aws-sdk-databasemigrationservice 1.134.0 → 1.135.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 46fa4f0e10457d3e0643955e719df810760a8040c39ccb8ff9a0bc29cc2bbc02
-  data.tar.gz: 4fa80393bb94a9dc4de56675c54ad3ab0803c6f44eea6bf4a5b3cd2da976b59f
+  metadata.gz: 5094a59cfd2816bbbab55362e3ea48b4236573c1bc544e21ccfbd30b1539dd98
+  data.tar.gz: 714e5e743f966a281e6f3f4816360865e2ac11c6bff5dfb780bd2bff6d87ea79
 SHA512:
-  metadata.gz: 988035198ebf590b091ec704e929501776712ddd2409fce9325b7e9ccf3d44cc6a7c9033c8817b28121aae7255342290742b2c360ee89365b90c143fe2d282a4
-  data.tar.gz: 2f0f170d85eab58f16804bdc4a3ceb5e9d19f1f507dd1ab4d7292457933003e2fe5bc9058a34f46d2e463b8be785764d4dcc7c38875e8b6f08e4a2e2fc55ce3e
+  metadata.gz: dc538d6defb6f01242817ec270f94d3cc0c68912daf092ae098f40615ca859796e4b16b233d790632a0bad1f1efe17f6f735b64c738ce0620dbbf0a5f58c1699
+  data.tar.gz: db446df4111ebb3c2d51ba758c111a1d3b14ad30ad83dc3c88e0a3464fd3993de49c20fa317d182fcf2d851471ad59556ee68cea1543af0f748e71ebeaddbc0a

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.135.0 (2025-11-20)
+------------------
+
+* Feature - Added support for customer-managed KMS key (CMK) for encryption for import private key certificate. Additionally added Amazon SageMaker Lakehouse endpoint used for zero-ETL integrations with data warehouses.
+
 1.134.0 (2025-11-17)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.134.0
+1.135.0

