aws-sdk-odb 1.24.0 → 1.25.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b21c660945456d2bfc5123888c5b7627a777e70b4479b6d4ec308fd2f6b18833
-  data.tar.gz: 6cd26782ab4c2fd76933e92bebbefa08a0c9f769427566142235696104340d3a
+  metadata.gz: 92b317906575a577232e1c337c4d2acd8d0c6664615ba1f316146145fbcb8d5d
+  data.tar.gz: f860d269fa7deede8015e52557136933a3fb117053b039d424537387db0103b0
 SHA512:
-  metadata.gz: fa552f11cbff300ee35c474b5cd8f3a6e167b41974e30adf5ee657233e4b40839774572becbc1c09949d5b14b459b032be53426d16e555d4dc6dd5678c39d1d1
-  data.tar.gz: d9b4893108903623928da94e34f151a4f98fa674744ddbcb362b0d661c3cd7a5fe63348ad67460754ebe1f527ff92369a643c56ef1591bb0d4b8e1b50889b7ed
+  metadata.gz: eb3528f6f90d5990af0a980e8cecad3d97279cf5b19720b5910ae1086f0b8cf3e1c799dca684b13e9ca149045927a5acd45a7aac94ad597ef62835a43191d5ee
+  data.tar.gz: 73969085a4f3875e824f224e930170d4cd2566888851f615b6f933e4be6129fd65faafe815d5b6ad8fe8da34938b108e44a66956f17b991e0f35a87e6fd5a450

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.25.0 (2026-07-17)
+------------------
+
+* Feature - Adds support for sourcing Autonomous Database admin and wallet passwords from customer-managed AWS Secrets Manager secrets, including password source configuration and summaries, and enabling or disabling the OCI IAM service role for Secrets Manager integration via InitializeService.
+
 1.24.0 (2026-07-09)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.24.0
+1.25.0

