aws-sdk-kafka 1.117.0 → 1.119.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 2b4ea41a96b50b7c20015dcbbf2c45521af725dd00a471fdd5e6b6f8d9dff2ff
-  data.tar.gz: ef790c3f2d2a00a2aee954104226cd28cb5a32d523c0bbab44c77ce1a90001ed
+  metadata.gz: caa22ed9a548517b27e1c8b6e0b7813a252e09182feece3ceb8fa3d710c94419
+  data.tar.gz: a437b85a1d9eabc46d6f7821fb7ccff621ada0b86da9232bcdc8cd96a4dd5253
 SHA512:
-  metadata.gz: 61461945da3092546b0eac34aa6b190046da84cd55fd893cde306dadbc2146611e817049283493fa3bec9f1be81f97c4f377da7eb90bd50fb444dfee9a731b31
-  data.tar.gz: '08e2240ab4b449492ac52dbc19df1d77a130e00241a5a814b23a3f90ae63846218019b28db77a3fbe925f9970c566e47c63f55cc39f80105cead73e89c252414'
+  metadata.gz: 324b494209f06f4c935a06005a1e9efc0cf9d1508f8b7eb57f76af720d341f73cc0a5687d0f120ccc25c5f6a0ecab8d786b635ef51e7b3ba49627a8ea9bb98f6
+  data.tar.gz: 48248d720e40f86efb51ad2e1539b2218d2daee91279eeab8bc2a012ce13e7a7c9dc47c229f448a5a39a733e748f5645122ed96573b192f506f6f4c19bf163af

data/CHANGELOG.md

@@ -1,6 +1,16 @@
 Unreleased Changes
 ------------------
 
+1.119.0 (2026-08-24)
+------------------
+
+* Feature - Amazon MSK Replicator now supports OAuth authentication when connecting to external Apache Kafka clusters, enabling customers to replicate data from clusters that require OAuth for client authentication. This new capability is supported in all AWS Regions where MSK Express brokers are available.
+
+1.118.0 (2026-08-06)
+------------------
+
+* Feature - MSK Clusters can now deliver authorizer logs alongside broker logs to the destinations defined by you
+
 1.117.0 (2026-07-30)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.117.0
+1.119.0

