aws-sdk-datasync 1.119.0 → 1.120.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 8f4a1bd5f5ae141b2e9798206d32a5cee84ce5a37a988f0d03a6c264fd113cfc
-  data.tar.gz: c870f7fda3d8611dfa4e5ec4fa0374f3e6ae05cb15cbc16eab7d7486c8721b41
+  metadata.gz: 21a12eb0eedbb23edd2910c795807fa24dc460f831e8617d201a29c0c6524735
+  data.tar.gz: 4f3538200f4fca287bb2fb956e8f0a351c8b51dc84686d9997a3a8500b65a5e6
 SHA512:
-  metadata.gz: 339cd651272776e639ff61cfbf49d2da2ad4f9c5887de68f4b7781f90261bd9e6c94919daf6c60f89375a33b825fab5d5719b55fed28cd8abdf9afbe30d1c1bd
-  data.tar.gz: a5a61b29df0217a849fca8ba3028ce6eec8469219521152f7552160d36e3fdd15635f9a49bbca1771c985b61771d01d6ed66bf1cf7b22207d454fe10a09e78be
+  metadata.gz: e95662f6cdb18065a173b9ed852e33fe4d0eb6a6a72e4038bb9b4f1f398c71095aa81e0514572aafa372e185234b5bf6ab5afc33bacad953c476bfa27b5f7414
+  data.tar.gz: c75c0bb403df17ce0f7634c2c3e54b7e88939d81e231236b2191e9d62c951aec81e90039416a120d10afb1a03eb106d7f7dd4f63c9de6ed554efc9cad1bc20ff

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.120.0 (2026-03-12)
+------------------
+
+* Feature - DataSync's 3 location types, Hadoop Distributed File System (HDFS), FSx for Windows File Server (FSx Windows), and FSx for NetApp ONTAP (FSx ONTAP) now have credentials managed via Secrets Manager, which may be encrypted with service keys or be configured to use customer-managed keys or secret.
+
 1.119.0 (2026-01-16)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.119.0
+1.120.0

data/lib/aws-sdk-datasync/client.rb

@@ -691,7 +691,8 @@ module Aws::DataSync
     #   location access credentials.
     #
     #   Make sure that DataSync has permission to access the KMS key that you
-    #   specify.
+    #   specify. For more information, see [ Using a service-managed secret
+    #   encrypted with a custom KMS key][1].
     #
     #   <note markdown="1"> You can use either `CmkSecretConfig` (with `SasConfiguration`) or
     #   `CustomSecretConfig` (without `SasConfiguration`) to provide
@@ -700,12 +701,17 @@ module Aws::DataSync
     #
     #    </note>
     #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/datasync/latest/userguide/location-credentials.html#service-secret-custom-key
+    #
     # @option params [Types::CustomSecretConfig] :custom_secret_config
     #   Specifies configuration information for a customer-managed Secrets
     #   Manager secret where the authentication token for an AzureBlob storage
     #   location is stored in plain text, in Secrets Manager. This
     #   configuration includes the secret ARN, and the ARN for an IAM role
-    #   that provides access to the secret.
+    #   that provides access to the secret. For more information, see [ Using
+    #   a secret that you manage][1].
     #
     #   <note markdown="1"> You can use either `CmkSecretConfig` (with `SasConfiguration`) or
     #   `CustomSecretConfig` (without `SasConfiguration`) to provide
@@ -714,6 +720,10 @@ module Aws::DataSync
     #
     #    </note>
     #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/datasync/latest/userguide/location-credentials.html#custom-secret-custom-key
+    #
     # @return [Types::CreateLocationAzureBlobResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::CreateLocationAzureBlobResponse#location_arn #location_arn} => String