data/lib/aws-sdk-odb/client.rb

@@ -683,6 +683,15 @@ module Aws::Odb
     #   The configuration of the encryption key to use for the Autonomous
     #   Database.
     #
+    # @option params [String] :admin_password_source
+    #   The source of the admin password for the Autonomous Database. When set
+    #   to `CUSTOMER_MANAGED_AWS_SECRET`, the admin password is retrieved from
+    #   an Amazon Web Services Secrets Manager secret.
+    #
+    # @option params [Types::AdminPasswordSourceConfigurationInput] :admin_password_source_configuration
+    #   The configuration of the admin password source for the Autonomous
+    #   Database.
+    #
     # @option params [String] :client_token
     #   A client-provided token to ensure the idempotency of the request.
     #
@@ -808,6 +817,14 @@ module Aws::Odb
     #         kms_key_id: "KmsKeyIdOrArn",
     #       },
     #     },
+    #     admin_password_source: "CUSTOMER_MANAGED_AWS_SECRET", # accepts CUSTOMER_MANAGED_AWS_SECRET, API_REQUEST_PARAMETER
+    #     admin_password_source_configuration: {
+    #       customer_managed_aws_secret: {
+    #         secret_id: "SecretIdOrArn",
+    #         iam_role_arn: "RoleArn",
+    #         external_id_type: "database_ocid", # accepts database_ocid, compartment_ocid, tenant_ocid
+    #       },
+    #     },
     #     client_token: "CreateAutonomousDatabaseInputClientTokenString",
     #     tags: {
     #       "TagKey" => "TagValue",
@@ -897,9 +914,18 @@ module Aws::Odb
     #   The type of wallet to create, either a regional wallet or an instance
     #   wallet.
     #
-    # @option params [required, String] :password
+    # @option params [String] :password
     #   The password to encrypt the keys inside the wallet.
     #
+    # @option params [String] :password_source
+    #   The source of the password for encrypting the wallet. When set to
+    #   `CUSTOMER_MANAGED_AWS_SECRET`, the password is retrieved from an
+    #   Amazon Web Services Secrets Manager secret.
+    #
+    # @option params [Types::WalletPasswordSourceConfigurationInput] :password_source_configuration
+    #   The configuration of the password source for the Autonomous Database
+    #   wallet.
+    #
     # @option params [String] :client_token
     #   A client-provided token to ensure the idempotency of the request.
     #
@@ -915,7 +941,15 @@ module Aws::Odb
     #   resp = client.create_autonomous_database_wallet({
     #     autonomous_database_id: "ResourceIdOrArn", # required
     #     wallet_type: "REGIONAL", # accepts REGIONAL, INSTANCE
-    #     password: "CreateAutonomousDatabaseWalletInputPasswordString", # required
+    #     password: "CreateAutonomousDatabaseWalletInputPasswordString",
+    #     password_source: "CUSTOMER_MANAGED_AWS_SECRET", # accepts CUSTOMER_MANAGED_AWS_SECRET, API_REQUEST_PARAMETER
+    #     password_source_configuration: {
+    #       customer_managed_aws_secret: {
+    #         secret_id: "SecretIdOrArn",
+    #         iam_role_arn: "RoleArn",
+    #         external_id_type: "database_ocid", # accepts database_ocid, compartment_ocid, tenant_ocid
+    #       },
+    #     },
     #     client_token: "CreateAutonomousDatabaseWalletInputClientTokenString",
     #   })
     #
@@ -2031,6 +2065,10 @@ module Aws::Odb
     #   resp.autonomous_database.time_until_reconnect_clone_enabled #=> Time
     #   resp.autonomous_database.next_long_term_backup_time_stamp #=> Time
     #   resp.autonomous_database.time_undeleted #=> Time
+    #   resp.autonomous_database.admin_password_source_summary.admin_password_source #=> String, one of "CUSTOMER_MANAGED_AWS_SECRET", "API_REQUEST_PARAMETER"
+    #   resp.autonomous_database.admin_password_source_summary.admin_password_source_configuration.customer_managed_aws_secret.iam_role_arn #=> String
+    #   resp.autonomous_database.admin_password_source_summary.admin_password_source_configuration.customer_managed_aws_secret.secret_id #=> String
+    #   resp.autonomous_database.admin_password_source_summary.admin_password_source_configuration.customer_managed_aws_secret.external_id_type #=> String, one of "database_ocid", "compartment_ocid", "tenant_ocid"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/odb-2024-08-20/GetAutonomousDatabase AWS API Documentation
     #
@@ -2104,6 +2142,10 @@ module Aws::Odb
     #
     #   resp.autonomous_database_wallet_details.status #=> String, one of "ACTIVE", "UPDATING"
     #   resp.autonomous_database_wallet_details.time_rotated #=> Time
+    #   resp.autonomous_database_wallet_details.password_source_summary.password_source #=> String, one of "CUSTOMER_MANAGED_AWS_SECRET", "API_REQUEST_PARAMETER"
+    #   resp.autonomous_database_wallet_details.password_source_summary.password_source_configuration.customer_managed_aws_secret.iam_role_arn #=> String
+    #   resp.autonomous_database_wallet_details.password_source_summary.password_source_configuration.customer_managed_aws_secret.secret_id #=> String
+    #   resp.autonomous_database_wallet_details.password_source_summary.password_source_configuration.customer_managed_aws_secret.external_id_type #=> String, one of "database_ocid", "compartment_ocid", "tenant_ocid"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/odb-2024-08-20/GetAutonomousDatabaseWalletDetails AWS API Documentation
     #
@@ -2564,7 +2606,9 @@ module Aws::Odb
     #   resp.oci_identity_domain.account_setup_cloud_formation_url #=> String
     #   resp.autonomous_database_oci_integration_iam_roles #=> Array
     #   resp.autonomous_database_oci_integration_iam_roles[0].iam_role_arn #=> String
-    #   resp.autonomous_database_oci_integration_iam_roles[0].aws_integration #=> String, one of "KmsTde"
+    #   resp.autonomous_database_oci_integration_iam_roles[0].aws_integration #=> String, one of "KmsTde", "SecretsManager"
+    #   resp.autonomous_database_oci_integration_iam_roles[0].status #=> String, one of "PROVISIONING", "AVAILABLE", "PROVISION_FAILED", "TERMINATING", "TERMINATE_FAILED"
+    #   resp.autonomous_database_oci_integration_iam_roles[0].status_reason #=> String
     #   resp.linked_oci_tenancy_id #=> String
     #   resp.linked_oci_compartment_id #=> String
     #   resp.subscription_errors #=> Array
@@ -2708,12 +2752,18 @@ module Aws::Odb
     #   The Oracle Cloud Infrastructure (OCI) identity domain configuration
     #   for service initialization.
     #
+    # @option params [String] :autonomous_database_oci_aws_secrets_manager_integration
+    #   Specifies whether to enable or disable the OCI service-account role
+    #   for Amazon Web Services Secrets Manager integration with Autonomous
+    #   Database.
+    #
     # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
     #
     # @example Request syntax with placeholder values
     #
     #   resp = client.initialize_service({
     #     oci_identity_domain: false,
+    #     autonomous_database_oci_aws_secrets_manager_integration: "ENABLED", # accepts ENABLED, DISABLED
     #   })
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/odb-2024-08-20/InitializeService AWS API Documentation
@@ -3049,6 +3099,10 @@ module Aws::Odb
     #   resp.autonomous_database_clones[0].time_until_reconnect_clone_enabled #=> Time
     #   resp.autonomous_database_clones[0].next_long_term_backup_time_stamp #=> Time
     #   resp.autonomous_database_clones[0].time_undeleted #=> Time
+    #   resp.autonomous_database_clones[0].admin_password_source_summary.admin_password_source #=> String, one of "CUSTOMER_MANAGED_AWS_SECRET", "API_REQUEST_PARAMETER"
+    #   resp.autonomous_database_clones[0].admin_password_source_summary.admin_password_source_configuration.customer_managed_aws_secret.iam_role_arn #=> String
+    #   resp.autonomous_database_clones[0].admin_password_source_summary.admin_password_source_configuration.customer_managed_aws_secret.secret_id #=> String
+    #   resp.autonomous_database_clones[0].admin_password_source_summary.admin_password_source_configuration.customer_managed_aws_secret.external_id_type #=> String, one of "database_ocid", "compartment_ocid", "tenant_ocid"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/odb-2024-08-20/ListAutonomousDatabaseClones AWS API Documentation
     #
@@ -3364,6 +3418,10 @@ module Aws::Odb
     #   resp.autonomous_databases[0].time_until_reconnect_clone_enabled #=> Time
     #   resp.autonomous_databases[0].next_long_term_backup_time_stamp #=> Time
     #   resp.autonomous_databases[0].time_undeleted #=> Time
+    #   resp.autonomous_databases[0].admin_password_source_summary.admin_password_source #=> String, one of "CUSTOMER_MANAGED_AWS_SECRET", "API_REQUEST_PARAMETER"
+    #   resp.autonomous_databases[0].admin_password_source_summary.admin_password_source_configuration.customer_managed_aws_secret.iam_role_arn #=> String
+    #   resp.autonomous_databases[0].admin_password_source_summary.admin_password_source_configuration.customer_managed_aws_secret.secret_id #=> String
+    #   resp.autonomous_databases[0].admin_password_source_summary.admin_password_source_configuration.customer_managed_aws_secret.external_id_type #=> String, one of "database_ocid", "compartment_ocid", "tenant_ocid"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/odb-2024-08-20/ListAutonomousDatabases AWS API Documentation
     #
@@ -4793,6 +4851,15 @@ module Aws::Odb
     #   The configuration of the encryption key to use for the Autonomous
     #   Database.
     #
+    # @option params [String] :admin_password_source
+    #   The source of the admin password for the Autonomous Database. When set
+    #   to `CUSTOMER_MANAGED_AWS_SECRET`, the admin password is retrieved from
+    #   an Amazon Web Services Secrets Manager secret.
+    #
+    # @option params [Types::AdminPasswordSourceConfigurationInput] :admin_password_source_configuration
+    #   The configuration of the admin password source for the Autonomous
+    #   Database.
+    #
     # @return [Types::UpdateAutonomousDatabaseOutput] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::UpdateAutonomousDatabaseOutput#autonomous_database_id #autonomous_database_id} => String
@@ -4883,6 +4950,14 @@ module Aws::Odb
     #         kms_key_id: "KmsKeyIdOrArn",
     #       },
     #     },
+    #     admin_password_source: "CUSTOMER_MANAGED_AWS_SECRET", # accepts CUSTOMER_MANAGED_AWS_SECRET, API_REQUEST_PARAMETER
+    #     admin_password_source_configuration: {
+    #       customer_managed_aws_secret: {
+    #         secret_id: "SecretIdOrArn",
+    #         iam_role_arn: "RoleArn",
+    #         external_id_type: "database_ocid", # accepts database_ocid, compartment_ocid, tenant_ocid
+    #       },
+    #     },
     #   })
     #
     # @example Response structure
@@ -5162,7 +5237,7 @@ module Aws::Odb
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-odb'
-      context[:gem_version] = '1.24.0'
+      context[:gem_version] = '1.25.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-odb/client_api.rb