data/lib/aws-sdk-kafka/client.rb

@@ -635,6 +635,21 @@ module Aws::Kafka
     #     enhanced_monitoring: "DEFAULT", # accepts DEFAULT, PER_BROKER, PER_TOPIC_PER_BROKER, PER_TOPIC_PER_PARTITION
     #     kafka_version: "__stringMin1Max128", # required
     #     logging_info: {
+    #       authorizer_logs: {
+    #         cloud_watch_logs: {
+    #           enabled: false, # required
+    #           log_group: "__string",
+    #         },
+    #         firehose: {
+    #           delivery_stream: "__string",
+    #           enabled: false, # required
+    #         },
+    #         s3: {
+    #           bucket: "__string",
+    #           enabled: false, # required
+    #           prefix: "__string",
+    #         },
+    #       },
     #       broker_logs: { # required
     #         cloud_watch_logs: {
     #           enabled: false, # required
@@ -796,6 +811,21 @@ module Aws::Kafka
     #       },
     #       kafka_version: "__stringMin1Max128", # required
     #       logging_info: {
+    #         authorizer_logs: {
+    #           cloud_watch_logs: {
+    #             enabled: false, # required
+    #             log_group: "__string",
+    #           },
+    #           firehose: {
+    #             delivery_stream: "__string",
+    #             enabled: false, # required
+    #           },
+    #           s3: {
+    #             bucket: "__string",
+    #             enabled: false, # required
+    #             prefix: "__string",
+    #           },
+    #         },
     #         broker_logs: { # required
     #           cloud_watch_logs: {
     #             enabled: false, # required
@@ -1099,6 +1129,25 @@ module Aws::Kafka
     #           mtls: {
     #             secret_arn: "__string", # required
     #           },
+    #           sasl_o_auth_bearer: {
+    #             token_endpoint_url: "__string", # required
+    #             client_credentials: {
+    #               token_request_secret_arn: "__string", # required
+    #             },
+    #             iam_jwt_bearer: {
+    #               audience: "__string", # required
+    #               signing_algorithm: "RS256", # required, accepts RS256, ES384
+    #               token_request_secret_arn: "__string",
+    #             },
+    #             client_credentials_assertion: {
+    #               audience: "__string", # required
+    #               signing_algorithm: "RS256", # required, accepts RS256, ES384
+    #               token_request_secret_arn: "__string",
+    #             },
+    #             token_endpoint_authentication_method: "POST", # required, accepts POST, BASIC, NONE
+    #             scope: "__string",
+    #             token_endpoint_tls_certificate_arn: "__string",
+    #           },
     #         },
     #         encryption_in_transit: {
     #           encryption_type: "TLS", # required, accepts TLS
@@ -1524,6 +1573,13 @@ module Aws::Kafka
     #   resp.cluster_info.current_broker_software_info.configuration_arn #=> String
     #   resp.cluster_info.current_broker_software_info.configuration_revision #=> Integer
     #   resp.cluster_info.current_broker_software_info.kafka_version #=> String
+    #   resp.cluster_info.logging_info.authorizer_logs.cloud_watch_logs.enabled #=> Boolean
+    #   resp.cluster_info.logging_info.authorizer_logs.cloud_watch_logs.log_group #=> String
+    #   resp.cluster_info.logging_info.authorizer_logs.firehose.delivery_stream #=> String
+    #   resp.cluster_info.logging_info.authorizer_logs.firehose.enabled #=> Boolean
+    #   resp.cluster_info.logging_info.authorizer_logs.s3.bucket #=> String
+    #   resp.cluster_info.logging_info.authorizer_logs.s3.enabled #=> Boolean
+    #   resp.cluster_info.logging_info.authorizer_logs.s3.prefix #=> String
     #   resp.cluster_info.logging_info.broker_logs.cloud_watch_logs.enabled #=> Boolean
     #   resp.cluster_info.logging_info.broker_logs.cloud_watch_logs.log_group #=> String
     #   resp.cluster_info.logging_info.broker_logs.firehose.delivery_stream #=> String
@@ -1620,6 +1676,13 @@ module Aws::Kafka
     #   resp.cluster_info.provisioned.enhanced_monitoring #=> String, one of "DEFAULT", "PER_BROKER", "PER_TOPIC_PER_BROKER", "PER_TOPIC_PER_PARTITION"
     #   resp.cluster_info.provisioned.open_monitoring.prometheus.jmx_exporter.enabled_in_broker #=> Boolean
     #   resp.cluster_info.provisioned.open_monitoring.prometheus.node_exporter.enabled_in_broker #=> Boolean
+    #   resp.cluster_info.provisioned.logging_info.authorizer_logs.cloud_watch_logs.enabled #=> Boolean
+    #   resp.cluster_info.provisioned.logging_info.authorizer_logs.cloud_watch_logs.log_group #=> String
+    #   resp.cluster_info.provisioned.logging_info.authorizer_logs.firehose.delivery_stream #=> String
+    #   resp.cluster_info.provisioned.logging_info.authorizer_logs.firehose.enabled #=> Boolean
+    #   resp.cluster_info.provisioned.logging_info.authorizer_logs.s3.bucket #=> String
+    #   resp.cluster_info.provisioned.logging_info.authorizer_logs.s3.enabled #=> Boolean
+    #   resp.cluster_info.provisioned.logging_info.authorizer_logs.s3.prefix #=> String
     #   resp.cluster_info.provisioned.logging_info.broker_logs.cloud_watch_logs.enabled #=> Boolean
     #   resp.cluster_info.provisioned.logging_info.broker_logs.cloud_watch_logs.log_group #=> String
     #   resp.cluster_info.provisioned.logging_info.broker_logs.firehose.delivery_stream #=> String
@@ -1690,6 +1753,13 @@ module Aws::Kafka
     #   resp.cluster_operation_info.source_cluster_info.open_monitoring.prometheus.node_exporter.enabled_in_broker #=> Boolean
     #   resp.cluster_operation_info.source_cluster_info.enhanced_monitoring #=> String, one of "DEFAULT", "PER_BROKER", "PER_TOPIC_PER_BROKER", "PER_TOPIC_PER_PARTITION"
     #   resp.cluster_operation_info.source_cluster_info.kafka_version #=> String
+    #   resp.cluster_operation_info.source_cluster_info.logging_info.authorizer_logs.cloud_watch_logs.enabled #=> Boolean
+    #   resp.cluster_operation_info.source_cluster_info.logging_info.authorizer_logs.cloud_watch_logs.log_group #=> String
+    #   resp.cluster_operation_info.source_cluster_info.logging_info.authorizer_logs.firehose.delivery_stream #=> String
+    #   resp.cluster_operation_info.source_cluster_info.logging_info.authorizer_logs.firehose.enabled #=> Boolean
+    #   resp.cluster_operation_info.source_cluster_info.logging_info.authorizer_logs.s3.bucket #=> String
+    #   resp.cluster_operation_info.source_cluster_info.logging_info.authorizer_logs.s3.enabled #=> Boolean
+    #   resp.cluster_operation_info.source_cluster_info.logging_info.authorizer_logs.s3.prefix #=> String
     #   resp.cluster_operation_info.source_cluster_info.logging_info.broker_logs.cloud_watch_logs.enabled #=> Boolean
     #   resp.cluster_operation_info.source_cluster_info.logging_info.broker_logs.cloud_watch_logs.log_group #=> String
     #   resp.cluster_operation_info.source_cluster_info.logging_info.broker_logs.firehose.delivery_stream #=> String
