aws-sdk-datasync 1.136.0 → 1.137.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 8128c756ee86fb84a21d9d8309cd7f663297143c86d2ecd6f734f1edf15bd45b
-  data.tar.gz: bb2d7b944a333528ede95e44a89d912dd6289a56085e356c6e7db8cadfe9405a
+  metadata.gz: cf4d644731181160600c86c58338ba497252bf70d97eede4e062163081538ddf
+  data.tar.gz: 10766e871f6df3689b7f15b4833e783d4353c44f175207cd0fe1aa7fd2049e05
 SHA512:
-  metadata.gz: 2c577d206c91c107bf8aa6d28e009c836b9a6924170b1a353b9597d24bbd7a22ebc8e9f5b3c58c1b9ad27d34e8e797007bff91a00a1b3ae2c986109688097cf6
-  data.tar.gz: 37d97c0d08a8f8b0cdcaf7afa16608d90f8d2c7a0317c530d0b7db139e7dca0e5e15a0770402cf45d2e1b9e3cfd5803c332dc49bf11bfa545be1bd706010e119
+  metadata.gz: cf7504491a903b43a49487d4c76b11f41baf599d568512cee477f44e5a719a94827f2bf3f1d90d36905144edbf680540c26bbee2857df2735d8ed32b26516311
+  data.tar.gz: ddfb60a470427e1f7c01c0dd17bd0deabd3ec1b3734102c5ce0d76e996beacfe88e3d0407ab705264c53398bb7977336ef10ad667340ccd9e9ece8e206e634e1

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.137.0 (2026-11-05)
+------------------
+
+* Feature - Adds support for federated identity on Azure Blob Storage and object storage locations, enabling DataSync to authenticate to Azure and Google Cloud Storage using Workload Identity Federation (WIF) over OpenID Connect (OIDC) instead of stored long-lived credentials.
+
 1.136.0 (2026-11-04)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.136.0
+1.137.0

