aws-sdk-dsql 1.18.0 → 1.20.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 2346f73e83b9ec363c404a653c446ddb3a8fad5bce0c17238ec33d786e70fdce
-  data.tar.gz: 5e99c85798205e90eab15b338ca0ea4c5896767ddcb3166aa2cdfe4d5194461c
+  metadata.gz: '009d5035fac905a7b3f3bab0e6f85ed3b778d9272854c50bb7d9e6cb269f0dd7'
+  data.tar.gz: 6f27858381746c7edfca260a59e55935fb38f59a01d1349468695d4def0716ae
 SHA512:
-  metadata.gz: f898f716284ce42c4a492c89e30db79d83507aec72bcb26a021c36baf4ca6b5bb25f643736df9a0151ef86ba90e664aabc6df9bc6632f3870c96711dfb009ea1
-  data.tar.gz: e1649bd58b70c4e1081b8dea52eeaf2cbbe70ce3da881b0522f07609a0ec9fd528778319627218ff6895ce6ff4f368238637b88c859a2b6049560a73ce7d259a
+  metadata.gz: 53260015439e23900fa49c14e951d6263e2bb3fa1bf4a695dc20820886f30b4b159228bf8bda115f11e0c7a5e624f68cf921876f366b374180034e9caed3bf9e
+  data.tar.gz: bee8a9d76171acf96e71749d6a31609a5182d9c92ea3fb806e8917fe6c35526a833c0c99d8b7fbc82f49028f3e2490dbaa7e154114fbd2a826a71d8e77cb5922

data/CHANGELOG.md

@@ -1,6 +1,16 @@
 Unreleased Changes
 ------------------
 
+1.20.0 (2025-11-10)
+------------------
+
+* Feature - Cluster endpoint added to CreateCluster and GetCluster API responses
+
+1.19.0 (2025-10-23)
+------------------
+
+* Feature - Add support for resource-based policies for Aurora DSQL clusters. This will enable you to implement Block Public Access (BPA) which will help restrict access to your Aurora DSQL public or VPC endpoints.
+
 1.18.0 (2025-10-21)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.18.0
+1.20.0

data/lib/aws-sdk-dsql/client.rb

@@ -476,7 +476,7 @@ module Aws::DSQL
 
     # @!group API Operations
 
-    # The CreateCluster API allows you to create both single-region clusters
+    # The CreateCluster API allows you to create both single-Region clusters
     # and multi-Region clusters. With the addition of the
     # *multiRegionProperties* parameter, you can create a cluster with
     # witness Region support and establish peer relationships with clusters
@@ -504,7 +504,7 @@ module Aws::DSQL
     #
     # dsql:PutMultiRegionProperties
     #
-    # : Permission to configure multi-region properties for a cluster.
+    # : Permission to configure multi-Region properties for a cluster.
     #
     #   Resources: `arn:aws:dsql:region:account-id:cluster/*`
     #
@@ -566,6 +566,15 @@ module Aws::DSQL
     #   The configuration settings when creating a multi-Region cluster,
     #   including the witness region and linked cluster properties.
     #
+    # @option params [String] :policy
+    #   An optional resource-based policy document in JSON format that defines
+    #   access permissions for the cluster.
+    #
+    # @option params [Boolean] :bypass_policy_lockout_safety_check
+    #   An optional field that controls whether to bypass the lockout
+    #   prevention check. When set to true, this parameter allows you to apply
+    #   a policy that might lock you out of the cluster. Use with caution.
+    #
     # @return [Types::CreateClusterOutput] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::CreateClusterOutput#identifier #identifier} => String
@@ -575,6 +584,7 @@ module Aws::DSQL
     #   * {Types::CreateClusterOutput#multi_region_properties #multi_region_properties} => Types::MultiRegionProperties
     #   * {Types::CreateClusterOutput#encryption_details #encryption_details} => Types::EncryptionDetails
     #   * {Types::CreateClusterOutput#deletion_protection_enabled #deletion_protection_enabled} => Boolean
+    #   * {Types::CreateClusterOutput#endpoint #endpoint} => String
     #
     #
     # @example Example: Create Cluster
@@ -599,6 +609,8 @@ module Aws::DSQL
     #       witness_region: "Region",
     #       clusters: ["ClusterArn"],
     #     },
+    #     policy: "PolicyDocument",
+    #     bypass_policy_lockout_safety_check: false,
     #   })
     #
     # @example Response structure
@@ -614,6 +626,7 @@ module Aws::DSQL
     #   resp.encryption_details.kms_key_arn #=> String
     #   resp.encryption_details.encryption_status #=> String, one of "ENABLED", "UPDATING", "KMS_KEY_INACCESSIBLE", "ENABLING"
     #   resp.deletion_protection_enabled #=> Boolean
+    #   resp.endpoint #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/dsql-2018-05-10/CreateCluster AWS API Documentation
     #
@@ -680,6 +693,49 @@ module Aws::DSQL
       req.send_request(options)
     end
 
