aws-sdk-dataexchange 1.30.0 → 1.31.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 1f919d9c179664cc86f736c6da8e1d24dac5e49eea40aae71b3b2d4ec21c437b
-  data.tar.gz: b5d6f991201170985918ca546345c80f941997a73b60bc21c62c0886e2bcbad1
+  metadata.gz: bfa1e36372ceab8ae50ea31f22adce15df8e5edfc3b9861f1fc091772816f3a6
+  data.tar.gz: a92f8d82bd48c6d71f4533523e41db2aa8c32331ebb6845be3b2ac98cdf0ee16
 SHA512:
-  metadata.gz: 913b767d0783d757c49433bc7f22eabfb69542347808d195ac0c9e1b61af070b0cbf282837c3128e121171fbb5f7e79dd14d5bd90df5396f762508a0c9e34cc3
-  data.tar.gz: 86dc2115c55d5581491ca778dd7ec9d59cf00725f6e007316e2823d360fd3a6d892bc45ba179b5bb4939a2f4ff1c985e1e57f2bf2706574d73262771bf6ba81d
+  metadata.gz: 9e1adf9824ee98d3b161d5fdd6f5f85c279afe6127ab5c9223acbe73b8a72704dbe482ad76251bca4d73a86b05c7e2f668b9550ac7a0cadc2bbd117f2753df0c
+  data.tar.gz: 93854ba06f7c4db0ad691277dddfec976b9aacf4fc12bd8b26d249b4fbceca6f31343bdb83b568e3466f2faa7c091d1672be9a9149f6eed56e39747c780338ae

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.31.0 (2023-03-14)
+------------------
+
+* Feature - This release enables data providers to license direct access to S3 objects encrypted with Customer Managed Keys (CMK) in AWS KMS through AWS Data Exchange. Subscribers can use these keys to decrypt, then use the encrypted S3 objects shared with them, without creating or managing copies.
+
 1.30.0 (2023-01-18)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.30.0
+1.31.0

