aws-sdk-eks 1.102.0 → 1.103.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ffcc3aabe4fd7549f42c260883566a8df8e5d92b4bc41a196f5fdbc289718ad9
-  data.tar.gz: 80c24e67d828440f4e2b13ad4985a79bad0f7f221004f747a282a3b965d7f186
+  metadata.gz: f99a65fe6185d8f0b891292be9a37b6d5db6affd0fe4265635d7fbec50bd0c80
+  data.tar.gz: 79a8c28195a121a64fa01ed867f87df37f10277971a326da1f4aab583e6617fe
 SHA512:
-  metadata.gz: 2fb0fb8c6f2592b6edea0e2201cf4eeae64eb615d254e51cff7970644283bf9bdb3c6d696917ed50e7c85fd2ca1a24d5b4759721faaf4e854b644f24211b3931
-  data.tar.gz: 1d65848619d8278952797d794eca57625f99656f75c68ff8f0c3da21628d71908047f0b4afe1806a3b327f3cb05e554a8cccccbd90154d79e33074a728c0f765
+  metadata.gz: f5ca7b00fff445193ba80003dc87309590786e7c4efbdda024fd18e8d93dc75b5cc753eae6fd9e9086e6fa765c72870bc7c858d5a1978e77d1d3d82d3362ff2d
+  data.tar.gz: cf22789f4168d4963ae8bbcaab1562bb2badb8b0418b753adcd77da9e7079c719a4792c07157f08f9ffdfa4adc3ba96edc79c5a7216ede0c499a3ca16133d324

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.103.0 (2024-06-03)
+------------------
+
+* Feature - Adds support for EKS add-ons pod identity associations integration
+
 1.102.0 (2024-05-13)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.102.0
+1.103.0