+    # Deletes the resource-based policy attached to a cluster. This removes
+    # all access permissions defined by the policy, reverting to default
+    # access controls.
+    #
+    # @option params [required, String] :identifier
+    #   The ID of the cluster.
+    #
+    # @option params [String] :expected_policy_version
+    #   The expected version of the policy to delete. This parameter ensures
+    #   that you're deleting the correct version of the policy and helps
+    #   prevent accidental deletions.
+    #
+    # @option params [String] :client_token
+    #   Idempotency token so a request is only processed once.
+    #
+    #   **A suitable default value is auto-generated.** You should normally
+    #   not need to pass this option.**
+    #
+    # @return [Types::DeleteClusterPolicyOutput] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::DeleteClusterPolicyOutput#policy_version #policy_version} => String
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.delete_cluster_policy({
+    #     identifier: "ClusterId", # required
+    #     expected_policy_version: "PolicyVersion",
+    #     client_token: "ClientToken",
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.policy_version #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/dsql-2018-05-10/DeleteClusterPolicy AWS API Documentation
+    #
+    # @overload delete_cluster_policy(params = {})
+    # @param [Hash] params ({})
+    def delete_cluster_policy(params = {}, options = {})
+      req = build_request(:delete_cluster_policy, params)
+      req.send_request(options)
+    end
+
     # Retrieves information about a cluster.
     #
     # @option params [required, String] :identifier
@@ -695,6 +751,7 @@ module Aws::DSQL
     #   * {Types::GetClusterOutput#multi_region_properties #multi_region_properties} => Types::MultiRegionProperties
     #   * {Types::GetClusterOutput#tags #tags} => Hash<String,String>
     #   * {Types::GetClusterOutput#encryption_details #encryption_details} => Types::EncryptionDetails
+    #   * {Types::GetClusterOutput#endpoint #endpoint} => String
     #
     #
     # @example Example: Get Cluster
@@ -724,6 +781,7 @@ module Aws::DSQL
     #   resp.encryption_details.encryption_type #=> String, one of "AWS_OWNED_KMS_KEY", "CUSTOMER_MANAGED_KMS_KEY"
     #   resp.encryption_details.kms_key_arn #=> String
     #   resp.encryption_details.encryption_status #=> String, one of "ENABLED", "UPDATING", "KMS_KEY_INACCESSIBLE", "ENABLING"
+    #   resp.endpoint #=> String
     #
     #
     # The following waiters are defined for this operation (see {Client#wait_until} for detailed usage):
@@ -740,6 +798,38 @@ module Aws::DSQL
       req.send_request(options)
     end
 
+    # Retrieves the resource-based policy document attached to a cluster.
+    # This policy defines the access permissions and conditions for the
+    # cluster.
+    #
+    # @option params [required, String] :identifier
+    #   The ID of the cluster to retrieve the policy from.
+    #
+    # @return [Types::GetClusterPolicyOutput] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::GetClusterPolicyOutput#policy #policy} => String
+    #   * {Types::GetClusterPolicyOutput#policy_version #policy_version} => String
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.get_cluster_policy({
+    #     identifier: "ClusterId", # required
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.policy #=> String
+    #   resp.policy_version #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/dsql-2018-05-10/GetClusterPolicy AWS API Documentation
+    #
+    # @overload get_cluster_policy(params = {})
+    # @param [Hash] params ({})
+    def get_cluster_policy(params = {}, options = {})
+      req = build_request(:get_cluster_policy, params)
+      req.send_request(options)
+    end
+
     # Retrieves the VPC endpoint service name.
     #
     # @option params [required, String] :identifier
@@ -859,6 +949,61 @@ module Aws::DSQL
       req.send_request(options)
     end
 