data/lib/aws-sdk-dataexchange/client.rb

@@ -617,6 +617,11 @@ module Aws::DataExchange
     #           bucket: "__string", # required
     #           key_prefixes: ["__string"],
     #           keys: ["__string"],
+    #           kms_keys_to_grant: [
+    #             {
+    #               kms_key_arn: "KmsKeyArn", # required
+    #             },
+    #           ],
     #         },
     #         data_set_id: "Id", # required
     #         revision_id: "Id", # required
@@ -705,6 +710,8 @@ module Aws::DataExchange
     #   resp.details.create_s3_data_access_from_s3_bucket.asset_source.key_prefixes[0] #=> String
     #   resp.details.create_s3_data_access_from_s3_bucket.asset_source.keys #=> Array
     #   resp.details.create_s3_data_access_from_s3_bucket.asset_source.keys[0] #=> String
+    #   resp.details.create_s3_data_access_from_s3_bucket.asset_source.kms_keys_to_grant #=> Array
+    #   resp.details.create_s3_data_access_from_s3_bucket.asset_source.kms_keys_to_grant[0].kms_key_arn #=> String
     #   resp.details.create_s3_data_access_from_s3_bucket.data_set_id #=> String
     #   resp.details.create_s3_data_access_from_s3_bucket.revision_id #=> String
     #   resp.details.import_assets_from_lake_formation_tag_policy.catalog_id #=> String
@@ -966,6 +973,8 @@ module Aws::DataExchange
     #   resp.asset_details.s3_data_access_asset.keys[0] #=> String
     #   resp.asset_details.s3_data_access_asset.s3_access_point_alias #=> String
     #   resp.asset_details.s3_data_access_asset.s3_access_point_arn #=> String
+    #   resp.asset_details.s3_data_access_asset.kms_keys_to_grant #=> Array
+    #   resp.asset_details.s3_data_access_asset.kms_keys_to_grant[0].kms_key_arn #=> String
     #   resp.asset_details.lake_formation_data_permission_asset.lake_formation_data_permission_details.lf_tag_policy.catalog_id #=> String
     #   resp.asset_details.lake_formation_data_permission_asset.lake_formation_data_permission_details.lf_tag_policy.resource_type #=> String, one of "TABLE", "DATABASE"
     #   resp.asset_details.lake_formation_data_permission_asset.lake_formation_data_permission_details.lf_tag_policy.resource_details.database.expression #=> Array
@@ -1166,6 +1175,8 @@ module Aws::DataExchange
     #   resp.details.create_s3_data_access_from_s3_bucket.asset_source.key_prefixes[0] #=> String
     #   resp.details.create_s3_data_access_from_s3_bucket.asset_source.keys #=> Array
     #   resp.details.create_s3_data_access_from_s3_bucket.asset_source.keys[0] #=> String
+    #   resp.details.create_s3_data_access_from_s3_bucket.asset_source.kms_keys_to_grant #=> Array
+    #   resp.details.create_s3_data_access_from_s3_bucket.asset_source.kms_keys_to_grant[0].kms_key_arn #=> String
     #   resp.details.create_s3_data_access_from_s3_bucket.data_set_id #=> String
     #   resp.details.create_s3_data_access_from_s3_bucket.revision_id #=> String
     #   resp.details.import_assets_from_lake_formation_tag_policy.catalog_id #=> String
@@ -1511,6 +1522,8 @@ module Aws::DataExchange
     #   resp.jobs[0].details.create_s3_data_access_from_s3_bucket.asset_source.key_prefixes[0] #=> String
     #   resp.jobs[0].details.create_s3_data_access_from_s3_bucket.asset_source.keys #=> Array
     #   resp.jobs[0].details.create_s3_data_access_from_s3_bucket.asset_source.keys[0] #=> String
+    #   resp.jobs[0].details.create_s3_data_access_from_s3_bucket.asset_source.kms_keys_to_grant #=> Array
+    #   resp.jobs[0].details.create_s3_data_access_from_s3_bucket.asset_source.kms_keys_to_grant[0].kms_key_arn #=> String
     #   resp.jobs[0].details.create_s3_data_access_from_s3_bucket.data_set_id #=> String
     #   resp.jobs[0].details.create_s3_data_access_from_s3_bucket.revision_id #=> String
     #   resp.jobs[0].details.import_assets_from_lake_formation_tag_policy.catalog_id #=> String
@@ -1609,6 +1622,8 @@ module Aws::DataExchange
     #   resp.assets[0].asset_details.s3_data_access_asset.keys[0] #=> String
     #   resp.assets[0].asset_details.s3_data_access_asset.s3_access_point_alias #=> String
     #   resp.assets[0].asset_details.s3_data_access_asset.s3_access_point_arn #=> String
+    #   resp.assets[0].asset_details.s3_data_access_asset.kms_keys_to_grant #=> Array
+    #   resp.assets[0].asset_details.s3_data_access_asset.kms_keys_to_grant[0].kms_key_arn #=> String
     #   resp.assets[0].asset_details.lake_formation_data_permission_asset.lake_formation_data_permission_details.lf_tag_policy.catalog_id #=> String
     #   resp.assets[0].asset_details.lake_formation_data_permission_asset.lake_formation_data_permission_details.lf_tag_policy.resource_type #=> String, one of "TABLE", "DATABASE"
     #   resp.assets[0].asset_details.lake_formation_data_permission_asset.lake_formation_data_permission_details.lf_tag_policy.resource_details.database.expression #=> Array
@@ -1941,6 +1956,8 @@ module Aws::DataExchange
     #   resp.asset_details.s3_data_access_asset.keys[0] #=> String
     #   resp.asset_details.s3_data_access_asset.s3_access_point_alias #=> String
     #   resp.asset_details.s3_data_access_asset.s3_access_point_arn #=> String
+    #   resp.asset_details.s3_data_access_asset.kms_keys_to_grant #=> Array
+    #   resp.asset_details.s3_data_access_asset.kms_keys_to_grant[0].kms_key_arn #=> String
     #   resp.asset_details.lake_formation_data_permission_asset.lake_formation_data_permission_details.lf_tag_policy.catalog_id #=> String
     #   resp.asset_details.lake_formation_data_permission_asset.lake_formation_data_permission_details.lf_tag_policy.resource_type #=> String, one of "TABLE", "DATABASE"
     #   resp.asset_details.lake_formation_data_permission_asset.lake_formation_data_permission_details.lf_tag_policy.resource_details.database.expression #=> Array
@@ -2158,7 +2175,7 @@ module Aws::DataExchange
         params: params,
         config: config)
       context[:gem_name] = 'aws-sdk-dataexchange'
-      context[:gem_version] = '1.30.0'
+      context[:gem_version] = '1.31.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-dataexchange/client_api.rb