data/lib/aws-sdk-datasync/client.rb

@@ -647,7 +647,7 @@ module Aws::DataSync
     # @option params [required, String] :authentication_type
     #   Specifies the authentication method DataSync uses to access your Azure
     #   Blob Storage. DataSync can access blob storage using a shared access
-    #   signature (SAS).
+    #   signature (SAS) or an OpenID Connect (OIDC) token.
     #
     # @option params [Types::AzureBlobSasConfiguration] :sas_configuration
     #   Specifies the SAS configuration that allows DataSync to access your
@@ -660,6 +660,12 @@ module Aws::DataSync
     #
     #    </note>
     #
+    # @option params [Types::AzureFederatedIdentityConfig] :federated_identity
+    #   Specifies the federated identity configuration that allows DataSync to
+    #   access your Azure Blob Storage using an OpenID Connect (OIDC) token
+    #   instead of a shared access signature (SAS). Provide either
+    #   `FederatedIdentity` or `SasConfiguration`, but not both.
+    #
     # @option params [String] :blob_type
     #   Specifies the type of blob that you want your objects or files to be
     #   when transferring them into Azure Blob Storage. Currently, DataSync
@@ -761,10 +767,17 @@ module Aws::DataSync
     #
     #   resp = client.create_location_azure_blob({
     #     container_url: "AzureBlobContainerUrl", # required
-    #     authentication_type: "SAS", # required, accepts SAS, NONE
+    #     authentication_type: "SAS", # required, accepts SAS, NONE, OIDC
     #     sas_configuration: {
     #       token: "AzureBlobSasToken", # required
     #     },
+    #     federated_identity: {
+    #       aws_iam_role: "IamRoleArn",
+    #       azure_oidc: {
+    #         tenant_id: "AzureGuidString", # required
+    #         client_id: "AzureGuidString", # required
+    #       },
+    #     },
     #     blob_type: "BLOCK", # accepts BLOCK
     #     access_tier: "HOT", # accepts HOT, COOL, ARCHIVE
     #     subdirectory: "AzureBlobSubdirectory",
@@ -1683,6 +1696,13 @@ module Aws::DataSync
     #
     #    </note>
     #
+    # @option params [Types::ObjectStorageFederatedIdentityConfig] :federated_identity
+    #   Specifies the federated identity configuration that allows DataSync to
+    #   access your object storage using an OpenID Connect (OIDC) token
+    #   instead of a long-term access key and secret key. Provide either
+    #   `FederatedIdentity` or the `AccessKey`/`SecretKey` credentials, but
+    #   not both.
+    #
     # @option params [Array<String>] :agent_arns
     #   (Optional) Specifies the Amazon Resource Names (ARNs) of the DataSync
     #   agents that can connect with your object storage system. If you are
@@ -1784,6 +1804,17 @@ module Aws::DataSync
     #     bucket_name: "ObjectStorageBucketName", # required
     #     access_key: "ObjectStorageAccessKey",
     #     secret_key: "ObjectStorageSecretKey",
+    #     federated_identity: {
+    #       aws_iam_role: "IamRoleArn",
+    #       external_identity: {
+    #         google_oidc: {
+    #           project_name: "ProjectNameString", # required
+    #           project_number: "ProjectNumberString", # required
+    #           identity_pool_name: "GoogleIdentityFederationResourceString", # required
+    #           identity_provider_name: "GoogleIdentityFederationResourceString", # required
+    #         },
+    #       },
+    #     },
     #     agent_arns: ["AgentArn"],
     #     tags: [
     #       {
@@ -2268,9 +2299,7 @@ module Aws::DataSync
     #     higher performance than Basic mode. Enhanced mode tasks optimize the
     #     data transfer process by listing, preparing, transferring, and
     #     verifying data in parallel. Enhanced mode is currently available for
-    #     transfers between Amazon S3 locations, transfers between Azure Blob
-    #     and Amazon S3 without an agent, and transfers between other clouds
-    #     and Amazon S3 without an agent.
+    #     all transfers except those that use Amazon S3 on Outposts.
     #
     #     <note markdown="1"> To create an Enhanced mode task, the IAM role that you use to call
     #     the `CreateTask` operation must have the
@@ -2538,6 +2567,7 @@ module Aws::DataSync
     #   * {Types::DescribeLocationAzureBlobResponse#location_arn #location_arn} => String
     #   * {Types::DescribeLocationAzureBlobResponse#location_uri #location_uri} => String
     #   * {Types::DescribeLocationAzureBlobResponse#authentication_type #authentication_type} => String
+    #   * {Types::DescribeLocationAzureBlobResponse#federated_identity #federated_identity} => Types::AzureFederatedIdentityConfig
     #   * {Types::DescribeLocationAzureBlobResponse#blob_type #blob_type} => String
     #   * {Types::DescribeLocationAzureBlobResponse#access_tier #access_tier} => String
     #   * {Types::DescribeLocationAzureBlobResponse#agent_arns #agent_arns} => Array&lt;String&gt;
@@ -2556,7 +2586,10 @@ module Aws::DataSync
     #
     #   resp.location_arn #=> String
     #   resp.location_uri #=> String
-    #   resp.authentication_type #=> String, one of "SAS", "NONE"
+    #   resp.authentication_type #=> String, one of "SAS", "NONE", "OIDC"
+    #   resp.federated_identity.aws_iam_role #=> String
+    #   resp.federated_identity.azure_oidc.tenant_id #=> String
+    #   resp.federated_identity.azure_oidc.client_id #=> String
     #   resp.blob_type #=> String, one of "BLOCK"
     #   resp.access_tier #=> String, one of "HOT", "COOL", "ARCHIVE"
     #   resp.agent_arns #=> Array
@@ -2931,6 +2964,7 @@ module Aws::DataSync
     #   * {Types::DescribeLocationObjectStorageResponse#location_arn #location_arn} => String
     #   * {Types::DescribeLocationObjectStorageResponse#location_uri #location_uri} => String
     #   * {Types::DescribeLocationObjectStorageResponse#access_key #access_key} => String
+    #   * {Types::DescribeLocationObjectStorageResponse#federated_identity #federated_identity} => Types::ObjectStorageFederatedIdentityConfig
     #   * {Types::DescribeLocationObjectStorageResponse#server_port #server_port} => Integer
     #   * {Types::DescribeLocationObjectStorageResponse#server_protocol #server_protocol} => String
     #   * {Types::DescribeLocationObjectStorageResponse#agent_arns #agent_arns} => Array&lt;String&gt;
@@ -2951,6 +2985,11 @@ module Aws::DataSync
     #   resp.location_arn #=> String
     #   resp.location_uri #=> String
     #   resp.access_key #=> String
+    #   resp.federated_identity.aws_iam_role #=> String
+    #   resp.federated_identity.external_identity.google_oidc.project_name #=> String
+    #   resp.federated_identity.external_identity.google_oidc.project_number #=> String
+    #   resp.federated_identity.external_identity.google_oidc.identity_pool_name #=> String
+    #   resp.federated_identity.external_identity.google_oidc.identity_provider_name #=> String
     #   resp.server_port #=> Integer
     #   resp.server_protocol #=> String, one of "HTTPS", "HTTP"
     #   resp.agent_arns #=> Array
@@ -3348,19 +3387,6 @@ module Aws::DataSync
     # response contains a marker that you can specify in your next request
     # to fetch the next page of agents.
     #
-    # `ListAgents` is eventually consistent. This means the result of
-    # running the operation might not reflect that you just created or
-    # deleted an agent. For example, if you create an agent with
-    # [CreateAgent][1] and then immediately run `ListAgents`, that agent
-    # might not show up in the list right away. In situations like this, you
-    # can always confirm whether an agent has been created (or deleted) by
-    # using [DescribeAgent][2].
-    #
-    #
-    #
-    # [1]: https://docs.aws.amazon.com/datasync/latest/userguide/API_CreateAgent.html
-    # [2]: https://docs.aws.amazon.com/datasync/latest/userguide/API_DescribeAgent.html
-    #
     # @option params [Integer] :max_results
     #   Specifies the maximum number of DataSync agents to list in a response.
     #   By default, a response shows a maximum of 100 agents.
@@ -3901,12 +3927,18 @@ module Aws::DataSync
     # @option params [String] :authentication_type
     #   Specifies the authentication method DataSync uses to access your Azure
     #   Blob Storage. DataSync can access blob storage using a shared access
-    #   signature (SAS).
+    #   signature (SAS) or an OpenID Connect (OIDC) token.
     #
     # @option params [Types::AzureBlobSasConfiguration] :sas_configuration
     #   Specifies the SAS configuration that allows DataSync to access your
     #   Azure Blob Storage.
     #
+    # @option params [Types::AzureFederatedIdentityConfig] :federated_identity
+    #   Specifies the federated identity configuration that allows DataSync to
+    #   access your Azure Blob Storage using an OpenID Connect (OIDC) token
+    #   instead of a shared access signature (SAS). Provide either
+    #   `FederatedIdentity` or `SasConfiguration`, but not both.
+    #
     # @option params [String] :blob_type
     #   Specifies the type of blob that you want your objects or files to be
     #   when transferring them into Azure Blob Storage. Currently, DataSync
@@ -3965,10 +3997,17 @@ module Aws::DataSync
     #   resp = client.update_location_azure_blob({
     #     location_arn: "LocationArn", # required
     #     subdirectory: "AzureBlobSubdirectory",
-    #     authentication_type: "SAS", # accepts SAS, NONE
+    #     authentication_type: "SAS", # accepts SAS, NONE, OIDC
     #     sas_configuration: {
     #       token: "AzureBlobSasToken", # required
     #     },
+    #     federated_identity: {
+    #       aws_iam_role: "IamRoleArn",
+    #       azure_oidc: {
+    #         tenant_id: "AzureGuidString", # required
+    #         client_id: "AzureGuidString", # required
+    #       },
+    #     },
     #     blob_type: "BLOCK", # accepts BLOCK
     #     access_tier: "HOT", # accepts HOT, COOL, ARCHIVE
     #     agent_arns: ["AgentArn"],
@@ -4585,6 +4624,13 @@ module Aws::DataSync
     #
     #    </note>
     #
+    # @option params [Types::ObjectStorageFederatedIdentityConfig] :federated_identity
+    #   Specifies the federated identity configuration that allows DataSync to
+    #   access your object storage using an OpenID Connect (OIDC) token
+    #   instead of a long-term access key and secret key. Provide either
+    #   `FederatedIdentity` or the `AccessKey`/`SecretKey` credentials, but
+    #   not both.
+    #
     # @option params [Array<String>] :agent_arns
     #   (Optional) Specifies the Amazon Resource Names (ARNs) of the DataSync
     #   agents that can connect with your object storage system. If you are
@@ -4649,6 +4695,17 @@ module Aws::DataSync
     #     server_hostname: "ServerHostname",
     #     access_key: "ObjectStorageAccessKey",
     #     secret_key: "ObjectStorageSecretKey",
+    #     federated_identity: {
+    #       aws_iam_role: "IamRoleArn",
+    #       external_identity: {
+    #         google_oidc: {
+    #           project_name: "ProjectNameString", # required
+    #           project_number: "ProjectNumberString", # required
+    #           identity_pool_name: "GoogleIdentityFederationResourceString", # required
+    #           identity_provider_name: "GoogleIdentityFederationResourceString", # required
+    #         },
+    #       },
+    #     },
     #     agent_arns: ["AgentArn"],
     #     server_certificate: "data",
     #     cmk_secret_config: {
@@ -5203,7 +5260,7 @@ module Aws::DataSync
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-datasync'
-      context[:gem_version] = '1.136.0'
+      context[:gem_version] = '1.137.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-datasync/client_api.rb

