aws-sdk-emrcontainers 1.32.0 → 1.33.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 565a15ea0f652d26cc9e3093b1c1772f159ee741033aec6114cd9c4a83b87332
-  data.tar.gz: 187d8d5330a5d76215ebc053297b32bc628bc5f597535aa2e76e2f608c4dcb2c
+  metadata.gz: 38a25b77fe75ad14506eba32f857df5b8a3f0991b0671c8c69516d8788c38445
+  data.tar.gz: e9c1d0a20872c9fcfe24f706cd3238e8185652761a8c5e8a012b0f4fbebb8874
 SHA512:
-  metadata.gz: 51b2ed58bd334b1b64824442dfc86085eecb9003e74f8c816a76d94eb5900d5aab06acdc0c56d52fbe66ef71e25cd1e892ef5955fe6698d755250433db756a26
-  data.tar.gz: b77e19d80bd3daa157d9e49314e2fde1d93898289fb1d8f8a99fbd9874862aec56a67a2db346913ff2123bf7d9f803db18a9451e08ee68d9cb030e0b0c26c442
+  metadata.gz: 79bed2da7ed497e1e947d2ef9eaaa4979d93668bc03729848d38b7e9b34c7b4e17f44f84fcf91b0cb9d44065228b4023bf8537fb8b91359be248f85a178f695d
+  data.tar.gz: 40b94b0cb5e147f14be68037fad82a99ff9223f3c7edea9ec89c980eb3de20b7d6fe1f659dfdaae433b8bee6daedfaa241d928a0722f5471cf0e8b99a072b03f

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.33.0 (2024-04-24)
+------------------
+
+* Feature - EMRonEKS Service support for SecurityConfiguration enforcement for Spark Jobs.
+
 1.32.0 (2024-04-04)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.32.0
+1.33.0

data/lib/aws-sdk-emrcontainers/client.rb

@@ -629,6 +629,80 @@ module Aws::EMRContainers
       req.send_request(options)
     end
 
+    # Creates a security configuration. Security configurations in Amazon
+    # EMR on EKS are templates for different security setups. You can use
+    # security configurations to configure the Lake Formation integration
+    # setup. You can also create a security configuration to re-use a
+    # security setup each time you create a virtual cluster.
+    #
+    # @option params [required, String] :client_token
+    #   The client idempotency token to use when creating the security
+    #   configuration.
+    #
+    #   **A suitable default value is auto-generated.** You should normally
+    #   not need to pass this option.**
+    #
+    # @option params [required, String] :name
+    #   The name of the security configuration.
+    #
+    # @option params [required, Types::SecurityConfigurationData] :security_configuration_data
+    #   Security configuration input for the request.
+    #
+    # @option params [Hash<String,String>] :tags
+    #   The tags to add to the security configuration.
+    #
+    # @return [Types::CreateSecurityConfigurationResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::CreateSecurityConfigurationResponse#id #id} => String
+    #   * {Types::CreateSecurityConfigurationResponse#name #name} => String
+    #   * {Types::CreateSecurityConfigurationResponse#arn #arn} => String
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.create_security_configuration({
+    #     client_token: "ClientToken", # required
+    #     name: "ResourceNameString", # required
+    #     security_configuration_data: { # required
+    #       authorization_configuration: {
+    #         lake_formation_configuration: {
+    #           authorized_session_tag_value: "SessionTagValue",
+    #           secure_namespace_info: {
+    #             cluster_id: "ClusterId",
+    #             namespace: "KubernetesNamespace",
+    #           },
+    #           query_engine_role_arn: "IAMRoleArn",
+    #         },
+    #         encryption_configuration: {
+    #           in_transit_encryption_configuration: {
+    #             tls_certificate_configuration: {
+    #               certificate_provider_type: "PEM", # accepts PEM
+    #               public_certificate_secret_arn: "SecretsManagerArn",
+    #               private_certificate_secret_arn: "SecretsManagerArn",
+    #             },
+    #           },
+    #         },
+    #       },
+    #     },
+    #     tags: {
+    #       "String128" => "StringEmpty256",
+    #     },
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.id #=> String
+    #   resp.name #=> String
+    #   resp.arn #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/emr-containers-2020-10-01/CreateSecurityConfiguration AWS API Documentation
+    #
+    # @overload create_security_configuration(params = {})
+    # @param [Hash] params ({})
+    def create_security_configuration(params = {}, options = {})
+      req = build_request(:create_security_configuration, params)
+      req.send_request(options)
+    end
+
     # Creates a virtual cluster. Virtual cluster is a managed entity on
     # Amazon EMR on EKS. You can create, describe, list and delete virtual
     # clusters. They do not consume any additional resource in your system.
@@ -651,6 +725,9 @@ module Aws::EMRContainers
     # @option params [Hash<String,String>] :tags
     #   The tags assigned to the virtual cluster.
     #
+    # @option params [String] :security_configuration_id
+    #   The ID of the security configuration.
+    #
     # @return [Types::CreateVirtualClusterResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::CreateVirtualClusterResponse#id #id} => String
@@ -674,6 +751,7 @@ module Aws::EMRContainers
     #     tags: {
     #       "String128" => "StringEmpty256",
     #     },
+    #     security_configuration_id: "ResourceIdString",
     #   })
     #
     # @example Response structure
@@ -985,6 +1063,52 @@ module Aws::EMRContainers
       req.send_request(options)
     end
 
+    # Displays detailed information about a specified security
+    # configuration. Security configurations in Amazon EMR on EKS are
+    # templates for different security setups. You can use security
+    # configurations to configure the Lake Formation integration setup. You
+    # can also create a security configuration to re-use a security setup
+    # each time you create a virtual cluster.
+    #
+    # @option params [required, String] :id
+    #   The ID of the security configuration.
+    #
+    # @return [Types::DescribeSecurityConfigurationResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::DescribeSecurityConfigurationResponse#security_configuration #security_configuration} => Types::SecurityConfiguration
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.describe_security_configuration({
+    #     id: "ResourceIdString", # required
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.security_configuration.id #=> String
+    #   resp.security_configuration.name #=> String
+    #   resp.security_configuration.arn #=> String
+    #   resp.security_configuration.created_at #=> Time
+    #   resp.security_configuration.created_by #=> String
+    #   resp.security_configuration.security_configuration_data.authorization_configuration.lake_formation_configuration.authorized_session_tag_value #=> String
+    #   resp.security_configuration.security_configuration_data.authorization_configuration.lake_formation_configuration.secure_namespace_info.cluster_id #=> String
+    #   resp.security_configuration.security_configuration_data.authorization_configuration.lake_formation_configuration.secure_namespace_info.namespace #=> String
+    #   resp.security_configuration.security_configuration_data.authorization_configuration.lake_formation_configuration.query_engine_role_arn #=> String
+    #   resp.security_configuration.security_configuration_data.authorization_configuration.encryption_configuration.in_transit_encryption_configuration.tls_certificate_configuration.certificate_provider_type #=> String, one of "PEM"
+    #   resp.security_configuration.security_configuration_data.authorization_configuration.encryption_configuration.in_transit_encryption_configuration.tls_certificate_configuration.public_certificate_secret_arn #=> String
+    #   resp.security_configuration.security_configuration_data.authorization_configuration.encryption_configuration.in_transit_encryption_configuration.tls_certificate_configuration.private_certificate_secret_arn #=> String
+    #   resp.security_configuration.tags #=> Hash
+    #   resp.security_configuration.tags["String128"] #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/emr-containers-2020-10-01/DescribeSecurityConfiguration AWS API Documentation
+    #
+    # @overload describe_security_configuration(params = {})
+    # @param [Hash] params ({})
+    def describe_security_configuration(params = {}, options = {})
+      req = build_request(:describe_security_configuration, params)
+      req.send_request(options)
+    end
+
     # Displays detailed information about a specified virtual cluster.
     # Virtual cluster is a managed entity on Amazon EMR on EKS. You can
     # create, describe, list and delete virtual clusters. They do not
@@ -1018,6 +1142,7 @@ module Aws::EMRContainers
     #   resp.virtual_cluster.created_at #=> Time
     #   resp.virtual_cluster.tags #=> Hash
     #   resp.virtual_cluster.tags["String128"] #=> String
+    #   resp.virtual_cluster.security_configuration_id #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/emr-containers-2020-10-01/DescribeVirtualCluster AWS API Documentation
     #
@@ -1351,6 +1476,69 @@ module Aws::EMRContainers
       req.send_request(options)
     end
 
