aws-sdk-odb 1.8.0 → 1.9.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 16b0b7a689e43aa9a8e87dc216695a924e335c8db617ff5689d8da28a7abf639
-  data.tar.gz: 746845fa713185c8bc1f55fb993553d43811685a587c2287f55fd2051851c28a
+  metadata.gz: 630172611cc4122a4fe1fbf9cc834beec173bfa9e51aa7149f044797f8795aaf
+  data.tar.gz: 579cfff6ebe6557d1ebff7bdd14d28c9874b48ba93b162ff1c5a5bf32dd66ef0
 SHA512:
-  metadata.gz: 91d888ccea299468a380d6860e109a80c46890171f738bc55c77d4ec57ddeb2437df73e8f6ee23c25eab642504ad4a2f2d40a6a3d455c7a3fb1840716d891f67
-  data.tar.gz: 2c2de43c11a6b96dd2f746a27c3b5391c8af7ec9d9ad7283fc1c366ad4c6690bbc066e2b1d4e9b0f6a67abda0a85d9a3459b6c98be769df4a148313477bf15f5
+  metadata.gz: 6c65eb7e2e8bc59b0819ede4179ef9ae24cbfd9021f6d05558c532fc342a1732f5eaaa4f7a38d254324ba8598082d972e4611f40ad3c6e88beb795bc70ddc3a8
+  data.tar.gz: 0bc3adee2d40b26f9a18591a252b2dba2cd962b5a9ec80bebad64707d92fa3c926841ad513612db850f4a767116e7ed1f3556f37071d4efb349864203f0da193

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.9.0 (2025-11-21)
+------------------
+
+* Feature - Adds AssociateIamRoleToResource and DisassociateIamRoleFromResource APIs for managing IAM roles. Enhances CreateOdbNetwork and UpdateOdbNetwork APIs with KMS, STS, and cross-region S3 parameters. Adds OCI identity domain support to InitializeService API.
+
 1.8.0 (2025-10-23)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.8.0
+1.9.0

data/lib/aws-sdk-odb/client.rb

@@ -508,6 +508,41 @@ module Aws::Odb
       req.send_request(options)
     end
 
+    # Associates an Amazon Web Services Identity and Access Management (IAM)
+    # service role with a specified resource to enable Amazon Web Services
+    # service integration.
+    #
+    # @option params [required, String] :iam_role_arn
+    #   The Amazon Resource Name (ARN) of the IAM service role to associate
+    #   with the resource.
+    #
+    # @option params [required, String] :aws_integration
+    #   The Amazon Web Services integration configuration settings for the IAM
+    #   service role association.
+    #
+    # @option params [required, String] :resource_arn
+    #   The Amazon Resource Name (ARN) of the target resource to associate
+    #   with the IAM service role.
+    #
+    # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.associate_iam_role_to_resource({
+    #     iam_role_arn: "RoleArn", # required
+    #     aws_integration: "KmsTde", # required, accepts KmsTde
+    #     resource_arn: "AssociateIamRoleToResourceInputResourceArnString", # required
+    #   })
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/odb-2024-08-20/AssociateIamRoleToResource AWS API Documentation
+    #
+    # @overload associate_iam_role_to_resource(params = {})
+    # @param [Hash] params ({})
+    def associate_iam_role_to_resource(params = {}, options = {})
+      req = build_request(:associate_iam_role_to_resource, params)
+      req.send_request(options)
+    end
+
     # Creates a new Autonomous VM cluster in the specified Exadata
     # infrastructure.
     #
@@ -1016,10 +1051,30 @@ module Aws::Odb
     # @option params [String] :zero_etl_access
     #   Specifies the configuration for Zero-ETL access from the ODB network.
     #
+    # @option params [String] :sts_access
+    #   The Amazon Web Services Security Token Service (STS) access
+    #   configuration for the ODB network.
+    #
+    # @option params [String] :kms_access
+    #   The Amazon Web Services Key Management Service (KMS) access
+    #   configuration for the ODB network.
+    #
     # @option params [String] :s3_policy_document
     #   Specifies the endpoint policy for Amazon S3 access from the ODB
     #   network.
     #
+    # @option params [String] :sts_policy_document
+    #   The STS policy document that defines permissions for token service
+    #   usage within the ODB network.
+    #
+    # @option params [String] :kms_policy_document
+    #   The KMS policy document that defines permissions for key usage within
+    #   the ODB network.
+    #
+    # @option params [Array<String>] :cross_region_s3_restore_sources_to_enable
+    #   The cross-Region Amazon S3 restore sources to enable for the ODB
+    #   network.
+    #
     # @option params [Hash<String,String>] :tags
     #   The list of resource tags to apply to the ODB network.
     #
@@ -1043,7 +1098,12 @@ module Aws::Odb
     #     client_token: "CreateOdbNetworkInputClientTokenString",
     #     s3_access: "ENABLED", # accepts ENABLED, DISABLED
     #     zero_etl_access: "ENABLED", # accepts ENABLED, DISABLED
+    #     sts_access: "ENABLED", # accepts ENABLED, DISABLED
+    #     kms_access: "ENABLED", # accepts ENABLED, DISABLED
     #     s3_policy_document: "PolicyDocument",
+    #     sts_policy_document: "PolicyDocument",
+    #     kms_policy_document: "PolicyDocument",
+    #     cross_region_s3_restore_sources_to_enable: ["String"],
     #     tags: {
     #       "TagKey" => "TagValue",
     #     },
@@ -1257,6 +1317,41 @@ module Aws::Odb
       req.send_request(options)
     end
 
