aws-sdk-datasync 1.95.0 → 1.96.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 34756d3a9dd4e123fe8b82d13858f9d3d50502e1f36d4f789743889ee85ae24f
-  data.tar.gz: 19eb33096ed8e1b6762591e39c70f584f12cc5a683e86e87efada8f072cc1a2e
+  metadata.gz: 5806487ddbadbd917579c19f67a0ed2ecf212b6234fc5f3eee96c90fc00ff6e2
+  data.tar.gz: 6e0b77655522e8424e9686a078fb6f82bae3116865cb747171a2f09b3df9e269
 SHA512:
-  metadata.gz: f8eae4041af7b37dba720b37fc9210276622ba7ee2a6bd26e406a540ba8182b4c94b4a35924baaadc7f836f9f243b1dae73087f1eb372137de86e6e88e7d241f
-  data.tar.gz: 22523e5ba16fa5657bb9eb76c2ef68d1aa86c2de0ad82525830def992cfa75c5454f80ff536b0fed94dac1e27a4121f0d8e02baefc03cf3a785fe8ea7fb5e18f
+  metadata.gz: 3c24f3c09646e4c15d98dc5100d8974eb5472d31208f9cf01348e31cfb64afe714ea42cb71e9d04bb588245179511c9b6ba800c3ff0979413a204712632a79d5
+  data.tar.gz: 99d8c44f84b9f688038f7854ecb9ef17c418299cf6756ff94ad56c54d27ae02f015b8dca0440876221ed2a5c20d161c6b8b164c165b3ceca8d3a22b416f39091

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.96.0 (2025-01-28)
+------------------
+
+* Feature - AWS DataSync now supports the Kerberos authentication protocol for SMB locations.
+
 1.95.0 (2025-01-15)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.95.0
+1.96.0

