aws-sdk-core 3.256.0 → 3.257.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e6b85006460b91003a05c218c29cbc889bfbc95278c36cba844f34aa5537f33f
-  data.tar.gz: d742439c2bba64032c84f6916105734502edcde353826dc2d1a6f73d36b31982
+  metadata.gz: 645b4cf51bdbd1caea40a95ef787ee6e25c221a79a14387382bb7b3573e50b51
+  data.tar.gz: 3bf3895885beab2d6e0997098a670190aa41e717c686ac77841878627bca7f8a
 SHA512:
-  metadata.gz: beab5a6c7ca0cd058ef2f24deea3cb633e7b9f2966acf9a9862cbfacdb276ea551cd0cd17a96437677d5a10b40293fb851d59caf9331b6742790d7e22e1adfbd
-  data.tar.gz: 37b88fb8abbbc386ea4aff3234f126f38bfeefb8b9f430d877b0a4c9d014d2a421b45472207747538881513cb00e6217b882e49a7c2c24bb2e32a32ad72aee1a
+  metadata.gz: be11f00d1aed112e0721dc127af5d0bbfdae42158b75be7bd74a44df75bfedb2ce61b96f5ea0a9a394d3f886364dcd62782d3538ebcdf04f2f9473b173ccdef5
+  data.tar.gz: bc1d1b585f4602f83fe7e6b1523c7168d36d4c6ed64a61294ae243c2bbcd52c4b1777d2d093db3aa80a608b73bce7900ef559575a51754e7535049348956e07a

data/CHANGELOG.md

@@ -1,6 +1,13 @@
 Unreleased Changes
 ------------------
 
+3.257.0 (2026-09-14)
+------------------
+
+* Feature - Updated Aws::STS::Client with the latest API changes.
+
+* Feature - Increases the maximum session token size to 4,096 bytes and removes the packed policy size limit. Adds SessionTokenSize and SessionTokenUtilization fields and a new MinimumSessionTokenSize parameter. PackedPolicySize is deprecated.
+
 3.256.0 (2026-09-11)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-3.256.0
+3.257.0

data/lib/aws-sdk-signin/client.rb

@@ -983,7 +983,7 @@ module Aws::Signin
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-core'
-      context[:gem_version] = '3.256.0'
+      context[:gem_version] = '3.257.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-signin.rb

@@ -56,7 +56,7 @@ module Aws::Signin
   autoload :EndpointProvider, 'aws-sdk-signin/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-signin/endpoints'
 
-  GEM_VERSION = '3.256.0'
+  GEM_VERSION = '3.257.0'
 
 end
 

data/lib/aws-sdk-sso/client.rb

@@ -696,7 +696,7 @@ module Aws::SSO
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-core'
-      context[:gem_version] = '3.256.0'
+      context[:gem_version] = '3.257.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-sso.rb

@@ -56,7 +56,7 @@ module Aws::SSO
   autoload :EndpointProvider, 'aws-sdk-sso/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-sso/endpoints'
 
-  GEM_VERSION = '3.256.0'
+  GEM_VERSION = '3.257.0'
 
 end
 

data/lib/aws-sdk-ssooidc/client.rb

@@ -1079,7 +1079,7 @@ module Aws::SSOOIDC
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-core'
-      context[:gem_version] = '3.256.0'
+      context[:gem_version] = '3.257.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-ssooidc.rb

@@ -56,7 +56,7 @@ module Aws::SSOOIDC
   autoload :EndpointProvider, 'aws-sdk-ssooidc/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-ssooidc/endpoints'
 
-  GEM_VERSION = '3.256.0'
+  GEM_VERSION = '3.257.0'
 
