aws-sdk-cloudwatchomni 1.9.0 → 1.10.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: c35d8a41c846f2c0929a713eac3655b5aaed30205aea6cbc7efb75d948e75bf7
-  data.tar.gz: c85c400a59de3f8d83b8105cdab94268504c3e9cfe2537a109dc047b2fd2de08
+  metadata.gz: 6481381cc6b7c2634197796705b3cd0582ac7f26af2d8cb3b944110abb371690
+  data.tar.gz: 6cae560ee5b79233365dbead8e08e704e0a567ad9d4f622f81e5ca8d14d1178c
 SHA512:
-  metadata.gz: 8c55de40fb9d72260ebd2d878c2601faaa09a6b47eaa528a9608eb5a3551e5bc7492b810fc73dc4a89f667b337b7f7d6af8cf5e510c4ef286b9ed2bace3d0abc
-  data.tar.gz: b4abb922cf42a4d21815b010b37831f849e9ecd93c3da24d6b7413dd7d37ef26041d0293d2724f033c2236e9effd085dbfa4dcfe3720c676f2e086e2f64953fe
+  metadata.gz: 9fa25e9d7e3c1ac0e97bca504aee271ca8544e64ac0ae601b7d8da5a26858fb509155a5741aa02c117c27be1adf43e0a716c707d7b713bc750cb23a72fbb9e68
+  data.tar.gz: 43c2549f398387c11289d6619f4e4aa66c54400e3d39676cf025f78fa9242c3e9d45a1838b27e36c67c4ef0130769fa96579c99f0003c706bd1f1d8fec2c009c

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.10.0 (2026-11-10)
+------------------
+
+* Feature - Release of GetSpaceDataAccess API - Used to get temporary credentials, limited to the requested actions, for working with data in a space.
+
 1.9.0 (2026-11-09)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.9.0
+1.10.0

data/lib/aws-sdk-cloudwatchomni/client.rb

@@ -264,7 +264,8 @@ module Aws::CloudWatchOmni
     #     An integer representing the maximum number attempts that will be made for
     #     a single request, including the initial attempt.  For example,
     #     setting this value to 5 will result in a request being retried up to
-    #     4 times. Used in `standard` and `adaptive` retry modes.
+    #     4 times. Used in `standard` and `adaptive` retry modes. Defaults to 3,
+    #     except for DynamoDB and DynamoDB Streams, which default to 4.
     #
     #   @option options [String] :profile ("default")
     #     Used when loading credentials from the shared credentials file at `HOME/.aws/credentials`.
@@ -327,15 +328,15 @@ module Aws::CloudWatchOmni
     #     used by the default backoff function. This option is only used in the
     #     `legacy` retry mode.
     #
-    #   @option options [String] :retry_mode ("legacy")
+    #   @option options [String] :retry_mode ("standard")
     #     Specifies which retry algorithm to use. Values are:
     #
-    #     * `legacy` - The pre-existing retry behavior. This is the default
-    #       value if no retry mode is provided.
+    #     * `legacy` - The pre-existing retry behavior.
     #
     #     * `standard` - A standardized set of retry rules across the AWS SDKs.
     #       This includes support for retry quotas, which limit the number of
-    #       unsuccessful retries a client can make.
+    #       unsuccessful retries a client can make. This is the default value
+    #       if no retry mode is provided.
     #
     #     * `adaptive` - A retry mode that includes all the functionality of
     #       `standard` mode along with automatic client side throttling.
@@ -3665,6 +3666,98 @@ module Aws::CloudWatchOmni
       req.send_request(options)
     end
 