data/lib/aws-sdk-datasync/client.rb

@@ -1725,12 +1725,13 @@ module Aws::DataSync
     # server. DataSync can use this location as a source or destination for
     # transferring data.
     #
-    # Before you begin, make sure that you understand how DataSync [accesses
-    # SMB file servers][1].
+    # Before you begin, make sure that you understand how DataSync accesses
+    # SMB file servers. For more information, see [Providing DataSync access
+    # to SMB file servers][1].
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/datasync/latest/userguide/create-smb-location.html#configuring-smb
+    # [1]: https://docs.aws.amazon.com/datasync/latest/userguide/create-smb-location.html#configuring-smb-permissions
     #
     # @option params [required, String] :subdirectory
     #   Specifies the name of the share exported by your SMB file server where
@@ -1740,49 +1741,49 @@ module Aws::DataSync
     #
     #   To copy all data in the subdirectory, DataSync must be able to mount
     #   the SMB share and access all of its data. For more information, see
-    #   [required permissions][1] for SMB locations.
+    #   [Providing DataSync access to SMB file servers][1].
     #
     #
     #
     #   [1]: https://docs.aws.amazon.com/datasync/latest/userguide/create-smb-location.html#configuring-smb-permissions
     #
     # @option params [required, String] :server_hostname
-    #   Specifies the Domain Name Service (DNS) name or IP address of the SMB
-    #   file server that your DataSync agent will mount.
+    #   Specifies the domain name or IP address of the SMB file server that
+    #   your DataSync agent will mount.
     #
-    #   <note markdown="1"> You can't specify an IP version 6 (IPv6) address.
+    #   Remember the following when configuring this parameter:
     #
-    #    </note>
+    #   * You can't specify an IP version 6 (IPv6) address.
     #
-    # @option params [required, String] :user
+    #   * If you're using Kerberos authentication, you must specify a domain
+    #     name.
+    #
+    # @option params [String] :user
     #   Specifies the user that can mount and access the files, folders, and
-    #   file metadata in your SMB file server.
+    #   file metadata in your SMB file server. This parameter applies only if
+    #   `AuthenticationType` is set to `NTLM`.
     #
     #   For information about choosing a user with the right level of access
-    #   for your transfer, see [required permissions][1] for SMB locations.
+    #   for your transfer, see [Providing DataSync access to SMB file
+    #   servers][1].
     #
     #
     #
     #   [1]: https://docs.aws.amazon.com/datasync/latest/userguide/create-smb-location.html#configuring-smb-permissions
     #
     # @option params [String] :domain
-    #   Specifies the name of the Active Directory domain that your SMB file
-    #   server belongs to.
+    #   Specifies the Windows domain name that your SMB file server belongs
+    #   to. This parameter applies only if `AuthenticationType` is set to
+    #   `NTLM`.
     #
-    #   If you have multiple Active Directory domains in your environment,
-    #   configuring this parameter makes sure that DataSync connects to the
-    #   right file server.
+    #   If you have multiple domains in your environment, configuring this
+    #   parameter makes sure that DataSync connects to the right file server.
     #
-    # @option params [required, String] :password
+    # @option params [String] :password
     #   Specifies the password of the user who can mount your SMB file server
     #   and has permission to access the files and folders involved in your
-    #   transfer.
-    #
-    #   For more information, see [required permissions][1] for SMB locations.
-    #
-    #
-    #
-    #   [1]: https://docs.aws.amazon.com/datasync/latest/userguide/create-smb-location.html#configuring-smb-permissions
+    #   transfer. This parameter applies only if `AuthenticationType` is set
+    #   to `NTLM`.
     #
     # @option params [required, Array<String>] :agent_arns
     #   Specifies the DataSync agent (or agents) that can connect to your SMB
@@ -1798,6 +1799,57 @@ module Aws::DataSync
     #   Amazon Web Services resources. We recommend creating at least a name
     #   tag for your location.
     #
+    # @option params [String] :authentication_type
+    #   Specifies the authentication protocol that DataSync uses to connect to
+    #   your SMB file server. DataSync supports `NTLM` (default) and
+    #   `KERBEROS` authentication.
+    #
+    # @option params [Array<String>] :dns_ip_addresses
+    #   Specifies the IPv4 addresses for the DNS servers that your SMB file
+    #   server belongs to. This parameter applies only if `AuthenticationType`
+    #   is set to `KERBEROS`.
+    #
+    #   If you have multiple domains in your environment, configuring this
+    #   parameter makes sure that DataSync connects to the right SMB file
+    #   server.
+    #
+    # @option params [String] :kerberos_principal
+    #   Specifies a service principal name (SPN), which is an identity in your
+    #   Kerberos realm that has permission to access the files, folders, and
+    #   file metadata in your SMB file server.
+    #
+    #   SPNs are case sensitive and must include a prepended `cifs/`. For
+    #   example, an SPN might look like `cifs/kerberosuser@EXAMPLE.COM`.
+    #
+    #   Your task execution will fail if the SPN that you provide for this
+    #   parameter doesn’t match what’s exactly in your keytab or `krb5.conf`
+    #   files.
+    #
+    # @option params [String, StringIO, File] :kerberos_keytab
+    #   Specifies your Kerberos key table (keytab) file, which includes
+    #   mappings between your service principal name (SPN) and encryption
+    #   keys.
+    #
+    #   You can specify the keytab using a file path (for example,
+    #   `file://path/to/file.keytab`). The file must be base64 encoded. If
+    #   you're using the CLI, the encoding is done for you.
+    #
+    #   To avoid task execution errors, make sure that the SPN in the keytab
+    #   file matches exactly what you specify for `KerberosPrincipal` and in
+    #   your `krb5.conf` file.
+    #
+    # @option params [String, StringIO, File] :kerberos_krb_5_conf
+    #   Specifies a Kerberos configuration file (`krb5.conf`) that defines
+    #   your Kerberos realm configuration.
+    #
+    #   You can specify the `krb5.conf` using a file path (for example,
+    #   `file://path/to/krb5.conf`). The file must be base64 encoded. If
+    #   you're using the CLI, the encoding is done for you.
+    #
+    #   To avoid task execution errors, make sure that the service principal
+    #   name (SPN) in the `krb5.conf` file matches exactly what you specify
+    #   for `KerberosPrincipal` and in your keytab file.
+    #
     # @return [Types::CreateLocationSmbResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::CreateLocationSmbResponse#location_arn #location_arn} => String
@@ -1807,9 +1859,9 @@ module Aws::DataSync
     #   resp = client.create_location_smb({
     #     subdirectory: "SmbSubdirectory", # required
     #     server_hostname: "ServerHostname", # required
-    #     user: "SmbUser", # required
+    #     user: "SmbUser",
     #     domain: "SmbDomain",
-    #     password: "SmbPassword", # required
+    #     password: "SmbPassword",
     #     agent_arns: ["AgentArn"], # required
     #     mount_options: {
     #       version: "AUTOMATIC", # accepts AUTOMATIC, SMB2, SMB3, SMB1, SMB2_0
@@ -1820,6 +1872,11 @@ module Aws::DataSync
     #         value: "TagValue",
     #       },
     #     ],
+    #     authentication_type: "NTLM", # accepts NTLM, KERBEROS
+    #     dns_ip_addresses: ["ServerIpAddress"],
+    #     kerberos_principal: "KerberosPrincipal",
+    #     kerberos_keytab: "data",
+    #     kerberos_krb_5_conf: "data",