+    # Disassociates an Amazon Web Services Identity and Access Management
+    # (IAM) service role from a specified resource to disable Amazon Web
+    # Services service integration.
+    #
+    # @option params [required, String] :iam_role_arn
+    #   The Amazon Resource Name (ARN) of the IAM service role to disassociate
+    #   from the resource.
+    #
+    # @option params [required, String] :aws_integration
+    #   The Amazon Web Services integration configuration settings for the IAM
+    #   service role disassociation.
+    #
+    # @option params [required, String] :resource_arn
+    #   The Amazon Resource Name (ARN) of the target resource to disassociate
+    #   from the IAM service role.
+    #
+    # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.disassociate_iam_role_from_resource({
+    #     iam_role_arn: "RoleArn", # required
+    #     aws_integration: "KmsTde", # required, accepts KmsTde
+    #     resource_arn: "DisassociateIamRoleFromResourceInputResourceArnString", # required
+    #   })
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/odb-2024-08-20/DisassociateIamRoleFromResource AWS API Documentation
+    #
+    # @overload disassociate_iam_role_from_resource(params = {})
+    # @param [Hash] params ({})
+    def disassociate_iam_role_from_resource(params = {}, options = {})
+      req = build_request(:disassociate_iam_role_from_resource, params)
+      req.send_request(options)
+    end
+
     # Gets information about a specific Autonomous VM cluster.
     #
     # @option params [required, String] :cloud_autonomous_vm_cluster_id
@@ -1538,6 +1633,11 @@ module Aws::Odb
     #   resp.cloud_vm_cluster.odb_network_id #=> String
     #   resp.cloud_vm_cluster.percent_progress #=> Float
     #   resp.cloud_vm_cluster.compute_model #=> String, one of "ECPU", "OCPU"
+    #   resp.cloud_vm_cluster.iam_roles #=> Array
+    #   resp.cloud_vm_cluster.iam_roles[0].iam_role_arn #=> String
+    #   resp.cloud_vm_cluster.iam_roles[0].status #=> String, one of "ASSOCIATING", "DISASSOCIATING", "FAILED", "CONNECTED", "DISCONNECTED", "PARTIALLY_CONNECTED", "UNKNOWN"
+    #   resp.cloud_vm_cluster.iam_roles[0].status_reason #=> String
+    #   resp.cloud_vm_cluster.iam_roles[0].aws_integration #=> String, one of "KmsTde"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/odb-2024-08-20/GetCloudVmCluster AWS API Documentation
     #
@@ -1674,12 +1774,19 @@ module Aws::Odb
     #   * {Types::GetOciOnboardingStatusOutput#status #status} => String
     #   * {Types::GetOciOnboardingStatusOutput#existing_tenancy_activation_link #existing_tenancy_activation_link} => String
     #   * {Types::GetOciOnboardingStatusOutput#new_tenancy_activation_link #new_tenancy_activation_link} => String
+    #   * {Types::GetOciOnboardingStatusOutput#oci_identity_domain #oci_identity_domain} => Types::OciIdentityDomain
     #
     # @example Response structure
     #
     #   resp.status #=> String, one of "NOT_STARTED", "PENDING_LINK_GENERATION", "PENDING_CUSTOMER_ACTION", "PENDING_INITIALIZATION", "ACTIVATING", "ACTIVE_IN_HOME_REGION", "ACTIVE", "ACTIVE_LIMITED", "FAILED", "PUBLIC_OFFER_UNSUPPORTED", "SUSPENDED", "CANCELED"
     #   resp.existing_tenancy_activation_link #=> String
     #   resp.new_tenancy_activation_link #=> String
+    #   resp.oci_identity_domain.oci_identity_domain_id #=> String
+    #   resp.oci_identity_domain.oci_identity_domain_resource_url #=> String
+    #   resp.oci_identity_domain.oci_identity_domain_url #=> String
+    #   resp.oci_identity_domain.status #=> String, one of "AVAILABLE", "FAILED", "PROVISIONING", "TERMINATED", "TERMINATING", "UPDATING", "MAINTENANCE_IN_PROGRESS"
+    #   resp.oci_identity_domain.status_reason #=> String
+    #   resp.oci_identity_domain.account_setup_cloud_formation_url #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/odb-2024-08-20/GetOciOnboardingStatus AWS API Documentation
     #
@@ -1746,6 +1853,21 @@ module Aws::Odb
     #   resp.odb_network.managed_services.s3_access.ipv4_addresses[0] #=> String
     #   resp.odb_network.managed_services.s3_access.domain_name #=> String
     #   resp.odb_network.managed_services.s3_access.s3_policy_document #=> String
+    #   resp.odb_network.managed_services.sts_access.status #=> String, one of "ENABLED", "ENABLING", "DISABLED", "DISABLING"
+    #   resp.odb_network.managed_services.sts_access.ipv4_addresses #=> Array
+    #   resp.odb_network.managed_services.sts_access.ipv4_addresses[0] #=> String
+    #   resp.odb_network.managed_services.sts_access.domain_name #=> String
+    #   resp.odb_network.managed_services.sts_access.sts_policy_document #=> String
+    #   resp.odb_network.managed_services.kms_access.status #=> String, one of "ENABLED", "ENABLING", "DISABLED", "DISABLING"
+    #   resp.odb_network.managed_services.kms_access.ipv4_addresses #=> Array
+    #   resp.odb_network.managed_services.kms_access.ipv4_addresses[0] #=> String
+    #   resp.odb_network.managed_services.kms_access.domain_name #=> String
+    #   resp.odb_network.managed_services.kms_access.kms_policy_document #=> String
+    #   resp.odb_network.managed_services.cross_region_s3_restore_sources_access #=> Array
+    #   resp.odb_network.managed_services.cross_region_s3_restore_sources_access[0].region #=> String
+    #   resp.odb_network.managed_services.cross_region_s3_restore_sources_access[0].ipv4_addresses #=> Array
+    #   resp.odb_network.managed_services.cross_region_s3_restore_sources_access[0].ipv4_addresses[0] #=> String
+    #   resp.odb_network.managed_services.cross_region_s3_restore_sources_access[0].status #=> String, one of "ENABLED", "ENABLING", "DISABLED", "DISABLING"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/odb-2024-08-20/GetOdbNetwork AWS API Documentation
     #
@@ -1798,8 +1920,18 @@ module Aws::Odb
 
