aws-sdk-dsql 1.9.0 → 1.10.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 3ecc5074f03f4e0faedcc34bf17cb86ddd965c9e3bd2a708889069febcdf20c3
-  data.tar.gz: d5c32129b43da188c45c1db729dd314d7ce2f537627d130358edcd318af55a61
+  metadata.gz: cc8d5b3c263fe1f336a3f125d35c0a0c10b56c1d3e56c11e130a719aaea66e64
+  data.tar.gz: 9933555f230dbf4930e11a45ab55c94844353356a4c2292d07511f563fea7008
 SHA512:
-  metadata.gz: 9944304dbdbd74326ee6542be90a0d80847c3bdbbabcf40e252e4341918342d64e1edb0854a9c3e1b7170f388d41b8adfc242fc87946003026c06eb1d634fe00
-  data.tar.gz: 890c6e9e99a0e15931bfc378914394141b1a7c116f02cf4a949d5cfede982159afbcb84dd14452aceb4e80f259d39946b16e33ce8e16f6387fcf38fac2560ff1
+  metadata.gz: 6f0931eea9b2b8292bbfb52e972363689f6226a768f19b37bb903f5aa37b75d39b0812f9892ecc8e3ae89576f8f5591d77a1140b107e3e2c405b93b5f6f112f9
+  data.tar.gz: a75e4f4edb3a70ef5dcb8211fe2df0db196791ec30f147517856cf062cdcb4b2a8e70d170d1e3e8dd7c57bb704d80c4ec54744c6686a43e8d5184d89147fa3dc

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.10.0 (2025-05-22)
+------------------
+
+* Feature - Features: support for customer managed encryption keys
+
 1.9.0 (2025-05-19)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.9.0
+1.10.0

data/lib/aws-sdk-dsql/client.rb

@@ -533,6 +533,11 @@ module Aws::DSQL
     #   If enabled, you can't delete your cluster. You must first disable
     #   this property before you can delete your cluster.
     #
+    # @option params [String] :kms_encryption_key
+    #   The KMS key that encrypts and protects the data on your cluster. You
+    #   can specify the ARN, ID, or alias of an existing key or have Amazon
+    #   Web Services create a default key for you.
+    #
     # @option params [Hash<String,String>] :tags
     #   A map of key and value pairs to use to tag your cluster.
     #
@@ -561,6 +566,7 @@ module Aws::DSQL
     #   * {Types::CreateClusterOutput#status #status} => String
     #   * {Types::CreateClusterOutput#creation_time #creation_time} => Time
     #   * {Types::CreateClusterOutput#multi_region_properties #multi_region_properties} => Types::MultiRegionProperties
+    #   * {Types::CreateClusterOutput#encryption_details #encryption_details} => Types::EncryptionDetails
     #   * {Types::CreateClusterOutput#deletion_protection_enabled #deletion_protection_enabled} => Boolean
     #
     #
@@ -577,6 +583,7 @@ module Aws::DSQL
     #
     #   resp = client.create_cluster({
     #     deletion_protection_enabled: false,
+    #     kms_encryption_key: "KmsEncryptionKey",
     #     tags: {
     #       "TagKey" => "TagValue",
     #     },
@@ -596,6 +603,9 @@ module Aws::DSQL
     #   resp.multi_region_properties.witness_region #=> String
     #   resp.multi_region_properties.clusters #=> Array
     #   resp.multi_region_properties.clusters[0] #=> String
+    #   resp.encryption_details.encryption_type #=> String, one of "AWS_OWNED_KMS_KEY", "CUSTOMER_MANAGED_KMS_KEY"
+    #   resp.encryption_details.kms_key_arn #=> String
+    #   resp.encryption_details.encryption_status #=> String, one of "ENABLED", "UPDATING", "KMS_KEY_INACCESSIBLE", "ENABLING"
     #   resp.deletion_protection_enabled #=> Boolean
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/dsql-2018-05-10/CreateCluster AWS API Documentation
@@ -677,6 +687,7 @@ module Aws::DSQL
     #   * {Types::GetClusterOutput#deletion_protection_enabled #deletion_protection_enabled} => Boolean
     #   * {Types::GetClusterOutput#multi_region_properties #multi_region_properties} => Types::MultiRegionProperties
     #   * {Types::GetClusterOutput#tags #tags} => Hash&lt;String,String&gt;
+    #   * {Types::GetClusterOutput#encryption_details #encryption_details} => Types::EncryptionDetails
     #
     #
     # @example Example: Get Cluster
@@ -703,6 +714,9 @@ module Aws::DSQL
     #   resp.multi_region_properties.clusters[0] #=> String
     #   resp.tags #=> Hash
     #   resp.tags["TagKey"] #=> String
+    #   resp.encryption_details.encryption_type #=> String, one of "AWS_OWNED_KMS_KEY", "CUSTOMER_MANAGED_KMS_KEY"
+    #   resp.encryption_details.kms_key_arn #=> String
+    #   resp.encryption_details.encryption_status #=> String, one of "ENABLED", "UPDATING", "KMS_KEY_INACCESSIBLE", "ENABLING"
     #
     #
     # The following waiters are defined for this operation (see {Client#wait_until} for detailed usage):
@@ -994,6 +1008,11 @@ module Aws::DSQL
     # @option params [Boolean] :deletion_protection_enabled
     #   Specifies whether to enable deletion protection in your cluster.
     #
+    # @option params [String] :kms_encryption_key
+    #   The KMS key that encrypts and protects the data on your cluster. You
+    #   can specify the ARN, ID, or alias of an existing key or have Amazon
+    #   Web Services create a default key for you.
+    #
     # @option params [String] :client_token
     #   A unique, case-sensitive identifier that you provide to ensure the
     #   idempotency of the request. Idempotency ensures that an API request
@@ -1032,6 +1051,7 @@ module Aws::DSQL
     #   resp = client.update_cluster({
     #     identifier: "ClusterId", # required
     #     deletion_protection_enabled: false,
+    #     kms_encryption_key: "KmsEncryptionKey",
     #     client_token: "ClientToken",
     #     multi_region_properties: {
     #       witness_region: "Region",
@@ -1073,7 +1093,7 @@ module Aws::DSQL
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-dsql'
-      context[:gem_version] = '1.9.0'
+      context[:gem_version] = '1.10.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-dsql/client_api.rb