@@ -18,6 +18,10 @@ module Aws::Odb
     AcceptMarketplaceRegistrationOutput = Shapes::StructureShape.new(name: 'AcceptMarketplaceRegistrationOutput')
     Access = Shapes::StringShape.new(name: 'Access')
     AccessDeniedException = Shapes::StructureShape.new(name: 'AccessDeniedException')
+    AdminPasswordSource = Shapes::StringShape.new(name: 'AdminPasswordSource')
+    AdminPasswordSourceConfiguration = Shapes::UnionShape.new(name: 'AdminPasswordSourceConfiguration')
+    AdminPasswordSourceConfigurationInput = Shapes::UnionShape.new(name: 'AdminPasswordSourceConfigurationInput')
+    AdminPasswordSourceSummary = Shapes::StructureShape.new(name: 'AdminPasswordSourceSummary')
     Arn = Shapes::StringShape.new(name: 'Arn')
     AssociateIamRoleToResourceInput = Shapes::StructureShape.new(name: 'AssociateIamRoleToResourceInput')
     AssociateIamRoleToResourceInputResourceArnString = Shapes::StringShape.new(name: 'AssociateIamRoleToResourceInputResourceArnString')
@@ -135,6 +139,8 @@ module Aws::Odb
     CustomerContact = Shapes::StructureShape.new(name: 'CustomerContact')
     CustomerContactEmailString = Shapes::StringShape.new(name: 'CustomerContactEmailString')
     CustomerContacts = Shapes::ListShape.new(name: 'CustomerContacts')
+    CustomerManagedAwsSecretConfiguration = Shapes::StructureShape.new(name: 'CustomerManagedAwsSecretConfiguration')
+    CustomerManagedAwsSecretConfigurationInput = Shapes::StructureShape.new(name: 'CustomerManagedAwsSecretConfigurationInput')
     DataCollectionOptions = Shapes::StructureShape.new(name: 'DataCollectionOptions')
     DataGuardRole = Shapes::StringShape.new(name: 'DataGuardRole')
     DataSafeStatus = Shapes::StringShape.new(name: 'DataSafeStatus')
@@ -334,6 +340,7 @@ module Aws::Odb
     OciEncryptionKeyConfigurationVaultIdString = Shapes::StringShape.new(name: 'OciEncryptionKeyConfigurationVaultIdString')
     OciIamRole = Shapes::StructureShape.new(name: 'OciIamRole')
     OciIamRoleList = Shapes::ListShape.new(name: 'OciIamRoleList')
+    OciIamRoleStatus = Shapes::StringShape.new(name: 'OciIamRoleStatus')
     OciIdentityDomain = Shapes::StructureShape.new(name: 'OciIdentityDomain')
     OciOnboardingStatus = Shapes::StringShape.new(name: 'OciOnboardingStatus')
     OdbNetwork = Shapes::StructureShape.new(name: 'OdbNetwork')
@@ -394,6 +401,7 @@ module Aws::Odb
     S3Access = Shapes::StructureShape.new(name: 'S3Access')
     ScheduledOperationDetails = Shapes::StructureShape.new(name: 'ScheduledOperationDetails')
     ScheduledOperationDetailsList = Shapes::ListShape.new(name: 'ScheduledOperationDetailsList')
+    SecretIdOrArn = Shapes::StringShape.new(name: 'SecretIdOrArn')
     SensitiveString = Shapes::StringShape.new(name: 'SensitiveString')
     SensitiveStringList = Shapes::ListShape.new(name: 'SensitiveStringList')
     ServiceNetworkEndpoint = Shapes::StructureShape.new(name: 'ServiceNetworkEndpoint')
@@ -460,6 +468,10 @@ module Aws::Odb
     ValidationExceptionFieldList = Shapes::ListShape.new(name: 'ValidationExceptionFieldList')
     ValidationExceptionReason = Shapes::StringShape.new(name: 'ValidationExceptionReason')
     VpcEndpointType = Shapes::StringShape.new(name: 'VpcEndpointType')
+    WalletPasswordSource = Shapes::StringShape.new(name: 'WalletPasswordSource')
+    WalletPasswordSourceConfiguration = Shapes::UnionShape.new(name: 'WalletPasswordSourceConfiguration')
+    WalletPasswordSourceConfigurationInput = Shapes::UnionShape.new(name: 'WalletPasswordSourceConfigurationInput')
+    WalletPasswordSourceSummary = Shapes::StructureShape.new(name: 'WalletPasswordSourceSummary')
     WalletType = Shapes::StringShape.new(name: 'WalletType')
     WeeksOfMonth = Shapes::ListShape.new(name: 'WeeksOfMonth')
     ZeroEtlAccess = Shapes::StructureShape.new(name: 'ZeroEtlAccess')
@@ -473,6 +485,22 @@ module Aws::Odb
     AccessDeniedException.add_member(:message, Shapes::ShapeRef.new(shape: String, required: true, location_name: "message"))
     AccessDeniedException.struct_class = Types::AccessDeniedException
 
+    AdminPasswordSourceConfiguration.add_member(:customer_managed_aws_secret, Shapes::ShapeRef.new(shape: CustomerManagedAwsSecretConfiguration, location_name: "customerManagedAwsSecret"))
+    AdminPasswordSourceConfiguration.add_member(:unknown, Shapes::ShapeRef.new(shape: nil, location_name: 'unknown'))
+    AdminPasswordSourceConfiguration.add_member_subclass(:customer_managed_aws_secret, Types::AdminPasswordSourceConfiguration::CustomerManagedAwsSecret)
+    AdminPasswordSourceConfiguration.add_member_subclass(:unknown, Types::AdminPasswordSourceConfiguration::Unknown)
+    AdminPasswordSourceConfiguration.struct_class = Types::AdminPasswordSourceConfiguration
+
+    AdminPasswordSourceConfigurationInput.add_member(:customer_managed_aws_secret, Shapes::ShapeRef.new(shape: CustomerManagedAwsSecretConfigurationInput, location_name: "customerManagedAwsSecret"))
+    AdminPasswordSourceConfigurationInput.add_member(:unknown, Shapes::ShapeRef.new(shape: nil, location_name: 'unknown'))
+    AdminPasswordSourceConfigurationInput.add_member_subclass(:customer_managed_aws_secret, Types::AdminPasswordSourceConfigurationInput::CustomerManagedAwsSecret)
+    AdminPasswordSourceConfigurationInput.add_member_subclass(:unknown, Types::AdminPasswordSourceConfigurationInput::Unknown)
+    AdminPasswordSourceConfigurationInput.struct_class = Types::AdminPasswordSourceConfigurationInput
+
+    AdminPasswordSourceSummary.add_member(:admin_password_source, Shapes::ShapeRef.new(shape: AdminPasswordSource, location_name: "adminPasswordSource"))
+    AdminPasswordSourceSummary.add_member(:admin_password_source_configuration, Shapes::ShapeRef.new(shape: AdminPasswordSourceConfiguration, location_name: "adminPasswordSourceConfiguration"))
+    AdminPasswordSourceSummary.struct_class = Types::AdminPasswordSourceSummary
+
     AssociateIamRoleToResourceInput.add_member(:iam_role_arn, Shapes::ShapeRef.new(shape: RoleArn, required: true, location_name: "iamRoleArn"))
     AssociateIamRoleToResourceInput.add_member(:aws_integration, Shapes::ShapeRef.new(shape: SupportedAwsIntegration, required: true, location_name: "awsIntegration"))
     AssociateIamRoleToResourceInput.add_member(:resource_arn, Shapes::ShapeRef.new(shape: AssociateIamRoleToResourceInputResourceArnString, required: true, location_name: "resourceArn"))
@@ -583,6 +611,7 @@ module Aws::Odb
     AutonomousDatabase.add_member(:time_until_reconnect_clone_enabled, Shapes::ShapeRef.new(shape: SyntheticTimestamp_date_time, location_name: "timeUntilReconnectCloneEnabled"))
     AutonomousDatabase.add_member(:next_long_term_backup_time_stamp, Shapes::ShapeRef.new(shape: SyntheticTimestamp_date_time, location_name: "nextLongTermBackupTimeStamp"))
     AutonomousDatabase.add_member(:time_undeleted, Shapes::ShapeRef.new(shape: SyntheticTimestamp_date_time, location_name: "timeUndeleted"))
+    AutonomousDatabase.add_member(:admin_password_source_summary, Shapes::ShapeRef.new(shape: AdminPasswordSourceSummary, location_name: "adminPasswordSourceSummary"))
     AutonomousDatabase.struct_class = Types::AutonomousDatabase
 
     AutonomousDatabaseApex.add_member(:apex_version, Shapes::ShapeRef.new(shape: String, location_name: "apexVersion"))
@@ -762,6 +791,7 @@ module Aws::Odb
     AutonomousDatabaseSummary.add_member(:time_until_reconnect_clone_enabled, Shapes::ShapeRef.new(shape: SyntheticTimestamp_date_time, location_name: "timeUntilReconnectCloneEnabled"))
     AutonomousDatabaseSummary.add_member(:next_long_term_backup_time_stamp, Shapes::ShapeRef.new(shape: SyntheticTimestamp_date_time, location_name: "nextLongTermBackupTimeStamp"))
     AutonomousDatabaseSummary.add_member(:time_undeleted, Shapes::ShapeRef.new(shape: SyntheticTimestamp_date_time, location_name: "timeUndeleted"))
+    AutonomousDatabaseSummary.add_member(:admin_password_source_summary, Shapes::ShapeRef.new(shape: AdminPasswordSourceSummary, location_name: "adminPasswordSourceSummary"))
     AutonomousDatabaseSummary.struct_class = Types::AutonomousDatabaseSummary
 
