aws-sdk-kafka 1.113.0 → 1.114.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: f15511b2c9c84ee1e5d14019922635eb559e62e2dfbb6d44a18a7cb8cb340bd5
-  data.tar.gz: 06dfcf2c0a07fde930da3d8136cec5de8b53a038204529efcf6629f6337bde6d
+  metadata.gz: f5334c81e6b1302de289098280129d4240dfd071234468b101dcea90d4d20792
+  data.tar.gz: 15454f10104a1ea1fe372523cb8939e416476ac095fd9de621685865166a14c3
 SHA512:
-  metadata.gz: 86a592003dbf76832109b0d6fd56d54d02987e566f7eed81a5b8f4c66ccf7ebe7a1e3531a9ae8f50f1b205395e18506720982837dc1aaea8813ff327022687bb
-  data.tar.gz: 163c2332d39f316cac785fa5b163f98238bf0f2f4136c9b3b21795994f88e6a7684c3ecde2440e278646ce41702670ec26348069bb9165acc4b6262541c98595
+  metadata.gz: 953c77a3089cbfc0a6f989880f95737c8f84409f6d6057ec24e796e63ee789c91a1a979299345108fbc34edef2e63e81a62756658391a4de55b6b3591c4db20e
+  data.tar.gz: 29ca132ffd924a86cad4dad921ad3fa484e144e476e80fad7bcc2e9b3feb3c98f8af9e825bffa8665ae3a6f171fea0f3e66bf0f334d4891502c5545257f65135

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.114.0 (2026-06-22)
+------------------
+
+* Feature - Amazon MSK Replicator now supports mTLS authentication when connecting to external Apache Kafka clusters, enabling customers to replicate data from clusters that require mutual TLS for client authentication. This capability is supported when replicating to Amazon MSK Express brokers.
+
 1.113.0 (2026-05-21)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.113.0
+1.114.0

data/lib/aws-sdk-kafka/client.rb

@@ -952,10 +952,13 @@ module Aws::Kafka
     #           subnet_ids: ["__string"], # required
     #         },
     #         client_authentication: {
-    #           sasl_scram: { # required
+    #           sasl_scram: {
     #             mechanism: "SHA256", # required, accepts SHA256, SHA512
     #             secret_arn: "__string", # required
     #           },
+    #           mtls: {
+    #             secret_arn: "__string", # required
+    #           },
     #         },
     #         encryption_in_transit: {
     #           encryption_type: "TLS", # required, accepts TLS
@@ -1850,6 +1853,7 @@ module Aws::Kafka
     #   resp.kafka_clusters[0].vpc_config.subnet_ids[0] #=> String
     #   resp.kafka_clusters[0].client_authentication.sasl_scram.mechanism #=> String, one of "SHA256", "SHA512"
     #   resp.kafka_clusters[0].client_authentication.sasl_scram.secret_arn #=> String
+    #   resp.kafka_clusters[0].client_authentication.mtls.secret_arn #=> String
     #   resp.kafka_clusters[0].encryption_in_transit.encryption_type #=> String, one of "TLS"
     #   resp.kafka_clusters[0].encryption_in_transit.root_ca_certificate #=> String
     #   resp.log_delivery.replicator_log_delivery.cloud_watch_logs.enabled #=> Boolean
@@ -3857,7 +3861,7 @@ module Aws::Kafka
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-kafka'
-      context[:gem_version] = '1.113.0'
+      context[:gem_version] = '1.114.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-kafka/client_api.rb

@@ -127,6 +127,7 @@ module Aws::Kafka
     KafkaClusterDescription = Shapes::StructureShape.new(name: 'KafkaClusterDescription')
     KafkaClusterEncryptionInTransit = Shapes::StructureShape.new(name: 'KafkaClusterEncryptionInTransit')
     KafkaClusterEncryptionInTransitType = Shapes::StringShape.new(name: 'KafkaClusterEncryptionInTransitType')
+    KafkaClusterMTLSAuthentication = Shapes::StructureShape.new(name: 'KafkaClusterMTLSAuthentication')
     KafkaClusterSaslScramAuthentication = Shapes::StructureShape.new(name: 'KafkaClusterSaslScramAuthentication')
     KafkaClusterSaslScramMechanism = Shapes::StringShape.new(name: 'KafkaClusterSaslScramMechanism')
     KafkaClusterSummary = Shapes::StructureShape.new(name: 'KafkaClusterSummary')
@@ -865,7 +866,8 @@ module Aws::Kafka
     KafkaCluster.add_member(:encryption_in_transit, Shapes::ShapeRef.new(shape: KafkaClusterEncryptionInTransit, location_name: "encryptionInTransit"))
     KafkaCluster.struct_class = Types::KafkaCluster
 