data/lib/aws-sdk-eks/client.rb

@@ -520,7 +520,7 @@ module Aws::EKS
     #   resp.update.status #=> String, one of "InProgress", "Failed", "Cancelled", "Successful"
     #   resp.update.type #=> String, one of "VersionUpdate", "EndpointAccessUpdate", "LoggingUpdate", "ConfigUpdate", "AssociateIdentityProviderConfig", "DisassociateIdentityProviderConfig", "AssociateEncryptionConfig", "AddonUpdate", "VpcConfigUpdate", "AccessConfigUpdate"
     #   resp.update.params #=> Array
-    #   resp.update.params[0].type #=> String, one of "Version", "PlatformVersion", "EndpointPrivateAccess", "EndpointPublicAccess", "ClusterLogging", "DesiredSize", "LabelsToAdd", "LabelsToRemove", "TaintsToAdd", "TaintsToRemove", "MaxSize", "MinSize", "ReleaseVersion", "PublicAccessCidrs", "LaunchTemplateName", "LaunchTemplateVersion", "IdentityProviderConfig", "EncryptionConfig", "AddonVersion", "ServiceAccountRoleArn", "ResolveConflicts", "MaxUnavailable", "MaxUnavailablePercentage", "ConfigurationValues", "SecurityGroups", "Subnets", "AuthenticationMode"
+    #   resp.update.params[0].type #=> String, one of "Version", "PlatformVersion", "EndpointPrivateAccess", "EndpointPublicAccess", "ClusterLogging", "DesiredSize", "LabelsToAdd", "LabelsToRemove", "TaintsToAdd", "TaintsToRemove", "MaxSize", "MinSize", "ReleaseVersion", "PublicAccessCidrs", "LaunchTemplateName", "LaunchTemplateVersion", "IdentityProviderConfig", "EncryptionConfig", "AddonVersion", "ServiceAccountRoleArn", "ResolveConflicts", "MaxUnavailable", "MaxUnavailablePercentage", "ConfigurationValues", "SecurityGroups", "Subnets", "AuthenticationMode", "PodIdentityAssociations"
     #   resp.update.params[0].value #=> String
     #   resp.update.created_at #=> Time
     #   resp.update.errors #=> Array
@@ -604,7 +604,7 @@ module Aws::EKS
     #   resp.update.status #=> String, one of "InProgress", "Failed", "Cancelled", "Successful"
     #   resp.update.type #=> String, one of "VersionUpdate", "EndpointAccessUpdate", "LoggingUpdate", "ConfigUpdate", "AssociateIdentityProviderConfig", "DisassociateIdentityProviderConfig", "AssociateEncryptionConfig", "AddonUpdate", "VpcConfigUpdate", "AccessConfigUpdate"
     #   resp.update.params #=> Array
-    #   resp.update.params[0].type #=> String, one of "Version", "PlatformVersion", "EndpointPrivateAccess", "EndpointPublicAccess", "ClusterLogging", "DesiredSize", "LabelsToAdd", "LabelsToRemove", "TaintsToAdd", "TaintsToRemove", "MaxSize", "MinSize", "ReleaseVersion", "PublicAccessCidrs", "LaunchTemplateName", "LaunchTemplateVersion", "IdentityProviderConfig", "EncryptionConfig", "AddonVersion", "ServiceAccountRoleArn", "ResolveConflicts", "MaxUnavailable", "MaxUnavailablePercentage", "ConfigurationValues", "SecurityGroups", "Subnets", "AuthenticationMode"
+    #   resp.update.params[0].type #=> String, one of "Version", "PlatformVersion", "EndpointPrivateAccess", "EndpointPublicAccess", "ClusterLogging", "DesiredSize", "LabelsToAdd", "LabelsToRemove", "TaintsToAdd", "TaintsToRemove", "MaxSize", "MinSize", "ReleaseVersion", "PublicAccessCidrs", "LaunchTemplateName", "LaunchTemplateVersion", "IdentityProviderConfig", "EncryptionConfig", "AddonVersion", "ServiceAccountRoleArn", "ResolveConflicts", "MaxUnavailable", "MaxUnavailablePercentage", "ConfigurationValues", "SecurityGroups", "Subnets", "AuthenticationMode", "PodIdentityAssociations"
     #   resp.update.params[0].value #=> String
     #   resp.update.created_at #=> Time
     #   resp.update.errors #=> Array
@@ -864,6 +864,17 @@ module Aws::EKS
     #   values that you provide are validated against the schema returned by
     #   `DescribeAddonConfiguration`.
     #
+    # @option params [Array<Types::AddonPodIdentityAssociations>] :pod_identity_associations
+    #   An array of Pod Identity Assocations to be created. Each EKS Pod
+    #   Identity association maps a Kubernetes service account to an IAM Role.
+    #
+    #   For more information, see [Attach an IAM Role to an Amazon EKS add-on
+    #   using Pod Identity][1] in the EKS User Guide.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/eks/latest/userguide/add-ons-iam.html
+    #
     # @return [Types::CreateAddonResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::CreateAddonResponse#addon #addon} => Types::Addon
@@ -881,6 +892,12 @@ module Aws::EKS
     #       "TagKey" => "TagValue",
     #     },
     #     configuration_values: "String",
+    #     pod_identity_associations: [
+    #       {
+    #         service_account: "String", # required
+    #         role_arn: "String", # required
+    #       },
+    #     ],
     #   })
     #
     # @example Response structure
@@ -890,7 +907,7 @@ module Aws::EKS
     #   resp.addon.status #=> String, one of "CREATING", "ACTIVE", "CREATE_FAILED", "UPDATING", "DELETING", "DELETE_FAILED", "DEGRADED", "UPDATE_FAILED"
     #   resp.addon.addon_version #=> String
     #   resp.addon.health.issues #=> Array
-    #   resp.addon.health.issues[0].code #=> String, one of "AccessDenied", "InternalFailure", "ClusterUnreachable", "InsufficientNumberOfReplicas", "ConfigurationConflict", "AdmissionRequestDenied", "UnsupportedAddonModification", "K8sResourceNotFound"
+    #   resp.addon.health.issues[0].code #=> String, one of "AccessDenied", "InternalFailure", "ClusterUnreachable", "InsufficientNumberOfReplicas", "ConfigurationConflict", "AdmissionRequestDenied", "UnsupportedAddonModification", "K8sResourceNotFound", "AddonSubscriptionNeeded", "AddonPermissionFailure"
     #   resp.addon.health.issues[0].message #=> String
     #   resp.addon.health.issues[0].resource_ids #=> Array
     #   resp.addon.health.issues[0].resource_ids[0] #=> String
@@ -905,6 +922,8 @@ module Aws::EKS
     #   resp.addon.marketplace_information.product_id #=> String
     #   resp.addon.marketplace_information.product_url #=> String
     #   resp.addon.configuration_values #=> String
+    #   resp.addon.pod_identity_associations #=> Array
+    #   resp.addon.pod_identity_associations[0] #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/eks-2017-11-01/CreateAddon AWS API Documentation
     #
@@ -957,16 +976,16 @@ module Aws::EKS
     # In most cases, it takes several minutes to create a cluster. After you
     # create an Amazon EKS cluster, you must configure your Kubernetes
     # tooling to communicate with the API server and launch nodes into your
-    # cluster. For more information, see [Managing Cluster
-    # Authentication][4] and [Launching Amazon EKS nodes][5] in the *Amazon
-    # EKS User Guide*.
+    # cluster. For more information, see [Allowing users to access your
+    # cluster][4] and [Launching Amazon EKS nodes][5] in the *Amazon EKS
+    # User Guide*.
     #
     #
     #
     # [1]: https://docs.aws.amazon.com/eks/latest/userguide/cluster-endpoint.html
     # [2]: https://docs.aws.amazon.com/eks/latest/userguide/control-plane-logs.html
     # [3]: http://aws.amazon.com/cloudwatch/pricing/
-    # [4]: https://docs.aws.amazon.com/eks/latest/userguide/managing-auth.html
+    # [4]: https://docs.aws.amazon.com/eks/latest/userguide/cluster-auth.html
     # [5]: https://docs.aws.amazon.com/eks/latest/userguide/launch-workers.html
     #
     # @option params [required, String] :name
@@ -1433,7 +1452,7 @@ module Aws::EKS
     # created with the latest AMI release version for the respective minor
     # Kubernetes version of the cluster, unless you deploy a custom AMI
     # using a launch template. For more information about using launch
-    # templates, see [Launch template support][1].
+    # templates, see [Customizing managed nodes with launch templates][1].
     #
     # An Amazon EKS managed node group is an Amazon EC2 Auto Scaling group
     # and associated Amazon EC2 instances that are managed by Amazon Web
@@ -1466,7 +1485,8 @@ module Aws::EKS
     #   disk size is 50 GiB for Windows. If you specify `launchTemplate`, then
     #   don't specify `diskSize`, or the node group deployment will fail. For
     #   more information about using launch templates with Amazon EKS, see
-    #   [Launch template support][1] in the *Amazon EKS User Guide*.
+    #   [Customizing managed nodes with launch templates][1] in the *Amazon
+    #   EKS User Guide*.
     #
     #
     #
@@ -1477,7 +1497,8 @@ module Aws::EKS
     #   node group. If you specify `launchTemplate`, then don't specify `
     #   SubnetId ` in your launch template, or the node group deployment will
     #   fail. For more information about using launch templates with Amazon
-    #   EKS, see [Launch template support][1] in the *Amazon EKS User Guide*.
+    #   EKS, see [Customizing managed nodes with launch templates][1] in the
+    #   *Amazon EKS User Guide*.
     #
     #
     #
@@ -1495,8 +1516,8 @@ module Aws::EKS
     #   then `t3.medium` is used, by default. If you specify `Spot` for
     #   `capacityType`, then we recommend specifying multiple values for
     #   `instanceTypes`. For more information, see [Managed node group
-    #   capacity types][1] and [Launch template support][2] in the *Amazon EKS
-    #   User Guide*.
+    #   capacity types][1] and [Customizing managed nodes with launch
+    #   templates][2] in the *Amazon EKS User Guide*.
     #
     #
     #
@@ -1509,8 +1530,8 @@ module Aws::EKS
     #   or the node group deployment will fail. If your launch template uses a
     #   Windows custom AMI, then add `eks:kube-proxy-windows` to your Windows
     #   nodes `rolearn` in the `aws-auth` `ConfigMap`. For more information
-    #   about using launch templates with Amazon EKS, see [Launch template
-    #   support][1] in the *Amazon EKS User Guide*.
+    #   about using launch templates with Amazon EKS, see [Customizing managed
+    #   nodes with launch templates][1] in the *Amazon EKS User Guide*.
     #
     #
     #
@@ -1521,8 +1542,8 @@ module Aws::EKS
     #   Linux, the protocol is SSH. For Windows, the protocol is RDP. If you
     #   specify `launchTemplate`, then don't specify `remoteAccess`, or the
     #   node group deployment will fail. For more information about using
-    #   launch templates with Amazon EKS, see [Launch template support][1] in
-    #   the *Amazon EKS User Guide*.
+    #   launch templates with Amazon EKS, see [Customizing managed nodes with
+    #   launch templates][1] in the *Amazon EKS User Guide*.
     #
     #
     #
@@ -1539,8 +1560,9 @@ module Aws::EKS
     #   in the <i> <i>Amazon EKS User Guide</i> </i>. If you specify
     #   `launchTemplate`, then don't specify ` IamInstanceProfile ` in your
     #   launch template, or the node group deployment will fail. For more
-    #   information about using launch templates with Amazon EKS, see [Launch
-    #   template support][2] in the *Amazon EKS User Guide*.
+    #   information about using launch templates with Amazon EKS, see
+    #   [Customizing managed nodes with launch templates][2] in the *Amazon
+    #   EKS User Guide*.
     #
     #
     #
@@ -1573,9 +1595,15 @@ module Aws::EKS
     #
     # @option params [Types::LaunchTemplateSpecification] :launch_template
     #   An object representing a node group's launch template specification.
-    #   If specified, then do not specify `instanceTypes`, `diskSize`, or
-    #   `remoteAccess` and make sure that the launch template meets the
-    #   requirements in `launchTemplateSpecification`.
+    #   When using this object, don't directly specify `instanceTypes`,
+    #   `diskSize`, or `remoteAccess`. Make sure that the launch template
+    #   meets the requirements in `launchTemplateSpecification`. Also refer to
+    #   [Customizing managed nodes with launch templates][1] in the *Amazon
+    #   EKS User Guide*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/eks/latest/userguide/launch-templates.html
     #
     # @option params [Types::NodegroupUpdateConfig] :update_config
     #   The node group update configuration.
@@ -1589,8 +1617,8 @@ module Aws::EKS
     #   accepted specified value. If you specify `launchTemplate`, and your
     #   launch template uses a custom AMI, then don't specify `version`, or
     #   the node group deployment will fail. For more information about using
-    #   launch templates with Amazon EKS, see [Launch template support][1] in
-    #   the *Amazon EKS User Guide*.
+    #   launch templates with Amazon EKS, see [Customizing managed nodes with
+    #   launch templates][1] in the *Amazon EKS User Guide*.
     #
     #
     #
@@ -1609,8 +1637,8 @@ module Aws::EKS
     #   If you specify `launchTemplate`, and your launch template uses a
     #   custom AMI, then don't specify `releaseVersion`, or the node group
     #   deployment will fail. For more information about using launch
-    #   templates with Amazon EKS, see [Launch template support][3] in the
-    #   *Amazon EKS User Guide*.
+    #   templates with Amazon EKS, see [Customizing managed nodes with launch
+    #   templates][3] in the *Amazon EKS User Guide*.
     #
     #
     #
@@ -1828,6 +1856,7 @@ module Aws::EKS
     #   resp.association.tags["TagKey"] #=> String
     #   resp.association.created_at #=> Time
     #   resp.association.modified_at #=> Time
+    #   resp.association.owner_arn #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/eks-2017-11-01/CreatePodIdentityAssociation AWS API Documentation
     #
@@ -1909,7 +1938,7 @@ module Aws::EKS
     #   resp.addon.status #=> String, one of "CREATING", "ACTIVE", "CREATE_FAILED", "UPDATING", "DELETING", "DELETE_FAILED", "DEGRADED", "UPDATE_FAILED"
     #   resp.addon.addon_version #=> String
     #   resp.addon.health.issues #=> Array
-    #   resp.addon.health.issues[0].code #=> String, one of "AccessDenied", "InternalFailure", "ClusterUnreachable", "InsufficientNumberOfReplicas", "ConfigurationConflict", "AdmissionRequestDenied", "UnsupportedAddonModification", "K8sResourceNotFound"
+    #   resp.addon.health.issues[0].code #=> String, one of "AccessDenied", "InternalFailure", "ClusterUnreachable", "InsufficientNumberOfReplicas", "ConfigurationConflict", "AdmissionRequestDenied", "UnsupportedAddonModification", "K8sResourceNotFound", "AddonSubscriptionNeeded", "AddonPermissionFailure"
     #   resp.addon.health.issues[0].message #=> String
     #   resp.addon.health.issues[0].resource_ids #=> Array
     #   resp.addon.health.issues[0].resource_ids[0] #=> String
@@ -1924,6 +1953,8 @@ module Aws::EKS
     #   resp.addon.marketplace_information.product_id #=> String
     #   resp.addon.marketplace_information.product_url #=> String
     #   resp.addon.configuration_values #=> String
+    #   resp.addon.pod_identity_associations #=> Array
+    #   resp.addon.pod_identity_associations[0] #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/eks-2017-11-01/DeleteAddon AWS API Documentation
     #
@@ -2251,6 +2282,7 @@ module Aws::EKS
     #   resp.association.tags["TagKey"] #=> String
     #   resp.association.created_at #=> Time
     #   resp.association.modified_at #=> Time
+    #   resp.association.owner_arn #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/eks-2017-11-01/DeletePodIdentityAssociation AWS API Documentation
     #
@@ -2420,7 +2452,7 @@ module Aws::EKS
     #   resp.addon.status #=> String, one of "CREATING", "ACTIVE", "CREATE_FAILED", "UPDATING", "DELETING", "DELETE_FAILED", "DEGRADED", "UPDATE_FAILED"
     #   resp.addon.addon_version #=> String
     #   resp.addon.health.issues #=> Array
-    #   resp.addon.health.issues[0].code #=> String, one of "AccessDenied", "InternalFailure", "ClusterUnreachable", "InsufficientNumberOfReplicas", "ConfigurationConflict", "AdmissionRequestDenied", "UnsupportedAddonModification", "K8sResourceNotFound"
+    #   resp.addon.health.issues[0].code #=> String, one of "AccessDenied", "InternalFailure", "ClusterUnreachable", "InsufficientNumberOfReplicas", "ConfigurationConflict", "AdmissionRequestDenied", "UnsupportedAddonModification", "K8sResourceNotFound", "AddonSubscriptionNeeded", "AddonPermissionFailure"
     #   resp.addon.health.issues[0].message #=> String
     #   resp.addon.health.issues[0].resource_ids #=> Array
     #   resp.addon.health.issues[0].resource_ids[0] #=> String
@@ -2435,6 +2467,8 @@ module Aws::EKS
     #   resp.addon.marketplace_information.product_id #=> String
     #   resp.addon.marketplace_information.product_url #=> String
     #   resp.addon.configuration_values #=> String
+    #   resp.addon.pod_identity_associations #=> Array
+    #   resp.addon.pod_identity_associations[0] #=> String
     #
     #
     # The following waiters are defined for this operation (see {Client#wait_until} for detailed usage):
@@ -2470,6 +2504,7 @@ module Aws::EKS
     #   * {Types::DescribeAddonConfigurationResponse#addon_name #addon_name} => String
     #   * {Types::DescribeAddonConfigurationResponse#addon_version #addon_version} => String
     #   * {Types::DescribeAddonConfigurationResponse#configuration_schema #configuration_schema} => String
+    #   * {Types::DescribeAddonConfigurationResponse#pod_identity_configuration #pod_identity_configuration} => Array&lt;Types::AddonPodIdentityConfiguration&gt;