     #   })
     #
     # @example Response structure
@@ -2696,6 +2753,9 @@ module Aws::DataSync
     #   * {Types::DescribeLocationSmbResponse#domain #domain} => String
     #   * {Types::DescribeLocationSmbResponse#mount_options #mount_options} => Types::SmbMountOptions
     #   * {Types::DescribeLocationSmbResponse#creation_time #creation_time} => Time
+    #   * {Types::DescribeLocationSmbResponse#dns_ip_addresses #dns_ip_addresses} => Array&lt;String&gt;
+    #   * {Types::DescribeLocationSmbResponse#kerberos_principal #kerberos_principal} => String
+    #   * {Types::DescribeLocationSmbResponse#authentication_type #authentication_type} => String
     #
     # @example Request syntax with placeholder values
     #
@@ -2713,6 +2773,10 @@ module Aws::DataSync
     #   resp.domain #=> String
     #   resp.mount_options.version #=> String, one of "AUTOMATIC", "SMB2", "SMB3", "SMB1", "SMB2_0"
     #   resp.creation_time #=> Time
+    #   resp.dns_ip_addresses #=> Array
+    #   resp.dns_ip_addresses[0] #=> String
+    #   resp.kerberos_principal #=> String
+    #   resp.authentication_type #=> String, one of "NTLM", "KERBEROS"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/datasync-2018-11-09/DescribeLocationSmb AWS API Documentation
     #
@@ -4323,7 +4387,7 @@ module Aws::DataSync
     #         },
     #       },
     #       smb: {
-    #         domain: "FsxUpdateSmbDomain",
+    #         domain: "UpdateSmbDomain",
     #         mount_options: {
     #           version: "AUTOMATIC", # accepts AUTOMATIC, SMB2, SMB3, SMB1, SMB2_0
     #         },
@@ -4458,7 +4522,7 @@ module Aws::DataSync
     #   resp = client.update_location_fsx_windows({
     #     location_arn: "LocationArn", # required
     #     subdirectory: "FsxWindowsSubdirectory",
-    #     domain: "FsxUpdateSmbDomain",
+    #     domain: "UpdateSmbDomain",
     #     user: "SmbUser",
     #     password: "SmbPassword",
     #   })
@@ -4830,7 +4894,7 @@ module Aws::DataSync
     #
     #   To copy all data in the specified subdirectory, DataSync must be able
     #   to mount the SMB share and access all of its data. For more
-    #   information, see [required permissions][1] for SMB locations.
+    #   information, see [Providing DataSync access to SMB file servers][1].
     #
     #
     #
@@ -4839,9 +4903,11 @@ module Aws::DataSync
     # @option params [String] :user
     #   Specifies the user name that can mount your SMB file server and has
     #   permission to access the files and folders involved in your transfer.
+    #   This parameter applies only if `AuthenticationType` is set to `NTLM`.
     #
     #   For information about choosing a user with the right level of access
-    #   for your transfer, see [required permissions][1] for SMB locations.
+    #   for your transfer, see [Providing DataSync access to SMB file
+    #   servers][1].
     #
     #
     #
@@ -4849,27 +4915,17 @@ module Aws::DataSync
     #
     # @option params [String] :domain
     #   Specifies the Windows domain name that your SMB file server belongs
-    #   to.
+    #   to. This parameter applies only if `AuthenticationType` is set to
+    #   `NTLM`.
     #
     #   If you have multiple domains in your environment, configuring this
     #   parameter makes sure that DataSync connects to the right file server.
     #
-    #   For more information, see [required permissions][1] for SMB locations.
-    #
-    #
-    #
-    #   [1]: https://docs.aws.amazon.com/datasync/latest/userguide/create-smb-location.html#configuring-smb-permissions
-    #
     # @option params [String] :password
     #   Specifies the password of the user who can mount your SMB file server
     #   and has permission to access the files and folders involved in your
-    #   transfer.
-    #
-    #   For more information, see [required permissions][1] for SMB locations.
-    #
-    #
-    #
-    #   [1]: https://docs.aws.amazon.com/datasync/latest/userguide/create-smb-location.html#configuring-smb-permissions
+    #   transfer. This parameter applies only if `AuthenticationType` is set
+    #   to `NTLM`.
     #
     # @option params [Array<String>] :agent_arns
     #   Specifies the DataSync agent (or agents) that can connect to your SMB
@@ -4880,6 +4936,57 @@ module Aws::DataSync
     #   Specifies the version of the Server Message Block (SMB) protocol that
     #   DataSync uses to access an SMB file server.
     #
+    # @option params [String] :authentication_type
+    #   Specifies the authentication protocol that DataSync uses to connect to
+    #   your SMB file server. DataSync supports `NTLM` (default) and
+    #   `KERBEROS` authentication.
+    #
+    # @option params [Array<String>] :dns_ip_addresses
+    #   Specifies the IPv4 addresses for the DNS servers that your SMB file
+    #   server belongs to. This parameter applies only if `AuthenticationType`
+    #   is set to `KERBEROS`.
+    #
+    #   If you have multiple domains in your environment, configuring this
+    #   parameter makes sure that DataSync connects to the right SMB file
+    #   server.
+    #
+    # @option params [String] :kerberos_principal
+    #   Specifies a service principal name (SPN), which is an identity in your
+    #   Kerberos realm that has permission to access the files, folders, and
+    #   file metadata in your SMB file server.
+    #
+    #   SPNs are case sensitive and must include a prepended `cifs/`. For
+    #   example, an SPN might look like `cifs/kerberosuser@EXAMPLE.COM`.
+    #
+    #   Your task execution will fail if the SPN that you provide for this
+    #   parameter doesn’t match what’s exactly in your keytab or `krb5.conf`
+    #   files.
+    #
+    # @option params [String, StringIO, File] :kerberos_keytab
+    #   Specifies your Kerberos key table (keytab) file, which includes
+    #   mappings between your service principal name (SPN) and encryption
+    #   keys.
+    #
+    #   You can specify the keytab using a file path (for example,
+    #   `file://path/to/file.keytab`). The file must be base64 encoded. If
+    #   you're using the CLI, the encoding is done for you.
+    #
+    #   To avoid task execution errors, make sure that the SPN in the keytab
+    #   file matches exactly what you specify for `KerberosPrincipal` and in
+    #   your `krb5.conf` file.
+    #
+    # @option params [String, StringIO, File] :kerberos_krb_5_conf
+    #   Specifies a Kerberos configuration file (`krb5.conf`) that defines
+    #   your Kerberos realm configuration.
+    #
+    #   You can specify the `krb5.conf` using a file path (for example,
+    #   `file://path/to/krb5.conf`). The file must be base64 encoded. If
+    #   you're using the CLI, the encoding is done for you.
+    #
+    #   To avoid task execution errors, make sure that the service principal
+    #   name (SPN) in the `krb5.conf` file matches exactly what you specify
+    #   for `KerberosPrincipal` and in your keytab file.
+    #
     # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
     #
     # @example Request syntax with placeholder values
@@ -4894,6 +5001,11 @@ module Aws::DataSync
     #     mount_options: {
     #       version: "AUTOMATIC", # accepts AUTOMATIC, SMB2, SMB3, SMB1, SMB2_0
     #     },
+    #     authentication_type: "NTLM", # accepts NTLM, KERBEROS
+    #     dns_ip_addresses: ["ServerIpAddress"],
+    #     kerberos_principal: "KerberosPrincipal",
+    #     kerberos_keytab: "data",
+    #     kerberos_krb_5_conf: "data",
     #   })
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/datasync-2018-11-09/UpdateLocationSmb AWS API Documentation
@@ -5236,7 +5348,7 @@ module Aws::DataSync
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-datasync'
-      context[:gem_version] = '1.95.0'
+      context[:gem_version] = '1.96.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-datasync/client_api.rb