-    KafkaClusterClientAuthentication.add_member(:sasl_scram, Shapes::ShapeRef.new(shape: KafkaClusterSaslScramAuthentication, required: true, location_name: "saslScram"))
+    KafkaClusterClientAuthentication.add_member(:sasl_scram, Shapes::ShapeRef.new(shape: KafkaClusterSaslScramAuthentication, location_name: "saslScram"))
+    KafkaClusterClientAuthentication.add_member(:mtls, Shapes::ShapeRef.new(shape: KafkaClusterMTLSAuthentication, location_name: "mTLS"))
     KafkaClusterClientAuthentication.struct_class = Types::KafkaClusterClientAuthentication
 
     KafkaClusterClientVpcConfig.add_member(:security_group_ids, Shapes::ShapeRef.new(shape: __listOf__string, location_name: "securityGroupIds"))
@@ -884,6 +886,9 @@ module Aws::Kafka
     KafkaClusterEncryptionInTransit.add_member(:root_ca_certificate, Shapes::ShapeRef.new(shape: __string, location_name: "rootCaCertificate"))
     KafkaClusterEncryptionInTransit.struct_class = Types::KafkaClusterEncryptionInTransit
 
+    KafkaClusterMTLSAuthentication.add_member(:secret_arn, Shapes::ShapeRef.new(shape: __string, required: true, location_name: "secretArn"))
+    KafkaClusterMTLSAuthentication.struct_class = Types::KafkaClusterMTLSAuthentication
+
     KafkaClusterSaslScramAuthentication.add_member(:mechanism, Shapes::ShapeRef.new(shape: KafkaClusterSaslScramMechanism, required: true, location_name: "mechanism"))
     KafkaClusterSaslScramAuthentication.add_member(:secret_arn, Shapes::ShapeRef.new(shape: __string, required: true, location_name: "secretArn"))
     KafkaClusterSaslScramAuthentication.struct_class = Types::KafkaClusterSaslScramAuthentication

data/lib/aws-sdk-kafka/types.rb

@@ -2463,10 +2463,15 @@ module Aws::Kafka
     #   Details for SASL/SCRAM client authentication.
     #   @return [Types::KafkaClusterSaslScramAuthentication]
     #
+    # @!attribute [rw] mtls
+    #   Details for mTLS client authentication.
+    #   @return [Types::KafkaClusterMTLSAuthentication]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/kafka-2018-11-14/KafkaClusterClientAuthentication AWS API Documentation
     #
     class KafkaClusterClientAuthentication < Struct.new(
-      :sasl_scram)
+      :sasl_scram,
+      :mtls)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -2490,6 +2495,20 @@ module Aws::Kafka
       include Aws::Structure
     end
 
+    # Details for mTLS client authentication.
+    #
+    # @!attribute [rw] secret_arn
+    #   The Amazon Resource Name (ARN) of the Secrets Manager secret.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/kafka-2018-11-14/KafkaClusterMTLSAuthentication AWS API Documentation
+    #
+    class KafkaClusterMTLSAuthentication < Struct.new(
+      :secret_arn)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Details of encryption in transit to the Apache Kafka cluster.
     #
     # @!attribute [rw] encryption_type

data/lib/aws-sdk-kafka.rb

@@ -54,7 +54,7 @@ module Aws::Kafka
   autoload :EndpointProvider, 'aws-sdk-kafka/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-kafka/endpoints'
 
-  GEM_VERSION = '1.113.0'
+  GEM_VERSION = '1.114.0'
 
 end
 

data/sig/client.rbs

@@ -209,7 +209,10 @@ module Aws
                                      sasl_scram: {
                                        mechanism: ("SHA256" | "SHA512"),
                                        secret_arn: ::String
-                                     }
+                                     }?,
+                                     mtls: {
+                                       secret_arn: ::String
+                                     }?
                                    }?,
                                    encryption_in_transit: {
                                      encryption_type: ("TLS"),

data/sig/types.rbs

@@ -685,6 +685,7 @@ module Aws::Kafka
 
     class KafkaClusterClientAuthentication
       attr_accessor sasl_scram: Types::KafkaClusterSaslScramAuthentication
+      attr_accessor mtls: Types::KafkaClusterMTLSAuthentication
       SENSITIVE: []
     end
 
@@ -694,6 +695,11 @@ module Aws::Kafka
       SENSITIVE: []
     end
 
+    class KafkaClusterMTLSAuthentication
+      attr_accessor secret_arn: ::String
+      SENSITIVE: []
+    end
+
     class KafkaClusterEncryptionInTransit
       attr_accessor encryption_type: ("TLS")
       attr_accessor root_ca_certificate: ::String

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-kafka
 version: !ruby/object:Gem::Version
-  version: 1.113.0
+  version: 1.114.0
 platform: ruby
 authors:
 - Amazon Web Services