aws-sdk-opensearchserverless 1.38.0 → 1.40.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 334357edc0b51203e6e58f811ce30229660dbf27585fcf0874ddb509ac943ab6
-  data.tar.gz: 7436944561e9575c081337ac4cb5c802f50c8c2261549f3d1b19dfa48a7dff9a
+  metadata.gz: 0fa39fba4d0a943bd175777124f79d29e86884b39b473dbd5e2534817d355664
+  data.tar.gz: 0a810f13532ce7ec71330ef4a7c37f4a05fc4b7b0748e9128252d543df80fb25
 SHA512:
-  metadata.gz: c21a3e2ef0b7eccb6008229d7f46e6d46de94a9fc73c29e9728b97296de1b8ec254057ab5fc954199e82ed577986752bf9498fb329f41f3990adbf51d755cf06
-  data.tar.gz: a62e5fe496b562ca8ce7978ea32025305335af0ca9c12c6a4d12a7f3355f042067a0355ccd3e450c8a62b15ce12e8426fc3c1d1b9006ffd1d4fb83b9e0bfbf47
+  metadata.gz: e1170762aeb4a64c00e5531f772f25dcb908efc41d92899cfbbf2ec33ba36b543daca70251b7bc5a89fa0ea13abbbf8faf24e83fc65c6abbc120952010c16f79
+  data.tar.gz: f5dbf3533400a813fc68f204482eaf68f2bd2e68ec473748418227faf8aebcca6607f9bbed28e2ab82ce02f83094d243ebc096f22808b71be91640506d0db507

data/CHANGELOG.md

@@ -1,6 +1,16 @@
 Unreleased Changes
 ------------------
 
+1.40.0 (2025-07-29)
+------------------
+
+* Feature - This is to support Granular access control support for SAML with IAMFedraton in AOSS
+
+1.39.0 (2025-07-21)
+------------------
+
+* Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
+
 1.38.0 (2025-06-02)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.38.0
+1.40.0

