    #   by media capture pipeline. The parameters can also be used by media
+    #   concatenation pipeline taking media capture pipeline as a media
+    #   source.
+    #
+    # @option params [String] :sink_iam_role_arn
+    #   The Amazon Resource Name (ARN) of the sink role to be used with
+    #   `AwsKmsKeyId` in `SseAwsKeyManagementParams`. Can only interact with
+    #   `S3Bucket` sink type. The role must belong to the caller’s account and
+    #   be able to act on behalf of the caller during the API call. All
+    #   minimum policy permissions requirements for the caller to perform
+    #   sink-related actions are the same for `SinkIamRoleArn`.
+    #
+    #   Additionally, the role must have permission to `kms:GenerateDataKey`
+    #   using KMS key supplied as `AwsKmsKeyId` in
+    #   `SseAwsKeyManagementParams`. If media concatenation will be required
+    #   later, the role must also have permission to `kms:Decrypt` for the
+    #   same KMS key.
+    #
     # @option params [Array<Types::Tag>] :tags
     #   The tag key-value pairs.
     #
@@ -543,6 +563,11 @@ module Aws::ChimeSDKMediaPipelines
     #         },
     #       },
     #     },
+    #     sse_aws_key_management_params: {
+    #       aws_kms_key_id: "String", # required
+    #       aws_kms_encryption_context: "String",
+    #     },
+    #     sink_iam_role_arn: "Arn",
     #     tags: [
     #       {
     #         key: "TagKey", # required
@@ -589,6 +614,9 @@ module Aws::ChimeSDKMediaPipelines
     #   resp.media_capture_pipeline.chime_sdk_meeting_configuration.artifacts_configuration.composited_video.grid_view_configuration.video_attribute.highlight_color #=> String, one of "Black", "Blue", "Red", "Green", "White", "Yellow"
     #   resp.media_capture_pipeline.chime_sdk_meeting_configuration.artifacts_configuration.composited_video.grid_view_configuration.video_attribute.border_thickness #=> Integer
     #   resp.media_capture_pipeline.chime_sdk_meeting_configuration.artifacts_configuration.composited_video.grid_view_configuration.canvas_orientation #=> String, one of "Landscape", "Portrait"
+    #   resp.media_capture_pipeline.sse_aws_key_management_params.aws_kms_key_id #=> String
+    #   resp.media_capture_pipeline.sse_aws_key_management_params.aws_kms_encryption_context #=> String
+    #   resp.media_capture_pipeline.sink_iam_role_arn #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/chime-sdk-media-pipelines-2021-07-15/CreateMediaCapturePipeline AWS API Documentation
     #
@@ -1484,6 +1512,9 @@ module Aws::ChimeSDKMediaPipelines
     #   resp.media_capture_pipeline.chime_sdk_meeting_configuration.artifacts_configuration.composited_video.grid_view_configuration.video_attribute.highlight_color #=> String, one of "Black", "Blue", "Red", "Green", "White", "Yellow"
     #   resp.media_capture_pipeline.chime_sdk_meeting_configuration.artifacts_configuration.composited_video.grid_view_configuration.video_attribute.border_thickness #=> Integer
     #   resp.media_capture_pipeline.chime_sdk_meeting_configuration.artifacts_configuration.composited_video.grid_view_configuration.canvas_orientation #=> String, one of "Landscape", "Portrait"
+    #   resp.media_capture_pipeline.sse_aws_key_management_params.aws_kms_key_id #=> String
+    #   resp.media_capture_pipeline.sse_aws_key_management_params.aws_kms_encryption_context #=> String
+    #   resp.media_capture_pipeline.sink_iam_role_arn #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/chime-sdk-media-pipelines-2021-07-15/GetMediaCapturePipeline AWS API Documentation
     #
@@ -1638,6 +1669,9 @@ module Aws::ChimeSDKMediaPipelines
     #   resp.media_pipeline.media_capture_pipeline.chime_sdk_meeting_configuration.artifacts_configuration.composited_video.grid_view_configuration.video_attribute.highlight_color #=> String, one of "Black", "Blue", "Red", "Green", "White", "Yellow"
     #   resp.media_pipeline.media_capture_pipeline.chime_sdk_meeting_configuration.artifacts_configuration.composited_video.grid_view_configuration.video_attribute.border_thickness #=> Integer
     #   resp.media_pipeline.media_capture_pipeline.chime_sdk_meeting_configuration.artifacts_configuration.composited_video.grid_view_configuration.canvas_orientation #=> String, one of "Landscape", "Portrait"
+    #   resp.media_pipeline.media_capture_pipeline.sse_aws_key_management_params.aws_kms_key_id #=> String
+    #   resp.media_pipeline.media_capture_pipeline.sse_aws_key_management_params.aws_kms_encryption_context #=> String
+    #   resp.media_pipeline.media_capture_pipeline.sink_iam_role_arn #=> String
     #   resp.media_pipeline.media_live_connector_pipeline.sources #=> Array
     #   resp.media_pipeline.media_live_connector_pipeline.sources[0].source_type #=> String, one of "ChimeSdkMeeting"
     #   resp.media_pipeline.media_live_connector_pipeline.sources[0].chime_sdk_meeting_live_connector_configuration.arn #=> String
@@ -2559,7 +2593,7 @@ module Aws::ChimeSDKMediaPipelines
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-chimesdkmediapipelines'
-      context[:gem_version] = '1.33.0'
+      context[:gem_version] = '1.34.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-chimesdkmediapipelines/client_api.rb