@@ -87,6 +87,8 @@ module Aws::DataExchange
     JobError = Shapes::StructureShape.new(name: 'JobError')
     JobErrorLimitName = Shapes::StringShape.new(name: 'JobErrorLimitName')
     JobErrorResourceTypes = Shapes::StringShape.new(name: 'JobErrorResourceTypes')
+    KmsKeyArn = Shapes::StringShape.new(name: 'KmsKeyArn')
+    KmsKeyToGrant = Shapes::StructureShape.new(name: 'KmsKeyToGrant')
     LFPermission = Shapes::StringShape.new(name: 'LFPermission')
     LFResourceDetails = Shapes::StructureShape.new(name: 'LFResourceDetails')
     LFResourceType = Shapes::StringShape.new(name: 'LFResourceType')
@@ -112,6 +114,7 @@ module Aws::DataExchange
     ListOfEventActionEntry = Shapes::ListShape.new(name: 'ListOfEventActionEntry')
     ListOfJobEntry = Shapes::ListShape.new(name: 'ListOfJobEntry')
     ListOfJobError = Shapes::ListShape.new(name: 'ListOfJobError')
+    ListOfKmsKeysToGrant = Shapes::ListShape.new(name: 'ListOfKmsKeysToGrant')
     ListOfLFPermissions = Shapes::ListShape.new(name: 'ListOfLFPermissions')
     ListOfLFTagValues = Shapes::ListShape.new(name: 'ListOfLFTagValues')
     ListOfLFTags = Shapes::ListShape.new(name: 'ListOfLFTags')
@@ -576,6 +579,9 @@ module Aws::DataExchange
     JobError.add_member(:resource_type, Shapes::ShapeRef.new(shape: JobErrorResourceTypes, location_name: "ResourceType"))
     JobError.struct_class = Types::JobError
 
+    KmsKeyToGrant.add_member(:kms_key_arn, Shapes::ShapeRef.new(shape: KmsKeyArn, required: true, location_name: "KmsKeyArn"))
+    KmsKeyToGrant.struct_class = Types::KmsKeyToGrant
+
     LFResourceDetails.add_member(:database, Shapes::ShapeRef.new(shape: DatabaseLFTagPolicy, location_name: "Database"))
     LFResourceDetails.add_member(:table, Shapes::ShapeRef.new(shape: TableLFTagPolicy, location_name: "Table"))
     LFResourceDetails.struct_class = Types::LFResourceDetails
@@ -651,6 +657,8 @@ module Aws::DataExchange
 
     ListOfJobError.member = Shapes::ShapeRef.new(shape: JobError)
 
+    ListOfKmsKeysToGrant.member = Shapes::ShapeRef.new(shape: KmsKeyToGrant)
+
     ListOfLFPermissions.member = Shapes::ShapeRef.new(shape: LFPermission)
 
     ListOfLFTagValues.member = Shapes::ShapeRef.new(shape: String)
@@ -766,11 +774,13 @@ module Aws::DataExchange
     S3DataAccessAsset.add_member(:keys, Shapes::ShapeRef.new(shape: ListOf__string, location_name: "Keys"))
     S3DataAccessAsset.add_member(:s3_access_point_alias, Shapes::ShapeRef.new(shape: __string, location_name: "S3AccessPointAlias"))
     S3DataAccessAsset.add_member(:s3_access_point_arn, Shapes::ShapeRef.new(shape: __string, location_name: "S3AccessPointArn"))
+    S3DataAccessAsset.add_member(:kms_keys_to_grant, Shapes::ShapeRef.new(shape: ListOfKmsKeysToGrant, location_name: "KmsKeysToGrant"))
     S3DataAccessAsset.struct_class = Types::S3DataAccessAsset
 
     S3DataAccessAssetSourceEntry.add_member(:bucket, Shapes::ShapeRef.new(shape: __string, required: true, location_name: "Bucket"))
     S3DataAccessAssetSourceEntry.add_member(:key_prefixes, Shapes::ShapeRef.new(shape: ListOf__string, location_name: "KeyPrefixes"))
     S3DataAccessAssetSourceEntry.add_member(:keys, Shapes::ShapeRef.new(shape: ListOf__string, location_name: "Keys"))
+    S3DataAccessAssetSourceEntry.add_member(:kms_keys_to_grant, Shapes::ShapeRef.new(shape: ListOfKmsKeysToGrant, location_name: "KmsKeysToGrant"))
     S3DataAccessAssetSourceEntry.struct_class = Types::S3DataAccessAssetSourceEntry
 
     S3SnapshotAsset.add_member(:size, Shapes::ShapeRef.new(shape: __doubleMin0, required: true, location_name: "Size"))

data/lib/aws-sdk-dataexchange/endpoint_parameters.rb

@@ -50,9 +50,6 @@ module Aws::DataExchange
 
     def initialize(options = {})
       self[:region] = options[:region]
-      if self[:region].nil?
-        raise ArgumentError, "Missing required EndpointParameter: :region"
-      end
       self[:use_dual_stack] = options[:use_dual_stack]
       self[:use_dual_stack] = false if self[:use_dual_stack].nil?
       if self[:use_dual_stack].nil?

