aws-sdk-emrserverless 1.44.0 → 1.45.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a5389c8bc31e14f75052eb4e7024dd4f004d1ae02b584935b73b7bdb8c5c94c7
-  data.tar.gz: 605cce3fee188bb636db5ab7f121d5b8a6e47ef1ee23b6162ea111ab8173b56b
+  metadata.gz: b9ab9b4fb508e603021e95148d41d605eea714c03b3c2d8e2aa1c5c512677911
+  data.tar.gz: 4c70e6c0711eeef3e574c8620cffe4cb80b00aaf06aa0fb92953a40de4810c63
 SHA512:
-  metadata.gz: 9c06faa84db65a940a85302025d9f7ab4be5aae012bea4135d8a28bfe68854c182e8344b671e9e37398a11a66821db06fe217dc4b6cf12666bf8f1cc83d11f7f
-  data.tar.gz: b144fe282bbb04050cd7709aaef89447f36a174b289c7c79fc8565c0fd09a5b2498690df04f48a3ceb5f19906d784befc523af5f3bff05193bf9f4aa710de6ea
+  metadata.gz: c48a43e325cb9bf72af23f42507a4b791a65bfa74a5e3feb523d299ba81b12b49cd38b9d6da0f5cdc661a2b5adc8a510fa8c265cdcebfa0aaf729e3a0fb7b444
+  data.tar.gz: 5b65463209e3608b083b7352ab8732599d5da09bf1c38d49b18b4299b9795bb7c4cd5dda2fc5c06eb7143507a5629ca6d4aab9d35fb4248db3e86ab3deda2b7a

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.45.0 (2025-05-30)
+------------------
+
+* Feature - This release adds the capability for users to specify an optional Execution IAM policy in the StartJobRun action. The resulting permissions assumed by the job run is the intersection of the permissions in the Execution Role and the specified Execution IAM Policy.
+
 1.44.0 (2025-05-12)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.44.0
+1.45.0

data/lib/aws-sdk-emrserverless/client.rb

@@ -1202,6 +1202,11 @@ module Aws::EMRServerless
     # @option params [required, String] :execution_role_arn
     #   The execution role ARN for the job run.
     #
+    # @option params [Types::JobRunExecutionIamPolicy] :execution_iam_policy
+    #   You can pass an optional IAM policy. The resulting job IAM role
+    #   permissions will be an intersection of this policy and the policy
+    #   associated with your job execution role.
+    #
     # @option params [Types::JobDriver] :job_driver
     #   The job driver for the job run.
     #
@@ -1236,6 +1241,10 @@ module Aws::EMRServerless
     #     application_id: "ApplicationId", # required
     #     client_token: "ClientToken", # required
     #     execution_role_arn: "IAMRoleArn", # required
+    #     execution_iam_policy: {
+    #       policy: "PolicyDocument",
+    #       policy_arns: ["Arn"],
+    #     },
     #     job_driver: {
     #       spark_submit: {
     #         entry_point: "EntryPointPath", # required
@@ -1648,7 +1657,7 @@ module Aws::EMRServerless
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-emrserverless'
-      context[:gem_version] = '1.44.0'
+      context[:gem_version] = '1.45.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-emrserverless/client_api.rb

