aws-sdk-eks 1.48.0 → 1.53.0

data/lib/aws-sdk-eks/client_api.rb

@@ -3,7 +3,7 @@
 # WARNING ABOUT GENERATED CODE
 #
 # This file is generated. See the contributing guide for more information:
-# https://github.com/aws/aws-sdk-ruby/blob/master/CONTRIBUTING.md
+# https://github.com/aws/aws-sdk-ruby/blob/version-3/CONTRIBUTING.md
 #
 # WARNING ABOUT GENERATED CODE
 
@@ -24,6 +24,8 @@ module Aws::EKS
     AddonVersionInfo = Shapes::StructureShape.new(name: 'AddonVersionInfo')
     AddonVersionInfoList = Shapes::ListShape.new(name: 'AddonVersionInfoList')
     Addons = Shapes::ListShape.new(name: 'Addons')
+    AssociateEncryptionConfigRequest = Shapes::StructureShape.new(name: 'AssociateEncryptionConfigRequest')
+    AssociateEncryptionConfigResponse = Shapes::StructureShape.new(name: 'AssociateEncryptionConfigResponse')
     AssociateIdentityProviderConfigRequest = Shapes::StructureShape.new(name: 'AssociateIdentityProviderConfigRequest')
     AssociateIdentityProviderConfigResponse = Shapes::StructureShape.new(name: 'AssociateIdentityProviderConfigResponse')
     AutoScalingGroup = Shapes::StructureShape.new(name: 'AutoScalingGroup')
@@ -147,6 +149,8 @@ module Aws::EKS
     TagResourceRequest = Shapes::StructureShape.new(name: 'TagResourceRequest')
     TagResourceResponse = Shapes::StructureShape.new(name: 'TagResourceResponse')
     TagValue = Shapes::StringShape.new(name: 'TagValue')
+    Taint = Shapes::StructureShape.new(name: 'Taint')
+    TaintEffect = Shapes::StringShape.new(name: 'TaintEffect')
     Timestamp = Shapes::TimestampShape.new(name: 'Timestamp')
     UnsupportedAvailabilityZoneException = Shapes::StructureShape.new(name: 'UnsupportedAvailabilityZoneException')
     UntagResourceRequest = Shapes::StructureShape.new(name: 'UntagResourceRequest')
@@ -167,9 +171,11 @@ module Aws::EKS
     UpdateParamType = Shapes::StringShape.new(name: 'UpdateParamType')
     UpdateParams = Shapes::ListShape.new(name: 'UpdateParams')
     UpdateStatus = Shapes::StringShape.new(name: 'UpdateStatus')
+    UpdateTaintsPayload = Shapes::StructureShape.new(name: 'UpdateTaintsPayload')
     UpdateType = Shapes::StringShape.new(name: 'UpdateType')
     VpcConfigRequest = Shapes::StructureShape.new(name: 'VpcConfigRequest')
     VpcConfigResponse = Shapes::StructureShape.new(name: 'VpcConfigResponse')
+    ZeroCapacity = Shapes::IntegerShape.new(name: 'ZeroCapacity')
     configStatus = Shapes::StringShape.new(name: 'configStatus')
     labelKey = Shapes::StringShape.new(name: 'labelKey')
     labelValue = Shapes::StringShape.new(name: 'labelValue')
@@ -178,6 +184,9 @@ module Aws::EKS
     requiredClaimsKey = Shapes::StringShape.new(name: 'requiredClaimsKey')
     requiredClaimsMap = Shapes::MapShape.new(name: 'requiredClaimsMap')
     requiredClaimsValue = Shapes::StringShape.new(name: 'requiredClaimsValue')
+    taintKey = Shapes::StringShape.new(name: 'taintKey')
+    taintValue = Shapes::StringShape.new(name: 'taintValue')
+    taintsList = Shapes::ListShape.new(name: 'taintsList')
 
