aws-sdk-glue 1.225.0 → 1.227.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: '08cb28fb64ca083a23730de8cd400105d6063adadb6887fde739dbffa09a6043'
-  data.tar.gz: f476ad3df01a24b7d1c6493c6b403cd051b41d1e1ae860d8e3569cdf37eafea3
+  metadata.gz: fd4db2253a2d223a901c52c87ae68c6d9d14339f8e816d5681992945cbe539f7
+  data.tar.gz: 767b580fa6b5aabec5b97250622afd3f66115f4c1013408bd281d39226fe57ba
 SHA512:
-  metadata.gz: e82d408dacd9fbaad32cae7092b54e8e014da9f4c5e1c0675ba3d13ba1480c446698a3d1981325f2f6993a82723e057c7b45008bbedafd008686201bc93025f9
-  data.tar.gz: d2bf7bd1b7cbb49b74f7a99fc8a9c5c48c10af3b6a8c71acf13701c28b74d00ce7a5c5d9eda348e2e5bbcb44e2a9bd21323b1b0e4492bdf6b0277173f59bdd33
+  metadata.gz: c92248b839f721bc34abd6f2d24776ad4390d6fd8330e84f27a8387b98c0ebcd58adca87fc62fe7d7cf7d51891865870560e1297f1ecec2d0490ea07c1797db9
+  data.tar.gz: 80255322c34432368e5c830a0a98de1253c6633ecabbb59a1a5199746c1bd899d610e9a63df234ba2618d5f3b841ed8d703989289039d56258cc75ee418019fb

data/CHANGELOG.md

@@ -1,6 +1,16 @@
 Unreleased Changes
 ------------------
 
+1.227.0 (2025-07-23)
+------------------
+
+* Feature - AWS Glue now supports dynamic session policies for job executions. This feature allows you to specify custom, fine-grained permissions for each job run without creating multiple IAM roles.
+
+1.226.0 (2025-07-21)
+------------------
+
+* Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
+
 1.225.0 (2025-07-16)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.225.0
+1.227.0

