aws-sdk-dsql 1.18.0 → 1.19.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 2346f73e83b9ec363c404a653c446ddb3a8fad5bce0c17238ec33d786e70fdce
-  data.tar.gz: 5e99c85798205e90eab15b338ca0ea4c5896767ddcb3166aa2cdfe4d5194461c
+  metadata.gz: b43a18ddd965c0115d47423af4725fe39013bdce36e61c7e68aadfeda43e97fa
+  data.tar.gz: 4028c45b0890bca46a13fbdd9d69581f3f6a6c7cfc6cecdea79aeaa58b5ec182
 SHA512:
-  metadata.gz: f898f716284ce42c4a492c89e30db79d83507aec72bcb26a021c36baf4ca6b5bb25f643736df9a0151ef86ba90e664aabc6df9bc6632f3870c96711dfb009ea1
-  data.tar.gz: e1649bd58b70c4e1081b8dea52eeaf2cbbe70ce3da881b0522f07609a0ec9fd528778319627218ff6895ce6ff4f368238637b88c859a2b6049560a73ce7d259a
+  metadata.gz: d4afc185ce0e30bba948cf808560695527e7dff8a2bc838466a63e445cb6ffb85c988f60ed884795d214885b5669a08619729ef639f9242569416e436b922fa3
+  data.tar.gz: 0edac42137fe63323b6861c952d38eb44ffc850cd126cdebefc9241f46733714c108b49743c96bf2a52a59c9752288dd4f18c2c8579359d240aea33efe240f03

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.19.0 (2025-10-23)
+------------------
+
+* Feature - Add support for resource-based policies for Aurora DSQL clusters. This will enable you to implement Block Public Access (BPA) which will help restrict access to your Aurora DSQL public or VPC endpoints.
+
 1.18.0 (2025-10-21)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.18.0
+1.19.0

data/lib/aws-sdk-dsql/client.rb

@@ -476,7 +476,7 @@ module Aws::DSQL
 
     # @!group API Operations
 
-    # The CreateCluster API allows you to create both single-region clusters
+    # The CreateCluster API allows you to create both single-Region clusters
     # and multi-Region clusters. With the addition of the
     # *multiRegionProperties* parameter, you can create a cluster with
     # witness Region support and establish peer relationships with clusters
@@ -504,7 +504,7 @@ module Aws::DSQL
     #
     # dsql:PutMultiRegionProperties
     #
-    # : Permission to configure multi-region properties for a cluster.
+    # : Permission to configure multi-Region properties for a cluster.
     #
     #   Resources: `arn:aws:dsql:region:account-id:cluster/*`
     #
@@ -566,6 +566,15 @@ module Aws::DSQL
     #   The configuration settings when creating a multi-Region cluster,
     #   including the witness region and linked cluster properties.
     #
+    # @option params [String] :policy
+    #   An optional resource-based policy document in JSON format that defines
+    #   access permissions for the cluster.
+    #
+    # @option params [Boolean] :bypass_policy_lockout_safety_check
+    #   An optional field that controls whether to bypass the lockout
+    #   prevention check. When set to true, this parameter allows you to apply
+    #   a policy that might lock you out of the cluster. Use with caution.
+    #
     # @return [Types::CreateClusterOutput] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::CreateClusterOutput#identifier #identifier} => String
@@ -599,6 +608,8 @@ module Aws::DSQL
     #       witness_region: "Region",
     #       clusters: ["ClusterArn"],
     #     },
+    #     policy: "PolicyDocument",
+    #     bypass_policy_lockout_safety_check: false,
     #   })
     #
     # @example Response structure
@@ -680,6 +691,49 @@ module Aws::DSQL
       req.send_request(options)
     end
 