     AutonomousDatabaseVersionList.member = Shapes::ShapeRef.new(shape: AutonomousDatabaseVersionSummary)
@@ -773,6 +803,7 @@ module Aws::Odb
 
     AutonomousDatabaseWalletDetails.add_member(:status, Shapes::ShapeRef.new(shape: AutonomousDatabaseWalletStatus, location_name: "status"))
     AutonomousDatabaseWalletDetails.add_member(:time_rotated, Shapes::ShapeRef.new(shape: SyntheticTimestamp_date_time, location_name: "timeRotated"))
+    AutonomousDatabaseWalletDetails.add_member(:password_source_summary, Shapes::ShapeRef.new(shape: WalletPasswordSourceSummary, location_name: "passwordSourceSummary"))
     AutonomousDatabaseWalletDetails.struct_class = Types::AutonomousDatabaseWalletDetails
 
     AutonomousVirtualMachineList.member = Shapes::ShapeRef.new(shape: AutonomousVirtualMachineSummary)
@@ -1165,6 +1196,8 @@ module Aws::Odb
     CreateAutonomousDatabaseInput.add_member(:source_configuration, Shapes::ShapeRef.new(shape: SourceConfiguration, location_name: "sourceConfiguration"))
     CreateAutonomousDatabaseInput.add_member(:encryption_key_provider, Shapes::ShapeRef.new(shape: EncryptionKeyProviderInput, location_name: "encryptionKeyProvider"))
     CreateAutonomousDatabaseInput.add_member(:encryption_key_configuration, Shapes::ShapeRef.new(shape: EncryptionKeyConfigurationInput, location_name: "encryptionKeyConfiguration"))
+    CreateAutonomousDatabaseInput.add_member(:admin_password_source, Shapes::ShapeRef.new(shape: AdminPasswordSource, location_name: "adminPasswordSource"))
+    CreateAutonomousDatabaseInput.add_member(:admin_password_source_configuration, Shapes::ShapeRef.new(shape: AdminPasswordSourceConfigurationInput, location_name: "adminPasswordSourceConfiguration"))
     CreateAutonomousDatabaseInput.add_member(:client_token, Shapes::ShapeRef.new(shape: CreateAutonomousDatabaseInputClientTokenString, location_name: "clientToken", metadata: {"idempotencyToken" => true}))
     CreateAutonomousDatabaseInput.add_member(:tags, Shapes::ShapeRef.new(shape: RequestTagMap, location_name: "tags"))
     CreateAutonomousDatabaseInput.struct_class = Types::CreateAutonomousDatabaseInput
@@ -1177,7 +1210,9 @@ module Aws::Odb
 
     CreateAutonomousDatabaseWalletInput.add_member(:autonomous_database_id, Shapes::ShapeRef.new(shape: ResourceIdOrArn, required: true, location_name: "autonomousDatabaseId"))
     CreateAutonomousDatabaseWalletInput.add_member(:wallet_type, Shapes::ShapeRef.new(shape: WalletType, location_name: "walletType"))
-    CreateAutonomousDatabaseWalletInput.add_member(:password, Shapes::ShapeRef.new(shape: CreateAutonomousDatabaseWalletInputPasswordString, required: true, location_name: "password"))
+    CreateAutonomousDatabaseWalletInput.add_member(:password, Shapes::ShapeRef.new(shape: CreateAutonomousDatabaseWalletInputPasswordString, location_name: "password"))
+    CreateAutonomousDatabaseWalletInput.add_member(:password_source, Shapes::ShapeRef.new(shape: WalletPasswordSource, location_name: "passwordSource"))
+    CreateAutonomousDatabaseWalletInput.add_member(:password_source_configuration, Shapes::ShapeRef.new(shape: WalletPasswordSourceConfigurationInput, location_name: "passwordSourceConfiguration"))
     CreateAutonomousDatabaseWalletInput.add_member(:client_token, Shapes::ShapeRef.new(shape: CreateAutonomousDatabaseWalletInputClientTokenString, location_name: "clientToken", metadata: {"idempotencyToken" => true}))
     CreateAutonomousDatabaseWalletInput.struct_class = Types::CreateAutonomousDatabaseWalletInput
 
@@ -1318,6 +1353,16 @@ module Aws::Odb
 
     CustomerContacts.member = Shapes::ShapeRef.new(shape: CustomerContact)
 
+    CustomerManagedAwsSecretConfiguration.add_member(:iam_role_arn, Shapes::ShapeRef.new(shape: RoleArn, location_name: "iamRoleArn"))
+    CustomerManagedAwsSecretConfiguration.add_member(:secret_id, Shapes::ShapeRef.new(shape: SecretIdOrArn, location_name: "secretId"))
+    CustomerManagedAwsSecretConfiguration.add_member(:external_id_type, Shapes::ShapeRef.new(shape: ExternalIdType, location_name: "externalIdType"))
+    CustomerManagedAwsSecretConfiguration.struct_class = Types::CustomerManagedAwsSecretConfiguration
+
+    CustomerManagedAwsSecretConfigurationInput.add_member(:secret_id, Shapes::ShapeRef.new(shape: SecretIdOrArn, location_name: "secretId"))
+    CustomerManagedAwsSecretConfigurationInput.add_member(:iam_role_arn, Shapes::ShapeRef.new(shape: RoleArn, location_name: "iamRoleArn"))
+    CustomerManagedAwsSecretConfigurationInput.add_member(:external_id_type, Shapes::ShapeRef.new(shape: ExternalIdType, location_name: "externalIdType"))
+    CustomerManagedAwsSecretConfigurationInput.struct_class = Types::CustomerManagedAwsSecretConfigurationInput
+
     DataCollectionOptions.add_member(:is_diagnostics_events_enabled, Shapes::ShapeRef.new(shape: Boolean, location_name: "isDiagnosticsEventsEnabled"))
     DataCollectionOptions.add_member(:is_health_monitoring_enabled, Shapes::ShapeRef.new(shape: Boolean, location_name: "isHealthMonitoringEnabled"))
     DataCollectionOptions.add_member(:is_incident_logs_enabled, Shapes::ShapeRef.new(shape: Boolean, location_name: "isIncidentLogsEnabled"))
@@ -1696,6 +1741,7 @@ module Aws::Odb
     IamRoleList.member = Shapes::ShapeRef.new(shape: IamRole)
 
     InitializeServiceInput.add_member(:oci_identity_domain, Shapes::ShapeRef.new(shape: Boolean, location_name: "ociIdentityDomain"))
+    InitializeServiceInput.add_member(:autonomous_database_oci_aws_secrets_manager_integration, Shapes::ShapeRef.new(shape: Access, location_name: "autonomousDatabaseOciAwsSecretsManagerIntegration"))
     InitializeServiceInput.struct_class = Types::InitializeServiceInput
 
     InitializeServiceOutput.struct_class = Types::InitializeServiceOutput
@@ -1923,6 +1969,8 @@ module Aws::Odb
 