     # Initializes the ODB service for the first time in an account.
     #
+    # @option params [Boolean] :oci_identity_domain
+    #   The Oracle Cloud Infrastructure (OCI) identity domain configuration
+    #   for service initialization.
+    #
     # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
     #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.initialize_service({
+    #     oci_identity_domain: false,
+    #   })
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/odb-2024-08-20/InitializeService AWS API Documentation
     #
     # @overload initialize_service(params = {})
@@ -2151,6 +2283,11 @@ module Aws::Odb
     #   resp.cloud_vm_clusters[0].odb_network_id #=> String
     #   resp.cloud_vm_clusters[0].percent_progress #=> Float
     #   resp.cloud_vm_clusters[0].compute_model #=> String, one of "ECPU", "OCPU"
+    #   resp.cloud_vm_clusters[0].iam_roles #=> Array
+    #   resp.cloud_vm_clusters[0].iam_roles[0].iam_role_arn #=> String
+    #   resp.cloud_vm_clusters[0].iam_roles[0].status #=> String, one of "ASSOCIATING", "DISASSOCIATING", "FAILED", "CONNECTED", "DISCONNECTED", "PARTIALLY_CONNECTED", "UNKNOWN"
+    #   resp.cloud_vm_clusters[0].iam_roles[0].status_reason #=> String
+    #   resp.cloud_vm_clusters[0].iam_roles[0].aws_integration #=> String, one of "KmsTde"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/odb-2024-08-20/ListCloudVmClusters AWS API Documentation
     #
@@ -2499,6 +2636,21 @@ module Aws::Odb
     #   resp.odb_networks[0].managed_services.s3_access.ipv4_addresses[0] #=> String
     #   resp.odb_networks[0].managed_services.s3_access.domain_name #=> String
     #   resp.odb_networks[0].managed_services.s3_access.s3_policy_document #=> String
+    #   resp.odb_networks[0].managed_services.sts_access.status #=> String, one of "ENABLED", "ENABLING", "DISABLED", "DISABLING"
+    #   resp.odb_networks[0].managed_services.sts_access.ipv4_addresses #=> Array
+    #   resp.odb_networks[0].managed_services.sts_access.ipv4_addresses[0] #=> String
+    #   resp.odb_networks[0].managed_services.sts_access.domain_name #=> String
+    #   resp.odb_networks[0].managed_services.sts_access.sts_policy_document #=> String
+    #   resp.odb_networks[0].managed_services.kms_access.status #=> String, one of "ENABLED", "ENABLING", "DISABLED", "DISABLING"
+    #   resp.odb_networks[0].managed_services.kms_access.ipv4_addresses #=> Array
+    #   resp.odb_networks[0].managed_services.kms_access.ipv4_addresses[0] #=> String
+    #   resp.odb_networks[0].managed_services.kms_access.domain_name #=> String
+    #   resp.odb_networks[0].managed_services.kms_access.kms_policy_document #=> String
+    #   resp.odb_networks[0].managed_services.cross_region_s3_restore_sources_access #=> Array
+    #   resp.odb_networks[0].managed_services.cross_region_s3_restore_sources_access[0].region #=> String
+    #   resp.odb_networks[0].managed_services.cross_region_s3_restore_sources_access[0].ipv4_addresses #=> Array
+    #   resp.odb_networks[0].managed_services.cross_region_s3_restore_sources_access[0].ipv4_addresses[0] #=> String
+    #   resp.odb_networks[0].managed_services.cross_region_s3_restore_sources_access[0].status #=> String, one of "ENABLED", "ENABLING", "DISABLED", "DISABLING"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/odb-2024-08-20/ListOdbNetworks AWS API Documentation
     #
@@ -2903,10 +3055,34 @@ module Aws::Odb
     #   Specifies the updated configuration for Zero-ETL access from the ODB
     #   network.
     #
+    # @option params [String] :sts_access
+    #   The Amazon Web Services Security Token Service (STS) access
+    #   configuration for the ODB network.
+    #
+    # @option params [String] :kms_access
+    #   The Amazon Web Services Key Management Service (KMS) access
+    #   configuration for the ODB network.
+    #
     # @option params [String] :s3_policy_document
     #   Specifies the updated endpoint policy for Amazon S3 access from the
     #   ODB network.
     #
+    # @option params [String] :sts_policy_document
+    #   The STS policy document that defines permissions for token service
+    #   usage within the ODB network.
+    #
+    # @option params [String] :kms_policy_document
+    #   The KMS policy document that defines permissions for key usage within
+    #   the ODB network.
+    #
+    # @option params [Array<String>] :cross_region_s3_restore_sources_to_enable
+    #   The cross-Region Amazon S3 restore sources to enable for the ODB
+    #   network.
+    #
+    # @option params [Array<String>] :cross_region_s3_restore_sources_to_disable
+    #   The cross-Region Amazon S3 restore sources to disable for the ODB
+    #   network.
+    #
     # @return [Types::UpdateOdbNetworkOutput] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::UpdateOdbNetworkOutput#display_name #display_name} => String
@@ -2923,7 +3099,13 @@ module Aws::Odb
     #     peered_cidrs_to_be_removed: ["String"],
     #     s3_access: "ENABLED", # accepts ENABLED, DISABLED
     #     zero_etl_access: "ENABLED", # accepts ENABLED, DISABLED
+    #     sts_access: "ENABLED", # accepts ENABLED, DISABLED
+    #     kms_access: "ENABLED", # accepts ENABLED, DISABLED
     #     s3_policy_document: "PolicyDocument",
+    #     sts_policy_document: "PolicyDocument",
+    #     kms_policy_document: "PolicyDocument",
+    #     cross_region_s3_restore_sources_to_enable: ["String"],
+    #     cross_region_s3_restore_sources_to_disable: ["String"],
     #   })
     #
     # @example Response structure
@@ -3013,7 +3195,7 @@ module Aws::Odb
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-odb'
-      context[:gem_version] = '1.8.0'
+      context[:gem_version] = '1.9.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-odb/client_api.rb