+    # Attaches a resource-based policy to a cluster. This policy defines
+    # access permissions and conditions for the cluster, allowing you to
+    # control which principals can perform actions on the cluster.
+    #
+    # @option params [required, String] :identifier
+    #   The ID of the cluster.
+    #
+    # @option params [required, String] :policy
+    #   The resource-based policy document to attach to the cluster. This
+    #   should be a valid JSON policy document that defines permissions and
+    #   conditions.
+    #
+    # @option params [Boolean] :bypass_policy_lockout_safety_check
+    #   A flag that allows you to bypass the policy lockout safety check. When
+    #   set to true, this parameter allows you to apply a policy that might
+    #   lock you out of the cluster. Use with caution.
+    #
+    # @option params [String] :expected_policy_version
+    #   The expected version of the current policy. This parameter ensures
+    #   that you're updating the correct version of the policy and helps
+    #   prevent concurrent modification conflicts.
+    #
+    # @option params [String] :client_token
+    #   Idempotency token so a request is only processed once.
+    #
+    #   **A suitable default value is auto-generated.** You should normally
+    #   not need to pass this option.**
+    #
+    # @return [Types::PutClusterPolicyOutput] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::PutClusterPolicyOutput#policy_version #policy_version} => String
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.put_cluster_policy({
+    #     identifier: "ClusterId", # required
+    #     policy: "PolicyDocument", # required
+    #     bypass_policy_lockout_safety_check: false,
+    #     expected_policy_version: "PolicyVersion",
+    #     client_token: "ClientToken",
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.policy_version #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/dsql-2018-05-10/PutClusterPolicy AWS API Documentation
+    #
+    # @overload put_cluster_policy(params = {})
+    # @param [Hash] params ({})
+    def put_cluster_policy(params = {}, options = {})
+      req = build_request(:put_cluster_policy, params)
+      req.send_request(options)
+    end
+
     # Tags a resource with a map of key and value pairs.
     #
     # @option params [required, String] :resource_arn
@@ -939,7 +1084,7 @@ module Aws::DSQL
     # parameter, you can add or modify witness Region support and manage
     # peer relationships with clusters in other Regions.
     #
-    # <note markdown="1"> Note that updating multi-region clusters requires additional IAM
+    # <note markdown="1"> Note that updating multi-Region clusters requires additional IAM
     # permissions beyond those needed for standard cluster updates, as
     # detailed in the Permissions section.
     #
@@ -1100,7 +1245,7 @@ module Aws::DSQL
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-dsql'
-      context[:gem_version] = '1.18.0'
+      context[:gem_version] = '1.20.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-dsql/client_api.rb

@@ -16,6 +16,7 @@ module Aws::DSQL
 
     AccessDeniedException = Shapes::StructureShape.new(name: 'AccessDeniedException')
     Arn = Shapes::StringShape.new(name: 'Arn')
+    BypassPolicyLockoutSafetyCheck = Shapes::BooleanShape.new(name: 'BypassPolicyLockoutSafetyCheck')
     ClientToken = Shapes::StringShape.new(name: 'ClientToken')
     ClusterArn = Shapes::StringShape.new(name: 'ClusterArn')
     ClusterArnList = Shapes::ListShape.new(name: 'ClusterArnList')
@@ -29,12 +30,17 @@ module Aws::DSQL
     CreateClusterOutput = Shapes::StructureShape.new(name: 'CreateClusterOutput')
     DeleteClusterInput = Shapes::StructureShape.new(name: 'DeleteClusterInput')
     DeleteClusterOutput = Shapes::StructureShape.new(name: 'DeleteClusterOutput')
+    DeleteClusterPolicyInput = Shapes::StructureShape.new(name: 'DeleteClusterPolicyInput')
+    DeleteClusterPolicyOutput = Shapes::StructureShape.new(name: 'DeleteClusterPolicyOutput')
     DeletionProtectionEnabled = Shapes::BooleanShape.new(name: 'DeletionProtectionEnabled')
     EncryptionDetails = Shapes::StructureShape.new(name: 'EncryptionDetails')
     EncryptionStatus = Shapes::StringShape.new(name: 'EncryptionStatus')
     EncryptionType = Shapes::StringShape.new(name: 'EncryptionType')
+    Endpoint = Shapes::StringShape.new(name: 'Endpoint')
     GetClusterInput = Shapes::StructureShape.new(name: 'GetClusterInput')
     GetClusterOutput = Shapes::StructureShape.new(name: 'GetClusterOutput')
+    GetClusterPolicyInput = Shapes::StructureShape.new(name: 'GetClusterPolicyInput')
+    GetClusterPolicyOutput = Shapes::StructureShape.new(name: 'GetClusterPolicyOutput')
     GetVpcEndpointServiceNameInput = Shapes::StructureShape.new(name: 'GetVpcEndpointServiceNameInput')
     GetVpcEndpointServiceNameOutput = Shapes::StructureShape.new(name: 'GetVpcEndpointServiceNameOutput')
     Integer = Shapes::IntegerShape.new(name: 'Integer')
@@ -48,6 +54,10 @@ module Aws::DSQL
     MaxResults = Shapes::IntegerShape.new(name: 'MaxResults')
     MultiRegionProperties = Shapes::StructureShape.new(name: 'MultiRegionProperties')
     NextToken = Shapes::StringShape.new(name: 'NextToken')
+    PolicyDocument = Shapes::StringShape.new(name: 'PolicyDocument')
+    PolicyVersion = Shapes::StringShape.new(name: 'PolicyVersion')
+    PutClusterPolicyInput = Shapes::StructureShape.new(name: 'PutClusterPolicyInput')
+    PutClusterPolicyOutput = Shapes::StructureShape.new(name: 'PutClusterPolicyOutput')
     Region = Shapes::StringShape.new(name: 'Region')
     ResourceNotFoundException = Shapes::StructureShape.new(name: 'ResourceNotFoundException')
     ServiceName = Shapes::StringShape.new(name: 'ServiceName')
@@ -88,6 +98,8 @@ module Aws::DSQL
     CreateClusterInput.add_member(:tags, Shapes::ShapeRef.new(shape: TagMap, location_name: "tags"))
     CreateClusterInput.add_member(:client_token, Shapes::ShapeRef.new(shape: ClientToken, location_name: "clientToken", metadata: {"idempotencyToken" => true}))
     CreateClusterInput.add_member(:multi_region_properties, Shapes::ShapeRef.new(shape: MultiRegionProperties, location_name: "multiRegionProperties"))
+    CreateClusterInput.add_member(:policy, Shapes::ShapeRef.new(shape: PolicyDocument, location_name: "policy"))
+    CreateClusterInput.add_member(:bypass_policy_lockout_safety_check, Shapes::ShapeRef.new(shape: BypassPolicyLockoutSafetyCheck, location_name: "bypassPolicyLockoutSafetyCheck"))
     CreateClusterInput.struct_class = Types::CreateClusterInput
 