data/lib/aws-sdk-databasemigrationservice/client.rb

@@ -1920,6 +1920,7 @@ module Aws::DatabaseMigrationService
     #   resp.endpoint.service_access_role_arn #=> String
     #   resp.endpoint.external_table_definition #=> String
     #   resp.endpoint.external_id #=> String
+    #   resp.endpoint.is_read_only #=> Boolean
     #   resp.endpoint.dynamo_db_settings.service_access_role_arn #=> String
     #   resp.endpoint.s3_settings.service_access_role_arn #=> String
     #   resp.endpoint.s3_settings.external_table_definition #=> String
@@ -2222,6 +2223,7 @@ module Aws::DatabaseMigrationService
     #   resp.endpoint.timestream_settings.magnetic_duration #=> Integer
     #   resp.endpoint.timestream_settings.cdc_inserts_and_updates #=> Boolean
     #   resp.endpoint.timestream_settings.enable_magnetic_store_writes #=> Boolean
+    #   resp.endpoint.lakehouse_settings.arn #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/dms-2016-01-01/CreateEndpoint AWS API Documentation
     #
@@ -2856,6 +2858,7 @@ module Aws::DatabaseMigrationService
     #   resp.replication_config.table_mappings #=> String
     #   resp.replication_config.replication_config_create_time #=> Time
     #   resp.replication_config.replication_config_update_time #=> Time
+    #   resp.replication_config.is_read_only #=> Boolean
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/dms-2016-01-01/CreateReplicationConfig AWS API Documentation
     #
@@ -3153,6 +3156,7 @@ module Aws::DatabaseMigrationService
     #   resp.replication_instance.replication_subnet_group.subnets[0].subnet_status #=> String
     #   resp.replication_instance.replication_subnet_group.supported_network_types #=> Array
     #   resp.replication_instance.replication_subnet_group.supported_network_types[0] #=> String
+    #   resp.replication_instance.replication_subnet_group.is_read_only #=> Boolean
     #   resp.replication_instance.preferred_maintenance_window #=> String
     #   resp.replication_instance.pending_modified_values.replication_instance_class #=> String
     #   resp.replication_instance.pending_modified_values.allocated_storage #=> Integer
@@ -3287,6 +3291,7 @@ module Aws::DatabaseMigrationService
     #   resp.replication_subnet_group.subnets[0].subnet_status #=> String
     #   resp.replication_subnet_group.supported_network_types #=> Array
     #   resp.replication_subnet_group.supported_network_types[0] #=> String
+    #   resp.replication_subnet_group.is_read_only #=> Boolean
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/dms-2016-01-01/CreateReplicationSubnetGroup AWS API Documentation
     #
@@ -3562,6 +3567,7 @@ module Aws::DatabaseMigrationService
     #   resp.certificate.valid_to_date #=> Time
     #   resp.certificate.signing_algorithm #=> String
     #   resp.certificate.key_length #=> Integer
+    #   resp.certificate.kms_key_id #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/dms-2016-01-01/DeleteCertificate AWS API Documentation
     #
@@ -3893,6 +3899,7 @@ module Aws::DatabaseMigrationService
     #   resp.endpoint.service_access_role_arn #=> String
     #   resp.endpoint.external_table_definition #=> String
     #   resp.endpoint.external_id #=> String
+    #   resp.endpoint.is_read_only #=> Boolean
     #   resp.endpoint.dynamo_db_settings.service_access_role_arn #=> String
     #   resp.endpoint.s3_settings.service_access_role_arn #=> String
     #   resp.endpoint.s3_settings.external_table_definition #=> String
@@ -4195,6 +4202,7 @@ module Aws::DatabaseMigrationService
     #   resp.endpoint.timestream_settings.magnetic_duration #=> Integer
     #   resp.endpoint.timestream_settings.cdc_inserts_and_updates #=> Boolean
     #   resp.endpoint.timestream_settings.enable_magnetic_store_writes #=> Boolean
+    #   resp.endpoint.lakehouse_settings.arn #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/dms-2016-01-01/DeleteEndpoint AWS API Documentation
     #
@@ -4515,6 +4523,7 @@ module Aws::DatabaseMigrationService
     #   resp.replication_config.table_mappings #=> String
     #   resp.replication_config.replication_config_create_time #=> Time
     #   resp.replication_config.replication_config_update_time #=> Time
+    #   resp.replication_config.is_read_only #=> Boolean
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/dms-2016-01-01/DeleteReplicationConfig AWS API Documentation
     #
@@ -4631,6 +4640,7 @@ module Aws::DatabaseMigrationService
     #   resp.replication_instance.replication_subnet_group.subnets[0].subnet_status #=> String
     #   resp.replication_instance.replication_subnet_group.supported_network_types #=> Array
     #   resp.replication_instance.replication_subnet_group.supported_network_types[0] #=> String
+    #   resp.replication_instance.replication_subnet_group.is_read_only #=> Boolean
     #   resp.replication_instance.preferred_maintenance_window #=> String
     #   resp.replication_instance.pending_modified_values.replication_instance_class #=> String
     #   resp.replication_instance.pending_modified_values.allocated_storage #=> Integer
@@ -5073,6 +5083,7 @@ module Aws::DatabaseMigrationService
     #   resp.certificates[0].valid_to_date #=> Time
     #   resp.certificates[0].signing_algorithm #=> String
     #   resp.certificates[0].key_length #=> Integer
+    #   resp.certificates[0].kms_key_id #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/dms-2016-01-01/DescribeCertificates AWS API Documentation
     #
@@ -5743,6 +5754,7 @@ module Aws::DatabaseMigrationService
     #   resp.endpoints[0].service_access_role_arn #=> String
     #   resp.endpoints[0].external_table_definition #=> String
     #   resp.endpoints[0].external_id #=> String
+    #   resp.endpoints[0].is_read_only #=> Boolean
     #   resp.endpoints[0].dynamo_db_settings.service_access_role_arn #=> String
     #   resp.endpoints[0].s3_settings.service_access_role_arn #=> String
     #   resp.endpoints[0].s3_settings.external_table_definition #=> String
@@ -6045,6 +6057,7 @@ module Aws::DatabaseMigrationService
     #   resp.endpoints[0].timestream_settings.magnetic_duration #=> Integer
     #   resp.endpoints[0].timestream_settings.cdc_inserts_and_updates #=> Boolean
     #   resp.endpoints[0].timestream_settings.enable_magnetic_store_writes #=> Boolean
+    #   resp.endpoints[0].lakehouse_settings.arn #=> String
     #
     #
     # The following waiters are defined for this operation (see {Client#wait_until} for detailed usage):
@@ -8226,6 +8239,7 @@ module Aws::DatabaseMigrationService
     #   resp.replication_configs[0].table_mappings #=> String
     #   resp.replication_configs[0].replication_config_create_time #=> Time
     #   resp.replication_configs[0].replication_config_update_time #=> Time
+    #   resp.replication_configs[0].is_read_only #=> Boolean
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/dms-2016-01-01/DescribeReplicationConfigs AWS API Documentation
     #
@@ -8384,6 +8398,7 @@ module Aws::DatabaseMigrationService
     #   resp.replication_instances[0].replication_subnet_group.subnets[0].subnet_status #=> String
     #   resp.replication_instances[0].replication_subnet_group.supported_network_types #=> Array