@@ -18,6 +18,9 @@ module Aws::Odb
     AcceptMarketplaceRegistrationOutput = Shapes::StructureShape.new(name: 'AcceptMarketplaceRegistrationOutput')
     Access = Shapes::StringShape.new(name: 'Access')
     AccessDeniedException = Shapes::StructureShape.new(name: 'AccessDeniedException')
+    AssociateIamRoleToResourceInput = Shapes::StructureShape.new(name: 'AssociateIamRoleToResourceInput')
+    AssociateIamRoleToResourceInputResourceArnString = Shapes::StringShape.new(name: 'AssociateIamRoleToResourceInputResourceArnString')
+    AssociateIamRoleToResourceOutput = Shapes::StructureShape.new(name: 'AssociateIamRoleToResourceOutput')
     AutonomousVirtualMachineList = Shapes::ListShape.new(name: 'AutonomousVirtualMachineList')
     AutonomousVirtualMachineSummary = Shapes::StructureShape.new(name: 'AutonomousVirtualMachineSummary')
     Boolean = Shapes::BooleanShape.new(name: 'Boolean')
@@ -76,6 +79,8 @@ module Aws::Odb
     CreateOdbPeeringConnectionInput = Shapes::StructureShape.new(name: 'CreateOdbPeeringConnectionInput')
     CreateOdbPeeringConnectionInputClientTokenString = Shapes::StringShape.new(name: 'CreateOdbPeeringConnectionInputClientTokenString')
     CreateOdbPeeringConnectionOutput = Shapes::StructureShape.new(name: 'CreateOdbPeeringConnectionOutput')
+    CrossRegionS3RestoreSourcesAccess = Shapes::StructureShape.new(name: 'CrossRegionS3RestoreSourcesAccess')
+    CrossRegionS3RestoreSourcesAccessList = Shapes::ListShape.new(name: 'CrossRegionS3RestoreSourcesAccessList')
     CustomerContact = Shapes::StructureShape.new(name: 'CustomerContact')
     CustomerContactEmailString = Shapes::StringShape.new(name: 'CustomerContactEmailString')
     CustomerContacts = Shapes::ListShape.new(name: 'CustomerContacts')
@@ -107,6 +112,9 @@ module Aws::Odb
     DeleteOdbNetworkOutput = Shapes::StructureShape.new(name: 'DeleteOdbNetworkOutput')
     DeleteOdbPeeringConnectionInput = Shapes::StructureShape.new(name: 'DeleteOdbPeeringConnectionInput')
     DeleteOdbPeeringConnectionOutput = Shapes::StructureShape.new(name: 'DeleteOdbPeeringConnectionOutput')
+    DisassociateIamRoleFromResourceInput = Shapes::StructureShape.new(name: 'DisassociateIamRoleFromResourceInput')
+    DisassociateIamRoleFromResourceInputResourceArnString = Shapes::StringShape.new(name: 'DisassociateIamRoleFromResourceInputResourceArnString')
+    DisassociateIamRoleFromResourceOutput = Shapes::StructureShape.new(name: 'DisassociateIamRoleFromResourceOutput')
     DiskRedundancy = Shapes::StringShape.new(name: 'DiskRedundancy')
     Double = Shapes::FloatShape.new(name: 'Double')
     ExadataIormConfig = Shapes::StructureShape.new(name: 'ExadataIormConfig')
@@ -132,11 +140,15 @@ module Aws::Odb
     GiVersionList = Shapes::ListShape.new(name: 'GiVersionList')
     GiVersionSummary = Shapes::StructureShape.new(name: 'GiVersionSummary')
     HoursOfDay = Shapes::ListShape.new(name: 'HoursOfDay')
+    IamRole = Shapes::StructureShape.new(name: 'IamRole')
+    IamRoleList = Shapes::ListShape.new(name: 'IamRoleList')
+    IamRoleStatus = Shapes::StringShape.new(name: 'IamRoleStatus')
     InitializeServiceInput = Shapes::StructureShape.new(name: 'InitializeServiceInput')
     InitializeServiceOutput = Shapes::StructureShape.new(name: 'InitializeServiceOutput')
     Integer = Shapes::IntegerShape.new(name: 'Integer')
     InternalServerException = Shapes::StructureShape.new(name: 'InternalServerException')
     IormLifecycleState = Shapes::StringShape.new(name: 'IormLifecycleState')
+    KmsAccess = Shapes::StructureShape.new(name: 'KmsAccess')
     LicenseModel = Shapes::StringShape.new(name: 'LicenseModel')
     ListAutonomousVirtualMachinesInput = Shapes::StructureShape.new(name: 'ListAutonomousVirtualMachinesInput')
     ListAutonomousVirtualMachinesInputMaxResultsInteger = Shapes::IntegerShape.new(name: 'ListAutonomousVirtualMachinesInputMaxResultsInteger')
@@ -202,6 +214,7 @@ module Aws::Odb
     OciDnsForwardingConfig = Shapes::StructureShape.new(name: 'OciDnsForwardingConfig')
     OciDnsForwardingConfigDomainNameString = Shapes::StringShape.new(name: 'OciDnsForwardingConfigDomainNameString')
     OciDnsForwardingConfigList = Shapes::ListShape.new(name: 'OciDnsForwardingConfigList')
+    OciIdentityDomain = Shapes::StructureShape.new(name: 'OciIdentityDomain')
     OciOnboardingStatus = Shapes::StringShape.new(name: 'OciOnboardingStatus')
     OdbNetwork = Shapes::StructureShape.new(name: 'OdbNetwork')
     OdbNetworkAvailabilityZoneIdString = Shapes::StringShape.new(name: 'OdbNetworkAvailabilityZoneIdString')
@@ -240,6 +253,7 @@ module Aws::Odb
     ResourceNotFoundException = Shapes::StructureShape.new(name: 'ResourceNotFoundException')
     ResourceStatus = Shapes::StringShape.new(name: 'ResourceStatus')
     ResponseTagMap = Shapes::MapShape.new(name: 'ResponseTagMap')
+    RoleArn = Shapes::StringShape.new(name: 'RoleArn')
     S3Access = Shapes::StructureShape.new(name: 'S3Access')
     SensitiveString = Shapes::StringShape.new(name: 'SensitiveString')
     SensitiveStringList = Shapes::ListShape.new(name: 'SensitiveStringList')
@@ -252,6 +266,8 @@ module Aws::Odb
     StopDbNodeOutput = Shapes::StructureShape.new(name: 'StopDbNodeOutput')
     String = Shapes::StringShape.new(name: 'String')
     StringList = Shapes::ListShape.new(name: 'StringList')
+    StsAccess = Shapes::StructureShape.new(name: 'StsAccess')
+    SupportedAwsIntegration = Shapes::StringShape.new(name: 'SupportedAwsIntegration')
     SyntheticTimestamp_date_time = Shapes::TimestampShape.new(name: 'SyntheticTimestamp_date_time', timestampFormat: "iso8601")
     SystemVersionList = Shapes::ListShape.new(name: 'SystemVersionList')
     SystemVersionSummary = Shapes::StructureShape.new(name: 'SystemVersionSummary')
@@ -285,6 +301,13 @@ module Aws::Odb
     AccessDeniedException.add_member(:message, Shapes::ShapeRef.new(shape: String, required: true, location_name: "message"))
     AccessDeniedException.struct_class = Types::AccessDeniedException
 