     CreateClusterOutput.add_member(:identifier, Shapes::ShapeRef.new(shape: ClusterId, required: true, location_name: "identifier"))
@@ -97,6 +109,7 @@ module Aws::DSQL
     CreateClusterOutput.add_member(:multi_region_properties, Shapes::ShapeRef.new(shape: MultiRegionProperties, location_name: "multiRegionProperties"))
     CreateClusterOutput.add_member(:encryption_details, Shapes::ShapeRef.new(shape: EncryptionDetails, location_name: "encryptionDetails"))
     CreateClusterOutput.add_member(:deletion_protection_enabled, Shapes::ShapeRef.new(shape: DeletionProtectionEnabled, required: true, location_name: "deletionProtectionEnabled"))
+    CreateClusterOutput.add_member(:endpoint, Shapes::ShapeRef.new(shape: Endpoint, location_name: "endpoint"))
     CreateClusterOutput.struct_class = Types::CreateClusterOutput
 
     DeleteClusterInput.add_member(:identifier, Shapes::ShapeRef.new(shape: ClusterId, required: true, location: "uri", location_name: "identifier"))
@@ -109,6 +122,14 @@ module Aws::DSQL
     DeleteClusterOutput.add_member(:creation_time, Shapes::ShapeRef.new(shape: ClusterCreationTime, required: true, location_name: "creationTime"))
     DeleteClusterOutput.struct_class = Types::DeleteClusterOutput
 
+    DeleteClusterPolicyInput.add_member(:identifier, Shapes::ShapeRef.new(shape: ClusterId, required: true, location: "uri", location_name: "identifier"))
+    DeleteClusterPolicyInput.add_member(:expected_policy_version, Shapes::ShapeRef.new(shape: PolicyVersion, location: "querystring", location_name: "expected-policy-version"))
+    DeleteClusterPolicyInput.add_member(:client_token, Shapes::ShapeRef.new(shape: ClientToken, location: "querystring", location_name: "client-token", metadata: {"idempotencyToken" => true}))
+    DeleteClusterPolicyInput.struct_class = Types::DeleteClusterPolicyInput
+
+    DeleteClusterPolicyOutput.add_member(:policy_version, Shapes::ShapeRef.new(shape: PolicyVersion, required: true, location_name: "policyVersion"))
+    DeleteClusterPolicyOutput.struct_class = Types::DeleteClusterPolicyOutput
+
     EncryptionDetails.add_member(:encryption_type, Shapes::ShapeRef.new(shape: EncryptionType, required: true, location_name: "encryptionType"))
     EncryptionDetails.add_member(:kms_key_arn, Shapes::ShapeRef.new(shape: KmsKeyArn, location_name: "kmsKeyArn"))
     EncryptionDetails.add_member(:encryption_status, Shapes::ShapeRef.new(shape: EncryptionStatus, required: true, location_name: "encryptionStatus"))
@@ -125,8 +146,16 @@ module Aws::DSQL
     GetClusterOutput.add_member(:multi_region_properties, Shapes::ShapeRef.new(shape: MultiRegionProperties, location_name: "multiRegionProperties"))
     GetClusterOutput.add_member(:tags, Shapes::ShapeRef.new(shape: TagMap, location_name: "tags"))
     GetClusterOutput.add_member(:encryption_details, Shapes::ShapeRef.new(shape: EncryptionDetails, location_name: "encryptionDetails"))
+    GetClusterOutput.add_member(:endpoint, Shapes::ShapeRef.new(shape: Endpoint, location_name: "endpoint"))
     GetClusterOutput.struct_class = Types::GetClusterOutput
 