     #   resp.replication_instances[0].replication_subnet_group.supported_network_types[0] #=> String
+    #   resp.replication_instances[0].replication_subnet_group.is_read_only #=> Boolean
     #   resp.replication_instances[0].preferred_maintenance_window #=> String
     #   resp.replication_instances[0].pending_modified_values.replication_instance_class #=> String
     #   resp.replication_instances[0].pending_modified_values.allocated_storage #=> Integer
@@ -8509,6 +8524,7 @@ module Aws::DatabaseMigrationService
     #   resp.replication_subnet_groups[0].subnets[0].subnet_status #=> String
     #   resp.replication_subnet_groups[0].supported_network_types #=> Array
     #   resp.replication_subnet_groups[0].supported_network_types[0] #=> String
+    #   resp.replication_subnet_groups[0].is_read_only #=> Boolean
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/dms-2016-01-01/DescribeReplicationSubnetGroups AWS API Documentation
     #
@@ -9047,6 +9063,7 @@ module Aws::DatabaseMigrationService
     #   resp.replications[0].replication_update_time #=> Time
     #   resp.replications[0].replication_last_stop_time #=> Time
     #   resp.replications[0].replication_deprovision_time #=> Time
+    #   resp.replications[0].is_read_only #=> Boolean
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/dms-2016-01-01/DescribeReplications AWS API Documentation
     #
@@ -9374,6 +9391,16 @@ module Aws::DatabaseMigrationService
     # @option params [Array<Types::Tag>] :tags
     #   The tags associated with the certificate.
     #
+    # @option params [String] :kms_key_id
+    #   An KMS key identifier that is used to encrypt the certificate.
+    #
+    #   If you don't specify a value for the `KmsKeyId` parameter, then DMS
+    #   uses your default encryption key.
+    #
+    #   KMS creates the default encryption key for your Amazon Web Services
+    #   account. Your Amazon Web Services account has a different default
+    #   encryption key for each Amazon Web Services Region.
+    #
     # @return [Types::ImportCertificateResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::ImportCertificateResponse#certificate #certificate} => Types::Certificate
@@ -9407,6 +9434,7 @@ module Aws::DatabaseMigrationService
     #         resource_arn: "String",
     #       },
     #     ],
+    #     kms_key_id: "String",
     #   })
     #
     # @example Response structure
@@ -9421,6 +9449,7 @@ module Aws::DatabaseMigrationService
     #   resp.certificate.valid_to_date #=> Time
     #   resp.certificate.signing_algorithm #=> String
     #   resp.certificate.key_length #=> Integer
+    #   resp.certificate.kms_key_id #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/dms-2016-01-01/ImportCertificate AWS API Documentation
     #
@@ -10618,6 +10647,7 @@ module Aws::DatabaseMigrationService
     #   resp.endpoint.service_access_role_arn #=> String
     #   resp.endpoint.external_table_definition #=> String
     #   resp.endpoint.external_id #=> String
+    #   resp.endpoint.is_read_only #=> Boolean
     #   resp.endpoint.dynamo_db_settings.service_access_role_arn #=> String
     #   resp.endpoint.s3_settings.service_access_role_arn #=> String
     #   resp.endpoint.s3_settings.external_table_definition #=> String
@@ -10920,6 +10950,7 @@ module Aws::DatabaseMigrationService
     #   resp.endpoint.timestream_settings.magnetic_duration #=> Integer
     #   resp.endpoint.timestream_settings.cdc_inserts_and_updates #=> Boolean
     #   resp.endpoint.timestream_settings.enable_magnetic_store_writes #=> Boolean
+    #   resp.endpoint.lakehouse_settings.arn #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/dms-2016-01-01/ModifyEndpoint AWS API Documentation
     #
@@ -11372,6 +11403,7 @@ module Aws::DatabaseMigrationService
     #   resp.replication_config.table_mappings #=> String
     #   resp.replication_config.replication_config_create_time #=> Time
     #   resp.replication_config.replication_config_update_time #=> Time
+    #   resp.replication_config.is_read_only #=> Boolean
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/dms-2016-01-01/ModifyReplicationConfig AWS API Documentation
     #
@@ -11605,6 +11637,7 @@ module Aws::DatabaseMigrationService
     #   resp.replication_instance.replication_subnet_group.subnets[0].subnet_status #=> String
     #   resp.replication_instance.replication_subnet_group.supported_network_types #=> Array
     #   resp.replication_instance.replication_subnet_group.supported_network_types[0] #=> String
+    #   resp.replication_instance.replication_subnet_group.is_read_only #=> Boolean
     #   resp.replication_instance.preferred_maintenance_window #=> String
     #   resp.replication_instance.pending_modified_values.replication_instance_class #=> String
     #   resp.replication_instance.pending_modified_values.allocated_storage #=> Integer
@@ -11695,6 +11728,7 @@ module Aws::DatabaseMigrationService
     #   resp.replication_subnet_group.subnets[0].subnet_status #=> String
     #   resp.replication_subnet_group.supported_network_types #=> Array
     #   resp.replication_subnet_group.supported_network_types[0] #=> String
+    #   resp.replication_subnet_group.is_read_only #=> Boolean
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/dms-2016-01-01/ModifyReplicationSubnetGroup AWS API Documentation
     #
@@ -11975,6 +12009,7 @@ module Aws::DatabaseMigrationService
     #   resp.replication_instance.replication_subnet_group.subnets[0].subnet_status #=> String
     #   resp.replication_instance.replication_subnet_group.supported_network_types #=> Array
     #   resp.replication_instance.replication_subnet_group.supported_network_types[0] #=> String
+    #   resp.replication_instance.replication_subnet_group.is_read_only #=> Boolean
     #   resp.replication_instance.preferred_maintenance_window #=> String
     #   resp.replication_instance.pending_modified_values.replication_instance_class #=> String
     #   resp.replication_instance.pending_modified_values.allocated_storage #=> Integer
@@ -12898,6 +12933,7 @@ module Aws::DatabaseMigrationService
     #   resp.replication.replication_update_time #=> Time
     #   resp.replication.replication_last_stop_time #=> Time
     #   resp.replication.replication_deprovision_time #=> Time
+    #   resp.replication.is_read_only #=> Boolean
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/dms-2016-01-01/StartReplication AWS API Documentation
     #
@@ -13424,6 +13460,7 @@ module Aws::DatabaseMigrationService
     #   resp.replication.replication_update_time #=> Time
     #   resp.replication.replication_last_stop_time #=> Time
     #   resp.replication.replication_deprovision_time #=> Time
+    #   resp.replication.is_read_only #=> Boolean
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/dms-2016-01-01/StopReplication AWS API Documentation
     #
@@ -13637,7 +13674,7 @@ module Aws::DatabaseMigrationService
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-databasemigrationservice'
-      context[:gem_version] = '1.134.0'
+      context[:gem_version] = '1.135.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-databasemigrationservice/client_api.rb