data/lib/aws-sdk-glue/client.rb

@@ -95,7 +95,7 @@ module Aws::Glue
     #     class name or an instance of a plugin class.
     #
     #   @option options [required, Aws::CredentialProvider] :credentials
-    #     Your AWS credentials. This can be an instance of any one of the
+    #     Your AWS credentials used for authentication. This can be an instance of any one of the
     #     following classes:
     #
     #     * `Aws::Credentials` - Used for configuring static, non-refreshing
@@ -128,18 +128,23 @@ module Aws::Glue
     #     locations will be searched for credentials:
     #
     #     * `Aws.config[:credentials]`
+    #
     #     * The `:access_key_id`, `:secret_access_key`, `:session_token`, and
     #       `:account_id` options.
-    #     * ENV['AWS_ACCESS_KEY_ID'], ENV['AWS_SECRET_ACCESS_KEY'],
-    #       ENV['AWS_SESSION_TOKEN'], and ENV['AWS_ACCOUNT_ID']
+    #
+    #     * `ENV['AWS_ACCESS_KEY_ID']`, `ENV['AWS_SECRET_ACCESS_KEY']`,
+    #       `ENV['AWS_SESSION_TOKEN']`, and `ENV['AWS_ACCOUNT_ID']`.
+    #
     #     * `~/.aws/credentials`
+    #
     #     * `~/.aws/config`
+    #
     #     * EC2/ECS IMDS instance profile - When used by default, the timeouts
     #       are very aggressive. Construct and pass an instance of
     #       `Aws::InstanceProfileCredentials` or `Aws::ECSCredentials` to
     #       enable retries and extended timeouts. Instance profile credential
-    #       fetching can be disabled by setting ENV['AWS_EC2_METADATA_DISABLED']
-    #       to true.
+    #       fetching can be disabled by setting `ENV['AWS_EC2_METADATA_DISABLED']`
+    #       to `true`.
     #
     #   @option options [required, String] :region
     #     The AWS region to connect to.  The configured `:region` is
@@ -167,6 +172,11 @@ module Aws::Glue
     #     When false, the request will raise a `RetryCapacityNotAvailableError` and will
     #     not retry instead of sleeping.
     #
+    #   @option options [Array<String>] :auth_scheme_preference
+    #     A list of preferred authentication schemes to use when making a request. Supported values are:
+    #     `sigv4`, `sigv4a`, `httpBearerAuth`, and `noAuth`. When set using `ENV['AWS_AUTH_SCHEME_PREFERENCE']` or in
+    #     shared config as `auth_scheme_preference`, the value should be a comma-separated list.
+    #
     #   @option options [Boolean] :client_side_monitoring (false)
     #     When `true`, client-side metrics will be collected for all API requests from
     #     this client.
@@ -253,8 +263,8 @@ module Aws::Glue
     #     4 times. Used in `standard` and `adaptive` retry modes.
     #
     #   @option options [String] :profile ("default")
-    #     Used when loading credentials from the shared credentials file
-    #     at HOME/.aws/credentials.  When not specified, 'default' is used.
+    #     Used when loading credentials from the shared credentials file at `HOME/.aws/credentials`.
+    #     When not specified, 'default' is used.
     #
     #   @option options [String] :request_checksum_calculation ("when_supported")
     #     Determines when a checksum will be calculated for request payloads. Values are:
@@ -374,7 +384,7 @@ module Aws::Glue
     #     `Aws::Telemetry::OTelProvider` for telemetry provider.
     #
     #   @option options [Aws::TokenProvider] :token_provider
-    #     A Bearer Token Provider. This can be an instance of any one of the
+    #     Your Bearer token used for authentication. This can be an instance of any one of the
     #     following classes:
     #
     #     * `Aws::StaticTokenProvider` - Used for configuring static, non-refreshing
@@ -2463,6 +2473,7 @@ module Aws::Glue
     #   resp.workflows[0].last_run.graph.nodes[0].job_details.job_runs[0].maintenance_window #=> String
     #   resp.workflows[0].last_run.graph.nodes[0].job_details.job_runs[0].profile_name #=> String
     #   resp.workflows[0].last_run.graph.nodes[0].job_details.job_runs[0].state_detail #=> String
+    #   resp.workflows[0].last_run.graph.nodes[0].job_details.job_runs[0].execution_role_session_policy #=> String
     #   resp.workflows[0].last_run.graph.nodes[0].crawler_details.crawls #=> Array
     #   resp.workflows[0].last_run.graph.nodes[0].crawler_details.crawls[0].state #=> String, one of "RUNNING", "CANCELLING", "CANCELLED", "SUCCEEDED", "FAILED", "ERROR"
     #   resp.workflows[0].last_run.graph.nodes[0].crawler_details.crawls[0].started_on #=> Time
@@ -2536,6 +2547,7 @@ module Aws::Glue
     #   resp.workflows[0].graph.nodes[0].job_details.job_runs[0].maintenance_window #=> String
     #   resp.workflows[0].graph.nodes[0].job_details.job_runs[0].profile_name #=> String
     #   resp.workflows[0].graph.nodes[0].job_details.job_runs[0].state_detail #=> String
+    #   resp.workflows[0].graph.nodes[0].job_details.job_runs[0].execution_role_session_policy #=> String
     #   resp.workflows[0].graph.nodes[0].crawler_details.crawls #=> Array
     #   resp.workflows[0].graph.nodes[0].crawler_details.crawls[0].state #=> String, one of "RUNNING", "CANCELLING", "CANCELLED", "SUCCEEDED", "FAILED", "ERROR"