@@ -29,6 +29,9 @@ module Aws::DataSync
     AzureBlobSasToken = Shapes::StringShape.new(name: 'AzureBlobSasToken')
     AzureBlobSubdirectory = Shapes::StringShape.new(name: 'AzureBlobSubdirectory')
     AzureBlobType = Shapes::StringShape.new(name: 'AzureBlobType')
+    AzureFederatedIdentityConfig = Shapes::StructureShape.new(name: 'AzureFederatedIdentityConfig')
+    AzureGuidString = Shapes::StringShape.new(name: 'AzureGuidString')
+    AzureOidcConfig = Shapes::StructureShape.new(name: 'AzureOidcConfig')
     BytesPerSecond = Shapes::IntegerShape.new(name: 'BytesPerSecond')
     CancelTaskExecutionRequest = Shapes::StructureShape.new(name: 'CancelTaskExecutionRequest')
     CancelTaskExecutionResponse = Shapes::StructureShape.new(name: 'CancelTaskExecutionResponse')
@@ -124,6 +127,8 @@ module Aws::DataSync
     FsxUpdateProtocolSmb = Shapes::StructureShape.new(name: 'FsxUpdateProtocolSmb')
     FsxWindowsSubdirectory = Shapes::StringShape.new(name: 'FsxWindowsSubdirectory')
     Gid = Shapes::StringShape.new(name: 'Gid')
+    GoogleIdentityFederationResourceString = Shapes::StringShape.new(name: 'GoogleIdentityFederationResourceString')
+    GoogleOidcConfig = Shapes::StructureShape.new(name: 'GoogleOidcConfig')
     HdfsAuthenticationType = Shapes::StringShape.new(name: 'HdfsAuthenticationType')
     HdfsBlockSize = Shapes::IntegerShape.new(name: 'HdfsBlockSize')
     HdfsDataTransferProtection = Shapes::StringShape.new(name: 'HdfsDataTransferProtection')
@@ -180,6 +185,8 @@ module Aws::DataSync
     ObjectStorageAccessKey = Shapes::StringShape.new(name: 'ObjectStorageAccessKey')
     ObjectStorageBucketName = Shapes::StringShape.new(name: 'ObjectStorageBucketName')
     ObjectStorageCertificate = Shapes::BlobShape.new(name: 'ObjectStorageCertificate')
+    ObjectStorageExternalIdentityConfig = Shapes::StructureShape.new(name: 'ObjectStorageExternalIdentityConfig')
+    ObjectStorageFederatedIdentityConfig = Shapes::StructureShape.new(name: 'ObjectStorageFederatedIdentityConfig')
     ObjectStorageSecretKey = Shapes::StringShape.new(name: 'ObjectStorageSecretKey')
     ObjectStorageServerPort = Shapes::IntegerShape.new(name: 'ObjectStorageServerPort')
     ObjectStorageServerProtocol = Shapes::StringShape.new(name: 'ObjectStorageServerProtocol')
@@ -198,6 +205,8 @@ module Aws::DataSync
     PreserveDeletedFiles = Shapes::StringShape.new(name: 'PreserveDeletedFiles')
     PreserveDevices = Shapes::StringShape.new(name: 'PreserveDevices')
     PrivateLinkConfig = Shapes::StructureShape.new(name: 'PrivateLinkConfig')
+    ProjectNameString = Shapes::StringShape.new(name: 'ProjectNameString')
+    ProjectNumberString = Shapes::StringShape.new(name: 'ProjectNumberString')
     QopConfiguration = Shapes::StructureShape.new(name: 'QopConfiguration')
     ReportDestination = Shapes::StructureShape.new(name: 'ReportDestination')
     ReportDestinationS3 = Shapes::StructureShape.new(name: 'ReportDestinationS3')
@@ -314,6 +323,14 @@ module Aws::DataSync
     AzureBlobSasConfiguration.add_member(:token, Shapes::ShapeRef.new(shape: AzureBlobSasToken, required: true, location_name: "Token"))
     AzureBlobSasConfiguration.struct_class = Types::AzureBlobSasConfiguration
 
+    AzureFederatedIdentityConfig.add_member(:aws_iam_role, Shapes::ShapeRef.new(shape: IamRoleArn, location_name: "AwsIamRole"))
+    AzureFederatedIdentityConfig.add_member(:azure_oidc, Shapes::ShapeRef.new(shape: AzureOidcConfig, location_name: "AzureOidc"))
+    AzureFederatedIdentityConfig.struct_class = Types::AzureFederatedIdentityConfig
+
+    AzureOidcConfig.add_member(:tenant_id, Shapes::ShapeRef.new(shape: AzureGuidString, required: true, location_name: "TenantId"))
+    AzureOidcConfig.add_member(:client_id, Shapes::ShapeRef.new(shape: AzureGuidString, required: true, location_name: "ClientId"))
+    AzureOidcConfig.struct_class = Types::AzureOidcConfig
+
     CancelTaskExecutionRequest.add_member(:task_execution_arn, Shapes::ShapeRef.new(shape: TaskExecutionArn, required: true, location_name: "TaskExecutionArn"))
     CancelTaskExecutionRequest.struct_class = Types::CancelTaskExecutionRequest
 