@@ -299,6 +299,7 @@ module Aws::DatabaseMigrationService
     KerberosAuthenticationSettings = Shapes::StructureShape.new(name: 'KerberosAuthenticationSettings')
     KeyList = Shapes::ListShape.new(name: 'KeyList')
     KinesisSettings = Shapes::StructureShape.new(name: 'KinesisSettings')
+    LakehouseSettings = Shapes::StructureShape.new(name: 'LakehouseSettings')
     Limitation = Shapes::StructureShape.new(name: 'Limitation')
     LimitationList = Shapes::ListShape.new(name: 'LimitationList')
     ListTagsForResourceMessage = Shapes::StructureShape.new(name: 'ListTagsForResourceMessage')
@@ -598,6 +599,7 @@ module Aws::DatabaseMigrationService
     Certificate.add_member(:valid_to_date, Shapes::ShapeRef.new(shape: TStamp, location_name: "ValidToDate"))
     Certificate.add_member(:signing_algorithm, Shapes::ShapeRef.new(shape: String, location_name: "SigningAlgorithm"))
     Certificate.add_member(:key_length, Shapes::ShapeRef.new(shape: IntegerOptional, location_name: "KeyLength"))
+    Certificate.add_member(:kms_key_id, Shapes::ShapeRef.new(shape: String, location_name: "KmsKeyId"))
     Certificate.struct_class = Types::Certificate
 