+    # Deletes the resource-based policy attached to a cluster. This removes
+    # all access permissions defined by the policy, reverting to default
+    # access controls.
+    #
+    # @option params [required, String] :identifier
+    #   The ID of the cluster.
+    #
+    # @option params [String] :expected_policy_version
+    #   The expected version of the policy to delete. This parameter ensures
+    #   that you're deleting the correct version of the policy and helps
+    #   prevent accidental deletions.
+    #
+    # @option params [String] :client_token
+    #   Idempotency token so a request is only processed once.
+    #
+    #   **A suitable default value is auto-generated.** You should normally
+    #   not need to pass this option.**
+    #
+    # @return [Types::DeleteClusterPolicyOutput] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::DeleteClusterPolicyOutput#policy_version #policy_version} => String
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.delete_cluster_policy({
+    #     identifier: "ClusterId", # required
+    #     expected_policy_version: "PolicyVersion",
+    #     client_token: "ClientToken",
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.policy_version #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/dsql-2018-05-10/DeleteClusterPolicy AWS API Documentation
+    #
+    # @overload delete_cluster_policy(params = {})
+    # @param [Hash] params ({})
+    def delete_cluster_policy(params = {}, options = {})
+      req = build_request(:delete_cluster_policy, params)
+      req.send_request(options)
+    end
+
     # Retrieves information about a cluster.
     #
     # @option params [required, String] :identifier
@@ -740,6 +794,38 @@ module Aws::DSQL
       req.send_request(options)
     end
 
+    # Retrieves the resource-based policy document attached to a cluster.
+    # This policy defines the access permissions and conditions for the
+    # cluster.
+    #
+    # @option params [required, String] :identifier
+    #   The ID of the cluster to retrieve the policy from.
+    #
+    # @return [Types::GetClusterPolicyOutput] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::GetClusterPolicyOutput#policy #policy} => String
+    #   * {Types::GetClusterPolicyOutput#policy_version #policy_version} => String
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.get_cluster_policy({
+    #     identifier: "ClusterId", # required
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.policy #=> String
+    #   resp.policy_version #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/dsql-2018-05-10/GetClusterPolicy AWS API Documentation
+    #
+    # @overload get_cluster_policy(params = {})
+    # @param [Hash] params ({})
+    def get_cluster_policy(params = {}, options = {})
+      req = build_request(:get_cluster_policy, params)
+      req.send_request(options)
+    end
+
     # Retrieves the VPC endpoint service name.
     #
     # @option params [required, String] :identifier
@@ -859,6 +945,61 @@ module Aws::DSQL
       req.send_request(options)
     end
 
+    # Attaches a resource-based policy to a cluster. This policy defines
+    # access permissions and conditions for the cluster, allowing you to
+    # control which principals can perform actions on the cluster.
+    #
+    # @option params [required, String] :identifier
+    #   The ID of the cluster.
+    #
+    # @option params [required, String] :policy
+    #   The resource-based policy document to attach to the cluster. This
+    #   should be a valid JSON policy document that defines permissions and
+    #   conditions.
+    #
+    # @option params [Boolean] :bypass_policy_lockout_safety_check
+    #   A flag that allows you to bypass the policy lockout safety check. When
+    #   set to true, this parameter allows you to apply a policy that might
+    #   lock you out of the cluster. Use with caution.
+    #
+    # @option params [String] :expected_policy_version
+    #   The expected version of the current policy. This parameter ensures
+    #   that you're updating the correct version of the policy and helps
+    #   prevent concurrent modification conflicts.
+    #
+    # @option params [String] :client_token
+    #   Idempotency token so a request is only processed once.
+    #
+    #   **A suitable default value is auto-generated.** You should normally
+    #   not need to pass this option.**
+    #
+    # @return [Types::PutClusterPolicyOutput] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::PutClusterPolicyOutput#policy_version #policy_version} => String
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.put_cluster_policy({
+    #     identifier: "ClusterId", # required
+    #     policy: "PolicyDocument", # required
+    #     bypass_policy_lockout_safety_check: false,
+    #     expected_policy_version: "PolicyVersion",
+    #     client_token: "ClientToken",
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.policy_version #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/dsql-2018-05-10/PutClusterPolicy AWS API Documentation
+    #
+    # @overload put_cluster_policy(params = {})
+    # @param [Hash] params ({})
+    def put_cluster_policy(params = {}, options = {})
+      req = build_request(:put_cluster_policy, params)
+      req.send_request(options)
+    end
+
     # Tags a resource with a map of key and value pairs.
     #
     # @option params [required, String] :resource_arn
@@ -939,7 +1080,7 @@ module Aws::DSQL
     # parameter, you can add or modify witness Region support and manage
     # peer relationships with clusters in other Regions.
     #
-    # <note markdown="1"> Note that updating multi-region clusters requires additional IAM
+    # <note markdown="1"> Note that updating multi-Region clusters requires additional IAM
     # permissions beyond those needed for standard cluster updates, as
     # detailed in the Permissions section.
     #
@@ -1100,7 +1241,7 @@ module Aws::DSQL
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-dsql'
-      context[:gem_version] = '1.18.0'
+      context[:gem_version] = '1.19.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-dsql/client_api.rb