data/lib/aws-sdk-opensearchserverless/client.rb

@@ -95,7 +95,7 @@ module Aws::OpenSearchServerless
     #     class name or an instance of a plugin class.
     #
     #   @option options [required, Aws::CredentialProvider] :credentials
-    #     Your AWS credentials. This can be an instance of any one of the
+    #     Your AWS credentials used for authentication. This can be an instance of any one of the
     #     following classes:
     #
     #     * `Aws::Credentials` - Used for configuring static, non-refreshing
@@ -128,18 +128,23 @@ module Aws::OpenSearchServerless
     #     locations will be searched for credentials:
     #
     #     * `Aws.config[:credentials]`
+    #
     #     * The `:access_key_id`, `:secret_access_key`, `:session_token`, and
     #       `:account_id` options.
-    #     * ENV['AWS_ACCESS_KEY_ID'], ENV['AWS_SECRET_ACCESS_KEY'],
-    #       ENV['AWS_SESSION_TOKEN'], and ENV['AWS_ACCOUNT_ID']
+    #
+    #     * `ENV['AWS_ACCESS_KEY_ID']`, `ENV['AWS_SECRET_ACCESS_KEY']`,
+    #       `ENV['AWS_SESSION_TOKEN']`, and `ENV['AWS_ACCOUNT_ID']`.
+    #
     #     * `~/.aws/credentials`
+    #
     #     * `~/.aws/config`
+    #
     #     * EC2/ECS IMDS instance profile - When used by default, the timeouts
     #       are very aggressive. Construct and pass an instance of
     #       `Aws::InstanceProfileCredentials` or `Aws::ECSCredentials` to
     #       enable retries and extended timeouts. Instance profile credential
-    #       fetching can be disabled by setting ENV['AWS_EC2_METADATA_DISABLED']
-    #       to true.
+    #       fetching can be disabled by setting `ENV['AWS_EC2_METADATA_DISABLED']`
+    #       to `true`.
     #
     #   @option options [required, String] :region
     #     The AWS region to connect to.  The configured `:region` is
@@ -167,6 +172,11 @@ module Aws::OpenSearchServerless
     #     When false, the request will raise a `RetryCapacityNotAvailableError` and will
     #     not retry instead of sleeping.
     #
+    #   @option options [Array<String>] :auth_scheme_preference
+    #     A list of preferred authentication schemes to use when making a request. Supported values are:
+    #     `sigv4`, `sigv4a`, `httpBearerAuth`, and `noAuth`. When set using `ENV['AWS_AUTH_SCHEME_PREFERENCE']` or in
+    #     shared config as `auth_scheme_preference`, the value should be a comma-separated list.
+    #
     #   @option options [Boolean] :client_side_monitoring (false)
     #     When `true`, client-side metrics will be collected for all API requests from
     #     this client.
@@ -253,8 +263,8 @@ module Aws::OpenSearchServerless
     #     4 times. Used in `standard` and `adaptive` retry modes.
     #
     #   @option options [String] :profile ("default")
-    #     Used when loading credentials from the shared credentials file
-    #     at HOME/.aws/credentials.  When not specified, 'default' is used.
+    #     Used when loading credentials from the shared credentials file at `HOME/.aws/credentials`.
+    #     When not specified, 'default' is used.
     #
     #   @option options [String] :request_checksum_calculation ("when_supported")
     #     Determines when a checksum will be calculated for request payloads. Values are:
@@ -374,7 +384,7 @@ module Aws::OpenSearchServerless
     #     `Aws::Telemetry::OTelProvider` for telemetry provider.
     #
     #   @option options [Aws::TokenProvider] :token_provider
-    #     A Bearer Token Provider. This can be an instance of any one of the
+    #     Your Bearer token used for authentication. This can be an instance of any one of the
     #     following classes:
     #
     #     * `Aws::StaticTokenProvider` - Used for configuring static, non-refreshing
@@ -909,13 +919,18 @@ module Aws::OpenSearchServerless
     #
     # @option params [Types::SamlConfigOptions] :saml_options
     #   Describes SAML options in in the form of a key-value map. This field
-    #   is required if you specify `saml` for the `type` parameter.
+    #   is required if you specify `SAML` for the `type` parameter.
     #
     # @option params [Types::CreateIamIdentityCenterConfigOptions] :iam_identity_center_options
     #   Describes IAM Identity Center options in the form of a key-value map.
     #   This field is required if you specify iamidentitycenter for the type
     #   parameter.
     #
+    # @option params [Types::IamFederationConfigOptions] :iam_federation_options
+    #   Describes IAM federation options in the form of a key-value map. This
+    #   field is required if you specify `iamFederation` for the `type`
+    #   parameter.
+    #
     # @option params [String] :client_token
     #   Unique, case-sensitive identifier to ensure idempotency of the
     #   request.
@@ -930,7 +945,7 @@ module Aws::OpenSearchServerless
     # @example Request syntax with placeholder values
     #
     #   resp = client.create_security_config({
-    #     type: "saml", # required, accepts saml, iamidentitycenter
+    #     type: "saml", # required, accepts saml, iamidentitycenter, iamfederation
     #     name: "ConfigName", # required
     #     description: "ConfigDescription",
     #     saml_options: {
@@ -945,13 +960,17 @@ module Aws::OpenSearchServerless
     #       user_attribute: "UserId", # accepts UserId, UserName, Email
     #       group_attribute: "GroupId", # accepts GroupId, GroupName
     #     },
+    #     iam_federation_options: {