     #
     # @example Request syntax with placeholder values
     #
@@ -2483,6 +2518,10 @@ module Aws::EKS
     #   resp.addon_name #=> String
     #   resp.addon_version #=> String
     #   resp.configuration_schema #=> String
+    #   resp.pod_identity_configuration #=> Array
+    #   resp.pod_identity_configuration[0].service_account #=> String
+    #   resp.pod_identity_configuration[0].recommended_managed_policies #=> Array
+    #   resp.pod_identity_configuration[0].recommended_managed_policies[0] #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/eks-2017-11-01/DescribeAddonConfiguration AWS API Documentation
     #
@@ -2578,6 +2617,7 @@ module Aws::EKS
     #   resp.addons[0].addon_versions[0].compatibilities[0].platform_versions[0] #=> String
     #   resp.addons[0].addon_versions[0].compatibilities[0].default_version #=> Boolean
     #   resp.addons[0].addon_versions[0].requires_configuration #=> Boolean
+    #   resp.addons[0].addon_versions[0].requires_iam_permissions #=> Boolean
     #   resp.addons[0].publisher #=> String
     #   resp.addons[0].owner #=> String
     #   resp.addons[0].marketplace_information.product_id #=> String
@@ -3041,6 +3081,7 @@ module Aws::EKS
     #   resp.association.tags["TagKey"] #=> String
     #   resp.association.created_at #=> Time
     #   resp.association.modified_at #=> Time
+    #   resp.association.owner_arn #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/eks-2017-11-01/DescribePodIdentityAssociation AWS API Documentation
     #
@@ -3095,7 +3136,7 @@ module Aws::EKS
     #   resp.update.status #=> String, one of "InProgress", "Failed", "Cancelled", "Successful"
     #   resp.update.type #=> String, one of "VersionUpdate", "EndpointAccessUpdate", "LoggingUpdate", "ConfigUpdate", "AssociateIdentityProviderConfig", "DisassociateIdentityProviderConfig", "AssociateEncryptionConfig", "AddonUpdate", "VpcConfigUpdate", "AccessConfigUpdate"
     #   resp.update.params #=> Array
-    #   resp.update.params[0].type #=> String, one of "Version", "PlatformVersion", "EndpointPrivateAccess", "EndpointPublicAccess", "ClusterLogging", "DesiredSize", "LabelsToAdd", "LabelsToRemove", "TaintsToAdd", "TaintsToRemove", "MaxSize", "MinSize", "ReleaseVersion", "PublicAccessCidrs", "LaunchTemplateName", "LaunchTemplateVersion", "IdentityProviderConfig", "EncryptionConfig", "AddonVersion", "ServiceAccountRoleArn", "ResolveConflicts", "MaxUnavailable", "MaxUnavailablePercentage", "ConfigurationValues", "SecurityGroups", "Subnets", "AuthenticationMode"
+    #   resp.update.params[0].type #=> String, one of "Version", "PlatformVersion", "EndpointPrivateAccess", "EndpointPublicAccess", "ClusterLogging", "DesiredSize", "LabelsToAdd", "LabelsToRemove", "TaintsToAdd", "TaintsToRemove", "MaxSize", "MinSize", "ReleaseVersion", "PublicAccessCidrs", "LaunchTemplateName", "LaunchTemplateVersion", "IdentityProviderConfig", "EncryptionConfig", "AddonVersion", "ServiceAccountRoleArn", "ResolveConflicts", "MaxUnavailable", "MaxUnavailablePercentage", "ConfigurationValues", "SecurityGroups", "Subnets", "AuthenticationMode", "PodIdentityAssociations"
     #   resp.update.params[0].value #=> String
     #   resp.update.created_at #=> Time
     #   resp.update.errors #=> Array
@@ -3184,7 +3225,7 @@ module Aws::EKS
     #   resp.update.status #=> String, one of "InProgress", "Failed", "Cancelled", "Successful"
     #   resp.update.type #=> String, one of "VersionUpdate", "EndpointAccessUpdate", "LoggingUpdate", "ConfigUpdate", "AssociateIdentityProviderConfig", "DisassociateIdentityProviderConfig", "AssociateEncryptionConfig", "AddonUpdate", "VpcConfigUpdate", "AccessConfigUpdate"
     #   resp.update.params #=> Array
-    #   resp.update.params[0].type #=> String, one of "Version", "PlatformVersion", "EndpointPrivateAccess", "EndpointPublicAccess", "ClusterLogging", "DesiredSize", "LabelsToAdd", "LabelsToRemove", "TaintsToAdd", "TaintsToRemove", "MaxSize", "MinSize", "ReleaseVersion", "PublicAccessCidrs", "LaunchTemplateName", "LaunchTemplateVersion", "IdentityProviderConfig", "EncryptionConfig", "AddonVersion", "ServiceAccountRoleArn", "ResolveConflicts", "MaxUnavailable", "MaxUnavailablePercentage", "ConfigurationValues", "SecurityGroups", "Subnets", "AuthenticationMode"
+    #   resp.update.params[0].type #=> String, one of "Version", "PlatformVersion", "EndpointPrivateAccess", "EndpointPublicAccess", "ClusterLogging", "DesiredSize", "LabelsToAdd", "LabelsToRemove", "TaintsToAdd", "TaintsToRemove", "MaxSize", "MinSize", "ReleaseVersion", "PublicAccessCidrs", "LaunchTemplateName", "LaunchTemplateVersion", "IdentityProviderConfig", "EncryptionConfig", "AddonVersion", "ServiceAccountRoleArn", "ResolveConflicts", "MaxUnavailable", "MaxUnavailablePercentage", "ConfigurationValues", "SecurityGroups", "Subnets", "AuthenticationMode", "PodIdentityAssociations"
     #   resp.update.params[0].value #=> String
     #   resp.update.created_at #=> Time
     #   resp.update.errors #=> Array
@@ -3905,6 +3946,7 @@ module Aws::EKS
     #   resp.associations[0].service_account #=> String
     #   resp.associations[0].association_arn #=> String
     #   resp.associations[0].association_id #=> String
+    #   resp.associations[0].owner_arn #=> String
     #   resp.next_token #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/eks-2017-11-01/ListPodIdentityAssociations AWS API Documentation
@@ -4371,6 +4413,19 @@ module Aws::EKS
     #   values that you provide are validated against the schema returned by
     #   `DescribeAddonConfiguration`.
     #
+    # @option params [Array<Types::AddonPodIdentityAssociations>] :pod_identity_associations
+    #   An array of Pod Identity Assocations to be updated. Each EKS Pod
+    #   Identity association maps a Kubernetes service account to an IAM Role.
+    #   If this value is left blank, no change. If an empty array is provided,
+    #   existing Pod Identity Assocations owned by the Addon are deleted.
+    #
+    #   For more information, see [Attach an IAM Role to an Amazon EKS add-on
+    #   using Pod Identity][1] in the EKS User Guide.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/eks/latest/userguide/add-ons-iam.html
+    #
     # @return [Types::UpdateAddonResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::UpdateAddonResponse#update #update} => Types::Update
@@ -4385,6 +4440,12 @@ module Aws::EKS
     #     resolve_conflicts: "OVERWRITE", # accepts OVERWRITE, NONE, PRESERVE
     #     client_request_token: "String",
     #     configuration_values: "String",
+    #     pod_identity_associations: [
+    #       {
+    #         service_account: "String", # required
+    #         role_arn: "String", # required
+    #       },
+    #     ],
     #   })
     #
     # @example Response structure
@@ -4393,7 +4454,7 @@ module Aws::EKS
     #   resp.update.status #=> String, one of "InProgress", "Failed", "Cancelled", "Successful"
     #   resp.update.type #=> String, one of "VersionUpdate", "EndpointAccessUpdate", "LoggingUpdate", "ConfigUpdate", "AssociateIdentityProviderConfig", "DisassociateIdentityProviderConfig", "AssociateEncryptionConfig", "AddonUpdate", "VpcConfigUpdate", "AccessConfigUpdate"
     #   resp.update.params #=> Array
-    #   resp.update.params[0].type #=> String, one of "Version", "PlatformVersion", "EndpointPrivateAccess", "EndpointPublicAccess", "ClusterLogging", "DesiredSize", "LabelsToAdd", "LabelsToRemove", "TaintsToAdd", "TaintsToRemove", "MaxSize", "MinSize", "ReleaseVersion", "PublicAccessCidrs", "LaunchTemplateName", "LaunchTemplateVersion", "IdentityProviderConfig", "EncryptionConfig", "AddonVersion", "ServiceAccountRoleArn", "ResolveConflicts", "MaxUnavailable", "MaxUnavailablePercentage", "ConfigurationValues", "SecurityGroups", "Subnets", "AuthenticationMode"
+    #   resp.update.params[0].type #=> String, one of "Version", "PlatformVersion", "EndpointPrivateAccess", "EndpointPublicAccess", "ClusterLogging", "DesiredSize", "LabelsToAdd", "LabelsToRemove", "TaintsToAdd", "TaintsToRemove", "MaxSize", "MinSize", "ReleaseVersion", "PublicAccessCidrs", "LaunchTemplateName", "LaunchTemplateVersion", "IdentityProviderConfig", "EncryptionConfig", "AddonVersion", "ServiceAccountRoleArn", "ResolveConflicts", "MaxUnavailable", "MaxUnavailablePercentage", "ConfigurationValues", "SecurityGroups", "Subnets", "AuthenticationMode", "PodIdentityAssociations"
     #   resp.update.params[0].value #=> String
     #   resp.update.created_at #=> Time
     #   resp.update.errors #=> Array
@@ -4526,7 +4587,7 @@ module Aws::EKS
     #   resp.update.status #=> String, one of "InProgress", "Failed", "Cancelled", "Successful"
     #   resp.update.type #=> String, one of "VersionUpdate", "EndpointAccessUpdate", "LoggingUpdate", "ConfigUpdate", "AssociateIdentityProviderConfig", "DisassociateIdentityProviderConfig", "AssociateEncryptionConfig", "AddonUpdate", "VpcConfigUpdate", "AccessConfigUpdate"
     #   resp.update.params #=> Array
-    #   resp.update.params[0].type #=> String, one of "Version", "PlatformVersion", "EndpointPrivateAccess", "EndpointPublicAccess", "ClusterLogging", "DesiredSize", "LabelsToAdd", "LabelsToRemove", "TaintsToAdd", "TaintsToRemove", "MaxSize", "MinSize", "ReleaseVersion", "PublicAccessCidrs", "LaunchTemplateName", "LaunchTemplateVersion", "IdentityProviderConfig", "EncryptionConfig", "AddonVersion", "ServiceAccountRoleArn", "ResolveConflicts", "MaxUnavailable", "MaxUnavailablePercentage", "ConfigurationValues", "SecurityGroups", "Subnets", "AuthenticationMode"
+    #   resp.update.params[0].type #=> String, one of "Version", "PlatformVersion", "EndpointPrivateAccess", "EndpointPublicAccess", "ClusterLogging", "DesiredSize", "LabelsToAdd", "LabelsToRemove", "TaintsToAdd", "TaintsToRemove", "MaxSize", "MinSize", "ReleaseVersion", "PublicAccessCidrs", "LaunchTemplateName", "LaunchTemplateVersion", "IdentityProviderConfig", "EncryptionConfig", "AddonVersion", "ServiceAccountRoleArn", "ResolveConflicts", "MaxUnavailable", "MaxUnavailablePercentage", "ConfigurationValues", "SecurityGroups", "Subnets", "AuthenticationMode", "PodIdentityAssociations"
     #   resp.update.params[0].value #=> String
     #   resp.update.created_at #=> Time
     #   resp.update.errors #=> Array
@@ -4590,7 +4651,7 @@ module Aws::EKS
     #   resp.update.status #=> String, one of "InProgress", "Failed", "Cancelled", "Successful"
     #   resp.update.type #=> String, one of "VersionUpdate", "EndpointAccessUpdate", "LoggingUpdate", "ConfigUpdate", "AssociateIdentityProviderConfig", "DisassociateIdentityProviderConfig", "AssociateEncryptionConfig", "AddonUpdate", "VpcConfigUpdate", "AccessConfigUpdate"
     #   resp.update.params #=> Array
-    #   resp.update.params[0].type #=> String, one of "Version", "PlatformVersion", "EndpointPrivateAccess", "EndpointPublicAccess", "ClusterLogging", "DesiredSize", "LabelsToAdd", "LabelsToRemove", "TaintsToAdd", "TaintsToRemove", "MaxSize", "MinSize", "ReleaseVersion", "PublicAccessCidrs", "LaunchTemplateName", "LaunchTemplateVersion", "IdentityProviderConfig", "EncryptionConfig", "AddonVersion", "ServiceAccountRoleArn", "ResolveConflicts", "MaxUnavailable", "MaxUnavailablePercentage", "ConfigurationValues", "SecurityGroups", "Subnets", "AuthenticationMode"
+    #   resp.update.params[0].type #=> String, one of "Version", "PlatformVersion", "EndpointPrivateAccess", "EndpointPublicAccess", "ClusterLogging", "DesiredSize", "LabelsToAdd", "LabelsToRemove", "TaintsToAdd", "TaintsToRemove", "MaxSize", "MinSize", "ReleaseVersion", "PublicAccessCidrs", "LaunchTemplateName", "LaunchTemplateVersion", "IdentityProviderConfig", "EncryptionConfig", "AddonVersion", "ServiceAccountRoleArn", "ResolveConflicts", "MaxUnavailable", "MaxUnavailablePercentage", "ConfigurationValues", "SecurityGroups", "Subnets", "AuthenticationMode", "PodIdentityAssociations"
     #   resp.update.params[0].value #=> String
     #   resp.update.created_at #=> Time
     #   resp.update.errors #=> Array
@@ -4753,7 +4814,7 @@ module Aws::EKS
     #   resp.update.status #=> String, one of "InProgress", "Failed", "Cancelled", "Successful"
     #   resp.update.type #=> String, one of "VersionUpdate", "EndpointAccessUpdate", "LoggingUpdate", "ConfigUpdate", "AssociateIdentityProviderConfig", "DisassociateIdentityProviderConfig", "AssociateEncryptionConfig", "AddonUpdate", "VpcConfigUpdate", "AccessConfigUpdate"
     #   resp.update.params #=> Array
-    #   resp.update.params[0].type #=> String, one of "Version", "PlatformVersion", "EndpointPrivateAccess", "EndpointPublicAccess", "ClusterLogging", "DesiredSize", "LabelsToAdd", "LabelsToRemove", "TaintsToAdd", "TaintsToRemove", "MaxSize", "MinSize", "ReleaseVersion", "PublicAccessCidrs", "LaunchTemplateName", "LaunchTemplateVersion", "IdentityProviderConfig", "EncryptionConfig", "AddonVersion", "ServiceAccountRoleArn", "ResolveConflicts", "MaxUnavailable", "MaxUnavailablePercentage", "ConfigurationValues", "SecurityGroups", "Subnets", "AuthenticationMode"
+    #   resp.update.params[0].type #=> String, one of "Version", "PlatformVersion", "EndpointPrivateAccess", "EndpointPublicAccess", "ClusterLogging", "DesiredSize", "LabelsToAdd", "LabelsToRemove", "TaintsToAdd", "TaintsToRemove", "MaxSize", "MinSize", "ReleaseVersion", "PublicAccessCidrs", "LaunchTemplateName", "LaunchTemplateVersion", "IdentityProviderConfig", "EncryptionConfig", "AddonVersion", "ServiceAccountRoleArn", "ResolveConflicts", "MaxUnavailable", "MaxUnavailablePercentage", "ConfigurationValues", "SecurityGroups", "Subnets", "AuthenticationMode", "PodIdentityAssociations"
     #   resp.update.params[0].value #=> String
     #   resp.update.created_at #=> Time
     #   resp.update.errors #=> Array
@@ -4819,7 +4880,8 @@ module Aws::EKS
     #   specify `launchTemplate`, and your launch template uses a custom AMI,
     #   then don't specify `version`, or the node group update will fail. For
     #   more information about using launch templates with Amazon EKS, see
-    #   [Launch template support][1] in the *Amazon EKS User Guide*.
+    #   [Customizing managed nodes with launch templates][1] in the *Amazon
+    #   EKS User Guide*.
     #
     #
     #
@@ -4838,8 +4900,8 @@ module Aws::EKS
     #   If you specify `launchTemplate`, and your launch template uses a
     #   custom AMI, then don't specify `releaseVersion`, or the node group
     #   update will fail. For more information about using launch templates
-    #   with Amazon EKS, see [Launch template support][3] in the *Amazon EKS
-    #   User Guide*.
+    #   with Amazon EKS, see [Customizing managed nodes with launch
+    #   templates][3] in the *Amazon EKS User Guide*.
     #
     #
     #
@@ -4892,7 +4954,7 @@ module Aws::EKS
     #   resp.update.status #=> String, one of "InProgress", "Failed", "Cancelled", "Successful"
     #   resp.update.type #=> String, one of "VersionUpdate", "EndpointAccessUpdate", "LoggingUpdate", "ConfigUpdate", "AssociateIdentityProviderConfig", "DisassociateIdentityProviderConfig", "AssociateEncryptionConfig", "AddonUpdate", "VpcConfigUpdate", "AccessConfigUpdate"
     #   resp.update.params #=> Array
-    #   resp.update.params[0].type #=> String, one of "Version", "PlatformVersion", "EndpointPrivateAccess", "EndpointPublicAccess", "ClusterLogging", "DesiredSize", "LabelsToAdd", "LabelsToRemove", "TaintsToAdd", "TaintsToRemove", "MaxSize", "MinSize", "ReleaseVersion", "PublicAccessCidrs", "LaunchTemplateName", "LaunchTemplateVersion", "IdentityProviderConfig", "EncryptionConfig", "AddonVersion", "ServiceAccountRoleArn", "ResolveConflicts", "MaxUnavailable", "MaxUnavailablePercentage", "ConfigurationValues", "SecurityGroups", "Subnets", "AuthenticationMode"
+    #   resp.update.params[0].type #=> String, one of "Version", "PlatformVersion", "EndpointPrivateAccess", "EndpointPublicAccess", "ClusterLogging", "DesiredSize", "LabelsToAdd", "LabelsToRemove", "TaintsToAdd", "TaintsToRemove", "MaxSize", "MinSize", "ReleaseVersion", "PublicAccessCidrs", "LaunchTemplateName", "LaunchTemplateVersion", "IdentityProviderConfig", "EncryptionConfig", "AddonVersion", "ServiceAccountRoleArn", "ResolveConflicts", "MaxUnavailable", "MaxUnavailablePercentage", "ConfigurationValues", "SecurityGroups", "Subnets", "AuthenticationMode", "PodIdentityAssociations"
     #   resp.update.params[0].value #=> String
     #   resp.update.created_at #=> Time
     #   resp.update.errors #=> Array
@@ -4957,6 +5019,7 @@ module Aws::EKS
     #   resp.association.tags["TagKey"] #=> String
     #   resp.association.created_at #=> Time
     #   resp.association.modified_at #=> Time
+    #   resp.association.owner_arn #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/eks-2017-11-01/UpdatePodIdentityAssociation AWS API Documentation
     #
@@ -4980,7 +5043,7 @@ module Aws::EKS
         params: params,
         config: config)
       context[:gem_name] = 'aws-sdk-eks'
-      context[:gem_version] = '1.102.0'
+      context[:gem_version] = '1.103.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-eks/client_api.rb