     #   resp.workflows[0].graph.nodes[0].crawler_details.crawls[0].started_on #=> Time
@@ -10305,6 +10317,7 @@ module Aws::Glue
     #   resp.job_run.maintenance_window #=> String
     #   resp.job_run.profile_name #=> String
     #   resp.job_run.state_detail #=> String
+    #   resp.job_run.execution_role_session_policy #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/glue-2017-03-31/GetJobRun AWS API Documentation
     #
@@ -10379,6 +10392,7 @@ module Aws::Glue
     #   resp.job_runs[0].maintenance_window #=> String
     #   resp.job_runs[0].profile_name #=> String
     #   resp.job_runs[0].state_detail #=> String
+    #   resp.job_runs[0].execution_role_session_policy #=> String
     #   resp.next_token #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/glue-2017-03-31/GetJobRuns AWS API Documentation
@@ -14527,6 +14541,7 @@ module Aws::Glue
     #   resp.workflow.last_run.graph.nodes[0].job_details.job_runs[0].maintenance_window #=> String
     #   resp.workflow.last_run.graph.nodes[0].job_details.job_runs[0].profile_name #=> String
     #   resp.workflow.last_run.graph.nodes[0].job_details.job_runs[0].state_detail #=> String
+    #   resp.workflow.last_run.graph.nodes[0].job_details.job_runs[0].execution_role_session_policy #=> String
     #   resp.workflow.last_run.graph.nodes[0].crawler_details.crawls #=> Array
     #   resp.workflow.last_run.graph.nodes[0].crawler_details.crawls[0].state #=> String, one of "RUNNING", "CANCELLING", "CANCELLED", "SUCCEEDED", "FAILED", "ERROR"
     #   resp.workflow.last_run.graph.nodes[0].crawler_details.crawls[0].started_on #=> Time
@@ -14600,6 +14615,7 @@ module Aws::Glue
     #   resp.workflow.graph.nodes[0].job_details.job_runs[0].maintenance_window #=> String
     #   resp.workflow.graph.nodes[0].job_details.job_runs[0].profile_name #=> String
     #   resp.workflow.graph.nodes[0].job_details.job_runs[0].state_detail #=> String
+    #   resp.workflow.graph.nodes[0].job_details.job_runs[0].execution_role_session_policy #=> String
     #   resp.workflow.graph.nodes[0].crawler_details.crawls #=> Array
     #   resp.workflow.graph.nodes[0].crawler_details.crawls[0].state #=> String, one of "RUNNING", "CANCELLING", "CANCELLED", "SUCCEEDED", "FAILED", "ERROR"
     #   resp.workflow.graph.nodes[0].crawler_details.crawls[0].started_on #=> Time
@@ -14727,6 +14743,7 @@ module Aws::Glue
     #   resp.run.graph.nodes[0].job_details.job_runs[0].maintenance_window #=> String
     #   resp.run.graph.nodes[0].job_details.job_runs[0].profile_name #=> String
     #   resp.run.graph.nodes[0].job_details.job_runs[0].state_detail #=> String
+    #   resp.run.graph.nodes[0].job_details.job_runs[0].execution_role_session_policy #=> String
     #   resp.run.graph.nodes[0].crawler_details.crawls #=> Array
     #   resp.run.graph.nodes[0].crawler_details.crawls[0].state #=> String, one of "RUNNING", "CANCELLING", "CANCELLED", "SUCCEEDED", "FAILED", "ERROR"
     #   resp.run.graph.nodes[0].crawler_details.crawls[0].started_on #=> Time
@@ -14893,6 +14910,7 @@ module Aws::Glue
     #   resp.runs[0].graph.nodes[0].job_details.job_runs[0].maintenance_window #=> String
     #   resp.runs[0].graph.nodes[0].job_details.job_runs[0].profile_name #=> String
     #   resp.runs[0].graph.nodes[0].job_details.job_runs[0].state_detail #=> String
+    #   resp.runs[0].graph.nodes[0].job_details.job_runs[0].execution_role_session_policy #=> String
     #   resp.runs[0].graph.nodes[0].crawler_details.crawls #=> Array
     #   resp.runs[0].graph.nodes[0].crawler_details.crawls[0].state #=> String, one of "RUNNING", "CANCELLING", "CANCELLED", "SUCCEEDED", "FAILED", "ERROR"
     #   resp.runs[0].graph.nodes[0].crawler_details.crawls[0].started_on #=> Time
@@ -17823,6 +17841,12 @@ module Aws::Glue
     #   will be allowed to set `ExecutionClass` to `FLEX`. The flexible
     #   execution class is available for Spark jobs.
     #
+    # @option params [String] :execution_role_session_policy
+    #   This inline session policy to the StartJobRun API allows you to
+    #   dynamically restrict the permissions of the specified execution role
+    #   for the scope of the job, without requiring the creation of additional
+    #   IAM roles.
+    #
     # @return [Types::StartJobRunResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::StartJobRunResponse#job_run_id #job_run_id} => String
@@ -17846,6 +17870,7 @@ module Aws::Glue
     #     worker_type: "Standard", # accepts Standard, G.1X, G.2X, G.025X, G.4X, G.8X, Z.2X
     #     number_of_workers: 1,
     #     execution_class: "FLEX", # accepts FLEX, STANDARD
+    #     execution_role_session_policy: "OrchestrationPolicyJsonString",
     #   })
     #
     # @example Response structure
@@ -20457,7 +20482,7 @@ module Aws::Glue
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-glue'
-      context[:gem_version] = '1.225.0'
+      context[:gem_version] = '1.227.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-glue/client_api.rb