+    # Returns temporary credentials for working with data in a space,
+    # limited to the actions you request.
+    #
+    # The credentials allow only the requested actions that can be granted
+    # in the space and that your access grants allow. Requested actions that
+    # cannot be conferred are ignored rather than rejected.
+    #
+    # @option params [required, String] :space_id
+    #   The unique ID of the space to return credentials for.
+    #
+    # @option params [required, Array<Types::DataAccessTarget>] :target_scopes
+    #   The actions to include in the credentials, grouped by service.
+    #
+    # @option params [Integer] :duration_seconds
+    #   The lifetime of the credentials, in seconds. Defaults to 3600.
+    #
+    # @option params [Hash<String,String>] :audit_context
+    #   Caller-supplied key-value pairs that are recorded for auditing. They
+    #   do not affect authorization or the permissions of the credentials.
+    #
+    # @return [Types::GetSpaceDataAccessOutput] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::GetSpaceDataAccessOutput#credentials #credentials} => Types::AwsCredentials
+    #
+    #
+    # @example Example: Get data credentials for log queries
+    #
+    #   # The following example requests credentials that allow running log queries and reading metric data in a space. Payloads
+    #   # are shown as JSON; on the wire they are CBOR-encoded.
+    #
+    #   resp = client.get_space_data_access({
+    #     audit_context: {
+    #       "source" => "logs-console", 
+    #     }, 
+    #     duration_seconds: 3600, 
+    #     space_id: "a1b2c3d4-5e6f-4a3b-8c9d-0e1f2a3b4c5d", 
+    #     target_scopes: [
+    #       {
+    #         actions: [
+    #           "logs:StartQuery", 
+    #           "logs:GetQueryResults", 
+    #         ], 
+    #       }, 
+    #       {
+    #         actions: [
+    #           "cloudwatch:GetMetricData", 
+    #         ], 
+    #       }, 
+    #     ], 
+    #   })
+    #
+    #   resp.to_h outputs the following:
+    #   {
+    #     credentials: {
+    #       access_key_id: "ASIAIOSFODNN7EXAMPLE", 
+    #       expiration: Time.parse("2026-10-20T19:22:31Z"), 
+    #       secret_access_key: "wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY", 
+    #       session_token: "EXAMPLE-SESSION-TOKEN", 
+    #     }, 
+    #   }
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.get_space_data_access({
+    #     space_id: "SpaceId", # required
+    #     target_scopes: [ # required
+    #       {
+    #         actions: ["DataAccessActionName"], # required
+    #       },
+    #     ],
+    #     duration_seconds: 1,
+    #     audit_context: {
+    #       "DataAccessAuditContextKeyString" => "DataAccessAuditContextValueString",
+    #     },
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.credentials.access_key_id #=> String
+    #   resp.credentials.secret_access_key #=> String
+    #   resp.credentials.session_token #=> String
+    #   resp.credentials.expiration #=> Time
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudwatchomni-2025-01-01/GetSpaceDataAccess AWS API Documentation
+    #
+    # @overload get_space_data_access(params = {})
+    # @param [Hash] params ({})
+    def get_space_data_access(params = {}, options = {})
+      req = build_request(:get_space_data_access, params)
+      req.send_request(options)
+    end
+
     # Returns the results for the specified query.
     #
     # @option params [required, String] :query_id
@@ -6066,7 +6159,7 @@ module Aws::CloudWatchOmni
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-cloudwatchomni'
-      context[:gem_version] = '1.9.0'
+      context[:gem_version] = '1.10.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-cloudwatchomni/client_api.rb

@@ -112,6 +112,13 @@ module Aws::CloudWatchOmni
     CreateViewRequestClientTokenString = Shapes::StringShape.new(name: 'CreateViewRequestClientTokenString')
     CreateViewResponse = Shapes::StructureShape.new(name: 'CreateViewResponse')
     DashboardId = Shapes::StringShape.new(name: 'DashboardId')
+    DataAccessActionList = Shapes::ListShape.new(name: 'DataAccessActionList')
+    DataAccessActionName = Shapes::StringShape.new(name: 'DataAccessActionName')
+    DataAccessAuditContext = Shapes::MapShape.new(name: 'DataAccessAuditContext')
+    DataAccessAuditContextKeyString = Shapes::StringShape.new(name: 'DataAccessAuditContextKeyString')
+    DataAccessAuditContextValueString = Shapes::StringShape.new(name: 'DataAccessAuditContextValueString')
+    DataAccessTarget = Shapes::StructureShape.new(name: 'DataAccessTarget')
+    DataAccessTargetList = Shapes::ListShape.new(name: 'DataAccessTargetList')
     DeepLinkCode = Shapes::StringShape.new(name: 'DeepLinkCode')
     DeepLinkUrl = Shapes::StringShape.new(name: 'DeepLinkUrl')
     DeleteAccessGrantInput = Shapes::StructureShape.new(name: 'DeleteAccessGrantInput')
@@ -183,6 +190,9 @@ module Aws::CloudWatchOmni
     GetOmniDashboardOutput = Shapes::StructureShape.new(name: 'GetOmniDashboardOutput')
     GetSpaceCredentialsForOrganizationInput = Shapes::StructureShape.new(name: 'GetSpaceCredentialsForOrganizationInput')
     GetSpaceCredentialsForOrganizationOutput = Shapes::StructureShape.new(name: 'GetSpaceCredentialsForOrganizationOutput')
+    GetSpaceDataAccessInput = Shapes::StructureShape.new(name: 'GetSpaceDataAccessInput')
+    GetSpaceDataAccessInputDurationSecondsInteger = Shapes::IntegerShape.new(name: 'GetSpaceDataAccessInputDurationSecondsInteger')
+    GetSpaceDataAccessOutput = Shapes::StructureShape.new(name: 'GetSpaceDataAccessOutput')
     GetSpaceInput = Shapes::StructureShape.new(name: 'GetSpaceInput')
     GetSpaceOutput = Shapes::StructureShape.new(name: 'GetSpaceOutput')
     GetTelemetryQueryResultsRequest = Shapes::StructureShape.new(name: 'GetTelemetryQueryResultsRequest')
@@ -307,6 +317,7 @@ module Aws::CloudWatchOmni
     OrganizationPrincipalId = Shapes::StringShape.new(name: 'OrganizationPrincipalId')
     PaginationToken = Shapes::StringShape.new(name: 'PaginationToken')
     PartialResults = Shapes::StructureShape.new(name: 'PartialResults')
+    PolicyTooLargeException = Shapes::StructureShape.new(name: 'PolicyTooLargeException')
     PrincipalId = Shapes::StringShape.new(name: 'PrincipalId')
     PrincipalSearchResult = Shapes::StructureShape.new(name: 'PrincipalSearchResult')
     PrincipalSearchResultList = Shapes::ListShape.new(name: 'PrincipalSearchResultList')
@@ -714,6 +725,16 @@ module Aws::CloudWatchOmni
     CreateViewResponse.add_member(:arn, Shapes::ShapeRef.new(shape: String, required: true, location_name: "arn"))
     CreateViewResponse.struct_class = Types::CreateViewResponse
 
