aws-sdk-dsql 1.30.0 → 1.31.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 73da1e1b65550465fa543826fec314751e2c5e56ba8333a99f3dbd1d822737c3
-  data.tar.gz: f66c78a14a54af5f27675a397c98b6225c6d9bc58a5d23daa00a5ddfee028c1d
+  metadata.gz: 584f5dfaa37638cb0b28d243c5e8afd857e4c5b9609a44dd0ff8534f52001850
+  data.tar.gz: 396d54a69d212925d286ab554a90be681d0a8d370fa6a2e610302718fccbbba7
 SHA512:
-  metadata.gz: 0f65aaf8c215267706e21f8ec0630a93b80fecfa2f2ded2e9a8d7fa7d4a2108fab771fc89a3ec6ca4bbd1425a036730a33952fbf655f4c87ff02ce98fe4fb2bf
-  data.tar.gz: faabe1707cf4ae2c36faa571e044fdc8a74898f8f94206f849d613ca1db9ec774233f7eb30bccf79952edb25605a4411a2258d5fd911d67b5bf132ca0baa218a
+  metadata.gz: c578855d576dd45d634a4bab64d64bbdadda09c221a725f3de1790a1901abc121a7f69434816e17d1377bc7a0db80a1fcd0af918e0255dd85b80eb5c6a0f5473
+  data.tar.gz: 4e77855595f8a770c1cb195f1d43e4dfac32150ffdb595d15468a964dba0684421e605489b5713750a07c58c49acf312459804b56e54b58ae0d45312c1b8a103

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.31.0 (2026-08-04)
+------------------
+
+* Feature - UpdateCluster now checks the RemovePeerCluster permission on the specific cluster being removed, not a wildcard and docs now clarify how to set kmsEncryptionKey so the cluster uses the AWS-owned key.
+
 1.30.0 (2026-07-09)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.30.0
+1.31.0

data/lib/aws-sdk-dsql/client.rb

@@ -1393,11 +1393,16 @@ module Aws::DSQL
     #
     # dsql:RemovePeerCluster
     #
-    # : Permission to remove peer clusters. The *dsql:RemovePeerCluster*
-    #   permission uses a wildcard ARN pattern to simplify permission
-    #   management during updates.
+    # : Permission to remove peer clusters. When you list peer clusters in
+    #   `multiRegionProperties.clusters`, you need this permission for each
+    #   current peer cluster that your list omits.
     #
-    #   Resources: `arn:aws:dsql:*:account-id:cluster/*`
+    #   Resources:
+    #
+    #   * Each removed peer cluster: exact ARN of each removed peer cluster,
+    #     in its own Region
+    #
+    #   ^
     # ^
     #
     # dsql:PutWitnessRegion
@@ -1412,15 +1417,14 @@ module Aws::DSQL
     #   **This permission is checked both in the cluster Region and in the
     #   witness Region.**
     #
-    # * The witness region specified in
+    # * The witness Region specified in
     #   `multiRegionProperties.witnessRegion` cannot be the same as the
     #   cluster's Region.
     #
-    # * When updating clusters with peer relationships, permissions are
-    #   checked for both adding and removing peers.
-    #
-    # * The `dsql:RemovePeerCluster` permission uses a wildcard ARN pattern
-    #   to simplify permission management during updates.
+    # * When you list peer clusters in `multiRegionProperties.clusters`, you
+    #   need `dsql:AddPeerCluster` for every peer cluster in your request.
+    #   You need `dsql:RemovePeerCluster` only for the peer clusters that
+    #   the update removes.
     #
     # @option params [required, String] :identifier
     #   The ID of the cluster you want to update.
@@ -1433,6 +1437,9 @@ module Aws::DSQL
     #   can specify the ARN, ID, or alias of an existing key or have Amazon
     #   Web Services create a default key for you.
     #
+    #   To switch to the key owned by Amazon Web Services, specify the
+    #   reserved value `AWS_OWNED_KMS_KEY`.
+    #
     # @option params [String] :client_token
     #   A unique, case-sensitive identifier that you provide to ensure the
     #   idempotency of the request. Idempotency ensures that an API request
@@ -1513,7 +1520,7 @@ module Aws::DSQL
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-dsql'
-      context[:gem_version] = '1.30.0'
+      context[:gem_version] = '1.31.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-dsql/types.rb

@@ -1101,6 +1101,9 @@ module Aws::DSQL
     #   The KMS key that encrypts and protects the data on your cluster. You
     #   can specify the ARN, ID, or alias of an existing key or have Amazon
     #   Web Services create a default key for you.
+    #
+    #   To switch to the key owned by Amazon Web Services, specify the
+    #   reserved value `AWS_OWNED_KMS_KEY`.
     #   @return [String]
     #
     # @!attribute [rw] client_token

data/lib/aws-sdk-dsql.rb

@@ -55,7 +55,7 @@ module Aws::DSQL
   autoload :EndpointProvider, 'aws-sdk-dsql/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-dsql/endpoints'
 
-  GEM_VERSION = '1.30.0'
+  GEM_VERSION = '1.31.0'
 
 end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-dsql
 version: !ruby/object:Gem::Version
-  version: 1.30.0
+  version: 1.31.0
 platform: ruby
 authors:
 - Amazon Web Services