@@ -16,6 +16,7 @@ module Aws::DSQL
 
     AccessDeniedException = Shapes::StructureShape.new(name: 'AccessDeniedException')
     Arn = Shapes::StringShape.new(name: 'Arn')
+    BypassPolicyLockoutSafetyCheck = Shapes::BooleanShape.new(name: 'BypassPolicyLockoutSafetyCheck')
     ClientToken = Shapes::StringShape.new(name: 'ClientToken')
     ClusterArn = Shapes::StringShape.new(name: 'ClusterArn')
     ClusterArnList = Shapes::ListShape.new(name: 'ClusterArnList')
@@ -29,12 +30,16 @@ module Aws::DSQL
     CreateClusterOutput = Shapes::StructureShape.new(name: 'CreateClusterOutput')
     DeleteClusterInput = Shapes::StructureShape.new(name: 'DeleteClusterInput')
     DeleteClusterOutput = Shapes::StructureShape.new(name: 'DeleteClusterOutput')
+    DeleteClusterPolicyInput = Shapes::StructureShape.new(name: 'DeleteClusterPolicyInput')
+    DeleteClusterPolicyOutput = Shapes::StructureShape.new(name: 'DeleteClusterPolicyOutput')
     DeletionProtectionEnabled = Shapes::BooleanShape.new(name: 'DeletionProtectionEnabled')
     EncryptionDetails = Shapes::StructureShape.new(name: 'EncryptionDetails')
     EncryptionStatus = Shapes::StringShape.new(name: 'EncryptionStatus')
     EncryptionType = Shapes::StringShape.new(name: 'EncryptionType')
     GetClusterInput = Shapes::StructureShape.new(name: 'GetClusterInput')
     GetClusterOutput = Shapes::StructureShape.new(name: 'GetClusterOutput')
+    GetClusterPolicyInput = Shapes::StructureShape.new(name: 'GetClusterPolicyInput')
+    GetClusterPolicyOutput = Shapes::StructureShape.new(name: 'GetClusterPolicyOutput')
     GetVpcEndpointServiceNameInput = Shapes::StructureShape.new(name: 'GetVpcEndpointServiceNameInput')
     GetVpcEndpointServiceNameOutput = Shapes::StructureShape.new(name: 'GetVpcEndpointServiceNameOutput')
     Integer = Shapes::IntegerShape.new(name: 'Integer')
@@ -48,6 +53,10 @@ module Aws::DSQL
     MaxResults = Shapes::IntegerShape.new(name: 'MaxResults')
     MultiRegionProperties = Shapes::StructureShape.new(name: 'MultiRegionProperties')
     NextToken = Shapes::StringShape.new(name: 'NextToken')
+    PolicyDocument = Shapes::StringShape.new(name: 'PolicyDocument')
+    PolicyVersion = Shapes::StringShape.new(name: 'PolicyVersion')
+    PutClusterPolicyInput = Shapes::StructureShape.new(name: 'PutClusterPolicyInput')
+    PutClusterPolicyOutput = Shapes::StructureShape.new(name: 'PutClusterPolicyOutput')
     Region = Shapes::StringShape.new(name: 'Region')
     ResourceNotFoundException = Shapes::StructureShape.new(name: 'ResourceNotFoundException')
     ServiceName = Shapes::StringShape.new(name: 'ServiceName')
@@ -88,6 +97,8 @@ module Aws::DSQL
     CreateClusterInput.add_member(:tags, Shapes::ShapeRef.new(shape: TagMap, location_name: "tags"))
     CreateClusterInput.add_member(:client_token, Shapes::ShapeRef.new(shape: ClientToken, location_name: "clientToken", metadata: {"idempotencyToken" => true}))
     CreateClusterInput.add_member(:multi_region_properties, Shapes::ShapeRef.new(shape: MultiRegionProperties, location_name: "multiRegionProperties"))
+    CreateClusterInput.add_member(:policy, Shapes::ShapeRef.new(shape: PolicyDocument, location_name: "policy"))
+    CreateClusterInput.add_member(:bypass_policy_lockout_safety_check, Shapes::ShapeRef.new(shape: BypassPolicyLockoutSafetyCheck, location_name: "bypassPolicyLockoutSafetyCheck"))
     CreateClusterInput.struct_class = Types::CreateClusterInput
 