     Addon.add_member(:addon_name, Shapes::ShapeRef.new(shape: String, location_name: "addonName"))
     Addon.add_member(:cluster_name, Shapes::ShapeRef.new(shape: ClusterName, location_name: "clusterName"))
@@ -215,6 +224,14 @@ module Aws::EKS
 
     Addons.member = Shapes::ShapeRef.new(shape: AddonInfo)
 
+    AssociateEncryptionConfigRequest.add_member(:cluster_name, Shapes::ShapeRef.new(shape: String, required: true, location: "uri", location_name: "name"))
+    AssociateEncryptionConfigRequest.add_member(:encryption_config, Shapes::ShapeRef.new(shape: EncryptionConfigList, required: true, location_name: "encryptionConfig"))
+    AssociateEncryptionConfigRequest.add_member(:client_request_token, Shapes::ShapeRef.new(shape: String, location_name: "clientRequestToken", metadata: {"idempotencyToken"=>true}))
+    AssociateEncryptionConfigRequest.struct_class = Types::AssociateEncryptionConfigRequest
+
+    AssociateEncryptionConfigResponse.add_member(:update, Shapes::ShapeRef.new(shape: Update, location_name: "update"))
+    AssociateEncryptionConfigResponse.struct_class = Types::AssociateEncryptionConfigResponse
+
     AssociateIdentityProviderConfigRequest.add_member(:cluster_name, Shapes::ShapeRef.new(shape: String, required: true, location: "uri", location_name: "name"))
     AssociateIdentityProviderConfigRequest.add_member(:oidc, Shapes::ShapeRef.new(shape: OidcIdentityProviderConfigRequest, required: true, location_name: "oidc"))
     AssociateIdentityProviderConfigRequest.add_member(:tags, Shapes::ShapeRef.new(shape: TagMap, location_name: "tags"))
@@ -315,6 +332,7 @@ module Aws::EKS
     CreateNodegroupRequest.add_member(:remote_access, Shapes::ShapeRef.new(shape: RemoteAccessConfig, location_name: "remoteAccess"))
     CreateNodegroupRequest.add_member(:node_role, Shapes::ShapeRef.new(shape: String, required: true, location_name: "nodeRole"))
     CreateNodegroupRequest.add_member(:labels, Shapes::ShapeRef.new(shape: labelsMap, location_name: "labels"))
+    CreateNodegroupRequest.add_member(:taints, Shapes::ShapeRef.new(shape: taintsList, location_name: "taints"))
     CreateNodegroupRequest.add_member(:tags, Shapes::ShapeRef.new(shape: TagMap, location_name: "tags"))
     CreateNodegroupRequest.add_member(:client_request_token, Shapes::ShapeRef.new(shape: String, location_name: "clientRequestToken", metadata: {"idempotencyToken"=>true}))
     CreateNodegroupRequest.add_member(:launch_template, Shapes::ShapeRef.new(shape: LaunchTemplateSpecification, location_name: "launchTemplate"))
@@ -578,6 +596,7 @@ module Aws::EKS
     Nodegroup.add_member(:ami_type, Shapes::ShapeRef.new(shape: AMITypes, location_name: "amiType"))
     Nodegroup.add_member(:node_role, Shapes::ShapeRef.new(shape: String, location_name: "nodeRole"))
     Nodegroup.add_member(:labels, Shapes::ShapeRef.new(shape: labelsMap, location_name: "labels"))
+    Nodegroup.add_member(:taints, Shapes::ShapeRef.new(shape: taintsList, location_name: "taints"))
     Nodegroup.add_member(:resources, Shapes::ShapeRef.new(shape: NodegroupResources, location_name: "resources"))
     Nodegroup.add_member(:disk_size, Shapes::ShapeRef.new(shape: BoxedInteger, location_name: "diskSize"))
     Nodegroup.add_member(:health, Shapes::ShapeRef.new(shape: NodegroupHealth, location_name: "health"))
@@ -592,9 +611,9 @@ module Aws::EKS
     NodegroupResources.add_member(:remote_access_security_group, Shapes::ShapeRef.new(shape: String, location_name: "remoteAccessSecurityGroup"))
     NodegroupResources.struct_class = Types::NodegroupResources
 
