aws-sdk-identitystore 1.61.0 → 1.62.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 81ae79e73e3dc34ffafadacd524d96867103d7971ac4d7eba64349add070f37d
-  data.tar.gz: 38d18390635bd5177b912c9b8ae9b18313916f5dfb0c7f4be988aeff2096e777
+  metadata.gz: 037fd1fe4c913317058cad4fca70040f88e41be3e1f811a6b3ae44c902c65880
+  data.tar.gz: cc1b1f6551fae703b8be872e467185b6c881cf5c3a5cabb9c49bc3ee47464115
 SHA512:
-  metadata.gz: 403d8db17463eb9cd10a1b0e36701c15a827f517b64e91bf979fea837fff9ce3c81f6ab14233841214eea104e121f61b57384900a7429712343e4d00ca704ed8
-  data.tar.gz: c5e1f044de933689f1cade160bd3b5cd73933f69ef51d32d4fd6383b0895e21975991569b2df59b4c00673f30de82e892a539dbb70d7816672c659aa4fcd1c22
+  metadata.gz: 9042440018207f7284c41e08c4bb2dccacb0972496fa510d183b91ad739ad71c746a08171b0a3060ac51c5a95e5c1d8d13bbbc81bd7184ccce2d5c930542573d
+  data.tar.gz: 5d3d61428763bfdf1e43560a859542d56632f11853e4af5db1b8a83f612a73287540fb0b72935048192ff70517f177ebc66ffee9fd943c7b0a799b227577f708

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.62.0 (2025-12-08)
+------------------
+
+* Feature - Updating AWS Identity Store APIs to support Attribute Extensions capability, with the first release adding Enterprise Attributes. This launch aligns Identity Store APIs with SCIM for enterprise attributes, reducing cases when customers are forced to use SCIM due to lack of SigV4 API support.
+
 1.61.0 (2025-11-21)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.61.0
+1.62.0

data/lib/aws-sdk-identitystore/client.rb

@@ -639,6 +639,13 @@ module Aws::IdentityStore
     #   The user's birthdate in YYYY-MM-DD format. This field supports
     #   standard date format for storing personal information.
     #
+    # @option params [Hash<String,Hash,Array,String,Numeric,Boolean>] :extensions
+    #   A map with additional attribute extensions for the user. Each map key
+    #   corresponds to an extension name, while map values represent extension
+    #   data in `Document` type (not supported by Java V1, Go V1 and older
+    #   versions of the CLI). `aws:identitystore:enterprise` is the only
+    #   supported extension name.
+    #
     # @return [Types::CreateUserResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::CreateUserResponse#identity_store_id #identity_store_id} => String
@@ -701,6 +708,9 @@ module Aws::IdentityStore
     #     ],
     #     website: "SensitiveStringType",
     #     birthdate: "SensitiveStringType",
+    #     extensions: {
+    #       "ExtensionName" => "value", # value <Hash,Array,String,Numeric,Boolean,IO,Set,nil>
+    #     },
     #   })
     #
     # @example Response structure
@@ -943,6 +953,11 @@ module Aws::IdentityStore
     # @option params [required, String] :user_id
     #   The identifier for a user in the identity store.
     #
+    # @option params [Array<String>] :extensions
+    #   A collection of extension names indicating what extensions the service
+    #   should retrieve alongside other user attributes.
+    #   `aws:identitystore:enterprise` is the only supported extension name.
+    #
     # @return [Types::DescribeUserResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::DescribeUserResponse#identity_store_id #identity_store_id} => String
@@ -969,12 +984,14 @@ module Aws::IdentityStore
     #   * {Types::DescribeUserResponse#created_by #created_by} => String
     #   * {Types::DescribeUserResponse#updated_at #updated_at} => Time
     #   * {Types::DescribeUserResponse#updated_by #updated_by} => String
+    #   * {Types::DescribeUserResponse#extensions #extensions} => Hash&lt;String,Hash,Array,String,Numeric,Boolean&gt;
     #
     # @example Request syntax with placeholder values
     #
     #   resp = client.describe_user({
     #     identity_store_id: "IdentityStoreId", # required
     #     user_id: "ResourceId", # required
+    #     extensions: ["ExtensionName"],
     #   })
     #
     # @example Response structure
@@ -1028,6 +1045,8 @@ module Aws::IdentityStore
     #   resp.created_by #=> String
     #   resp.updated_at #=> Time
     #   resp.updated_by #=> String
+    #   resp.extensions #=> Hash
+    #   resp.extensions["ExtensionName"] #=> <Hash,Array,String,Numeric,Boolean,IO,Set,nil>
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/identitystore-2020-06-15/DescribeUser AWS API Documentation
     #
@@ -1516,6 +1535,11 @@ module Aws::IdentityStore
     #   lower case letters. This value is generated at the time that a new
     #   identity store is created.
     #
+    # @option params [Array<String>] :extensions
+    #   A collection of extension names indicating what extensions the service
+    #   should retrieve alongside other user attributes.
+    #   `aws:identitystore:enterprise` is the only supported extension name.
+    #
     # @option params [Integer] :max_results
     #   The maximum number of results to be returned per request. This
     #   parameter is used in the ` ListUsers` and `ListGroups` requests to
@@ -1544,6 +1568,7 @@ module Aws::IdentityStore
     #
     #   resp = client.list_users({
     #     identity_store_id: "IdentityStoreId", # required
+    #     extensions: ["ExtensionName"],
     #     max_results: 1,
     #     next_token: "NextToken",
     #     filters: [
@@ -1606,6 +1631,8 @@ module Aws::IdentityStore
     #   resp.users[0].created_by #=> String
     #   resp.users[0].updated_at #=> Time
     #   resp.users[0].updated_by #=> String
+    #   resp.users[0].extensions #=> Hash
+    #   resp.users[0].extensions["ExtensionName"] #=> <Hash,Array,String,Numeric,Boolean,IO,Set,nil>
     #   resp.next_token #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/identitystore-2020-06-15/ListUsers AWS API Documentation
@@ -1721,7 +1748,7 @@ module Aws::IdentityStore
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-identitystore'
-      context[:gem_version] = '1.61.0'
+      context[:gem_version] = '1.62.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-identitystore/client_api.rb