 end
 

data/lib/aws-sdk-sts/client.rb

@@ -878,12 +878,21 @@ module Aws::STS
     #
     #   `[{"ProviderArn":"arn:aws:iam::aws:contextProvider/IdentityCenter","ContextAssertion":"trusted-context-assertion"}]`
     #
+    # @option params [Integer] :minimum_session_token_size
+    #   The minimum size, in bytes, of the session token that STS issues for
+    #   the request. STS increases the session token to at least this size,
+    #   regardless of its actual content. The value must not exceed 4,096
+    #   bytes. When set to 0 or not specified, the session token size is
+    #   unchanged.
+    #
     # @return [Types::AssumeRoleResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::AssumeRoleResponse#credentials #credentials} => Types::Credentials
     #   * {Types::AssumeRoleResponse#assumed_role_user #assumed_role_user} => Types::AssumedRoleUser
     #   * {Types::AssumeRoleResponse#packed_policy_size #packed_policy_size} => Integer
     #   * {Types::AssumeRoleResponse#source_identity #source_identity} => String
+    #   * {Types::AssumeRoleResponse#session_token_utilization #session_token_utilization} => Integer
+    #   * {Types::AssumeRoleResponse#session_token_size #session_token_size} => Integer
     #
     #
     # @example Example: To assume a role
@@ -957,6 +966,7 @@ module Aws::STS
     #         context_assertion: "contextAssertionType",
     #       },
     #     ],
+    #     minimum_session_token_size: 1,
     #   })
     #
     # @example Response structure
@@ -969,6 +979,8 @@ module Aws::STS
     #   resp.assumed_role_user.arn #=> String
     #   resp.packed_policy_size #=> Integer
     #   resp.source_identity #=> String
+    #   resp.session_token_utilization #=> Integer
+    #   resp.session_token_size #=> Integer
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/sts-2011-06-15/AssumeRole AWS API Documentation
     #
@@ -1257,6 +1269,13 @@ module Aws::STS
     #   [1]: https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use.html#id_roles_use_view-role-max-session
     #   [2]: https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_enable-console-custom-url.html
     #
+    # @option params [Integer] :minimum_session_token_size
+    #   The minimum size, in bytes, of the session token that STS issues for
+    #   the request. STS increases the session token to at least this size,
+    #   regardless of its actual content. The value must not exceed 4,096
+    #   bytes. When set to 0 or not specified, the session token size is
+    #   unchanged.
+    #
     # @return [Types::AssumeRoleWithSAMLResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::AssumeRoleWithSAMLResponse#credentials #credentials} => Types::Credentials
@@ -1268,6 +1287,8 @@ module Aws::STS
     #   * {Types::AssumeRoleWithSAMLResponse#audience #audience} => String
     #   * {Types::AssumeRoleWithSAMLResponse#name_qualifier #name_qualifier} => String
     #   * {Types::AssumeRoleWithSAMLResponse#source_identity #source_identity} => String
+    #   * {Types::AssumeRoleWithSAMLResponse#session_token_utilization #session_token_utilization} => Integer
+    #   * {Types::AssumeRoleWithSAMLResponse#session_token_size #session_token_size} => Integer
     #
     #
     # @example Example: To assume a role using a SAML assertion
@@ -1312,6 +1333,7 @@ module Aws::STS
     #     ],
     #     policy: "sessionPolicyDocumentType",
     #     duration_seconds: 1,
+    #     minimum_session_token_size: 1,
     #   })
     #
     # @example Response structure
@@ -1329,6 +1351,8 @@ module Aws::STS
     #   resp.audience #=> String
     #   resp.name_qualifier #=> String
     #   resp.source_identity #=> String
+    #   resp.session_token_utilization #=> Integer
+    #   resp.session_token_size #=> Integer
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/sts-2011-06-15/AssumeRoleWithSAML AWS API Documentation
     #
@@ -1662,6 +1686,13 @@ module Aws::STS
     #   [1]: https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_use.html#id_roles_use_view-role-max-session
     #   [2]: https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_enable-console-custom-url.html
     #
+    # @option params [Integer] :minimum_session_token_size
+    #   The minimum size, in bytes, of the session token that STS issues for
+    #   the request. STS increases the session token to at least this size,
+    #   regardless of its actual content. The value must not exceed 4,096
+    #   bytes. When set to 0 or not specified, the session token size is
+    #   unchanged.
+    #
     # @return [Types::AssumeRoleWithWebIdentityResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::AssumeRoleWithWebIdentityResponse#credentials #credentials} => Types::Credentials
@@ -1671,6 +1702,8 @@ module Aws::STS
     #   * {Types::AssumeRoleWithWebIdentityResponse#provider #provider} => String
     #   * {Types::AssumeRoleWithWebIdentityResponse#audience #audience} => String
     #   * {Types::AssumeRoleWithWebIdentityResponse#source_identity #source_identity} => String
+    #   * {Types::AssumeRoleWithWebIdentityResponse#session_token_utilization #session_token_utilization} => Integer
+    #   * {Types::AssumeRoleWithWebIdentityResponse#session_token_size #session_token_size} => Integer
     #
     #
     # @example Example: To assume a role as an OpenID Connect-federated user
@@ -1716,6 +1749,7 @@ module Aws::STS
     #     ],
     #     policy: "sessionPolicyDocumentType",
     #     duration_seconds: 1,
+    #     minimum_session_token_size: 1,
     #   })
     #
     # @example Response structure
@@ -1731,6 +1765,8 @@ module Aws::STS
     #   resp.provider #=> String
     #   resp.audience #=> String
     #   resp.source_identity #=> String
+    #   resp.session_token_utilization #=> Integer
+    #   resp.session_token_size #=> Integer
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/sts-2011-06-15/AssumeRoleWithWebIdentity AWS API Documentation
     #