+    # Lists security configurations based on a set of parameters. Security
+    # configurations in Amazon EMR on EKS are templates for different
+    # security setups. You can use security configurations to configure the
+    # Lake Formation integration setup. You can also create a security
+    # configuration to re-use a security setup each time you create a
+    # virtual cluster.
+    #
+    # @option params [Time,DateTime,Date,Integer,String] :created_after
+    #   The date and time after which the security configuration was created.
+    #
+    # @option params [Time,DateTime,Date,Integer,String] :created_before
+    #   The date and time before which the security configuration was created.
+    #
+    # @option params [Integer] :max_results
+    #   The maximum number of security configurations the operation can list.
+    #
+    # @option params [String] :next_token
+    #   The token for the next set of security configurations to return.
+    #
+    # @return [Types::ListSecurityConfigurationsResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::ListSecurityConfigurationsResponse#security_configurations #security_configurations} => Array&lt;Types::SecurityConfiguration&gt;
+    #   * {Types::ListSecurityConfigurationsResponse#next_token #next_token} => String
+    #
+    # The returned {Seahorse::Client::Response response} is a pageable response and is Enumerable. For details on usage see {Aws::PageableResponse PageableResponse}.
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.list_security_configurations({
+    #     created_after: Time.now,
+    #     created_before: Time.now,
+    #     max_results: 1,
+    #     next_token: "NextToken",
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.security_configurations #=> Array
+    #   resp.security_configurations[0].id #=> String
+    #   resp.security_configurations[0].name #=> String
+    #   resp.security_configurations[0].arn #=> String
+    #   resp.security_configurations[0].created_at #=> Time
+    #   resp.security_configurations[0].created_by #=> String
+    #   resp.security_configurations[0].security_configuration_data.authorization_configuration.lake_formation_configuration.authorized_session_tag_value #=> String
+    #   resp.security_configurations[0].security_configuration_data.authorization_configuration.lake_formation_configuration.secure_namespace_info.cluster_id #=> String
+    #   resp.security_configurations[0].security_configuration_data.authorization_configuration.lake_formation_configuration.secure_namespace_info.namespace #=> String
+    #   resp.security_configurations[0].security_configuration_data.authorization_configuration.lake_formation_configuration.query_engine_role_arn #=> String
+    #   resp.security_configurations[0].security_configuration_data.authorization_configuration.encryption_configuration.in_transit_encryption_configuration.tls_certificate_configuration.certificate_provider_type #=> String, one of "PEM"
+    #   resp.security_configurations[0].security_configuration_data.authorization_configuration.encryption_configuration.in_transit_encryption_configuration.tls_certificate_configuration.public_certificate_secret_arn #=> String
+    #   resp.security_configurations[0].security_configuration_data.authorization_configuration.encryption_configuration.in_transit_encryption_configuration.tls_certificate_configuration.private_certificate_secret_arn #=> String
+    #   resp.security_configurations[0].tags #=> Hash
+    #   resp.security_configurations[0].tags["String128"] #=> String
+    #   resp.next_token #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/emr-containers-2020-10-01/ListSecurityConfigurations AWS API Documentation
+    #
+    # @overload list_security_configurations(params = {})
+    # @param [Hash] params ({})
+    def list_security_configurations(params = {}, options = {})
+      req = build_request(:list_security_configurations, params)
+      req.send_request(options)
+    end
+
     # Lists the tags assigned to the resources.
     #
     # @option params [required, String] :resource_arn
@@ -1449,6 +1637,7 @@ module Aws::EMRContainers
     #   resp.virtual_clusters[0].created_at #=> Time
     #   resp.virtual_clusters[0].tags #=> Hash
     #   resp.virtual_clusters[0].tags["String128"] #=> String
+    #   resp.virtual_clusters[0].security_configuration_id #=> String
     #   resp.next_token #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/emr-containers-2020-10-01/ListVirtualClusters AWS API Documentation
@@ -1658,7 +1847,7 @@ module Aws::EMRContainers
         params: params,
         config: config)
       context[:gem_name] = 'aws-sdk-emrcontainers'
-      context[:gem_version] = '1.32.0'
+      context[:gem_version] = '1.33.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-emrcontainers/client_api.rb