@@ -120,6 +120,7 @@ module Aws::DataSync
     DiscoveryServerPort = Shapes::IntegerShape.new(name: 'DiscoveryServerPort')
     DiscoverySystemType = Shapes::StringShape.new(name: 'DiscoverySystemType')
     DiscoveryTime = Shapes::TimestampShape.new(name: 'DiscoveryTime')
+    DnsIpList = Shapes::ListShape.new(name: 'DnsIpList')
     Duration = Shapes::IntegerShape.new(name: 'Duration')
     Ec2Config = Shapes::StructureShape.new(name: 'Ec2Config')
     Ec2SecurityGroupArn = Shapes::StringShape.new(name: 'Ec2SecurityGroupArn')
@@ -149,7 +150,6 @@ module Aws::DataSync
     FsxProtocolSmb = Shapes::StructureShape.new(name: 'FsxProtocolSmb')
     FsxUpdateProtocol = Shapes::StructureShape.new(name: 'FsxUpdateProtocol')
     FsxUpdateProtocolSmb = Shapes::StructureShape.new(name: 'FsxUpdateProtocolSmb')
-    FsxUpdateSmbDomain = Shapes::StringShape.new(name: 'FsxUpdateSmbDomain')
     FsxWindowsSubdirectory = Shapes::StringShape.new(name: 'FsxWindowsSubdirectory')
     GenerateRecommendationsRequest = Shapes::StructureShape.new(name: 'GenerateRecommendationsRequest')
     GenerateRecommendationsResponse = Shapes::StructureShape.new(name: 'GenerateRecommendationsResponse')
@@ -277,6 +277,8 @@ module Aws::DataSync
     ScheduleStatus = Shapes::StringShape.new(name: 'ScheduleStatus')
     SecretsManagerArn = Shapes::StringShape.new(name: 'SecretsManagerArn')
     ServerHostname = Shapes::StringShape.new(name: 'ServerHostname')
+    ServerIpAddress = Shapes::StringShape.new(name: 'ServerIpAddress')
+    SmbAuthenticationType = Shapes::StringShape.new(name: 'SmbAuthenticationType')
     SmbDomain = Shapes::StringShape.new(name: 'SmbDomain')
     SmbMountOptions = Shapes::StructureShape.new(name: 'SmbMountOptions')
     SmbPassword = Shapes::StringShape.new(name: 'SmbPassword')
@@ -356,6 +358,7 @@ module Aws::DataSync
     UpdateLocationS3Response = Shapes::StructureShape.new(name: 'UpdateLocationS3Response')
     UpdateLocationSmbRequest = Shapes::StructureShape.new(name: 'UpdateLocationSmbRequest')
     UpdateLocationSmbResponse = Shapes::StructureShape.new(name: 'UpdateLocationSmbResponse')
+    UpdateSmbDomain = Shapes::StringShape.new(name: 'UpdateSmbDomain')
     UpdateStorageSystemRequest = Shapes::StructureShape.new(name: 'UpdateStorageSystemRequest')
     UpdateStorageSystemResponse = Shapes::StructureShape.new(name: 'UpdateStorageSystemResponse')
     UpdateTaskExecutionRequest = Shapes::StructureShape.new(name: 'UpdateTaskExecutionRequest')
@@ -539,12 +542,17 @@ module Aws::DataSync
 