@@ -1812,10 +1848,19 @@ module Aws::STS
     #
     #   By default, the value is set to `900` seconds.
     #
+    # @option params [Integer] :minimum_session_token_size
+    #   The minimum size, in bytes, of the session token that STS issues for
+    #   the request. STS increases the session token to at least this size,
+    #   regardless of its actual content. The value must not exceed 4,096
+    #   bytes. When set to 0 or not specified, the session token size is
+    #   unchanged.
+    #
     # @return [Types::AssumeRootResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::AssumeRootResponse#credentials #credentials} => Types::Credentials
     #   * {Types::AssumeRootResponse#source_identity #source_identity} => String
+    #   * {Types::AssumeRootResponse#session_token_utilization #session_token_utilization} => Integer
+    #   * {Types::AssumeRootResponse#session_token_size #session_token_size} => Integer
     #
     #
     # @example Example: To launch a privileged session
@@ -1850,6 +1895,7 @@ module Aws::STS
     #       arn: "arnType",
     #     },
     #     duration_seconds: 1,
+    #     minimum_session_token_size: 1,
     #   })
     #
     # @example Response structure
@@ -1859,6 +1905,8 @@ module Aws::STS
     #   resp.credentials.session_token #=> String
     #   resp.credentials.expiration #=> Time
     #   resp.source_identity #=> String
+    #   resp.session_token_utilization #=> Integer
+    #   resp.session_token_size #=> Integer
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/sts-2011-06-15/AssumeRoot AWS API Documentation
     #
@@ -2405,11 +2453,20 @@ module Aws::STS
     #   [1]: https://docs.aws.amazon.com/IAM/latest/UserGuide/id_session-tags.html
     #   [2]: https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-limits.html#reference_iam-limits-entity-length
     #
+    # @option params [Integer] :minimum_session_token_size
+    #   The minimum size, in bytes, of the session token that STS issues for
+    #   the request. STS increases the session token to at least this size,
+    #   regardless of its actual content. The value must not exceed 4,096
+    #   bytes. When set to 0 or not specified, the session token size is
+    #   unchanged.
+    #
     # @return [Types::GetFederationTokenResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::GetFederationTokenResponse#credentials #credentials} => Types::Credentials
     #   * {Types::GetFederationTokenResponse#federated_user #federated_user} => Types::FederatedUser
     #   * {Types::GetFederationTokenResponse#packed_policy_size #packed_policy_size} => Integer
+    #   * {Types::GetFederationTokenResponse#session_token_utilization #session_token_utilization} => Integer
+    #   * {Types::GetFederationTokenResponse#session_token_size #session_token_size} => Integer
     #
     #
     # @example Example: To get temporary credentials for a role by using GetFederationToken
@@ -2462,6 +2519,7 @@ module Aws::STS
     #         value: "tagValueType", # required
     #       },
     #     ],
+    #     minimum_session_token_size: 1,
     #   })
     #
     # @example Response structure
@@ -2473,6 +2531,8 @@ module Aws::STS
     #   resp.federated_user.federated_user_id #=> String
     #   resp.federated_user.arn #=> String
     #   resp.packed_policy_size #=> Integer
+    #   resp.session_token_utilization #=> Integer
+    #   resp.session_token_size #=> Integer
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/sts-2011-06-15/GetFederationToken AWS API Documentation
     #
@@ -2593,9 +2653,18 @@ module Aws::STS
     #   The format for this parameter, as described by its regex pattern, is a
     #   sequence of six numeric digits.
     #
+    # @option params [Integer] :minimum_session_token_size
+    #   The minimum size, in bytes, of the session token that STS issues for
+    #   the request. STS increases the session token to at least this size,
+    #   regardless of its actual content. The value must not exceed 4,096
+    #   bytes. When set to 0 or not specified, the session token size is
+    #   unchanged.
+    #
     # @return [Types::GetSessionTokenResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::GetSessionTokenResponse#credentials #credentials} => Types::Credentials
+    #   * {Types::GetSessionTokenResponse#session_token_utilization #session_token_utilization} => Integer
+    #   * {Types::GetSessionTokenResponse#session_token_size #session_token_size} => Integer
     #
     #
     # @example Example: To get temporary credentials for an IAM user or an AWS account
@@ -2622,6 +2691,7 @@ module Aws::STS
     #     duration_seconds: 1,
     #     serial_number: "serialNumberType",
     #     token_code: "tokenCodeType",
+    #     minimum_session_token_size: 1,
     #   })
     #
     # @example Response structure
@@ -2630,6 +2700,8 @@ module Aws::STS
     #   resp.credentials.secret_access_key #=> String
     #   resp.credentials.session_token #=> String
     #   resp.credentials.expiration #=> Time
+    #   resp.session_token_utilization #=> Integer
+    #   resp.session_token_size #=> Integer
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/sts-2011-06-15/GetSessionToken AWS API Documentation
     #
@@ -2647,6 +2719,11 @@ module Aws::STS
     # verified using the verification keys published at the issuer's JWKS
     # endpoint.
     #
+    # <note markdown="1"> The `GetWebIdentityToken` API is not available on the STS Global
+    # endpoint.
+    #
+    #  </note>
+    #
     # @option params [required, Array<String>] :audience
     #   The intended recipient of the web identity token. This value populates
     #   the `aud` claim in the JWT and should identify the service or
@@ -2723,7 +2800,7 @@ module Aws::STS
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-core'
-      context[:gem_version] = '3.256.0'
+      context[:gem_version] = '3.257.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-sts/client_api.rb