     CreateClusterOutput.add_member(:identifier, Shapes::ShapeRef.new(shape: ClusterId, required: true, location_name: "identifier"))
@@ -109,6 +120,14 @@ module Aws::DSQL
     DeleteClusterOutput.add_member(:creation_time, Shapes::ShapeRef.new(shape: ClusterCreationTime, required: true, location_name: "creationTime"))
     DeleteClusterOutput.struct_class = Types::DeleteClusterOutput
 
+    DeleteClusterPolicyInput.add_member(:identifier, Shapes::ShapeRef.new(shape: ClusterId, required: true, location: "uri", location_name: "identifier"))
+    DeleteClusterPolicyInput.add_member(:expected_policy_version, Shapes::ShapeRef.new(shape: PolicyVersion, location: "querystring", location_name: "expected-policy-version"))
+    DeleteClusterPolicyInput.add_member(:client_token, Shapes::ShapeRef.new(shape: ClientToken, location: "querystring", location_name: "client-token", metadata: {"idempotencyToken" => true}))
+    DeleteClusterPolicyInput.struct_class = Types::DeleteClusterPolicyInput
+
+    DeleteClusterPolicyOutput.add_member(:policy_version, Shapes::ShapeRef.new(shape: PolicyVersion, required: true, location_name: "policyVersion"))
+    DeleteClusterPolicyOutput.struct_class = Types::DeleteClusterPolicyOutput
+
     EncryptionDetails.add_member(:encryption_type, Shapes::ShapeRef.new(shape: EncryptionType, required: true, location_name: "encryptionType"))
     EncryptionDetails.add_member(:kms_key_arn, Shapes::ShapeRef.new(shape: KmsKeyArn, location_name: "kmsKeyArn"))
     EncryptionDetails.add_member(:encryption_status, Shapes::ShapeRef.new(shape: EncryptionStatus, required: true, location_name: "encryptionStatus"))
@@ -127,6 +146,13 @@ module Aws::DSQL
     GetClusterOutput.add_member(:encryption_details, Shapes::ShapeRef.new(shape: EncryptionDetails, location_name: "encryptionDetails"))
     GetClusterOutput.struct_class = Types::GetClusterOutput
 
+    GetClusterPolicyInput.add_member(:identifier, Shapes::ShapeRef.new(shape: ClusterId, required: true, location: "uri", location_name: "identifier"))
+    GetClusterPolicyInput.struct_class = Types::GetClusterPolicyInput
+
+    GetClusterPolicyOutput.add_member(:policy, Shapes::ShapeRef.new(shape: PolicyDocument, required: true, location_name: "policy"))
+    GetClusterPolicyOutput.add_member(:policy_version, Shapes::ShapeRef.new(shape: PolicyVersion, required: true, location_name: "policyVersion"))
+    GetClusterPolicyOutput.struct_class = Types::GetClusterPolicyOutput
+
     GetVpcEndpointServiceNameInput.add_member(:identifier, Shapes::ShapeRef.new(shape: ClusterId, required: true, location: "uri", location_name: "identifier"))
     GetVpcEndpointServiceNameInput.struct_class = Types::GetVpcEndpointServiceNameInput
 