@@ -14,11 +14,13 @@ module Aws::EMRContainers
     include Seahorse::Model
 
     ACMCertArn = Shapes::StringShape.new(name: 'ACMCertArn')
+    AuthorizationConfiguration = Shapes::StructureShape.new(name: 'AuthorizationConfiguration')
     Base64Encoded = Shapes::StringShape.new(name: 'Base64Encoded')
     Boolean = Shapes::BooleanShape.new(name: 'Boolean')
     CancelJobRunRequest = Shapes::StructureShape.new(name: 'CancelJobRunRequest')
     CancelJobRunResponse = Shapes::StructureShape.new(name: 'CancelJobRunResponse')
     Certificate = Shapes::StructureShape.new(name: 'Certificate')
+    CertificateProviderType = Shapes::StringShape.new(name: 'CertificateProviderType')
     ClientToken = Shapes::StringShape.new(name: 'ClientToken')
     CloudWatchMonitoringConfiguration = Shapes::StructureShape.new(name: 'CloudWatchMonitoringConfiguration')
     ClusterId = Shapes::StringShape.new(name: 'ClusterId')
@@ -33,6 +35,8 @@ module Aws::EMRContainers
     CreateJobTemplateResponse = Shapes::StructureShape.new(name: 'CreateJobTemplateResponse')
     CreateManagedEndpointRequest = Shapes::StructureShape.new(name: 'CreateManagedEndpointRequest')
     CreateManagedEndpointResponse = Shapes::StructureShape.new(name: 'CreateManagedEndpointResponse')
+    CreateSecurityConfigurationRequest = Shapes::StructureShape.new(name: 'CreateSecurityConfigurationRequest')
+    CreateSecurityConfigurationResponse = Shapes::StructureShape.new(name: 'CreateSecurityConfigurationResponse')
     CreateVirtualClusterRequest = Shapes::StructureShape.new(name: 'CreateVirtualClusterRequest')
     CreateVirtualClusterResponse = Shapes::StructureShape.new(name: 'CreateVirtualClusterResponse')
     CredentialType = Shapes::StringShape.new(name: 'CredentialType')
@@ -50,10 +54,13 @@ module Aws::EMRContainers
     DescribeJobTemplateResponse = Shapes::StructureShape.new(name: 'DescribeJobTemplateResponse')
     DescribeManagedEndpointRequest = Shapes::StructureShape.new(name: 'DescribeManagedEndpointRequest')
     DescribeManagedEndpointResponse = Shapes::StructureShape.new(name: 'DescribeManagedEndpointResponse')
+    DescribeSecurityConfigurationRequest = Shapes::StructureShape.new(name: 'DescribeSecurityConfigurationRequest')
+    DescribeSecurityConfigurationResponse = Shapes::StructureShape.new(name: 'DescribeSecurityConfigurationResponse')
     DescribeVirtualClusterRequest = Shapes::StructureShape.new(name: 'DescribeVirtualClusterRequest')
     DescribeVirtualClusterResponse = Shapes::StructureShape.new(name: 'DescribeVirtualClusterResponse')
     EKSRequestThrottledException = Shapes::StructureShape.new(name: 'EKSRequestThrottledException')
     EksInfo = Shapes::StructureShape.new(name: 'EksInfo')
+    EncryptionConfiguration = Shapes::StructureShape.new(name: 'EncryptionConfiguration')
     Endpoint = Shapes::StructureShape.new(name: 'Endpoint')
     EndpointArn = Shapes::StringShape.new(name: 'EndpointArn')
     EndpointState = Shapes::StringShape.new(name: 'EndpointState')
@@ -68,6 +75,7 @@ module Aws::EMRContainers
     GetManagedEndpointSessionCredentialsRequest = Shapes::StructureShape.new(name: 'GetManagedEndpointSessionCredentialsRequest')
     GetManagedEndpointSessionCredentialsResponse = Shapes::StructureShape.new(name: 'GetManagedEndpointSessionCredentialsResponse')
     IAMRoleArn = Shapes::StringShape.new(name: 'IAMRoleArn')
+    InTransitEncryptionConfiguration = Shapes::StructureShape.new(name: 'InTransitEncryptionConfiguration')
     InternalServerException = Shapes::StructureShape.new(name: 'InternalServerException')
     JavaInteger = Shapes::IntegerShape.new(name: 'JavaInteger')
     JobArn = Shapes::StringShape.new(name: 'JobArn')
@@ -82,12 +90,15 @@ module Aws::EMRContainers
     JobTemplates = Shapes::ListShape.new(name: 'JobTemplates')
     KmsKeyArn = Shapes::StringShape.new(name: 'KmsKeyArn')
     KubernetesNamespace = Shapes::StringShape.new(name: 'KubernetesNamespace')
+    LakeFormationConfiguration = Shapes::StructureShape.new(name: 'LakeFormationConfiguration')
     ListJobRunsRequest = Shapes::StructureShape.new(name: 'ListJobRunsRequest')
     ListJobRunsResponse = Shapes::StructureShape.new(name: 'ListJobRunsResponse')
     ListJobTemplatesRequest = Shapes::StructureShape.new(name: 'ListJobTemplatesRequest')
     ListJobTemplatesResponse = Shapes::StructureShape.new(name: 'ListJobTemplatesResponse')
     ListManagedEndpointsRequest = Shapes::StructureShape.new(name: 'ListManagedEndpointsRequest')
     ListManagedEndpointsResponse = Shapes::StructureShape.new(name: 'ListManagedEndpointsResponse')
+    ListSecurityConfigurationsRequest = Shapes::StructureShape.new(name: 'ListSecurityConfigurationsRequest')
+    ListSecurityConfigurationsResponse = Shapes::StructureShape.new(name: 'ListSecurityConfigurationsResponse')
     ListTagsForResourceRequest = Shapes::StructureShape.new(name: 'ListTagsForResourceRequest')
     ListTagsForResourceResponse = Shapes::StructureShape.new(name: 'ListTagsForResourceResponse')
     ListVirtualClustersRequest = Shapes::StructureShape.new(name: 'ListVirtualClustersRequest')
@@ -115,7 +126,14 @@ module Aws::EMRContainers
     RotationSize = Shapes::StringShape.new(name: 'RotationSize')
     RsiArn = Shapes::StringShape.new(name: 'RsiArn')
     S3MonitoringConfiguration = Shapes::StructureShape.new(name: 'S3MonitoringConfiguration')
+    SecretsManagerArn = Shapes::StringShape.new(name: 'SecretsManagerArn')
+    SecureNamespaceInfo = Shapes::StructureShape.new(name: 'SecureNamespaceInfo')
+    SecurityConfiguration = Shapes::StructureShape.new(name: 'SecurityConfiguration')
+    SecurityConfigurationArn = Shapes::StringShape.new(name: 'SecurityConfigurationArn')
+    SecurityConfigurationData = Shapes::StructureShape.new(name: 'SecurityConfigurationData')
+    SecurityConfigurations = Shapes::ListShape.new(name: 'SecurityConfigurations')
     SensitivePropertiesMap = Shapes::MapShape.new(name: 'SensitivePropertiesMap')
+    SessionTagValue = Shapes::StringShape.new(name: 'SessionTagValue')
     SparkSqlJobDriver = Shapes::StructureShape.new(name: 'SparkSqlJobDriver')
     SparkSqlParameters = Shapes::StringShape.new(name: 'SparkSqlParameters')
     SparkSubmitJobDriver = Shapes::StructureShape.new(name: 'SparkSubmitJobDriver')
@@ -128,6 +146,7 @@ module Aws::EMRContainers
     String256 = Shapes::StringShape.new(name: 'String256')
     StringEmpty256 = Shapes::StringShape.new(name: 'StringEmpty256')
     SubnetIds = Shapes::ListShape.new(name: 'SubnetIds')
+    TLSCertificateConfiguration = Shapes::StructureShape.new(name: 'TLSCertificateConfiguration')
     TagKeyList = Shapes::ListShape.new(name: 'TagKeyList')
     TagMap = Shapes::MapShape.new(name: 'TagMap')
     TagResourceRequest = Shapes::StructureShape.new(name: 'TagResourceRequest')
@@ -149,6 +168,10 @@ module Aws::EMRContainers
     VirtualClusterStates = Shapes::ListShape.new(name: 'VirtualClusterStates')
     VirtualClusters = Shapes::ListShape.new(name: 'VirtualClusters')
 
+    AuthorizationConfiguration.add_member(:lake_formation_configuration, Shapes::ShapeRef.new(shape: LakeFormationConfiguration, location_name: "lakeFormationConfiguration"))
+    AuthorizationConfiguration.add_member(:encryption_configuration, Shapes::ShapeRef.new(shape: EncryptionConfiguration, location_name: "encryptionConfiguration"))
+    AuthorizationConfiguration.struct_class = Types::AuthorizationConfiguration
+
     CancelJobRunRequest.add_member(:id, Shapes::ShapeRef.new(shape: ResourceIdString, required: true, location: "uri", location_name: "jobRunId"))
     CancelJobRunRequest.add_member(:virtual_cluster_id, Shapes::ShapeRef.new(shape: ResourceIdString, required: true, location: "uri", location_name: "virtualClusterId"))
     CancelJobRunRequest.struct_class = Types::CancelJobRunRequest
@@ -221,10 +244,22 @@ module Aws::EMRContainers
     CreateManagedEndpointResponse.add_member(:virtual_cluster_id, Shapes::ShapeRef.new(shape: ResourceIdString, location_name: "virtualClusterId"))
     CreateManagedEndpointResponse.struct_class = Types::CreateManagedEndpointResponse
 
+    CreateSecurityConfigurationRequest.add_member(:client_token, Shapes::ShapeRef.new(shape: ClientToken, required: true, location_name: "clientToken", metadata: {"idempotencyToken"=>true}))
+    CreateSecurityConfigurationRequest.add_member(:name, Shapes::ShapeRef.new(shape: ResourceNameString, required: true, location_name: "name"))
+    CreateSecurityConfigurationRequest.add_member(:security_configuration_data, Shapes::ShapeRef.new(shape: SecurityConfigurationData, required: true, location_name: "securityConfigurationData"))
+    CreateSecurityConfigurationRequest.add_member(:tags, Shapes::ShapeRef.new(shape: TagMap, location_name: "tags"))
+    CreateSecurityConfigurationRequest.struct_class = Types::CreateSecurityConfigurationRequest
+
+    CreateSecurityConfigurationResponse.add_member(:id, Shapes::ShapeRef.new(shape: ResourceIdString, location_name: "id"))
+    CreateSecurityConfigurationResponse.add_member(:name, Shapes::ShapeRef.new(shape: ResourceNameString, location_name: "name"))
+    CreateSecurityConfigurationResponse.add_member(:arn, Shapes::ShapeRef.new(shape: SecurityConfigurationArn, location_name: "arn"))
+    CreateSecurityConfigurationResponse.struct_class = Types::CreateSecurityConfigurationResponse
+
     CreateVirtualClusterRequest.add_member(:name, Shapes::ShapeRef.new(shape: ResourceNameString, required: true, location_name: "name"))
     CreateVirtualClusterRequest.add_member(:container_provider, Shapes::ShapeRef.new(shape: ContainerProvider, required: true, location_name: "containerProvider"))
     CreateVirtualClusterRequest.add_member(:client_token, Shapes::ShapeRef.new(shape: ClientToken, required: true, location_name: "clientToken", metadata: {"idempotencyToken"=>true}))
     CreateVirtualClusterRequest.add_member(:tags, Shapes::ShapeRef.new(shape: TagMap, location_name: "tags"))
+    CreateVirtualClusterRequest.add_member(:security_configuration_id, Shapes::ShapeRef.new(shape: ResourceIdString, location_name: "securityConfigurationId"))
     CreateVirtualClusterRequest.struct_class = Types::CreateVirtualClusterRequest
 