@@ -47,6 +47,9 @@ module Aws::IdentityStore
     Email = Shapes::StructureShape.new(name: 'Email')
     Emails = Shapes::ListShape.new(name: 'Emails')
     ExceptionMessage = Shapes::StringShape.new(name: 'ExceptionMessage')
+    ExtensionName = Shapes::StringShape.new(name: 'ExtensionName')
+    ExtensionNames = Shapes::ListShape.new(name: 'ExtensionNames')
+    Extensions = Shapes::MapShape.new(name: 'Extensions')
     ExternalId = Shapes::StructureShape.new(name: 'ExternalId')
     ExternalIdIdentifier = Shapes::StringShape.new(name: 'ExternalIdIdentifier')
     ExternalIdIssuer = Shapes::StringShape.new(name: 'ExternalIdIssuer')
@@ -182,6 +185,7 @@ module Aws::IdentityStore
     CreateUserRequest.add_member(:photos, Shapes::ShapeRef.new(shape: Photos, location_name: "Photos"))
     CreateUserRequest.add_member(:website, Shapes::ShapeRef.new(shape: SensitiveStringType, location_name: "Website"))
     CreateUserRequest.add_member(:birthdate, Shapes::ShapeRef.new(shape: SensitiveStringType, location_name: "Birthdate"))
+    CreateUserRequest.add_member(:extensions, Shapes::ShapeRef.new(shape: Extensions, location_name: "Extensions"))
     CreateUserRequest.struct_class = Types::CreateUserRequest
 
     CreateUserResponse.add_member(:identity_store_id, Shapes::ShapeRef.new(shape: IdentityStoreId, required: true, location_name: "IdentityStoreId"))
@@ -237,6 +241,7 @@ module Aws::IdentityStore
 
     DescribeUserRequest.add_member(:identity_store_id, Shapes::ShapeRef.new(shape: IdentityStoreId, required: true, location_name: "IdentityStoreId"))
     DescribeUserRequest.add_member(:user_id, Shapes::ShapeRef.new(shape: ResourceId, required: true, location_name: "UserId"))
+    DescribeUserRequest.add_member(:extensions, Shapes::ShapeRef.new(shape: ExtensionNames, location_name: "Extensions"))
     DescribeUserRequest.struct_class = Types::DescribeUserRequest
 