+    DataAccessActionList.member = Shapes::ShapeRef.new(shape: DataAccessActionName)
+
+    DataAccessAuditContext.key = Shapes::ShapeRef.new(shape: DataAccessAuditContextKeyString)
+    DataAccessAuditContext.value = Shapes::ShapeRef.new(shape: DataAccessAuditContextValueString)
+
+    DataAccessTarget.add_member(:actions, Shapes::ShapeRef.new(shape: DataAccessActionList, required: true, location_name: "actions"))
+    DataAccessTarget.struct_class = Types::DataAccessTarget
+
+    DataAccessTargetList.member = Shapes::ShapeRef.new(shape: DataAccessTarget)
+
     DeleteAccessGrantInput.add_member(:grant_id, Shapes::ShapeRef.new(shape: GrantId, required: true, location_name: "grantId"))
     DeleteAccessGrantInput.struct_class = Types::DeleteAccessGrantInput
 
@@ -929,6 +950,15 @@ module Aws::CloudWatchOmni
     GetSpaceCredentialsForOrganizationOutput.add_member(:credentials, Shapes::ShapeRef.new(shape: AwsCredentials, required: true, location_name: "credentials"))
     GetSpaceCredentialsForOrganizationOutput.struct_class = Types::GetSpaceCredentialsForOrganizationOutput
 
+    GetSpaceDataAccessInput.add_member(:space_id, Shapes::ShapeRef.new(shape: SpaceId, required: true, location_name: "spaceId"))
+    GetSpaceDataAccessInput.add_member(:target_scopes, Shapes::ShapeRef.new(shape: DataAccessTargetList, required: true, location_name: "targetScopes"))
+    GetSpaceDataAccessInput.add_member(:duration_seconds, Shapes::ShapeRef.new(shape: GetSpaceDataAccessInputDurationSecondsInteger, location_name: "durationSeconds"))
+    GetSpaceDataAccessInput.add_member(:audit_context, Shapes::ShapeRef.new(shape: DataAccessAuditContext, location_name: "auditContext"))
+    GetSpaceDataAccessInput.struct_class = Types::GetSpaceDataAccessInput
+
+    GetSpaceDataAccessOutput.add_member(:credentials, Shapes::ShapeRef.new(shape: AwsCredentials, required: true, location_name: "credentials"))
+    GetSpaceDataAccessOutput.struct_class = Types::GetSpaceDataAccessOutput
+
     GetSpaceInput.add_member(:space_id, Shapes::ShapeRef.new(shape: SpaceId, required: true, location_name: "spaceId"))
     GetSpaceInput.struct_class = Types::GetSpaceInput
 
@@ -1327,6 +1357,9 @@ module Aws::CloudWatchOmni
     PartialResults.add_member(:partial_results_detected, Shapes::ShapeRef.new(shape: Boolean, location_name: "partialResultsDetected"))
     PartialResults.struct_class = Types::PartialResults
 