@@ -28,6 +28,10 @@ module Aws::EKS
     AddonIssue = Shapes::StructureShape.new(name: 'AddonIssue')
     AddonIssueCode = Shapes::StringShape.new(name: 'AddonIssueCode')
     AddonIssueList = Shapes::ListShape.new(name: 'AddonIssueList')
+    AddonPodIdentityAssociations = Shapes::StructureShape.new(name: 'AddonPodIdentityAssociations')
+    AddonPodIdentityAssociationsList = Shapes::ListShape.new(name: 'AddonPodIdentityAssociationsList')
+    AddonPodIdentityConfiguration = Shapes::StructureShape.new(name: 'AddonPodIdentityConfiguration')
+    AddonPodIdentityConfigurationList = Shapes::ListShape.new(name: 'AddonPodIdentityConfigurationList')
     AddonStatus = Shapes::StringShape.new(name: 'AddonStatus')
     AddonVersionInfo = Shapes::StructureShape.new(name: 'AddonVersionInfo')
     AddonVersionInfoList = Shapes::ListShape.new(name: 'AddonVersionInfoList')
@@ -346,6 +350,7 @@ module Aws::EKS
     Addon.add_member(:owner, Shapes::ShapeRef.new(shape: String, location_name: "owner"))
     Addon.add_member(:marketplace_information, Shapes::ShapeRef.new(shape: MarketplaceInformation, location_name: "marketplaceInformation"))
     Addon.add_member(:configuration_values, Shapes::ShapeRef.new(shape: String, location_name: "configurationValues"))
+    Addon.add_member(:pod_identity_associations, Shapes::ShapeRef.new(shape: StringList, location_name: "podIdentityAssociations"))
     Addon.struct_class = Types::Addon
 