-    NodegroupScalingConfig.add_member(:min_size, Shapes::ShapeRef.new(shape: Capacity, location_name: "minSize"))
+    NodegroupScalingConfig.add_member(:min_size, Shapes::ShapeRef.new(shape: ZeroCapacity, location_name: "minSize"))
     NodegroupScalingConfig.add_member(:max_size, Shapes::ShapeRef.new(shape: Capacity, location_name: "maxSize"))
-    NodegroupScalingConfig.add_member(:desired_size, Shapes::ShapeRef.new(shape: Capacity, location_name: "desiredSize"))
+    NodegroupScalingConfig.add_member(:desired_size, Shapes::ShapeRef.new(shape: ZeroCapacity, location_name: "desiredSize"))
     NodegroupScalingConfig.struct_class = Types::NodegroupScalingConfig
 
     NotFoundException.add_member(:message, Shapes::ShapeRef.new(shape: String, location_name: "message"))
@@ -674,6 +693,11 @@ module Aws::EKS
 
     TagResourceResponse.struct_class = Types::TagResourceResponse
 
+    Taint.add_member(:key, Shapes::ShapeRef.new(shape: taintKey, location_name: "key"))
+    Taint.add_member(:value, Shapes::ShapeRef.new(shape: taintValue, location_name: "value"))
+    Taint.add_member(:effect, Shapes::ShapeRef.new(shape: TaintEffect, location_name: "effect"))
+    Taint.struct_class = Types::Taint
+
     UnsupportedAvailabilityZoneException.add_member(:message, Shapes::ShapeRef.new(shape: String, location_name: "message"))
     UnsupportedAvailabilityZoneException.add_member(:cluster_name, Shapes::ShapeRef.new(shape: String, location_name: "clusterName"))
     UnsupportedAvailabilityZoneException.add_member(:nodegroup_name, Shapes::ShapeRef.new(shape: String, location_name: "nodegroupName"))
@@ -729,6 +753,7 @@ module Aws::EKS
     UpdateNodegroupConfigRequest.add_member(:cluster_name, Shapes::ShapeRef.new(shape: String, required: true, location: "uri", location_name: "name"))
     UpdateNodegroupConfigRequest.add_member(:nodegroup_name, Shapes::ShapeRef.new(shape: String, required: true, location: "uri", location_name: "nodegroupName"))
     UpdateNodegroupConfigRequest.add_member(:labels, Shapes::ShapeRef.new(shape: UpdateLabelsPayload, location_name: "labels"))
+    UpdateNodegroupConfigRequest.add_member(:taints, Shapes::ShapeRef.new(shape: UpdateTaintsPayload, location_name: "taints"))
     UpdateNodegroupConfigRequest.add_member(:scaling_config, Shapes::ShapeRef.new(shape: NodegroupScalingConfig, location_name: "scalingConfig"))
     UpdateNodegroupConfigRequest.add_member(:client_request_token, Shapes::ShapeRef.new(shape: String, location_name: "clientRequestToken", metadata: {"idempotencyToken"=>true}))
     UpdateNodegroupConfigRequest.struct_class = Types::UpdateNodegroupConfigRequest
@@ -754,6 +779,10 @@ module Aws::EKS
 
     UpdateParams.member = Shapes::ShapeRef.new(shape: UpdateParam)
 