@@ -85,6 +85,7 @@ module Aws::STS
     jwtAlgorithmType = Shapes::StringShape.new(name: 'jwtAlgorithmType')
     jwtPayloadSizeExceededException = Shapes::StringShape.new(name: 'jwtPayloadSizeExceededException')
     malformedPolicyDocumentMessage = Shapes::StringShape.new(name: 'malformedPolicyDocumentMessage')
+    minimumSessionTokenSizeType = Shapes::IntegerShape.new(name: 'minimumSessionTokenSizeType')
     nonNegativeIntegerType = Shapes::IntegerShape.new(name: 'nonNegativeIntegerType')
     outboundWebIdentityFederationDisabledException = Shapes::StringShape.new(name: 'outboundWebIdentityFederationDisabledException')
     packedPolicyTooLargeMessage = Shapes::StringShape.new(name: 'packedPolicyTooLargeMessage')
@@ -95,6 +96,8 @@ module Aws::STS
     serialNumberType = Shapes::StringShape.new(name: 'serialNumberType')
     sessionDurationEscalationException = Shapes::StringShape.new(name: 'sessionDurationEscalationException')
     sessionPolicyDocumentType = Shapes::StringShape.new(name: 'sessionPolicyDocumentType')
+    sessionTokenSizeType = Shapes::IntegerShape.new(name: 'sessionTokenSizeType')
+    sessionTokenUtilizationType = Shapes::IntegerShape.new(name: 'sessionTokenUtilizationType')
     sourceIdentityType = Shapes::StringShape.new(name: 'sourceIdentityType')
     tagKeyListType = Shapes::ListShape.new(name: 'tagKeyListType')
     tagKeyType = Shapes::StringShape.new(name: 'tagKeyType')
@@ -125,12 +128,15 @@ module Aws::STS
     AssumeRoleRequest.add_member(:token_code, Shapes::ShapeRef.new(shape: tokenCodeType, location_name: "TokenCode"))
     AssumeRoleRequest.add_member(:source_identity, Shapes::ShapeRef.new(shape: sourceIdentityType, location_name: "SourceIdentity"))
     AssumeRoleRequest.add_member(:provided_contexts, Shapes::ShapeRef.new(shape: ProvidedContextsListType, location_name: "ProvidedContexts"))
+    AssumeRoleRequest.add_member(:minimum_session_token_size, Shapes::ShapeRef.new(shape: minimumSessionTokenSizeType, location_name: "MinimumSessionTokenSize"))
     AssumeRoleRequest.struct_class = Types::AssumeRoleRequest
 