     CreateVirtualClusterResponse.add_member(:id, Shapes::ShapeRef.new(shape: ResourceIdString, location_name: "id"))
@@ -278,6 +313,12 @@ module Aws::EMRContainers
     DescribeManagedEndpointResponse.add_member(:endpoint, Shapes::ShapeRef.new(shape: Endpoint, location_name: "endpoint"))
     DescribeManagedEndpointResponse.struct_class = Types::DescribeManagedEndpointResponse
 
+    DescribeSecurityConfigurationRequest.add_member(:id, Shapes::ShapeRef.new(shape: ResourceIdString, required: true, location: "uri", location_name: "securityConfigurationId"))
+    DescribeSecurityConfigurationRequest.struct_class = Types::DescribeSecurityConfigurationRequest
+
+    DescribeSecurityConfigurationResponse.add_member(:security_configuration, Shapes::ShapeRef.new(shape: SecurityConfiguration, location_name: "securityConfiguration"))
+    DescribeSecurityConfigurationResponse.struct_class = Types::DescribeSecurityConfigurationResponse
+
     DescribeVirtualClusterRequest.add_member(:id, Shapes::ShapeRef.new(shape: ResourceIdString, required: true, location: "uri", location_name: "virtualClusterId"))
     DescribeVirtualClusterRequest.struct_class = Types::DescribeVirtualClusterRequest
 
@@ -290,6 +331,9 @@ module Aws::EMRContainers
     EksInfo.add_member(:namespace, Shapes::ShapeRef.new(shape: KubernetesNamespace, location_name: "namespace"))
     EksInfo.struct_class = Types::EksInfo
 
+    EncryptionConfiguration.add_member(:in_transit_encryption_configuration, Shapes::ShapeRef.new(shape: InTransitEncryptionConfiguration, location_name: "inTransitEncryptionConfiguration"))
+    EncryptionConfiguration.struct_class = Types::EncryptionConfiguration
+
     Endpoint.add_member(:id, Shapes::ShapeRef.new(shape: ResourceIdString, location_name: "id"))
     Endpoint.add_member(:name, Shapes::ShapeRef.new(shape: ResourceNameString, location_name: "name"))
     Endpoint.add_member(:arn, Shapes::ShapeRef.new(shape: EndpointArn, location_name: "arn"))
@@ -332,6 +376,9 @@ module Aws::EMRContainers
     GetManagedEndpointSessionCredentialsResponse.add_member(:expires_at, Shapes::ShapeRef.new(shape: Date, location_name: "expiresAt"))
     GetManagedEndpointSessionCredentialsResponse.struct_class = Types::GetManagedEndpointSessionCredentialsResponse
 
+    InTransitEncryptionConfiguration.add_member(:tls_certificate_configuration, Shapes::ShapeRef.new(shape: TLSCertificateConfiguration, location_name: "tlsCertificateConfiguration"))
+    InTransitEncryptionConfiguration.struct_class = Types::InTransitEncryptionConfiguration
+
     InternalServerException.add_member(:message, Shapes::ShapeRef.new(shape: String1024, location_name: "message"))
     InternalServerException.struct_class = Types::InternalServerException
 
@@ -384,6 +431,11 @@ module Aws::EMRContainers
 
     JobTemplates.member = Shapes::ShapeRef.new(shape: JobTemplate)
 
+    LakeFormationConfiguration.add_member(:authorized_session_tag_value, Shapes::ShapeRef.new(shape: SessionTagValue, location_name: "authorizedSessionTagValue"))
+    LakeFormationConfiguration.add_member(:secure_namespace_info, Shapes::ShapeRef.new(shape: SecureNamespaceInfo, location_name: "secureNamespaceInfo"))
+    LakeFormationConfiguration.add_member(:query_engine_role_arn, Shapes::ShapeRef.new(shape: IAMRoleArn, location_name: "queryEngineRoleArn"))
+    LakeFormationConfiguration.struct_class = Types::LakeFormationConfiguration
+
     ListJobRunsRequest.add_member(:virtual_cluster_id, Shapes::ShapeRef.new(shape: ResourceIdString, required: true, location: "uri", location_name: "virtualClusterId"))
     ListJobRunsRequest.add_member(:created_before, Shapes::ShapeRef.new(shape: Date, location: "querystring", location_name: "createdBefore"))
     ListJobRunsRequest.add_member(:created_after, Shapes::ShapeRef.new(shape: Date, location: "querystring", location_name: "createdAfter"))
@@ -420,6 +472,16 @@ module Aws::EMRContainers
     ListManagedEndpointsResponse.add_member(:next_token, Shapes::ShapeRef.new(shape: NextToken, location_name: "nextToken"))
     ListManagedEndpointsResponse.struct_class = Types::ListManagedEndpointsResponse
 
+    ListSecurityConfigurationsRequest.add_member(:created_after, Shapes::ShapeRef.new(shape: Date, location: "querystring", location_name: "createdAfter"))
+    ListSecurityConfigurationsRequest.add_member(:created_before, Shapes::ShapeRef.new(shape: Date, location: "querystring", location_name: "createdBefore"))
+    ListSecurityConfigurationsRequest.add_member(:max_results, Shapes::ShapeRef.new(shape: JavaInteger, location: "querystring", location_name: "maxResults"))
+    ListSecurityConfigurationsRequest.add_member(:next_token, Shapes::ShapeRef.new(shape: NextToken, location: "querystring", location_name: "nextToken"))
+    ListSecurityConfigurationsRequest.struct_class = Types::ListSecurityConfigurationsRequest
+
+    ListSecurityConfigurationsResponse.add_member(:security_configurations, Shapes::ShapeRef.new(shape: SecurityConfigurations, location_name: "securityConfigurations"))
+    ListSecurityConfigurationsResponse.add_member(:next_token, Shapes::ShapeRef.new(shape: NextToken, location_name: "nextToken"))
+    ListSecurityConfigurationsResponse.struct_class = Types::ListSecurityConfigurationsResponse
+
     ListTagsForResourceRequest.add_member(:resource_arn, Shapes::ShapeRef.new(shape: RsiArn, required: true, location: "uri", location_name: "resourceArn"))
     ListTagsForResourceRequest.struct_class = Types::ListTagsForResourceRequest
 
@@ -477,6 +539,24 @@ module Aws::EMRContainers
     S3MonitoringConfiguration.add_member(:log_uri, Shapes::ShapeRef.new(shape: UriString, required: true, location_name: "logUri"))
     S3MonitoringConfiguration.struct_class = Types::S3MonitoringConfiguration
 