+    UpdateTaintsPayload.add_member(:add_or_update_taints, Shapes::ShapeRef.new(shape: taintsList, location_name: "addOrUpdateTaints"))
+    UpdateTaintsPayload.add_member(:remove_taints, Shapes::ShapeRef.new(shape: taintsList, location_name: "removeTaints"))
+    UpdateTaintsPayload.struct_class = Types::UpdateTaintsPayload
+
     VpcConfigRequest.add_member(:subnet_ids, Shapes::ShapeRef.new(shape: StringList, location_name: "subnetIds"))
     VpcConfigRequest.add_member(:security_group_ids, Shapes::ShapeRef.new(shape: StringList, location_name: "securityGroupIds"))
     VpcConfigRequest.add_member(:endpoint_public_access, Shapes::ShapeRef.new(shape: BoxedBoolean, location_name: "endpointPublicAccess"))
@@ -778,6 +807,8 @@ module Aws::EKS
     requiredClaimsMap.key = Shapes::ShapeRef.new(shape: requiredClaimsKey)
     requiredClaimsMap.value = Shapes::ShapeRef.new(shape: requiredClaimsValue)
 
+    taintsList.member = Shapes::ShapeRef.new(shape: Taint)
+
 
     # @api private
     API = Seahorse::Model::Api.new.tap do |api|
@@ -797,6 +828,20 @@ module Aws::EKS
         "uid" => "eks-2017-11-01",
       }
 
+      api.add_operation(:associate_encryption_config, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "AssociateEncryptionConfig"
+        o.http_method = "POST"
+        o.http_request_uri = "/clusters/{name}/encryption-config/associate"
+        o.input = Shapes::ShapeRef.new(shape: AssociateEncryptionConfigRequest)
+        o.output = Shapes::ShapeRef.new(shape: AssociateEncryptionConfigResponse)
+        o.errors << Shapes::ShapeRef.new(shape: InvalidParameterException)
+        o.errors << Shapes::ShapeRef.new(shape: ClientException)
+        o.errors << Shapes::ShapeRef.new(shape: ServerException)
+        o.errors << Shapes::ShapeRef.new(shape: ResourceInUseException)
+        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: InvalidRequestException)
+      end)
+
       api.add_operation(:associate_identity_provider_config, Seahorse::Model::Operation.new.tap do |o|
         o.name = "AssociateIdentityProviderConfig"
         o.http_method = "POST"

data/lib/aws-sdk-eks/errors.rb

@@ -3,7 +3,7 @@
 # WARNING ABOUT GENERATED CODE
 #
 # This file is generated. See the contributing guide for more information:
-# https://github.com/aws/aws-sdk-ruby/blob/master/CONTRIBUTING.md
+# https://github.com/aws/aws-sdk-ruby/blob/version-3/CONTRIBUTING.md
 #
 # WARNING ABOUT GENERATED CODE
 

data/lib/aws-sdk-eks/resource.rb

@@ -3,7 +3,7 @@
 # WARNING ABOUT GENERATED CODE
 #
 # This file is generated. See the contributing guide for more information:
-# https://github.com/aws/aws-sdk-ruby/blob/master/CONTRIBUTING.md
+# https://github.com/aws/aws-sdk-ruby/blob/version-3/CONTRIBUTING.md
 #
 # WARNING ABOUT GENERATED CODE
 

data/lib/aws-sdk-eks/types.rb

@@ -3,7 +3,7 @@
 # WARNING ABOUT GENERATED CODE
 #
 # This file is generated. See the contributing guide for more information:
-# https://github.com/aws/aws-sdk-ruby/blob/master/CONTRIBUTING.md
+# https://github.com/aws/aws-sdk-ruby/blob/version-3/CONTRIBUTING.md
 #
 # WARNING ABOUT GENERATED CODE
 
@@ -50,9 +50,9 @@ module Aws::EKS
     #   @return [String]
     #
     # @!attribute [rw] tags
-    #   The metadata that you apply to the cluster to assist with
+    #   The metadata that you apply to the add-on to assist with
     #   categorization and organization. Each tag consists of a key and an
-    #   optional value, both of which you define. Cluster tags do not
+    #   optional value, both of which you define. Add-on tags do not
     #   propagate to any other resources associated with the cluster.
     #   @return [Hash<String,String>]
     #
@@ -161,6 +161,61 @@ module Aws::EKS
       include Aws::Structure
     end
 