@@ -155,6 +181,16 @@ module Aws::DSQL
     MultiRegionProperties.add_member(:clusters, Shapes::ShapeRef.new(shape: ClusterArnList, location_name: "clusters"))
     MultiRegionProperties.struct_class = Types::MultiRegionProperties
 
+    PutClusterPolicyInput.add_member(:identifier, Shapes::ShapeRef.new(shape: ClusterId, required: true, location: "uri", location_name: "identifier"))
+    PutClusterPolicyInput.add_member(:policy, Shapes::ShapeRef.new(shape: PolicyDocument, required: true, location_name: "policy"))
+    PutClusterPolicyInput.add_member(:bypass_policy_lockout_safety_check, Shapes::ShapeRef.new(shape: BypassPolicyLockoutSafetyCheck, location_name: "bypassPolicyLockoutSafetyCheck"))
+    PutClusterPolicyInput.add_member(:expected_policy_version, Shapes::ShapeRef.new(shape: PolicyVersion, location_name: "expectedPolicyVersion"))
+    PutClusterPolicyInput.add_member(:client_token, Shapes::ShapeRef.new(shape: ClientToken, location_name: "clientToken", metadata: {"idempotencyToken" => true}))
+    PutClusterPolicyInput.struct_class = Types::PutClusterPolicyInput
+
+    PutClusterPolicyOutput.add_member(:policy_version, Shapes::ShapeRef.new(shape: PolicyVersion, required: true, location_name: "policyVersion"))
+    PutClusterPolicyOutput.struct_class = Types::PutClusterPolicyOutput
+
     ResourceNotFoundException.add_member(:message, Shapes::ShapeRef.new(shape: String, required: true, location_name: "message"))
     ResourceNotFoundException.add_member(:resource_id, Shapes::ShapeRef.new(shape: String, required: true, location_name: "resourceId"))
     ResourceNotFoundException.add_member(:resource_type, Shapes::ShapeRef.new(shape: String, required: true, location_name: "resourceType"))
@@ -257,6 +293,20 @@ module Aws::DSQL
         o.errors << Shapes::ShapeRef.new(shape: ConflictException)
       end)
 
+      api.add_operation(:delete_cluster_policy, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "DeleteClusterPolicy"
+        o.http_method = "DELETE"
+        o.http_request_uri = "/cluster/{identifier}/policy"
+        o.input = Shapes::ShapeRef.new(shape: DeleteClusterPolicyInput)
+        o.output = Shapes::ShapeRef.new(shape: DeleteClusterPolicyOutput)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
+        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
+        o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
+        o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
+        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: ConflictException)
+      end)
+
       api.add_operation(:get_cluster, Seahorse::Model::Operation.new.tap do |o|
         o.name = "GetCluster"
         o.http_method = "GET"
@@ -270,6 +320,19 @@ module Aws::DSQL
         o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
       end)
 
+      api.add_operation(:get_cluster_policy, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "GetClusterPolicy"
+        o.http_method = "GET"
+        o.http_request_uri = "/cluster/{identifier}/policy"
+        o.input = Shapes::ShapeRef.new(shape: GetClusterPolicyInput)
+        o.output = Shapes::ShapeRef.new(shape: GetClusterPolicyOutput)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
+        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
+        o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
+        o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
+        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+      end)
+
       api.add_operation(:get_vpc_endpoint_service_name, Seahorse::Model::Operation.new.tap do |o|
         o.name = "GetVpcEndpointServiceName"
         o.http_method = "GET"
@@ -315,6 +378,20 @@ module Aws::DSQL
         o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
       end)
 