@@ -1731,6 +1801,13 @@ module Aws::Kafka
     #   resp.cluster_operation_info.target_cluster_info.open_monitoring.prometheus.node_exporter.enabled_in_broker #=> Boolean
     #   resp.cluster_operation_info.target_cluster_info.enhanced_monitoring #=> String, one of "DEFAULT", "PER_BROKER", "PER_TOPIC_PER_BROKER", "PER_TOPIC_PER_PARTITION"
     #   resp.cluster_operation_info.target_cluster_info.kafka_version #=> String
+    #   resp.cluster_operation_info.target_cluster_info.logging_info.authorizer_logs.cloud_watch_logs.enabled #=> Boolean
+    #   resp.cluster_operation_info.target_cluster_info.logging_info.authorizer_logs.cloud_watch_logs.log_group #=> String
+    #   resp.cluster_operation_info.target_cluster_info.logging_info.authorizer_logs.firehose.delivery_stream #=> String
+    #   resp.cluster_operation_info.target_cluster_info.logging_info.authorizer_logs.firehose.enabled #=> Boolean
+    #   resp.cluster_operation_info.target_cluster_info.logging_info.authorizer_logs.s3.bucket #=> String
+    #   resp.cluster_operation_info.target_cluster_info.logging_info.authorizer_logs.s3.enabled #=> Boolean
+    #   resp.cluster_operation_info.target_cluster_info.logging_info.authorizer_logs.s3.prefix #=> String
     #   resp.cluster_operation_info.target_cluster_info.logging_info.broker_logs.cloud_watch_logs.enabled #=> Boolean
     #   resp.cluster_operation_info.target_cluster_info.logging_info.broker_logs.cloud_watch_logs.log_group #=> String
     #   resp.cluster_operation_info.target_cluster_info.logging_info.broker_logs.firehose.delivery_stream #=> String
@@ -1813,6 +1890,13 @@ module Aws::Kafka
     #   resp.cluster_operation_info.provisioned.source_cluster_info.open_monitoring.prometheus.node_exporter.enabled_in_broker #=> Boolean
     #   resp.cluster_operation_info.provisioned.source_cluster_info.enhanced_monitoring #=> String, one of "DEFAULT", "PER_BROKER", "PER_TOPIC_PER_BROKER", "PER_TOPIC_PER_PARTITION"
     #   resp.cluster_operation_info.provisioned.source_cluster_info.kafka_version #=> String
+    #   resp.cluster_operation_info.provisioned.source_cluster_info.logging_info.authorizer_logs.cloud_watch_logs.enabled #=> Boolean
+    #   resp.cluster_operation_info.provisioned.source_cluster_info.logging_info.authorizer_logs.cloud_watch_logs.log_group #=> String
+    #   resp.cluster_operation_info.provisioned.source_cluster_info.logging_info.authorizer_logs.firehose.delivery_stream #=> String
+    #   resp.cluster_operation_info.provisioned.source_cluster_info.logging_info.authorizer_logs.firehose.enabled #=> Boolean
+    #   resp.cluster_operation_info.provisioned.source_cluster_info.logging_info.authorizer_logs.s3.bucket #=> String
+    #   resp.cluster_operation_info.provisioned.source_cluster_info.logging_info.authorizer_logs.s3.enabled #=> Boolean
+    #   resp.cluster_operation_info.provisioned.source_cluster_info.logging_info.authorizer_logs.s3.prefix #=> String
     #   resp.cluster_operation_info.provisioned.source_cluster_info.logging_info.broker_logs.cloud_watch_logs.enabled #=> Boolean
     #   resp.cluster_operation_info.provisioned.source_cluster_info.logging_info.broker_logs.cloud_watch_logs.log_group #=> String
     #   resp.cluster_operation_info.provisioned.source_cluster_info.logging_info.broker_logs.firehose.delivery_stream #=> String
@@ -1854,6 +1938,13 @@ module Aws::Kafka
     #   resp.cluster_operation_info.provisioned.target_cluster_info.open_monitoring.prometheus.node_exporter.enabled_in_broker #=> Boolean
     #   resp.cluster_operation_info.provisioned.target_cluster_info.enhanced_monitoring #=> String, one of "DEFAULT", "PER_BROKER", "PER_TOPIC_PER_BROKER", "PER_TOPIC_PER_PARTITION"
     #   resp.cluster_operation_info.provisioned.target_cluster_info.kafka_version #=> String
+    #   resp.cluster_operation_info.provisioned.target_cluster_info.logging_info.authorizer_logs.cloud_watch_logs.enabled #=> Boolean
+    #   resp.cluster_operation_info.provisioned.target_cluster_info.logging_info.authorizer_logs.cloud_watch_logs.log_group #=> String
+    #   resp.cluster_operation_info.provisioned.target_cluster_info.logging_info.authorizer_logs.firehose.delivery_stream #=> String
+    #   resp.cluster_operation_info.provisioned.target_cluster_info.logging_info.authorizer_logs.firehose.enabled #=> Boolean
+    #   resp.cluster_operation_info.provisioned.target_cluster_info.logging_info.authorizer_logs.s3.bucket #=> String
+    #   resp.cluster_operation_info.provisioned.target_cluster_info.logging_info.authorizer_logs.s3.enabled #=> Boolean
+    #   resp.cluster_operation_info.provisioned.target_cluster_info.logging_info.authorizer_logs.s3.prefix #=> String
     #   resp.cluster_operation_info.provisioned.target_cluster_info.logging_info.broker_logs.cloud_watch_logs.enabled #=> Boolean
     #   resp.cluster_operation_info.provisioned.target_cluster_info.logging_info.broker_logs.cloud_watch_logs.log_group #=> String
     #   resp.cluster_operation_info.provisioned.target_cluster_info.logging_info.broker_logs.firehose.delivery_stream #=> String
@@ -2123,6 +2214,17 @@ module Aws::Kafka
     #   resp.kafka_clusters[0].client_authentication.sasl_scram.mechanism #=> String, one of "SHA256", "SHA512"
     #   resp.kafka_clusters[0].client_authentication.sasl_scram.secret_arn #=> String
     #   resp.kafka_clusters[0].client_authentication.mtls.secret_arn #=> String
+    #   resp.kafka_clusters[0].client_authentication.sasl_o_auth_bearer.token_endpoint_url #=> String
+    #   resp.kafka_clusters[0].client_authentication.sasl_o_auth_bearer.client_credentials.token_request_secret_arn #=> String
+    #   resp.kafka_clusters[0].client_authentication.sasl_o_auth_bearer.iam_jwt_bearer.audience #=> String
+    #   resp.kafka_clusters[0].client_authentication.sasl_o_auth_bearer.iam_jwt_bearer.signing_algorithm #=> String, one of "RS256", "ES384"
+    #   resp.kafka_clusters[0].client_authentication.sasl_o_auth_bearer.iam_jwt_bearer.token_request_secret_arn #=> String
+    #   resp.kafka_clusters[0].client_authentication.sasl_o_auth_bearer.client_credentials_assertion.audience #=> String
+    #   resp.kafka_clusters[0].client_authentication.sasl_o_auth_bearer.client_credentials_assertion.signing_algorithm #=> String, one of "RS256", "ES384"
+    #   resp.kafka_clusters[0].client_authentication.sasl_o_auth_bearer.client_credentials_assertion.token_request_secret_arn #=> String
+    #   resp.kafka_clusters[0].client_authentication.sasl_o_auth_bearer.token_endpoint_authentication_method #=> String, one of "POST", "BASIC", "NONE"
+    #   resp.kafka_clusters[0].client_authentication.sasl_o_auth_bearer.scope #=> String
+    #   resp.kafka_clusters[0].client_authentication.sasl_o_auth_bearer.token_endpoint_tls_certificate_arn #=> String
     #   resp.kafka_clusters[0].encryption_in_transit.encryption_type #=> String, one of "TLS"
     #   resp.kafka_clusters[0].encryption_in_transit.root_ca_certificate #=> String
     #   resp.log_delivery.replicator_log_delivery.cloud_watch_logs.enabled #=> Boolean
@@ -2532,6 +2634,13 @@ module Aws::Kafka