+    SecureNamespaceInfo.add_member(:cluster_id, Shapes::ShapeRef.new(shape: ClusterId, location_name: "clusterId"))
+    SecureNamespaceInfo.add_member(:namespace, Shapes::ShapeRef.new(shape: KubernetesNamespace, location_name: "namespace"))
+    SecureNamespaceInfo.struct_class = Types::SecureNamespaceInfo
+
+    SecurityConfiguration.add_member(:id, Shapes::ShapeRef.new(shape: ResourceIdString, location_name: "id"))
+    SecurityConfiguration.add_member(:name, Shapes::ShapeRef.new(shape: ResourceNameString, location_name: "name"))
+    SecurityConfiguration.add_member(:arn, Shapes::ShapeRef.new(shape: SecurityConfigurationArn, location_name: "arn"))
+    SecurityConfiguration.add_member(:created_at, Shapes::ShapeRef.new(shape: Date, location_name: "createdAt"))
+    SecurityConfiguration.add_member(:created_by, Shapes::ShapeRef.new(shape: RequestIdentityUserArn, location_name: "createdBy"))
+    SecurityConfiguration.add_member(:security_configuration_data, Shapes::ShapeRef.new(shape: SecurityConfigurationData, location_name: "securityConfigurationData"))
+    SecurityConfiguration.add_member(:tags, Shapes::ShapeRef.new(shape: TagMap, location_name: "tags"))
+    SecurityConfiguration.struct_class = Types::SecurityConfiguration
+
+    SecurityConfigurationData.add_member(:authorization_configuration, Shapes::ShapeRef.new(shape: AuthorizationConfiguration, location_name: "authorizationConfiguration"))
+    SecurityConfigurationData.struct_class = Types::SecurityConfigurationData
+
+    SecurityConfigurations.member = Shapes::ShapeRef.new(shape: SecurityConfiguration)
+
     SensitivePropertiesMap.key = Shapes::ShapeRef.new(shape: String1024)
     SensitivePropertiesMap.value = Shapes::ShapeRef.new(shape: String1024)
 
@@ -510,6 +590,11 @@ module Aws::EMRContainers
 
     SubnetIds.member = Shapes::ShapeRef.new(shape: String256)
 
+    TLSCertificateConfiguration.add_member(:certificate_provider_type, Shapes::ShapeRef.new(shape: CertificateProviderType, location_name: "certificateProviderType"))
+    TLSCertificateConfiguration.add_member(:public_certificate_secret_arn, Shapes::ShapeRef.new(shape: SecretsManagerArn, location_name: "publicCertificateSecretArn"))
+    TLSCertificateConfiguration.add_member(:private_certificate_secret_arn, Shapes::ShapeRef.new(shape: SecretsManagerArn, location_name: "privateCertificateSecretArn"))
+    TLSCertificateConfiguration.struct_class = Types::TLSCertificateConfiguration
+
     TagKeyList.member = Shapes::ShapeRef.new(shape: String128)
 
     TagMap.key = Shapes::ShapeRef.new(shape: String128)
@@ -547,6 +632,7 @@ module Aws::EMRContainers
     VirtualCluster.add_member(:container_provider, Shapes::ShapeRef.new(shape: ContainerProvider, location_name: "containerProvider"))
     VirtualCluster.add_member(:created_at, Shapes::ShapeRef.new(shape: Date, location_name: "createdAt"))
     VirtualCluster.add_member(:tags, Shapes::ShapeRef.new(shape: TagMap, location_name: "tags"))
+    VirtualCluster.add_member(:security_configuration_id, Shapes::ShapeRef.new(shape: ResourceIdString, location_name: "securityConfigurationId"))
     VirtualCluster.struct_class = Types::VirtualCluster
 
     VirtualClusterStates.member = Shapes::ShapeRef.new(shape: VirtualClusterState)
@@ -603,6 +689,16 @@ module Aws::EMRContainers
         o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
       end)
 
+      api.add_operation(:create_security_configuration, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "CreateSecurityConfiguration"
+        o.http_method = "POST"
+        o.http_request_uri = "/securityconfigurations"
+        o.input = Shapes::ShapeRef.new(shape: CreateSecurityConfigurationRequest)
+        o.output = Shapes::ShapeRef.new(shape: CreateSecurityConfigurationResponse)
+        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
+        o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
+      end)
+
       api.add_operation(:create_virtual_cluster, Seahorse::Model::Operation.new.tap do |o|
         o.name = "CreateVirtualCluster"
         o.http_method = "POST"
@@ -678,6 +774,17 @@ module Aws::EMRContainers
         o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
       end)
 
+      api.add_operation(:describe_security_configuration, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "DescribeSecurityConfiguration"
+        o.http_method = "GET"
+        o.http_request_uri = "/securityconfigurations/{securityConfigurationId}"
+        o.input = Shapes::ShapeRef.new(shape: DescribeSecurityConfigurationRequest)
+        o.output = Shapes::ShapeRef.new(shape: DescribeSecurityConfigurationResponse)
+        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
+        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
+      end)
+
       api.add_operation(:describe_virtual_cluster, Seahorse::Model::Operation.new.tap do |o|
         o.name = "DescribeVirtualCluster"
         o.http_method = "GET"
@@ -749,6 +856,22 @@ module Aws::EMRContainers
         )
       end)
 
+      api.add_operation(:list_security_configurations, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "ListSecurityConfigurations"
+        o.http_method = "GET"
+        o.http_request_uri = "/securityconfigurations"
+        o.input = Shapes::ShapeRef.new(shape: ListSecurityConfigurationsRequest)
+        o.output = Shapes::ShapeRef.new(shape: ListSecurityConfigurationsResponse)
+        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
+        o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
+        o[:pager] = Aws::Pager.new(
+          limit_key: "max_results",
+          tokens: {
+            "next_token" => "next_token"
+          }
+        )
+      end)
+
       api.add_operation(:list_tags_for_resource, Seahorse::Model::Operation.new.tap do |o|
         o.name = "ListTagsForResource"
         o.http_method = "GET"

data/lib/aws-sdk-emrcontainers/endpoints.rb

@@ -54,6 +54,20 @@ module Aws::EMRContainers
       end
     end
 
+    class CreateSecurityConfiguration
+      def self.build(context)
+        unless context.config.regional_endpoint
+          endpoint = context.config.endpoint.to_s
+        end
+        Aws::EMRContainers::EndpointParameters.new(
+          region: context.config.region,
+          use_dual_stack: context.config.use_dualstack_endpoint,
+          use_fips: context.config.use_fips_endpoint,
+          endpoint: endpoint,
+        )
+      end
+    end
+
     class CreateVirtualCluster
       def self.build(context)
         unless context.config.regional_endpoint
@@ -152,6 +166,20 @@ module Aws::EMRContainers
       end
     end
 
+    class DescribeSecurityConfiguration
+      def self.build(context)
+        unless context.config.regional_endpoint
+          endpoint = context.config.endpoint.to_s
+        end
+        Aws::EMRContainers::EndpointParameters.new(
+          region: context.config.region,
+          use_dual_stack: context.config.use_dualstack_endpoint,
+          use_fips: context.config.use_fips_endpoint,
+          endpoint: endpoint,
+        )
+      end
+    end
+
     class DescribeVirtualCluster
       def self.build(context)
         unless context.config.regional_endpoint
@@ -222,6 +250,20 @@ module Aws::EMRContainers
       end
     end
 