@@ -30,12 +30,17 @@ module Aws::DSQL
     DeleteClusterInput = Shapes::StructureShape.new(name: 'DeleteClusterInput')
     DeleteClusterOutput = Shapes::StructureShape.new(name: 'DeleteClusterOutput')
     DeletionProtectionEnabled = Shapes::BooleanShape.new(name: 'DeletionProtectionEnabled')
+    EncryptionDetails = Shapes::StructureShape.new(name: 'EncryptionDetails')
+    EncryptionStatus = Shapes::StringShape.new(name: 'EncryptionStatus')
+    EncryptionType = Shapes::StringShape.new(name: 'EncryptionType')
     GetClusterInput = Shapes::StructureShape.new(name: 'GetClusterInput')
     GetClusterOutput = Shapes::StructureShape.new(name: 'GetClusterOutput')
     GetVpcEndpointServiceNameInput = Shapes::StructureShape.new(name: 'GetVpcEndpointServiceNameInput')
     GetVpcEndpointServiceNameOutput = Shapes::StructureShape.new(name: 'GetVpcEndpointServiceNameOutput')
     Integer = Shapes::IntegerShape.new(name: 'Integer')
     InternalServerException = Shapes::StructureShape.new(name: 'InternalServerException')
+    KmsEncryptionKey = Shapes::StringShape.new(name: 'KmsEncryptionKey')
+    KmsKeyArn = Shapes::StringShape.new(name: 'KmsKeyArn')
     ListClustersInput = Shapes::StructureShape.new(name: 'ListClustersInput')
     ListClustersOutput = Shapes::StructureShape.new(name: 'ListClustersOutput')
     ListTagsForResourceInput = Shapes::StructureShape.new(name: 'ListTagsForResourceInput')
@@ -79,6 +84,7 @@ module Aws::DSQL
     ConflictException.struct_class = Types::ConflictException
 
