aws-sdk-glue 1.226.0 → 1.227.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a47a65aeca8425926f09dd34c3c6cfc26930870f5fb553502ef72844e49ba815
-  data.tar.gz: 903ad914547f1ad60e1d859ce1dc858a46a42c8a27440299e536341d21757449
+  metadata.gz: fd4db2253a2d223a901c52c87ae68c6d9d14339f8e816d5681992945cbe539f7
+  data.tar.gz: 767b580fa6b5aabec5b97250622afd3f66115f4c1013408bd281d39226fe57ba
 SHA512:
-  metadata.gz: b5aba125aa76f25e6f359984084012217ae629e1897e873e26188849e70dbeb872e3a417931488194038a6ffb7ec1479db5018e82b89a64b57e2a9600889586f
-  data.tar.gz: 1270dfcc9cf8dca85bc3b9fffbb0e119db819897306277a592e3a0f707b09811c3edb656541c3d4d8655c7fcbc0e9730e08b65b0a2e26f4f3875315d141af1b6
+  metadata.gz: c92248b839f721bc34abd6f2d24776ad4390d6fd8330e84f27a8387b98c0ebcd58adca87fc62fe7d7cf7d51891865870560e1297f1ecec2d0490ea07c1797db9
+  data.tar.gz: 80255322c34432368e5c830a0a98de1253c6633ecabbb59a1a5199746c1bd899d610e9a63df234ba2618d5f3b841ed8d703989289039d56258cc75ee418019fb

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.227.0 (2025-07-23)
+------------------
+
+* Feature - AWS Glue now supports dynamic session policies for job executions. This feature allows you to specify custom, fine-grained permissions for each job run without creating multiple IAM roles.
+
 1.226.0 (2025-07-21)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.226.0
+1.227.0