data/lib/aws-sdk-dataexchange/endpoint_provider.rb

@@ -14,36 +14,39 @@ module Aws::DataExchange
       use_dual_stack = parameters.use_dual_stack
       use_fips = parameters.use_fips
       endpoint = parameters.endpoint
-      if (partition_result = Aws::Endpoints::Matchers.aws_partition(region))
-        if Aws::Endpoints::Matchers.set?(endpoint) && (url = Aws::Endpoints::Matchers.parse_url(endpoint))
-          if Aws::Endpoints::Matchers.boolean_equals?(use_fips, true)
-            raise ArgumentError, "Invalid Configuration: FIPS and custom endpoint are not supported"
-          end
-          if Aws::Endpoints::Matchers.boolean_equals?(use_dual_stack, true)
-            raise ArgumentError, "Invalid Configuration: Dualstack and custom endpoint are not supported"
-          end
-          return Aws::Endpoints::Endpoint.new(url: endpoint, headers: {}, properties: {})
-        end
-        if Aws::Endpoints::Matchers.boolean_equals?(use_fips, true) && Aws::Endpoints::Matchers.boolean_equals?(use_dual_stack, true)
-          if Aws::Endpoints::Matchers.boolean_equals?(true, Aws::Endpoints::Matchers.attr(partition_result, "supportsFIPS")) && Aws::Endpoints::Matchers.boolean_equals?(true, Aws::Endpoints::Matchers.attr(partition_result, "supportsDualStack"))
-            return Aws::Endpoints::Endpoint.new(url: "https://dataexchange-fips.#{region}.#{partition_result['dualStackDnsSuffix']}", headers: {}, properties: {})
-          end
-          raise ArgumentError, "FIPS and DualStack are enabled, but this partition does not support one or both"
-        end
+      if Aws::Endpoints::Matchers.set?(endpoint)
         if Aws::Endpoints::Matchers.boolean_equals?(use_fips, true)
-          if Aws::Endpoints::Matchers.boolean_equals?(true, Aws::Endpoints::Matchers.attr(partition_result, "supportsFIPS"))
-            return Aws::Endpoints::Endpoint.new(url: "https://dataexchange-fips.#{region}.#{partition_result['dnsSuffix']}", headers: {}, properties: {})
-          end
-          raise ArgumentError, "FIPS is enabled but this partition does not support FIPS"
+          raise ArgumentError, "Invalid Configuration: FIPS and custom endpoint are not supported"
         end
         if Aws::Endpoints::Matchers.boolean_equals?(use_dual_stack, true)
-          if Aws::Endpoints::Matchers.boolean_equals?(true, Aws::Endpoints::Matchers.attr(partition_result, "supportsDualStack"))
-            return Aws::Endpoints::Endpoint.new(url: "https://dataexchange.#{region}.#{partition_result['dualStackDnsSuffix']}", headers: {}, properties: {})
+          raise ArgumentError, "Invalid Configuration: Dualstack and custom endpoint are not supported"
+        end
+        return Aws::Endpoints::Endpoint.new(url: endpoint, headers: {}, properties: {})
+      end
+      if Aws::Endpoints::Matchers.set?(region)
+        if (partition_result = Aws::Endpoints::Matchers.aws_partition(region))
+          if Aws::Endpoints::Matchers.boolean_equals?(use_fips, true) && Aws::Endpoints::Matchers.boolean_equals?(use_dual_stack, true)
+            if Aws::Endpoints::Matchers.boolean_equals?(true, Aws::Endpoints::Matchers.attr(partition_result, "supportsFIPS")) && Aws::Endpoints::Matchers.boolean_equals?(true, Aws::Endpoints::Matchers.attr(partition_result, "supportsDualStack"))
+              return Aws::Endpoints::Endpoint.new(url: "https://dataexchange-fips.#{region}.#{partition_result['dualStackDnsSuffix']}", headers: {}, properties: {})
+            end
+            raise ArgumentError, "FIPS and DualStack are enabled, but this partition does not support one or both"
+          end
+          if Aws::Endpoints::Matchers.boolean_equals?(use_fips, true)
+            if Aws::Endpoints::Matchers.boolean_equals?(true, Aws::Endpoints::Matchers.attr(partition_result, "supportsFIPS"))
+              return Aws::Endpoints::Endpoint.new(url: "https://dataexchange-fips.#{region}.#{partition_result['dnsSuffix']}", headers: {}, properties: {})
+            end
+            raise ArgumentError, "FIPS is enabled but this partition does not support FIPS"
+          end
+          if Aws::Endpoints::Matchers.boolean_equals?(use_dual_stack, true)
+            if Aws::Endpoints::Matchers.boolean_equals?(true, Aws::Endpoints::Matchers.attr(partition_result, "supportsDualStack"))
+              return Aws::Endpoints::Endpoint.new(url: "https://dataexchange.#{region}.#{partition_result['dualStackDnsSuffix']}", headers: {}, properties: {})
+            end
+            raise ArgumentError, "DualStack is enabled but this partition does not support DualStack"
           end
-          raise ArgumentError, "DualStack is enabled but this partition does not support DualStack"
+          return Aws::Endpoints::Endpoint.new(url: "https://dataexchange.#{region}.#{partition_result['dnsSuffix']}", headers: {}, properties: {})
         end
-        return Aws::Endpoints::Endpoint.new(url: "https://dataexchange.#{region}.#{partition_result['dnsSuffix']}", headers: {}, properties: {})
       end
+      raise ArgumentError, "Invalid Configuration: Missing Region"
       raise ArgumentError, 'No endpoint could be resolved'
 