@@ -220,6 +220,7 @@ module Aws::ChimeSDKMediaPipelines
     SourceConfiguration = Shapes::StructureShape.new(name: 'SourceConfiguration')
     SpeakerSearchTask = Shapes::StructureShape.new(name: 'SpeakerSearchTask')
     SqsQueueSinkConfiguration = Shapes::StructureShape.new(name: 'SqsQueueSinkConfiguration')
+    SseAwsKeyManagementParams = Shapes::StructureShape.new(name: 'SseAwsKeyManagementParams')
     StartSpeakerSearchTaskRequest = Shapes::StructureShape.new(name: 'StartSpeakerSearchTaskRequest')
     StartSpeakerSearchTaskResponse = Shapes::StructureShape.new(name: 'StartSpeakerSearchTaskResponse')
     StartVoiceToneAnalysisTaskRequest = Shapes::StructureShape.new(name: 'StartVoiceToneAnalysisTaskRequest')
@@ -394,6 +395,8 @@ module Aws::ChimeSDKMediaPipelines
     CreateMediaCapturePipelineRequest.add_member(:sink_arn, Shapes::ShapeRef.new(shape: Arn, required: true, location_name: "SinkArn"))
     CreateMediaCapturePipelineRequest.add_member(:client_request_token, Shapes::ShapeRef.new(shape: ClientRequestToken, location_name: "ClientRequestToken", metadata: {"idempotencyToken"=>true}))
     CreateMediaCapturePipelineRequest.add_member(:chime_sdk_meeting_configuration, Shapes::ShapeRef.new(shape: ChimeSdkMeetingConfiguration, location_name: "ChimeSdkMeetingConfiguration"))
+    CreateMediaCapturePipelineRequest.add_member(:sse_aws_key_management_params, Shapes::ShapeRef.new(shape: SseAwsKeyManagementParams, location_name: "SseAwsKeyManagementParams"))
+    CreateMediaCapturePipelineRequest.add_member(:sink_iam_role_arn, Shapes::ShapeRef.new(shape: Arn, location_name: "SinkIamRoleArn"))
     CreateMediaCapturePipelineRequest.add_member(:tags, Shapes::ShapeRef.new(shape: TagList, location_name: "Tags"))
     CreateMediaCapturePipelineRequest.struct_class = Types::CreateMediaCapturePipelineRequest
 