+    class ListSecurityConfigurations
+      def self.build(context)
+        unless context.config.regional_endpoint
+          endpoint = context.config.endpoint.to_s
+        end
+        Aws::EMRContainers::EndpointParameters.new(
+          region: context.config.region,
+          use_dual_stack: context.config.use_dualstack_endpoint,
+          use_fips: context.config.use_fips_endpoint,
+          endpoint: endpoint,
+        )
+      end
+    end
+
     class ListTagsForResource
       def self.build(context)
         unless context.config.regional_endpoint

data/lib/aws-sdk-emrcontainers/plugins/endpoints.rb

@@ -64,6 +64,8 @@ module Aws::EMRContainers
             Aws::EMRContainers::Endpoints::CreateJobTemplate.build(context)
           when :create_managed_endpoint
             Aws::EMRContainers::Endpoints::CreateManagedEndpoint.build(context)
+          when :create_security_configuration
+            Aws::EMRContainers::Endpoints::CreateSecurityConfiguration.build(context)
           when :create_virtual_cluster
             Aws::EMRContainers::Endpoints::CreateVirtualCluster.build(context)
           when :delete_job_template
@@ -78,6 +80,8 @@ module Aws::EMRContainers
             Aws::EMRContainers::Endpoints::DescribeJobTemplate.build(context)
           when :describe_managed_endpoint
             Aws::EMRContainers::Endpoints::DescribeManagedEndpoint.build(context)
+          when :describe_security_configuration
+            Aws::EMRContainers::Endpoints::DescribeSecurityConfiguration.build(context)
           when :describe_virtual_cluster
             Aws::EMRContainers::Endpoints::DescribeVirtualCluster.build(context)
           when :get_managed_endpoint_session_credentials
@@ -88,6 +92,8 @@ module Aws::EMRContainers
             Aws::EMRContainers::Endpoints::ListJobTemplates.build(context)
           when :list_managed_endpoints
             Aws::EMRContainers::Endpoints::ListManagedEndpoints.build(context)
+          when :list_security_configurations
+            Aws::EMRContainers::Endpoints::ListSecurityConfigurations.build(context)
           when :list_tags_for_resource
             Aws::EMRContainers::Endpoints::ListTagsForResource.build(context)
           when :list_virtual_clusters

data/lib/aws-sdk-emrcontainers/types.rb

@@ -10,6 +10,28 @@
 module Aws::EMRContainers
   module Types
 
+    # Authorization-related configuration inputs for the security
+    # configuration.
+    #
+    # @!attribute [rw] lake_formation_configuration
+    #   Lake Formation related configuration inputs for the security
+    #   configuration.
+    #   @return [Types::LakeFormationConfiguration]
+    #
+    # @!attribute [rw] encryption_configuration
+    #   Encryption-related configuration input for the security
+    #   configuration.
+    #   @return [Types::EncryptionConfiguration]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/emr-containers-2020-10-01/AuthorizationConfiguration AWS API Documentation
+    #
+    class AuthorizationConfiguration < Struct.new(
+      :lake_formation_configuration,
+      :encryption_configuration)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] id
     #   The ID of the job run to cancel.
     #   @return [String]
@@ -354,6 +376,59 @@ module Aws::EMRContainers
       include Aws::Structure
     end
 
+    # @!attribute [rw] client_token
+    #   The client idempotency token to use when creating the security
+    #   configuration.
+    #
+    #   **A suitable default value is auto-generated.** You should normally
+    #   not need to pass this option.
+    #   @return [String]
+    #
+    # @!attribute [rw] name
+    #   The name of the security configuration.
+    #   @return [String]
+    #
+    # @!attribute [rw] security_configuration_data
+    #   Security configuration input for the request.
+    #   @return [Types::SecurityConfigurationData]
+    #
+    # @!attribute [rw] tags
+    #   The tags to add to the security configuration.
+    #   @return [Hash<String,String>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/emr-containers-2020-10-01/CreateSecurityConfigurationRequest AWS API Documentation
+    #
+    class CreateSecurityConfigurationRequest < Struct.new(
+      :client_token,
+      :name,
+      :security_configuration_data,
+      :tags)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] id
+    #   The ID of the security configuration.
+    #   @return [String]
+    #
+    # @!attribute [rw] name
+    #   The name of the security configuration.
+    #   @return [String]
+    #
+    # @!attribute [rw] arn
+    #   The ARN (Amazon Resource Name) of the security configuration.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/emr-containers-2020-10-01/CreateSecurityConfigurationResponse AWS API Documentation
+    #
+    class CreateSecurityConfigurationResponse < Struct.new(
+      :id,
+      :name,
+      :arn)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] name
     #   The specified name of the virtual cluster.
     #   @return [String]
@@ -373,13 +448,18 @@ module Aws::EMRContainers
     #   The tags assigned to the virtual cluster.
     #   @return [Hash<String,String>]
     #
+    # @!attribute [rw] security_configuration_id
+    #   The ID of the security configuration.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/emr-containers-2020-10-01/CreateVirtualClusterRequest AWS API Documentation
     #
     class CreateVirtualClusterRequest < Struct.new(
       :name,
       :container_provider,
       :client_token,
-      :tags)
+      :tags,
+      :security_configuration_id)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -592,6 +672,30 @@ module Aws::EMRContainers
       include Aws::Structure
     end
 
+    # @!attribute [rw] id
+    #   The ID of the security configuration.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/emr-containers-2020-10-01/DescribeSecurityConfigurationRequest AWS API Documentation
+    #
+    class DescribeSecurityConfigurationRequest < Struct.new(
+      :id)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] security_configuration
+    #   Details of the security configuration.
+    #   @return [Types::SecurityConfiguration]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/emr-containers-2020-10-01/DescribeSecurityConfigurationResponse AWS API Documentation
+    #
+    class DescribeSecurityConfigurationResponse < Struct.new(
+      :security_configuration)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] id
     #   The ID of the virtual cluster that will be described.
     #   @return [String]
@@ -644,6 +748,20 @@ module Aws::EMRContainers
       include Aws::Structure
     end
 
+    # Configurations related to encryption for the security configuration.
+    #
+    # @!attribute [rw] in_transit_encryption_configuration
+    #   In-transit encryption-related input for the security configuration.
+    #   @return [Types::InTransitEncryptionConfiguration]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/emr-containers-2020-10-01/EncryptionConfiguration AWS API Documentation
+    #
+    class EncryptionConfiguration < Struct.new(
+      :in_transit_encryption_configuration)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # This entity represents the endpoint that is managed by Amazon EMR on
     # EKS.
     #
@@ -818,6 +936,22 @@ module Aws::EMRContainers
       include Aws::Structure
     end
 
+    # Configurations related to in-transit encryption for the security
+    # configuration.
+    #
+    # @!attribute [rw] tls_certificate_configuration
+    #   TLS certificate-related configuration input for the security
+    #   configuration.
+    #   @return [Types::TLSCertificateConfiguration]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/emr-containers-2020-10-01/InTransitEncryptionConfiguration AWS API Documentation
+    #
+    class InTransitEncryptionConfiguration < Struct.new(
+      :tls_certificate_configuration)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # This is an internal server exception.
     #
     # @!attribute [rw] message
@@ -1055,6 +1189,34 @@ module Aws::EMRContainers
       include Aws::Structure
     end
 
+    # Lake Formation related configuration inputs for the security
+    # configuration.
+    #
+    # @!attribute [rw] authorized_session_tag_value
+    #   The session tag to authorize Amazon EMR on EKS for API calls to Lake
+    #   Formation.
+    #   @return [String]
+    #
+    # @!attribute [rw] secure_namespace_info
+    #   The namespace input of the system job.
+    #   @return [Types::SecureNamespaceInfo]
+    #
+    # @!attribute [rw] query_engine_role_arn
+    #   The query engine IAM role ARN that is tied to the secure Spark job.
+    #   The `QueryEngine` role assumes the `JobExecutionRole` to execute all
+    #   the Lake Formation calls.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/emr-containers-2020-10-01/LakeFormationConfiguration AWS API Documentation
+    #
+    class LakeFormationConfiguration < Struct.new(
+      :authorized_session_tag_value,
+      :secure_namespace_info,
+      :query_engine_role_arn)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] virtual_cluster_id
     #   The ID of the virtual cluster for which to list the job run.
     #   @return [String]
@@ -1217,6 +1379,53 @@ module Aws::EMRContainers
       include Aws::Structure
     end
 