@@ -337,6 +354,7 @@ module Aws::DataSync
     CreateLocationAzureBlobRequest.add_member(:container_url, Shapes::ShapeRef.new(shape: AzureBlobContainerUrl, required: true, location_name: "ContainerUrl"))
     CreateLocationAzureBlobRequest.add_member(:authentication_type, Shapes::ShapeRef.new(shape: AzureBlobAuthenticationType, required: true, location_name: "AuthenticationType"))
     CreateLocationAzureBlobRequest.add_member(:sas_configuration, Shapes::ShapeRef.new(shape: AzureBlobSasConfiguration, location_name: "SasConfiguration"))
+    CreateLocationAzureBlobRequest.add_member(:federated_identity, Shapes::ShapeRef.new(shape: AzureFederatedIdentityConfig, location_name: "FederatedIdentity"))
     CreateLocationAzureBlobRequest.add_member(:blob_type, Shapes::ShapeRef.new(shape: AzureBlobType, location_name: "BlobType"))
     CreateLocationAzureBlobRequest.add_member(:access_tier, Shapes::ShapeRef.new(shape: AzureAccessTier, location_name: "AccessTier"))
     CreateLocationAzureBlobRequest.add_member(:subdirectory, Shapes::ShapeRef.new(shape: AzureBlobSubdirectory, location_name: "Subdirectory"))
@@ -441,6 +459,7 @@ module Aws::DataSync
     CreateLocationObjectStorageRequest.add_member(:bucket_name, Shapes::ShapeRef.new(shape: ObjectStorageBucketName, required: true, location_name: "BucketName"))
     CreateLocationObjectStorageRequest.add_member(:access_key, Shapes::ShapeRef.new(shape: ObjectStorageAccessKey, location_name: "AccessKey"))
     CreateLocationObjectStorageRequest.add_member(:secret_key, Shapes::ShapeRef.new(shape: ObjectStorageSecretKey, location_name: "SecretKey"))
+    CreateLocationObjectStorageRequest.add_member(:federated_identity, Shapes::ShapeRef.new(shape: ObjectStorageFederatedIdentityConfig, location_name: "FederatedIdentity"))
     CreateLocationObjectStorageRequest.add_member(:agent_arns, Shapes::ShapeRef.new(shape: AgentArnList, location_name: "AgentArns"))
     CreateLocationObjectStorageRequest.add_member(:tags, Shapes::ShapeRef.new(shape: InputTagList, location_name: "Tags"))
     CreateLocationObjectStorageRequest.add_member(:server_certificate, Shapes::ShapeRef.new(shape: ObjectStorageCertificate, location_name: "ServerCertificate"))
@@ -537,6 +556,7 @@ module Aws::DataSync
     DescribeLocationAzureBlobResponse.add_member(:location_arn, Shapes::ShapeRef.new(shape: LocationArn, location_name: "LocationArn"))
     DescribeLocationAzureBlobResponse.add_member(:location_uri, Shapes::ShapeRef.new(shape: LocationUri, location_name: "LocationUri"))
     DescribeLocationAzureBlobResponse.add_member(:authentication_type, Shapes::ShapeRef.new(shape: AzureBlobAuthenticationType, location_name: "AuthenticationType"))
+    DescribeLocationAzureBlobResponse.add_member(:federated_identity, Shapes::ShapeRef.new(shape: AzureFederatedIdentityConfig, location_name: "FederatedIdentity"))
     DescribeLocationAzureBlobResponse.add_member(:blob_type, Shapes::ShapeRef.new(shape: AzureBlobType, location_name: "BlobType"))
     DescribeLocationAzureBlobResponse.add_member(:access_tier, Shapes::ShapeRef.new(shape: AzureAccessTier, location_name: "AccessTier"))
     DescribeLocationAzureBlobResponse.add_member(:agent_arns, Shapes::ShapeRef.new(shape: AgentArnList, location_name: "AgentArns"))
@@ -639,6 +659,7 @@ module Aws::DataSync
     DescribeLocationObjectStorageResponse.add_member(:location_arn, Shapes::ShapeRef.new(shape: LocationArn, location_name: "LocationArn"))
     DescribeLocationObjectStorageResponse.add_member(:location_uri, Shapes::ShapeRef.new(shape: LocationUri, location_name: "LocationUri"))
     DescribeLocationObjectStorageResponse.add_member(:access_key, Shapes::ShapeRef.new(shape: ObjectStorageAccessKey, location_name: "AccessKey"))
+    DescribeLocationObjectStorageResponse.add_member(:federated_identity, Shapes::ShapeRef.new(shape: ObjectStorageFederatedIdentityConfig, location_name: "FederatedIdentity"))
     DescribeLocationObjectStorageResponse.add_member(:server_port, Shapes::ShapeRef.new(shape: ObjectStorageServerPort, location_name: "ServerPort"))
     DescribeLocationObjectStorageResponse.add_member(:server_protocol, Shapes::ShapeRef.new(shape: ObjectStorageServerProtocol, location_name: "ServerProtocol"))
     DescribeLocationObjectStorageResponse.add_member(:agent_arns, Shapes::ShapeRef.new(shape: AgentArnList, location_name: "AgentArns"))
@@ -789,6 +810,12 @@ module Aws::DataSync
     FsxUpdateProtocolSmb.add_member(:custom_secret_config, Shapes::ShapeRef.new(shape: CustomSecretConfig, location_name: "CustomSecretConfig"))
     FsxUpdateProtocolSmb.struct_class = Types::FsxUpdateProtocolSmb
 
+    GoogleOidcConfig.add_member(:project_name, Shapes::ShapeRef.new(shape: ProjectNameString, required: true, location_name: "ProjectName"))
+    GoogleOidcConfig.add_member(:project_number, Shapes::ShapeRef.new(shape: ProjectNumberString, required: true, location_name: "ProjectNumber"))
+    GoogleOidcConfig.add_member(:identity_pool_name, Shapes::ShapeRef.new(shape: GoogleIdentityFederationResourceString, required: true, location_name: "IdentityPoolName"))
+    GoogleOidcConfig.add_member(:identity_provider_name, Shapes::ShapeRef.new(shape: GoogleIdentityFederationResourceString, required: true, location_name: "IdentityProviderName"))
+    GoogleOidcConfig.struct_class = Types::GoogleOidcConfig
+
     HdfsNameNode.add_member(:hostname, Shapes::ShapeRef.new(shape: HdfsServerHostname, required: true, location_name: "Hostname"))
     HdfsNameNode.add_member(:port, Shapes::ShapeRef.new(shape: HdfsServerPort, required: true, location_name: "Port"))
     HdfsNameNode.struct_class = Types::HdfsNameNode
@@ -874,6 +901,13 @@ module Aws::DataSync
     NfsMountOptions.add_member(:version, Shapes::ShapeRef.new(shape: NfsVersion, location_name: "Version"))
     NfsMountOptions.struct_class = Types::NfsMountOptions
 