+    AssociateIamRoleToResourceInput.add_member(:iam_role_arn, Shapes::ShapeRef.new(shape: RoleArn, required: true, location_name: "iamRoleArn"))
+    AssociateIamRoleToResourceInput.add_member(:aws_integration, Shapes::ShapeRef.new(shape: SupportedAwsIntegration, required: true, location_name: "awsIntegration"))
+    AssociateIamRoleToResourceInput.add_member(:resource_arn, Shapes::ShapeRef.new(shape: AssociateIamRoleToResourceInputResourceArnString, required: true, location_name: "resourceArn"))
+    AssociateIamRoleToResourceInput.struct_class = Types::AssociateIamRoleToResourceInput
+
+    AssociateIamRoleToResourceOutput.struct_class = Types::AssociateIamRoleToResourceOutput
+
     AutonomousVirtualMachineList.member = Shapes::ShapeRef.new(shape: AutonomousVirtualMachineSummary)
 
     AutonomousVirtualMachineSummary.add_member(:autonomous_virtual_machine_id, Shapes::ShapeRef.new(shape: ResourceId, location_name: "autonomousVirtualMachineId"))
@@ -543,6 +566,7 @@ module Aws::Odb
     CloudVmCluster.add_member(:odb_network_id, Shapes::ShapeRef.new(shape: ResourceIdOrArn, location_name: "odbNetworkId"))
     CloudVmCluster.add_member(:percent_progress, Shapes::ShapeRef.new(shape: Float, location_name: "percentProgress"))
     CloudVmCluster.add_member(:compute_model, Shapes::ShapeRef.new(shape: ComputeModel, location_name: "computeModel"))
+    CloudVmCluster.add_member(:iam_roles, Shapes::ShapeRef.new(shape: IamRoleList, location_name: "iamRoles"))
     CloudVmCluster.struct_class = Types::CloudVmCluster
 