     AssumeRoleResponse.add_member(:credentials, Shapes::ShapeRef.new(shape: Credentials, location_name: "Credentials"))
     AssumeRoleResponse.add_member(:assumed_role_user, Shapes::ShapeRef.new(shape: AssumedRoleUser, location_name: "AssumedRoleUser"))
-    AssumeRoleResponse.add_member(:packed_policy_size, Shapes::ShapeRef.new(shape: nonNegativeIntegerType, location_name: "PackedPolicySize"))
+    AssumeRoleResponse.add_member(:packed_policy_size, Shapes::ShapeRef.new(shape: nonNegativeIntegerType, deprecated: true, location_name: "PackedPolicySize", metadata: {"deprecatedMessage" => "Deprecated. Replaced by SessionTokenUtilization.", "deprecatedSince" => "2026-06-17"}))
     AssumeRoleResponse.add_member(:source_identity, Shapes::ShapeRef.new(shape: sourceIdentityType, location_name: "SourceIdentity"))
+    AssumeRoleResponse.add_member(:session_token_utilization, Shapes::ShapeRef.new(shape: sessionTokenUtilizationType, location_name: "SessionTokenUtilization"))
+    AssumeRoleResponse.add_member(:session_token_size, Shapes::ShapeRef.new(shape: sessionTokenSizeType, location_name: "SessionTokenSize"))
     AssumeRoleResponse.struct_class = Types::AssumeRoleResponse
 
     AssumeRoleWithSAMLRequest.add_member(:role_arn, Shapes::ShapeRef.new(shape: arnType, required: true, location_name: "RoleArn"))
@@ -139,17 +145,20 @@ module Aws::STS
     AssumeRoleWithSAMLRequest.add_member(:policy_arns, Shapes::ShapeRef.new(shape: policyDescriptorListType, location_name: "PolicyArns"))
     AssumeRoleWithSAMLRequest.add_member(:policy, Shapes::ShapeRef.new(shape: sessionPolicyDocumentType, location_name: "Policy"))
     AssumeRoleWithSAMLRequest.add_member(:duration_seconds, Shapes::ShapeRef.new(shape: roleDurationSecondsType, location_name: "DurationSeconds"))
+    AssumeRoleWithSAMLRequest.add_member(:minimum_session_token_size, Shapes::ShapeRef.new(shape: minimumSessionTokenSizeType, location_name: "MinimumSessionTokenSize"))
     AssumeRoleWithSAMLRequest.struct_class = Types::AssumeRoleWithSAMLRequest
 