     CreateClusterInput.add_member(:deletion_protection_enabled, Shapes::ShapeRef.new(shape: DeletionProtectionEnabled, location_name: "deletionProtectionEnabled"))
+    CreateClusterInput.add_member(:kms_encryption_key, Shapes::ShapeRef.new(shape: KmsEncryptionKey, location_name: "kmsEncryptionKey"))
     CreateClusterInput.add_member(:tags, Shapes::ShapeRef.new(shape: TagMap, location_name: "tags"))
     CreateClusterInput.add_member(:client_token, Shapes::ShapeRef.new(shape: ClientToken, location_name: "clientToken", metadata: {"idempotencyToken" => true}))
     CreateClusterInput.add_member(:multi_region_properties, Shapes::ShapeRef.new(shape: MultiRegionProperties, location_name: "multiRegionProperties"))
@@ -89,6 +95,7 @@ module Aws::DSQL
     CreateClusterOutput.add_member(:status, Shapes::ShapeRef.new(shape: ClusterStatus, required: true, location_name: "status"))
     CreateClusterOutput.add_member(:creation_time, Shapes::ShapeRef.new(shape: ClusterCreationTime, required: true, location_name: "creationTime"))
     CreateClusterOutput.add_member(:multi_region_properties, Shapes::ShapeRef.new(shape: MultiRegionProperties, location_name: "multiRegionProperties"))
+    CreateClusterOutput.add_member(:encryption_details, Shapes::ShapeRef.new(shape: EncryptionDetails, location_name: "encryptionDetails"))
     CreateClusterOutput.add_member(:deletion_protection_enabled, Shapes::ShapeRef.new(shape: DeletionProtectionEnabled, required: true, location_name: "deletionProtectionEnabled"))
     CreateClusterOutput.struct_class = Types::CreateClusterOutput
 
@@ -102,6 +109,11 @@ module Aws::DSQL
     DeleteClusterOutput.add_member(:creation_time, Shapes::ShapeRef.new(shape: ClusterCreationTime, required: true, location_name: "creationTime"))
     DeleteClusterOutput.struct_class = Types::DeleteClusterOutput
 
+    EncryptionDetails.add_member(:encryption_type, Shapes::ShapeRef.new(shape: EncryptionType, required: true, location_name: "encryptionType"))
+    EncryptionDetails.add_member(:kms_key_arn, Shapes::ShapeRef.new(shape: KmsKeyArn, location_name: "kmsKeyArn"))
+    EncryptionDetails.add_member(:encryption_status, Shapes::ShapeRef.new(shape: EncryptionStatus, required: true, location_name: "encryptionStatus"))
+    EncryptionDetails.struct_class = Types::EncryptionDetails
+
     GetClusterInput.add_member(:identifier, Shapes::ShapeRef.new(shape: ClusterId, required: true, location: "uri", location_name: "identifier"))
     GetClusterInput.struct_class = Types::GetClusterInput
 
@@ -112,6 +124,7 @@ module Aws::DSQL
     GetClusterOutput.add_member(:deletion_protection_enabled, Shapes::ShapeRef.new(shape: DeletionProtectionEnabled, required: true, location_name: "deletionProtectionEnabled"))
     GetClusterOutput.add_member(:multi_region_properties, Shapes::ShapeRef.new(shape: MultiRegionProperties, location_name: "multiRegionProperties"))
     GetClusterOutput.add_member(:tags, Shapes::ShapeRef.new(shape: TagMap, location_name: "tags"))
+    GetClusterOutput.add_member(:encryption_details, Shapes::ShapeRef.new(shape: EncryptionDetails, location_name: "encryptionDetails"))
     GetClusterOutput.struct_class = Types::GetClusterOutput
 
     GetVpcEndpointServiceNameInput.add_member(:identifier, Shapes::ShapeRef.new(shape: ClusterId, required: true, location: "uri", location_name: "identifier"))
@@ -175,6 +188,7 @@ module Aws::DSQL
 
     UpdateClusterInput.add_member(:identifier, Shapes::ShapeRef.new(shape: ClusterId, required: true, location: "uri", location_name: "identifier"))
     UpdateClusterInput.add_member(:deletion_protection_enabled, Shapes::ShapeRef.new(shape: DeletionProtectionEnabled, location_name: "deletionProtectionEnabled"))
+    UpdateClusterInput.add_member(:kms_encryption_key, Shapes::ShapeRef.new(shape: KmsEncryptionKey, location_name: "kmsEncryptionKey"))
     UpdateClusterInput.add_member(:client_token, Shapes::ShapeRef.new(shape: ClientToken, location_name: "clientToken", metadata: {"idempotencyToken" => true}))
     UpdateClusterInput.add_member(:multi_region_properties, Shapes::ShapeRef.new(shape: MultiRegionProperties, location_name: "multiRegionProperties"))
     UpdateClusterInput.struct_class = Types::UpdateClusterInput