     OciIamRole.add_member(:iam_role_arn, Shapes::ShapeRef.new(shape: RoleArn, location_name: "iamRoleArn"))
     OciIamRole.add_member(:aws_integration, Shapes::ShapeRef.new(shape: OciAwsIntegration, location_name: "awsIntegration"))
+    OciIamRole.add_member(:status, Shapes::ShapeRef.new(shape: OciIamRoleStatus, location_name: "status"))
+    OciIamRole.add_member(:status_reason, Shapes::ShapeRef.new(shape: String, location_name: "statusReason"))
     OciIamRole.struct_class = Types::OciIamRole
 
     OciIamRoleList.member = Shapes::ShapeRef.new(shape: OciIamRole)
@@ -2276,6 +2324,8 @@ module Aws::Odb
     UpdateAutonomousDatabaseInput.add_member(:time_of_auto_refresh_start, Shapes::ShapeRef.new(shape: SyntheticTimestamp_date_time, location_name: "timeOfAutoRefreshStart"))
     UpdateAutonomousDatabaseInput.add_member(:encryption_key_provider, Shapes::ShapeRef.new(shape: EncryptionKeyProviderInput, location_name: "encryptionKeyProvider"))
     UpdateAutonomousDatabaseInput.add_member(:encryption_key_configuration, Shapes::ShapeRef.new(shape: EncryptionKeyConfigurationInput, location_name: "encryptionKeyConfiguration"))
+    UpdateAutonomousDatabaseInput.add_member(:admin_password_source, Shapes::ShapeRef.new(shape: AdminPasswordSource, location_name: "adminPasswordSource"))
+    UpdateAutonomousDatabaseInput.add_member(:admin_password_source_configuration, Shapes::ShapeRef.new(shape: AdminPasswordSourceConfigurationInput, location_name: "adminPasswordSourceConfiguration"))
     UpdateAutonomousDatabaseInput.struct_class = Types::UpdateAutonomousDatabaseInput
 
     UpdateAutonomousDatabaseOutput.add_member(:autonomous_database_id, Shapes::ShapeRef.new(shape: String, required: true, location_name: "autonomousDatabaseId"))
@@ -2338,6 +2388,22 @@ module Aws::Odb
 
     ValidationExceptionFieldList.member = Shapes::ShapeRef.new(shape: ValidationExceptionField)
 
+    WalletPasswordSourceConfiguration.add_member(:customer_managed_aws_secret, Shapes::ShapeRef.new(shape: CustomerManagedAwsSecretConfiguration, location_name: "customerManagedAwsSecret"))
+    WalletPasswordSourceConfiguration.add_member(:unknown, Shapes::ShapeRef.new(shape: nil, location_name: 'unknown'))
+    WalletPasswordSourceConfiguration.add_member_subclass(:customer_managed_aws_secret, Types::WalletPasswordSourceConfiguration::CustomerManagedAwsSecret)
+    WalletPasswordSourceConfiguration.add_member_subclass(:unknown, Types::WalletPasswordSourceConfiguration::Unknown)
+    WalletPasswordSourceConfiguration.struct_class = Types::WalletPasswordSourceConfiguration
+
+    WalletPasswordSourceConfigurationInput.add_member(:customer_managed_aws_secret, Shapes::ShapeRef.new(shape: CustomerManagedAwsSecretConfigurationInput, location_name: "customerManagedAwsSecret"))
+    WalletPasswordSourceConfigurationInput.add_member(:unknown, Shapes::ShapeRef.new(shape: nil, location_name: 'unknown'))
+    WalletPasswordSourceConfigurationInput.add_member_subclass(:customer_managed_aws_secret, Types::WalletPasswordSourceConfigurationInput::CustomerManagedAwsSecret)
+    WalletPasswordSourceConfigurationInput.add_member_subclass(:unknown, Types::WalletPasswordSourceConfigurationInput::Unknown)
+    WalletPasswordSourceConfigurationInput.struct_class = Types::WalletPasswordSourceConfigurationInput
+
+    WalletPasswordSourceSummary.add_member(:password_source, Shapes::ShapeRef.new(shape: WalletPasswordSource, location_name: "passwordSource"))
+    WalletPasswordSourceSummary.add_member(:password_source_configuration, Shapes::ShapeRef.new(shape: WalletPasswordSourceConfiguration, location_name: "passwordSourceConfiguration"))
+    WalletPasswordSourceSummary.struct_class = Types::WalletPasswordSourceSummary
+
     WeeksOfMonth.member = Shapes::ShapeRef.new(shape: Integer)
 
     ZeroEtlAccess.add_member(:status, Shapes::ShapeRef.new(shape: ManagedResourceStatus, location_name: "status"))