+    # @note When making an API call, you may pass AssociateEncryptionConfigRequest
+    #   data as a hash:
+    #
+    #       {
+    #         cluster_name: "String", # required
+    #         encryption_config: [ # required
+    #           {
+    #             resources: ["String"],
+    #             provider: {
+    #               key_arn: "String",
+    #             },
+    #           },
+    #         ],
+    #         client_request_token: "String",
+    #       }
+    #
+    # @!attribute [rw] cluster_name
+    #   The name of the cluster that you are associating with encryption
+    #   configuration.
+    #   @return [String]
+    #
+    # @!attribute [rw] encryption_config
+    #   The configuration you are using for encryption.
+    #   @return [Array<Types::EncryptionConfig>]
+    #
+    # @!attribute [rw] client_request_token
+    #   The client request token you are using with the encryption
+    #   configuration.
+    #
+    #   **A suitable default value is auto-generated.** You should normally
+    #   not need to pass this option.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/eks-2017-11-01/AssociateEncryptionConfigRequest AWS API Documentation
+    #
+    class AssociateEncryptionConfigRequest < Struct.new(
+      :cluster_name,
+      :encryption_config,
+      :client_request_token)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] update
+    #   An object representing an asynchronous update.
+    #   @return [Types::Update]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/eks-2017-11-01/AssociateEncryptionConfigResponse AWS API Documentation
+    #
+    class AssociateEncryptionConfigResponse < Struct.new(
+      :update)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @note When making an API call, you may pass AssociateIdentityProviderConfigRequest
     #   data as a hash:
     #
@@ -808,7 +863,7 @@ module Aws::EKS
     #         disk_size: 1,
     #         subnets: ["String"], # required
     #         instance_types: ["String"],
-    #         ami_type: "AL2_x86_64", # accepts AL2_x86_64, AL2_x86_64_GPU, AL2_ARM_64
+    #         ami_type: "AL2_x86_64", # accepts AL2_x86_64, AL2_x86_64_GPU, AL2_ARM_64, CUSTOM
     #         remote_access: {
     #           ec2_ssh_key: "String",
     #           source_security_groups: ["String"],
@@ -817,6 +872,13 @@ module Aws::EKS
     #         labels: {
     #           "labelKey" => "labelValue",
     #         },
+    #         taints: [
+    #           {
+    #             key: "taintKey",
+    #             value: "taintValue",
+    #             effect: "NO_SCHEDULE", # accepts NO_SCHEDULE, NO_EXECUTE, PREFER_NO_SCHEDULE
+    #           },
+    #         ],
     #         tags: {
     #           "TagKey" => "TagValue",
     #         },
@@ -858,13 +920,11 @@ module Aws::EKS
     #
     # @!attribute [rw] subnets
     #   The subnets to use for the Auto Scaling group that is created for
-    #   your node group. These subnets must have the tag key
-    #   `kubernetes.io/cluster/CLUSTER_NAME` with a value of `shared`, where
-    #   `CLUSTER_NAME` is replaced with the name of your cluster. If you
-    #   specify `launchTemplate`, then don't specify [ `SubnetId` ][1] in
-    #   your launch template, or the node group deployment will fail. For
-    #   more information about using launch templates with Amazon EKS, see
-    #   [Launch template support][2] in the Amazon EKS User Guide.
+    #   your node group. If you specify `launchTemplate`, then don't
+    #   specify [ `SubnetId` ][1] in your launch template, or the node group
+    #   deployment will fail. For more information about using launch
+    #   templates with Amazon EKS, see [Launch template support][2] in the
+    #   Amazon EKS User Guide.
     #
     #
     #
@@ -947,6 +1007,10 @@ module Aws::EKS
     #   when they are created.
     #   @return [Hash<String,String>]
     #
+    # @!attribute [rw] taints
+    #   The Kubernetes taints to be applied to the nodes in the node group.
+    #   @return [Array<Types::Taint>]
+    #
     # @!attribute [rw] tags
     #   The metadata to apply to the node group to assist with
     #   categorization and organization. Each tag consists of a key and an
@@ -1018,6 +1082,7 @@ module Aws::EKS
       :remote_access,
       :node_role,
       :labels,
+      :taints,
       :tags,
       :client_request_token,
       :launch_template,
@@ -1581,8 +1646,8 @@ module Aws::EKS
     #   @return [Array<String>]
     #
     # @!attribute [rw] provider
-    #   AWS Key Management Service (AWS KMS) customer master key (CMK).
-    #   Either the ARN or the alias can be used.
+    #   AWS Key Management Service (AWS KMS) key. Either the ARN or the
+    #   alias can be used.
     #   @return [Types::Provider]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/eks-2017-11-01/EncryptionConfig AWS API Documentation
@@ -2652,6 +2717,14 @@ module Aws::EKS
     #    </note>
     #   @return [Hash<String,String>]
     #
+    # @!attribute [rw] taints
+    #   The Kubernetes taints to be applied to the nodes in the node group
+    #   when they are created. Effect is one of `NoSchedule`,
+    #   `PreferNoSchedule`, or `NoExecute`. Kubernetes taints can be used
+    #   together with tolerations to control how workloads are scheduled to
+    #   your nodes.
+    #   @return [Array<Types::Taint>]
+    #
     # @!attribute [rw] resources
     #   The resources associated with the node group, such as Auto Scaling
     #   groups and security groups for remote access.
@@ -2700,6 +2773,7 @@ module Aws::EKS
       :ami_type,
       :node_role,
       :labels,
+      :taints,
       :resources,
       :disk_size,
       :health,
@@ -2745,9 +2819,9 @@ module Aws::EKS
     end
 