data/lib/aws-sdk-dsql/types.rb

@@ -70,6 +70,12 @@ module Aws::DSQL
     #   this property before you can delete your cluster.
     #   @return [Boolean]
     #
+    # @!attribute [rw] kms_encryption_key
+    #   The KMS key that encrypts and protects the data on your cluster. You
+    #   can specify the ARN, ID, or alias of an existing key or have Amazon
+    #   Web Services create a default key for you.
+    #   @return [String]
+    #
     # @!attribute [rw] tags
     #   A map of key and value pairs to use to tag your cluster.
     #   @return [Hash<String,String>]
@@ -98,6 +104,7 @@ module Aws::DSQL
     #
     class CreateClusterInput < Struct.new(
       :deletion_protection_enabled,
+      :kms_encryption_key,
       :tags,
       :client_token,
       :multi_region_properties)
@@ -128,6 +135,12 @@ module Aws::DSQL
     #   cluster creation
     #   @return [Types::MultiRegionProperties]
     #
+    # @!attribute [rw] encryption_details
+    #   The encryption configuration for the cluster that was specified
+    #   during the creation process, including the KMS key identifier and
+    #   encryption state.
+    #   @return [Types::EncryptionDetails]
+    #
     # @!attribute [rw] deletion_protection_enabled
     #   Whether deletion protection is enabled on this cluster.
     #   @return [Boolean]
@@ -140,6 +153,7 @@ module Aws::DSQL
       :status,
       :creation_time,
       :multi_region_properties,
+      :encryption_details,
       :deletion_protection_enabled)
       SENSITIVE = []
       include Aws::Structure
@@ -202,6 +216,31 @@ module Aws::DSQL
       include Aws::Structure
     end
 
+    # Configuration details about encryption for the cluster including the
+    # KMS key ARN, encryption type, and encryption status.
+    #
+    # @!attribute [rw] encryption_type
+    #   The type of encryption that protects the data on your cluster.
+    #   @return [String]
+    #
+    # @!attribute [rw] kms_key_arn
+    #   The ARN of the KMS key that encrypts data in the cluster.
+    #   @return [String]
+    #
+    # @!attribute [rw] encryption_status
+    #   The status of encryption for the cluster.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/dsql-2018-05-10/EncryptionDetails AWS API Documentation
+    #
+    class EncryptionDetails < Struct.new(
+      :encryption_type,
+      :kms_key_arn,
+      :encryption_status)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] identifier
     #   The ID of the cluster to retrieve.
     #   @return [String]
@@ -245,6 +284,10 @@ module Aws::DSQL
     #   Map of tags.
     #   @return [Hash<String,String>]
     #
+    # @!attribute [rw] encryption_details
+    #   The current encryption configuration details for the cluster.
+    #   @return [Types::EncryptionDetails]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/dsql-2018-05-10/GetClusterOutput AWS API Documentation
     #
     class GetClusterOutput < Struct.new(
@@ -254,7 +297,8 @@ module Aws::DSQL
       :creation_time,
       :deletion_protection_enabled,
       :multi_region_properties,
-      :tags)
+      :tags,
+      :encryption_details)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -518,6 +562,12 @@ module Aws::DSQL
     #   Specifies whether to enable deletion protection in your cluster.
     #   @return [Boolean]
     #
+    # @!attribute [rw] kms_encryption_key
+    #   The KMS key that encrypts and protects the data on your cluster. You
+    #   can specify the ARN, ID, or alias of an existing key or have Amazon
+    #   Web Services create a default key for you.
+    #   @return [String]
+    #
     # @!attribute [rw] client_token
     #   A unique, case-sensitive identifier that you provide to ensure the
     #   idempotency of the request. Idempotency ensures that an API request
@@ -543,6 +593,7 @@ module Aws::DSQL
     class UpdateClusterInput < Struct.new(
       :identifier,
       :deletion_protection_enabled,
+      :kms_encryption_key,
       :client_token,
       :multi_region_properties)
       SENSITIVE = []

data/lib/aws-sdk-dsql.rb

@@ -55,7 +55,7 @@ module Aws::DSQL
   autoload :EndpointProvider, 'aws-sdk-dsql/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-dsql/endpoints'
 