@@ -1015,8 +1025,19 @@ module Aws::DataSync
     #         mount_options: {
     #           version: "AUTOMATIC", # accepts AUTOMATIC, SMB2, SMB3, SMB1, SMB2_0
     #         },
-    #         password: "SmbPassword", # required
+    #         password: "SmbPassword",
     #         user: "SmbUser", # required
+    #         managed_secret_config: {
+    #           secret_arn: "SecretArn",
+    #         },
+    #         cmk_secret_config: {
+    #           secret_arn: "SecretArn",
+    #           kms_key_arn: "KmsKeyArn",
+    #         },
+    #         custom_secret_config: {
+    #           secret_arn: "SecretArn",
+    #           secret_access_role_arn: "IamRoleArnOrEmptyString",
+    #         },
     #       },
     #     },
     #     security_group_arns: ["Ec2SecurityGroupArn"], # required
@@ -1099,8 +1120,19 @@ module Aws::DataSync
     #         mount_options: {
     #           version: "AUTOMATIC", # accepts AUTOMATIC, SMB2, SMB3, SMB1, SMB2_0
     #         },
-    #         password: "SmbPassword", # required
+    #         password: "SmbPassword",
     #         user: "SmbUser", # required
+    #         managed_secret_config: {
+    #           secret_arn: "SecretArn",
+    #         },
+    #         cmk_secret_config: {
+    #           secret_arn: "SecretArn",
+    #           kms_key_arn: "KmsKeyArn",
+    #         },
+    #         custom_secret_config: {
+    #           secret_arn: "SecretArn",
+    #           secret_access_role_arn: "IamRoleArnOrEmptyString",
+    #         },
     #       },
     #     },
     #     security_group_arns: ["Ec2SecurityGroupArn"], # required
@@ -1196,11 +1228,56 @@ module Aws::DataSync
     #   configuring this parameter makes sure that DataSync connects to the
     #   right file system.
     #
-    # @option params [required, String] :password
+    # @option params [String] :password
     #   Specifies the password of the user with the permissions to mount and
     #   access the files, folders, and file metadata in your FSx for Windows
     #   File Server file system.
     #
+    # @option params [Types::CmkSecretConfig] :cmk_secret_config
+    #   Specifies configuration information for a DataSync-managed secret,
+    #   which includes the password that DataSync uses to access a specific
+    #   FSx Windows storage location, with a customer-managed KMS key.
+    #
+    #   When you include this parameter as part of a
+    #   `CreateLocationFsxWindows` request, you provide only the KMS key ARN.
+    #   DataSync uses this KMS key together with the `Password` you specify
+    #   for to create a DataSync-managed secret to store the location access
+    #   credentials.
+    #
+    #   Make sure that DataSync has permission to access the KMS key that you
+    #   specify. For more information, see [ Using a service-managed secret
+    #   encrypted with a custom KMS key][1].
+    #
+    #   <note markdown="1"> You can use either `CmkSecretConfig` (with `Password`) or
+    #   `CustomSecretConfig` (without `Password`) to provide credentials for a
+    #   `CreateLocationFsxWindows` request. Do not provide both parameters for
+    #   the same request.
+    #
+    #    </note>
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/datasync/latest/userguide/location-credentials.html#service-secret-custom-key
+    #
+    # @option params [Types::CustomSecretConfig] :custom_secret_config
+    #   Specifies configuration information for a customer-managed Secrets
+    #   Manager secret where the password for an FSx for Windows File Server
+    #   storage location is stored in plain text, in Secrets Manager. This
+    #   configuration includes the secret ARN, and the ARN for an IAM role
+    #   that provides access to the secret. For more information, see [ Using
+    #   a secret that you manage][1].
+    #
+    #   <note markdown="1"> You can use either `CmkSecretConfig` (with `Password`) or
+    #   `CustomSecretConfig` (without `Password`) to provide credentials for a
+    #   `CreateLocationFsxWindows` request. Do not provide both parameters for
+    #   the same request.
+    #
+    #    </note>
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/datasync/latest/userguide/location-credentials.html#custom-secret-custom-key
+    #
     # @return [Types::CreateLocationFsxWindowsResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::CreateLocationFsxWindowsResponse#location_arn #location_arn} => String
@@ -1219,7 +1296,15 @@ module Aws::DataSync
     #     ],
     #     user: "SmbUser", # required
     #     domain: "SmbDomain",
-    #     password: "SmbPassword", # required
+    #     password: "SmbPassword",
+    #     cmk_secret_config: {
+    #       secret_arn: "SecretArn",
+    #       kms_key_arn: "KmsKeyArn",
+    #     },
+    #     custom_secret_config: {
+    #       secret_arn: "SecretArn",
+    #       secret_access_role_arn: "IamRoleArnOrEmptyString",
+    #     },
     #   })
     #
     # @example Response structure
@@ -1329,6 +1414,51 @@ module Aws::DataSync
     #   location. The value can be an empty string. We recommend using tags to
     #   name your resources.
     #
+    # @option params [Types::CmkSecretConfig] :cmk_secret_config
+    #   Specifies configuration information for a DataSync-managed secret,
+    #   which includes the Kerberos keytab that DataSync uses to access a
+    #   specific Hadoop Distributed File System (HDFS) storage location, with
+    #   a customer-managed KMS key.