+      api.add_operation(:put_cluster_policy, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "PutClusterPolicy"
+        o.http_method = "POST"
+        o.http_request_uri = "/cluster/{identifier}/policy"
+        o.input = Shapes::ShapeRef.new(shape: PutClusterPolicyInput)
+        o.output = Shapes::ShapeRef.new(shape: PutClusterPolicyOutput)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
+        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
+        o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
+        o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
+        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: ConflictException)
+      end)
+
       api.add_operation(:tag_resource, Seahorse::Model::Operation.new.tap do |o|
         o.name = "TagResource"
         o.http_method = "POST"

data/lib/aws-sdk-dsql/types.rb

@@ -100,6 +100,18 @@ module Aws::DSQL
     #   including the witness region and linked cluster properties.
     #   @return [Types::MultiRegionProperties]
     #
+    # @!attribute [rw] policy
+    #   An optional resource-based policy document in JSON format that
+    #   defines access permissions for the cluster.
+    #   @return [String]
+    #
+    # @!attribute [rw] bypass_policy_lockout_safety_check
+    #   An optional field that controls whether to bypass the lockout
+    #   prevention check. When set to true, this parameter allows you to
+    #   apply a policy that might lock you out of the cluster. Use with
+    #   caution.
+    #   @return [Boolean]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/dsql-2018-05-10/CreateClusterInput AWS API Documentation
     #
     class CreateClusterInput < Struct.new(
@@ -107,7 +119,9 @@ module Aws::DSQL
       :kms_encryption_key,
       :tags,
       :client_token,
-      :multi_region_properties)
+      :multi_region_properties,
+      :policy,
+      :bypass_policy_lockout_safety_check)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -216,6 +230,45 @@ module Aws::DSQL
       include Aws::Structure
     end
 
+    # @!attribute [rw] identifier
+    #   The ID of the cluster.
+    #   @return [String]
+    #
+    # @!attribute [rw] expected_policy_version
+    #   The expected version of the policy to delete. This parameter ensures
+    #   that you're deleting the correct version of the policy and helps
+    #   prevent accidental deletions.
+    #   @return [String]
+    #
+    # @!attribute [rw] client_token
+    #   Idempotency token so a request is only processed once.
+    #
+    #   **A suitable default value is auto-generated.** You should normally
+    #   not need to pass this option.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/dsql-2018-05-10/DeleteClusterPolicyInput AWS API Documentation
+    #
+    class DeleteClusterPolicyInput < Struct.new(
+      :identifier,
+      :expected_policy_version,
+      :client_token)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] policy_version
+    #   The version of the policy that was deleted.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/dsql-2018-05-10/DeleteClusterPolicyOutput AWS API Documentation
+    #
+    class DeleteClusterPolicyOutput < Struct.new(
+      :policy_version)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Configuration details about encryption for the cluster including the
     # KMS key ARN, encryption type, and encryption status.
     #
@@ -303,6 +356,37 @@ module Aws::DSQL
       include Aws::Structure
     end
 
+    # @!attribute [rw] identifier
+    #   The ID of the cluster to retrieve the policy from.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/dsql-2018-05-10/GetClusterPolicyInput AWS API Documentation
+    #
+    class GetClusterPolicyInput < Struct.new(
+      :identifier)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] policy
+    #   The resource-based policy document attached to the cluster, returned
+    #   as a JSON string.
+    #   @return [String]
+    #
+    # @!attribute [rw] policy_version
+    #   The version of the policy document. This version number is
+    #   incremented each time the policy is updated.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/dsql-2018-05-10/GetClusterPolicyOutput AWS API Documentation
+    #
+    class GetClusterPolicyOutput < Struct.new(
+      :policy,
+      :policy_version)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] identifier
     #   The ID of the cluster to retrieve.
     #   @return [String]
@@ -415,13 +499,14 @@ module Aws::DSQL
     # containing the witness region and linked cluster settings.
     #
     # @!attribute [rw] witness_region
-    #   The that serves as the witness region for a multi-Region cluster.
-    #   The witness region helps maintain cluster consistency and quorum.
+    #   The Region that serves as the witness region for a multi-Region
+    #   cluster. The witness Region helps maintain cluster consistency and
+    #   quorum.
     #   @return [String]
     #
     # @!attribute [rw] clusters
-    #   The set of linked clusters that form the multi-Region cluster
-    #   configuration. Each linked cluster represents a database instance in
+    #   The set of peered clusters that form the multi-Region cluster
+    #   configuration. Each peered cluster represents a database instance in
     #   a different Region.
     #   @return [Array<String>]
     #
@@ -434,6 +519,59 @@ module Aws::DSQL
       include Aws::Structure
     end
 
