aws-sdk-kafka 1.112.0 → 1.114.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a322420721b6f2a20f593dd363141dc21b29217df79b462e9d0169ced1f0ac67
-  data.tar.gz: c112f21f666a73243f4feb510ff4bcb0d8220c4cd18724963fac05f894411694
+  metadata.gz: f5334c81e6b1302de289098280129d4240dfd071234468b101dcea90d4d20792
+  data.tar.gz: 15454f10104a1ea1fe372523cb8939e416476ac095fd9de621685865166a14c3
 SHA512:
-  metadata.gz: 90b4fe813cdb8424e0a88ffca4fa4c1639434ca0d8b48b03d2e5da16741075acb64affccf3eb116e3f767aa2d3b8239122b605df1f614965483964e078d2c22c
-  data.tar.gz: 23745ebfe6ef448d5934650849f8987f35b4a152b73f051de287c3a2dbf54aed3ab400bb1f27ed6576354d08407cfc7a634034001ad3cf9c116b9af5649f6f35
+  metadata.gz: 953c77a3089cbfc0a6f989880f95737c8f84409f6d6057ec24e796e63ee789c91a1a979299345108fbc34edef2e63e81a62756658391a4de55b6b3591c4db20e
+  data.tar.gz: 29ca132ffd924a86cad4dad921ad3fa484e144e476e80fad7bcc2e9b3feb3c98f8af9e825bffa8665ae3a6f171fea0f3e66bf0f334d4891502c5545257f65135

data/CHANGELOG.md

@@ -1,6 +1,16 @@
 Unreleased Changes
 ------------------
 
+1.114.0 (2026-06-22)
+------------------
+
+* Feature - Amazon MSK Replicator now supports mTLS authentication when connecting to external Apache Kafka clusters, enabling customers to replicate data from clusters that require mutual TLS for client authentication. This capability is supported when replicating to Amazon MSK Express brokers.
+
+1.113.0 (2026-05-21)
+------------------
+
+* Feature - Adding new BDD representation of endpoint ruleset
+
 1.112.0 (2026-05-19)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.112.0
+1.114.0

data/lib/aws-sdk-kafka/client.rb

@@ -199,7 +199,7 @@ module Aws::Kafka
     #     the required types.
     #
     #   @option options [Boolean] :correct_clock_skew (true)
-    #     Used only in `standard` and adaptive retry modes. Specifies whether to apply
+    #     Used only in `standard` and `adaptive` retry modes. Specifies whether to apply
     #     a clock skew correction and retry requests with skewed client clocks.
     #
     #   @option options [String] :defaults_mode ("legacy")
@@ -323,17 +323,15 @@ module Aws::Kafka
     #   @option options [String] :retry_mode ("legacy")
     #     Specifies which retry algorithm to use. Values are:
     #
-    #     * `legacy` - The pre-existing retry behavior.  This is default value if
-    #       no retry mode is provided.
+    #     * `legacy` - The pre-existing retry behavior. This is the default
+    #       value if no retry mode is provided.
     #
     #     * `standard` - A standardized set of retry rules across the AWS SDKs.
     #       This includes support for retry quotas, which limit the number of
     #       unsuccessful retries a client can make.
     #
-    #     * `adaptive` - An experimental retry mode that includes all the
-    #       functionality of `standard` mode along with automatic client side
-    #       throttling.  This is a provisional mode that may change behavior
-    #       in the future.
+    #     * `adaptive` - A retry mode that includes all the functionality of
+    #       `standard` mode along with automatic client side throttling.
     #
     #   @option options [String] :sdk_ua_app_id
     #     A unique and opaque application ID that is appended to the
@@ -954,10 +952,13 @@ module Aws::Kafka
     #           subnet_ids: ["__string"], # required
     #         },
     #         client_authentication: {
-    #           sasl_scram: { # required
+    #           sasl_scram: {
     #             mechanism: "SHA256", # required, accepts SHA256, SHA512
     #             secret_arn: "__string", # required
     #           },
+    #           mtls: {
+    #             secret_arn: "__string", # required
+    #           },
     #         },
     #         encryption_in_transit: {
     #           encryption_type: "TLS", # required, accepts TLS
@@ -1852,6 +1853,7 @@ module Aws::Kafka
     #   resp.kafka_clusters[0].vpc_config.subnet_ids[0] #=> String
     #   resp.kafka_clusters[0].client_authentication.sasl_scram.mechanism #=> String, one of "SHA256", "SHA512"
     #   resp.kafka_clusters[0].client_authentication.sasl_scram.secret_arn #=> String
+    #   resp.kafka_clusters[0].client_authentication.mtls.secret_arn #=> String
     #   resp.kafka_clusters[0].encryption_in_transit.encryption_type #=> String, one of "TLS"
     #   resp.kafka_clusters[0].encryption_in_transit.root_ca_certificate #=> String
     #   resp.log_delivery.replicator_log_delivery.cloud_watch_logs.enabled #=> Boolean
@@ -3859,7 +3861,7 @@ module Aws::Kafka
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-kafka'
-      context[:gem_version] = '1.112.0'
+      context[:gem_version] = '1.114.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-kafka/client_api.rb