     end

data/lib/aws-sdk-dataexchange/types.rb

@@ -2036,6 +2036,25 @@ module Aws::DataExchange
       include Aws::Structure
     end
 
+    # The Amazon Resource Name (ARN) of the AWS KMS key used to encrypt the
+    # shared S3 objects.
+    #
+    # @!attribute [rw] kms_key_arn
+    #   The AWS KMS CMK (Key Management System Customer Managed Key) used to
+    #   encrypt S3 objects in the shared S3 Bucket. AWS Data exchange will
+    #   create a KMS grant for each subscriber to allow them to access and
+    #   decrypt their entitled data that is encrypted using this KMS key
+    #   specified.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/dataexchange-2017-07-25/KmsKeyToGrant AWS API Documentation
+    #
+    class KmsKeyToGrant < Struct.new(
+      :kms_key_arn)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Details about the AWS Lake Formation resource (Table or Database)
     # included in the AWS Lake Formation data permission.
     #
@@ -2813,6 +2832,13 @@ module Aws::DataExchange
     #   their entitled data using the S3 Access Point ARN.
     #   @return [String]
     #
+    # @!attribute [rw] kms_keys_to_grant
+    #   List of AWS KMS CMKs (Key Management System Customer Managed Keys)
+    #   and ARNs used to encrypt S3 objects being shared in this S3 Data
+    #   Access asset. Providers must include all AWS KMS keys used to
+    #   encrypt these shared S3 objects.
+    #   @return [Array<Types::KmsKeyToGrant>]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/dataexchange-2017-07-25/S3DataAccessAsset AWS API Documentation
     #
     class S3DataAccessAsset < Struct.new(
@@ -2820,7 +2846,8 @@ module Aws::DataExchange
       :key_prefixes,
       :keys,
       :s3_access_point_alias,
-      :s3_access_point_arn)
+      :s3_access_point_arn,
+      :kms_keys_to_grant)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -2841,12 +2868,19 @@ module Aws::DataExchange
     #   The keys used to create the Amazon S3 data access.
     #   @return [Array<String>]
     #
+    # @!attribute [rw] kms_keys_to_grant
+    #   List of AWS KMS CMKs (Key Management System Customer Managed Keys)
+    #   and ARNs used to encrypt S3 objects being shared in this S3 Data
+    #   Access asset.
+    #   @return [Array<Types::KmsKeyToGrant>]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/dataexchange-2017-07-25/S3DataAccessAssetSourceEntry AWS API Documentation
     #
     class S3DataAccessAssetSourceEntry < Struct.new(
       :bucket,
       :key_prefixes,
-      :keys)
+      :keys,
+      :kms_keys_to_grant)
       SENSITIVE = []
       include Aws::Structure
     end

data/lib/aws-sdk-dataexchange.rb

@@ -53,6 +53,6 @@ require_relative 'aws-sdk-dataexchange/customizations'
 # @!group service
 module Aws::DataExchange
 
-  GEM_VERSION = '1.30.0'
+  GEM_VERSION = '1.31.0'
 
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-dataexchange
 version: !ruby/object:Gem::Version
-  version: 1.30.0
+  version: 1.31.0
 platform: ruby
 authors:
 - Amazon Web Services
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2023-01-18 00:00:00.000000000 Z
+date: 2023-03-14 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-core