     AssumeRoleWithSAMLResponse.add_member(:credentials, Shapes::ShapeRef.new(shape: Credentials, location_name: "Credentials"))
     AssumeRoleWithSAMLResponse.add_member(:assumed_role_user, Shapes::ShapeRef.new(shape: AssumedRoleUser, location_name: "AssumedRoleUser"))
-    AssumeRoleWithSAMLResponse.add_member(:packed_policy_size, Shapes::ShapeRef.new(shape: nonNegativeIntegerType, location_name: "PackedPolicySize"))
+    AssumeRoleWithSAMLResponse.add_member(:packed_policy_size, Shapes::ShapeRef.new(shape: nonNegativeIntegerType, deprecated: true, location_name: "PackedPolicySize", metadata: {"deprecatedMessage" => "Deprecated. Replaced by SessionTokenUtilization.", "deprecatedSince" => "2026-06-17"}))
     AssumeRoleWithSAMLResponse.add_member(:subject, Shapes::ShapeRef.new(shape: Subject, location_name: "Subject"))
     AssumeRoleWithSAMLResponse.add_member(:subject_type, Shapes::ShapeRef.new(shape: SubjectType, location_name: "SubjectType"))
     AssumeRoleWithSAMLResponse.add_member(:issuer, Shapes::ShapeRef.new(shape: Issuer, location_name: "Issuer"))
     AssumeRoleWithSAMLResponse.add_member(:audience, Shapes::ShapeRef.new(shape: Audience, location_name: "Audience"))
     AssumeRoleWithSAMLResponse.add_member(:name_qualifier, Shapes::ShapeRef.new(shape: NameQualifier, location_name: "NameQualifier"))
     AssumeRoleWithSAMLResponse.add_member(:source_identity, Shapes::ShapeRef.new(shape: sourceIdentityType, location_name: "SourceIdentity"))
+    AssumeRoleWithSAMLResponse.add_member(:session_token_utilization, Shapes::ShapeRef.new(shape: sessionTokenUtilizationType, location_name: "SessionTokenUtilization"))
+    AssumeRoleWithSAMLResponse.add_member(:session_token_size, Shapes::ShapeRef.new(shape: sessionTokenSizeType, location_name: "SessionTokenSize"))
     AssumeRoleWithSAMLResponse.struct_class = Types::AssumeRoleWithSAMLResponse
 
     AssumeRoleWithWebIdentityRequest.add_member(:role_arn, Shapes::ShapeRef.new(shape: arnType, required: true, location_name: "RoleArn"))
@@ -159,24 +168,30 @@ module Aws::STS
     AssumeRoleWithWebIdentityRequest.add_member(:policy_arns, Shapes::ShapeRef.new(shape: policyDescriptorListType, location_name: "PolicyArns"))
     AssumeRoleWithWebIdentityRequest.add_member(:policy, Shapes::ShapeRef.new(shape: sessionPolicyDocumentType, location_name: "Policy"))
     AssumeRoleWithWebIdentityRequest.add_member(:duration_seconds, Shapes::ShapeRef.new(shape: roleDurationSecondsType, location_name: "DurationSeconds"))
+    AssumeRoleWithWebIdentityRequest.add_member(:minimum_session_token_size, Shapes::ShapeRef.new(shape: minimumSessionTokenSizeType, location_name: "MinimumSessionTokenSize"))
     AssumeRoleWithWebIdentityRequest.struct_class = Types::AssumeRoleWithWebIdentityRequest
 
     AssumeRoleWithWebIdentityResponse.add_member(:credentials, Shapes::ShapeRef.new(shape: Credentials, location_name: "Credentials"))
     AssumeRoleWithWebIdentityResponse.add_member(:subject_from_web_identity_token, Shapes::ShapeRef.new(shape: webIdentitySubjectType, location_name: "SubjectFromWebIdentityToken"))
     AssumeRoleWithWebIdentityResponse.add_member(:assumed_role_user, Shapes::ShapeRef.new(shape: AssumedRoleUser, location_name: "AssumedRoleUser"))
-    AssumeRoleWithWebIdentityResponse.add_member(:packed_policy_size, Shapes::ShapeRef.new(shape: nonNegativeIntegerType, location_name: "PackedPolicySize"))
+    AssumeRoleWithWebIdentityResponse.add_member(:packed_policy_size, Shapes::ShapeRef.new(shape: nonNegativeIntegerType, deprecated: true, location_name: "PackedPolicySize", metadata: {"deprecatedMessage" => "Deprecated. Replaced by SessionTokenUtilization.", "deprecatedSince" => "2026-06-17"}))
     AssumeRoleWithWebIdentityResponse.add_member(:provider, Shapes::ShapeRef.new(shape: Issuer, location_name: "Provider"))
     AssumeRoleWithWebIdentityResponse.add_member(:audience, Shapes::ShapeRef.new(shape: Audience, location_name: "Audience"))
     AssumeRoleWithWebIdentityResponse.add_member(:source_identity, Shapes::ShapeRef.new(shape: sourceIdentityType, location_name: "SourceIdentity"))
+    AssumeRoleWithWebIdentityResponse.add_member(:session_token_utilization, Shapes::ShapeRef.new(shape: sessionTokenUtilizationType, location_name: "SessionTokenUtilization"))
+    AssumeRoleWithWebIdentityResponse.add_member(:session_token_size, Shapes::ShapeRef.new(shape: sessionTokenSizeType, location_name: "SessionTokenSize"))
     AssumeRoleWithWebIdentityResponse.struct_class = Types::AssumeRoleWithWebIdentityResponse
 
     AssumeRootRequest.add_member(:target_principal, Shapes::ShapeRef.new(shape: TargetPrincipalType, required: true, location_name: "TargetPrincipal"))
     AssumeRootRequest.add_member(:task_policy_arn, Shapes::ShapeRef.new(shape: PolicyDescriptorType, required: true, location_name: "TaskPolicyArn"))
     AssumeRootRequest.add_member(:duration_seconds, Shapes::ShapeRef.new(shape: RootDurationSecondsType, location_name: "DurationSeconds"))
+    AssumeRootRequest.add_member(:minimum_session_token_size, Shapes::ShapeRef.new(shape: minimumSessionTokenSizeType, location_name: "MinimumSessionTokenSize"))
     AssumeRootRequest.struct_class = Types::AssumeRootRequest
 