     AddonHealth.add_member(:issues, Shapes::ShapeRef.new(shape: AddonIssueList, location_name: "issues"))
@@ -366,10 +371,23 @@ module Aws::EKS
 
     AddonIssueList.member = Shapes::ShapeRef.new(shape: AddonIssue)
 
+    AddonPodIdentityAssociations.add_member(:service_account, Shapes::ShapeRef.new(shape: String, required: true, location_name: "serviceAccount"))
+    AddonPodIdentityAssociations.add_member(:role_arn, Shapes::ShapeRef.new(shape: String, required: true, location_name: "roleArn"))
+    AddonPodIdentityAssociations.struct_class = Types::AddonPodIdentityAssociations
+
+    AddonPodIdentityAssociationsList.member = Shapes::ShapeRef.new(shape: AddonPodIdentityAssociations)
+
+    AddonPodIdentityConfiguration.add_member(:service_account, Shapes::ShapeRef.new(shape: String, location_name: "serviceAccount"))
+    AddonPodIdentityConfiguration.add_member(:recommended_managed_policies, Shapes::ShapeRef.new(shape: StringList, location_name: "recommendedManagedPolicies"))
+    AddonPodIdentityConfiguration.struct_class = Types::AddonPodIdentityConfiguration
+
+    AddonPodIdentityConfigurationList.member = Shapes::ShapeRef.new(shape: AddonPodIdentityConfiguration)
+
     AddonVersionInfo.add_member(:addon_version, Shapes::ShapeRef.new(shape: String, location_name: "addonVersion"))
     AddonVersionInfo.add_member(:architecture, Shapes::ShapeRef.new(shape: StringList, location_name: "architecture"))
     AddonVersionInfo.add_member(:compatibilities, Shapes::ShapeRef.new(shape: Compatibilities, location_name: "compatibilities"))
     AddonVersionInfo.add_member(:requires_configuration, Shapes::ShapeRef.new(shape: Boolean, location_name: "requiresConfiguration"))
+    AddonVersionInfo.add_member(:requires_iam_permissions, Shapes::ShapeRef.new(shape: Boolean, location_name: "requiresIamPermissions"))
     AddonVersionInfo.struct_class = Types::AddonVersionInfo
 
     AddonVersionInfoList.member = Shapes::ShapeRef.new(shape: AddonVersionInfo)
@@ -521,6 +539,7 @@ module Aws::EKS
     CreateAddonRequest.add_member(:client_request_token, Shapes::ShapeRef.new(shape: String, location_name: "clientRequestToken", metadata: {"idempotencyToken"=>true}))
     CreateAddonRequest.add_member(:tags, Shapes::ShapeRef.new(shape: TagMap, location_name: "tags"))
     CreateAddonRequest.add_member(:configuration_values, Shapes::ShapeRef.new(shape: String, location_name: "configurationValues"))
+    CreateAddonRequest.add_member(:pod_identity_associations, Shapes::ShapeRef.new(shape: AddonPodIdentityAssociationsList, location_name: "podIdentityAssociations"))
     CreateAddonRequest.struct_class = Types::CreateAddonRequest
 