+    # @!attribute [rw] created_after
+    #   The date and time after which the security configuration was
+    #   created.
+    #   @return [Time]
+    #
+    # @!attribute [rw] created_before
+    #   The date and time before which the security configuration was
+    #   created.
+    #   @return [Time]
+    #
+    # @!attribute [rw] max_results
+    #   The maximum number of security configurations the operation can
+    #   list.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] next_token
+    #   The token for the next set of security configurations to return.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/emr-containers-2020-10-01/ListSecurityConfigurationsRequest AWS API Documentation
+    #
+    class ListSecurityConfigurationsRequest < Struct.new(
+      :created_after,
+      :created_before,
+      :max_results,
+      :next_token)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] security_configurations
+    #   The list of returned security configurations.
+    #   @return [Array<Types::SecurityConfiguration>]
+    #
+    # @!attribute [rw] next_token
+    #   The token for the next set of security configurations to return.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/emr-containers-2020-10-01/ListSecurityConfigurationsResponse AWS API Documentation
+    #
+    class ListSecurityConfigurationsResponse < Struct.new(
+      :security_configurations,
+      :next_token)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] resource_arn
     #   The ARN of tagged resources.
     #   @return [String]
@@ -1490,6 +1699,88 @@ module Aws::EMRContainers
       include Aws::Structure
     end
 
+    # Namespace inputs for the system job.
+    #
+    # @!attribute [rw] cluster_id
+    #   The ID of the Amazon EKS cluster where Amazon EMR on EKS jobs run.
+    #   @return [String]
+    #
+    # @!attribute [rw] namespace
+    #   The namespace of the Amazon EKS cluster where the system jobs run.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/emr-containers-2020-10-01/SecureNamespaceInfo AWS API Documentation
+    #
+    class SecureNamespaceInfo < Struct.new(
+      :cluster_id,
+      :namespace)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Inputs related to the security configuration. Security configurations
+    # in Amazon EMR on EKS are templates for different security setups. You
+    # can use security configurations to configure the Lake Formation
+    # integration setup. You can also create a security configuration to
+    # re-use a security setup each time you create a virtual cluster.
+    #
+    # @!attribute [rw] id
+    #   The ID of the security configuration.
+    #   @return [String]
+    #
+    # @!attribute [rw] name
+    #   The name of the security configuration.
+    #   @return [String]
+    #
+    # @!attribute [rw] arn
+    #   The ARN (Amazon Resource Name) of the security configuration.
+    #   @return [String]
+    #
+    # @!attribute [rw] created_at
+    #   The date and time that the job run was created.
+    #   @return [Time]
+    #
+    # @!attribute [rw] created_by
+    #   The user who created the job run.
+    #   @return [String]
+    #
+    # @!attribute [rw] security_configuration_data
+    #   Security configuration inputs for the request.
+    #   @return [Types::SecurityConfigurationData]
+    #
+    # @!attribute [rw] tags
+    #   The tags to assign to the security configuration.
+    #   @return [Hash<String,String>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/emr-containers-2020-10-01/SecurityConfiguration AWS API Documentation
+    #
+    class SecurityConfiguration < Struct.new(
+      :id,
+      :name,
+      :arn,
+      :created_at,
+      :created_by,
+      :security_configuration_data,
+      :tags)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Configurations related to the security configuration for the request.
+    #
+    # @!attribute [rw] authorization_configuration
+    #   Authorization-related configuration input for the security
+    #   configuration.
+    #   @return [Types::AuthorizationConfiguration]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/emr-containers-2020-10-01/SecurityConfigurationData AWS API Documentation
+    #
+    class SecurityConfigurationData < Struct.new(
+      :authorization_configuration)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # The job driver for job type.
     #
     # @!attribute [rw] entry_point
@@ -1626,6 +1917,35 @@ module Aws::EMRContainers
       include Aws::Structure
     end
 
+    # Configurations related to the TLS certificate for the security
+    # configuration.
+    #
+    # @!attribute [rw] certificate_provider_type
+    #   The TLS certificate type. Acceptable values: `PEM` or `Custom`.
+    #   @return [String]
+    #
+    # @!attribute [rw] public_certificate_secret_arn
+    #   Secrets Manager ARN that contains the public TLS certificate
+    #   contents, used for communication between the user job and the system
+    #   job.
+    #   @return [String]
+    #
+    # @!attribute [rw] private_certificate_secret_arn
+    #   Secrets Manager ARN that contains the private TLS certificate
+    #   contents, used for communication between the user job and the system
+    #   job.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/emr-containers-2020-10-01/TLSCertificateConfiguration AWS API Documentation
+    #
+    class TLSCertificateConfiguration < Struct.new(
+      :certificate_provider_type,
+      :public_certificate_secret_arn,
+      :private_certificate_secret_arn)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] resource_arn
     #   The ARN of resources.
     #   @return [String]
@@ -1737,6 +2057,10 @@ module Aws::EMRContainers
     #   The assigned tags of the virtual cluster.
     #   @return [Hash<String,String>]
     #
+    # @!attribute [rw] security_configuration_id
+    #   The ID of the security configuration.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/emr-containers-2020-10-01/VirtualCluster AWS API Documentation
     #
     class VirtualCluster < Struct.new(
@@ -1746,7 +2070,8 @@ module Aws::EMRContainers
       :state,
       :container_provider,
       :created_at,
-      :tags)
+      :tags,
+      :security_configuration_id)
       SENSITIVE = []
       include Aws::Structure
     end

data/lib/aws-sdk-emrcontainers.rb

@@ -52,6 +52,6 @@ require_relative 'aws-sdk-emrcontainers/customizations'
 # @!group service
 module Aws::EMRContainers
 
-  GEM_VERSION = '1.32.0'
+  GEM_VERSION = '1.33.0'
 
 end

data/sig/client.rbs

@@ -182,6 +182,41 @@ module Aws
                                    ) -> _CreateManagedEndpointResponseSuccess
                                  | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _CreateManagedEndpointResponseSuccess
 
+      interface _CreateSecurityConfigurationResponseSuccess
+        include ::Seahorse::Client::_ResponseSuccess[Types::CreateSecurityConfigurationResponse]
+        def id: () -> ::String
+        def name: () -> ::String
+        def arn: () -> ::String
+      end
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/EMRContainers/Client.html#create_security_configuration-instance_method
+      def create_security_configuration: (
+                                           client_token: ::String,
+                                           name: ::String,
+                                           security_configuration_data: {
+                                             authorization_configuration: {
+                                               lake_formation_configuration: {
+                                                 authorized_session_tag_value: ::String?,
+                                                 secure_namespace_info: {
+                                                   cluster_id: ::String?,
+                                                   namespace: ::String?
+                                                 }?,
+                                                 query_engine_role_arn: ::String?
+                                               }?,
+                                               encryption_configuration: {
+                                                 in_transit_encryption_configuration: {
+                                                   tls_certificate_configuration: {
+                                                     certificate_provider_type: ("PEM")?,
+                                                     public_certificate_secret_arn: ::String?,
+                                                     private_certificate_secret_arn: ::String?
+                                                   }?
+                                                 }?
+                                               }?
+                                             }?
+                                           },
+                                           ?tags: Hash[::String, ::String]
+                                         ) -> _CreateSecurityConfigurationResponseSuccess
+                                       | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _CreateSecurityConfigurationResponseSuccess
+
       interface _CreateVirtualClusterResponseSuccess
         include ::Seahorse::Client::_ResponseSuccess[Types::CreateVirtualClusterResponse]
         def id: () -> ::String
@@ -201,7 +236,8 @@ module Aws
                                       }?
                                     },
                                     client_token: ::String,
-                                    ?tags: Hash[::String, ::String]
+                                    ?tags: Hash[::String, ::String],
+                                    ?security_configuration_id: ::String
                                   ) -> _CreateVirtualClusterResponseSuccess
                                 | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _CreateVirtualClusterResponseSuccess
 