     #   resp.cluster_operation_info_list[0].source_cluster_info.open_monitoring.prometheus.node_exporter.enabled_in_broker #=> Boolean
     #   resp.cluster_operation_info_list[0].source_cluster_info.enhanced_monitoring #=> String, one of "DEFAULT", "PER_BROKER", "PER_TOPIC_PER_BROKER", "PER_TOPIC_PER_PARTITION"
     #   resp.cluster_operation_info_list[0].source_cluster_info.kafka_version #=> String
+    #   resp.cluster_operation_info_list[0].source_cluster_info.logging_info.authorizer_logs.cloud_watch_logs.enabled #=> Boolean
+    #   resp.cluster_operation_info_list[0].source_cluster_info.logging_info.authorizer_logs.cloud_watch_logs.log_group #=> String
+    #   resp.cluster_operation_info_list[0].source_cluster_info.logging_info.authorizer_logs.firehose.delivery_stream #=> String
+    #   resp.cluster_operation_info_list[0].source_cluster_info.logging_info.authorizer_logs.firehose.enabled #=> Boolean
+    #   resp.cluster_operation_info_list[0].source_cluster_info.logging_info.authorizer_logs.s3.bucket #=> String
+    #   resp.cluster_operation_info_list[0].source_cluster_info.logging_info.authorizer_logs.s3.enabled #=> Boolean
+    #   resp.cluster_operation_info_list[0].source_cluster_info.logging_info.authorizer_logs.s3.prefix #=> String
     #   resp.cluster_operation_info_list[0].source_cluster_info.logging_info.broker_logs.cloud_watch_logs.enabled #=> Boolean
     #   resp.cluster_operation_info_list[0].source_cluster_info.logging_info.broker_logs.cloud_watch_logs.log_group #=> String
     #   resp.cluster_operation_info_list[0].source_cluster_info.logging_info.broker_logs.firehose.delivery_stream #=> String
@@ -2573,6 +2682,13 @@ module Aws::Kafka
     #   resp.cluster_operation_info_list[0].target_cluster_info.open_monitoring.prometheus.node_exporter.enabled_in_broker #=> Boolean
     #   resp.cluster_operation_info_list[0].target_cluster_info.enhanced_monitoring #=> String, one of "DEFAULT", "PER_BROKER", "PER_TOPIC_PER_BROKER", "PER_TOPIC_PER_PARTITION"
     #   resp.cluster_operation_info_list[0].target_cluster_info.kafka_version #=> String
+    #   resp.cluster_operation_info_list[0].target_cluster_info.logging_info.authorizer_logs.cloud_watch_logs.enabled #=> Boolean
+    #   resp.cluster_operation_info_list[0].target_cluster_info.logging_info.authorizer_logs.cloud_watch_logs.log_group #=> String
+    #   resp.cluster_operation_info_list[0].target_cluster_info.logging_info.authorizer_logs.firehose.delivery_stream #=> String
+    #   resp.cluster_operation_info_list[0].target_cluster_info.logging_info.authorizer_logs.firehose.enabled #=> Boolean
+    #   resp.cluster_operation_info_list[0].target_cluster_info.logging_info.authorizer_logs.s3.bucket #=> String
+    #   resp.cluster_operation_info_list[0].target_cluster_info.logging_info.authorizer_logs.s3.enabled #=> Boolean
+    #   resp.cluster_operation_info_list[0].target_cluster_info.logging_info.authorizer_logs.s3.prefix #=> String
     #   resp.cluster_operation_info_list[0].target_cluster_info.logging_info.broker_logs.cloud_watch_logs.enabled #=> Boolean
     #   resp.cluster_operation_info_list[0].target_cluster_info.logging_info.broker_logs.cloud_watch_logs.log_group #=> String
     #   resp.cluster_operation_info_list[0].target_cluster_info.logging_info.broker_logs.firehose.delivery_stream #=> String
@@ -2718,6 +2834,13 @@ module Aws::Kafka
     #   resp.cluster_info_list[0].current_broker_software_info.configuration_arn #=> String
     #   resp.cluster_info_list[0].current_broker_software_info.configuration_revision #=> Integer
     #   resp.cluster_info_list[0].current_broker_software_info.kafka_version #=> String
+    #   resp.cluster_info_list[0].logging_info.authorizer_logs.cloud_watch_logs.enabled #=> Boolean
+    #   resp.cluster_info_list[0].logging_info.authorizer_logs.cloud_watch_logs.log_group #=> String
+    #   resp.cluster_info_list[0].logging_info.authorizer_logs.firehose.delivery_stream #=> String
+    #   resp.cluster_info_list[0].logging_info.authorizer_logs.firehose.enabled #=> Boolean
+    #   resp.cluster_info_list[0].logging_info.authorizer_logs.s3.bucket #=> String
+    #   resp.cluster_info_list[0].logging_info.authorizer_logs.s3.enabled #=> Boolean
+    #   resp.cluster_info_list[0].logging_info.authorizer_logs.s3.prefix #=> String
     #   resp.cluster_info_list[0].logging_info.broker_logs.cloud_watch_logs.enabled #=> Boolean
     #   resp.cluster_info_list[0].logging_info.broker_logs.cloud_watch_logs.log_group #=> String
     #   resp.cluster_info_list[0].logging_info.broker_logs.firehose.delivery_stream #=> String
@@ -2833,6 +2956,13 @@ module Aws::Kafka
     #   resp.cluster_info_list[0].provisioned.enhanced_monitoring #=> String, one of "DEFAULT", "PER_BROKER", "PER_TOPIC_PER_BROKER", "PER_TOPIC_PER_PARTITION"
     #   resp.cluster_info_list[0].provisioned.open_monitoring.prometheus.jmx_exporter.enabled_in_broker #=> Boolean
     #   resp.cluster_info_list[0].provisioned.open_monitoring.prometheus.node_exporter.enabled_in_broker #=> Boolean
+    #   resp.cluster_info_list[0].provisioned.logging_info.authorizer_logs.cloud_watch_logs.enabled #=> Boolean
+    #   resp.cluster_info_list[0].provisioned.logging_info.authorizer_logs.cloud_watch_logs.log_group #=> String
+    #   resp.cluster_info_list[0].provisioned.logging_info.authorizer_logs.firehose.delivery_stream #=> String
+    #   resp.cluster_info_list[0].provisioned.logging_info.authorizer_logs.firehose.enabled #=> Boolean
+    #   resp.cluster_info_list[0].provisioned.logging_info.authorizer_logs.s3.bucket #=> String
+    #   resp.cluster_info_list[0].provisioned.logging_info.authorizer_logs.s3.enabled #=> Boolean
+    #   resp.cluster_info_list[0].provisioned.logging_info.authorizer_logs.s3.prefix #=> String
     #   resp.cluster_info_list[0].provisioned.logging_info.broker_logs.cloud_watch_logs.enabled #=> Boolean
     #   resp.cluster_info_list[0].provisioned.logging_info.broker_logs.cloud_watch_logs.log_group #=> String
     #   resp.cluster_info_list[0].provisioned.logging_info.broker_logs.firehose.delivery_stream #=> String
@@ -3893,6 +4023,21 @@ module Aws::Kafka
     #       },
     #     },
     #     logging_info: {
+    #       authorizer_logs: {
+    #         cloud_watch_logs: {
+    #           enabled: false, # required
+    #           log_group: "__string",
+    #         },
+    #         firehose: {
+    #           delivery_stream: "__string",
+    #           enabled: false, # required
+    #         },
+    #         s3: {
+    #           bucket: "__string",
+    #           enabled: false, # required
+    #           prefix: "__string",
+    #         },
+    #       },
     #       broker_logs: { # required
     #         cloud_watch_logs: {
     #           enabled: false, # required
@@ -4231,7 +4376,7 @@ module Aws::Kafka
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-kafka'
-      context[:gem_version] = '1.117.0'
+      context[:gem_version] = '1.119.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-kafka/client_api.rb