     CreateAddonResponse.add_member(:addon, Shapes::ShapeRef.new(shape: Addon, location_name: "addon"))
@@ -676,6 +695,7 @@ module Aws::EKS
     DescribeAddonConfigurationResponse.add_member(:addon_name, Shapes::ShapeRef.new(shape: String, location_name: "addonName"))
     DescribeAddonConfigurationResponse.add_member(:addon_version, Shapes::ShapeRef.new(shape: String, location_name: "addonVersion"))
     DescribeAddonConfigurationResponse.add_member(:configuration_schema, Shapes::ShapeRef.new(shape: String, location_name: "configurationSchema"))
+    DescribeAddonConfigurationResponse.add_member(:pod_identity_configuration, Shapes::ShapeRef.new(shape: AddonPodIdentityConfigurationList, location_name: "podIdentityConfiguration"))
     DescribeAddonConfigurationResponse.struct_class = Types::DescribeAddonConfigurationResponse
 
     DescribeAddonRequest.add_member(:cluster_name, Shapes::ShapeRef.new(shape: ClusterName, required: true, location: "uri", location_name: "name"))
@@ -1148,6 +1168,7 @@ module Aws::EKS
     PodIdentityAssociation.add_member(:tags, Shapes::ShapeRef.new(shape: TagMap, location_name: "tags"))
     PodIdentityAssociation.add_member(:created_at, Shapes::ShapeRef.new(shape: Timestamp, location_name: "createdAt"))
     PodIdentityAssociation.add_member(:modified_at, Shapes::ShapeRef.new(shape: Timestamp, location_name: "modifiedAt"))
+    PodIdentityAssociation.add_member(:owner_arn, Shapes::ShapeRef.new(shape: String, location_name: "ownerArn"))
     PodIdentityAssociation.struct_class = Types::PodIdentityAssociation
 
     PodIdentityAssociationSummaries.member = Shapes::ShapeRef.new(shape: PodIdentityAssociationSummary)
@@ -1157,6 +1178,7 @@ module Aws::EKS
     PodIdentityAssociationSummary.add_member(:service_account, Shapes::ShapeRef.new(shape: String, location_name: "serviceAccount"))
     PodIdentityAssociationSummary.add_member(:association_arn, Shapes::ShapeRef.new(shape: String, location_name: "associationArn"))
     PodIdentityAssociationSummary.add_member(:association_id, Shapes::ShapeRef.new(shape: String, location_name: "associationId"))
+    PodIdentityAssociationSummary.add_member(:owner_arn, Shapes::ShapeRef.new(shape: String, location_name: "ownerArn"))
     PodIdentityAssociationSummary.struct_class = Types::PodIdentityAssociationSummary
 
     Provider.add_member(:key_arn, Shapes::ShapeRef.new(shape: String, location_name: "keyArn"))
@@ -1266,6 +1288,7 @@ module Aws::EKS
     UpdateAddonRequest.add_member(:resolve_conflicts, Shapes::ShapeRef.new(shape: ResolveConflicts, location_name: "resolveConflicts"))
     UpdateAddonRequest.add_member(:client_request_token, Shapes::ShapeRef.new(shape: String, location_name: "clientRequestToken", metadata: {"idempotencyToken"=>true}))
     UpdateAddonRequest.add_member(:configuration_values, Shapes::ShapeRef.new(shape: String, location_name: "configurationValues"))
+    UpdateAddonRequest.add_member(:pod_identity_associations, Shapes::ShapeRef.new(shape: AddonPodIdentityAssociationsList, location_name: "podIdentityAssociations"))
     UpdateAddonRequest.struct_class = Types::UpdateAddonRequest
 
     UpdateAddonResponse.add_member(:update, Shapes::ShapeRef.new(shape: Update, location_name: "update"))
@@ -1381,6 +1404,7 @@ module Aws::EKS
         "endpointPrefix" => "eks",
         "jsonVersion" => "1.1",
         "protocol" => "rest-json",
+        "protocols" => ["rest-json"],
         "serviceAbbreviation" => "Amazon EKS",
         "serviceFullName" => "Amazon Elastic Kubernetes Service",
         "serviceId" => "EKS",

data/lib/aws-sdk-eks/types.rb

@@ -251,6 +251,19 @@ module Aws::EKS
     #   The configuration values that you provided.
     #   @return [String]
     #
+    # @!attribute [rw] pod_identity_associations
+    #   An array of Pod Identity Assocations owned by the Addon. Each EKS
+    #   Pod Identity association maps a role to a service account in a
+    #   namespace in the cluster.
+    #
+    #   For more information, see [Attach an IAM Role to an Amazon EKS
+    #   add-on using Pod Identity][1] in the EKS User Guide.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/eks/latest/userguide/add-ons-iam.html
+    #   @return [Array<String>]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/eks-2017-11-01/Addon AWS API Documentation
     #
     class Addon < Struct.new(
@@ -267,7 +280,8 @@ module Aws::EKS
       :publisher,
       :owner,
       :marketplace_information,
-      :configuration_values)
+      :configuration_values,
+      :pod_identity_associations)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -352,6 +366,54 @@ module Aws::EKS
       include Aws::Structure
     end
 
+    # A type of Pod Identity Association owned by an Amazon EKS Add-on.
+    #
+    # Each EKS Pod Identity Association maps a role to a service account in
+    # a namespace in the cluster.
+    #
+    # For more information, see [Attach an IAM Role to an Amazon EKS add-on
+    # using Pod Identity][1] in the EKS User Guide.
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/eks/latest/userguide/add-ons-iam.html
+    #
+    # @!attribute [rw] service_account
+    #   The name of a Kubernetes Service Account.
+    #   @return [String]
+    #
+    # @!attribute [rw] role_arn
+    #   The ARN of an IAM Role.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/eks-2017-11-01/AddonPodIdentityAssociations AWS API Documentation
+    #
+    class AddonPodIdentityAssociations < Struct.new(
+      :service_account,
+      :role_arn)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Information about how to configure IAM for an Addon.
+    #
+    # @!attribute [rw] service_account
+    #   The Kubernetes Service Account name used by the addon.
+    #   @return [String]
+    #
+    # @!attribute [rw] recommended_managed_policies
+    #   A suggested IAM Policy for the addon.
+    #   @return [Array<String>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/eks-2017-11-01/AddonPodIdentityConfiguration AWS API Documentation
+    #
+    class AddonPodIdentityConfiguration < Struct.new(
+      :service_account,
+      :recommended_managed_policies)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Information about an add-on version.
     #
     # @!attribute [rw] addon_version
@@ -370,13 +432,19 @@ module Aws::EKS
     #   Whether the add-on requires configuration.
     #   @return [Boolean]
     #
+    # @!attribute [rw] requires_iam_permissions
+    #   Indicates if the Addon requires IAM Permissions to operate, such as
+    #   networking permissions.
+    #   @return [Boolean]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/eks-2017-11-01/AddonVersionInfo AWS API Documentation
     #
     class AddonVersionInfo < Struct.new(
       :addon_version,
       :architecture,
       :compatibilities,
-      :requires_configuration)
+      :requires_configuration,
+      :requires_iam_permissions)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -780,9 +848,7 @@ module Aws::EKS
     #   @return [String]
     #
     # @!attribute [rw] health
-    #   An object representing the health of your local Amazon EKS cluster
-    #   on an Amazon Web Services Outpost. This object isn't available for
-    #   clusters on the Amazon Web Services cloud.
+    #   An object representing the health of your Amazon EKS cluster.
     #   @return [Types::ClusterHealth]
     #
     # @!attribute [rw] outpost_config
@@ -823,13 +889,10 @@ module Aws::EKS
       include Aws::Structure
     end
 
-    # An object representing the health of your local Amazon EKS cluster on
-    # an Amazon Web Services Outpost. You can't use this API with an Amazon
-    # EKS cluster on the Amazon Web Services cloud.
+    # An object representing the health of your Amazon EKS cluster.
     #
     # @!attribute [rw] issues
-    #   An object representing the health issues of your local Amazon EKS
-    #   cluster on an Amazon Web Services Outpost.
+    #   An object representing the health issues of your Amazon EKS cluster.
     #   @return [Array<Types::ClusterIssue>]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/eks-2017-11-01/ClusterHealth AWS API Documentation
@@ -840,9 +903,7 @@ module Aws::EKS
       include Aws::Structure
     end
 