+    # @!attribute [rw] identifier
+    #   The ID of the cluster.
+    #   @return [String]
+    #
+    # @!attribute [rw] policy
+    #   The resource-based policy document to attach to the cluster. This
+    #   should be a valid JSON policy document that defines permissions and
+    #   conditions.
+    #   @return [String]
+    #
+    # @!attribute [rw] bypass_policy_lockout_safety_check
+    #   A flag that allows you to bypass the policy lockout safety check.
+    #   When set to true, this parameter allows you to apply a policy that
+    #   might lock you out of the cluster. Use with caution.
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] expected_policy_version
+    #   The expected version of the current policy. This parameter ensures
+    #   that you're updating the correct version of the policy and helps
+    #   prevent concurrent modification conflicts.
+    #   @return [String]
+    #
+    # @!attribute [rw] client_token
+    #   Idempotency token so a request is only processed once.
+    #
+    #   **A suitable default value is auto-generated.** You should normally
+    #   not need to pass this option.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/dsql-2018-05-10/PutClusterPolicyInput AWS API Documentation
+    #
+    class PutClusterPolicyInput < Struct.new(
+      :identifier,
+      :policy,
+      :bypass_policy_lockout_safety_check,
+      :expected_policy_version,
+      :client_token)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] policy_version
+    #   The version of the policy after it has been updated or created.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/dsql-2018-05-10/PutClusterPolicyOutput AWS API Documentation
+    #
+    class PutClusterPolicyOutput < Struct.new(
+      :policy_version)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # The resource could not be found.
     #
     # @!attribute [rw] message

data/lib/aws-sdk-dsql.rb

@@ -55,7 +55,7 @@ module Aws::DSQL
   autoload :EndpointProvider, 'aws-sdk-dsql/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-dsql/endpoints'
 
-  GEM_VERSION = '1.18.0'
+  GEM_VERSION = '1.19.0'
 
 end
 

data/sig/client.rbs

@@ -97,7 +97,9 @@ module Aws
                             ?multi_region_properties: {
                               witness_region: ::String?,
                               clusters: Array[::String]?
-                            }
+                            },
+                            ?policy: ::String,
+                            ?bypass_policy_lockout_safety_check: bool
                           ) -> _CreateClusterResponseSuccess
                         | (?Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _CreateClusterResponseSuccess
 
@@ -115,6 +117,18 @@ module Aws
                           ) -> _DeleteClusterResponseSuccess
                         | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _DeleteClusterResponseSuccess
 
+      interface _DeleteClusterPolicyResponseSuccess
+        include ::Seahorse::Client::_ResponseSuccess[Types::DeleteClusterPolicyOutput]
+        def policy_version: () -> ::String
+      end
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/DSQL/Client.html#delete_cluster_policy-instance_method
+      def delete_cluster_policy: (
+                                   identifier: ::String,
+                                   ?expected_policy_version: ::String,
+                                   ?client_token: ::String
+                                 ) -> _DeleteClusterPolicyResponseSuccess
+                               | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _DeleteClusterPolicyResponseSuccess
+
       interface _GetClusterResponseSuccess
         include ::Seahorse::Client::_ResponseSuccess[Types::GetClusterOutput]
         def identifier: () -> ::String
@@ -132,6 +146,17 @@ module Aws
                        ) -> _GetClusterResponseSuccess
                      | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _GetClusterResponseSuccess
 