     CertificateList.member = Shapes::ShapeRef.new(shape: Certificate)
@@ -1540,6 +1542,7 @@ module Aws::DatabaseMigrationService
     Endpoint.add_member(:service_access_role_arn, Shapes::ShapeRef.new(shape: String, location_name: "ServiceAccessRoleArn"))
     Endpoint.add_member(:external_table_definition, Shapes::ShapeRef.new(shape: String, location_name: "ExternalTableDefinition"))
     Endpoint.add_member(:external_id, Shapes::ShapeRef.new(shape: String, location_name: "ExternalId"))
+    Endpoint.add_member(:is_read_only, Shapes::ShapeRef.new(shape: BooleanOptional, location_name: "IsReadOnly"))
     Endpoint.add_member(:dynamo_db_settings, Shapes::ShapeRef.new(shape: DynamoDbSettings, location_name: "DynamoDbSettings"))
     Endpoint.add_member(:s3_settings, Shapes::ShapeRef.new(shape: S3Settings, location_name: "S3Settings"))
     Endpoint.add_member(:dms_transfer_settings, Shapes::ShapeRef.new(shape: DmsTransferSettings, location_name: "DmsTransferSettings"))
@@ -1559,6 +1562,7 @@ module Aws::DatabaseMigrationService
     Endpoint.add_member(:redis_settings, Shapes::ShapeRef.new(shape: RedisSettings, location_name: "RedisSettings"))
     Endpoint.add_member(:gcp_my_sql_settings, Shapes::ShapeRef.new(shape: GcpMySQLSettings, location_name: "GcpMySQLSettings"))
     Endpoint.add_member(:timestream_settings, Shapes::ShapeRef.new(shape: TimestreamSettings, location_name: "TimestreamSettings"))
+    Endpoint.add_member(:lakehouse_settings, Shapes::ShapeRef.new(shape: LakehouseSettings, location_name: "LakehouseSettings"))
     Endpoint.struct_class = Types::Endpoint
 
     EndpointList.member = Shapes::ShapeRef.new(shape: Endpoint)
@@ -1735,6 +1739,7 @@ module Aws::DatabaseMigrationService
     ImportCertificateMessage.add_member(:certificate_pem, Shapes::ShapeRef.new(shape: SecretString, location_name: "CertificatePem"))
     ImportCertificateMessage.add_member(:certificate_wallet, Shapes::ShapeRef.new(shape: CertificateWallet, location_name: "CertificateWallet"))
     ImportCertificateMessage.add_member(:tags, Shapes::ShapeRef.new(shape: TagList, location_name: "Tags"))
+    ImportCertificateMessage.add_member(:kms_key_id, Shapes::ShapeRef.new(shape: String, location_name: "KmsKeyId"))
     ImportCertificateMessage.struct_class = Types::ImportCertificateMessage
 
     ImportCertificateResponse.add_member(:certificate, Shapes::ShapeRef.new(shape: Certificate, location_name: "Certificate"))
@@ -1843,6 +1848,9 @@ module Aws::DatabaseMigrationService
     KinesisSettings.add_member(:use_large_integer_value, Shapes::ShapeRef.new(shape: BooleanOptional, location_name: "UseLargeIntegerValue"))
     KinesisSettings.struct_class = Types::KinesisSettings
 
+    LakehouseSettings.add_member(:arn, Shapes::ShapeRef.new(shape: String, required: true, location_name: "Arn"))
+    LakehouseSettings.struct_class = Types::LakehouseSettings
+
     Limitation.add_member(:database_id, Shapes::ShapeRef.new(shape: String, location_name: "DatabaseId"))
     Limitation.add_member(:engine_name, Shapes::ShapeRef.new(shape: String, location_name: "EngineName"))
     Limitation.add_member(:name, Shapes::ShapeRef.new(shape: String, location_name: "Name"))
@@ -2471,6 +2479,7 @@ module Aws::DatabaseMigrationService
     Replication.add_member(:replication_update_time, Shapes::ShapeRef.new(shape: TStamp, location_name: "ReplicationUpdateTime"))
     Replication.add_member(:replication_last_stop_time, Shapes::ShapeRef.new(shape: TStamp, location_name: "ReplicationLastStopTime"))
     Replication.add_member(:replication_deprovision_time, Shapes::ShapeRef.new(shape: TStamp, location_name: "ReplicationDeprovisionTime"))
+    Replication.add_member(:is_read_only, Shapes::ShapeRef.new(shape: BooleanOptional, location_name: "IsReadOnly"))
     Replication.struct_class = Types::Replication
 