-    # An issue with your local Amazon EKS cluster on an Amazon Web Services
-    # Outpost. You can't use this API with an Amazon EKS cluster on the
-    # Amazon Web Services cloud.
+    # An issue with your Amazon EKS cluster.
     #
     # @!attribute [rw] code
     #   The error code of the issue.
@@ -1234,6 +1295,19 @@ module Aws::EKS
     #   `DescribeAddonConfiguration`.
     #   @return [String]
     #
+    # @!attribute [rw] pod_identity_associations
+    #   An array of Pod Identity Assocations to be created. Each EKS Pod
+    #   Identity association maps a Kubernetes service account to an IAM
+    #   Role.
+    #
+    #   For more information, see [Attach an IAM Role to an Amazon EKS
+    #   add-on using Pod Identity][1] in the EKS User Guide.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/eks/latest/userguide/add-ons-iam.html
+    #   @return [Array<Types::AddonPodIdentityAssociations>]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/eks-2017-11-01/CreateAddonRequest AWS API Documentation
     #
     class CreateAddonRequest < Struct.new(
@@ -1244,7 +1318,8 @@ module Aws::EKS
       :resolve_conflicts,
       :client_request_token,
       :tags,
-      :configuration_values)
+      :configuration_values,
+      :pod_identity_associations)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -1567,8 +1642,8 @@ module Aws::EKS
     #   default disk size is 50 GiB for Windows. If you specify
     #   `launchTemplate`, then don't specify `diskSize`, or the node group
     #   deployment will fail. For more information about using launch
-    #   templates with Amazon EKS, see [Launch template support][1] in the
-    #   *Amazon EKS User Guide*.
+    #   templates with Amazon EKS, see [Customizing managed nodes with
+    #   launch templates][1] in the *Amazon EKS User Guide*.
     #
     #
     #
@@ -1580,8 +1655,8 @@ module Aws::EKS
     #   your node group. If you specify `launchTemplate`, then don't
     #   specify ` SubnetId ` in your launch template, or the node group
     #   deployment will fail. For more information about using launch
-    #   templates with Amazon EKS, see [Launch template support][1] in the
-    #   *Amazon EKS User Guide*.
+    #   templates with Amazon EKS, see [Customizing managed nodes with
+    #   launch templates][1] in the *Amazon EKS User Guide*.
     #
     #
     #
@@ -1600,8 +1675,8 @@ module Aws::EKS
     #   `instanceTypes`, then `t3.medium` is used, by default. If you
     #   specify `Spot` for `capacityType`, then we recommend specifying
     #   multiple values for `instanceTypes`. For more information, see
-    #   [Managed node group capacity types][1] and [Launch template
-    #   support][2] in the *Amazon EKS User Guide*.
+    #   [Managed node group capacity types][1] and [Customizing managed
+    #   nodes with launch templates][2] in the *Amazon EKS User Guide*.
     #
     #
     #
@@ -1616,8 +1691,8 @@ module Aws::EKS
     #   template uses a Windows custom AMI, then add
     #   `eks:kube-proxy-windows` to your Windows nodes `rolearn` in the
     #   `aws-auth` `ConfigMap`. For more information about using launch
-    #   templates with Amazon EKS, see [Launch template support][1] in the
-    #   *Amazon EKS User Guide*.
+    #   templates with Amazon EKS, see [Customizing managed nodes with
+    #   launch templates][1] in the *Amazon EKS User Guide*.
     #
     #
     #
@@ -1629,8 +1704,8 @@ module Aws::EKS
     #   Linux, the protocol is SSH. For Windows, the protocol is RDP. If you
     #   specify `launchTemplate`, then don't specify `remoteAccess`, or the
     #   node group deployment will fail. For more information about using
-    #   launch templates with Amazon EKS, see [Launch template support][1]
-    #   in the *Amazon EKS User Guide*.
+    #   launch templates with Amazon EKS, see [Customizing managed nodes
+    #   with launch templates][1] in the *Amazon EKS User Guide*.
     #
     #
     #
@@ -1649,7 +1724,8 @@ module Aws::EKS
     #   specify `launchTemplate`, then don't specify ` IamInstanceProfile `
     #   in your launch template, or the node group deployment will fail. For
     #   more information about using launch templates with Amazon EKS, see
-    #   [Launch template support][2] in the *Amazon EKS User Guide*.
+    #   [Customizing managed nodes with launch templates][2] in the *Amazon
+    #   EKS User Guide*.
     #
     #
     #
@@ -1688,9 +1764,15 @@ module Aws::EKS
     #
     # @!attribute [rw] launch_template
     #   An object representing a node group's launch template
-    #   specification. If specified, then do not specify `instanceTypes`,
-    #   `diskSize`, or `remoteAccess` and make sure that the launch template
-    #   meets the requirements in `launchTemplateSpecification`.
+    #   specification. When using this object, don't directly specify
+    #   `instanceTypes`, `diskSize`, or `remoteAccess`. Make sure that the
+    #   launch template meets the requirements in
+    #   `launchTemplateSpecification`. Also refer to [Customizing managed
+    #   nodes with launch templates][1] in the *Amazon EKS User Guide*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/eks/latest/userguide/launch-templates.html
     #   @return [Types::LaunchTemplateSpecification]
     #
     # @!attribute [rw] update_config
@@ -1707,8 +1789,8 @@ module Aws::EKS
     #   accepted specified value. If you specify `launchTemplate`, and your
     #   launch template uses a custom AMI, then don't specify `version`, or
     #   the node group deployment will fail. For more information about
-    #   using launch templates with Amazon EKS, see [Launch template
-    #   support][1] in the *Amazon EKS User Guide*.
+    #   using launch templates with Amazon EKS, see [Customizing managed
+    #   nodes with launch templates][1] in the *Amazon EKS User Guide*.
     #
     #
     #
@@ -1728,8 +1810,8 @@ module Aws::EKS
     #   If you specify `launchTemplate`, and your launch template uses a
     #   custom AMI, then don't specify `releaseVersion`, or the node group
     #   deployment will fail. For more information about using launch
-    #   templates with Amazon EKS, see [Launch template support][3] in the
-    #   *Amazon EKS User Guide*.
+    #   templates with Amazon EKS, see [Customizing managed nodes with
+    #   launch templates][3] in the *Amazon EKS User Guide*.
     #
     #
     #
@@ -2199,12 +2281,19 @@ module Aws::EKS
     #   provide when an add-on is created or updated.
     #   @return [String]
     #
+    # @!attribute [rw] pod_identity_configuration
+    #   The Kubernetes service account name used by the addon, and any
+    #   suggested IAM policies. Use this information to create an IAM Role
+    #   for the Addon.
+    #   @return [Array<Types::AddonPodIdentityConfiguration>]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/eks-2017-11-01/DescribeAddonConfigurationResponse AWS API Documentation
     #
     class DescribeAddonConfigurationResponse < Struct.new(
       :addon_name,
       :addon_version,
-      :configuration_schema)
+      :configuration_schema,
+      :pod_identity_configuration)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -3453,8 +3542,8 @@ module Aws::EKS
     # group deployment or update will fail. For more information about
     # launch templates, see [ `CreateLaunchTemplate` ][6] in the Amazon EC2
     # API Reference. For more information about using launch templates with
-    # Amazon EKS, see [Launch template support][7] in the *Amazon EKS User
-    # Guide*.
+    # Amazon EKS, see [Customizing managed nodes with launch templates][7]
+    # in the *Amazon EKS User Guide*.
     #
     # You must specify either the launch template ID or the launch template
     # name in the request, but not both.
@@ -5066,6 +5155,11 @@ module Aws::EKS
     #   The most recent timestamp that the association was modified at
     #   @return [Time]
     #
+    # @!attribute [rw] owner_arn
+    #   If defined, the Pod Identity Association is owned by an Amazon EKS
+    #   Addon.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/eks-2017-11-01/PodIdentityAssociation AWS API Documentation
     #
     class PodIdentityAssociation < Struct.new(
@@ -5077,7 +5171,8 @@ module Aws::EKS
       :association_id,
       :tags,
       :created_at,
-      :modified_at)
+      :modified_at,
+      :owner_arn)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -5119,6 +5214,11 @@ module Aws::EKS
     #   The ID of the association.
     #   @return [String]
     #
+    # @!attribute [rw] owner_arn
+    #   If defined, the Pod Identity Association is owned by an Amazon EKS
+    #   Addon.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/eks-2017-11-01/PodIdentityAssociationSummary AWS API Documentation
     #
     class PodIdentityAssociationSummary < Struct.new(
@@ -5126,7 +5226,8 @@ module Aws::EKS
       :namespace,
       :service_account,
       :association_arn,
-      :association_id)
+      :association_id,
+      :owner_arn)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -5726,6 +5827,21 @@ module Aws::EKS
     #   `DescribeAddonConfiguration`.
     #   @return [String]
     #
+    # @!attribute [rw] pod_identity_associations
+    #   An array of Pod Identity Assocations to be updated. Each EKS Pod
+    #   Identity association maps a Kubernetes service account to an IAM
+    #   Role. If this value is left blank, no change. If an empty array is
+    #   provided, existing Pod Identity Assocations owned by the Addon are
+    #   deleted.
+    #
+    #   For more information, see [Attach an IAM Role to an Amazon EKS
+    #   add-on using Pod Identity][1] in the EKS User Guide.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/eks/latest/userguide/add-ons-iam.html
+    #   @return [Array<Types::AddonPodIdentityAssociations>]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/eks-2017-11-01/UpdateAddonRequest AWS API Documentation
     #
     class UpdateAddonRequest < Struct.new(
@@ -5735,7 +5851,8 @@ module Aws::EKS
       :service_account_role_arn,
       :resolve_conflicts,
       :client_request_token,
-      :configuration_values)
+      :configuration_values,
+      :pod_identity_associations)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -5995,8 +6112,8 @@ module Aws::EKS
     #   version. If you specify `launchTemplate`, and your launch template
     #   uses a custom AMI, then don't specify `version`, or the node group
     #   update will fail. For more information about using launch templates
-    #   with Amazon EKS, see [Launch template support][1] in the *Amazon EKS
-    #   User Guide*.
+    #   with Amazon EKS, see [Customizing managed nodes with launch
+    #   templates][1] in the *Amazon EKS User Guide*.
     #
     #
     #
@@ -6016,8 +6133,8 @@ module Aws::EKS
     #   If you specify `launchTemplate`, and your launch template uses a
     #   custom AMI, then don't specify `releaseVersion`, or the node group
     #   update will fail. For more information about using launch templates
-    #   with Amazon EKS, see [Launch template support][3] in the *Amazon EKS
-    #   User Guide*.
+    #   with Amazon EKS, see [Customizing managed nodes with launch
+    #   templates][3] in the *Amazon EKS User Guide*.
     #
     #
     #