     CloudVmClusterList.member = Shapes::ShapeRef.new(shape: CloudVmClusterSummary)
@@ -587,6 +611,7 @@ module Aws::Odb
     CloudVmClusterSummary.add_member(:odb_network_id, Shapes::ShapeRef.new(shape: ResourceIdOrArn, location_name: "odbNetworkId"))
     CloudVmClusterSummary.add_member(:percent_progress, Shapes::ShapeRef.new(shape: Float, location_name: "percentProgress"))
     CloudVmClusterSummary.add_member(:compute_model, Shapes::ShapeRef.new(shape: ComputeModel, location_name: "computeModel"))
+    CloudVmClusterSummary.add_member(:iam_roles, Shapes::ShapeRef.new(shape: IamRoleList, location_name: "iamRoles"))
     CloudVmClusterSummary.struct_class = Types::CloudVmClusterSummary
 
     ConflictException.add_member(:message, Shapes::ShapeRef.new(shape: String, required: true, location_name: "message"))
@@ -678,7 +703,12 @@ module Aws::Odb
     CreateOdbNetworkInput.add_member(:client_token, Shapes::ShapeRef.new(shape: CreateOdbNetworkInputClientTokenString, location_name: "clientToken", metadata: {"idempotencyToken" => true}))
     CreateOdbNetworkInput.add_member(:s3_access, Shapes::ShapeRef.new(shape: Access, location_name: "s3Access"))
     CreateOdbNetworkInput.add_member(:zero_etl_access, Shapes::ShapeRef.new(shape: Access, location_name: "zeroEtlAccess"))
+    CreateOdbNetworkInput.add_member(:sts_access, Shapes::ShapeRef.new(shape: Access, location_name: "stsAccess"))
+    CreateOdbNetworkInput.add_member(:kms_access, Shapes::ShapeRef.new(shape: Access, location_name: "kmsAccess"))
     CreateOdbNetworkInput.add_member(:s3_policy_document, Shapes::ShapeRef.new(shape: PolicyDocument, location_name: "s3PolicyDocument"))
+    CreateOdbNetworkInput.add_member(:sts_policy_document, Shapes::ShapeRef.new(shape: PolicyDocument, location_name: "stsPolicyDocument"))
+    CreateOdbNetworkInput.add_member(:kms_policy_document, Shapes::ShapeRef.new(shape: PolicyDocument, location_name: "kmsPolicyDocument"))
+    CreateOdbNetworkInput.add_member(:cross_region_s3_restore_sources_to_enable, Shapes::ShapeRef.new(shape: StringList, location_name: "crossRegionS3RestoreSourcesToEnable"))
     CreateOdbNetworkInput.add_member(:tags, Shapes::ShapeRef.new(shape: RequestTagMap, location_name: "tags"))
     CreateOdbNetworkInput.struct_class = Types::CreateOdbNetworkInput
 
@@ -702,6 +732,13 @@ module Aws::Odb
     CreateOdbPeeringConnectionOutput.add_member(:odb_peering_connection_id, Shapes::ShapeRef.new(shape: String, required: true, location_name: "odbPeeringConnectionId"))
     CreateOdbPeeringConnectionOutput.struct_class = Types::CreateOdbPeeringConnectionOutput
 
+    CrossRegionS3RestoreSourcesAccess.add_member(:region, Shapes::ShapeRef.new(shape: String, location_name: "region"))
+    CrossRegionS3RestoreSourcesAccess.add_member(:ipv4_addresses, Shapes::ShapeRef.new(shape: StringList, location_name: "ipv4Addresses"))
+    CrossRegionS3RestoreSourcesAccess.add_member(:status, Shapes::ShapeRef.new(shape: ManagedResourceStatus, location_name: "status"))
+    CrossRegionS3RestoreSourcesAccess.struct_class = Types::CrossRegionS3RestoreSourcesAccess
+
+    CrossRegionS3RestoreSourcesAccessList.member = Shapes::ShapeRef.new(shape: CrossRegionS3RestoreSourcesAccess)
+
     CustomerContact.add_member(:email, Shapes::ShapeRef.new(shape: CustomerContactEmailString, location_name: "email"))
     CustomerContact.struct_class = Types::CustomerContact
 
@@ -890,6 +927,13 @@ module Aws::Odb
 
     DeleteOdbPeeringConnectionOutput.struct_class = Types::DeleteOdbPeeringConnectionOutput
 
+    DisassociateIamRoleFromResourceInput.add_member(:iam_role_arn, Shapes::ShapeRef.new(shape: RoleArn, required: true, location_name: "iamRoleArn"))
+    DisassociateIamRoleFromResourceInput.add_member(:aws_integration, Shapes::ShapeRef.new(shape: SupportedAwsIntegration, required: true, location_name: "awsIntegration"))
+    DisassociateIamRoleFromResourceInput.add_member(:resource_arn, Shapes::ShapeRef.new(shape: DisassociateIamRoleFromResourceInputResourceArnString, required: true, location_name: "resourceArn"))
+    DisassociateIamRoleFromResourceInput.struct_class = Types::DisassociateIamRoleFromResourceInput
+
+    DisassociateIamRoleFromResourceOutput.struct_class = Types::DisassociateIamRoleFromResourceOutput
+
     ExadataIormConfig.add_member(:db_plans, Shapes::ShapeRef.new(shape: DbIormConfigList, location_name: "dbPlans"))
     ExadataIormConfig.add_member(:lifecycle_details, Shapes::ShapeRef.new(shape: String, location_name: "lifecycleDetails"))
     ExadataIormConfig.add_member(:lifecycle_state, Shapes::ShapeRef.new(shape: IormLifecycleState, location_name: "lifecycleState"))
@@ -940,6 +984,7 @@ module Aws::Odb
     GetOciOnboardingStatusOutput.add_member(:status, Shapes::ShapeRef.new(shape: OciOnboardingStatus, location_name: "status"))
     GetOciOnboardingStatusOutput.add_member(:existing_tenancy_activation_link, Shapes::ShapeRef.new(shape: String, location_name: "existingTenancyActivationLink"))
     GetOciOnboardingStatusOutput.add_member(:new_tenancy_activation_link, Shapes::ShapeRef.new(shape: String, location_name: "newTenancyActivationLink"))
+    GetOciOnboardingStatusOutput.add_member(:oci_identity_domain, Shapes::ShapeRef.new(shape: OciIdentityDomain, location_name: "ociIdentityDomain"))
     GetOciOnboardingStatusOutput.struct_class = Types::GetOciOnboardingStatusOutput
 