+    #
+    #   When you include this parameter as part of a `CreateLocationHdfs`
+    #   request, you provide only the KMS key ARN. DataSync uses this KMS key
+    #   together with the `KerberosKeytab` you specify for to create a
+    #   DataSync-managed secret to store the location access credentials.
+    #
+    #   Make sure that DataSync has permission to access the KMS key that you
+    #   specify. For more information, see [ Using a service-managed secret
+    #   encrypted with a custom KMS key][1].
+    #
+    #   <note markdown="1"> You can use either `CmkSecretConfig` (with `KerberosKeytab`) or
+    #   `CustomSecretConfig` (without `KerberosKeytab`) to provide credentials
+    #   for a `CreateLocationHdfs` request. Do not provide both parameters for
+    #   the same request.
+    #
+    #    </note>
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/datasync/latest/userguide/location-credentials.html#service-secret-custom-key
+    #
+    # @option params [Types::CustomSecretConfig] :custom_secret_config
+    #   Specifies configuration information for a customer-managed Secrets
+    #   Manager secret where the Kerberos keytab for the HDFS storage location
+    #   is stored in binary, in Secrets Manager. This configuration includes
+    #   the secret ARN, and the ARN for an IAM role that provides access to
+    #   the secret. For more information, see [ Using a secret that you
+    #   manage][1].
+    #
+    #   <note markdown="1"> You can use either `CmkSecretConfig` (with `KerberosKeytab`) or
+    #   `CustomSecretConfig` (without `KerberosKeytab`) to provide credentials
+    #   for a `CreateLocationHdfs` request. Do not provide both parameters for
+    #   the same request.
+    #
+    #    </note>
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/datasync/latest/userguide/location-credentials.html#custom-secret-custom-key
+    #
     # @return [Types::CreateLocationHdfsResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::CreateLocationHdfsResponse#location_arn #location_arn} => String
@@ -1362,6 +1492,14 @@ module Aws::DataSync
     #         value: "TagValue",
     #       },
     #     ],
+    #     cmk_secret_config: {
+    #       secret_arn: "SecretArn",
+    #       kms_key_arn: "KmsKeyArn",
+    #     },
+    #     custom_secret_config: {
+    #       secret_arn: "SecretArn",
+    #       secret_access_role_arn: "IamRoleArnOrEmptyString",
+    #     },
     #   })
     #
     # @example Response structure
@@ -1563,7 +1701,8 @@ module Aws::DataSync
     #   store the location access credentials.
     #
     #   Make sure that DataSync has permission to access the KMS key that you
-    #   specify.
+    #   specify. For more information, see [ Using a service-managed secret
+    #   encrypted with a custom KMS key][1].
     #
     #   <note markdown="1"> You can use either `CmkSecretConfig` (with `SecretKey`) or
     #   `CustomSecretConfig` (without `SecretKey`) to provide credentials for
@@ -1572,12 +1711,17 @@ module Aws::DataSync
     #
     #    </note>
     #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/datasync/latest/userguide/location-credentials.html#service-secret-custom-key
+    #
     # @option params [Types::CustomSecretConfig] :custom_secret_config
     #   Specifies configuration information for a customer-managed Secrets
     #   Manager secret where the secret key for a specific object storage
     #   location is stored in plain text, in Secrets Manager. This
     #   configuration includes the secret ARN, and the ARN for an IAM role
-    #   that provides access to the secret.
+    #   that provides access to the secret. For more information, see [ Using
+    #   a secret that you manage][1].
     #
     #   <note markdown="1"> You can use either `CmkSecretConfig` (with `SecretKey`) or
     #   `CustomSecretConfig` (without `SecretKey`) to provide credentials for
@@ -1586,6 +1730,10 @@ module Aws::DataSync
     #
     #    </note>
     #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/datasync/latest/userguide/location-credentials.html#custom-secret-custom-key
+    #
     # @return [Types::CreateLocationObjectStorageResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::CreateLocationObjectStorageResponse#location_arn #location_arn} => String
@@ -1831,7 +1979,8 @@ module Aws::DataSync
     #   store the location access credentials.
     #
     #   Make sure that DataSync has permission to access the KMS key that you
-    #   specify.
+    #   specify. For more information, see [ Using a service-managed secret
+    #   encrypted with a custom KMS key][1].