+    GetClusterPolicyInput.add_member(:identifier, Shapes::ShapeRef.new(shape: ClusterId, required: true, location: "uri", location_name: "identifier"))
+    GetClusterPolicyInput.struct_class = Types::GetClusterPolicyInput
+
+    GetClusterPolicyOutput.add_member(:policy, Shapes::ShapeRef.new(shape: PolicyDocument, required: true, location_name: "policy"))
+    GetClusterPolicyOutput.add_member(:policy_version, Shapes::ShapeRef.new(shape: PolicyVersion, required: true, location_name: "policyVersion"))
+    GetClusterPolicyOutput.struct_class = Types::GetClusterPolicyOutput
+
     GetVpcEndpointServiceNameInput.add_member(:identifier, Shapes::ShapeRef.new(shape: ClusterId, required: true, location: "uri", location_name: "identifier"))
     GetVpcEndpointServiceNameInput.struct_class = Types::GetVpcEndpointServiceNameInput
 
@@ -155,6 +184,16 @@ module Aws::DSQL
     MultiRegionProperties.add_member(:clusters, Shapes::ShapeRef.new(shape: ClusterArnList, location_name: "clusters"))
     MultiRegionProperties.struct_class = Types::MultiRegionProperties
 
+    PutClusterPolicyInput.add_member(:identifier, Shapes::ShapeRef.new(shape: ClusterId, required: true, location: "uri", location_name: "identifier"))
+    PutClusterPolicyInput.add_member(:policy, Shapes::ShapeRef.new(shape: PolicyDocument, required: true, location_name: "policy"))
+    PutClusterPolicyInput.add_member(:bypass_policy_lockout_safety_check, Shapes::ShapeRef.new(shape: BypassPolicyLockoutSafetyCheck, location_name: "bypassPolicyLockoutSafetyCheck"))
+    PutClusterPolicyInput.add_member(:expected_policy_version, Shapes::ShapeRef.new(shape: PolicyVersion, location_name: "expectedPolicyVersion"))
+    PutClusterPolicyInput.add_member(:client_token, Shapes::ShapeRef.new(shape: ClientToken, location_name: "clientToken", metadata: {"idempotencyToken" => true}))
+    PutClusterPolicyInput.struct_class = Types::PutClusterPolicyInput
+
+    PutClusterPolicyOutput.add_member(:policy_version, Shapes::ShapeRef.new(shape: PolicyVersion, required: true, location_name: "policyVersion"))
+    PutClusterPolicyOutput.struct_class = Types::PutClusterPolicyOutput
+
     ResourceNotFoundException.add_member(:message, Shapes::ShapeRef.new(shape: String, required: true, location_name: "message"))
     ResourceNotFoundException.add_member(:resource_id, Shapes::ShapeRef.new(shape: String, required: true, location_name: "resourceId"))
     ResourceNotFoundException.add_member(:resource_type, Shapes::ShapeRef.new(shape: String, required: true, location_name: "resourceType"))
@@ -257,6 +296,20 @@ module Aws::DSQL
         o.errors << Shapes::ShapeRef.new(shape: ConflictException)
       end)
 
+      api.add_operation(:delete_cluster_policy, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "DeleteClusterPolicy"
+        o.http_method = "DELETE"
+        o.http_request_uri = "/cluster/{identifier}/policy"
+        o.input = Shapes::ShapeRef.new(shape: DeleteClusterPolicyInput)
+        o.output = Shapes::ShapeRef.new(shape: DeleteClusterPolicyOutput)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
+        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
+        o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
+        o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
+        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: ConflictException)
+      end)
+
       api.add_operation(:get_cluster, Seahorse::Model::Operation.new.tap do |o|
         o.name = "GetCluster"
         o.http_method = "GET"
@@ -270,6 +323,19 @@ module Aws::DSQL
         o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
       end)
 
+      api.add_operation(:get_cluster_policy, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "GetClusterPolicy"
+        o.http_method = "GET"
+        o.http_request_uri = "/cluster/{identifier}/policy"
+        o.input = Shapes::ShapeRef.new(shape: GetClusterPolicyInput)
+        o.output = Shapes::ShapeRef.new(shape: GetClusterPolicyOutput)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
+        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
+        o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
+        o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
+        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+      end)
+
       api.add_operation(:get_vpc_endpoint_service_name, Seahorse::Model::Operation.new.tap do |o|
         o.name = "GetVpcEndpointServiceName"
         o.http_method = "GET"
@@ -315,6 +381,20 @@ module Aws::DSQL
         o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
       end)
 