     GetOdbNetworkInput.add_member(:odb_network_id, Shapes::ShapeRef.new(shape: ResourceIdOrArn, required: true, location_name: "odbNetworkId"))
@@ -961,6 +1006,15 @@ module Aws::Odb
 
     HoursOfDay.member = Shapes::ShapeRef.new(shape: Integer)
 
+    IamRole.add_member(:iam_role_arn, Shapes::ShapeRef.new(shape: RoleArn, location_name: "iamRoleArn"))
+    IamRole.add_member(:status, Shapes::ShapeRef.new(shape: IamRoleStatus, location_name: "status"))
+    IamRole.add_member(:status_reason, Shapes::ShapeRef.new(shape: String, location_name: "statusReason"))
+    IamRole.add_member(:aws_integration, Shapes::ShapeRef.new(shape: SupportedAwsIntegration, location_name: "awsIntegration"))
+    IamRole.struct_class = Types::IamRole
+
+    IamRoleList.member = Shapes::ShapeRef.new(shape: IamRole)
+
+    InitializeServiceInput.add_member(:oci_identity_domain, Shapes::ShapeRef.new(shape: Boolean, location_name: "ociIdentityDomain"))
     InitializeServiceInput.struct_class = Types::InitializeServiceInput
 
     InitializeServiceOutput.struct_class = Types::InitializeServiceOutput
@@ -969,6 +1023,12 @@ module Aws::Odb
     InternalServerException.add_member(:retry_after_seconds, Shapes::ShapeRef.new(shape: Integer, location_name: "retryAfterSeconds"))
     InternalServerException.struct_class = Types::InternalServerException
 
+    KmsAccess.add_member(:status, Shapes::ShapeRef.new(shape: ManagedResourceStatus, location_name: "status"))
+    KmsAccess.add_member(:ipv4_addresses, Shapes::ShapeRef.new(shape: StringList, location_name: "ipv4Addresses"))
+    KmsAccess.add_member(:domain_name, Shapes::ShapeRef.new(shape: String, location_name: "domainName"))
+    KmsAccess.add_member(:kms_policy_document, Shapes::ShapeRef.new(shape: String, location_name: "kmsPolicyDocument"))
+    KmsAccess.struct_class = Types::KmsAccess
+
     ListAutonomousVirtualMachinesInput.add_member(:max_results, Shapes::ShapeRef.new(shape: ListAutonomousVirtualMachinesInputMaxResultsInteger, location_name: "maxResults"))
     ListAutonomousVirtualMachinesInput.add_member(:next_token, Shapes::ShapeRef.new(shape: ListAutonomousVirtualMachinesInputNextTokenString, location_name: "nextToken"))
     ListAutonomousVirtualMachinesInput.add_member(:cloud_autonomous_vm_cluster_id, Shapes::ShapeRef.new(shape: ResourceId, required: true, location_name: "cloudAutonomousVmClusterId"))
@@ -1097,6 +1157,9 @@ module Aws::Odb
     ManagedServices.add_member(:managed_s3_backup_access, Shapes::ShapeRef.new(shape: ManagedS3BackupAccess, location_name: "managedS3BackupAccess"))
     ManagedServices.add_member(:zero_etl_access, Shapes::ShapeRef.new(shape: ZeroEtlAccess, location_name: "zeroEtlAccess"))
     ManagedServices.add_member(:s3_access, Shapes::ShapeRef.new(shape: S3Access, location_name: "s3Access"))
+    ManagedServices.add_member(:sts_access, Shapes::ShapeRef.new(shape: StsAccess, location_name: "stsAccess"))
+    ManagedServices.add_member(:kms_access, Shapes::ShapeRef.new(shape: KmsAccess, location_name: "kmsAccess"))
+    ManagedServices.add_member(:cross_region_s3_restore_sources_access, Shapes::ShapeRef.new(shape: CrossRegionS3RestoreSourcesAccessList, location_name: "crossRegionS3RestoreSourcesAccess"))
     ManagedServices.struct_class = Types::ManagedServices
 
     Month.add_member(:name, Shapes::ShapeRef.new(shape: MonthName, location_name: "name"))
@@ -1110,6 +1173,14 @@ module Aws::Odb
 
     OciDnsForwardingConfigList.member = Shapes::ShapeRef.new(shape: OciDnsForwardingConfig)
 