data/lib/aws-sdk-odb/types.rb

@@ -41,6 +41,73 @@ module Aws::Odb
       include Aws::Structure
     end
 
+    # The configuration of the admin password source. This is a union, so
+    # only one of the following members can be specified.
+    #
+    # @note AdminPasswordSourceConfiguration is a union - when returned from an API call exactly one value will be set and the returned type will be a subclass of AdminPasswordSourceConfiguration corresponding to the set member.
+    #
+    # @!attribute [rw] customer_managed_aws_secret
+    #   The configuration for a customer-managed Amazon Web Services Secrets
+    #   Manager secret used as the admin password source.
+    #   @return [Types::CustomerManagedAwsSecretConfiguration]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/odb-2024-08-20/AdminPasswordSourceConfiguration AWS API Documentation
+    #
+    class AdminPasswordSourceConfiguration < Struct.new(
+      :customer_managed_aws_secret,
+      :unknown)
+      SENSITIVE = []
+      include Aws::Structure
+      include Aws::Structure::Union
+
+      class CustomerManagedAwsSecret < AdminPasswordSourceConfiguration; end
+      class Unknown < AdminPasswordSourceConfiguration; end
+    end
+
+    # The input configuration for the admin password source. This is a
+    # union, so only one of the following members can be specified.
+    #
+    # @note AdminPasswordSourceConfigurationInput is a union - when making an API calls you must set exactly one of the members.
+    #
+    # @!attribute [rw] customer_managed_aws_secret
+    #   The configuration for using a customer-managed Amazon Web Services
+    #   Secrets Manager secret as the admin password source.
+    #   @return [Types::CustomerManagedAwsSecretConfigurationInput]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/odb-2024-08-20/AdminPasswordSourceConfigurationInput AWS API Documentation
+    #
+    class AdminPasswordSourceConfigurationInput < Struct.new(
+      :customer_managed_aws_secret,
+      :unknown)
+      SENSITIVE = []
+      include Aws::Structure
+      include Aws::Structure::Union
+
+      class CustomerManagedAwsSecret < AdminPasswordSourceConfigurationInput; end
+      class Unknown < AdminPasswordSourceConfigurationInput; end
+    end
+
+    # A summary of the admin password source configuration for an Autonomous
+    # Database.
+    #
+    # @!attribute [rw] admin_password_source
+    #   The source of the admin password for the Autonomous Database.
+    #   @return [String]
+    #
+    # @!attribute [rw] admin_password_source_configuration
+    #   The configuration of the admin password source for the Autonomous
+    #   Database.
+    #   @return [Types::AdminPasswordSourceConfiguration]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/odb-2024-08-20/AdminPasswordSourceSummary AWS API Documentation
+    #
+    class AdminPasswordSourceSummary < Struct.new(
+      :admin_password_source,
+      :admin_password_source_configuration)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] iam_role_arn
     #   The Amazon Resource Name (ARN) of the Amazon Web Services Identity
     #   and Access Management (IAM) service role to associate with the
@@ -558,6 +625,11 @@ module Aws::Odb
     #   deletion.
     #   @return [Time]
     #
+    # @!attribute [rw] admin_password_source_summary
+    #   The summary of the admin password source configuration for the
+    #   Autonomous Database.
+    #   @return [Types::AdminPasswordSourceSummary]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/odb-2024-08-20/AutonomousDatabase AWS API Documentation
     #
     class AutonomousDatabase < Struct.new(
@@ -663,7 +735,8 @@ module Aws::Odb
       :time_disaster_recovery_role_changed,
       :time_until_reconnect_clone_enabled,
       :next_long_term_backup_time_stamp,
-      :time_undeleted)
+      :time_undeleted,
+      :admin_password_source_summary)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -1501,6 +1574,11 @@ module Aws::Odb
     #   deletion.
     #   @return [Time]
     #
+    # @!attribute [rw] admin_password_source_summary
+    #   The summary of the admin password source configuration for the
+    #   Autonomous Database.
+    #   @return [Types::AdminPasswordSourceSummary]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/odb-2024-08-20/AutonomousDatabaseSummary AWS API Documentation
     #
     class AutonomousDatabaseSummary < Struct.new(
@@ -1606,7 +1684,8 @@ module Aws::Odb
       :time_disaster_recovery_role_changed,
       :time_until_reconnect_clone_enabled,
       :next_long_term_backup_time_stamp,
-      :time_undeleted)
+      :time_undeleted,
+      :admin_password_source_summary)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -1649,11 +1728,17 @@ module Aws::Odb
     #   rotated.
     #   @return [Time]
     #
+    # @!attribute [rw] password_source_summary
+    #   The summary of the password source configuration for the Autonomous
+    #   Database wallet.
+    #   @return [Types::WalletPasswordSourceSummary]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/odb-2024-08-20/AutonomousDatabaseWalletDetails AWS API Documentation
     #
     class AutonomousDatabaseWalletDetails < Struct.new(
       :status,
-      :time_rotated)
+      :time_rotated,
+      :password_source_summary)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -3752,6 +3837,17 @@ module Aws::Odb
     #   Database.
     #   @return [Types::EncryptionKeyConfigurationInput]
     #
+    # @!attribute [rw] admin_password_source
+    #   The source of the admin password for the Autonomous Database. When
+    #   set to `CUSTOMER_MANAGED_AWS_SECRET`, the admin password is
+    #   retrieved from an Amazon Web Services Secrets Manager secret.
+    #   @return [String]
+    #
+    # @!attribute [rw] admin_password_source_configuration
+    #   The configuration of the admin password source for the Autonomous
+    #   Database.
+    #   @return [Types::AdminPasswordSourceConfigurationInput]
+    #
     # @!attribute [rw] client_token
     #   A client-provided token to ensure the idempotency of the request.
     #
@@ -3804,6 +3900,8 @@ module Aws::Odb
       :source_configuration,
       :encryption_key_provider,
       :encryption_key_configuration,
+      :admin_password_source,
+      :admin_password_source_configuration,
       :client_token,
       :tags)
       SENSITIVE = [:admin_password]
@@ -3852,6 +3950,17 @@ module Aws::Odb
     #   The password to encrypt the keys inside the wallet.
     #   @return [String]
     #
+    # @!attribute [rw] password_source
+    #   The source of the password for encrypting the wallet. When set to
+    #   `CUSTOMER_MANAGED_AWS_SECRET`, the password is retrieved from an
+    #   Amazon Web Services Secrets Manager secret.
+    #   @return [String]
+    #
+    # @!attribute [rw] password_source_configuration
+    #   The configuration of the password source for the Autonomous Database
+    #   wallet.
+    #   @return [Types::WalletPasswordSourceConfigurationInput]
+    #
     # @!attribute [rw] client_token
     #   A client-provided token to ensure the idempotency of the request.
     #
@@ -3865,6 +3974,8 @@ module Aws::Odb
       :autonomous_database_id,
       :wallet_type,
       :password,
+      :password_source,
+      :password_source_configuration,
       :client_token)
       SENSITIVE = [:password]
       include Aws::Structure
@@ -4671,6 +4782,64 @@ module Aws::Odb
       include Aws::Structure
     end
 
+    # The configuration of a customer-managed Amazon Web Services Secrets
+    # Manager secret used to supply a password.
+    #
+    # @!attribute [rw] iam_role_arn
+    #   The Amazon Resource Name (ARN) of the Amazon Web Services Identity
+    #   and Access Management (IAM) role that OCI assumes to retrieve the
+    #   secret value.
+    #   @return [String]
+    #
+    # @!attribute [rw] secret_id
+    #   The identifier or ARN of the Amazon Web Services Secrets Manager
+    #   secret that contains the password.
+    #   @return [String]
+    #
+    # @!attribute [rw] external_id_type
+    #   The type of Oracle Cloud Identifier (OCID) used as the external ID
+    #   when assuming the IAM role.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/odb-2024-08-20/CustomerManagedAwsSecretConfiguration AWS API Documentation
+    #
+    class CustomerManagedAwsSecretConfiguration < Struct.new(
+      :iam_role_arn,
+      :secret_id,
+      :external_id_type)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # The input configuration for a customer-managed Amazon Web Services
+    # Secrets Manager secret used to supply a password.
+    #
+    # @!attribute [rw] secret_id
+    #   The identifier or ARN of the Amazon Web Services Secrets Manager
+    #   secret that contains the password.
+    #   @return [String]
+    #
+    # @!attribute [rw] iam_role_arn
+    #   The Amazon Resource Name (ARN) of the Amazon Web Services Identity
+    #   and Access Management (IAM) role that OCI assumes to retrieve the
+    #   secret value.
+    #   @return [String]
+    #
+    # @!attribute [rw] external_id_type
+    #   The type of Oracle Cloud Identifier (OCID) used as the external ID
+    #   when assuming the IAM role.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/odb-2024-08-20/CustomerManagedAwsSecretConfigurationInput AWS API Documentation
+    #
+    class CustomerManagedAwsSecretConfigurationInput < Struct.new(
+      :secret_id,
+      :iam_role_arn,
+      :external_id_type)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Information about the data collection options enabled for a VM
     # cluster.
     #
@@ -6378,10 +6547,17 @@ module Aws::Odb
     #   for service initialization.
     #   @return [Boolean]
     #
+    # @!attribute [rw] autonomous_database_oci_aws_secrets_manager_integration
+    #   Specifies whether to enable or disable the OCI service-account role
+    #   for Amazon Web Services Secrets Manager integration with Autonomous
+    #   Database.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/odb-2024-08-20/InitializeServiceInput AWS API Documentation
     #
     class InitializeServiceInput < Struct.new(
-      :oci_identity_domain)
+      :oci_identity_domain,
+      :autonomous_database_oci_aws_secrets_manager_integration)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -7488,11 +7664,22 @@ module Aws::Odb
     #   role.
     #   @return [String]
     #
+    # @!attribute [rw] status
+    #   The current lifecycle status of the IAM service role.
+    #   @return [String]
+    #
+    # @!attribute [rw] status_reason
+    #   Additional information about the current status of the IAM service
+    #   role, if applicable.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/odb-2024-08-20/OciIamRole AWS API Documentation
     #
     class OciIamRole < Struct.new(
       :iam_role_arn,
-      :aws_integration)
+      :aws_integration,
+      :status,
+      :status_reason)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -9048,6 +9235,17 @@ module Aws::Odb
     #   Database.
     #   @return [Types::EncryptionKeyConfigurationInput]
     #
+    # @!attribute [rw] admin_password_source
+    #   The source of the admin password for the Autonomous Database. When
+    #   set to `CUSTOMER_MANAGED_AWS_SECRET`, the admin password is
+    #   retrieved from an Amazon Web Services Secrets Manager secret.
+    #   @return [String]
+    #
+    # @!attribute [rw] admin_password_source_configuration
+    #   The configuration of the admin password source for the Autonomous
+    #   Database.
+    #   @return [Types::AdminPasswordSourceConfigurationInput]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/odb-2024-08-20/UpdateAutonomousDatabaseInput AWS API Documentation
     #
     class UpdateAutonomousDatabaseInput < Struct.new(
@@ -9093,7 +9291,9 @@ module Aws::Odb
       :auto_refresh_point_lag_in_seconds,
       :time_of_auto_refresh_start,
       :encryption_key_provider,
-      :encryption_key_configuration)
+      :encryption_key_configuration,
+      :admin_password_source,
+      :admin_password_source_configuration)
       SENSITIVE = [:admin_password]
       include Aws::Structure
     end
@@ -9390,6 +9590,73 @@ module Aws::Odb
       include Aws::Structure
     end
 