@@ -657,6 +660,8 @@ module Aws::ChimeSDKMediaPipelines
     MediaCapturePipeline.add_member(:created_timestamp, Shapes::ShapeRef.new(shape: Iso8601Timestamp, location_name: "CreatedTimestamp"))
     MediaCapturePipeline.add_member(:updated_timestamp, Shapes::ShapeRef.new(shape: Iso8601Timestamp, location_name: "UpdatedTimestamp"))
     MediaCapturePipeline.add_member(:chime_sdk_meeting_configuration, Shapes::ShapeRef.new(shape: ChimeSdkMeetingConfiguration, location_name: "ChimeSdkMeetingConfiguration"))
+    MediaCapturePipeline.add_member(:sse_aws_key_management_params, Shapes::ShapeRef.new(shape: SseAwsKeyManagementParams, location_name: "SseAwsKeyManagementParams"))
+    MediaCapturePipeline.add_member(:sink_iam_role_arn, Shapes::ShapeRef.new(shape: Arn, location_name: "SinkIamRoleArn"))
     MediaCapturePipeline.struct_class = Types::MediaCapturePipeline
 
     MediaCapturePipelineSourceConfiguration.add_member(:media_pipeline_arn, Shapes::ShapeRef.new(shape: Arn, required: true, location_name: "MediaPipelineArn"))
@@ -859,6 +864,10 @@ module Aws::ChimeSDKMediaPipelines
     SqsQueueSinkConfiguration.add_member(:insights_target, Shapes::ShapeRef.new(shape: Arn, location_name: "InsightsTarget"))
     SqsQueueSinkConfiguration.struct_class = Types::SqsQueueSinkConfiguration
 
+    SseAwsKeyManagementParams.add_member(:aws_kms_key_id, Shapes::ShapeRef.new(shape: String, required: true, location_name: "AwsKmsKeyId"))
+    SseAwsKeyManagementParams.add_member(:aws_kms_encryption_context, Shapes::ShapeRef.new(shape: String, location_name: "AwsKmsEncryptionContext"))
+    SseAwsKeyManagementParams.struct_class = Types::SseAwsKeyManagementParams
+
     StartSpeakerSearchTaskRequest.add_member(:identifier, Shapes::ShapeRef.new(shape: NonEmptyString, required: true, location: "uri", location_name: "identifier"))
     StartSpeakerSearchTaskRequest.add_member(:voice_profile_domain_arn, Shapes::ShapeRef.new(shape: Arn, required: true, location_name: "VoiceProfileDomainArn"))
     StartSpeakerSearchTaskRequest.add_member(:kinesis_video_stream_source_task_configuration, Shapes::ShapeRef.new(shape: KinesisVideoStreamSourceTaskConfiguration, location_name: "KinesisVideoStreamSourceTaskConfiguration"))

data/lib/aws-sdk-chimesdkmediapipelines/types.rb

@@ -391,6 +391,12 @@ module Aws::ChimeSDKMediaPipelines
     #
     # @!attribute [rw] identify_multiple_languages
     #   Turns language identification on or off for multiple languages.
+    #
+    #   <note markdown="1"> Calls to this API must include a `LanguageCode`, `IdentifyLanguage`,
+    #   or `IdentifyMultipleLanguages` parameter. If you include more than
+    #   one of those parameters, your transcription job fails.
+    #
+    #    </note>
     #   @return [Boolean]
     #
     # @!attribute [rw] language_options
@@ -818,6 +824,28 @@ module Aws::ChimeSDKMediaPipelines
     #   be `ChimeSdkMeeting`.
     #   @return [Types::ChimeSdkMeetingConfiguration]
     #
+    # @!attribute [rw] sse_aws_key_management_params
+    #   An object that contains server side encryption parameters to be used
+    #   by media capture pipeline. The parameters can also be used by media
+    #   concatenation pipeline taking media capture pipeline as a media
+    #   source.
+    #   @return [Types::SseAwsKeyManagementParams]
+    #
+    # @!attribute [rw] sink_iam_role_arn
+    #   The Amazon Resource Name (ARN) of the sink role to be used with
+    #   `AwsKmsKeyId` in `SseAwsKeyManagementParams`. Can only interact with
+    #   `S3Bucket` sink type. The role must belong to the caller’s account
+    #   and be able to act on behalf of the caller during the API call. All
+    #   minimum policy permissions requirements for the caller to perform
+    #   sink-related actions are the same for `SinkIamRoleArn`.
+    #
+    #   Additionally, the role must have permission to `kms:GenerateDataKey`
+    #   using KMS key supplied as `AwsKmsKeyId` in
+    #   `SseAwsKeyManagementParams`. If media concatenation will be required
+    #   later, the role must also have permission to `kms:Decrypt` for the
+    #   same KMS key.
+    #   @return [String]
+    #
     # @!attribute [rw] tags
     #   The tag key-value pairs.
     #   @return [Array<Types::Tag>]
@@ -831,8 +859,10 @@ module Aws::ChimeSDKMediaPipelines
       :sink_arn,
       :client_request_token,
       :chime_sdk_meeting_configuration,
+      :sse_aws_key_management_params,
+      :sink_iam_role_arn,
       :tags)
-      SENSITIVE = [:source_arn, :sink_arn, :client_request_token]
+      SENSITIVE = [:source_arn, :sink_arn, :client_request_token, :sink_iam_role_arn]
       include Aws::Structure
     end
 