data/lib/aws-sdk-glue/client.rb

@@ -2473,6 +2473,7 @@ module Aws::Glue
     #   resp.workflows[0].last_run.graph.nodes[0].job_details.job_runs[0].maintenance_window #=> String
     #   resp.workflows[0].last_run.graph.nodes[0].job_details.job_runs[0].profile_name #=> String
     #   resp.workflows[0].last_run.graph.nodes[0].job_details.job_runs[0].state_detail #=> String
+    #   resp.workflows[0].last_run.graph.nodes[0].job_details.job_runs[0].execution_role_session_policy #=> String
     #   resp.workflows[0].last_run.graph.nodes[0].crawler_details.crawls #=> Array
     #   resp.workflows[0].last_run.graph.nodes[0].crawler_details.crawls[0].state #=> String, one of "RUNNING", "CANCELLING", "CANCELLED", "SUCCEEDED", "FAILED", "ERROR"
     #   resp.workflows[0].last_run.graph.nodes[0].crawler_details.crawls[0].started_on #=> Time
@@ -2546,6 +2547,7 @@ module Aws::Glue
     #   resp.workflows[0].graph.nodes[0].job_details.job_runs[0].maintenance_window #=> String
     #   resp.workflows[0].graph.nodes[0].job_details.job_runs[0].profile_name #=> String
     #   resp.workflows[0].graph.nodes[0].job_details.job_runs[0].state_detail #=> String
+    #   resp.workflows[0].graph.nodes[0].job_details.job_runs[0].execution_role_session_policy #=> String
     #   resp.workflows[0].graph.nodes[0].crawler_details.crawls #=> Array
     #   resp.workflows[0].graph.nodes[0].crawler_details.crawls[0].state #=> String, one of "RUNNING", "CANCELLING", "CANCELLED", "SUCCEEDED", "FAILED", "ERROR"
     #   resp.workflows[0].graph.nodes[0].crawler_details.crawls[0].started_on #=> Time
@@ -10315,6 +10317,7 @@ module Aws::Glue
     #   resp.job_run.maintenance_window #=> String
     #   resp.job_run.profile_name #=> String
     #   resp.job_run.state_detail #=> String
+    #   resp.job_run.execution_role_session_policy #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/glue-2017-03-31/GetJobRun AWS API Documentation
     #
@@ -10389,6 +10392,7 @@ module Aws::Glue
     #   resp.job_runs[0].maintenance_window #=> String
     #   resp.job_runs[0].profile_name #=> String
     #   resp.job_runs[0].state_detail #=> String
+    #   resp.job_runs[0].execution_role_session_policy #=> String
     #   resp.next_token #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/glue-2017-03-31/GetJobRuns AWS API Documentation
@@ -14537,6 +14541,7 @@ module Aws::Glue
     #   resp.workflow.last_run.graph.nodes[0].job_details.job_runs[0].maintenance_window #=> String
     #   resp.workflow.last_run.graph.nodes[0].job_details.job_runs[0].profile_name #=> String
     #   resp.workflow.last_run.graph.nodes[0].job_details.job_runs[0].state_detail #=> String
+    #   resp.workflow.last_run.graph.nodes[0].job_details.job_runs[0].execution_role_session_policy #=> String
     #   resp.workflow.last_run.graph.nodes[0].crawler_details.crawls #=> Array
     #   resp.workflow.last_run.graph.nodes[0].crawler_details.crawls[0].state #=> String, one of "RUNNING", "CANCELLING", "CANCELLED", "SUCCEEDED", "FAILED", "ERROR"
     #   resp.workflow.last_run.graph.nodes[0].crawler_details.crawls[0].started_on #=> Time
@@ -14610,6 +14615,7 @@ module Aws::Glue
     #   resp.workflow.graph.nodes[0].job_details.job_runs[0].maintenance_window #=> String
     #   resp.workflow.graph.nodes[0].job_details.job_runs[0].profile_name #=> String
     #   resp.workflow.graph.nodes[0].job_details.job_runs[0].state_detail #=> String
+    #   resp.workflow.graph.nodes[0].job_details.job_runs[0].execution_role_session_policy #=> String
     #   resp.workflow.graph.nodes[0].crawler_details.crawls #=> Array
     #   resp.workflow.graph.nodes[0].crawler_details.crawls[0].state #=> String, one of "RUNNING", "CANCELLING", "CANCELLED", "SUCCEEDED", "FAILED", "ERROR"
     #   resp.workflow.graph.nodes[0].crawler_details.crawls[0].started_on #=> Time
@@ -14737,6 +14743,7 @@ module Aws::Glue
     #   resp.run.graph.nodes[0].job_details.job_runs[0].maintenance_window #=> String
     #   resp.run.graph.nodes[0].job_details.job_runs[0].profile_name #=> String
     #   resp.run.graph.nodes[0].job_details.job_runs[0].state_detail #=> String
+    #   resp.run.graph.nodes[0].job_details.job_runs[0].execution_role_session_policy #=> String
     #   resp.run.graph.nodes[0].crawler_details.crawls #=> Array
     #   resp.run.graph.nodes[0].crawler_details.crawls[0].state #=> String, one of "RUNNING", "CANCELLING", "CANCELLED", "SUCCEEDED", "FAILED", "ERROR"
     #   resp.run.graph.nodes[0].crawler_details.crawls[0].started_on #=> Time
@@ -14903,6 +14910,7 @@ module Aws::Glue
     #   resp.runs[0].graph.nodes[0].job_details.job_runs[0].maintenance_window #=> String
     #   resp.runs[0].graph.nodes[0].job_details.job_runs[0].profile_name #=> String
     #   resp.runs[0].graph.nodes[0].job_details.job_runs[0].state_detail #=> String
+    #   resp.runs[0].graph.nodes[0].job_details.job_runs[0].execution_role_session_policy #=> String
     #   resp.runs[0].graph.nodes[0].crawler_details.crawls #=> Array
     #   resp.runs[0].graph.nodes[0].crawler_details.crawls[0].state #=> String, one of "RUNNING", "CANCELLING", "CANCELLED", "SUCCEEDED", "FAILED", "ERROR"
     #   resp.runs[0].graph.nodes[0].crawler_details.crawls[0].started_on #=> Time
@@ -17833,6 +17841,12 @@ module Aws::Glue
     #   will be allowed to set `ExecutionClass` to `FLEX`. The flexible
     #   execution class is available for Spark jobs.
     #
+    # @option params [String] :execution_role_session_policy
+    #   This inline session policy to the StartJobRun API allows you to
+    #   dynamically restrict the permissions of the specified execution role
+    #   for the scope of the job, without requiring the creation of additional
+    #   IAM roles.
+    #
     # @return [Types::StartJobRunResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::StartJobRunResponse#job_run_id #job_run_id} => String
@@ -17856,6 +17870,7 @@ module Aws::Glue
     #     worker_type: "Standard", # accepts Standard, G.1X, G.2X, G.025X, G.4X, G.8X, Z.2X
     #     number_of_workers: 1,
     #     execution_class: "FLEX", # accepts FLEX, STANDARD
+    #     execution_role_session_policy: "OrchestrationPolicyJsonString",
     #   })
     #
     # @example Response structure
@@ -20467,7 +20482,7 @@ module Aws::Glue
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-glue'
-      context[:gem_version] = '1.226.0'
+      context[:gem_version] = '1.227.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-glue/client_api.rb