@@ -16,6 +16,7 @@ module Aws::Kafka
 
     AmazonMskCluster = Shapes::StructureShape.new(name: 'AmazonMskCluster')
     ApacheKafkaCluster = Shapes::StructureShape.new(name: 'ApacheKafkaCluster')
+    AuthorizerLogs = Shapes::StructureShape.new(name: 'AuthorizerLogs')
     BadRequestException = Shapes::StructureShape.new(name: 'BadRequestException')
     BatchAssociateScramSecretRequest = Shapes::StructureShape.new(name: 'BatchAssociateScramSecretRequest')
     BatchAssociateScramSecretResponse = Shapes::StructureShape.new(name: 'BatchAssociateScramSecretResponse')
@@ -139,6 +140,7 @@ module Aws::Kafka
     InternalServerErrorException = Shapes::StructureShape.new(name: 'InternalServerErrorException')
     JmxExporter = Shapes::StructureShape.new(name: 'JmxExporter')
     JmxExporterInfo = Shapes::StructureShape.new(name: 'JmxExporterInfo')
+    JwtSigningAlgorithm = Shapes::StringShape.new(name: 'JwtSigningAlgorithm')
     KafkaCluster = Shapes::StructureShape.new(name: 'KafkaCluster')
     KafkaClusterClientAuthentication = Shapes::StructureShape.new(name: 'KafkaClusterClientAuthentication')
     KafkaClusterClientVpcConfig = Shapes::StructureShape.new(name: 'KafkaClusterClientVpcConfig')
@@ -146,6 +148,10 @@ module Aws::Kafka
     KafkaClusterEncryptionInTransit = Shapes::StructureShape.new(name: 'KafkaClusterEncryptionInTransit')
     KafkaClusterEncryptionInTransitType = Shapes::StringShape.new(name: 'KafkaClusterEncryptionInTransitType')
     KafkaClusterMTLSAuthentication = Shapes::StructureShape.new(name: 'KafkaClusterMTLSAuthentication')
+    KafkaClusterOAuthClientCredentials = Shapes::StructureShape.new(name: 'KafkaClusterOAuthClientCredentials')
+    KafkaClusterOAuthClientCredentialsAssertion = Shapes::StructureShape.new(name: 'KafkaClusterOAuthClientCredentialsAssertion')
+    KafkaClusterOAuthIamJwtBearer = Shapes::StructureShape.new(name: 'KafkaClusterOAuthIamJwtBearer')
+    KafkaClusterSaslOAuthBearerAuthentication = Shapes::StructureShape.new(name: 'KafkaClusterSaslOAuthBearerAuthentication')
     KafkaClusterSaslScramAuthentication = Shapes::StructureShape.new(name: 'KafkaClusterSaslScramAuthentication')
     KafkaClusterSaslScramMechanism = Shapes::StringShape.new(name: 'KafkaClusterSaslScramMechanism')
     KafkaClusterSummary = Shapes::StructureShape.new(name: 'KafkaClusterSummary')
@@ -252,6 +258,7 @@ module Aws::Kafka
     TagResourceRequest = Shapes::StructureShape.new(name: 'TagResourceRequest')
     TargetCompressionType = Shapes::StringShape.new(name: 'TargetCompressionType')
     Tls = Shapes::StructureShape.new(name: 'Tls')
+    TokenEndpointAuthenticationMethod = Shapes::StringShape.new(name: 'TokenEndpointAuthenticationMethod')
     TooManyRequestsException = Shapes::StructureShape.new(name: 'TooManyRequestsException')
     TopicConfiguration = Shapes::StructureShape.new(name: 'TopicConfiguration')
     TopicExistsException = Shapes::StructureShape.new(name: 'TopicExistsException')
@@ -369,6 +376,11 @@ module Aws::Kafka
     ApacheKafkaCluster.add_member(:bootstrap_broker_string, Shapes::ShapeRef.new(shape: __string, required: true, location_name: "bootstrapBrokerString"))
     ApacheKafkaCluster.struct_class = Types::ApacheKafkaCluster
 