     DescribeUserResponse.add_member(:identity_store_id, Shapes::ShapeRef.new(shape: IdentityStoreId, required: true, location_name: "IdentityStoreId"))
@@ -263,6 +268,7 @@ module Aws::IdentityStore
     DescribeUserResponse.add_member(:created_by, Shapes::ShapeRef.new(shape: StringType, location_name: "CreatedBy"))
     DescribeUserResponse.add_member(:updated_at, Shapes::ShapeRef.new(shape: DateType, location_name: "UpdatedAt"))
     DescribeUserResponse.add_member(:updated_by, Shapes::ShapeRef.new(shape: StringType, location_name: "UpdatedBy"))
+    DescribeUserResponse.add_member(:extensions, Shapes::ShapeRef.new(shape: Extensions, location_name: "Extensions"))
     DescribeUserResponse.struct_class = Types::DescribeUserResponse
 
     Email.add_member(:value, Shapes::ShapeRef.new(shape: SensitiveStringType, location_name: "Value"))
@@ -272,6 +278,11 @@ module Aws::IdentityStore
 
     Emails.member = Shapes::ShapeRef.new(shape: Email)
 
+    ExtensionNames.member = Shapes::ShapeRef.new(shape: ExtensionName)
+
+    Extensions.key = Shapes::ShapeRef.new(shape: ExtensionName)
+    Extensions.value = Shapes::ShapeRef.new(shape: AttributeValue)
+
     ExternalId.add_member(:issuer, Shapes::ShapeRef.new(shape: ExternalIdIssuer, required: true, location_name: "Issuer"))
     ExternalId.add_member(:id, Shapes::ShapeRef.new(shape: ExternalIdIdentifier, required: true, location_name: "Id"))
     ExternalId.struct_class = Types::ExternalId
@@ -387,6 +398,7 @@ module Aws::IdentityStore
     ListGroupsResponse.struct_class = Types::ListGroupsResponse
 
     ListUsersRequest.add_member(:identity_store_id, Shapes::ShapeRef.new(shape: IdentityStoreId, required: true, location_name: "IdentityStoreId"))
+    ListUsersRequest.add_member(:extensions, Shapes::ShapeRef.new(shape: ExtensionNames, location_name: "Extensions"))
     ListUsersRequest.add_member(:max_results, Shapes::ShapeRef.new(shape: MaxResults, location_name: "MaxResults", metadata: {"box" => true}))
     ListUsersRequest.add_member(:next_token, Shapes::ShapeRef.new(shape: NextToken, location_name: "NextToken"))
     ListUsersRequest.add_member(:filters, Shapes::ShapeRef.new(shape: Filters, deprecated: true, location_name: "Filters", metadata: {"deprecatedMessage" => "Using filters with ListUsers API is deprecated, please use GetGroupId API instead."}))
@@ -484,6 +496,7 @@ module Aws::IdentityStore
     User.add_member(:created_by, Shapes::ShapeRef.new(shape: StringType, location_name: "CreatedBy"))
     User.add_member(:updated_at, Shapes::ShapeRef.new(shape: DateType, location_name: "UpdatedAt"))
     User.add_member(:updated_by, Shapes::ShapeRef.new(shape: StringType, location_name: "UpdatedBy"))
+    User.add_member(:extensions, Shapes::ShapeRef.new(shape: Extensions, location_name: "Extensions"))
     User.struct_class = Types::User
 
     Users.member = Shapes::ShapeRef.new(shape: User)