+      api.add_operation(:put_cluster_policy, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "PutClusterPolicy"
+        o.http_method = "POST"
+        o.http_request_uri = "/cluster/{identifier}/policy"
+        o.input = Shapes::ShapeRef.new(shape: PutClusterPolicyInput)
+        o.output = Shapes::ShapeRef.new(shape: PutClusterPolicyOutput)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
+        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
+        o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
+        o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
+        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: ConflictException)
+      end)
+
       api.add_operation(:tag_resource, Seahorse::Model::Operation.new.tap do |o|
         o.name = "TagResource"
         o.http_method = "POST"

data/lib/aws-sdk-dsql/types.rb

@@ -100,6 +100,18 @@ module Aws::DSQL
     #   including the witness region and linked cluster properties.
     #   @return [Types::MultiRegionProperties]
     #
+    # @!attribute [rw] policy
+    #   An optional resource-based policy document in JSON format that
+    #   defines access permissions for the cluster.
+    #   @return [String]
+    #
+    # @!attribute [rw] bypass_policy_lockout_safety_check
+    #   An optional field that controls whether to bypass the lockout
+    #   prevention check. When set to true, this parameter allows you to
+    #   apply a policy that might lock you out of the cluster. Use with
+    #   caution.
+    #   @return [Boolean]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/dsql-2018-05-10/CreateClusterInput AWS API Documentation
     #
     class CreateClusterInput < Struct.new(
@@ -107,7 +119,9 @@ module Aws::DSQL
       :kms_encryption_key,
       :tags,
       :client_token,
-      :multi_region_properties)
+      :multi_region_properties,
+      :policy,
+      :bypass_policy_lockout_safety_check)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -145,6 +159,10 @@ module Aws::DSQL
     #   Whether deletion protection is enabled on this cluster.
     #   @return [Boolean]
     #
+    # @!attribute [rw] endpoint
+    #   The connection endpoint for the created cluster.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/dsql-2018-05-10/CreateClusterOutput AWS API Documentation
     #
     class CreateClusterOutput < Struct.new(
@@ -154,7 +172,8 @@ module Aws::DSQL
       :creation_time,
       :multi_region_properties,
       :encryption_details,
-      :deletion_protection_enabled)
+      :deletion_protection_enabled,
+      :endpoint)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -216,6 +235,45 @@ module Aws::DSQL
       include Aws::Structure
     end
 
+    # @!attribute [rw] identifier
+    #   The ID of the cluster.
+    #   @return [String]
+    #
+    # @!attribute [rw] expected_policy_version
+    #   The expected version of the policy to delete. This parameter ensures
+    #   that you're deleting the correct version of the policy and helps
+    #   prevent accidental deletions.
+    #   @return [String]
+    #
+    # @!attribute [rw] client_token
+    #   Idempotency token so a request is only processed once.
+    #
+    #   **A suitable default value is auto-generated.** You should normally
+    #   not need to pass this option.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/dsql-2018-05-10/DeleteClusterPolicyInput AWS API Documentation
+    #
+    class DeleteClusterPolicyInput < Struct.new(
+      :identifier,
+      :expected_policy_version,
+      :client_token)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] policy_version
+    #   The version of the policy that was deleted.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/dsql-2018-05-10/DeleteClusterPolicyOutput AWS API Documentation
+    #
+    class DeleteClusterPolicyOutput < Struct.new(
+      :policy_version)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Configuration details about encryption for the cluster including the
     # KMS key ARN, encryption type, and encryption status.
     #
@@ -288,6 +346,10 @@ module Aws::DSQL
     #   The current encryption configuration details for the cluster.
     #   @return [Types::EncryptionDetails]
     #
+    # @!attribute [rw] endpoint
+    #   The connection endpoint for the cluster.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/dsql-2018-05-10/GetClusterOutput AWS API Documentation
     #
     class GetClusterOutput < Struct.new(
@@ -298,7 +360,39 @@ module Aws::DSQL
       :deletion_protection_enabled,
       :multi_region_properties,
       :tags,
-      :encryption_details)
+      :encryption_details,
+      :endpoint)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] identifier
+    #   The ID of the cluster to retrieve the policy from.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/dsql-2018-05-10/GetClusterPolicyInput AWS API Documentation
+    #
+    class GetClusterPolicyInput < Struct.new(
+      :identifier)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] policy
+    #   The resource-based policy document attached to the cluster, returned
+    #   as a JSON string.
+    #   @return [String]
+    #
+    # @!attribute [rw] policy_version
+    #   The version of the policy document. This version number is
+    #   incremented each time the policy is updated.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/dsql-2018-05-10/GetClusterPolicyOutput AWS API Documentation
+    #
+    class GetClusterPolicyOutput < Struct.new(
+      :policy,
+      :policy_version)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -415,13 +509,14 @@ module Aws::DSQL
     # containing the witness region and linked cluster settings.
     #
     # @!attribute [rw] witness_region
-    #   The that serves as the witness region for a multi-Region cluster.
-    #   The witness region helps maintain cluster consistency and quorum.
+    #   The Region that serves as the witness region for a multi-Region
+    #   cluster. The witness Region helps maintain cluster consistency and
+    #   quorum.
     #   @return [String]
     #
     # @!attribute [rw] clusters
-    #   The set of linked clusters that form the multi-Region cluster
-    #   configuration. Each linked cluster represents a database instance in
+    #   The set of peered clusters that form the multi-Region cluster
+    #   configuration. Each peered cluster represents a database instance in
     #   a different Region.
     #   @return [Array<String>]
     #
@@ -434,6 +529,59 @@ module Aws::DSQL
       include Aws::Structure
     end
 