+    AuthorizerLogs.add_member(:cloud_watch_logs, Shapes::ShapeRef.new(shape: CloudWatchLogs, location_name: "cloudWatchLogs"))
+    AuthorizerLogs.add_member(:firehose, Shapes::ShapeRef.new(shape: Firehose, location_name: "firehose"))
+    AuthorizerLogs.add_member(:s3, Shapes::ShapeRef.new(shape: S3, location_name: "s3"))
+    AuthorizerLogs.struct_class = Types::AuthorizerLogs
+
     BadRequestException.add_member(:invalid_parameter, Shapes::ShapeRef.new(shape: __string, location_name: "invalidParameter"))
     BadRequestException.add_member(:message, Shapes::ShapeRef.new(shape: __string, location_name: "message"))
     BadRequestException.struct_class = Types::BadRequestException
@@ -997,6 +1009,7 @@ module Aws::Kafka
 
     KafkaClusterClientAuthentication.add_member(:sasl_scram, Shapes::ShapeRef.new(shape: KafkaClusterSaslScramAuthentication, location_name: "saslScram"))
     KafkaClusterClientAuthentication.add_member(:mtls, Shapes::ShapeRef.new(shape: KafkaClusterMTLSAuthentication, location_name: "mTLS"))
+    KafkaClusterClientAuthentication.add_member(:sasl_o_auth_bearer, Shapes::ShapeRef.new(shape: KafkaClusterSaslOAuthBearerAuthentication, location_name: "saslOAuthBearer"))
     KafkaClusterClientAuthentication.struct_class = Types::KafkaClusterClientAuthentication
 
     KafkaClusterClientVpcConfig.add_member(:security_group_ids, Shapes::ShapeRef.new(shape: __listOf__string, location_name: "securityGroupIds"))
@@ -1018,6 +1031,28 @@ module Aws::Kafka
     KafkaClusterMTLSAuthentication.add_member(:secret_arn, Shapes::ShapeRef.new(shape: __string, required: true, location_name: "secretArn"))
     KafkaClusterMTLSAuthentication.struct_class = Types::KafkaClusterMTLSAuthentication
 
+    KafkaClusterOAuthClientCredentials.add_member(:token_request_secret_arn, Shapes::ShapeRef.new(shape: __string, required: true, location_name: "tokenRequestSecretArn"))
+    KafkaClusterOAuthClientCredentials.struct_class = Types::KafkaClusterOAuthClientCredentials
+
+    KafkaClusterOAuthClientCredentialsAssertion.add_member(:audience, Shapes::ShapeRef.new(shape: __string, required: true, location_name: "audience"))
+    KafkaClusterOAuthClientCredentialsAssertion.add_member(:signing_algorithm, Shapes::ShapeRef.new(shape: JwtSigningAlgorithm, required: true, location_name: "signingAlgorithm"))
+    KafkaClusterOAuthClientCredentialsAssertion.add_member(:token_request_secret_arn, Shapes::ShapeRef.new(shape: __string, location_name: "tokenRequestSecretArn"))
+    KafkaClusterOAuthClientCredentialsAssertion.struct_class = Types::KafkaClusterOAuthClientCredentialsAssertion
+
+    KafkaClusterOAuthIamJwtBearer.add_member(:audience, Shapes::ShapeRef.new(shape: __string, required: true, location_name: "audience"))
+    KafkaClusterOAuthIamJwtBearer.add_member(:signing_algorithm, Shapes::ShapeRef.new(shape: JwtSigningAlgorithm, required: true, location_name: "signingAlgorithm"))
+    KafkaClusterOAuthIamJwtBearer.add_member(:token_request_secret_arn, Shapes::ShapeRef.new(shape: __string, location_name: "tokenRequestSecretArn"))
+    KafkaClusterOAuthIamJwtBearer.struct_class = Types::KafkaClusterOAuthIamJwtBearer
+
+    KafkaClusterSaslOAuthBearerAuthentication.add_member(:token_endpoint_url, Shapes::ShapeRef.new(shape: __string, required: true, location_name: "tokenEndpointUrl"))
+    KafkaClusterSaslOAuthBearerAuthentication.add_member(:client_credentials, Shapes::ShapeRef.new(shape: KafkaClusterOAuthClientCredentials, location_name: "clientCredentials"))
+    KafkaClusterSaslOAuthBearerAuthentication.add_member(:iam_jwt_bearer, Shapes::ShapeRef.new(shape: KafkaClusterOAuthIamJwtBearer, location_name: "iamJwtBearer"))
+    KafkaClusterSaslOAuthBearerAuthentication.add_member(:client_credentials_assertion, Shapes::ShapeRef.new(shape: KafkaClusterOAuthClientCredentialsAssertion, location_name: "clientCredentialsAssertion"))
+    KafkaClusterSaslOAuthBearerAuthentication.add_member(:token_endpoint_authentication_method, Shapes::ShapeRef.new(shape: TokenEndpointAuthenticationMethod, required: true, location_name: "tokenEndpointAuthenticationMethod"))
+    KafkaClusterSaslOAuthBearerAuthentication.add_member(:scope, Shapes::ShapeRef.new(shape: __string, location_name: "scope"))
+    KafkaClusterSaslOAuthBearerAuthentication.add_member(:token_endpoint_tls_certificate_arn, Shapes::ShapeRef.new(shape: __string, location_name: "tokenEndpointTlsCertificateArn"))
+    KafkaClusterSaslOAuthBearerAuthentication.struct_class = Types::KafkaClusterSaslOAuthBearerAuthentication
+
     KafkaClusterSaslScramAuthentication.add_member(:mechanism, Shapes::ShapeRef.new(shape: KafkaClusterSaslScramMechanism, required: true, location_name: "mechanism"))
     KafkaClusterSaslScramAuthentication.add_member(:secret_arn, Shapes::ShapeRef.new(shape: __string, required: true, location_name: "secretArn"))
     KafkaClusterSaslScramAuthentication.struct_class = Types::KafkaClusterSaslScramAuthentication
@@ -1174,6 +1209,7 @@ module Aws::Kafka
     LogDelivery.add_member(:replicator_log_delivery, Shapes::ShapeRef.new(shape: ReplicatorLogDelivery, location_name: "replicatorLogDelivery"))
     LogDelivery.struct_class = Types::LogDelivery
 