@@ -1073,6 +1073,7 @@ module Aws::Glue
     OrchestrationNameString = Shapes::StringShape.new(name: 'OrchestrationNameString')
     OrchestrationPageSize200 = Shapes::IntegerShape.new(name: 'OrchestrationPageSize200')
     OrchestrationPageSize25 = Shapes::IntegerShape.new(name: 'OrchestrationPageSize25')
+    OrchestrationPolicyJsonString = Shapes::StringShape.new(name: 'OrchestrationPolicyJsonString')
     OrchestrationRoleArn = Shapes::StringShape.new(name: 'OrchestrationRoleArn')
     OrchestrationS3Location = Shapes::StringShape.new(name: 'OrchestrationS3Location')
     OrchestrationStatementCodeString = Shapes::StringShape.new(name: 'OrchestrationStatementCodeString')
@@ -5044,6 +5045,7 @@ module Aws::Glue
     JobRun.add_member(:maintenance_window, Shapes::ShapeRef.new(shape: MaintenanceWindow, location_name: "MaintenanceWindow"))
     JobRun.add_member(:profile_name, Shapes::ShapeRef.new(shape: NameString, location_name: "ProfileName"))
     JobRun.add_member(:state_detail, Shapes::ShapeRef.new(shape: OrchestrationMessageString, location_name: "StateDetail"))
+    JobRun.add_member(:execution_role_session_policy, Shapes::ShapeRef.new(shape: OrchestrationPolicyJsonString, location_name: "ExecutionRoleSessionPolicy"))
     JobRun.struct_class = Types::JobRun
 