     CreateLocationSmbRequest.add_member(:subdirectory, Shapes::ShapeRef.new(shape: SmbSubdirectory, required: true, location_name: "Subdirectory"))
     CreateLocationSmbRequest.add_member(:server_hostname, Shapes::ShapeRef.new(shape: ServerHostname, required: true, location_name: "ServerHostname"))
-    CreateLocationSmbRequest.add_member(:user, Shapes::ShapeRef.new(shape: SmbUser, required: true, location_name: "User"))
+    CreateLocationSmbRequest.add_member(:user, Shapes::ShapeRef.new(shape: SmbUser, location_name: "User"))
     CreateLocationSmbRequest.add_member(:domain, Shapes::ShapeRef.new(shape: SmbDomain, location_name: "Domain"))
-    CreateLocationSmbRequest.add_member(:password, Shapes::ShapeRef.new(shape: SmbPassword, required: true, location_name: "Password"))
+    CreateLocationSmbRequest.add_member(:password, Shapes::ShapeRef.new(shape: SmbPassword, location_name: "Password"))
     CreateLocationSmbRequest.add_member(:agent_arns, Shapes::ShapeRef.new(shape: AgentArnList, required: true, location_name: "AgentArns"))
     CreateLocationSmbRequest.add_member(:mount_options, Shapes::ShapeRef.new(shape: SmbMountOptions, location_name: "MountOptions"))
     CreateLocationSmbRequest.add_member(:tags, Shapes::ShapeRef.new(shape: InputTagList, location_name: "Tags"))
+    CreateLocationSmbRequest.add_member(:authentication_type, Shapes::ShapeRef.new(shape: SmbAuthenticationType, location_name: "AuthenticationType"))
+    CreateLocationSmbRequest.add_member(:dns_ip_addresses, Shapes::ShapeRef.new(shape: DnsIpList, location_name: "DnsIpAddresses"))
+    CreateLocationSmbRequest.add_member(:kerberos_principal, Shapes::ShapeRef.new(shape: KerberosPrincipal, location_name: "KerberosPrincipal"))
+    CreateLocationSmbRequest.add_member(:kerberos_keytab, Shapes::ShapeRef.new(shape: KerberosKeytabFile, location_name: "KerberosKeytab"))
+    CreateLocationSmbRequest.add_member(:kerberos_krb_5_conf, Shapes::ShapeRef.new(shape: KerberosKrb5ConfFile, location_name: "KerberosKrb5Conf"))
     CreateLocationSmbRequest.struct_class = Types::CreateLocationSmbRequest
 