+    ObjectStorageExternalIdentityConfig.add_member(:google_oidc, Shapes::ShapeRef.new(shape: GoogleOidcConfig, location_name: "GoogleOidc"))
+    ObjectStorageExternalIdentityConfig.struct_class = Types::ObjectStorageExternalIdentityConfig
+
+    ObjectStorageFederatedIdentityConfig.add_member(:aws_iam_role, Shapes::ShapeRef.new(shape: IamRoleArn, location_name: "AwsIamRole"))
+    ObjectStorageFederatedIdentityConfig.add_member(:external_identity, Shapes::ShapeRef.new(shape: ObjectStorageExternalIdentityConfig, location_name: "ExternalIdentity"))
+    ObjectStorageFederatedIdentityConfig.struct_class = Types::ObjectStorageFederatedIdentityConfig
+
     OnPremConfig.add_member(:agent_arns, Shapes::ShapeRef.new(shape: AgentArnList, required: true, location_name: "AgentArns"))
     OnPremConfig.struct_class = Types::OnPremConfig
 
@@ -1063,6 +1097,7 @@ module Aws::DataSync
     UpdateLocationAzureBlobRequest.add_member(:subdirectory, Shapes::ShapeRef.new(shape: AzureBlobSubdirectory, location_name: "Subdirectory"))
     UpdateLocationAzureBlobRequest.add_member(:authentication_type, Shapes::ShapeRef.new(shape: AzureBlobAuthenticationType, location_name: "AuthenticationType"))
     UpdateLocationAzureBlobRequest.add_member(:sas_configuration, Shapes::ShapeRef.new(shape: AzureBlobSasConfiguration, location_name: "SasConfiguration"))
+    UpdateLocationAzureBlobRequest.add_member(:federated_identity, Shapes::ShapeRef.new(shape: AzureFederatedIdentityConfig, location_name: "FederatedIdentity"))
     UpdateLocationAzureBlobRequest.add_member(:blob_type, Shapes::ShapeRef.new(shape: AzureBlobType, location_name: "BlobType"))
     UpdateLocationAzureBlobRequest.add_member(:access_tier, Shapes::ShapeRef.new(shape: AzureAccessTier, location_name: "AccessTier"))
     UpdateLocationAzureBlobRequest.add_member(:agent_arns, Shapes::ShapeRef.new(shape: AgentArnList, location_name: "AgentArns"))
@@ -1147,6 +1182,7 @@ module Aws::DataSync
     UpdateLocationObjectStorageRequest.add_member(:server_hostname, Shapes::ShapeRef.new(shape: ServerHostname, location_name: "ServerHostname"))
     UpdateLocationObjectStorageRequest.add_member(:access_key, Shapes::ShapeRef.new(shape: ObjectStorageAccessKey, location_name: "AccessKey"))
     UpdateLocationObjectStorageRequest.add_member(:secret_key, Shapes::ShapeRef.new(shape: ObjectStorageSecretKey, location_name: "SecretKey"))
+    UpdateLocationObjectStorageRequest.add_member(:federated_identity, Shapes::ShapeRef.new(shape: ObjectStorageFederatedIdentityConfig, location_name: "FederatedIdentity"))
     UpdateLocationObjectStorageRequest.add_member(:agent_arns, Shapes::ShapeRef.new(shape: AgentArnList, location_name: "AgentArns"))
     UpdateLocationObjectStorageRequest.add_member(:server_certificate, Shapes::ShapeRef.new(shape: ObjectStorageCertificate, location_name: "ServerCertificate"))
     UpdateLocationObjectStorageRequest.add_member(:cmk_secret_config, Shapes::ShapeRef.new(shape: CmkSecretConfig, location_name: "CmkSecretConfig"))