@@ -2072,6 +2102,18 @@ module Aws::ChimeSDKMediaPipelines
     #   be `ChimeSdkMeeting`.
     #   @return [Types::ChimeSdkMeetingConfiguration]
     #
+    # @!attribute [rw] sse_aws_key_management_params
+    #   An object that contains server side encryption parameters to be used
+    #   by media capture pipeline. The parameters can also be used by media
+    #   concatenation pipeline taking media capture pipeline as a media
+    #   source.
+    #   @return [Types::SseAwsKeyManagementParams]
+    #
+    # @!attribute [rw] sink_iam_role_arn
+    #   The Amazon Resource Name (ARN) of the sink role to be used with
+    #   `AwsKmsKeyId` in `SseAwsKeyManagementParams`.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/chime-sdk-media-pipelines-2021-07-15/MediaCapturePipeline AWS API Documentation
     #
     class MediaCapturePipeline < Struct.new(
@@ -2084,8 +2126,10 @@ module Aws::ChimeSDKMediaPipelines
       :sink_arn,
       :created_timestamp,
       :updated_timestamp,
-      :chime_sdk_meeting_configuration)
-      SENSITIVE = [:source_arn, :sink_arn]
+      :chime_sdk_meeting_configuration,
+      :sse_aws_key_management_params,
+      :sink_iam_role_arn)
+      SENSITIVE = [:source_arn, :sink_arn, :sink_iam_role_arn]
       include Aws::Structure
     end
 
@@ -3003,6 +3047,69 @@ module Aws::ChimeSDKMediaPipelines
       include Aws::Structure
     end
 
+    # Contains server side encryption parameters to be used by media capture
+    # pipeline. The parameters can also be used by media concatenation
+    # pipeline taking media capture pipeline as a media source.
+    #
+    # @!attribute [rw] aws_kms_key_id
+    #   The KMS key you want to use to encrypt your media pipeline output.
+    #   Decryption is required for concatenation pipeline. If using a key
+    #   located in the current Amazon Web Services account, you can specify
+    #   your KMS key in one of four ways:
+    #
+    #   * Use the KMS key ID itself. For example,
+    #     `1234abcd-12ab-34cd-56ef-1234567890ab`.
+    #
+    #   * Use an alias for the KMS key ID. For example,
+    #     `alias/ExampleAlias`.
+    #
+    #   * Use the Amazon Resource Name (ARN) for the KMS key ID. For
+    #     example,
+    #     `arn:aws:kms:region:account-ID:key/1234abcd-12ab-34cd-56ef-1234567890ab`.
+    #
+    #   * Use the ARN for the KMS key alias. For example,
+    #     `arn:aws:kms:region:account-ID:alias/ExampleAlias`.
+    #
+    #   If using a key located in a different Amazon Web Services account
+    #   than the current Amazon Web Services account, you can specify your
+    #   KMS key in one of two ways:
+    #
+    #   * Use the ARN for the KMS key ID. For example,
+    #     `arn:aws:kms:region:account-ID:key/1234abcd-12ab-34cd-56ef-1234567890ab`.
+    #
+    #   * Use the ARN for the KMS key alias. For example,
+    #     `arn:aws:kms:region:account-ID:alias/ExampleAlias`.
+    #
+    #   If you don't specify an encryption key, your output is encrypted
+    #   with the default Amazon S3 key (SSE-S3).
+    #
+    #   Note that the role specified in the `SinkIamRoleArn` request
+    #   parameter must have permission to use the specified KMS key.
+    #   @return [String]
+    #
+    # @!attribute [rw] aws_kms_encryption_context
+    #   Base64-encoded string of a UTF-8 encoded JSON, which contains the
+    #   encryption context as non-secret key-value pair known as encryption
+    #   context pairs, that provides an added layer of security for your
+    #   data. For more information, see [KMS encryption context][1] and
+    #   [Asymmetric keys in KMS][2] in the *Key Management Service Developer
+    #   Guide*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/kms/latest/developerguide/encrypt_context.html
+    #   [2]: https://docs.aws.amazon.com/kms/latest/developerguide/symmetric-asymmetric.html
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/chime-sdk-media-pipelines-2021-07-15/SseAwsKeyManagementParams AWS API Documentation
+    #
+    class SseAwsKeyManagementParams < Struct.new(
+      :aws_kms_key_id,
+      :aws_kms_encryption_context)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] identifier
     #   The unique identifier of the resource to be updated. Valid values
     #   include the ID and ARN of the media insights pipeline.