+      interface _GetClusterPolicyResponseSuccess
+        include ::Seahorse::Client::_ResponseSuccess[Types::GetClusterPolicyOutput]
+        def policy: () -> ::String
+        def policy_version: () -> ::String
+      end
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/DSQL/Client.html#get_cluster_policy-instance_method
+      def get_cluster_policy: (
+                                identifier: ::String
+                              ) -> _GetClusterPolicyResponseSuccess
+                            | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _GetClusterPolicyResponseSuccess
+
       interface _GetVpcEndpointServiceNameResponseSuccess
         include ::Seahorse::Client::_ResponseSuccess[Types::GetVpcEndpointServiceNameOutput]
         def service_name: () -> ::String
@@ -164,6 +189,20 @@ module Aws
                                   ) -> _ListTagsForResourceResponseSuccess
                                 | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _ListTagsForResourceResponseSuccess
 
+      interface _PutClusterPolicyResponseSuccess
+        include ::Seahorse::Client::_ResponseSuccess[Types::PutClusterPolicyOutput]
+        def policy_version: () -> ::String
+      end
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/DSQL/Client.html#put_cluster_policy-instance_method
+      def put_cluster_policy: (
+                                identifier: ::String,
+                                policy: ::String,
+                                ?bypass_policy_lockout_safety_check: bool,
+                                ?expected_policy_version: ::String,
+                                ?client_token: ::String
+                              ) -> _PutClusterPolicyResponseSuccess
+                            | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _PutClusterPolicyResponseSuccess
+
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/DSQL/Client.html#tag_resource-instance_method
       def tag_resource: (
                           resource_arn: ::String,

data/sig/types.rbs

@@ -32,6 +32,8 @@ module Aws::DSQL
       attr_accessor tags: ::Hash[::String, ::String]
       attr_accessor client_token: ::String
       attr_accessor multi_region_properties: Types::MultiRegionProperties
+      attr_accessor policy: ::String
+      attr_accessor bypass_policy_lockout_safety_check: bool
       SENSITIVE: []
     end
 
@@ -60,6 +62,18 @@ module Aws::DSQL
       SENSITIVE: []
     end
 
+    class DeleteClusterPolicyInput
+      attr_accessor identifier: ::String
+      attr_accessor expected_policy_version: ::String
+      attr_accessor client_token: ::String
+      SENSITIVE: []
+    end
+
+    class DeleteClusterPolicyOutput
+      attr_accessor policy_version: ::String
+      SENSITIVE: []
+    end
+
     class EncryptionDetails
       attr_accessor encryption_type: ("AWS_OWNED_KMS_KEY" | "CUSTOMER_MANAGED_KMS_KEY")
       attr_accessor kms_key_arn: ::String
@@ -84,6 +98,17 @@ module Aws::DSQL
       SENSITIVE: []
     end
 
+    class GetClusterPolicyInput
+      attr_accessor identifier: ::String
+      SENSITIVE: []
+    end
+
+    class GetClusterPolicyOutput
+      attr_accessor policy: ::String
+      attr_accessor policy_version: ::String
+      SENSITIVE: []
+    end
+
     class GetVpcEndpointServiceNameInput
       attr_accessor identifier: ::String
       SENSITIVE: []
@@ -128,6 +153,20 @@ module Aws::DSQL
       SENSITIVE: []
     end
 
+    class PutClusterPolicyInput
+      attr_accessor identifier: ::String
+      attr_accessor policy: ::String
+      attr_accessor bypass_policy_lockout_safety_check: bool
+      attr_accessor expected_policy_version: ::String
+      attr_accessor client_token: ::String
+      SENSITIVE: []
+    end
+
+    class PutClusterPolicyOutput
+      attr_accessor policy_version: ::String
+      SENSITIVE: []
+    end
+
     class ResourceNotFoundException
       attr_accessor message: ::String
       attr_accessor resource_id: ::String

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-dsql
 version: !ruby/object:Gem::Version
-  version: 1.18.0
+  version: 1.19.0
 platform: ruby
 authors:
 - Amazon Web Services