+    # @!attribute [rw] identifier
+    #   The ID of the cluster.
+    #   @return [String]
+    #
+    # @!attribute [rw] policy
+    #   The resource-based policy document to attach to the cluster. This
+    #   should be a valid JSON policy document that defines permissions and
+    #   conditions.
+    #   @return [String]
+    #
+    # @!attribute [rw] bypass_policy_lockout_safety_check
+    #   A flag that allows you to bypass the policy lockout safety check.
+    #   When set to true, this parameter allows you to apply a policy that
+    #   might lock you out of the cluster. Use with caution.
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] expected_policy_version
+    #   The expected version of the current policy. This parameter ensures
+    #   that you're updating the correct version of the policy and helps
+    #   prevent concurrent modification conflicts.
+    #   @return [String]
+    #
+    # @!attribute [rw] client_token
+    #   Idempotency token so a request is only processed once.
+    #
+    #   **A suitable default value is auto-generated.** You should normally
+    #   not need to pass this option.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/dsql-2018-05-10/PutClusterPolicyInput AWS API Documentation
+    #
+    class PutClusterPolicyInput < Struct.new(
+      :identifier,
+      :policy,
+      :bypass_policy_lockout_safety_check,
+      :expected_policy_version,
+      :client_token)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] policy_version
+    #   The version of the policy after it has been updated or created.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/dsql-2018-05-10/PutClusterPolicyOutput AWS API Documentation
+    #
+    class PutClusterPolicyOutput < Struct.new(
+      :policy_version)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # The resource could not be found.
     #
     # @!attribute [rw] message

data/lib/aws-sdk-dsql.rb

@@ -55,7 +55,7 @@ module Aws::DSQL
   autoload :EndpointProvider, 'aws-sdk-dsql/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-dsql/endpoints'
 
-  GEM_VERSION = '1.18.0'
+  GEM_VERSION = '1.20.0'
 
 end
 

data/sig/client.rbs

@@ -87,6 +87,7 @@ module Aws
         def multi_region_properties: () -> Types::MultiRegionProperties
         def encryption_details: () -> Types::EncryptionDetails
         def deletion_protection_enabled: () -> bool
+        def endpoint: () -> ::String
       end
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/DSQL/Client.html#create_cluster-instance_method
       def create_cluster: (
@@ -97,7 +98,9 @@ module Aws
                             ?multi_region_properties: {
                               witness_region: ::String?,
                               clusters: Array[::String]?
-                            }
+                            },
+                            ?policy: ::String,
+                            ?bypass_policy_lockout_safety_check: bool
                           ) -> _CreateClusterResponseSuccess
                         | (?Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _CreateClusterResponseSuccess
 
@@ -115,6 +118,18 @@ module Aws
                           ) -> _DeleteClusterResponseSuccess
                         | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _DeleteClusterResponseSuccess
 
+      interface _DeleteClusterPolicyResponseSuccess
+        include ::Seahorse::Client::_ResponseSuccess[Types::DeleteClusterPolicyOutput]
+        def policy_version: () -> ::String
+      end
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/DSQL/Client.html#delete_cluster_policy-instance_method
+      def delete_cluster_policy: (
+                                   identifier: ::String,
+                                   ?expected_policy_version: ::String,
+                                   ?client_token: ::String
+                                 ) -> _DeleteClusterPolicyResponseSuccess
+                               | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _DeleteClusterPolicyResponseSuccess
+
       interface _GetClusterResponseSuccess
         include ::Seahorse::Client::_ResponseSuccess[Types::GetClusterOutput]
         def identifier: () -> ::String
@@ -125,6 +140,7 @@ module Aws
         def multi_region_properties: () -> Types::MultiRegionProperties
         def tags: () -> ::Hash[::String, ::String]
         def encryption_details: () -> Types::EncryptionDetails
+        def endpoint: () -> ::String
       end
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/DSQL/Client.html#get_cluster-instance_method
       def get_cluster: (
@@ -132,6 +148,17 @@ module Aws
                        ) -> _GetClusterResponseSuccess
                      | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _GetClusterResponseSuccess
 