     CreateLocationSmbResponse.add_member(:location_arn, Shapes::ShapeRef.new(shape: LocationArn, location_name: "LocationArn"))
@@ -737,6 +745,9 @@ module Aws::DataSync
     DescribeLocationSmbResponse.add_member(:domain, Shapes::ShapeRef.new(shape: SmbDomain, location_name: "Domain"))
     DescribeLocationSmbResponse.add_member(:mount_options, Shapes::ShapeRef.new(shape: SmbMountOptions, location_name: "MountOptions"))
     DescribeLocationSmbResponse.add_member(:creation_time, Shapes::ShapeRef.new(shape: Time, location_name: "CreationTime"))
+    DescribeLocationSmbResponse.add_member(:dns_ip_addresses, Shapes::ShapeRef.new(shape: DnsIpList, location_name: "DnsIpAddresses"))
+    DescribeLocationSmbResponse.add_member(:kerberos_principal, Shapes::ShapeRef.new(shape: KerberosPrincipal, location_name: "KerberosPrincipal"))
+    DescribeLocationSmbResponse.add_member(:authentication_type, Shapes::ShapeRef.new(shape: SmbAuthenticationType, location_name: "AuthenticationType"))
     DescribeLocationSmbResponse.struct_class = Types::DescribeLocationSmbResponse
 
     DescribeStorageSystemRequest.add_member(:storage_system_arn, Shapes::ShapeRef.new(shape: StorageSystemArn, required: true, location_name: "StorageSystemArn"))
@@ -847,6 +858,8 @@ module Aws::DataSync
     DiscoveryServerConfiguration.add_member(:server_port, Shapes::ShapeRef.new(shape: DiscoveryServerPort, location_name: "ServerPort"))
     DiscoveryServerConfiguration.struct_class = Types::DiscoveryServerConfiguration
 
+    DnsIpList.member = Shapes::ShapeRef.new(shape: ServerIpAddress)
+
     Ec2Config.add_member(:subnet_arn, Shapes::ShapeRef.new(shape: Ec2SubnetArn, required: true, location_name: "SubnetArn"))
     Ec2Config.add_member(:security_group_arns, Shapes::ShapeRef.new(shape: Ec2SecurityGroupArnList, required: true, location_name: "SecurityGroupArns"))
     Ec2Config.struct_class = Types::Ec2Config
@@ -882,7 +895,7 @@ module Aws::DataSync
     FsxUpdateProtocol.add_member(:smb, Shapes::ShapeRef.new(shape: FsxUpdateProtocolSmb, location_name: "SMB"))
     FsxUpdateProtocol.struct_class = Types::FsxUpdateProtocol
 
-    FsxUpdateProtocolSmb.add_member(:domain, Shapes::ShapeRef.new(shape: FsxUpdateSmbDomain, location_name: "Domain"))
+    FsxUpdateProtocolSmb.add_member(:domain, Shapes::ShapeRef.new(shape: UpdateSmbDomain, location_name: "Domain"))
     FsxUpdateProtocolSmb.add_member(:mount_options, Shapes::ShapeRef.new(shape: SmbMountOptions, location_name: "MountOptions"))
     FsxUpdateProtocolSmb.add_member(:password, Shapes::ShapeRef.new(shape: SmbPassword, location_name: "Password"))
     FsxUpdateProtocolSmb.add_member(:user, Shapes::ShapeRef.new(shape: SmbUser, location_name: "User"))
@@ -1357,7 +1370,7 @@ module Aws::DataSync
 
     UpdateLocationFsxWindowsRequest.add_member(:location_arn, Shapes::ShapeRef.new(shape: LocationArn, required: true, location_name: "LocationArn"))
     UpdateLocationFsxWindowsRequest.add_member(:subdirectory, Shapes::ShapeRef.new(shape: FsxWindowsSubdirectory, location_name: "Subdirectory"))
-    UpdateLocationFsxWindowsRequest.add_member(:domain, Shapes::ShapeRef.new(shape: FsxUpdateSmbDomain, location_name: "Domain"))
+    UpdateLocationFsxWindowsRequest.add_member(:domain, Shapes::ShapeRef.new(shape: UpdateSmbDomain, location_name: "Domain"))
     UpdateLocationFsxWindowsRequest.add_member(:user, Shapes::ShapeRef.new(shape: SmbUser, location_name: "User"))
     UpdateLocationFsxWindowsRequest.add_member(:password, Shapes::ShapeRef.new(shape: SmbPassword, location_name: "Password"))
     UpdateLocationFsxWindowsRequest.struct_class = Types::UpdateLocationFsxWindowsRequest
@@ -1416,6 +1429,11 @@ module Aws::DataSync
     UpdateLocationSmbRequest.add_member(:password, Shapes::ShapeRef.new(shape: SmbPassword, location_name: "Password"))
     UpdateLocationSmbRequest.add_member(:agent_arns, Shapes::ShapeRef.new(shape: AgentArnList, location_name: "AgentArns"))
     UpdateLocationSmbRequest.add_member(:mount_options, Shapes::ShapeRef.new(shape: SmbMountOptions, location_name: "MountOptions"))
+    UpdateLocationSmbRequest.add_member(:authentication_type, Shapes::ShapeRef.new(shape: SmbAuthenticationType, location_name: "AuthenticationType"))
+    UpdateLocationSmbRequest.add_member(:dns_ip_addresses, Shapes::ShapeRef.new(shape: DnsIpList, location_name: "DnsIpAddresses"))
+    UpdateLocationSmbRequest.add_member(:kerberos_principal, Shapes::ShapeRef.new(shape: KerberosPrincipal, location_name: "KerberosPrincipal"))
+    UpdateLocationSmbRequest.add_member(:kerberos_keytab, Shapes::ShapeRef.new(shape: KerberosKeytabFile, location_name: "KerberosKeytab"))
+    UpdateLocationSmbRequest.add_member(:kerberos_krb_5_conf, Shapes::ShapeRef.new(shape: KerberosKrb5ConfFile, location_name: "KerberosKrb5Conf"))
     UpdateLocationSmbRequest.struct_class = Types::UpdateLocationSmbRequest
 