+    LoggingInfo.add_member(:authorizer_logs, Shapes::ShapeRef.new(shape: AuthorizerLogs, location_name: "authorizerLogs"))
     LoggingInfo.add_member(:broker_logs, Shapes::ShapeRef.new(shape: BrokerLogs, required: true, location_name: "brokerLogs"))
     LoggingInfo.struct_class = Types::LoggingInfo
 

data/lib/aws-sdk-kafka/types.rb

@@ -43,6 +43,31 @@ module Aws::Kafka
       include Aws::Structure
     end
 
+    # The authorizer logs configuration for this MSK cluster.
+    #
+    # @!attribute [rw] cloud_watch_logs
+    #   Details of the CloudWatch Logs destination for authorizer logs.
+    #   @return [Types::CloudWatchLogs]
+    #
+    # @!attribute [rw] firehose
+    #   Details of the Kinesis Data Firehose delivery stream that is the
+    #   destination for authorizer logs.
+    #   @return [Types::Firehose]
+    #
+    # @!attribute [rw] s3
+    #   Details of the Amazon S3 destination for authorizer logs.
+    #   @return [Types::S3]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/kafka-2018-11-14/AuthorizerLogs AWS API Documentation
+    #
+    class AuthorizerLogs < Struct.new(
+      :cloud_watch_logs,
+      :firehose,
+      :s3)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Request body for BatchAssociateScramSecret.
     #
     # @!attribute [rw] cluster_arn
@@ -2823,11 +2848,134 @@ module Aws::Kafka
     #   Details for mTLS client authentication.
     #   @return [Types::KafkaClusterMTLSAuthentication]
     #
+    # @!attribute [rw] sasl_o_auth_bearer
+    #   Details for SASL/OAUTHBEARER client authentication.
+    #   @return [Types::KafkaClusterSaslOAuthBearerAuthentication]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/kafka-2018-11-14/KafkaClusterClientAuthentication AWS API Documentation
     #
     class KafkaClusterClientAuthentication < Struct.new(
       :sasl_scram,
-      :mtls)
+      :mtls,
+      :sasl_o_auth_bearer)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Details for SASL/OAUTHBEARER client authentication.
+    #
+    # @!attribute [rw] token_endpoint_url
+    #   The HTTPS URL of the OAuth token endpoint that vends OAuth Bearer
+    #   tokens per RFC 6749.
+    #   @return [String]
+    #
+    # @!attribute [rw] client_credentials
+    #   Details for SASL/OAUTHBEARER using standard client\_credentials
+    #   grant.
+    #   @return [Types::KafkaClusterOAuthClientCredentials]
+    #
+    # @!attribute [rw] iam_jwt_bearer
+    #   Details for SASL/OAUTHBEARER using JWT Bearer assertion grant.
+    #   @return [Types::KafkaClusterOAuthIamJwtBearer]
+    #
+    # @!attribute [rw] client_credentials_assertion
+    #   Details for SASL/OAUTHBEARER using client credentials grant with JWT
+    #   client assertion.
+    #   @return [Types::KafkaClusterOAuthClientCredentialsAssertion]
+    #
+    # @!attribute [rw] token_endpoint_authentication_method
+    #   How client credentials are sent to the identity provider. Valid
+    #   values are POST, BASIC, or NONE.
+    #   @return [String]
+    #
+    # @!attribute [rw] scope
+    #   OAuth scope to request. Included in the token request if provided.
+    #   @return [String]
+    #
+    # @!attribute [rw] token_endpoint_tls_certificate_arn
+    #   Secrets Manager ARN containing a custom CA certificate for the
+    #   identity provider. Required only if the identity provider uses a
+    #   private CA.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/kafka-2018-11-14/KafkaClusterSaslOAuthBearerAuthentication AWS API Documentation
+    #
+    class KafkaClusterSaslOAuthBearerAuthentication < Struct.new(
+      :token_endpoint_url,
+      :client_credentials,
+      :iam_jwt_bearer,
+      :client_credentials_assertion,
+      :token_endpoint_authentication_method,
+      :scope,
+      :token_endpoint_tls_certificate_arn)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Details for SASL/OAUTHBEARER using standard client\_credentials grant
+    # (RFC 6749).
+    #
+    # @!attribute [rw] token_request_secret_arn
+    #   The Amazon Resource Name (ARN) of the Secrets Manager secret
+    #   containing the OAuth client credentials.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/kafka-2018-11-14/KafkaClusterOAuthClientCredentials AWS API Documentation
+    #
+    class KafkaClusterOAuthClientCredentials < Struct.new(
+      :token_request_secret_arn)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Details for SASL/OAUTHBEARER using JWT Bearer assertion grant (RFC
+    # 7523).
+    #
+    # @!attribute [rw] audience
+    #   The audience for the JWT Bearer assertion.
+    #   @return [String]
+    #
+    # @!attribute [rw] signing_algorithm
+    #   The signing algorithm for the JWT Bearer assertion.
+    #   @return [String]
+    #
+    # @!attribute [rw] token_request_secret_arn
+    #   The Amazon Resource Name (ARN) of the Secrets Manager secret
+    #   containing the signing key.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/kafka-2018-11-14/KafkaClusterOAuthIamJwtBearer AWS API Documentation
+    #
+    class KafkaClusterOAuthIamJwtBearer < Struct.new(
+      :audience,
+      :signing_algorithm,
+      :token_request_secret_arn)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Details for SASL/OAUTHBEARER using client credentials grant with JWT
+    # client assertion (RFC 7521/7523).
+    #
+    # @!attribute [rw] audience
+    #   The audience for the JWT client assertion.
+    #   @return [String]
+    #
+    # @!attribute [rw] signing_algorithm
+    #   The signing algorithm for the JWT client assertion.
+    #   @return [String]
+    #
+    # @!attribute [rw] token_request_secret_arn
+    #   The Amazon Resource Name (ARN) of the Secrets Manager secret
+    #   containing the signing key.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/kafka-2018-11-14/KafkaClusterOAuthClientCredentialsAssertion AWS API Documentation
+    #
+    class KafkaClusterOAuthClientCredentialsAssertion < Struct.new(
+      :audience,
+      :signing_algorithm,
+      :token_request_secret_arn)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -4045,6 +4193,11 @@ module Aws::Kafka
     # destination types. This is a container for the configuration details
     # related to broker logs.
     #
+    # @!attribute [rw] authorizer_logs
+    #   You can configure your MSK cluster to send authorizer logs to
+    #   different destination types.
+    #   @return [Types::AuthorizerLogs]
+    #
     # @!attribute [rw] broker_logs
     #   You can configure your MSK cluster to send broker logs to different
     #   destination types. This configuration specifies the details of these
@@ -4054,6 +4207,7 @@ module Aws::Kafka
     # @see http://docs.aws.amazon.com/goto/WebAPI/kafka-2018-11-14/LoggingInfo AWS API Documentation
     #
     class LoggingInfo < Struct.new(
+      :authorizer_logs,
       :broker_logs)
       SENSITIVE = []
       include Aws::Structure