@@ -1073,6 +1073,7 @@ module Aws::Glue
     OrchestrationNameString = Shapes::StringShape.new(name: 'OrchestrationNameString')
     OrchestrationPageSize200 = Shapes::IntegerShape.new(name: 'OrchestrationPageSize200')
     OrchestrationPageSize25 = Shapes::IntegerShape.new(name: 'OrchestrationPageSize25')
+    OrchestrationPolicyJsonString = Shapes::StringShape.new(name: 'OrchestrationPolicyJsonString')
     OrchestrationRoleArn = Shapes::StringShape.new(name: 'OrchestrationRoleArn')
     OrchestrationS3Location = Shapes::StringShape.new(name: 'OrchestrationS3Location')
     OrchestrationStatementCodeString = Shapes::StringShape.new(name: 'OrchestrationStatementCodeString')
@@ -5044,6 +5045,7 @@ module Aws::Glue
     JobRun.add_member(:maintenance_window, Shapes::ShapeRef.new(shape: MaintenanceWindow, location_name: "MaintenanceWindow"))
     JobRun.add_member(:profile_name, Shapes::ShapeRef.new(shape: NameString, location_name: "ProfileName"))
     JobRun.add_member(:state_detail, Shapes::ShapeRef.new(shape: OrchestrationMessageString, location_name: "StateDetail"))
+    JobRun.add_member(:execution_role_session_policy, Shapes::ShapeRef.new(shape: OrchestrationPolicyJsonString, location_name: "ExecutionRoleSessionPolicy"))
     JobRun.struct_class = Types::JobRun
 
     JobRunList.member = Shapes::ShapeRef.new(shape: JobRun)
@@ -6568,6 +6570,7 @@ module Aws::Glue
     StartJobRunRequest.add_member(:worker_type, Shapes::ShapeRef.new(shape: WorkerType, location_name: "WorkerType"))
     StartJobRunRequest.add_member(:number_of_workers, Shapes::ShapeRef.new(shape: NullableInteger, location_name: "NumberOfWorkers"))
     StartJobRunRequest.add_member(:execution_class, Shapes::ShapeRef.new(shape: ExecutionClass, location_name: "ExecutionClass"))
+    StartJobRunRequest.add_member(:execution_role_session_policy, Shapes::ShapeRef.new(shape: OrchestrationPolicyJsonString, location_name: "ExecutionRoleSessionPolicy"))
     StartJobRunRequest.struct_class = Types::StartJobRunRequest
 
     StartJobRunResponse.add_member(:job_run_id, Shapes::ShapeRef.new(shape: IdString, location_name: "JobRunId"))