     UpdateLocationSmbResponse.struct_class = Types::UpdateLocationSmbResponse

data/lib/aws-sdk-datasync/types.rb

@@ -1196,7 +1196,7 @@ module Aws::DataSync
     #
     #   To copy all data in the subdirectory, DataSync must be able to mount
     #   the SMB share and access all of its data. For more information, see
-    #   [required permissions][1] for SMB locations.
+    #   [Providing DataSync access to SMB file servers][1].
     #
     #
     #
@@ -1204,20 +1204,25 @@ module Aws::DataSync
     #   @return [String]
     #
     # @!attribute [rw] server_hostname
-    #   Specifies the Domain Name Service (DNS) name or IP address of the
-    #   SMB file server that your DataSync agent will mount.
+    #   Specifies the domain name or IP address of the SMB file server that
+    #   your DataSync agent will mount.
     #
-    #   <note markdown="1"> You can't specify an IP version 6 (IPv6) address.
+    #   Remember the following when configuring this parameter:
     #
-    #    </note>
+    #   * You can't specify an IP version 6 (IPv6) address.
+    #
+    #   * If you're using Kerberos authentication, you must specify a
+    #     domain name.
     #   @return [String]
     #
     # @!attribute [rw] user
     #   Specifies the user that can mount and access the files, folders, and
-    #   file metadata in your SMB file server.
+    #   file metadata in your SMB file server. This parameter applies only
+    #   if `AuthenticationType` is set to `NTLM`.
     #
     #   For information about choosing a user with the right level of access
-    #   for your transfer, see [required permissions][1] for SMB locations.
+    #   for your transfer, see [Providing DataSync access to SMB file
+    #   servers][1].
     #
     #
     #
@@ -1225,25 +1230,20 @@ module Aws::DataSync
     #   @return [String]
     #
     # @!attribute [rw] domain
-    #   Specifies the name of the Active Directory domain that your SMB file
-    #   server belongs to.
+    #   Specifies the Windows domain name that your SMB file server belongs
+    #   to. This parameter applies only if `AuthenticationType` is set to
+    #   `NTLM`.
     #
-    #   If you have multiple Active Directory domains in your environment,
-    #   configuring this parameter makes sure that DataSync connects to the
-    #   right file server.
+    #   If you have multiple domains in your environment, configuring this
+    #   parameter makes sure that DataSync connects to the right file
+    #   server.
     #   @return [String]
     #
     # @!attribute [rw] password
     #   Specifies the password of the user who can mount your SMB file
     #   server and has permission to access the files and folders involved
-    #   in your transfer.
-    #
-    #   For more information, see [required permissions][1] for SMB
-    #   locations.
-    #
-    #
-    #
-    #   [1]: https://docs.aws.amazon.com/datasync/latest/userguide/create-smb-location.html#configuring-smb-permissions
+    #   in your transfer. This parameter applies only if
+    #   `AuthenticationType` is set to `NTLM`.
     #   @return [String]
     #
     # @!attribute [rw] agent_arns
@@ -1263,6 +1263,62 @@ module Aws::DataSync
     #   name tag for your location.
     #   @return [Array<Types::TagListEntry>]
     #
+    # @!attribute [rw] authentication_type
+    #   Specifies the authentication protocol that DataSync uses to connect
+    #   to your SMB file server. DataSync supports `NTLM` (default) and
+    #   `KERBEROS` authentication.
+    #   @return [String]
+    #
+    # @!attribute [rw] dns_ip_addresses
+    #   Specifies the IPv4 addresses for the DNS servers that your SMB file
+    #   server belongs to. This parameter applies only if
+    #   `AuthenticationType` is set to `KERBEROS`.
+    #
+    #   If you have multiple domains in your environment, configuring this
+    #   parameter makes sure that DataSync connects to the right SMB file
+    #   server.
+    #   @return [Array<String>]
+    #
+    # @!attribute [rw] kerberos_principal
+    #   Specifies a service principal name (SPN), which is an identity in
+    #   your Kerberos realm that has permission to access the files,
+    #   folders, and file metadata in your SMB file server.
+    #
+    #   SPNs are case sensitive and must include a prepended `cifs/`. For
+    #   example, an SPN might look like `cifs/kerberosuser@EXAMPLE.COM`.
+    #
+    #   Your task execution will fail if the SPN that you provide for this
+    #   parameter doesn’t match what’s exactly in your keytab or `krb5.conf`
+    #   files.
+    #   @return [String]
+    #
+    # @!attribute [rw] kerberos_keytab
+    #   Specifies your Kerberos key table (keytab) file, which includes
+    #   mappings between your service principal name (SPN) and encryption
+    #   keys.
+    #
+    #   You can specify the keytab using a file path (for example,
+    #   `file://path/to/file.keytab`). The file must be base64 encoded. If
+    #   you're using the CLI, the encoding is done for you.
+    #
+    #   To avoid task execution errors, make sure that the SPN in the keytab
+    #   file matches exactly what you specify for `KerberosPrincipal` and in
+    #   your `krb5.conf` file.
+    #   @return [String]
+    #
+    # @!attribute [rw] kerberos_krb_5_conf
+    #   Specifies a Kerberos configuration file (`krb5.conf`) that defines
+    #   your Kerberos realm configuration.
+    #
+    #   You can specify the `krb5.conf` using a file path (for example,
+    #   `file://path/to/krb5.conf`). The file must be base64 encoded. If
+    #   you're using the CLI, the encoding is done for you.
+    #
+    #   To avoid task execution errors, make sure that the service principal
+    #   name (SPN) in the `krb5.conf` file matches exactly what you specify
+    #   for `KerberosPrincipal` and in your keytab file.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/datasync-2018-11-09/CreateLocationSmbRequest AWS API Documentation
     #
     class CreateLocationSmbRequest < Struct.new(
@@ -1273,7 +1329,12 @@ module Aws::DataSync
       :password,
       :agent_arns,
       :mount_options,
-      :tags)
+      :tags,
+      :authentication_type,
+      :dns_ip_addresses,
+      :kerberos_principal,
+      :kerberos_keytab,
+      :kerberos_krb_5_conf)
       SENSITIVE = [:password]
       include Aws::Structure
     end
@@ -2373,22 +2434,41 @@ module Aws::DataSync
     #
     # @!attribute [rw] user
     #   The user that can mount and access the files, folders, and file
-    #   metadata in your SMB file server.
+    #   metadata in your SMB file server. This element applies only if
+    #   `AuthenticationType` is set to `NTLM`.
     #   @return [String]
     #
     # @!attribute [rw] domain
-    #   The name of the Microsoft Active Directory domain that the SMB file
-    #   server belongs to.
+    #   The name of the Windows domain that the SMB file server belongs to.
+    #   This element applies only if `AuthenticationType` is set to `NTLM`.
     #   @return [String]
     #
     # @!attribute [rw] mount_options
-    #   The protocol that DataSync use to access your SMB file.
+    #   The SMB protocol version that DataSync uses to access your SMB file
+    #   server.
     #   @return [Types::SmbMountOptions]
     #
     # @!attribute [rw] creation_time
     #   The time that the SMB location was created.
     #   @return [Time]
     #
+    # @!attribute [rw] dns_ip_addresses
+    #   The IPv4 addresses for the DNS servers that your SMB file server
+    #   belongs to. This element applies only if `AuthenticationType` is set
+    #   to `KERBEROS`.
+    #   @return [Array<String>]
+    #
+    # @!attribute [rw] kerberos_principal
+    #   The Kerberos service principal name (SPN) that has permission to
+    #   access the files, folders, and file metadata in your SMB file
+    #   server.
+    #   @return [String]
+    #
+    # @!attribute [rw] authentication_type
+    #   The authentication protocol that DataSync uses to connect to your
+    #   SMB file server.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/datasync-2018-11-09/DescribeLocationSmbResponse AWS API Documentation
     #
     class DescribeLocationSmbResponse < Struct.new(
@@ -2398,7 +2478,10 @@ module Aws::DataSync
       :user,
       :domain,
       :mount_options,
-      :creation_time)
+      :creation_time,
+      :dns_ip_addresses,
+      :kerberos_principal,
+      :authentication_type)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -6793,7 +6876,7 @@ module Aws::DataSync
     #
     #   To copy all data in the specified subdirectory, DataSync must be
     #   able to mount the SMB share and access all of its data. For more
-    #   information, see [required permissions][1] for SMB locations.
+    #   information, see [Providing DataSync access to SMB file servers][1].
     #
     #
     #
@@ -6803,10 +6886,12 @@ module Aws::DataSync
     # @!attribute [rw] user
     #   Specifies the user name that can mount your SMB file server and has
     #   permission to access the files and folders involved in your
-    #   transfer.
+    #   transfer. This parameter applies only if `AuthenticationType` is set
+    #   to `NTLM`.
     #
     #   For information about choosing a user with the right level of access
-    #   for your transfer, see [required permissions][1] for SMB locations.
+    #   for your transfer, see [Providing DataSync access to SMB file
+    #   servers][1].
     #
     #
     #
@@ -6815,31 +6900,19 @@ module Aws::DataSync
     #
     # @!attribute [rw] domain
     #   Specifies the Windows domain name that your SMB file server belongs
-    #   to.
+    #   to. This parameter applies only if `AuthenticationType` is set to
+    #   `NTLM`.
     #
     #   If you have multiple domains in your environment, configuring this
     #   parameter makes sure that DataSync connects to the right file
     #   server.
-    #
-    #   For more information, see [required permissions][1] for SMB
-    #   locations.
-    #
-    #
-    #
-    #   [1]: https://docs.aws.amazon.com/datasync/latest/userguide/create-smb-location.html#configuring-smb-permissions
     #   @return [String]
     #
     # @!attribute [rw] password
     #   Specifies the password of the user who can mount your SMB file
     #   server and has permission to access the files and folders involved
-    #   in your transfer.
-    #
-    #   For more information, see [required permissions][1] for SMB
-    #   locations.
-    #
-    #
-    #
-    #   [1]: https://docs.aws.amazon.com/datasync/latest/userguide/create-smb-location.html#configuring-smb-permissions
+    #   in your transfer. This parameter applies only if
+    #   `AuthenticationType` is set to `NTLM`.
     #   @return [String]
     #
     # @!attribute [rw] agent_arns
@@ -6853,6 +6926,62 @@ module Aws::DataSync
     #   that DataSync uses to access an SMB file server.
     #   @return [Types::SmbMountOptions]
     #
+    # @!attribute [rw] authentication_type
+    #   Specifies the authentication protocol that DataSync uses to connect
+    #   to your SMB file server. DataSync supports `NTLM` (default) and
+    #   `KERBEROS` authentication.
+    #   @return [String]
+    #
+    # @!attribute [rw] dns_ip_addresses
+    #   Specifies the IPv4 addresses for the DNS servers that your SMB file
+    #   server belongs to. This parameter applies only if
+    #   `AuthenticationType` is set to `KERBEROS`.
+    #
+    #   If you have multiple domains in your environment, configuring this
+    #   parameter makes sure that DataSync connects to the right SMB file
+    #   server.
+    #   @return [Array<String>]
+    #
+    # @!attribute [rw] kerberos_principal
+    #   Specifies a service principal name (SPN), which is an identity in
+    #   your Kerberos realm that has permission to access the files,
+    #   folders, and file metadata in your SMB file server.
+    #
+    #   SPNs are case sensitive and must include a prepended `cifs/`. For
+    #   example, an SPN might look like `cifs/kerberosuser@EXAMPLE.COM`.
+    #
+    #   Your task execution will fail if the SPN that you provide for this
+    #   parameter doesn’t match what’s exactly in your keytab or `krb5.conf`
+    #   files.
+    #   @return [String]
+    #
+    # @!attribute [rw] kerberos_keytab
+    #   Specifies your Kerberos key table (keytab) file, which includes
+    #   mappings between your service principal name (SPN) and encryption
+    #   keys.
+    #
+    #   You can specify the keytab using a file path (for example,
+    #   `file://path/to/file.keytab`). The file must be base64 encoded. If
+    #   you're using the CLI, the encoding is done for you.
+    #
+    #   To avoid task execution errors, make sure that the SPN in the keytab
+    #   file matches exactly what you specify for `KerberosPrincipal` and in
+    #   your `krb5.conf` file.
+    #   @return [String]
+    #
+    # @!attribute [rw] kerberos_krb_5_conf
+    #   Specifies a Kerberos configuration file (`krb5.conf`) that defines
+    #   your Kerberos realm configuration.
+    #
+    #   You can specify the `krb5.conf` using a file path (for example,
+    #   `file://path/to/krb5.conf`). The file must be base64 encoded. If
+    #   you're using the CLI, the encoding is done for you.
+    #
+    #   To avoid task execution errors, make sure that the service principal
+    #   name (SPN) in the `krb5.conf` file matches exactly what you specify
+    #   for `KerberosPrincipal` and in your keytab file.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/datasync-2018-11-09/UpdateLocationSmbRequest AWS API Documentation
     #
     class UpdateLocationSmbRequest < Struct.new(
@@ -6862,7 +6991,12 @@ module Aws::DataSync
       :domain,
       :password,
       :agent_arns,
-      :mount_options)
+      :mount_options,
+      :authentication_type,
+      :dns_ip_addresses,
+      :kerberos_principal,
+      :kerberos_keytab,
+      :kerberos_krb_5_conf)
       SENSITIVE = [:password]
       include Aws::Structure
     end