@@ -269,6 +305,16 @@ module Aws
                                      ) -> _DescribeManagedEndpointResponseSuccess
                                    | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _DescribeManagedEndpointResponseSuccess
 
+      interface _DescribeSecurityConfigurationResponseSuccess
+        include ::Seahorse::Client::_ResponseSuccess[Types::DescribeSecurityConfigurationResponse]
+        def security_configuration: () -> Types::SecurityConfiguration
+      end
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/EMRContainers/Client.html#describe_security_configuration-instance_method
+      def describe_security_configuration: (
+                                             id: ::String
+                                           ) -> _DescribeSecurityConfigurationResponseSuccess
+                                         | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _DescribeSecurityConfigurationResponseSuccess
+
       interface _DescribeVirtualClusterResponseSuccess
         include ::Seahorse::Client::_ResponseSuccess[Types::DescribeVirtualClusterResponse]
         def virtual_cluster: () -> Types::VirtualCluster
@@ -345,6 +391,20 @@ module Aws
                                   ) -> _ListManagedEndpointsResponseSuccess
                                 | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _ListManagedEndpointsResponseSuccess
 
+      interface _ListSecurityConfigurationsResponseSuccess
+        include ::Seahorse::Client::_ResponseSuccess[Types::ListSecurityConfigurationsResponse]
+        def security_configurations: () -> ::Array[Types::SecurityConfiguration]
+        def next_token: () -> ::String
+      end
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/EMRContainers/Client.html#list_security_configurations-instance_method
+      def list_security_configurations: (
+                                          ?created_after: ::Time,
+                                          ?created_before: ::Time,
+                                          ?max_results: ::Integer,
+                                          ?next_token: ::String
+                                        ) -> _ListSecurityConfigurationsResponseSuccess
+                                      | (?Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _ListSecurityConfigurationsResponseSuccess
+
       interface _ListTagsForResourceResponseSuccess
         include ::Seahorse::Client::_ResponseSuccess[Types::ListTagsForResourceResponse]
         def tags: () -> ::Hash[::String, ::String]

data/sig/types.rbs

@@ -8,6 +8,12 @@
 module Aws::EMRContainers
   module Types
 
+    class AuthorizationConfiguration
+      attr_accessor lake_formation_configuration: Types::LakeFormationConfiguration
+      attr_accessor encryption_configuration: Types::EncryptionConfiguration
+      SENSITIVE: []
+    end
+
     class CancelJobRunRequest
       attr_accessor id: ::String
       attr_accessor virtual_cluster_id: ::String
@@ -107,11 +113,27 @@ module Aws::EMRContainers
       SENSITIVE: []
     end
 
+    class CreateSecurityConfigurationRequest
+      attr_accessor client_token: ::String
+      attr_accessor name: ::String
+      attr_accessor security_configuration_data: Types::SecurityConfigurationData
+      attr_accessor tags: ::Hash[::String, ::String]
+      SENSITIVE: []
+    end
+
+    class CreateSecurityConfigurationResponse
+      attr_accessor id: ::String
+      attr_accessor name: ::String
+      attr_accessor arn: ::String
+      SENSITIVE: []
+    end
+
     class CreateVirtualClusterRequest
       attr_accessor name: ::String
       attr_accessor container_provider: Types::ContainerProvider
       attr_accessor client_token: ::String
       attr_accessor tags: ::Hash[::String, ::String]
+      attr_accessor security_configuration_id: ::String
       SENSITIVE: []
     end
 
@@ -197,6 +219,16 @@ module Aws::EMRContainers
       SENSITIVE: []
     end
 
+    class DescribeSecurityConfigurationRequest
+      attr_accessor id: ::String
+      SENSITIVE: []
+    end
+
+    class DescribeSecurityConfigurationResponse
+      attr_accessor security_configuration: Types::SecurityConfiguration
+      SENSITIVE: []
+    end
+
     class DescribeVirtualClusterRequest
       attr_accessor id: ::String
       SENSITIVE: []
@@ -217,6 +249,11 @@ module Aws::EMRContainers
       SENSITIVE: []
     end
 
+    class EncryptionConfiguration
+      attr_accessor in_transit_encryption_configuration: Types::InTransitEncryptionConfiguration
+      SENSITIVE: []
+    end
+
     class Endpoint
       attr_accessor id: ::String
       attr_accessor name: ::String
@@ -257,6 +294,11 @@ module Aws::EMRContainers
       SENSITIVE: []
     end
 
+    class InTransitEncryptionConfiguration
+      attr_accessor tls_certificate_configuration: Types::TLSCertificateConfiguration
+      SENSITIVE: []
+    end
+
     class InternalServerException
       attr_accessor message: ::String
       SENSITIVE: []
@@ -313,6 +355,13 @@ module Aws::EMRContainers
       SENSITIVE: []
     end
 
+    class LakeFormationConfiguration
+      attr_accessor authorized_session_tag_value: ::String
+      attr_accessor secure_namespace_info: Types::SecureNamespaceInfo
+      attr_accessor query_engine_role_arn: ::String
+      SENSITIVE: []
+    end
+
     class ListJobRunsRequest
       attr_accessor virtual_cluster_id: ::String
       attr_accessor created_before: ::Time
@@ -361,6 +410,20 @@ module Aws::EMRContainers
       SENSITIVE: []
     end
 
+    class ListSecurityConfigurationsRequest
+      attr_accessor created_after: ::Time
+      attr_accessor created_before: ::Time
+      attr_accessor max_results: ::Integer
+      attr_accessor next_token: ::String
+      SENSITIVE: []
+    end
+
+    class ListSecurityConfigurationsResponse
+      attr_accessor security_configurations: ::Array[Types::SecurityConfiguration]
+      attr_accessor next_token: ::String
+      SENSITIVE: []
+    end
+
     class ListTagsForResourceRequest
       attr_accessor resource_arn: ::String
       SENSITIVE: []
@@ -446,6 +509,28 @@ module Aws::EMRContainers
       SENSITIVE: []
     end
 
+    class SecureNamespaceInfo
+      attr_accessor cluster_id: ::String
+      attr_accessor namespace: ::String
+      SENSITIVE: []
+    end
+
+    class SecurityConfiguration
+      attr_accessor id: ::String
+      attr_accessor name: ::String
+      attr_accessor arn: ::String
+      attr_accessor created_at: ::Time
+      attr_accessor created_by: ::String
+      attr_accessor security_configuration_data: Types::SecurityConfigurationData
+      attr_accessor tags: ::Hash[::String, ::String]
+      SENSITIVE: []
+    end
+
+    class SecurityConfigurationData
+      attr_accessor authorization_configuration: Types::AuthorizationConfiguration
+      SENSITIVE: []
+    end
+
     class SparkSqlJobDriver
       attr_accessor entry_point: ::String
       attr_accessor spark_sql_parameters: ::String
@@ -482,6 +567,13 @@ module Aws::EMRContainers
       SENSITIVE: []
     end
 
+    class TLSCertificateConfiguration
+      attr_accessor certificate_provider_type: ("PEM")
+      attr_accessor public_certificate_secret_arn: ::String
+      attr_accessor private_certificate_secret_arn: ::String
+      SENSITIVE: []
+    end
+
     class TagResourceRequest
       attr_accessor resource_arn: ::String
       attr_accessor tags: ::Hash[::String, ::String]
@@ -519,6 +611,7 @@ module Aws::EMRContainers
       attr_accessor container_provider: Types::ContainerProvider
       attr_accessor created_at: ::Time
       attr_accessor tags: ::Hash[::String, ::String]
+      attr_accessor security_configuration_id: ::String
       SENSITIVE: []
     end
   end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-emrcontainers
 version: !ruby/object:Gem::Version
-  version: 1.32.0
+  version: 1.33.0
 platform: ruby
 authors:
 - Amazon Web Services
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2024-04-04 00:00:00.000000000 Z
+date: 2024-04-24 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-core