+      interface _GetClusterPolicyResponseSuccess
+        include ::Seahorse::Client::_ResponseSuccess[Types::GetClusterPolicyOutput]
+        def policy: () -> ::String
+        def policy_version: () -> ::String
+      end
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/DSQL/Client.html#get_cluster_policy-instance_method
+      def get_cluster_policy: (
+                                identifier: ::String
+                              ) -> _GetClusterPolicyResponseSuccess
+                            | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _GetClusterPolicyResponseSuccess
+
       interface _GetVpcEndpointServiceNameResponseSuccess
         include ::Seahorse::Client::_ResponseSuccess[Types::GetVpcEndpointServiceNameOutput]
         def service_name: () -> ::String
@@ -164,6 +191,20 @@ module Aws
                                   ) -> _ListTagsForResourceResponseSuccess
                                 | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _ListTagsForResourceResponseSuccess
 
+      interface _PutClusterPolicyResponseSuccess
+        include ::Seahorse::Client::_ResponseSuccess[Types::PutClusterPolicyOutput]
+        def policy_version: () -> ::String
+      end
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/DSQL/Client.html#put_cluster_policy-instance_method
+      def put_cluster_policy: (
+                                identifier: ::String,
+                                policy: ::String,
+                                ?bypass_policy_lockout_safety_check: bool,
+                                ?expected_policy_version: ::String,
+                                ?client_token: ::String
+                              ) -> _PutClusterPolicyResponseSuccess
+                            | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _PutClusterPolicyResponseSuccess
+
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/DSQL/Client.html#tag_resource-instance_method
       def tag_resource: (
                           resource_arn: ::String,

data/sig/types.rbs

@@ -32,6 +32,8 @@ module Aws::DSQL
       attr_accessor tags: ::Hash[::String, ::String]
       attr_accessor client_token: ::String
       attr_accessor multi_region_properties: Types::MultiRegionProperties
+      attr_accessor policy: ::String
+      attr_accessor bypass_policy_lockout_safety_check: bool
       SENSITIVE: []
     end
 
@@ -43,6 +45,7 @@ module Aws::DSQL
       attr_accessor multi_region_properties: Types::MultiRegionProperties
       attr_accessor encryption_details: Types::EncryptionDetails
       attr_accessor deletion_protection_enabled: bool
+      attr_accessor endpoint: ::String
       SENSITIVE: []
     end
 
@@ -60,6 +63,18 @@ module Aws::DSQL
       SENSITIVE: []
     end
 
+    class DeleteClusterPolicyInput
+      attr_accessor identifier: ::String
+      attr_accessor expected_policy_version: ::String
+      attr_accessor client_token: ::String
+      SENSITIVE: []
+    end
+
+    class DeleteClusterPolicyOutput
+      attr_accessor policy_version: ::String
+      SENSITIVE: []
+    end
+
     class EncryptionDetails
       attr_accessor encryption_type: ("AWS_OWNED_KMS_KEY" | "CUSTOMER_MANAGED_KMS_KEY")
       attr_accessor kms_key_arn: ::String
@@ -81,6 +96,18 @@ module Aws::DSQL
       attr_accessor multi_region_properties: Types::MultiRegionProperties
       attr_accessor tags: ::Hash[::String, ::String]
       attr_accessor encryption_details: Types::EncryptionDetails
+      attr_accessor endpoint: ::String
+      SENSITIVE: []
+    end
+
+    class GetClusterPolicyInput
+      attr_accessor identifier: ::String
+      SENSITIVE: []
+    end
+
+    class GetClusterPolicyOutput
+      attr_accessor policy: ::String
+      attr_accessor policy_version: ::String
       SENSITIVE: []
     end
 
@@ -128,6 +155,20 @@ module Aws::DSQL
       SENSITIVE: []
     end
 
+    class PutClusterPolicyInput
+      attr_accessor identifier: ::String
+      attr_accessor policy: ::String
+      attr_accessor bypass_policy_lockout_safety_check: bool
+      attr_accessor expected_policy_version: ::String
+      attr_accessor client_token: ::String
+      SENSITIVE: []
+    end
+
+    class PutClusterPolicyOutput
+      attr_accessor policy_version: ::String
+      SENSITIVE: []
+    end
+
     class ResourceNotFoundException
       attr_accessor message: ::String
       attr_accessor resource_id: ::String

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-dsql
 version: !ruby/object:Gem::Version
-  version: 1.18.0
+  version: 1.20.0
 platform: ruby
 authors:
 - Amazon Web Services