@@ -23,6 +23,7 @@ module Aws::EMRServerless
     ApplicationStateSet = Shapes::ListShape.new(name: 'ApplicationStateSet')
     ApplicationSummary = Shapes::StructureShape.new(name: 'ApplicationSummary')
     Architecture = Shapes::StringShape.new(name: 'Architecture')
+    Arn = Shapes::StringShape.new(name: 'Arn')
     AttemptNumber = Shapes::IntegerShape.new(name: 'AttemptNumber')
     AutoStartConfig = Shapes::StructureShape.new(name: 'AutoStartConfig')
     AutoStopConfig = Shapes::StructureShape.new(name: 'AutoStopConfig')
@@ -77,6 +78,7 @@ module Aws::EMRServerless
     JobRun = Shapes::StructureShape.new(name: 'JobRun')
     JobRunAttemptSummary = Shapes::StructureShape.new(name: 'JobRunAttemptSummary')
     JobRunAttempts = Shapes::ListShape.new(name: 'JobRunAttempts')
+    JobRunExecutionIamPolicy = Shapes::StructureShape.new(name: 'JobRunExecutionIamPolicy')
     JobRunId = Shapes::StringShape.new(name: 'JobRunId')
     JobRunMode = Shapes::StringShape.new(name: 'JobRunMode')
     JobRunState = Shapes::StringShape.new(name: 'JobRunState')
@@ -107,6 +109,8 @@ module Aws::EMRServerless
     MonitoringConfiguration = Shapes::StructureShape.new(name: 'MonitoringConfiguration')
     NetworkConfiguration = Shapes::StructureShape.new(name: 'NetworkConfiguration')
     NextToken = Shapes::StringShape.new(name: 'NextToken')
+    PolicyArnList = Shapes::ListShape.new(name: 'PolicyArnList')
+    PolicyDocument = Shapes::StringShape.new(name: 'PolicyDocument')
     PrometheusMonitoringConfiguration = Shapes::StructureShape.new(name: 'PrometheusMonitoringConfiguration')
     PrometheusUrlString = Shapes::StringShape.new(name: 'PrometheusUrlString')
     Query = Shapes::StringShape.new(name: 'Query')
@@ -369,6 +373,10 @@ module Aws::EMRServerless
 
     JobRunAttempts.member = Shapes::ShapeRef.new(shape: JobRunAttemptSummary)
 
+    JobRunExecutionIamPolicy.add_member(:policy, Shapes::ShapeRef.new(shape: PolicyDocument, location_name: "policy"))
+    JobRunExecutionIamPolicy.add_member(:policy_arns, Shapes::ShapeRef.new(shape: PolicyArnList, location_name: "policyArns"))
+    JobRunExecutionIamPolicy.struct_class = Types::JobRunExecutionIamPolicy
+
     JobRunStateSet.member = Shapes::ShapeRef.new(shape: JobRunState)
 
     JobRunSummary.add_member(:application_id, Shapes::ShapeRef.new(shape: ApplicationId, required: true, location_name: "applicationId"))
@@ -453,6 +461,8 @@ module Aws::EMRServerless
     NetworkConfiguration.add_member(:security_group_ids, Shapes::ShapeRef.new(shape: SecurityGroupIds, location_name: "securityGroupIds"))
     NetworkConfiguration.struct_class = Types::NetworkConfiguration
 
+    PolicyArnList.member = Shapes::ShapeRef.new(shape: Arn)
+
     PrometheusMonitoringConfiguration.add_member(:remote_write_url, Shapes::ShapeRef.new(shape: PrometheusUrlString, location_name: "remoteWriteUrl"))
     PrometheusMonitoringConfiguration.struct_class = Types::PrometheusMonitoringConfiguration
 
@@ -497,6 +507,7 @@ module Aws::EMRServerless
     StartJobRunRequest.add_member(:application_id, Shapes::ShapeRef.new(shape: ApplicationId, required: true, location: "uri", location_name: "applicationId"))
     StartJobRunRequest.add_member(:client_token, Shapes::ShapeRef.new(shape: ClientToken, required: true, location_name: "clientToken", metadata: {"idempotencyToken" => true}))
     StartJobRunRequest.add_member(:execution_role_arn, Shapes::ShapeRef.new(shape: IAMRoleArn, required: true, location_name: "executionRoleArn"))
+    StartJobRunRequest.add_member(:execution_iam_policy, Shapes::ShapeRef.new(shape: JobRunExecutionIamPolicy, location_name: "executionIamPolicy"))
     StartJobRunRequest.add_member(:job_driver, Shapes::ShapeRef.new(shape: JobDriver, location_name: "jobDriver"))
     StartJobRunRequest.add_member(:configuration_overrides, Shapes::ShapeRef.new(shape: ConfigurationOverrides, location_name: "configurationOverrides"))
     StartJobRunRequest.add_member(:tags, Shapes::ShapeRef.new(shape: TagMap, location_name: "tags"))
@@ -607,8 +618,8 @@ module Aws::EMRServerless
         o.input = Shapes::ShapeRef.new(shape: CancelJobRunRequest)
         o.output = Shapes::ShapeRef.new(shape: CancelJobRunResponse)
         o.errors << Shapes::ShapeRef.new(shape: ValidationException)
-        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
         o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
+        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
       end)
 
       api.add_operation(:create_application, Seahorse::Model::Operation.new.tap do |o|
@@ -618,8 +629,8 @@ module Aws::EMRServerless
         o.input = Shapes::ShapeRef.new(shape: CreateApplicationRequest)
         o.output = Shapes::ShapeRef.new(shape: CreateApplicationResponse)
         o.errors << Shapes::ShapeRef.new(shape: ValidationException)
-        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
         o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
+        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
         o.errors << Shapes::ShapeRef.new(shape: ConflictException)
       end)
 