data/lib/aws-sdk-kafka.rb

@@ -54,7 +54,7 @@ module Aws::Kafka
   autoload :EndpointProvider, 'aws-sdk-kafka/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-kafka/endpoints'
 
-  GEM_VERSION = '1.117.0'
+  GEM_VERSION = '1.119.0'
 
 end
 

data/sig/client.rbs

@@ -306,6 +306,25 @@ module Aws
                                      }?,
                                      mtls: {
                                        secret_arn: ::String
+                                     }?,
+                                     sasl_o_auth_bearer: {
+                                       token_endpoint_url: ::String,
+                                       client_credentials: {
+                                         token_request_secret_arn: ::String
+                                       }?,
+                                       iam_jwt_bearer: {
+                                         audience: ::String,
+                                         signing_algorithm: ("RS256" | "ES384"),
+                                         token_request_secret_arn: ::String?
+                                       }?,
+                                       client_credentials_assertion: {
+                                         audience: ::String,
+                                         signing_algorithm: ("RS256" | "ES384"),
+                                         token_request_secret_arn: ::String?
+                                       }?,
+                                       token_endpoint_authentication_method: ("POST" | "BASIC" | "NONE"),
+                                       scope: ::String?,
+                                       token_endpoint_tls_certificate_arn: ::String?
                                      }?
                                    }?,
                                    encryption_in_transit: {

data/sig/params.rbs

@@ -86,6 +86,22 @@ module Aws
       }?
     }
 
+      type authorizer_logs = {
+      cloud_watch_logs: {
+        enabled: bool,
+        log_group: ::String?
+      }?,
+      firehose: {
+        delivery_stream: ::String?,
+        enabled: bool
+      }?,
+      s3: {
+        bucket: ::String?,
+        enabled: bool,
+        prefix: ::String?
+      }?
+    }
+
       type broker_logs = {
       cloud_watch_logs: {
         enabled: bool,
@@ -103,6 +119,7 @@ module Aws
     }
 
       type logging_info = {
+      authorizer_logs: Params::authorizer_logs?,
       broker_logs: Params::broker_logs
     }
 

data/sig/types.rbs

@@ -19,6 +19,13 @@ module Aws::Kafka
       SENSITIVE: []
     end
 
+    class AuthorizerLogs
+      attr_accessor cloud_watch_logs: Types::CloudWatchLogs
+      attr_accessor firehose: Types::Firehose
+      attr_accessor s3: Types::S3
+      SENSITIVE: []
+    end
+
     class BatchAssociateScramSecretRequest
       attr_accessor cluster_arn: ::String
       attr_accessor secret_arn_list: ::Array[::String]
@@ -774,6 +781,37 @@ module Aws::Kafka
     class KafkaClusterClientAuthentication
       attr_accessor sasl_scram: Types::KafkaClusterSaslScramAuthentication
       attr_accessor mtls: Types::KafkaClusterMTLSAuthentication
+      attr_accessor sasl_o_auth_bearer: Types::KafkaClusterSaslOAuthBearerAuthentication
+      SENSITIVE: []
+    end
+
+    class KafkaClusterSaslOAuthBearerAuthentication
+      attr_accessor token_endpoint_url: ::String
+      attr_accessor client_credentials: Types::KafkaClusterOAuthClientCredentials
+      attr_accessor iam_jwt_bearer: Types::KafkaClusterOAuthIamJwtBearer
+      attr_accessor client_credentials_assertion: Types::KafkaClusterOAuthClientCredentialsAssertion
+      attr_accessor token_endpoint_authentication_method: ("POST" | "BASIC" | "NONE")
+      attr_accessor scope: ::String
+      attr_accessor token_endpoint_tls_certificate_arn: ::String
+      SENSITIVE: []
+    end
+
+    class KafkaClusterOAuthClientCredentials
+      attr_accessor token_request_secret_arn: ::String
+      SENSITIVE: []
+    end
+
+    class KafkaClusterOAuthIamJwtBearer
+      attr_accessor audience: ::String
+      attr_accessor signing_algorithm: ("RS256" | "ES384")
+      attr_accessor token_request_secret_arn: ::String
+      SENSITIVE: []
+    end
+
+    class KafkaClusterOAuthClientCredentialsAssertion
+      attr_accessor audience: ::String
+      attr_accessor signing_algorithm: ("RS256" | "ES384")
+      attr_accessor token_request_secret_arn: ::String
       SENSITIVE: []
     end
 
@@ -1130,6 +1168,7 @@ module Aws::Kafka
     end
 
     class LoggingInfo
+      attr_accessor authorizer_logs: Types::AuthorizerLogs
       attr_accessor broker_logs: Types::BrokerLogs
       SENSITIVE: []
     end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-kafka
 version: !ruby/object:Gem::Version
-  version: 1.117.0
+  version: 1.119.0
 platform: ruby
 authors:
 - Amazon Web Services