+    PolicyTooLargeException.add_member(:message, Shapes::ShapeRef.new(shape: String, required: true, location_name: "message"))
+    PolicyTooLargeException.struct_class = Types::PolicyTooLargeException
+
     PrincipalSearchResult.add_member(:principal_id, Shapes::ShapeRef.new(shape: PrincipalId, required: true, location_name: "principalId"))
     PrincipalSearchResult.add_member(:principal_type, Shapes::ShapeRef.new(shape: PrincipalType, required: true, location_name: "principalType"))
     PrincipalSearchResult.add_member(:display_name, Shapes::ShapeRef.new(shape: String, required: true, location_name: "displayName"))
@@ -2077,6 +2110,20 @@ module Aws::CloudWatchOmni
         o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
       end)
 
+      api.add_operation(:get_space_data_access, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "GetSpaceDataAccess"
+        o.http_method = "POST"
+        o.http_request_uri = "/"
+        o.input = Shapes::ShapeRef.new(shape: GetSpaceDataAccessInput)
+        o.output = Shapes::ShapeRef.new(shape: GetSpaceDataAccessOutput)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
+        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
+        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
+        o.errors << Shapes::ShapeRef.new(shape: PolicyTooLargeException)
+        o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
+      end)
+
       api.add_operation(:get_telemetry_query_results, Seahorse::Model::Operation.new.tap do |o|
         o.name = "GetTelemetryQueryResults"
         o.http_method = "POST"

data/lib/aws-sdk-cloudwatchomni/errors.rb

@@ -30,6 +30,7 @@ module Aws::CloudWatchOmni
   # * {AccessDeniedException}
   # * {ConflictException}
   # * {InternalServerException}
+  # * {PolicyTooLargeException}
   # * {ResourceNotFoundException}
   # * {ServiceQuotaExceededException}
   # * {ThrottlingException}
@@ -115,6 +116,21 @@ module Aws::CloudWatchOmni
       end
     end
 
+    class PolicyTooLargeException < ServiceError
+
+      # @param [Seahorse::Client::RequestContext] context
+      # @param [String] message
+      # @param [Aws::CloudWatchOmni::Types::PolicyTooLargeException] data
+      def initialize(context, message, data = Aws::EmptyStructure.new)
+        super(context, message, data)
+      end
+
+      # @return [String]
+      def message
+        @message || @data[:message]
+      end
+    end
+
     class ResourceNotFoundException < ServiceError
 
       # @param [Seahorse::Client::RequestContext] context

data/lib/aws-sdk-cloudwatchomni/types.rb

@@ -1396,6 +1396,23 @@ module Aws::CloudWatchOmni
       include Aws::Structure
     end
 
+    # One requested scope: an explicit list of actions for one service. All
+    # actions in an entry share one service prefix. The same service may
+    # appear in more than one entry.
+    #
+    # @!attribute [rw] actions
+    #   The actions of one service, each with its service prefix, for
+    #   example "logs:StartQuery".
+    #   @return [Array<String>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudwatchomni-2025-01-01/DataAccessTarget AWS API Documentation
+    #
+    class DataAccessTarget < Struct.new(
+      :actions)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] grant_id
     #   The ID of the access grant to delete.
     #   @return [String]
@@ -2332,6 +2349,46 @@ module Aws::CloudWatchOmni
       include Aws::Structure
     end
 
+    # @!attribute [rw] space_id
+    #   The unique ID of the space to return credentials for.
+    #   @return [String]
+    #
+    # @!attribute [rw] target_scopes
+    #   The actions to include in the credentials, grouped by service.
+    #   @return [Array<Types::DataAccessTarget>]
+    #
+    # @!attribute [rw] duration_seconds
+    #   The lifetime of the credentials, in seconds. Defaults to 3600.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] audit_context
+    #   Caller-supplied key-value pairs that are recorded for auditing. They
+    #   do not affect authorization or the permissions of the credentials.
+    #   @return [Hash<String,String>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudwatchomni-2025-01-01/GetSpaceDataAccessInput AWS API Documentation
+    #
+    class GetSpaceDataAccessInput < Struct.new(
+      :space_id,
+      :target_scopes,
+      :duration_seconds,
+      :audit_context)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] credentials
+    #   The temporary AWS credentials for the space.
+    #   @return [Types::AwsCredentials]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudwatchomni-2025-01-01/GetSpaceDataAccessOutput AWS API Documentation
+    #
+    class GetSpaceDataAccessOutput < Struct.new(
+      :credentials)
+      SENSITIVE = [:credentials]
+      include Aws::Structure
+    end
+
     # @!attribute [rw] space_id
     #   The unique ID of the space.
     #   @return [String]
@@ -4099,6 +4156,21 @@ module Aws::CloudWatchOmni
       include Aws::Structure
     end
 