     ReplicationConfig.add_member(:replication_config_identifier, Shapes::ShapeRef.new(shape: String, location_name: "ReplicationConfigIdentifier"))
@@ -2484,6 +2493,7 @@ module Aws::DatabaseMigrationService
     ReplicationConfig.add_member(:table_mappings, Shapes::ShapeRef.new(shape: String, location_name: "TableMappings"))
     ReplicationConfig.add_member(:replication_config_create_time, Shapes::ShapeRef.new(shape: TStamp, location_name: "ReplicationConfigCreateTime"))
     ReplicationConfig.add_member(:replication_config_update_time, Shapes::ShapeRef.new(shape: TStamp, location_name: "ReplicationConfigUpdateTime"))
+    ReplicationConfig.add_member(:is_read_only, Shapes::ShapeRef.new(shape: BooleanOptional, location_name: "IsReadOnly"))
     ReplicationConfig.struct_class = Types::ReplicationConfig
 
     ReplicationConfigList.member = Shapes::ShapeRef.new(shape: ReplicationConfig)
@@ -2559,6 +2569,7 @@ module Aws::DatabaseMigrationService
     ReplicationSubnetGroup.add_member(:subnet_group_status, Shapes::ShapeRef.new(shape: String, location_name: "SubnetGroupStatus"))
     ReplicationSubnetGroup.add_member(:subnets, Shapes::ShapeRef.new(shape: SubnetList, location_name: "Subnets"))
     ReplicationSubnetGroup.add_member(:supported_network_types, Shapes::ShapeRef.new(shape: StringList, location_name: "SupportedNetworkTypes"))
+    ReplicationSubnetGroup.add_member(:is_read_only, Shapes::ShapeRef.new(shape: BooleanOptional, location_name: "IsReadOnly"))
     ReplicationSubnetGroup.struct_class = Types::ReplicationSubnetGroup
 
     ReplicationSubnetGroupDoesNotCoverEnoughAZs.add_member(:message, Shapes::ShapeRef.new(shape: ExceptionMessage, location_name: "message"))
@@ -4165,6 +4176,7 @@ module Aws::DatabaseMigrationService
         o.errors << Shapes::ShapeRef.new(shape: ResourceAlreadyExistsFault)
         o.errors << Shapes::ShapeRef.new(shape: InvalidCertificateFault)
         o.errors << Shapes::ShapeRef.new(shape: ResourceQuotaExceededFault)
+        o.errors << Shapes::ShapeRef.new(shape: KMSKeyNotAccessibleFault)
       end)
 
       api.add_operation(:list_tags_for_resource, Seahorse::Model::Operation.new.tap do |o|

data/lib/aws-sdk-databasemigrationservice/types.rb

@@ -337,6 +337,17 @@ module Aws::DatabaseMigrationService
     #   The key length of the cryptographic algorithm being used.
     #   @return [Integer]
     #
+    # @!attribute [rw] kms_key_id
+    #   An KMS key identifier that is used to encrypt the certificate.
+    #
+    #   If you don't specify a value for the `KmsKeyId` parameter, then DMS
+    #   uses your default encryption key.
+    #
+    #   KMS creates the default encryption key for your Amazon Web Services
+    #   account. Your Amazon Web Services account has a different default
+    #   encryption key for each Amazon Web Services Region.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/dms-2016-01-01/Certificate AWS API Documentation
     #
     class Certificate < Struct.new(
@@ -349,7 +360,8 @@ module Aws::DatabaseMigrationService
       :valid_from_date,
       :valid_to_date,
       :signing_algorithm,
-      :key_length)
+      :key_length,
+      :kms_key_id)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -5785,6 +5797,14 @@ module Aws::DatabaseMigrationService
     #   CreateEndpoint to create the endpoint with a cross-account.
     #   @return [String]
     #
+    # @!attribute [rw] is_read_only
+    #   Indicates whether the endpoint is read-only. When set to `true`,
+    #   this endpoint is managed by DMS as part of a zero-ETL integration
+    #   and cannot be modified or deleted directly. You can only modify or
+    #   delete read-only endpoints through their associated zero-ETL
+    #   integration.
+    #   @return [Boolean]
+    #
     # @!attribute [rw] dynamo_db_settings
     #   The settings for the DynamoDB target endpoint. For more information,
     #   see the `DynamoDBSettings` structure.
@@ -5878,6 +5898,12 @@ module Aws::DatabaseMigrationService
     #   information, see the `TimestreamSettings` structure.
     #   @return [Types::TimestreamSettings]
     #
+    # @!attribute [rw] lakehouse_settings
+    #   Settings in JSON format for the target Lakehouse endpoint. This
+    #   parameter applies to endpoints that are automatically created by DMS
+    #   for a Lakehouse data warehouse as part of a zero-ETL integration.
+    #   @return [Types::LakehouseSettings]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/dms-2016-01-01/Endpoint AWS API Documentation
     #
     class Endpoint < Struct.new(
@@ -5898,6 +5924,7 @@ module Aws::DatabaseMigrationService
       :service_access_role_arn,
       :external_table_definition,
       :external_id,
+      :is_read_only,
       :dynamo_db_settings,
       :s3_settings,
       :dms_transfer_settings,
@@ -5916,7 +5943,8 @@ module Aws::DatabaseMigrationService
       :doc_db_settings,
       :redis_settings,
       :gcp_my_sql_settings,
-      :timestream_settings)
+      :timestream_settings,
+      :lakehouse_settings)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -6786,13 +6814,25 @@ module Aws::DatabaseMigrationService
     #   The tags associated with the certificate.
     #   @return [Array<Types::Tag>]
     #
+    # @!attribute [rw] kms_key_id
+    #   An KMS key identifier that is used to encrypt the certificate.
+    #
+    #   If you don't specify a value for the `KmsKeyId` parameter, then DMS
+    #   uses your default encryption key.
+    #
+    #   KMS creates the default encryption key for your Amazon Web Services
+    #   account. Your Amazon Web Services account has a different default
+    #   encryption key for each Amazon Web Services Region.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/dms-2016-01-01/ImportCertificateMessage AWS API Documentation
     #
     class ImportCertificateMessage < Struct.new(
       :certificate_identifier,
       :certificate_pem,
       :certificate_wallet,
-      :tags)
+      :tags,
+      :kms_key_id)
       SENSITIVE = [:certificate_pem]
       include Aws::Structure
     end
@@ -7357,6 +7397,22 @@ module Aws::DatabaseMigrationService
       include Aws::Structure
     end
 