     #
     #   <note markdown="1"> You can use either `CmkSecretConfig` (with either `Password` or
     #   `KerberosKeytab`) or `CustomSecretConfig` (without any `Password` and
@@ -1842,12 +1991,17 @@ module Aws::DataSync
     #
     #    </note>
     #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/datasync/latest/userguide/location-credentials.html#service-secret-custom-key
+    #
     # @option params [Types::CustomSecretConfig] :custom_secret_config
     #   Specifies configuration information for a customer-managed Secrets
     #   Manager secret where the SMB storage location credentials is stored in
     #   Secrets Manager as plain text (for `Password`) or binary (for
     #   `KerberosKeytab`). This configuration includes the secret ARN, and the
-    #   ARN for an IAM role that provides access to the secret.
+    #   ARN for an IAM role that provides access to the secret. For more
+    #   information, see [ Using a secret that you manage][1].
     #
     #   <note markdown="1"> You can use either `CmkSecretConfig` (with `SasConfiguration`) or
     #   `CustomSecretConfig` (without `SasConfiguration`) to provide
@@ -1856,6 +2010,10 @@ module Aws::DataSync
     #
     #    </note>
     #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/datasync/latest/userguide/location-credentials.html#custom-secret-custom-key
+    #
     # @option params [required, Array<String>] :agent_arns
     #   Specifies the DataSync agent (or agents) that can connect to your SMB
     #   file server. You specify an agent by using its Amazon Resource Name
@@ -2501,6 +2659,11 @@ module Aws::DataSync
     #   resp.protocol.smb.mount_options.version #=> String, one of "AUTOMATIC", "SMB2", "SMB3", "SMB1", "SMB2_0"
     #   resp.protocol.smb.password #=> String
     #   resp.protocol.smb.user #=> String
+    #   resp.protocol.smb.managed_secret_config.secret_arn #=> String
+    #   resp.protocol.smb.cmk_secret_config.secret_arn #=> String
+    #   resp.protocol.smb.cmk_secret_config.kms_key_arn #=> String
+    #   resp.protocol.smb.custom_secret_config.secret_arn #=> String
+    #   resp.protocol.smb.custom_secret_config.secret_access_role_arn #=> String
     #   resp.security_group_arns #=> Array
     #   resp.security_group_arns[0] #=> String
     #   resp.storage_virtual_machine_arn #=> String
@@ -2552,6 +2715,11 @@ module Aws::DataSync
     #   resp.protocol.smb.mount_options.version #=> String, one of "AUTOMATIC", "SMB2", "SMB3", "SMB1", "SMB2_0"
     #   resp.protocol.smb.password #=> String
     #   resp.protocol.smb.user #=> String
+    #   resp.protocol.smb.managed_secret_config.secret_arn #=> String
+    #   resp.protocol.smb.cmk_secret_config.secret_arn #=> String
+    #   resp.protocol.smb.cmk_secret_config.kms_key_arn #=> String
+    #   resp.protocol.smb.custom_secret_config.secret_arn #=> String
+    #   resp.protocol.smb.custom_secret_config.secret_access_role_arn #=> String
     #   resp.creation_time #=> Time
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/datasync-2018-11-09/DescribeLocationFsxOpenZfs AWS API Documentation
@@ -2578,6 +2746,9 @@ module Aws::DataSync
     #   * {Types::DescribeLocationFsxWindowsResponse#creation_time #creation_time} => Time
     #   * {Types::DescribeLocationFsxWindowsResponse#user #user} => String
     #   * {Types::DescribeLocationFsxWindowsResponse#domain #domain} => String
+    #   * {Types::DescribeLocationFsxWindowsResponse#managed_secret_config #managed_secret_config} => Types::ManagedSecretConfig
+    #   * {Types::DescribeLocationFsxWindowsResponse#cmk_secret_config #cmk_secret_config} => Types::CmkSecretConfig
+    #   * {Types::DescribeLocationFsxWindowsResponse#custom_secret_config #custom_secret_config} => Types::CustomSecretConfig
     #
     # @example Request syntax with placeholder values
     #
@@ -2594,6 +2765,11 @@ module Aws::DataSync
     #   resp.creation_time #=> Time
     #   resp.user #=> String
     #   resp.domain #=> String
+    #   resp.managed_secret_config.secret_arn #=> String
+    #   resp.cmk_secret_config.secret_arn #=> String
+    #   resp.cmk_secret_config.kms_key_arn #=> String