data/lib/aws-sdk-datasync/types.rb

@@ -85,6 +85,59 @@ module Aws::DataSync
       include Aws::Structure
     end
 
+    # Specifies federated identity parameters that allow DataSync to obtain
+    # an OpenID Connect token for access to customer Azure Blob Storage. The
+    # token allows for temporary, short-term access to the storage. DataSync
+    # automatically refreshes the token to assure uninterrupted access to
+    # the storage.
+    #
+    # <note markdown="1"> Federated identity parameters are an alternative to the
+    # `SasConfiguration` credentials that are expected to be valid long-term
+    # (e.g. at least for the duration of DataSync task execution). Do not
+    # specify federated identity and the SAS configuration for the same
+    # Azure Blob location.
+    #
+    #  </note>
+    #
+    # @!attribute [rw] aws_iam_role
+    #   Specifies the ARN for an Amazon Web Services role that allows
+    #   DataSync to invoke STS GetWebIdentityToken API on behalf of the
+    #   customer account and to obtain Amazon Web Services STS JWT (web
+    #   token).
+    #   @return [String]
+    #
+    # @!attribute [rw] azure_oidc
+    #   External identity parameters for Azure Blob Storage.
+    #   @return [Types::AzureOidcConfig]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/datasync-2018-11-09/AzureFederatedIdentityConfig AWS API Documentation
+    #
+    class AzureFederatedIdentityConfig < Struct.new(
+      :aws_iam_role,
+      :azure_oidc)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # External identity parameters for Azure Blob Storage.
+    #
+    # @!attribute [rw] tenant_id
+    #   Azure tenant ID string.
+    #   @return [String]
+    #
+    # @!attribute [rw] client_id
+    #   Azure client ID string.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/datasync-2018-11-09/AzureOidcConfig AWS API Documentation
+    #
+    class AzureOidcConfig < Struct.new(
+      :tenant_id,
+      :client_id)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # CancelTaskExecutionRequest
     #
     # @!attribute [rw] task_execution_arn
@@ -248,7 +301,7 @@ module Aws::DataSync
     # @!attribute [rw] authentication_type
     #   Specifies the authentication method DataSync uses to access your
     #   Azure Blob Storage. DataSync can access blob storage using a shared
-    #   access signature (SAS).
+    #   access signature (SAS) or an OpenID Connect (OIDC) token.
     #   @return [String]
     #
     # @!attribute [rw] sas_configuration
@@ -263,6 +316,13 @@ module Aws::DataSync
     #    </note>
     #   @return [Types::AzureBlobSasConfiguration]
     #
+    # @!attribute [rw] federated_identity
+    #   Specifies the federated identity configuration that allows DataSync
+    #   to access your Azure Blob Storage using an OpenID Connect (OIDC)
+    #   token instead of a shared access signature (SAS). Provide either
+    #   `FederatedIdentity` or `SasConfiguration`, but not both.
+    #   @return [Types::AzureFederatedIdentityConfig]
+    #
     # @!attribute [rw] blob_type
     #   Specifies the type of blob that you want your objects or files to be
     #   when transferring them into Azure Blob Storage. Currently, DataSync
@@ -370,6 +430,7 @@ module Aws::DataSync
       :container_url,
       :authentication_type,
       :sas_configuration,
+      :federated_identity,
       :blob_type,
       :access_tier,
       :subdirectory,
@@ -1127,6 +1188,14 @@ module Aws::DataSync
     #    </note>
     #   @return [String]
     #
+    # @!attribute [rw] federated_identity
+    #   Specifies the federated identity configuration that allows DataSync
+    #   to access your object storage using an OpenID Connect (OIDC) token
+    #   instead of a long-term access key and secret key. Provide either
+    #   `FederatedIdentity` or the `AccessKey`/`SecretKey` credentials, but
+    #   not both.
+    #   @return [Types::ObjectStorageFederatedIdentityConfig]
+    #
     # @!attribute [rw] agent_arns
     #   (Optional) Specifies the Amazon Resource Names (ARNs) of the
     #   DataSync agents that can connect with your object storage system. If
@@ -1230,6 +1299,7 @@ module Aws::DataSync
       :bucket_name,
       :access_key,
       :secret_key,
+      :federated_identity,
       :agent_arns,
       :tags,
       :server_certificate,
@@ -1688,9 +1758,7 @@ module Aws::DataSync
     #     higher performance than Basic mode. Enhanced mode tasks optimize
     #     the data transfer process by listing, preparing, transferring, and
     #     verifying data in parallel. Enhanced mode is currently available
-    #     for transfers between Amazon S3 locations, transfers between Azure
-    #     Blob and Amazon S3 without an agent, and transfers between other
-    #     clouds and Amazon S3 without an agent.
+    #     for all transfers except those that use Amazon S3 on Outposts.
     #
     #     <note markdown="1"> To create an Enhanced mode task, the IAM role that you use to call
     #     the `CreateTask` operation must have the
@@ -1950,9 +2018,14 @@ module Aws::DataSync
     # @!attribute [rw] authentication_type
     #   The authentication method DataSync uses to access your Azure Blob
     #   Storage. DataSync can access blob storage using a shared access
-    #   signature (SAS).
+    #   signature (SAS) or an OpenID Connect (OIDC) token.
     #   @return [String]
     #
+    # @!attribute [rw] federated_identity
+    #   The federated identity configuration that DataSync uses to access
+    #   your Azure Blob Storage using an OpenID Connect (OIDC) token.
+    #   @return [Types::AzureFederatedIdentityConfig]
+    #
     # @!attribute [rw] blob_type
     #   The type of blob that you want your objects or files to be when
     #   transferring them into Azure Blob Storage. Currently, DataSync only
@@ -2010,6 +2083,7 @@ module Aws::DataSync
       :location_arn,
       :location_uri,
       :authentication_type,
+      :federated_identity,
       :blob_type,
       :access_tier,
       :agent_arns,
@@ -2528,6 +2602,11 @@ module Aws::DataSync
     #   with the object storage system.
     #   @return [String]
     #
+    # @!attribute [rw] federated_identity
+    #   The federated identity configuration that DataSync uses to access
+    #   your object storage using an OpenID Connect (OIDC) token.
+    #   @return [Types::ObjectStorageFederatedIdentityConfig]
+    #
     # @!attribute [rw] server_port
     #   The port that your object storage server accepts inbound network
     #   traffic on (for example, port 443).
@@ -2581,6 +2660,7 @@ module Aws::DataSync
       :location_arn,
       :location_uri,
       :access_key,
+      :federated_identity,
       :server_port,
       :server_protocol,
       :agent_arns,
@@ -3838,6 +3918,35 @@ module Aws::DataSync
       include Aws::Structure
     end
 
+    # External identity parameters for Google Cloud Storage.
+    #
+    # @!attribute [rw] project_name
+    #   Human-readable project name (e.g. "my-project").
+    #   @return [String]
+    #
+    # @!attribute [rw] project_number
+    #   Numeric project ID as a string (e.g. "123456789").
+    #   @return [String]
+    #
+    # @!attribute [rw] identity_pool_name
+    #   Human-readable pool name (e.g. "my-pool").
+    #   @return [String]
+    #
+    # @!attribute [rw] identity_provider_name
+    #   Human-readable provider name (e.g. "my-oidc-provider").
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/datasync-2018-11-09/GoogleOidcConfig AWS API Documentation
+    #
+    class GoogleOidcConfig < Struct.new(
+      :project_name,
+      :project_number,
+      :identity_pool_name,
+      :identity_provider_name)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # The NameNode of the Hadoop Distributed File System (HDFS). The
     # NameNode manages the file system's namespace. The NameNode performs
     # operations such as opening, closing, and renaming files and
@@ -4334,6 +4443,58 @@ module Aws::DataSync
       include Aws::Structure
     end
 