     # An object representing the scaling configuration details for the Auto
-    # Scaling group that is associated with your node group. If you specify
-    # a value for any property, then you must specify values for all of the
-    # properties.
+    # Scaling group that is associated with your node group. When creating a
+    # node group, you must specify all or none of the properties. When
+    # updating a node group, you can specify any or none of the properties.
     #
     # @note When making an API call, you may pass NodegroupScalingConfig
     #   data as a hash:
@@ -3003,8 +3077,8 @@ module Aws::EKS
       include Aws::Structure
     end
 
-    # Identifies the AWS Key Management Service (AWS KMS) customer master
-    # key (CMK) used to encrypt the secrets.
+    # Identifies the AWS Key Management Service (AWS KMS) key used to
+    # encrypt the secrets.
     #
     # @note When making an API call, you may pass Provider
     #   data as a hash:
@@ -3014,11 +3088,11 @@ module Aws::EKS
     #       }
     #
     # @!attribute [rw] key_arn
-    #   Amazon Resource Name (ARN) or alias of the customer master key
-    #   (CMK). The CMK must be symmetric, created in the same region as the
-    #   cluster, and if the CMK was created in a different account, the user
-    #   must have access to the CMK. For more information, see [Allowing
-    #   Users in Other Accounts to Use a CMK][1] in the *AWS Key Management
+    #   Amazon Resource Name (ARN) or alias of the KMS key. The KMS key must
+    #   be symmetric, created in the same region as the cluster, and if the
+    #   KMS key was created in a different account, the user must have
+    #   access to the KMS key. For more information, see [Allowing Users in
+    #   Other Accounts to Use a KMS key][1] in the *AWS Key Management
     #   Service Developer Guide*.
     #
     #
@@ -3237,6 +3311,39 @@ module Aws::EKS
     #
     class TagResourceResponse < Aws::EmptyStructure; end
 