     JobRunList.member = Shapes::ShapeRef.new(shape: JobRun)
@@ -6568,6 +6570,7 @@ module Aws::Glue
     StartJobRunRequest.add_member(:worker_type, Shapes::ShapeRef.new(shape: WorkerType, location_name: "WorkerType"))
     StartJobRunRequest.add_member(:number_of_workers, Shapes::ShapeRef.new(shape: NullableInteger, location_name: "NumberOfWorkers"))
     StartJobRunRequest.add_member(:execution_class, Shapes::ShapeRef.new(shape: ExecutionClass, location_name: "ExecutionClass"))
+    StartJobRunRequest.add_member(:execution_role_session_policy, Shapes::ShapeRef.new(shape: OrchestrationPolicyJsonString, location_name: "ExecutionRoleSessionPolicy"))
     StartJobRunRequest.struct_class = Types::StartJobRunRequest
 
     StartJobRunResponse.add_member(:job_run_id, Shapes::ShapeRef.new(shape: IdString, location_name: "JobRunId"))

data/lib/aws-sdk-glue/types.rb

@@ -17505,6 +17505,13 @@ module Aws::Glue
     #   state.
     #   @return [String]
     #
+    # @!attribute [rw] execution_role_session_policy
+    #   This inline session policy to the StartJobRun API allows you to
+    #   dynamically restrict the permissions of the specified execution role
+    #   for the scope of the job, without requiring the creation of
+    #   additional IAM roles.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/glue-2017-03-31/JobRun AWS API Documentation
     #
     class JobRun < Struct.new(
@@ -17536,7 +17543,8 @@ module Aws::Glue
       :execution_class,
       :maintenance_window,
       :profile_name,
-      :state_detail)
+      :state_detail,
+      :execution_role_session_policy)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -17708,48 +17716,12 @@ module Aws::Glue
     # @!attribute [rw] worker_type
     #   The type of predefined worker that is allocated when a job runs.
     #   Accepts a value of G.1X, G.2X, G.4X, G.8X or G.025X for Spark jobs.
-    #   Accepts the value Z.2X for Ray jobs.
-    #
-    #   * For the `G.1X` worker type, each worker maps to 1 DPU (4 vCPUs, 16
-    #     GB of memory) with 94GB disk, and provides 1 executor per worker.
-    #     We recommend this worker type for workloads such as data
-    #     transforms, joins, and queries, to offers a scalable and cost
-    #     effective way to run most jobs.
-    #
-    #   * For the `G.2X` worker type, each worker maps to 2 DPU (8 vCPUs, 32
-    #     GB of memory) with 138GB disk, and provides 1 executor per worker.
-    #     We recommend this worker type for workloads such as data
-    #     transforms, joins, and queries, to offers a scalable and cost
-    #     effective way to run most jobs.
-    #
-    #   * For the `G.4X` worker type, each worker maps to 4 DPU (16 vCPUs,
-    #     64 GB of memory) with 256GB disk, and provides 1 executor per
-    #     worker. We recommend this worker type for jobs whose workloads
-    #     contain your most demanding transforms, aggregations, joins, and
-    #     queries. This worker type is available only for Glue version 3.0
-    #     or later Spark ETL jobs in the following Amazon Web Services
-    #     Regions: US East (Ohio), US East (N. Virginia), US West (Oregon),
-    #     Asia Pacific (Singapore), Asia Pacific (Sydney), Asia Pacific
-    #     (Tokyo), Canada (Central), Europe (Frankfurt), Europe (Ireland),
-    #     and Europe (Stockholm).
+    #   Accepts the value Z.2X for Ray jobs. For more information, see
+    #   [Defining job properties for Spark jobs ][1]
     #
-    #   * For the `G.8X` worker type, each worker maps to 8 DPU (32 vCPUs,
-    #     128 GB of memory) with 512GB disk, and provides 1 executor per
-    #     worker. We recommend this worker type for jobs whose workloads
-    #     contain your most demanding transforms, aggregations, joins, and
-    #     queries. This worker type is available only for Glue version 3.0
-    #     or later Spark ETL jobs, in the same Amazon Web Services Regions
-    #     as supported for the `G.4X` worker type.
     #
-    #   * For the `G.025X` worker type, each worker maps to 0.25 DPU (2
-    #     vCPUs, 4 GB of memory) with 84GB disk, and provides 1 executor per
-    #     worker. We recommend this worker type for low volume streaming
-    #     jobs. This worker type is only available for Glue version 3.0 or
-    #     later streaming jobs.
     #
-    #   * For the `Z.2X` worker type, each worker maps to 2 M-DPU (8vCPUs,
-    #     64 GB of memory) with 128 GB disk, and provides up to 8 Ray
-    #     workers based on the autoscaler.
+    #   [1]: https://docs.aws.amazon.com/glue/latest/dg/add-job.html#create-job
     #   @return [String]
     #
     # @!attribute [rw] number_of_workers
@@ -25017,6 +24989,13 @@ module Aws::Glue
     #   execution class is available for Spark jobs.
     #   @return [String]
     #
+    # @!attribute [rw] execution_role_session_policy
+    #   This inline session policy to the StartJobRun API allows you to
+    #   dynamically restrict the permissions of the specified execution role
+    #   for the scope of the job, without requiring the creation of
+    #   additional IAM roles.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/glue-2017-03-31/StartJobRunRequest AWS API Documentation
     #
     class StartJobRunRequest < Struct.new(
@@ -25031,7 +25010,8 @@ module Aws::Glue
       :notification_property,
       :worker_type,
       :number_of_workers,
-      :execution_class)
+      :execution_class,
+      :execution_role_session_policy)
       SENSITIVE = []
       include Aws::Structure
     end