     AssumeRootResponse.add_member(:credentials, Shapes::ShapeRef.new(shape: Credentials, location_name: "Credentials"))
     AssumeRootResponse.add_member(:source_identity, Shapes::ShapeRef.new(shape: sourceIdentityType, location_name: "SourceIdentity"))
+    AssumeRootResponse.add_member(:session_token_utilization, Shapes::ShapeRef.new(shape: sessionTokenUtilizationType, location_name: "SessionTokenUtilization"))
+    AssumeRootResponse.add_member(:session_token_size, Shapes::ShapeRef.new(shape: sessionTokenSizeType, location_name: "SessionTokenSize"))
     AssumeRootResponse.struct_class = Types::AssumeRootResponse
 
     AssumedRoleUser.add_member(:assumed_role_id, Shapes::ShapeRef.new(shape: assumedRoleIdType, required: true, location_name: "AssumedRoleId"))
@@ -222,7 +237,7 @@ module Aws::STS
     GetDelegatedAccessTokenRequest.struct_class = Types::GetDelegatedAccessTokenRequest
 
     GetDelegatedAccessTokenResponse.add_member(:credentials, Shapes::ShapeRef.new(shape: Credentials, location_name: "Credentials"))
-    GetDelegatedAccessTokenResponse.add_member(:packed_policy_size, Shapes::ShapeRef.new(shape: nonNegativeIntegerType, location_name: "PackedPolicySize"))
+    GetDelegatedAccessTokenResponse.add_member(:packed_policy_size, Shapes::ShapeRef.new(shape: nonNegativeIntegerType, deprecated: true, location_name: "PackedPolicySize", metadata: {"deprecatedMessage" => "Deprecated. This field is not populated for GetDelegatedAccessToken.", "deprecatedSince" => "2026-06-17"}))
     GetDelegatedAccessTokenResponse.add_member(:assumed_principal, Shapes::ShapeRef.new(shape: arnType, location_name: "AssumedPrincipal"))
     GetDelegatedAccessTokenResponse.struct_class = Types::GetDelegatedAccessTokenResponse
 
@@ -231,19 +246,25 @@ module Aws::STS
     GetFederationTokenRequest.add_member(:policy_arns, Shapes::ShapeRef.new(shape: policyDescriptorListType, location_name: "PolicyArns"))
     GetFederationTokenRequest.add_member(:duration_seconds, Shapes::ShapeRef.new(shape: durationSecondsType, location_name: "DurationSeconds"))
     GetFederationTokenRequest.add_member(:tags, Shapes::ShapeRef.new(shape: tagListType, location_name: "Tags"))
+    GetFederationTokenRequest.add_member(:minimum_session_token_size, Shapes::ShapeRef.new(shape: minimumSessionTokenSizeType, location_name: "MinimumSessionTokenSize"))
     GetFederationTokenRequest.struct_class = Types::GetFederationTokenRequest
 
     GetFederationTokenResponse.add_member(:credentials, Shapes::ShapeRef.new(shape: Credentials, location_name: "Credentials"))
     GetFederationTokenResponse.add_member(:federated_user, Shapes::ShapeRef.new(shape: FederatedUser, location_name: "FederatedUser"))
-    GetFederationTokenResponse.add_member(:packed_policy_size, Shapes::ShapeRef.new(shape: nonNegativeIntegerType, location_name: "PackedPolicySize"))
+    GetFederationTokenResponse.add_member(:packed_policy_size, Shapes::ShapeRef.new(shape: nonNegativeIntegerType, deprecated: true, location_name: "PackedPolicySize", metadata: {"deprecatedMessage" => "Deprecated. Replaced by SessionTokenUtilization.", "deprecatedSince" => "2026-06-17"}))
+    GetFederationTokenResponse.add_member(:session_token_utilization, Shapes::ShapeRef.new(shape: sessionTokenUtilizationType, location_name: "SessionTokenUtilization"))
+    GetFederationTokenResponse.add_member(:session_token_size, Shapes::ShapeRef.new(shape: sessionTokenSizeType, location_name: "SessionTokenSize"))
     GetFederationTokenResponse.struct_class = Types::GetFederationTokenResponse
 
     GetSessionTokenRequest.add_member(:duration_seconds, Shapes::ShapeRef.new(shape: durationSecondsType, location_name: "DurationSeconds"))
     GetSessionTokenRequest.add_member(:serial_number, Shapes::ShapeRef.new(shape: serialNumberType, location_name: "SerialNumber"))
     GetSessionTokenRequest.add_member(:token_code, Shapes::ShapeRef.new(shape: tokenCodeType, location_name: "TokenCode"))
+    GetSessionTokenRequest.add_member(:minimum_session_token_size, Shapes::ShapeRef.new(shape: minimumSessionTokenSizeType, location_name: "MinimumSessionTokenSize"))
     GetSessionTokenRequest.struct_class = Types::GetSessionTokenRequest
 
     GetSessionTokenResponse.add_member(:credentials, Shapes::ShapeRef.new(shape: Credentials, location_name: "Credentials"))
+    GetSessionTokenResponse.add_member(:session_token_utilization, Shapes::ShapeRef.new(shape: sessionTokenUtilizationType, location_name: "SessionTokenUtilization"))
+    GetSessionTokenResponse.add_member(:session_token_size, Shapes::ShapeRef.new(shape: sessionTokenSizeType, location_name: "SessionTokenSize"))
     GetSessionTokenResponse.struct_class = Types::GetSessionTokenResponse
 