+    # The requested actions produce a credential that exceeds the maximum
+    # size. Request fewer actions.
+    #
+    # @!attribute [rw] message
+    #   A description of the error.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/cloudwatchomni-2025-01-01/PolicyTooLargeException AWS API Documentation
+    #
+    class PolicyTooLargeException < Struct.new(
+      :message)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # A user or group matched by SearchPrincipals.
     #
     # @!attribute [rw] principal_id

data/lib/aws-sdk-cloudwatchomni.rb

@@ -54,7 +54,7 @@ module Aws::CloudWatchOmni
   autoload :EndpointProvider, 'aws-sdk-cloudwatchomni/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-cloudwatchomni/endpoints'
 
-  GEM_VERSION = '1.9.0'
+  GEM_VERSION = '1.10.0'
 
 end
 

data/sig/client.rbs

@@ -583,6 +583,23 @@ module Aws
                                                   ) -> _GetSpaceCredentialsForOrganizationResponseSuccess
                                                 | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _GetSpaceCredentialsForOrganizationResponseSuccess
 
+      interface _GetSpaceDataAccessResponseSuccess
+        include ::Seahorse::Client::_ResponseSuccess[Types::GetSpaceDataAccessOutput]
+        def credentials: () -> Types::AwsCredentials
+      end
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/CloudWatchOmni/Client.html#get_space_data_access-instance_method
+      def get_space_data_access: (
+                                   space_id: ::String,
+                                   target_scopes: Array[
+                                     {
+                                       actions: Array[::String]
+                                     }
+                                   ],
+                                   ?duration_seconds: ::Integer,
+                                   ?audit_context: Hash[::String, ::String]
+                                 ) -> _GetSpaceDataAccessResponseSuccess
+                               | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _GetSpaceDataAccessResponseSuccess
+
       interface _GetTelemetryQueryResultsResponseSuccess
         include ::Seahorse::Client::_ResponseSuccess[Types::GetTelemetryQueryResultsResponse]
         def status: () -> ("Running" | "Failed" | "Complete" | "Cancelled")

data/sig/errors.rbs

@@ -25,6 +25,9 @@ module Aws
         def message: () -> ::String
         def error_code: () -> ::String
       end
+      class PolicyTooLargeException < ServiceError
+        def message: () -> ::String
+      end
       class ResourceNotFoundException < ServiceError
         def message: () -> ::String
         def resource_type: () -> ::String

data/sig/types.rbs

@@ -354,6 +354,11 @@ module Aws::CloudWatchOmni
       SENSITIVE: []
     end
 
+    class DataAccessTarget
+      attr_accessor actions: ::Array[::String]
+      SENSITIVE: []
+    end
+
     class DeleteAccessGrantInput
       attr_accessor grant_id: ::String
       SENSITIVE: []
@@ -650,6 +655,19 @@ module Aws::CloudWatchOmni
       SENSITIVE: [:credentials]
     end
 
+    class GetSpaceDataAccessInput
+      attr_accessor space_id: ::String
+      attr_accessor target_scopes: ::Array[Types::DataAccessTarget]
+      attr_accessor duration_seconds: ::Integer
+      attr_accessor audit_context: ::Hash[::String, ::String]
+      SENSITIVE: []
+    end
+
+    class GetSpaceDataAccessOutput
+      attr_accessor credentials: Types::AwsCredentials
+      SENSITIVE: [:credentials]
+    end
+
     class GetSpaceInput
       attr_accessor space_id: ::String
       SENSITIVE: []
@@ -1132,6 +1150,11 @@ module Aws::CloudWatchOmni
       SENSITIVE: []
     end
 
+    class PolicyTooLargeException
+      attr_accessor message: ::String
+      SENSITIVE: []
+    end
+
     class PrincipalSearchResult
       attr_accessor principal_id: ::String
       attr_accessor principal_type: ("USER" | "GROUP")

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-cloudwatchomni
 version: !ruby/object:Gem::Version
-  version: 1.9.0
+  version: 1.10.0
 platform: ruby
 authors:
 - Amazon Web Services
@@ -18,7 +18,7 @@ dependencies:
         version: '3'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.266.0
+        version: 3.267.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -28,7 +28,7 @@ dependencies:
         version: '3'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.266.0
+        version: 3.267.0
 - !ruby/object:Gem::Dependency
   name: aws-sigv4
   requirement: !ruby/object:Gem::Requirement