+    # Specifies cloud-provider-specific external identity parameters used
+    # when exchanging the Amazon Web Services web token for an OpenID
+    # Connect token at the object storage provider.
+    #
+    # @!attribute [rw] google_oidc
+    #   External identity parameters for Google Cloud Storage.
+    #   @return [Types::GoogleOidcConfig]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/datasync-2018-11-09/ObjectStorageExternalIdentityConfig AWS API Documentation
+    #
+    class ObjectStorageExternalIdentityConfig < Struct.new(
+      :google_oidc)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Specifies federated identity parameters that allow DataSync to obtain
+    # OpenID Connect token for access to customer object storage. The token
+    # allows for temporary, short-term access to the storage. DataSync
+    # automatically refreshes the token to assure uninterrupted access to
+    # the storage.
+    #
+    # <note markdown="1"> Federated identity parameters are an alternative to the
+    # `AccessKey`/`SecretKey` credentials that are expected to be valid
+    # long-term (e.g. at least for the duration of DataSync task execution).
+    # Do not specify federated identity and the key parameters for the same
+    # object storage location.
+    #
+    #  </note>
+    #
+    # @!attribute [rw] aws_iam_role
+    #   Specifies the ARN for an Amazon Web Services role that allows
+    #   DataSync to invoke STS GetWebIdentityToken API on behalf of the
+    #   customer account and to obtain Amazon Web Services STS JWT (web
+    #   token).
+    #   @return [String]
+    #
+    # @!attribute [rw] external_identity
+    #   Specifies cloud-provider-specific external identity parameters used
+    #   when exchanging the Amazon Web Services web token for an OpenID
+    #   Connect token at the object storage provider.
+    #   @return [Types::ObjectStorageExternalIdentityConfig]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/datasync-2018-11-09/ObjectStorageFederatedIdentityConfig AWS API Documentation
+    #
+    class ObjectStorageFederatedIdentityConfig < Struct.new(
+      :aws_iam_role,
+      :external_identity)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # The DataSync agents that can connect to your Network File System (NFS)
     # file server.
     #
@@ -5937,7 +6098,7 @@ module Aws::DataSync
     # @!attribute [rw] authentication_type
     #   Specifies the authentication method DataSync uses to access your
     #   Azure Blob Storage. DataSync can access blob storage using a shared
-    #   access signature (SAS).
+    #   access signature (SAS) or an OpenID Connect (OIDC) token.
     #   @return [String]
     #
     # @!attribute [rw] sas_configuration
@@ -5945,6 +6106,13 @@ module Aws::DataSync
     #   Azure Blob Storage.
     #   @return [Types::AzureBlobSasConfiguration]
     #
+    # @!attribute [rw] federated_identity
+    #   Specifies the federated identity configuration that allows DataSync
+    #   to access your Azure Blob Storage using an OpenID Connect (OIDC)
+    #   token instead of a shared access signature (SAS). Provide either
+    #   `FederatedIdentity` or `SasConfiguration`, but not both.
+    #   @return [Types::AzureFederatedIdentityConfig]
+    #
     # @!attribute [rw] blob_type
     #   Specifies the type of blob that you want your objects or files to be
     #   when transferring them into Azure Blob Storage. Currently, DataSync
@@ -6008,6 +6176,7 @@ module Aws::DataSync
       :subdirectory,
       :authentication_type,
       :sas_configuration,
+      :federated_identity,
       :blob_type,
       :access_tier,
       :agent_arns,
@@ -6473,6 +6642,14 @@ module Aws::DataSync
     #    </note>
     #   @return [String]
     #
+    # @!attribute [rw] federated_identity
+    #   Specifies the federated identity configuration that allows DataSync
+    #   to access your object storage using an OpenID Connect (OIDC) token
+    #   instead of a long-term access key and secret key. Provide either
+    #   `FederatedIdentity` or the `AccessKey`/`SecretKey` credentials, but
+    #   not both.
+    #   @return [Types::ObjectStorageFederatedIdentityConfig]
+    #
     # @!attribute [rw] agent_arns
     #   (Optional) Specifies the Amazon Resource Names (ARNs) of the
     #   DataSync agents that can connect with your object storage system. If
@@ -6539,6 +6716,7 @@ module Aws::DataSync
       :server_hostname,
       :access_key,
       :secret_key,
+      :federated_identity,
       :agent_arns,
       :server_certificate,
       :cmk_secret_config,

data/lib/aws-sdk-datasync.rb

@@ -54,7 +54,7 @@ module Aws::DataSync
   autoload :EndpointProvider, 'aws-sdk-datasync/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-datasync/endpoints'
 
-  GEM_VERSION = '1.136.0'
+  GEM_VERSION = '1.137.0'
 
 end
 

data/sig/client.rbs

@@ -116,10 +116,17 @@ module Aws
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/DataSync/Client.html#create_location_azure_blob-instance_method
       def create_location_azure_blob: (
                                         container_url: ::String,
-                                        authentication_type: ("SAS" | "NONE"),
+                                        authentication_type: ("SAS" | "NONE" | "OIDC"),
                                         ?sas_configuration: {
                                           token: ::String
                                         },
+                                        ?federated_identity: {
+                                          aws_iam_role: ::String?,
+                                          azure_oidc: {
+                                            tenant_id: ::String,
+                                            client_id: ::String
+                                          }?
+                                        },
                                         ?blob_type: ("BLOCK"),
                                         ?access_tier: ("HOT" | "COOL" | "ARCHIVE"),
                                         ?subdirectory: ::String,
@@ -329,6 +336,7 @@ module Aws
                                             bucket_name: ::String,
                                             ?access_key: ::String,
                                             ?secret_key: ::String,
+                                            ?federated_identity: Params::object_storage_federated_identity_config,
                                             ?agent_arns: Array[::String],
                                             ?tags: Array[
                                               {
@@ -494,7 +502,8 @@ module Aws
         include ::Seahorse::Client::_ResponseSuccess[Types::DescribeLocationAzureBlobResponse]
         def location_arn: () -> ::String
         def location_uri: () -> ::String
-        def authentication_type: () -> ("SAS" | "NONE")
+        def authentication_type: () -> ("SAS" | "NONE" | "OIDC")
+        def federated_identity: () -> Types::AzureFederatedIdentityConfig
         def blob_type: () -> ("BLOCK")
         def access_tier: () -> ("HOT" | "COOL" | "ARCHIVE")
         def agent_arns: () -> ::Array[::String]
@@ -629,6 +638,7 @@ module Aws
         def location_arn: () -> ::String
         def location_uri: () -> ::String
         def access_key: () -> ::String
+        def federated_identity: () -> Types::ObjectStorageFederatedIdentityConfig
         def server_port: () -> ::Integer
         def server_protocol: () -> ("HTTPS" | "HTTP")
         def agent_arns: () -> ::Array[::String]
@@ -903,10 +913,17 @@ module Aws
       def update_location_azure_blob: (
                                         location_arn: ::String,
                                         ?subdirectory: ::String,
-                                        ?authentication_type: ("SAS" | "NONE"),
+                                        ?authentication_type: ("SAS" | "NONE" | "OIDC"),
                                         ?sas_configuration: {
                                           token: ::String
                                         },
+                                        ?federated_identity: {
+                                          aws_iam_role: ::String?,
+                                          azure_oidc: {
+                                            tenant_id: ::String,
+                                            client_id: ::String
+                                          }?
+                                        },
                                         ?blob_type: ("BLOCK"),
                                         ?access_tier: ("HOT" | "COOL" | "ARCHIVE"),
                                         ?agent_arns: Array[::String],
@@ -1075,6 +1092,7 @@ module Aws
                                             ?server_hostname: ::String,
                                             ?access_key: ::String,
                                             ?secret_key: ::String,
+                                            ?federated_identity: Params::object_storage_federated_identity_config,
                                             ?agent_arns: Array[::String],
                                             ?server_certificate: ::String,
                                             ?cmk_secret_config: {