+    OciIdentityDomain.add_member(:oci_identity_domain_id, Shapes::ShapeRef.new(shape: String, location_name: "ociIdentityDomainId"))
+    OciIdentityDomain.add_member(:oci_identity_domain_resource_url, Shapes::ShapeRef.new(shape: String, location_name: "ociIdentityDomainResourceUrl"))
+    OciIdentityDomain.add_member(:oci_identity_domain_url, Shapes::ShapeRef.new(shape: String, location_name: "ociIdentityDomainUrl"))
+    OciIdentityDomain.add_member(:status, Shapes::ShapeRef.new(shape: ResourceStatus, location_name: "status"))
+    OciIdentityDomain.add_member(:status_reason, Shapes::ShapeRef.new(shape: String, location_name: "statusReason"))
+    OciIdentityDomain.add_member(:account_setup_cloud_formation_url, Shapes::ShapeRef.new(shape: String, location_name: "accountSetupCloudFormationUrl"))
+    OciIdentityDomain.struct_class = Types::OciIdentityDomain
+
     OdbNetwork.add_member(:odb_network_id, Shapes::ShapeRef.new(shape: ResourceIdOrArn, required: true, location_name: "odbNetworkId"))
     OdbNetwork.add_member(:display_name, Shapes::ShapeRef.new(shape: String, location_name: "displayName"))
     OdbNetwork.add_member(:status, Shapes::ShapeRef.new(shape: ResourceStatus, location_name: "status"))
@@ -1246,6 +1317,12 @@ module Aws::Odb
 
     StringList.member = Shapes::ShapeRef.new(shape: String)
 
+    StsAccess.add_member(:status, Shapes::ShapeRef.new(shape: ManagedResourceStatus, location_name: "status"))
+    StsAccess.add_member(:ipv4_addresses, Shapes::ShapeRef.new(shape: StringList, location_name: "ipv4Addresses"))
+    StsAccess.add_member(:domain_name, Shapes::ShapeRef.new(shape: String, location_name: "domainName"))
+    StsAccess.add_member(:sts_policy_document, Shapes::ShapeRef.new(shape: String, location_name: "stsPolicyDocument"))
+    StsAccess.struct_class = Types::StsAccess
+
     SystemVersionList.member = Shapes::ShapeRef.new(shape: SystemVersionSummary)
 
     SystemVersionSummary.add_member(:gi_version, Shapes::ShapeRef.new(shape: String, location_name: "giVersion"))
@@ -1287,7 +1364,13 @@ module Aws::Odb
     UpdateOdbNetworkInput.add_member(:peered_cidrs_to_be_removed, Shapes::ShapeRef.new(shape: StringList, location_name: "peeredCidrsToBeRemoved"))
     UpdateOdbNetworkInput.add_member(:s3_access, Shapes::ShapeRef.new(shape: Access, location_name: "s3Access"))
     UpdateOdbNetworkInput.add_member(:zero_etl_access, Shapes::ShapeRef.new(shape: Access, location_name: "zeroEtlAccess"))
+    UpdateOdbNetworkInput.add_member(:sts_access, Shapes::ShapeRef.new(shape: Access, location_name: "stsAccess"))
+    UpdateOdbNetworkInput.add_member(:kms_access, Shapes::ShapeRef.new(shape: Access, location_name: "kmsAccess"))
     UpdateOdbNetworkInput.add_member(:s3_policy_document, Shapes::ShapeRef.new(shape: PolicyDocument, location_name: "s3PolicyDocument"))
+    UpdateOdbNetworkInput.add_member(:sts_policy_document, Shapes::ShapeRef.new(shape: PolicyDocument, location_name: "stsPolicyDocument"))
+    UpdateOdbNetworkInput.add_member(:kms_policy_document, Shapes::ShapeRef.new(shape: PolicyDocument, location_name: "kmsPolicyDocument"))
+    UpdateOdbNetworkInput.add_member(:cross_region_s3_restore_sources_to_enable, Shapes::ShapeRef.new(shape: StringList, location_name: "crossRegionS3RestoreSourcesToEnable"))
+    UpdateOdbNetworkInput.add_member(:cross_region_s3_restore_sources_to_disable, Shapes::ShapeRef.new(shape: StringList, location_name: "crossRegionS3RestoreSourcesToDisable"))
     UpdateOdbNetworkInput.struct_class = Types::UpdateOdbNetworkInput
 
     UpdateOdbNetworkOutput.add_member(:display_name, Shapes::ShapeRef.new(shape: String, location_name: "displayName"))
@@ -1359,6 +1442,20 @@ module Aws::Odb
         o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
       end)
 
+      api.add_operation(:associate_iam_role_to_resource, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "AssociateIamRoleToResource"
+        o.http_method = "POST"
+        o.http_request_uri = "/"
+        o.input = Shapes::ShapeRef.new(shape: AssociateIamRoleToResourceInput)
+        o.output = Shapes::ShapeRef.new(shape: AssociateIamRoleToResourceOutput)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
+        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
+        o.errors << Shapes::ShapeRef.new(shape: ConflictException)
+        o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
+        o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
+        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+      end)
+
       api.add_operation(:create_cloud_autonomous_vm_cluster, Seahorse::Model::Operation.new.tap do |o|
         o.name = "CreateCloudAutonomousVmCluster"
         o.http_method = "POST"
@@ -1497,6 +1594,20 @@ module Aws::Odb
         o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
       end)
 
+      api.add_operation(:disassociate_iam_role_from_resource, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "DisassociateIamRoleFromResource"
+        o.http_method = "POST"
+        o.http_request_uri = "/"
+        o.input = Shapes::ShapeRef.new(shape: DisassociateIamRoleFromResourceInput)
+        o.output = Shapes::ShapeRef.new(shape: DisassociateIamRoleFromResourceOutput)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
+        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
+        o.errors << Shapes::ShapeRef.new(shape: ConflictException)
+        o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
+        o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
+        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+      end)
+
       api.add_operation(:get_cloud_autonomous_vm_cluster, Seahorse::Model::Operation.new.tap do |o|
         o.name = "GetCloudAutonomousVmCluster"
         o.http_method = "POST"