data/lib/aws-sdk-datasync.rb

@@ -54,7 +54,7 @@ module Aws::DataSync
   autoload :EndpointProvider, 'aws-sdk-datasync/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-datasync/endpoints'
 
-  GEM_VERSION = '1.95.0'
+  GEM_VERSION = '1.96.0'
 
 end
 

data/sig/client.rbs

@@ -400,9 +400,9 @@ module Aws
       def create_location_smb: (
                                  subdirectory: ::String,
                                  server_hostname: ::String,
-                                 user: ::String,
+                                 ?user: ::String,
                                  ?domain: ::String,
-                                 password: ::String,
+                                 ?password: ::String,
                                  agent_arns: Array[::String],
                                  ?mount_options: {
                                    version: ("AUTOMATIC" | "SMB2" | "SMB3" | "SMB1" | "SMB2_0")?
@@ -412,7 +412,12 @@ module Aws
                                      key: ::String,
                                      value: ::String?
                                    },
-                                 ]
+                                 ],
+                                 ?authentication_type: ("NTLM" | "KERBEROS"),
+                                 ?dns_ip_addresses: Array[::String],
+                                 ?kerberos_principal: ::String,
+                                 ?kerberos_keytab: ::String,
+                                 ?kerberos_krb_5_conf: ::String
                                ) -> _CreateLocationSmbResponseSuccess
                              | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _CreateLocationSmbResponseSuccess
 
@@ -732,6 +737,9 @@ module Aws
         def domain: () -> ::String
         def mount_options: () -> Types::SmbMountOptions
         def creation_time: () -> ::Time
+        def dns_ip_addresses: () -> ::Array[::String]
+        def kerberos_principal: () -> ::String
+        def authentication_type: () -> ("NTLM" | "KERBEROS")
       end
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/DataSync/Client.html#describe_location_smb-instance_method
       def describe_location_smb: (
@@ -1320,7 +1328,12 @@ module Aws
                                  ?agent_arns: Array[::String],
                                  ?mount_options: {
                                    version: ("AUTOMATIC" | "SMB2" | "SMB3" | "SMB1" | "SMB2_0")?
-                                 }
+                                 },
+                                 ?authentication_type: ("NTLM" | "KERBEROS"),
+                                 ?dns_ip_addresses: Array[::String],
+                                 ?kerberos_principal: ::String,
+                                 ?kerberos_keytab: ::String,
+                                 ?kerberos_krb_5_conf: ::String
                                ) -> _UpdateLocationSmbResponseSuccess
                              | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _UpdateLocationSmbResponseSuccess
 

data/sig/types.rbs

@@ -238,6 +238,11 @@ module Aws::DataSync
       attr_accessor agent_arns: ::Array[::String]
       attr_accessor mount_options: Types::SmbMountOptions
       attr_accessor tags: ::Array[Types::TagListEntry]
+      attr_accessor authentication_type: ("NTLM" | "KERBEROS")
+      attr_accessor dns_ip_addresses: ::Array[::String]
+      attr_accessor kerberos_principal: ::String
+      attr_accessor kerberos_keytab: ::String
+      attr_accessor kerberos_krb_5_conf: ::String
       SENSITIVE: [:password]
     end
 
@@ -499,6 +504,9 @@ module Aws::DataSync
       attr_accessor domain: ::String
       attr_accessor mount_options: Types::SmbMountOptions
       attr_accessor creation_time: ::Time
+      attr_accessor dns_ip_addresses: ::Array[::String]
+      attr_accessor kerberos_principal: ::String
+      attr_accessor authentication_type: ("NTLM" | "KERBEROS")
       SENSITIVE: []
     end
 
@@ -1331,6 +1339,11 @@ module Aws::DataSync
       attr_accessor password: ::String
       attr_accessor agent_arns: ::Array[::String]
       attr_accessor mount_options: Types::SmbMountOptions
+      attr_accessor authentication_type: ("NTLM" | "KERBEROS")
+      attr_accessor dns_ip_addresses: ::Array[::String]
+      attr_accessor kerberos_principal: ::String
+      attr_accessor kerberos_keytab: ::String
+      attr_accessor kerberos_krb_5_conf: ::String
       SENSITIVE: [:password]
     end
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-datasync
 version: !ruby/object:Gem::Version
-  version: 1.95.0
+  version: 1.96.0
 platform: ruby
 authors:
 - Amazon Web Services
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2025-01-15 00:00:00.000000000 Z
+date: 2025-01-28 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-core