+    # The configuration of the wallet password source. This is a union, so
+    # only one of the following members can be specified.
+    #
+    # @note WalletPasswordSourceConfiguration is a union - when returned from an API call exactly one value will be set and the returned type will be a subclass of WalletPasswordSourceConfiguration corresponding to the set member.
+    #
+    # @!attribute [rw] customer_managed_aws_secret
+    #   The configuration for a customer-managed Amazon Web Services Secrets
+    #   Manager secret used as the wallet password source.
+    #   @return [Types::CustomerManagedAwsSecretConfiguration]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/odb-2024-08-20/WalletPasswordSourceConfiguration AWS API Documentation
+    #
+    class WalletPasswordSourceConfiguration < Struct.new(
+      :customer_managed_aws_secret,
+      :unknown)
+      SENSITIVE = []
+      include Aws::Structure
+      include Aws::Structure::Union
+
+      class CustomerManagedAwsSecret < WalletPasswordSourceConfiguration; end
+      class Unknown < WalletPasswordSourceConfiguration; end
+    end
+
+    # The input configuration for the wallet password source. This is a
+    # union, so only one of the following members can be specified.
+    #
+    # @note WalletPasswordSourceConfigurationInput is a union - when making an API calls you must set exactly one of the members.
+    #
+    # @!attribute [rw] customer_managed_aws_secret
+    #   The configuration for using a customer-managed Amazon Web Services
+    #   Secrets Manager secret as the wallet password source.
+    #   @return [Types::CustomerManagedAwsSecretConfigurationInput]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/odb-2024-08-20/WalletPasswordSourceConfigurationInput AWS API Documentation
+    #
+    class WalletPasswordSourceConfigurationInput < Struct.new(
+      :customer_managed_aws_secret,
+      :unknown)
+      SENSITIVE = []
+      include Aws::Structure
+      include Aws::Structure::Union
+
+      class CustomerManagedAwsSecret < WalletPasswordSourceConfigurationInput; end
+      class Unknown < WalletPasswordSourceConfigurationInput; end
+    end
+
+    # A summary of the password source configuration for an Autonomous
+    # Database wallet.
+    #
+    # @!attribute [rw] password_source
+    #   The source of the password for the Autonomous Database wallet.
+    #   @return [String]
+    #
+    # @!attribute [rw] password_source_configuration
+    #   The configuration of the password source for the Autonomous Database
+    #   wallet.
+    #   @return [Types::WalletPasswordSourceConfiguration]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/odb-2024-08-20/WalletPasswordSourceSummary AWS API Documentation
+    #
+    class WalletPasswordSourceSummary < Struct.new(
+      :password_source,
+      :password_source_configuration)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # The configuration for Zero-ETL access from the ODB network.
     #
     # @!attribute [rw] status

data/lib/aws-sdk-odb.rb

@@ -55,7 +55,7 @@ module Aws::Odb
   autoload :EndpointProvider, 'aws-sdk-odb/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-odb/endpoints'
 
-  GEM_VERSION = '1.24.0'
+  GEM_VERSION = '1.25.0'
 
 end
 

data/sig/client.rbs

@@ -206,6 +206,14 @@ module Aws
                                             kms_key_id: ::String?
                                           }?
                                         },
+                                        ?admin_password_source: ("CUSTOMER_MANAGED_AWS_SECRET" | "API_REQUEST_PARAMETER"),
+                                        ?admin_password_source_configuration: {
+                                          customer_managed_aws_secret: {
+                                            secret_id: ::String?,
+                                            iam_role_arn: ::String?,
+                                            external_id_type: ("database_ocid" | "compartment_ocid" | "tenant_ocid")?
+                                          }?
+                                        },
                                         ?client_token: ::String,
                                         ?tags: Hash[::String, ::String]
                                       ) -> _CreateAutonomousDatabaseResponseSuccess
@@ -236,7 +244,15 @@ module Aws
       def create_autonomous_database_wallet: (
                                                autonomous_database_id: ::String,
                                                ?wallet_type: ("REGIONAL" | "INSTANCE"),
-                                               password: ::String,
+                                               ?password: ::String,
+                                               ?password_source: ("CUSTOMER_MANAGED_AWS_SECRET" | "API_REQUEST_PARAMETER"),
+                                               ?password_source_configuration: {
+                                                 customer_managed_aws_secret: {
+                                                   secret_id: ::String?,
+                                                   iam_role_arn: ::String?,
+                                                   external_id_type: ("database_ocid" | "compartment_ocid" | "tenant_ocid")?
+                                                 }?
+                                               },
                                                ?client_token: ::String
                                              ) -> _CreateAutonomousDatabaseWalletResponseSuccess
                                            | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _CreateAutonomousDatabaseWalletResponseSuccess
@@ -606,7 +622,8 @@ module Aws
       end
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/Odb/Client.html#initialize_service-instance_method
       def initialize_service: (
-                                ?oci_identity_domain: bool
+                                ?oci_identity_domain: bool,
+                                ?autonomous_database_oci_aws_secrets_manager_integration: ("ENABLED" | "DISABLED")
                               ) -> _InitializeServiceResponseSuccess
                             | (?Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _InitializeServiceResponseSuccess
 