+    # A property that allows a node to repel a set of pods.
+    #
+    # @note When making an API call, you may pass Taint
+    #   data as a hash:
+    #
+    #       {
+    #         key: "taintKey",
+    #         value: "taintValue",
+    #         effect: "NO_SCHEDULE", # accepts NO_SCHEDULE, NO_EXECUTE, PREFER_NO_SCHEDULE
+    #       }
+    #
+    # @!attribute [rw] key
+    #   The key of the taint.
+    #   @return [String]
+    #
+    # @!attribute [rw] value
+    #   The value of the taint.
+    #   @return [String]
+    #
+    # @!attribute [rw] effect
+    #   The effect of the taint.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/eks-2017-11-01/Taint AWS API Documentation
+    #
+    class Taint < Struct.new(
+      :key,
+      :value,
+      :effect)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # At least one of your specified cluster subnets is in an Availability
     # Zone that does not support Amazon EKS. The exception output specifies
     # the supported Availability Zones for your account, from which you can
@@ -3604,6 +3711,22 @@ module Aws::EKS
     #           },
     #           remove_labels: ["String"],
     #         },
+    #         taints: {
+    #           add_or_update_taints: [
+    #             {
+    #               key: "taintKey",
+    #               value: "taintValue",
+    #               effect: "NO_SCHEDULE", # accepts NO_SCHEDULE, NO_EXECUTE, PREFER_NO_SCHEDULE
+    #             },
+    #           ],
+    #           remove_taints: [
+    #             {
+    #               key: "taintKey",
+    #               value: "taintValue",
+    #               effect: "NO_SCHEDULE", # accepts NO_SCHEDULE, NO_EXECUTE, PREFER_NO_SCHEDULE
+    #             },
+    #           ],
+    #         },
     #         scaling_config: {
     #           min_size: 1,
     #           max_size: 1,
@@ -3626,6 +3749,11 @@ module Aws::EKS
     #   after the update.
     #   @return [Types::UpdateLabelsPayload]
     #
+    # @!attribute [rw] taints
+    #   The Kubernetes taints to be applied to the nodes in the node group
+    #   after the update.
+    #   @return [Types::UpdateTaintsPayload]
+    #
     # @!attribute [rw] scaling_config
     #   The scaling configuration details for the Auto Scaling group after
     #   the update.
@@ -3645,6 +3773,7 @@ module Aws::EKS
       :cluster_name,
       :nodegroup_name,
       :labels,
+      :taints,
       :scaling_config,
       :client_request_token)
       SENSITIVE = []
@@ -3790,6 +3919,45 @@ module Aws::EKS
       include Aws::Structure
     end
 
+    # An object representing the details of an update to a taints payload.
+    #
+    # @note When making an API call, you may pass UpdateTaintsPayload
+    #   data as a hash:
+    #
+    #       {
+    #         add_or_update_taints: [
+    #           {
+    #             key: "taintKey",
+    #             value: "taintValue",
+    #             effect: "NO_SCHEDULE", # accepts NO_SCHEDULE, NO_EXECUTE, PREFER_NO_SCHEDULE
+    #           },
+    #         ],
+    #         remove_taints: [
+    #           {
+    #             key: "taintKey",
+    #             value: "taintValue",
+    #             effect: "NO_SCHEDULE", # accepts NO_SCHEDULE, NO_EXECUTE, PREFER_NO_SCHEDULE
+    #           },
+    #         ],
+    #       }
+    #
+    # @!attribute [rw] add_or_update_taints
+    #   Kubernetes taints to be added or updated.
+    #   @return [Array<Types::Taint>]
+    #
+    # @!attribute [rw] remove_taints
+    #   Kubernetes taints to be removed.
+    #   @return [Array<Types::Taint>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/eks-2017-11-01/UpdateTaintsPayload AWS API Documentation
+    #
+    class UpdateTaintsPayload < Struct.new(
+      :add_or_update_taints,
+      :remove_taints)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # An object representing the VPC configuration to use for an Amazon EKS
     # cluster.
     #