@@ -127,6 +127,7 @@ module Aws::Kafka
     KafkaClusterDescription = Shapes::StructureShape.new(name: 'KafkaClusterDescription')
     KafkaClusterEncryptionInTransit = Shapes::StructureShape.new(name: 'KafkaClusterEncryptionInTransit')
     KafkaClusterEncryptionInTransitType = Shapes::StringShape.new(name: 'KafkaClusterEncryptionInTransitType')
+    KafkaClusterMTLSAuthentication = Shapes::StructureShape.new(name: 'KafkaClusterMTLSAuthentication')
     KafkaClusterSaslScramAuthentication = Shapes::StructureShape.new(name: 'KafkaClusterSaslScramAuthentication')
     KafkaClusterSaslScramMechanism = Shapes::StringShape.new(name: 'KafkaClusterSaslScramMechanism')
     KafkaClusterSummary = Shapes::StructureShape.new(name: 'KafkaClusterSummary')
@@ -865,7 +866,8 @@ module Aws::Kafka
     KafkaCluster.add_member(:encryption_in_transit, Shapes::ShapeRef.new(shape: KafkaClusterEncryptionInTransit, location_name: "encryptionInTransit"))
     KafkaCluster.struct_class = Types::KafkaCluster
 
-    KafkaClusterClientAuthentication.add_member(:sasl_scram, Shapes::ShapeRef.new(shape: KafkaClusterSaslScramAuthentication, required: true, location_name: "saslScram"))
+    KafkaClusterClientAuthentication.add_member(:sasl_scram, Shapes::ShapeRef.new(shape: KafkaClusterSaslScramAuthentication, location_name: "saslScram"))
+    KafkaClusterClientAuthentication.add_member(:mtls, Shapes::ShapeRef.new(shape: KafkaClusterMTLSAuthentication, location_name: "mTLS"))
     KafkaClusterClientAuthentication.struct_class = Types::KafkaClusterClientAuthentication
 
     KafkaClusterClientVpcConfig.add_member(:security_group_ids, Shapes::ShapeRef.new(shape: __listOf__string, location_name: "securityGroupIds"))
@@ -884,6 +886,9 @@ module Aws::Kafka
     KafkaClusterEncryptionInTransit.add_member(:root_ca_certificate, Shapes::ShapeRef.new(shape: __string, location_name: "rootCaCertificate"))
     KafkaClusterEncryptionInTransit.struct_class = Types::KafkaClusterEncryptionInTransit
 