+    #   resp.custom_secret_config.secret_arn #=> String
+    #   resp.custom_secret_config.secret_access_role_arn #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/datasync-2018-11-09/DescribeLocationFsxWindows AWS API Documentation
     #
@@ -2624,6 +2800,9 @@ module Aws::DataSync
     #   * {Types::DescribeLocationHdfsResponse#kerberos_principal #kerberos_principal} => String
     #   * {Types::DescribeLocationHdfsResponse#agent_arns #agent_arns} => Array&lt;String&gt;
     #   * {Types::DescribeLocationHdfsResponse#creation_time #creation_time} => Time
+    #   * {Types::DescribeLocationHdfsResponse#managed_secret_config #managed_secret_config} => Types::ManagedSecretConfig
+    #   * {Types::DescribeLocationHdfsResponse#cmk_secret_config #cmk_secret_config} => Types::CmkSecretConfig
+    #   * {Types::DescribeLocationHdfsResponse#custom_secret_config #custom_secret_config} => Types::CustomSecretConfig
     #
     # @example Request syntax with placeholder values
     #
@@ -2649,6 +2828,11 @@ module Aws::DataSync
     #   resp.agent_arns #=> Array
     #   resp.agent_arns[0] #=> String
     #   resp.creation_time #=> Time
+    #   resp.managed_secret_config.secret_arn #=> String
+    #   resp.cmk_secret_config.secret_arn #=> String
+    #   resp.cmk_secret_config.kms_key_arn #=> String
+    #   resp.custom_secret_config.secret_arn #=> String
+    #   resp.custom_secret_config.secret_access_role_arn #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/datasync-2018-11-09/DescribeLocationHdfs AWS API Documentation
     #
@@ -3731,7 +3915,8 @@ module Aws::DataSync
     #   Specifies configuration information for a customer-managed secret,
     #   such as an authentication token or set of credentials that DataSync
     #   uses to access a specific transfer location, and a customer-managed
-    #   KMS key.
+    #   Identity and Access Management (IAM) role that provides access to the
+    #   secret.
     #
     # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
     #
@@ -3942,6 +4127,14 @@ module Aws::DataSync
     #         },
     #         password: "SmbPassword",
     #         user: "SmbUser",
+    #         cmk_secret_config: {
+    #           secret_arn: "SecretArn",
+    #           kms_key_arn: "KmsKeyArn",
+    #         },
+    #         custom_secret_config: {
+    #           secret_arn: "SecretArn",
+    #           secret_access_role_arn: "IamRoleArnOrEmptyString",
+    #         },
     #       },
     #     },
     #     subdirectory: "FsxOntapSubdirectory",
@@ -4002,8 +4195,19 @@ module Aws::DataSync
     #         mount_options: {
     #           version: "AUTOMATIC", # accepts AUTOMATIC, SMB2, SMB3, SMB1, SMB2_0
     #         },
-    #         password: "SmbPassword", # required
+    #         password: "SmbPassword",
     #         user: "SmbUser", # required
+    #         managed_secret_config: {
+    #           secret_arn: "SecretArn",
+    #         },
+    #         cmk_secret_config: {
+    #           secret_arn: "SecretArn",
+    #           kms_key_arn: "KmsKeyArn",
+    #         },
+    #         custom_secret_config: {
+    #           secret_arn: "SecretArn",
+    #           secret_access_role_arn: "IamRoleArnOrEmptyString",
+    #         },
     #       },
     #     },
     #     subdirectory: "SmbSubdirectory",
@@ -4064,6 +4268,17 @@ module Aws::DataSync
     #   access the files, folders, and file metadata in your FSx for Windows
     #   File Server file system.
     #
+    # @option params [Types::CmkSecretConfig] :cmk_secret_config
+    #   Specifies configuration information for a DataSync-managed secret,
+    #   such as a `Password` or set of credentials that DataSync uses to
+    #   access a specific transfer location, and a customer-managed KMS key.
+    #
+    # @option params [Types::CustomSecretConfig] :custom_secret_config
+    #   Specifies configuration information for a customer-managed secret,
+    #   such as a `Password` or set of credentials that DataSync uses to
+    #   access a specific transfer location, and a customer-managed Identity
+    #   and Access Management (IAM) role that provides access to the secret.