+    # Provides information that defines a Lakehouse endpoint. This endpoint
+    # type is used for zero-ETL integrations with Lakehouse data warehouses.
+    #
+    # @!attribute [rw] arn
+    #   The Amazon Resource Name (ARN) of the Lakehouse resource that serves
+    #   as the target for this endpoint.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/dms-2016-01-01/LakehouseSettings AWS API Documentation
+    #
+    class LakehouseSettings < Struct.new(
+      :arn)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Provides information about the limitations of target Amazon Web
     # Services engines.
     #
@@ -11637,6 +11693,14 @@ module Aws::DatabaseMigrationService
     #   The timestamp when DMS will deprovision the replication.
     #   @return [Time]
     #
+    # @!attribute [rw] is_read_only
+    #   Indicates whether the serverless replication is read-only. When set
+    #   to `true`, this replication is managed by DMS as part of a zero-ETL
+    #   integration and cannot be modified or deleted directly. You can only
+    #   modify or delete read-only replications through their associated
+    #   zero-ETL integration.
+    #   @return [Boolean]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/dms-2016-01-01/Replication AWS API Documentation
     #
     class Replication < Struct.new(
@@ -11659,7 +11723,8 @@ module Aws::DatabaseMigrationService
       :replication_create_time,
       :replication_update_time,
       :replication_last_stop_time,
-      :replication_deprovision_time)
+      :replication_deprovision_time,
+      :is_read_only)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -11716,6 +11781,14 @@ module Aws::DatabaseMigrationService
     #   The time the serverless replication config was updated.
     #   @return [Time]
     #
+    # @!attribute [rw] is_read_only
+    #   Indicates whether the replication configuration is read-only. When
+    #   set to `true`, this replication configuration is managed by DMS as
+    #   part of a zero-ETL integration and cannot be modified or deleted
+    #   directly. You can only modify or delete read-only replication
+    #   configurations through their associated zero-ETL integration.
+    #   @return [Boolean]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/dms-2016-01-01/ReplicationConfig AWS API Documentation
     #
     class ReplicationConfig < Struct.new(
@@ -11729,7 +11802,8 @@ module Aws::DatabaseMigrationService
       :supplemental_settings,
       :table_mappings,
       :replication_config_create_time,
-      :replication_config_update_time)
+      :replication_config_update_time,
+      :is_read_only)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -12126,6 +12200,14 @@ module Aws::DatabaseMigrationService
     #   not yet supported.
     #   @return [Array<String>]
     #
+    # @!attribute [rw] is_read_only
+    #   Indicates whether the replication subnet group is read-only. When
+    #   set to `true`, this subnet group is managed by DMS as part of a
+    #   zero-ETL integration and cannot be modified or deleted directly. You
+    #   can only modify or delete read-only subnet groups through their
+    #   associated zero-ETL integration.
+    #   @return [Boolean]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/dms-2016-01-01/ReplicationSubnetGroup AWS API Documentation
     #
     class ReplicationSubnetGroup < Struct.new(
@@ -12134,7 +12216,8 @@ module Aws::DatabaseMigrationService
       :vpc_id,
       :subnet_group_status,
       :subnets,
-      :supported_network_types)
+      :supported_network_types,
+      :is_read_only)
       SENSITIVE = []
       include Aws::Structure
     end