data/lib/aws-sdk-identitystore/types.rb

@@ -161,14 +161,9 @@ module Aws::IdentityStore
     #   @return [String]
     #
     # @!attribute [rw] reason
-    #   This request cannot be completed for one of the following reasons:
-    #
-    #   * Performing the requested operation would violate an existing
-    #     uniqueness claim in the identity store. Resolve the conflict
-    #     before retrying this request.
-    #
-    #   * The requested resource was being concurrently modified by another
-    #     request.
+    #   Indicates the reason for a conflict error when the service is unable
+    #   to access a Customer Managed KMS key. For non-KMS permission errors,
+    #   this field is not included.
     #   @return [String]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/identitystore-2020-06-15/ConflictException AWS API Documentation
@@ -353,6 +348,14 @@ module Aws::IdentityStore
     #   standard date format for storing personal information.
     #   @return [String]
     #
+    # @!attribute [rw] extensions
+    #   A map with additional attribute extensions for the user. Each map
+    #   key corresponds to an extension name, while map values represent
+    #   extension data in `Document` type (not supported by Java V1, Go V1
+    #   and older versions of the CLI). `aws:identitystore:enterprise` is
+    #   the only supported extension name.
+    #   @return [Hash<String,Hash,Array,String,Numeric,Boolean>]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/identitystore-2020-06-15/CreateUserRequest AWS API Documentation
     #
     class CreateUserRequest < Struct.new(
@@ -372,7 +375,8 @@ module Aws::IdentityStore
       :timezone,
       :photos,
       :website,
-      :birthdate)
+      :birthdate,
+      :extensions)
       SENSITIVE = [:user_name, :display_name, :nick_name, :profile_url, :user_type, :title, :preferred_language, :locale, :timezone, :website, :birthdate]
       include Aws::Structure
     end
@@ -614,11 +618,18 @@ module Aws::IdentityStore
     #   The identifier for a user in the identity store.
     #   @return [String]
     #
+    # @!attribute [rw] extensions
+    #   A collection of extension names indicating what extensions the
+    #   service should retrieve alongside other user attributes.
+    #   `aws:identitystore:enterprise` is the only supported extension name.
+    #   @return [Array<String>]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/identitystore-2020-06-15/DescribeUserRequest AWS API Documentation
     #
     class DescribeUserRequest < Struct.new(
       :identity_store_id,
-      :user_id)
+      :user_id,
+      :extensions)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -728,6 +739,11 @@ module Aws::IdentityStore
     #   The identifier of the user or system that last updated the user.
     #   @return [String]
     #
+    # @!attribute [rw] extensions
+    #   A map of explicitly requested attribute extensions associated with
+    #   the user. Not populated if the user has no requested extensions.
+    #   @return [Hash<String,Hash,Array,String,Numeric,Boolean>]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/identitystore-2020-06-15/DescribeUserResponse AWS API Documentation
     #
     class DescribeUserResponse < Struct.new(
@@ -754,7 +770,8 @@ module Aws::IdentityStore
       :created_at,
       :created_by,
       :updated_at,
-      :updated_by)
+      :updated_by,
+      :extensions)
       SENSITIVE = [:user_name, :display_name, :nick_name, :profile_url, :user_type, :title, :preferred_language, :locale, :timezone, :website, :birthdate]
       include Aws::Structure
     end
@@ -1337,6 +1354,12 @@ module Aws::IdentityStore
     #   new identity store is created.
     #   @return [String]
     #
+    # @!attribute [rw] extensions
+    #   A collection of extension names indicating what extensions the
+    #   service should retrieve alongside other user attributes.
+    #   `aws:identitystore:enterprise` is the only supported extension name.
+    #   @return [Array<String>]
+    #
     # @!attribute [rw] max_results
     #   The maximum number of results to be returned per request. This
     #   parameter is used in the ` ListUsers` and `ListGroups` requests to
@@ -1361,6 +1384,7 @@ module Aws::IdentityStore
     #
     class ListUsersRequest < Struct.new(
       :identity_store_id,
+      :extensions,
       :max_results,
       :next_token,
       :filters)
@@ -1820,6 +1844,11 @@ module Aws::IdentityStore
     #   The identifier of the user or system that last updated the user.
     #   @return [String]
     #
+    # @!attribute [rw] extensions
+    #   A map of explicitly requested attribute extensions associated with
+    #   the user. Not populated if the user has no requested extensions.
+    #   @return [Hash<String,Hash,Array,String,Numeric,Boolean>]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/identitystore-2020-06-15/User AWS API Documentation
     #
     class User < Struct.new(
@@ -1846,7 +1875,8 @@ module Aws::IdentityStore
       :created_at,
       :created_by,
       :updated_at,
-      :updated_by)
+      :updated_by,
+      :extensions)
       SENSITIVE = [:user_name, :display_name, :nick_name, :profile_url, :user_type, :title, :preferred_language, :locale, :timezone, :website, :birthdate]
       include Aws::Structure
     end

data/lib/aws-sdk-identitystore.rb

@@ -54,7 +54,7 @@ module Aws::IdentityStore
   autoload :EndpointProvider, 'aws-sdk-identitystore/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-identitystore/endpoints'
 