     GetWebIdentityTokenRequest.add_member(:audience, Shapes::ShapeRef.new(shape: webIdentityTokenAudienceListType, required: true, location_name: "Audience"))

data/lib/aws-sdk-sts/types.rb

@@ -315,6 +315,14 @@ module Aws::STS
     #   `[{"ProviderArn":"arn:aws:iam::aws:contextProvider/IdentityCenter","ContextAssertion":"trusted-context-assertion"}]`
     #   @return [Array<Types::ProvidedContext>]
     #
+    # @!attribute [rw] minimum_session_token_size
+    #   The minimum size, in bytes, of the session token that STS issues for
+    #   the request. STS increases the session token to at least this size,
+    #   regardless of its actual content. The value must not exceed 4,096
+    #   bytes. When set to 0 or not specified, the session token size is
+    #   unchanged.
+    #   @return [Integer]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/sts-2011-06-15/AssumeRoleRequest AWS API Documentation
     #
     class AssumeRoleRequest < Struct.new(
@@ -329,7 +337,8 @@ module Aws::STS
       :serial_number,
       :token_code,
       :source_identity,
-      :provided_contexts)
+      :provided_contexts,
+      :minimum_session_token_size)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -389,13 +398,25 @@ module Aws::STS
     #   [1]: https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_control-access_monitor.html
     #   @return [String]
     #
+    # @!attribute [rw] session_token_utilization
+    #   The percentage (0-100) of the maximum allowed session token size
+    #   that the returned session token consumes.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] session_token_size
+    #   The size, in bytes, of the session token returned in the Credentials
+    #   for this response.
+    #   @return [Integer]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/sts-2011-06-15/AssumeRoleResponse AWS API Documentation
     #
     class AssumeRoleResponse < Struct.new(
       :credentials,
       :assumed_role_user,
       :packed_policy_size,
-      :source_identity)
+      :source_identity,
+      :session_token_utilization,
+      :session_token_size)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -531,6 +552,14 @@ module Aws::STS
     #   [2]: https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_enable-console-custom-url.html
     #   @return [Integer]
     #
+    # @!attribute [rw] minimum_session_token_size
+    #   The minimum size, in bytes, of the session token that STS issues for
+    #   the request. STS increases the session token to at least this size,
+    #   regardless of its actual content. The value must not exceed 4,096
+    #   bytes. When set to 0 or not specified, the session token size is
+    #   unchanged.
+    #   @return [Integer]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/sts-2011-06-15/AssumeRoleWithSAMLRequest AWS API Documentation
     #
     class AssumeRoleWithSAMLRequest < Struct.new(
@@ -539,7 +568,8 @@ module Aws::STS
       :saml_assertion,
       :policy_arns,
       :policy,
-      :duration_seconds)
+      :duration_seconds,
+      :minimum_session_token_size)
       SENSITIVE = [:saml_assertion]
       include Aws::Structure
     end
@@ -647,6 +677,16 @@ module Aws::STS
     #   [3]: https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_control-access_monitor.html
     #   @return [String]
     #
+    # @!attribute [rw] session_token_utilization
+    #   The percentage (0-100) of the maximum allowed session token size
+    #   that the returned session token consumes.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] session_token_size
+    #   The size, in bytes, of the session token returned in the Credentials
+    #   for this response.
+    #   @return [Integer]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/sts-2011-06-15/AssumeRoleWithSAMLResponse AWS API Documentation
     #
     class AssumeRoleWithSAMLResponse < Struct.new(
@@ -658,7 +698,9 @@ module Aws::STS
       :issuer,
       :audience,
       :name_qualifier,
-      :source_identity)
+      :source_identity,
+      :session_token_utilization,
+      :session_token_size)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -840,6 +882,14 @@ module Aws::STS
     #   [2]: https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_providers_enable-console-custom-url.html
     #   @return [Integer]
     #
+    # @!attribute [rw] minimum_session_token_size
+    #   The minimum size, in bytes, of the session token that STS issues for
+    #   the request. STS increases the session token to at least this size,
+    #   regardless of its actual content. The value must not exceed 4,096
+    #   bytes. When set to 0 or not specified, the session token size is
+    #   unchanged.
+    #   @return [Integer]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/sts-2011-06-15/AssumeRoleWithWebIdentityRequest AWS API Documentation
     #
     class AssumeRoleWithWebIdentityRequest < Struct.new(
@@ -849,7 +899,8 @@ module Aws::STS
       :provider_id,
       :policy_arns,
       :policy,
-      :duration_seconds)
+      :duration_seconds,
+      :minimum_session_token_size)
       SENSITIVE = [:web_identity_token]
       include Aws::Structure
     end
@@ -941,6 +992,16 @@ module Aws::STS
     #   [3]: https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_control-access_monitor.html
     #   @return [String]
     #
+    # @!attribute [rw] session_token_utilization
+    #   The percentage (0-100) of the maximum allowed session token size
+    #   that the returned session token consumes.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] session_token_size
+    #   The size, in bytes, of the session token returned in the Credentials
+    #   for this response.
+    #   @return [Integer]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/sts-2011-06-15/AssumeRoleWithWebIdentityResponse AWS API Documentation
     #
     class AssumeRoleWithWebIdentityResponse < Struct.new(
@@ -950,7 +1011,9 @@ module Aws::STS
       :packed_policy_size,
       :provider,
       :audience,
-      :source_identity)
+      :source_identity,
+      :session_token_utilization,
+      :session_token_size)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -992,12 +1055,21 @@ module Aws::STS
     #   By default, the value is set to `900` seconds.
     #   @return [Integer]
     #
+    # @!attribute [rw] minimum_session_token_size
+    #   The minimum size, in bytes, of the session token that STS issues for
+    #   the request. STS increases the session token to at least this size,
+    #   regardless of its actual content. The value must not exceed 4,096
+    #   bytes. When set to 0 or not specified, the session token size is
+    #   unchanged.
+    #   @return [Integer]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/sts-2011-06-15/AssumeRootRequest AWS API Documentation
     #
     class AssumeRootRequest < Struct.new(
       :target_principal,
       :task_policy_arn,
-      :duration_seconds)
+      :duration_seconds,
+      :minimum_session_token_size)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -1032,11 +1104,23 @@ module Aws::STS
     #   [1]: https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp_control-access_monitor.html
     #   @return [String]
     #
+    # @!attribute [rw] session_token_utilization
+    #   The percentage (0-100) of the maximum allowed session token size
+    #   that the returned session token consumes.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] session_token_size
+    #   The size, in bytes, of the session token returned in the Credentials
+    #   for this response.
+    #   @return [Integer]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/sts-2011-06-15/AssumeRootResponse AWS API Documentation
     #
     class AssumeRootResponse < Struct.new(
       :credentials,
-      :source_identity)
+      :source_identity,
+      :session_token_utilization,
+      :session_token_size)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -1456,6 +1540,14 @@ module Aws::STS
     #   [2]: https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_iam-limits.html#reference_iam-limits-entity-length
     #   @return [Array<Types::Tag>]
     #
+    # @!attribute [rw] minimum_session_token_size
+    #   The minimum size, in bytes, of the session token that STS issues for
+    #   the request. STS increases the session token to at least this size,
+    #   regardless of its actual content. The value must not exceed 4,096
+    #   bytes. When set to 0 or not specified, the session token size is
+    #   unchanged.
+    #   @return [Integer]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/sts-2011-06-15/GetFederationTokenRequest AWS API Documentation
     #
     class GetFederationTokenRequest < Struct.new(
@@ -1463,7 +1555,8 @@ module Aws::STS
       :policy,
       :policy_arns,
       :duration_seconds,
-      :tags)
+      :tags,
+      :minimum_session_token_size)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -1497,12 +1590,24 @@ module Aws::STS
     #   means the policies and tags exceeded the allowed space.
     #   @return [Integer]
     #
+    # @!attribute [rw] session_token_utilization
+    #   The percentage (0-100) of the maximum allowed session token size
+    #   that the returned session token consumes.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] session_token_size
+    #   The size, in bytes, of the session token returned in the Credentials
+    #   for this response.
+    #   @return [Integer]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/sts-2011-06-15/GetFederationTokenResponse AWS API Documentation
     #
     class GetFederationTokenResponse < Struct.new(
       :credentials,
       :federated_user,
-      :packed_policy_size)
+      :packed_policy_size,
+      :session_token_utilization,
+      :session_token_size)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -1545,12 +1650,21 @@ module Aws::STS
     #   a sequence of six numeric digits.
     #   @return [String]
     #
+    # @!attribute [rw] minimum_session_token_size
+    #   The minimum size, in bytes, of the session token that STS issues for
+    #   the request. STS increases the session token to at least this size,
+    #   regardless of its actual content. The value must not exceed 4,096
+    #   bytes. When set to 0 or not specified, the session token size is
+    #   unchanged.
+    #   @return [Integer]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/sts-2011-06-15/GetSessionTokenRequest AWS API Documentation
     #
     class GetSessionTokenRequest < Struct.new(
       :duration_seconds,
       :serial_number,
-      :token_code)
+      :token_code,
+      :minimum_session_token_size)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -1570,10 +1684,22 @@ module Aws::STS
     #    </note>
     #   @return [Types::Credentials]
     #
+    # @!attribute [rw] session_token_utilization
+    #   The percentage (0-100) of the maximum allowed session token size
+    #   that the returned session token consumes.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] session_token_size
+    #   The size, in bytes, of the session token returned in the Credentials
+    #   for this response.
+    #   @return [Integer]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/sts-2011-06-15/GetSessionTokenResponse AWS API Documentation
     #
     class GetSessionTokenResponse < Struct.new(
-      :credentials)
+      :credentials,
+      :session_token_utilization,
+      :session_token_size)
       SENSITIVE = []
       include Aws::Structure
     end

data/lib/aws-sdk-sts.rb

@@ -56,7 +56,7 @@ module Aws::STS
   autoload :EndpointProvider, 'aws-sdk-sts/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-sts/endpoints'
 
-  GEM_VERSION = '3.256.0'
+  GEM_VERSION = '3.257.0'
 
 end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-core
 version: !ruby/object:Gem::Version
-  version: 3.256.0
+  version: 3.257.0
 platform: ruby
 authors:
 - Amazon Web Services