+    #
     # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
     #
     # @example Request syntax with placeholder values
@@ -4074,6 +4289,14 @@ module Aws::DataSync
     #     domain: "UpdateSmbDomain",
     #     user: "SmbUser",
     #     password: "SmbPassword",
+    #     cmk_secret_config: {
+    #       secret_arn: "SecretArn",
+    #       kms_key_arn: "KmsKeyArn",
+    #     },
+    #     custom_secret_config: {
+    #       secret_arn: "SecretArn",
+    #       secret_access_role_arn: "IamRoleArnOrEmptyString",
+    #     },
     #   })
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/datasync-2018-11-09/UpdateLocationFsxWindows AWS API Documentation
@@ -4150,6 +4373,17 @@ module Aws::DataSync
     #   The Amazon Resource Names (ARNs) of the DataSync agents that can
     #   connect to your HDFS cluster.
     #
+    # @option params [Types::CmkSecretConfig] :cmk_secret_config
+    #   Specifies configuration information for a DataSync-managed secret,
+    #   such as a `KerberosKeytab` or set of credentials that DataSync uses to
+    #   access a specific transfer location, and a customer-managed KMS key.
+    #
+    # @option params [Types::CustomSecretConfig] :custom_secret_config
+    #   Specifies configuration information for a customer-managed secret,
+    #   such as a `KerberosKeytab` or set of credentials that DataSync uses to
+    #   access a specific transfer location, and a customer-managed Identity
+    #   and Access Management (IAM) role that provides access to the secret.
+    #
     # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
     #
     # @example Request syntax with placeholder values
@@ -4176,6 +4410,14 @@ module Aws::DataSync
     #     kerberos_keytab: "data",
     #     kerberos_krb_5_conf: "data",
     #     agent_arns: ["AgentArn"],
+    #     cmk_secret_config: {
+    #       secret_arn: "SecretArn",
+    #       kms_key_arn: "KmsKeyArn",
+    #     },
+    #     custom_secret_config: {
+    #       secret_arn: "SecretArn",
+    #       secret_access_role_arn: "IamRoleArnOrEmptyString",
+    #     },
     #   })
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/datasync-2018-11-09/UpdateLocationHdfs AWS API Documentation
@@ -4345,7 +4587,8 @@ module Aws::DataSync
     #   Specifies configuration information for a customer-managed secret,
     #   such as an authentication token or set of credentials that DataSync
     #   uses to access a specific transfer location, and a customer-managed
-    #   KMS key.
+    #   Identity and Access Management (IAM) role that provides access to the
+    #   secret.
     #
     # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
     #
@@ -4537,7 +4780,8 @@ module Aws::DataSync
     #   Specifies configuration information for a customer-managed secret,
     #   such as a `Password` or `KerberosKeytab` or set of credentials that
     #   DataSync uses to access a specific transfer location, and a
-    #   customer-managed KMS key.
+    #   customer-managed Identity and Access Management (IAM) role that
+    #   provides access to the secret.
     #
     # @option params [Array<String>] :agent_arns
     #   Specifies the DataSync agent (or agents) that can connect to your SMB
@@ -4910,7 +5154,7 @@ module Aws::DataSync
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-datasync'
-      context[:gem_version] = '1.119.0'
+      context[:gem_version] = '1.120.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-datasync/client_api.rb

@@ -395,7 +395,9 @@ module Aws::DataSync
     CreateLocationFsxWindowsRequest.add_member(:tags, Shapes::ShapeRef.new(shape: InputTagList, location_name: "Tags"))
     CreateLocationFsxWindowsRequest.add_member(:user, Shapes::ShapeRef.new(shape: SmbUser, required: true, location_name: "User"))
     CreateLocationFsxWindowsRequest.add_member(:domain, Shapes::ShapeRef.new(shape: SmbDomain, location_name: "Domain"))