data/lib/aws-sdk-eks.rb

@@ -53,6 +53,6 @@ require_relative 'aws-sdk-eks/customizations'
 # @!group service
 module Aws::EKS
 
-  GEM_VERSION = '1.102.0'
+  GEM_VERSION = '1.103.0'
 
 end

data/sig/client.rbs

@@ -161,7 +161,13 @@ module Aws
                           ?resolve_conflicts: ("OVERWRITE" | "NONE" | "PRESERVE"),
                           ?client_request_token: ::String,
                           ?tags: Hash[::String, ::String],
-                          ?configuration_values: ::String
+                          ?configuration_values: ::String,
+                          ?pod_identity_associations: Array[
+                            {
+                              service_account: ::String,
+                              role_arn: ::String
+                            },
+                          ]
                         ) -> _CreateAddonResponseSuccess
                       | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _CreateAddonResponseSuccess
 
@@ -431,6 +437,7 @@ module Aws
         def addon_name: () -> ::String
         def addon_version: () -> ::String
         def configuration_schema: () -> ::String
+        def pod_identity_configuration: () -> ::Array[Types::AddonPodIdentityConfiguration]
       end
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/EKS/Client.html#describe_addon_configuration-instance_method
       def describe_addon_configuration: (
@@ -813,7 +820,13 @@ module Aws
                           ?service_account_role_arn: ::String,
                           ?resolve_conflicts: ("OVERWRITE" | "NONE" | "PRESERVE"),
                           ?client_request_token: ::String,
-                          ?configuration_values: ::String
+                          ?configuration_values: ::String,
+                          ?pod_identity_associations: Array[
+                            {
+                              service_account: ::String,
+                              role_arn: ::String
+                            },
+                          ]
                         ) -> _UpdateAddonResponseSuccess
                       | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _UpdateAddonResponseSuccess
 

data/sig/types.rbs

@@ -59,6 +59,7 @@ module Aws::EKS
       attr_accessor owner: ::String
       attr_accessor marketplace_information: Types::MarketplaceInformation
       attr_accessor configuration_values: ::String
+      attr_accessor pod_identity_associations: ::Array[::String]
       SENSITIVE: []
     end
 
@@ -78,17 +79,30 @@ module Aws::EKS
     end
 
     class AddonIssue
-      attr_accessor code: ("AccessDenied" | "InternalFailure" | "ClusterUnreachable" | "InsufficientNumberOfReplicas" | "ConfigurationConflict" | "AdmissionRequestDenied" | "UnsupportedAddonModification" | "K8sResourceNotFound")
+      attr_accessor code: ("AccessDenied" | "InternalFailure" | "ClusterUnreachable" | "InsufficientNumberOfReplicas" | "ConfigurationConflict" | "AdmissionRequestDenied" | "UnsupportedAddonModification" | "K8sResourceNotFound" | "AddonSubscriptionNeeded" | "AddonPermissionFailure")
       attr_accessor message: ::String
       attr_accessor resource_ids: ::Array[::String]
       SENSITIVE: []
     end
 
+    class AddonPodIdentityAssociations
+      attr_accessor service_account: ::String
+      attr_accessor role_arn: ::String
+      SENSITIVE: []
+    end
+
+    class AddonPodIdentityConfiguration
+      attr_accessor service_account: ::String
+      attr_accessor recommended_managed_policies: ::Array[::String]
+      SENSITIVE: []
+    end
+
     class AddonVersionInfo
       attr_accessor addon_version: ::String
       attr_accessor architecture: ::Array[::String]
       attr_accessor compatibilities: ::Array[Types::Compatibility]
       attr_accessor requires_configuration: bool
+      attr_accessor requires_iam_permissions: bool
       SENSITIVE: []
     end
 
@@ -272,6 +286,7 @@ module Aws::EKS
       attr_accessor client_request_token: ::String
       attr_accessor tags: ::Hash[::String, ::String]
       attr_accessor configuration_values: ::String
+      attr_accessor pod_identity_associations: ::Array[Types::AddonPodIdentityAssociations]
       SENSITIVE: []
     end
 
@@ -488,6 +503,7 @@ module Aws::EKS
       attr_accessor addon_name: ::String
       attr_accessor addon_version: ::String
       attr_accessor configuration_schema: ::String
+      attr_accessor pod_identity_configuration: ::Array[Types::AddonPodIdentityConfiguration]
       SENSITIVE: []
     end
 
@@ -1102,6 +1118,7 @@ module Aws::EKS
       attr_accessor tags: ::Hash[::String, ::String]
       attr_accessor created_at: ::Time
       attr_accessor modified_at: ::Time
+      attr_accessor owner_arn: ::String
       SENSITIVE: []
     end
 
@@ -1111,6 +1128,7 @@ module Aws::EKS
       attr_accessor service_account: ::String
       attr_accessor association_arn: ::String
       attr_accessor association_id: ::String
+      attr_accessor owner_arn: ::String
       SENSITIVE: []
     end
 
@@ -1253,6 +1271,7 @@ module Aws::EKS
       attr_accessor resolve_conflicts: ("OVERWRITE" | "NONE" | "PRESERVE")
       attr_accessor client_request_token: ::String
       attr_accessor configuration_values: ::String
+      attr_accessor pod_identity_associations: ::Array[Types::AddonPodIdentityAssociations]
       SENSITIVE: []
     end
 
@@ -1338,7 +1357,7 @@ module Aws::EKS
     end
 
     class UpdateParam
-      attr_accessor type: ("Version" | "PlatformVersion" | "EndpointPrivateAccess" | "EndpointPublicAccess" | "ClusterLogging" | "DesiredSize" | "LabelsToAdd" | "LabelsToRemove" | "TaintsToAdd" | "TaintsToRemove" | "MaxSize" | "MinSize" | "ReleaseVersion" | "PublicAccessCidrs" | "LaunchTemplateName" | "LaunchTemplateVersion" | "IdentityProviderConfig" | "EncryptionConfig" | "AddonVersion" | "ServiceAccountRoleArn" | "ResolveConflicts" | "MaxUnavailable" | "MaxUnavailablePercentage" | "ConfigurationValues" | "SecurityGroups" | "Subnets" | "AuthenticationMode")
+      attr_accessor type: ("Version" | "PlatformVersion" | "EndpointPrivateAccess" | "EndpointPublicAccess" | "ClusterLogging" | "DesiredSize" | "LabelsToAdd" | "LabelsToRemove" | "TaintsToAdd" | "TaintsToRemove" | "MaxSize" | "MinSize" | "ReleaseVersion" | "PublicAccessCidrs" | "LaunchTemplateName" | "LaunchTemplateVersion" | "IdentityProviderConfig" | "EncryptionConfig" | "AddonVersion" | "ServiceAccountRoleArn" | "ResolveConflicts" | "MaxUnavailable" | "MaxUnavailablePercentage" | "ConfigurationValues" | "SecurityGroups" | "Subnets" | "AuthenticationMode" | "PodIdentityAssociations")
       attr_accessor value: ::String
       SENSITIVE: []
     end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-eks
 version: !ruby/object:Gem::Version
-  version: 1.102.0
+  version: 1.103.0
 platform: ruby
 authors:
 - Amazon Web Services
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2024-05-13 00:00:00.000000000 Z
+date: 2024-06-03 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-core