data/lib/aws-sdk-glue.rb

@@ -54,7 +54,7 @@ module Aws::Glue
   autoload :EndpointProvider, 'aws-sdk-glue/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-glue/endpoints'
 
-  GEM_VERSION = '1.225.0'
+  GEM_VERSION = '1.227.0'
 
 end
 

data/sig/client.rbs

@@ -18,6 +18,7 @@ module Aws
                       ?account_id: String,
                       ?active_endpoint_cache: bool,
                       ?adaptive_retry_wait_to_fill: bool,
+                      ?auth_scheme_preference: Array[String],
                       ?client_side_monitoring: bool,
                       ?client_side_monitoring_client_id: String,
                       ?client_side_monitoring_host: String,
@@ -5326,7 +5327,8 @@ module Aws
                            },
                            ?worker_type: ("Standard" | "G.1X" | "G.2X" | "G.025X" | "G.4X" | "G.8X" | "Z.2X"),
                            ?number_of_workers: ::Integer,
-                           ?execution_class: ("FLEX" | "STANDARD")
+                           ?execution_class: ("FLEX" | "STANDARD"),
+                           ?execution_role_session_policy: ::String
                          ) -> _StartJobRunResponseSuccess
                        | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _StartJobRunResponseSuccess
 

data/sig/resource.rbs

@@ -18,6 +18,7 @@ module Aws
                         ?account_id: String,
                         ?active_endpoint_cache: bool,
                         ?adaptive_retry_wait_to_fill: bool,
+                        ?auth_scheme_preference: Array[String],
                         ?client_side_monitoring: bool,
                         ?client_side_monitoring_client_id: String,
                         ?client_side_monitoring_host: String,

data/sig/types.rbs

@@ -4242,6 +4242,7 @@ module Aws::Glue
       attr_accessor maintenance_window: ::String
       attr_accessor profile_name: ::String
       attr_accessor state_detail: ::String
+      attr_accessor execution_role_session_policy: ::String
       SENSITIVE: []
     end
 
@@ -6086,6 +6087,7 @@ module Aws::Glue
       attr_accessor worker_type: ("Standard" | "G.1X" | "G.2X" | "G.025X" | "G.4X" | "G.8X" | "Z.2X")
       attr_accessor number_of_workers: ::Integer
       attr_accessor execution_class: ("FLEX" | "STANDARD")
+      attr_accessor execution_role_session_policy: ::String
       SENSITIVE: []
     end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-glue
 version: !ruby/object:Gem::Version
-  version: 1.225.0
+  version: 1.227.0
 platform: ruby
 authors:
 - Amazon Web Services
@@ -18,7 +18,7 @@ dependencies:
         version: '3'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.225.0
+        version: 3.227.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -28,7 +28,7 @@ dependencies:
         version: '3'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.225.0
+        version: 3.227.0
 - !ruby/object:Gem::Dependency
   name: aws-sigv4
   requirement: !ruby/object:Gem::Requirement