data/lib/aws-sdk-glue/types.rb

@@ -17505,6 +17505,13 @@ module Aws::Glue
     #   state.
     #   @return [String]
     #
+    # @!attribute [rw] execution_role_session_policy
+    #   This inline session policy to the StartJobRun API allows you to
+    #   dynamically restrict the permissions of the specified execution role
+    #   for the scope of the job, without requiring the creation of
+    #   additional IAM roles.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/glue-2017-03-31/JobRun AWS API Documentation
     #
     class JobRun < Struct.new(
@@ -17536,7 +17543,8 @@ module Aws::Glue
       :execution_class,
       :maintenance_window,
       :profile_name,
-      :state_detail)
+      :state_detail,
+      :execution_role_session_policy)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -17708,48 +17716,12 @@ module Aws::Glue
     # @!attribute [rw] worker_type
     #   The type of predefined worker that is allocated when a job runs.
     #   Accepts a value of G.1X, G.2X, G.4X, G.8X or G.025X for Spark jobs.
-    #   Accepts the value Z.2X for Ray jobs.
-    #
-    #   * For the `G.1X` worker type, each worker maps to 1 DPU (4 vCPUs, 16
-    #     GB of memory) with 94GB disk, and provides 1 executor per worker.
-    #     We recommend this worker type for workloads such as data
-    #     transforms, joins, and queries, to offers a scalable and cost
-    #     effective way to run most jobs.
-    #
-    #   * For the `G.2X` worker type, each worker maps to 2 DPU (8 vCPUs, 32
-    #     GB of memory) with 138GB disk, and provides 1 executor per worker.
-    #     We recommend this worker type for workloads such as data
-    #     transforms, joins, and queries, to offers a scalable and cost
-    #     effective way to run most jobs.
-    #
-    #   * For the `G.4X` worker type, each worker maps to 4 DPU (16 vCPUs,
-    #     64 GB of memory) with 256GB disk, and provides 1 executor per
-    #     worker. We recommend this worker type for jobs whose workloads
-    #     contain your most demanding transforms, aggregations, joins, and
-    #     queries. This worker type is available only for Glue version 3.0
-    #     or later Spark ETL jobs in the following Amazon Web Services
-    #     Regions: US East (Ohio), US East (N. Virginia), US West (Oregon),
-    #     Asia Pacific (Singapore), Asia Pacific (Sydney), Asia Pacific
-    #     (Tokyo), Canada (Central), Europe (Frankfurt), Europe (Ireland),
-    #     and Europe (Stockholm).
+    #   Accepts the value Z.2X for Ray jobs. For more information, see
+    #   [Defining job properties for Spark jobs ][1]
     #
-    #   * For the `G.8X` worker type, each worker maps to 8 DPU (32 vCPUs,
-    #     128 GB of memory) with 512GB disk, and provides 1 executor per
-    #     worker. We recommend this worker type for jobs whose workloads
-    #     contain your most demanding transforms, aggregations, joins, and
-    #     queries. This worker type is available only for Glue version 3.0
-    #     or later Spark ETL jobs, in the same Amazon Web Services Regions
-    #     as supported for the `G.4X` worker type.
     #
-    #   * For the `G.025X` worker type, each worker maps to 0.25 DPU (2
-    #     vCPUs, 4 GB of memory) with 84GB disk, and provides 1 executor per
-    #     worker. We recommend this worker type for low volume streaming
-    #     jobs. This worker type is only available for Glue version 3.0 or
-    #     later streaming jobs.
     #
-    #   * For the `Z.2X` worker type, each worker maps to 2 M-DPU (8vCPUs,
-    #     64 GB of memory) with 128 GB disk, and provides up to 8 Ray
-    #     workers based on the autoscaler.
+    #   [1]: https://docs.aws.amazon.com/glue/latest/dg/add-job.html#create-job
     #   @return [String]
     #
     # @!attribute [rw] number_of_workers
@@ -25017,6 +24989,13 @@ module Aws::Glue
     #   execution class is available for Spark jobs.
     #   @return [String]
     #
+    # @!attribute [rw] execution_role_session_policy
+    #   This inline session policy to the StartJobRun API allows you to
+    #   dynamically restrict the permissions of the specified execution role
+    #   for the scope of the job, without requiring the creation of
+    #   additional IAM roles.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/glue-2017-03-31/StartJobRunRequest AWS API Documentation
     #
     class StartJobRunRequest < Struct.new(
@@ -25031,7 +25010,8 @@ module Aws::Glue
       :notification_property,
       :worker_type,
       :number_of_workers,
-      :execution_class)
+      :execution_class,
+      :execution_role_session_policy)
       SENSITIVE = []
       include Aws::Structure
     end

data/lib/aws-sdk-glue.rb

@@ -54,7 +54,7 @@ module Aws::Glue
   autoload :EndpointProvider, 'aws-sdk-glue/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-glue/endpoints'
 
-  GEM_VERSION = '1.226.0'
+  GEM_VERSION = '1.227.0'
 
 end
 

data/sig/client.rbs

@@ -5327,7 +5327,8 @@ module Aws
                            },
                            ?worker_type: ("Standard" | "G.1X" | "G.2X" | "G.025X" | "G.4X" | "G.8X" | "Z.2X"),
                            ?number_of_workers: ::Integer,
-                           ?execution_class: ("FLEX" | "STANDARD")
+                           ?execution_class: ("FLEX" | "STANDARD"),
+                           ?execution_role_session_policy: ::String
                          ) -> _StartJobRunResponseSuccess
                        | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _StartJobRunResponseSuccess
 

data/sig/types.rbs

@@ -4242,6 +4242,7 @@ module Aws::Glue
       attr_accessor maintenance_window: ::String
       attr_accessor profile_name: ::String
       attr_accessor state_detail: ::String
+      attr_accessor execution_role_session_policy: ::String
       SENSITIVE: []
     end
 
@@ -6086,6 +6087,7 @@ module Aws::Glue
       attr_accessor worker_type: ("Standard" | "G.1X" | "G.2X" | "G.025X" | "G.4X" | "G.8X" | "Z.2X")
       attr_accessor number_of_workers: ::Integer
       attr_accessor execution_class: ("FLEX" | "STANDARD")
+      attr_accessor execution_role_session_policy: ::String
       SENSITIVE: []
     end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-glue
 version: !ruby/object:Gem::Version
-  version: 1.226.0
+  version: 1.227.0
 platform: ruby
 authors:
 - Amazon Web Services