+    KafkaClusterMTLSAuthentication.add_member(:secret_arn, Shapes::ShapeRef.new(shape: __string, required: true, location_name: "secretArn"))
+    KafkaClusterMTLSAuthentication.struct_class = Types::KafkaClusterMTLSAuthentication
+
     KafkaClusterSaslScramAuthentication.add_member(:mechanism, Shapes::ShapeRef.new(shape: KafkaClusterSaslScramMechanism, required: true, location_name: "mechanism"))
     KafkaClusterSaslScramAuthentication.add_member(:secret_arn, Shapes::ShapeRef.new(shape: __string, required: true, location_name: "secretArn"))
     KafkaClusterSaslScramAuthentication.struct_class = Types::KafkaClusterSaslScramAuthentication

data/lib/aws-sdk-kafka/types.rb

@@ -2463,10 +2463,15 @@ module Aws::Kafka
     #   Details for SASL/SCRAM client authentication.
     #   @return [Types::KafkaClusterSaslScramAuthentication]
     #
+    # @!attribute [rw] mtls
+    #   Details for mTLS client authentication.
+    #   @return [Types::KafkaClusterMTLSAuthentication]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/kafka-2018-11-14/KafkaClusterClientAuthentication AWS API Documentation
     #
     class KafkaClusterClientAuthentication < Struct.new(
-      :sasl_scram)
+      :sasl_scram,
+      :mtls)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -2490,6 +2495,20 @@ module Aws::Kafka
       include Aws::Structure
     end
 
+    # Details for mTLS client authentication.
+    #
+    # @!attribute [rw] secret_arn
+    #   The Amazon Resource Name (ARN) of the Secrets Manager secret.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/kafka-2018-11-14/KafkaClusterMTLSAuthentication AWS API Documentation
+    #
+    class KafkaClusterMTLSAuthentication < Struct.new(
+      :secret_arn)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Details of encryption in transit to the Apache Kafka cluster.
     #
     # @!attribute [rw] encryption_type

data/lib/aws-sdk-kafka.rb

@@ -54,7 +54,7 @@ module Aws::Kafka
   autoload :EndpointProvider, 'aws-sdk-kafka/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-kafka/endpoints'
 
-  GEM_VERSION = '1.112.0'
+  GEM_VERSION = '1.114.0'
 
 end
 

data/sig/client.rbs

@@ -209,7 +209,10 @@ module Aws
                                      sasl_scram: {
                                        mechanism: ("SHA256" | "SHA512"),
                                        secret_arn: ::String
-                                     }
+                                     }?,
+                                     mtls: {
+                                       secret_arn: ::String
+                                     }?
                                    }?,
                                    encryption_in_transit: {
                                      encryption_type: ("TLS"),

data/sig/types.rbs

@@ -685,6 +685,7 @@ module Aws::Kafka
 
     class KafkaClusterClientAuthentication
       attr_accessor sasl_scram: Types::KafkaClusterSaslScramAuthentication
+      attr_accessor mtls: Types::KafkaClusterMTLSAuthentication
       SENSITIVE: []
     end
 
@@ -694,6 +695,11 @@ module Aws::Kafka
       SENSITIVE: []
     end
 
+    class KafkaClusterMTLSAuthentication
+      attr_accessor secret_arn: ::String
+      SENSITIVE: []
+    end
+
     class KafkaClusterEncryptionInTransit
       attr_accessor encryption_type: ("TLS")
       attr_accessor root_ca_certificate: ::String

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-kafka
 version: !ruby/object:Gem::Version
-  version: 1.112.0
+  version: 1.114.0
 platform: ruby
 authors:
 - Amazon Web Services
@@ -18,7 +18,7 @@ dependencies:
         version: '3'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.247.0
+        version: 3.248.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -28,7 +28,7 @@ dependencies:
         version: '3'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.247.0
+        version: 3.248.0
 - !ruby/object:Gem::Dependency
   name: aws-sigv4
   requirement: !ruby/object:Gem::Requirement