@@ -630,8 +641,8 @@ module Aws::EMRServerless
         o.input = Shapes::ShapeRef.new(shape: DeleteApplicationRequest)
         o.output = Shapes::ShapeRef.new(shape: DeleteApplicationResponse)
         o.errors << Shapes::ShapeRef.new(shape: ValidationException)
-        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
         o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
+        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
       end)
 
       api.add_operation(:get_application, Seahorse::Model::Operation.new.tap do |o|
@@ -641,8 +652,8 @@ module Aws::EMRServerless
         o.input = Shapes::ShapeRef.new(shape: GetApplicationRequest)
         o.output = Shapes::ShapeRef.new(shape: GetApplicationResponse)
         o.errors << Shapes::ShapeRef.new(shape: ValidationException)
-        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
         o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
+        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
       end)
 
       api.add_operation(:get_dashboard_for_job_run, Seahorse::Model::Operation.new.tap do |o|
@@ -663,8 +674,8 @@ module Aws::EMRServerless
         o.input = Shapes::ShapeRef.new(shape: GetJobRunRequest)
         o.output = Shapes::ShapeRef.new(shape: GetJobRunResponse)
         o.errors << Shapes::ShapeRef.new(shape: ValidationException)
-        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
         o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
+        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
       end)
 
       api.add_operation(:list_applications, Seahorse::Model::Operation.new.tap do |o|
@@ -690,8 +701,8 @@ module Aws::EMRServerless
         o.input = Shapes::ShapeRef.new(shape: ListJobRunAttemptsRequest)
         o.output = Shapes::ShapeRef.new(shape: ListJobRunAttemptsResponse)
         o.errors << Shapes::ShapeRef.new(shape: ValidationException)
-        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
         o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
+        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
         o[:pager] = Aws::Pager.new(
           limit_key: "max_results",
           tokens: {
@@ -723,8 +734,8 @@ module Aws::EMRServerless
         o.input = Shapes::ShapeRef.new(shape: ListTagsForResourceRequest)
         o.output = Shapes::ShapeRef.new(shape: ListTagsForResourceResponse)
         o.errors << Shapes::ShapeRef.new(shape: ValidationException)
-        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
         o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
+        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
       end)
 
       api.add_operation(:start_application, Seahorse::Model::Operation.new.tap do |o|
@@ -734,8 +745,8 @@ module Aws::EMRServerless
         o.input = Shapes::ShapeRef.new(shape: StartApplicationRequest)
         o.output = Shapes::ShapeRef.new(shape: StartApplicationResponse)
         o.errors << Shapes::ShapeRef.new(shape: ValidationException)
-        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
         o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
+        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
         o.errors << Shapes::ShapeRef.new(shape: ServiceQuotaExceededException)
       end)
 
@@ -758,8 +769,8 @@ module Aws::EMRServerless
         o.input = Shapes::ShapeRef.new(shape: StopApplicationRequest)
         o.output = Shapes::ShapeRef.new(shape: StopApplicationResponse)
         o.errors << Shapes::ShapeRef.new(shape: ValidationException)
-        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
         o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
+        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
       end)
 
       api.add_operation(:tag_resource, Seahorse::Model::Operation.new.tap do |o|
@@ -769,8 +780,8 @@ module Aws::EMRServerless
         o.input = Shapes::ShapeRef.new(shape: TagResourceRequest)
         o.output = Shapes::ShapeRef.new(shape: TagResourceResponse)
         o.errors << Shapes::ShapeRef.new(shape: ValidationException)
-        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
         o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
+        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
       end)
 