data/lib/aws-sdk-chimesdkmediapipelines.rb

@@ -54,7 +54,7 @@ module Aws::ChimeSDKMediaPipelines
   autoload :EndpointProvider, 'aws-sdk-chimesdkmediapipelines/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-chimesdkmediapipelines/endpoints'
 
-  GEM_VERSION = '1.33.0'
+  GEM_VERSION = '1.34.0'
 
 end
 

data/sig/client.rbs

@@ -139,6 +139,11 @@ module Aws
                                                }?
                                              }?
                                            },
+                                           ?sse_aws_key_management_params: {
+                                             aws_kms_key_id: ::String,
+                                             aws_kms_encryption_context: ::String?
+                                           },
+                                           ?sink_iam_role_arn: ::String,
                                            ?tags: Array[
                                              {
                                                key: ::String,

data/sig/types.rbs

@@ -162,8 +162,10 @@ module Aws::ChimeSDKMediaPipelines
       attr_accessor sink_arn: ::String
       attr_accessor client_request_token: ::String
       attr_accessor chime_sdk_meeting_configuration: Types::ChimeSdkMeetingConfiguration
+      attr_accessor sse_aws_key_management_params: Types::SseAwsKeyManagementParams
+      attr_accessor sink_iam_role_arn: ::String
       attr_accessor tags: ::Array[Types::Tag]
-      SENSITIVE: [:source_arn, :sink_arn, :client_request_token]
+      SENSITIVE: [:source_arn, :sink_arn, :client_request_token, :sink_iam_role_arn]
     end
 
     class CreateMediaCapturePipelineResponse
@@ -533,7 +535,9 @@ module Aws::ChimeSDKMediaPipelines
       attr_accessor created_timestamp: ::Time
       attr_accessor updated_timestamp: ::Time
       attr_accessor chime_sdk_meeting_configuration: Types::ChimeSdkMeetingConfiguration
-      SENSITIVE: [:source_arn, :sink_arn]
+      attr_accessor sse_aws_key_management_params: Types::SseAwsKeyManagementParams
+      attr_accessor sink_iam_role_arn: ::String
+      SENSITIVE: [:source_arn, :sink_arn, :sink_iam_role_arn]
     end
 
     class MediaCapturePipelineSourceConfiguration
@@ -781,6 +785,12 @@ module Aws::ChimeSDKMediaPipelines
       SENSITIVE: [:insights_target]
     end
 
+    class SseAwsKeyManagementParams
+      attr_accessor aws_kms_key_id: ::String
+      attr_accessor aws_kms_encryption_context: ::String
+      SENSITIVE: []
+    end
+
     class StartSpeakerSearchTaskRequest
       attr_accessor identifier: ::String
       attr_accessor voice_profile_domain_arn: ::String

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-chimesdkmediapipelines
 version: !ruby/object:Gem::Version
-  version: 1.33.0
+  version: 1.34.0
 platform: ruby
 authors:
 - Amazon Web Services
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2024-10-18 00:00:00.000000000 Z
+date: 2024-11-08 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-core