data/lib/aws-sdk-databasemigrationservice.rb

@@ -55,7 +55,7 @@ module Aws::DatabaseMigrationService
   autoload :EndpointProvider, 'aws-sdk-databasemigrationservice/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-databasemigrationservice/endpoints'
 
-  GEM_VERSION = '1.134.0'
+  GEM_VERSION = '1.135.0'
 
 end
 

data/sig/client.rbs

@@ -1889,7 +1889,8 @@ module Aws
                                     value: ::String?,
                                     resource_arn: ::String?
                                   },
-                                ]
+                                ],
+                                ?kms_key_id: ::String
                               ) -> _ImportCertificateResponseSuccess
                             | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _ImportCertificateResponseSuccess
 

data/sig/types.rbs

@@ -106,6 +106,7 @@ module Aws::DatabaseMigrationService
       attr_accessor valid_to_date: ::Time
       attr_accessor signing_algorithm: ::String
       attr_accessor key_length: ::Integer
+      attr_accessor kms_key_id: ::String
       SENSITIVE: []
     end
 
@@ -1375,6 +1376,7 @@ module Aws::DatabaseMigrationService
       attr_accessor service_access_role_arn: ::String
       attr_accessor external_table_definition: ::String
       attr_accessor external_id: ::String
+      attr_accessor is_read_only: bool
       attr_accessor dynamo_db_settings: Types::DynamoDbSettings
       attr_accessor s3_settings: Types::S3Settings
       attr_accessor dms_transfer_settings: Types::DmsTransferSettings
@@ -1394,6 +1396,7 @@ module Aws::DatabaseMigrationService
       attr_accessor redis_settings: Types::RedisSettings
       attr_accessor gcp_my_sql_settings: Types::GcpMySQLSettings
       attr_accessor timestream_settings: Types::TimestreamSettings
+      attr_accessor lakehouse_settings: Types::LakehouseSettings
       SENSITIVE: []
     end
 
@@ -1587,6 +1590,7 @@ module Aws::DatabaseMigrationService
       attr_accessor certificate_pem: ::String
       attr_accessor certificate_wallet: ::String
       attr_accessor tags: ::Array[Types::Tag]
+      attr_accessor kms_key_id: ::String
       SENSITIVE: [:certificate_pem]
     end
 
@@ -1722,6 +1726,11 @@ module Aws::DatabaseMigrationService
       SENSITIVE: []
     end
 
+    class LakehouseSettings
+      attr_accessor arn: ::String
+      SENSITIVE: []
+    end
+
     class Limitation
       attr_accessor database_id: ::String
       attr_accessor engine_name: ::String
@@ -2471,6 +2480,7 @@ module Aws::DatabaseMigrationService
       attr_accessor replication_update_time: ::Time
       attr_accessor replication_last_stop_time: ::Time
       attr_accessor replication_deprovision_time: ::Time
+      attr_accessor is_read_only: bool
       SENSITIVE: []
     end
 
@@ -2486,6 +2496,7 @@ module Aws::DatabaseMigrationService
       attr_accessor table_mappings: ::String
       attr_accessor replication_config_create_time: ::Time
       attr_accessor replication_config_update_time: ::Time
+      attr_accessor is_read_only: bool
       SENSITIVE: []
     end
 
@@ -2557,6 +2568,7 @@ module Aws::DatabaseMigrationService
       attr_accessor subnet_group_status: ::String
       attr_accessor subnets: ::Array[Types::Subnet]
       attr_accessor supported_network_types: ::Array[::String]
+      attr_accessor is_read_only: bool
       SENSITIVE: []
     end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-databasemigrationservice
 version: !ruby/object:Gem::Version
-  version: 1.134.0
+  version: 1.135.0
 platform: ruby
 authors:
 - Amazon Web Services