data/sig/params.rbs

@@ -37,6 +37,20 @@ module Aws
       smb: Params::fsx_protocol_smb?
     }
 
+      type object_storage_external_identity_config = {
+      google_oidc: {
+        project_name: ::String,
+        project_number: ::String,
+        identity_pool_name: ::String,
+        identity_provider_name: ::String
+      }?
+    }
+
+      type object_storage_federated_identity_config = {
+      aws_iam_role: ::String?,
+      external_identity: Params::object_storage_external_identity_config?
+    }
+
       type options = {
       verify_mode: ("POINT_IN_TIME_CONSISTENT" | "ONLY_FILES_TRANSFERRED" | "NONE")?,
       overwrite_mode: ("ALWAYS" | "NEVER")?,

data/sig/types.rbs

@@ -21,6 +21,18 @@ module Aws::DataSync
       SENSITIVE: [:token]
     end
 
+    class AzureFederatedIdentityConfig
+      attr_accessor aws_iam_role: ::String
+      attr_accessor azure_oidc: Types::AzureOidcConfig
+      SENSITIVE: []
+    end
+
+    class AzureOidcConfig
+      attr_accessor tenant_id: ::String
+      attr_accessor client_id: ::String
+      SENSITIVE: []
+    end
+
     class CancelTaskExecutionRequest
       attr_accessor task_execution_arn: ::String
       SENSITIVE: []
@@ -52,8 +64,9 @@ module Aws::DataSync
 
     class CreateLocationAzureBlobRequest
       attr_accessor container_url: ::String
-      attr_accessor authentication_type: ("SAS" | "NONE")
+      attr_accessor authentication_type: ("SAS" | "NONE" | "OIDC")
       attr_accessor sas_configuration: Types::AzureBlobSasConfiguration
+      attr_accessor federated_identity: Types::AzureFederatedIdentityConfig
       attr_accessor blob_type: ("BLOCK")
       attr_accessor access_tier: ("HOT" | "COOL" | "ARCHIVE")
       attr_accessor subdirectory: ::String
@@ -190,6 +203,7 @@ module Aws::DataSync
       attr_accessor bucket_name: ::String
       attr_accessor access_key: ::String
       attr_accessor secret_key: ::String
+      attr_accessor federated_identity: Types::ObjectStorageFederatedIdentityConfig
       attr_accessor agent_arns: ::Array[::String]
       attr_accessor tags: ::Array[Types::TagListEntry]
       attr_accessor server_certificate: ::String
@@ -318,7 +332,8 @@ module Aws::DataSync
     class DescribeLocationAzureBlobResponse
       attr_accessor location_arn: ::String
       attr_accessor location_uri: ::String
-      attr_accessor authentication_type: ("SAS" | "NONE")
+      attr_accessor authentication_type: ("SAS" | "NONE" | "OIDC")
+      attr_accessor federated_identity: Types::AzureFederatedIdentityConfig
       attr_accessor blob_type: ("BLOCK")
       attr_accessor access_tier: ("HOT" | "COOL" | "ARCHIVE")
       attr_accessor agent_arns: ::Array[::String]
@@ -453,6 +468,7 @@ module Aws::DataSync
       attr_accessor location_arn: ::String
       attr_accessor location_uri: ::String
       attr_accessor access_key: ::String
+      attr_accessor federated_identity: Types::ObjectStorageFederatedIdentityConfig
       attr_accessor server_port: ::Integer
       attr_accessor server_protocol: ("HTTPS" | "HTTP")
       attr_accessor agent_arns: ::Array[::String]
@@ -624,6 +640,14 @@ module Aws::DataSync
       SENSITIVE: [:password]
     end
 
+    class GoogleOidcConfig
+      attr_accessor project_name: ::String
+      attr_accessor project_number: ::String
+      attr_accessor identity_pool_name: ::String
+      attr_accessor identity_provider_name: ::String
+      SENSITIVE: []
+    end
+
     class HdfsNameNode
       attr_accessor hostname: ::String
       attr_accessor port: ::Integer
@@ -737,6 +761,17 @@ module Aws::DataSync
       SENSITIVE: []
     end
 
+    class ObjectStorageExternalIdentityConfig
+      attr_accessor google_oidc: Types::GoogleOidcConfig
+      SENSITIVE: []
+    end
+
+    class ObjectStorageFederatedIdentityConfig
+      attr_accessor aws_iam_role: ::String
+      attr_accessor external_identity: Types::ObjectStorageExternalIdentityConfig
+      SENSITIVE: []
+    end
+
     class OnPremConfig
       attr_accessor agent_arns: ::Array[::String]
       SENSITIVE: []
@@ -974,8 +1009,9 @@ module Aws::DataSync
     class UpdateLocationAzureBlobRequest
       attr_accessor location_arn: ::String
       attr_accessor subdirectory: ::String
-      attr_accessor authentication_type: ("SAS" | "NONE")
+      attr_accessor authentication_type: ("SAS" | "NONE" | "OIDC")
       attr_accessor sas_configuration: Types::AzureBlobSasConfiguration
+      attr_accessor federated_identity: Types::AzureFederatedIdentityConfig
       attr_accessor blob_type: ("BLOCK")
       attr_accessor access_tier: ("HOT" | "COOL" | "ARCHIVE")
       attr_accessor agent_arns: ::Array[::String]
@@ -1084,6 +1120,7 @@ module Aws::DataSync
       attr_accessor server_hostname: ::String
       attr_accessor access_key: ::String
       attr_accessor secret_key: ::String
+      attr_accessor federated_identity: Types::ObjectStorageFederatedIdentityConfig
       attr_accessor agent_arns: ::Array[::String]
       attr_accessor server_certificate: ::String
       attr_accessor cmk_secret_config: Types::CmkSecretConfig

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-datasync
 version: !ruby/object:Gem::Version
-  version: 1.136.0
+  version: 1.137.0
 platform: ruby
 authors:
 - Amazon Web Services