-    CreateLocationFsxWindowsRequest.add_member(:password, Shapes::ShapeRef.new(shape: SmbPassword, required: true, location_name: "Password"))
+    CreateLocationFsxWindowsRequest.add_member(:password, Shapes::ShapeRef.new(shape: SmbPassword, location_name: "Password"))
+    CreateLocationFsxWindowsRequest.add_member(:cmk_secret_config, Shapes::ShapeRef.new(shape: CmkSecretConfig, location_name: "CmkSecretConfig"))
+    CreateLocationFsxWindowsRequest.add_member(:custom_secret_config, Shapes::ShapeRef.new(shape: CustomSecretConfig, location_name: "CustomSecretConfig"))
     CreateLocationFsxWindowsRequest.struct_class = Types::CreateLocationFsxWindowsRequest
 
     CreateLocationFsxWindowsResponse.add_member(:location_arn, Shapes::ShapeRef.new(shape: LocationArn, location_name: "LocationArn"))
@@ -414,6 +416,8 @@ module Aws::DataSync
     CreateLocationHdfsRequest.add_member(:kerberos_krb_5_conf, Shapes::ShapeRef.new(shape: KerberosKrb5ConfFile, location_name: "KerberosKrb5Conf"))
     CreateLocationHdfsRequest.add_member(:agent_arns, Shapes::ShapeRef.new(shape: AgentArnList, required: true, location_name: "AgentArns"))
     CreateLocationHdfsRequest.add_member(:tags, Shapes::ShapeRef.new(shape: InputTagList, location_name: "Tags"))
+    CreateLocationHdfsRequest.add_member(:cmk_secret_config, Shapes::ShapeRef.new(shape: CmkSecretConfig, location_name: "CmkSecretConfig"))
+    CreateLocationHdfsRequest.add_member(:custom_secret_config, Shapes::ShapeRef.new(shape: CustomSecretConfig, location_name: "CustomSecretConfig"))
     CreateLocationHdfsRequest.struct_class = Types::CreateLocationHdfsRequest
 
     CreateLocationHdfsResponse.add_member(:location_arn, Shapes::ShapeRef.new(shape: LocationArn, location_name: "LocationArn"))
@@ -593,6 +597,9 @@ module Aws::DataSync
     DescribeLocationFsxWindowsResponse.add_member(:creation_time, Shapes::ShapeRef.new(shape: Time, location_name: "CreationTime"))
     DescribeLocationFsxWindowsResponse.add_member(:user, Shapes::ShapeRef.new(shape: SmbUser, location_name: "User"))
     DescribeLocationFsxWindowsResponse.add_member(:domain, Shapes::ShapeRef.new(shape: SmbDomain, location_name: "Domain"))
+    DescribeLocationFsxWindowsResponse.add_member(:managed_secret_config, Shapes::ShapeRef.new(shape: ManagedSecretConfig, location_name: "ManagedSecretConfig"))
+    DescribeLocationFsxWindowsResponse.add_member(:cmk_secret_config, Shapes::ShapeRef.new(shape: CmkSecretConfig, location_name: "CmkSecretConfig"))
+    DescribeLocationFsxWindowsResponse.add_member(:custom_secret_config, Shapes::ShapeRef.new(shape: CustomSecretConfig, location_name: "CustomSecretConfig"))
     DescribeLocationFsxWindowsResponse.struct_class = Types::DescribeLocationFsxWindowsResponse
 
     DescribeLocationHdfsRequest.add_member(:location_arn, Shapes::ShapeRef.new(shape: LocationArn, required: true, location_name: "LocationArn"))
@@ -610,6 +617,9 @@ module Aws::DataSync
     DescribeLocationHdfsResponse.add_member(:kerberos_principal, Shapes::ShapeRef.new(shape: KerberosPrincipal, location_name: "KerberosPrincipal"))
     DescribeLocationHdfsResponse.add_member(:agent_arns, Shapes::ShapeRef.new(shape: AgentArnList, location_name: "AgentArns"))
     DescribeLocationHdfsResponse.add_member(:creation_time, Shapes::ShapeRef.new(shape: Time, location_name: "CreationTime"))
+    DescribeLocationHdfsResponse.add_member(:managed_secret_config, Shapes::ShapeRef.new(shape: ManagedSecretConfig, location_name: "ManagedSecretConfig"))
+    DescribeLocationHdfsResponse.add_member(:cmk_secret_config, Shapes::ShapeRef.new(shape: CmkSecretConfig, location_name: "CmkSecretConfig"))
+    DescribeLocationHdfsResponse.add_member(:custom_secret_config, Shapes::ShapeRef.new(shape: CustomSecretConfig, location_name: "CustomSecretConfig"))
     DescribeLocationHdfsResponse.struct_class = Types::DescribeLocationHdfsResponse
 
     DescribeLocationNfsRequest.add_member(:location_arn, Shapes::ShapeRef.new(shape: LocationArn, required: true, location_name: "LocationArn"))