@@ -1063,6 +1080,14 @@ module Aws
                                             external_id_type: ("database_ocid" | "compartment_ocid" | "tenant_ocid")?,
                                             kms_key_id: ::String?
                                           }?
+                                        },
+                                        ?admin_password_source: ("CUSTOMER_MANAGED_AWS_SECRET" | "API_REQUEST_PARAMETER"),
+                                        ?admin_password_source_configuration: {
+                                          customer_managed_aws_secret: {
+                                            secret_id: ::String?,
+                                            iam_role_arn: ::String?,
+                                            external_id_type: ("database_ocid" | "compartment_ocid" | "tenant_ocid")?
+                                          }?
                                         }
                                       ) -> _UpdateAutonomousDatabaseResponseSuccess
                                     | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _UpdateAutonomousDatabaseResponseSuccess

data/sig/types.rbs

@@ -21,6 +21,34 @@ module Aws::Odb
       SENSITIVE: []
     end
 
+    class AdminPasswordSourceConfiguration
+      attr_accessor customer_managed_aws_secret: Types::CustomerManagedAwsSecretConfiguration
+      attr_accessor unknown: untyped
+      SENSITIVE: []
+
+      class CustomerManagedAwsSecret < AdminPasswordSourceConfiguration
+      end
+      class Unknown < AdminPasswordSourceConfiguration
+      end
+    end
+
+    class AdminPasswordSourceConfigurationInput
+      attr_accessor customer_managed_aws_secret: Types::CustomerManagedAwsSecretConfigurationInput
+      attr_accessor unknown: untyped
+      SENSITIVE: []
+
+      class CustomerManagedAwsSecret < AdminPasswordSourceConfigurationInput
+      end
+      class Unknown < AdminPasswordSourceConfigurationInput
+      end
+    end
+
+    class AdminPasswordSourceSummary
+      attr_accessor admin_password_source: ("CUSTOMER_MANAGED_AWS_SECRET" | "API_REQUEST_PARAMETER")
+      attr_accessor admin_password_source_configuration: Types::AdminPasswordSourceConfiguration
+      SENSITIVE: []
+    end
+
     class AssociateIamRoleToResourceInput
       attr_accessor iam_role_arn: ::String
       attr_accessor aws_integration: ("KmsTde")
@@ -135,6 +163,7 @@ module Aws::Odb
       attr_accessor time_until_reconnect_clone_enabled: ::Time
       attr_accessor next_long_term_backup_time_stamp: ::Time
       attr_accessor time_undeleted: ::Time
+      attr_accessor admin_password_source_summary: Types::AdminPasswordSourceSummary
       SENSITIVE: []
     end
 
@@ -322,6 +351,7 @@ module Aws::Odb
       attr_accessor time_until_reconnect_clone_enabled: ::Time
       attr_accessor next_long_term_backup_time_stamp: ::Time
       attr_accessor time_undeleted: ::Time
+      attr_accessor admin_password_source_summary: Types::AdminPasswordSourceSummary
       SENSITIVE: []
     end
 
@@ -335,6 +365,7 @@ module Aws::Odb
     class AutonomousDatabaseWalletDetails
       attr_accessor status: ("ACTIVE" | "UPDATING")
       attr_accessor time_rotated: ::Time
+      attr_accessor password_source_summary: Types::WalletPasswordSourceSummary
       SENSITIVE: []
     end
 
@@ -749,6 +780,8 @@ module Aws::Odb
       attr_accessor source_configuration: Types::SourceConfiguration
       attr_accessor encryption_key_provider: ("ORACLE_MANAGED" | "AWS_KMS")
       attr_accessor encryption_key_configuration: Types::EncryptionKeyConfigurationInput
+      attr_accessor admin_password_source: ("CUSTOMER_MANAGED_AWS_SECRET" | "API_REQUEST_PARAMETER")
+      attr_accessor admin_password_source_configuration: Types::AdminPasswordSourceConfigurationInput
       attr_accessor client_token: ::String
       attr_accessor tags: ::Hash[::String, ::String]
       SENSITIVE: [:admin_password]
@@ -766,6 +799,8 @@ module Aws::Odb
       attr_accessor autonomous_database_id: ::String
       attr_accessor wallet_type: ("REGIONAL" | "INSTANCE")
       attr_accessor password: ::String
+      attr_accessor password_source: ("CUSTOMER_MANAGED_AWS_SECRET" | "API_REQUEST_PARAMETER")
+      attr_accessor password_source_configuration: Types::WalletPasswordSourceConfigurationInput
       attr_accessor client_token: ::String
       SENSITIVE: [:password]
     end
@@ -933,6 +968,20 @@ module Aws::Odb
       SENSITIVE: [:email]
     end
 
+    class CustomerManagedAwsSecretConfiguration
+      attr_accessor iam_role_arn: ::String
+      attr_accessor secret_id: ::String
+      attr_accessor external_id_type: ("database_ocid" | "compartment_ocid" | "tenant_ocid")
+      SENSITIVE: []
+    end
+
+    class CustomerManagedAwsSecretConfigurationInput
+      attr_accessor secret_id: ::String
+      attr_accessor iam_role_arn: ::String
+      attr_accessor external_id_type: ("database_ocid" | "compartment_ocid" | "tenant_ocid")
+      SENSITIVE: []
+    end
+
     class DataCollectionOptions
       attr_accessor is_diagnostics_events_enabled: bool
       attr_accessor is_health_monitoring_enabled: bool
@@ -1412,6 +1461,7 @@ module Aws::Odb
 
     class InitializeServiceInput
       attr_accessor oci_identity_domain: bool
+      attr_accessor autonomous_database_oci_aws_secrets_manager_integration: ("ENABLED" | "DISABLED")
       SENSITIVE: []
     end
 
@@ -1725,7 +1775,9 @@ module Aws::Odb
 
     class OciIamRole
       attr_accessor iam_role_arn: ::String
-      attr_accessor aws_integration: ("KmsTde")
+      attr_accessor aws_integration: ("KmsTde" | "SecretsManager")
+      attr_accessor status: ("PROVISIONING" | "AVAILABLE" | "PROVISION_FAILED" | "TERMINATING" | "TERMINATE_FAILED")
+      attr_accessor status_reason: ::String
       SENSITIVE: []
     end
 
@@ -2145,6 +2197,8 @@ module Aws::Odb
       attr_accessor time_of_auto_refresh_start: ::Time
       attr_accessor encryption_key_provider: ("ORACLE_MANAGED" | "AWS_KMS")
       attr_accessor encryption_key_configuration: Types::EncryptionKeyConfigurationInput
+      attr_accessor admin_password_source: ("CUSTOMER_MANAGED_AWS_SECRET" | "API_REQUEST_PARAMETER")
+      attr_accessor admin_password_source_configuration: Types::AdminPasswordSourceConfigurationInput
       SENSITIVE: [:admin_password]
     end
 
@@ -2224,6 +2278,34 @@ module Aws::Odb
       SENSITIVE: []
     end
 
+    class WalletPasswordSourceConfiguration
+      attr_accessor customer_managed_aws_secret: Types::CustomerManagedAwsSecretConfiguration
+      attr_accessor unknown: untyped
+      SENSITIVE: []
+
+      class CustomerManagedAwsSecret < WalletPasswordSourceConfiguration
+      end
+      class Unknown < WalletPasswordSourceConfiguration
+      end
+    end
+
+    class WalletPasswordSourceConfigurationInput
+      attr_accessor customer_managed_aws_secret: Types::CustomerManagedAwsSecretConfigurationInput
+      attr_accessor unknown: untyped
+      SENSITIVE: []
+
+      class CustomerManagedAwsSecret < WalletPasswordSourceConfigurationInput
+      end
+      class Unknown < WalletPasswordSourceConfigurationInput
+      end
+    end
+
+    class WalletPasswordSourceSummary
+      attr_accessor password_source: ("CUSTOMER_MANAGED_AWS_SECRET" | "API_REQUEST_PARAMETER")
+      attr_accessor password_source_configuration: Types::WalletPasswordSourceConfiguration
+      SENSITIVE: []
+    end
+
     class ZeroEtlAccess
       attr_accessor status: ("ENABLED" | "ENABLING" | "DISABLED" | "DISABLING")
       attr_accessor cidr: ::String

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-odb
 version: !ruby/object:Gem::Version
-  version: 1.24.0
+  version: 1.25.0
 platform: ruby
 authors:
 - Amazon Web Services