-  GEM_VERSION = '1.61.0'
+  GEM_VERSION = '1.62.0'
 
 end
 

data/sig/client.rbs

@@ -167,7 +167,8 @@ module Aws
                            },
                          ],
                          ?website: ::String,
-                         ?birthdate: ::String
+                         ?birthdate: ::String,
+                         ?extensions: Hash[::String, untyped]
                        ) -> _CreateUserResponseSuccess
                      | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _CreateUserResponseSuccess
 
@@ -264,11 +265,13 @@ module Aws
         def created_by: () -> ::String
         def updated_at: () -> ::Time
         def updated_by: () -> ::String
+        def extensions: () -> ::Hash[::String, untyped]
       end
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/IdentityStore/Client.html#describe_user-instance_method
       def describe_user: (
                            identity_store_id: ::String,
-                           user_id: ::String
+                           user_id: ::String,
+                           ?extensions: Array[::String]
                          ) -> _DescribeUserResponseSuccess
                        | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _DescribeUserResponseSuccess
 
@@ -400,6 +403,7 @@ module Aws
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/IdentityStore/Client.html#list_users-instance_method
       def list_users: (
                         identity_store_id: ::String,
+                        ?extensions: Array[::String],
                         ?max_results: ::Integer,
                         ?next_token: ::String,
                         ?filters: Array[

data/sig/types.rbs

@@ -98,6 +98,7 @@ module Aws::IdentityStore
       attr_accessor photos: ::Array[Types::Photo]
       attr_accessor website: ::String
       attr_accessor birthdate: ::String
+      attr_accessor extensions: ::Hash[::String, untyped]
       SENSITIVE: [:user_name, :display_name, :nick_name, :profile_url, :user_type, :title, :preferred_language, :locale, :timezone, :website, :birthdate]
     end
 
@@ -174,6 +175,7 @@ module Aws::IdentityStore
     class DescribeUserRequest
       attr_accessor identity_store_id: ::String
       attr_accessor user_id: ::String
+      attr_accessor extensions: ::Array[::String]
       SENSITIVE: []
     end
 
@@ -202,6 +204,7 @@ module Aws::IdentityStore
       attr_accessor created_by: ::String
       attr_accessor updated_at: ::Time
       attr_accessor updated_by: ::String
+      attr_accessor extensions: ::Hash[::String, untyped]
       SENSITIVE: [:user_name, :display_name, :nick_name, :profile_url, :user_type, :title, :preferred_language, :locale, :timezone, :website, :birthdate]
     end
 
@@ -356,6 +359,7 @@ module Aws::IdentityStore
 
     class ListUsersRequest
       attr_accessor identity_store_id: ::String
+      attr_accessor extensions: ::Array[::String]
       attr_accessor max_results: ::Integer
       attr_accessor next_token: ::String
       attr_accessor filters: ::Array[Types::Filter]
@@ -405,7 +409,7 @@ module Aws::IdentityStore
     end
 
     class ResourceNotFoundException
-      attr_accessor resource_type: ("GROUP" | "USER" | "IDENTITY_STORE" | "GROUP_MEMBERSHIP")
+      attr_accessor resource_type: ("GROUP" | "USER" | "IDENTITY_STORE" | "GROUP_MEMBERSHIP" | "RESOURCE_POLICY")
       attr_accessor resource_id: ::String
       attr_accessor reason: ("KMS_KEY_NOT_FOUND")
       attr_accessor message: ::String
@@ -478,6 +482,7 @@ module Aws::IdentityStore
       attr_accessor created_by: ::String
       attr_accessor updated_at: ::Time
       attr_accessor updated_by: ::String
+      attr_accessor extensions: ::Hash[::String, untyped]
       SENSITIVE: [:user_name, :display_name, :nick_name, :profile_url, :user_type, :title, :preferred_language, :locale, :timezone, :website, :birthdate]
     end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-identitystore
 version: !ruby/object:Gem::Version
-  version: 1.61.0
+  version: 1.62.0
 platform: ruby
 authors:
 - Amazon Web Services