@@ -759,8 +769,11 @@ module Aws::DataSync
 
     FsxProtocolSmb.add_member(:domain, Shapes::ShapeRef.new(shape: SmbDomain, location_name: "Domain"))
     FsxProtocolSmb.add_member(:mount_options, Shapes::ShapeRef.new(shape: SmbMountOptions, location_name: "MountOptions"))
-    FsxProtocolSmb.add_member(:password, Shapes::ShapeRef.new(shape: SmbPassword, required: true, location_name: "Password"))
+    FsxProtocolSmb.add_member(:password, Shapes::ShapeRef.new(shape: SmbPassword, location_name: "Password"))
     FsxProtocolSmb.add_member(:user, Shapes::ShapeRef.new(shape: SmbUser, required: true, location_name: "User"))
+    FsxProtocolSmb.add_member(:managed_secret_config, Shapes::ShapeRef.new(shape: ManagedSecretConfig, location_name: "ManagedSecretConfig"))
+    FsxProtocolSmb.add_member(:cmk_secret_config, Shapes::ShapeRef.new(shape: CmkSecretConfig, location_name: "CmkSecretConfig"))
+    FsxProtocolSmb.add_member(:custom_secret_config, Shapes::ShapeRef.new(shape: CustomSecretConfig, location_name: "CustomSecretConfig"))
     FsxProtocolSmb.struct_class = Types::FsxProtocolSmb
 
     FsxUpdateProtocol.add_member(:nfs, Shapes::ShapeRef.new(shape: FsxProtocolNfs, location_name: "NFS"))
@@ -771,6 +784,8 @@ module Aws::DataSync
     FsxUpdateProtocolSmb.add_member(:mount_options, Shapes::ShapeRef.new(shape: SmbMountOptions, location_name: "MountOptions"))
     FsxUpdateProtocolSmb.add_member(:password, Shapes::ShapeRef.new(shape: SmbPassword, location_name: "Password"))
     FsxUpdateProtocolSmb.add_member(:user, Shapes::ShapeRef.new(shape: SmbUser, location_name: "User"))
+    FsxUpdateProtocolSmb.add_member(:cmk_secret_config, Shapes::ShapeRef.new(shape: CmkSecretConfig, location_name: "CmkSecretConfig"))
+    FsxUpdateProtocolSmb.add_member(:custom_secret_config, Shapes::ShapeRef.new(shape: CustomSecretConfig, location_name: "CustomSecretConfig"))
     FsxUpdateProtocolSmb.struct_class = Types::FsxUpdateProtocolSmb
 
     HdfsNameNode.add_member(:hostname, Shapes::ShapeRef.new(shape: HdfsServerHostname, required: true, location_name: "Hostname"))
@@ -1089,6 +1104,8 @@ module Aws::DataSync
     UpdateLocationFsxWindowsRequest.add_member(:domain, Shapes::ShapeRef.new(shape: UpdateSmbDomain, location_name: "Domain"))
     UpdateLocationFsxWindowsRequest.add_member(:user, Shapes::ShapeRef.new(shape: SmbUser, location_name: "User"))
     UpdateLocationFsxWindowsRequest.add_member(:password, Shapes::ShapeRef.new(shape: SmbPassword, location_name: "Password"))
+    UpdateLocationFsxWindowsRequest.add_member(:cmk_secret_config, Shapes::ShapeRef.new(shape: CmkSecretConfig, location_name: "CmkSecretConfig"))
+    UpdateLocationFsxWindowsRequest.add_member(:custom_secret_config, Shapes::ShapeRef.new(shape: CustomSecretConfig, location_name: "CustomSecretConfig"))
     UpdateLocationFsxWindowsRequest.struct_class = Types::UpdateLocationFsxWindowsRequest
 
     UpdateLocationFsxWindowsResponse.struct_class = Types::UpdateLocationFsxWindowsResponse
@@ -1106,6 +1123,8 @@ module Aws::DataSync
     UpdateLocationHdfsRequest.add_member(:kerberos_keytab, Shapes::ShapeRef.new(shape: KerberosKeytabFile, location_name: "KerberosKeytab"))
     UpdateLocationHdfsRequest.add_member(:kerberos_krb_5_conf, Shapes::ShapeRef.new(shape: KerberosKrb5ConfFile, location_name: "KerberosKrb5Conf"))
     UpdateLocationHdfsRequest.add_member(:agent_arns, Shapes::ShapeRef.new(shape: AgentArnList, location_name: "AgentArns"))
+    UpdateLocationHdfsRequest.add_member(:cmk_secret_config, Shapes::ShapeRef.new(shape: CmkSecretConfig, location_name: "CmkSecretConfig"))
+    UpdateLocationHdfsRequest.add_member(:custom_secret_config, Shapes::ShapeRef.new(shape: CustomSecretConfig, location_name: "CustomSecretConfig"))
     UpdateLocationHdfsRequest.struct_class = Types::UpdateLocationHdfsRequest
 
     UpdateLocationHdfsResponse.struct_class = Types::UpdateLocationHdfsResponse