-  GEM_VERSION = '1.9.0'
+  GEM_VERSION = '1.10.0'
 
 end
 

data/sig/client.rbs

@@ -84,11 +84,13 @@ module Aws
         def status: () -> ("CREATING" | "ACTIVE" | "IDLE" | "INACTIVE" | "UPDATING" | "DELETING" | "DELETED" | "FAILED" | "PENDING_SETUP" | "PENDING_DELETE")
         def creation_time: () -> ::Time
         def multi_region_properties: () -> Types::MultiRegionProperties
+        def encryption_details: () -> Types::EncryptionDetails
         def deletion_protection_enabled: () -> bool
       end
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/DSQL/Client.html#create_cluster-instance_method
       def create_cluster: (
                             ?deletion_protection_enabled: bool,
+                            ?kms_encryption_key: ::String,
                             ?tags: Hash[::String, ::String],
                             ?client_token: ::String,
                             ?multi_region_properties: {
@@ -121,6 +123,7 @@ module Aws
         def deletion_protection_enabled: () -> bool
         def multi_region_properties: () -> Types::MultiRegionProperties
         def tags: () -> ::Hash[::String, ::String]
+        def encryption_details: () -> Types::EncryptionDetails
       end
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/DSQL/Client.html#get_cluster-instance_method
       def get_cluster: (
@@ -185,6 +188,7 @@ module Aws
       def update_cluster: (
                             identifier: ::String,
                             ?deletion_protection_enabled: bool,
+                            ?kms_encryption_key: ::String,
                             ?client_token: ::String,
                             ?multi_region_properties: {
                               witness_region: ::String?,

data/sig/types.rbs

@@ -28,6 +28,7 @@ module Aws::DSQL
 
     class CreateClusterInput
       attr_accessor deletion_protection_enabled: bool
+      attr_accessor kms_encryption_key: ::String
       attr_accessor tags: ::Hash[::String, ::String]
       attr_accessor client_token: ::String
       attr_accessor multi_region_properties: Types::MultiRegionProperties
@@ -40,6 +41,7 @@ module Aws::DSQL
       attr_accessor status: ("CREATING" | "ACTIVE" | "IDLE" | "INACTIVE" | "UPDATING" | "DELETING" | "DELETED" | "FAILED" | "PENDING_SETUP" | "PENDING_DELETE")
       attr_accessor creation_time: ::Time
       attr_accessor multi_region_properties: Types::MultiRegionProperties
+      attr_accessor encryption_details: Types::EncryptionDetails
       attr_accessor deletion_protection_enabled: bool
       SENSITIVE: []
     end
@@ -58,6 +60,13 @@ module Aws::DSQL
       SENSITIVE: []
     end
 
+    class EncryptionDetails
+      attr_accessor encryption_type: ("AWS_OWNED_KMS_KEY" | "CUSTOMER_MANAGED_KMS_KEY")
+      attr_accessor kms_key_arn: ::String
+      attr_accessor encryption_status: ("ENABLED" | "UPDATING" | "KMS_KEY_INACCESSIBLE" | "ENABLING")
+      SENSITIVE: []
+    end
+
     class GetClusterInput
       attr_accessor identifier: ::String
       SENSITIVE: []
@@ -71,6 +80,7 @@ module Aws::DSQL
       attr_accessor deletion_protection_enabled: bool
       attr_accessor multi_region_properties: Types::MultiRegionProperties
       attr_accessor tags: ::Hash[::String, ::String]
+      attr_accessor encryption_details: Types::EncryptionDetails
       SENSITIVE: []
     end
 
@@ -157,6 +167,7 @@ module Aws::DSQL
     class UpdateClusterInput
       attr_accessor identifier: ::String
       attr_accessor deletion_protection_enabled: bool
+      attr_accessor kms_encryption_key: ::String
       attr_accessor client_token: ::String
       attr_accessor multi_region_properties: Types::MultiRegionProperties
       SENSITIVE: []

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-dsql
 version: !ruby/object:Gem::Version
-  version: 1.9.0
+  version: 1.10.0
 platform: ruby
 authors:
 - Amazon Web Services