       api.add_operation(:untag_resource, Seahorse::Model::Operation.new.tap do |o|
@@ -780,8 +791,8 @@ module Aws::EMRServerless
         o.input = Shapes::ShapeRef.new(shape: UntagResourceRequest)
         o.output = Shapes::ShapeRef.new(shape: UntagResourceResponse)
         o.errors << Shapes::ShapeRef.new(shape: ValidationException)
-        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
         o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
+        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
       end)
 
       api.add_operation(:update_application, Seahorse::Model::Operation.new.tap do |o|
@@ -791,8 +802,8 @@ module Aws::EMRServerless
         o.input = Shapes::ShapeRef.new(shape: UpdateApplicationRequest)
         o.output = Shapes::ShapeRef.new(shape: UpdateApplicationResponse)
         o.errors << Shapes::ShapeRef.new(shape: ValidationException)
-        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
         o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
+        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
       end)
     end
 

data/lib/aws-sdk-emrserverless/types.rb

@@ -1039,6 +1039,28 @@ module Aws::EMRServerless
       include Aws::Structure
     end
 
+    # Optional IAM policy. The resulting job IAM role permissions will be an
+    # intersection of the policies passed and the policy associated with
+    # your job execution role.
+    #
+    # @!attribute [rw] policy
+    #   An IAM inline policy to use as an execution IAM policy.
+    #   @return [String]
+    #
+    # @!attribute [rw] policy_arns
+    #   A list of Amazon Resource Names (ARNs) to use as an execution IAM
+    #   policy.
+    #   @return [Array<String>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/emr-serverless-2021-07-13/JobRunExecutionIamPolicy AWS API Documentation
+    #
+    class JobRunExecutionIamPolicy < Struct.new(
+      :policy,
+      :policy_arns)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # The summary of attributes associated with a job run.
     #
     # @!attribute [rw] application_id
@@ -1594,6 +1616,12 @@ module Aws::EMRServerless
     #   The execution role ARN for the job run.
     #   @return [String]
     #
+    # @!attribute [rw] execution_iam_policy
+    #   You can pass an optional IAM policy. The resulting job IAM role
+    #   permissions will be an intersection of this policy and the policy
+    #   associated with your job execution role.
+    #   @return [Types::JobRunExecutionIamPolicy]
+    #
     # @!attribute [rw] job_driver
     #   The job driver for the job run.
     #   @return [Types::JobDriver]
@@ -1629,6 +1657,7 @@ module Aws::EMRServerless
       :application_id,
       :client_token,
       :execution_role_arn,
+      :execution_iam_policy,
       :job_driver,
       :configuration_overrides,
       :tags,

data/lib/aws-sdk-emrserverless.rb

@@ -54,7 +54,7 @@ module Aws::EMRServerless
   autoload :EndpointProvider, 'aws-sdk-emrserverless/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-emrserverless/endpoints'
 
-  GEM_VERSION = '1.44.0'
+  GEM_VERSION = '1.45.0'
 
 end
 

data/sig/client.rbs

@@ -292,6 +292,10 @@ module Aws
                            application_id: ::String,
                            client_token: ::String,
                            execution_role_arn: ::String,
+                           ?execution_iam_policy: {
+                             policy: ::String?,
+                             policy_arns: Array[::String]?
+                           },
                            ?job_driver: {
                              spark_submit: {
                                entry_point: ::String,

data/sig/types.rbs

@@ -268,6 +268,12 @@ module Aws::EMRServerless
       SENSITIVE: []
     end
 
+    class JobRunExecutionIamPolicy
+      attr_accessor policy: ::String
+      attr_accessor policy_arns: ::Array[::String]
+      SENSITIVE: []
+    end
+
     class JobRunSummary
       attr_accessor application_id: ::String
       attr_accessor id: ::String
@@ -428,6 +434,7 @@ module Aws::EMRServerless
       attr_accessor application_id: ::String
       attr_accessor client_token: ::String
       attr_accessor execution_role_arn: ::String
+      attr_accessor execution_iam_policy: Types::JobRunExecutionIamPolicy
       attr_accessor job_driver: Types::JobDriver
       attr_accessor configuration_overrides: Types::ConfigurationOverrides
       attr_accessor tags: ::Hash[::String, ::String]

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-emrserverless
 version: !ruby/object:Gem::Version
-  version: 1.44.0
+  version: 1.45.0
 platform: ruby
 authors:
 - Amazon Web Services