+    #       group_attribute: "iamFederationGroupAttribute",
+    #       user_attribute: "iamFederationUserAttribute",
+    #     },
     #     client_token: "ClientToken",
     #   })
     #
     # @example Response structure
     #
     #   resp.security_config_detail.id #=> String
-    #   resp.security_config_detail.type #=> String, one of "saml", "iamidentitycenter"
+    #   resp.security_config_detail.type #=> String, one of "saml", "iamidentitycenter", "iamfederation"
     #   resp.security_config_detail.config_version #=> String
     #   resp.security_config_detail.description #=> String
     #   resp.security_config_detail.saml_options.metadata #=> String
@@ -965,6 +984,8 @@ module Aws::OpenSearchServerless
     #   resp.security_config_detail.iam_identity_center_options.application_description #=> String
     #   resp.security_config_detail.iam_identity_center_options.user_attribute #=> String, one of "UserId", "UserName", "Email"
     #   resp.security_config_detail.iam_identity_center_options.group_attribute #=> String, one of "GroupId", "GroupName"
+    #   resp.security_config_detail.iam_federation_options.group_attribute #=> String
+    #   resp.security_config_detail.iam_federation_options.user_attribute #=> String
     #   resp.security_config_detail.created_date #=> Integer
     #   resp.security_config_detail.last_modified_date #=> Integer
     #
@@ -1459,7 +1480,7 @@ module Aws::OpenSearchServerless
     # @example Response structure
     #
     #   resp.security_config_detail.id #=> String
-    #   resp.security_config_detail.type #=> String, one of "saml", "iamidentitycenter"
+    #   resp.security_config_detail.type #=> String, one of "saml", "iamidentitycenter", "iamfederation"
     #   resp.security_config_detail.config_version #=> String
     #   resp.security_config_detail.description #=> String
     #   resp.security_config_detail.saml_options.metadata #=> String
@@ -1473,6 +1494,8 @@ module Aws::OpenSearchServerless
     #   resp.security_config_detail.iam_identity_center_options.application_description #=> String
     #   resp.security_config_detail.iam_identity_center_options.user_attribute #=> String, one of "UserId", "UserName", "Email"
     #   resp.security_config_detail.iam_identity_center_options.group_attribute #=> String, one of "GroupId", "GroupName"
+    #   resp.security_config_detail.iam_federation_options.group_attribute #=> String
+    #   resp.security_config_detail.iam_federation_options.user_attribute #=> String
     #   resp.security_config_detail.created_date #=> Integer
     #   resp.security_config_detail.last_modified_date #=> Integer
     #
@@ -1740,7 +1763,7 @@ module Aws::OpenSearchServerless
     # @example Request syntax with placeholder values
     #
     #   resp = client.list_security_configs({
-    #     type: "saml", # required, accepts saml, iamidentitycenter
+    #     type: "saml", # required, accepts saml, iamidentitycenter, iamfederation
     #     next_token: "String",
     #     max_results: 1,
     #   })
@@ -1749,7 +1772,7 @@ module Aws::OpenSearchServerless
     #
     #   resp.security_config_summaries #=> Array
     #   resp.security_config_summaries[0].id #=> String
-    #   resp.security_config_summaries[0].type #=> String, one of "saml", "iamidentitycenter"
+    #   resp.security_config_summaries[0].type #=> String, one of "saml", "iamidentitycenter", "iamfederation"
     #   resp.security_config_summaries[0].config_version #=> String
     #   resp.security_config_summaries[0].description #=> String
     #   resp.security_config_summaries[0].created_date #=> Integer
@@ -2237,6 +2260,11 @@ module Aws::OpenSearchServerless
     # @option params [Types::UpdateIamIdentityCenterConfigOptions] :iam_identity_center_options_updates
     #   Describes IAM Identity Center options in the form of a key-value map.
     #
+    # @option params [Types::IamFederationConfigOptions] :iam_federation_options
+    #   Describes IAM federation options in the form of a key-value map for
+    #   updating an existing security configuration. Use this field to modify
+    #   IAM federation settings for the security configuration.
+    #
     # @option params [String] :client_token
     #   Unique, case-sensitive identifier to ensure idempotency of the
     #   request.
@@ -2265,13 +2293,17 @@ module Aws::OpenSearchServerless
     #       user_attribute: "UserId", # accepts UserId, UserName, Email
     #       group_attribute: "GroupId", # accepts GroupId, GroupName
     #     },
+    #     iam_federation_options: {
+    #       group_attribute: "iamFederationGroupAttribute",
+    #       user_attribute: "iamFederationUserAttribute",
+    #     },
     #     client_token: "ClientToken",
     #   })
     #
     # @example Response structure
     #
     #   resp.security_config_detail.id #=> String
-    #   resp.security_config_detail.type #=> String, one of "saml", "iamidentitycenter"
+    #   resp.security_config_detail.type #=> String, one of "saml", "iamidentitycenter", "iamfederation"
     #   resp.security_config_detail.config_version #=> String
     #   resp.security_config_detail.description #=> String
     #   resp.security_config_detail.saml_options.metadata #=> String
@@ -2285,6 +2317,8 @@ module Aws::OpenSearchServerless
     #   resp.security_config_detail.iam_identity_center_options.application_description #=> String
     #   resp.security_config_detail.iam_identity_center_options.user_attribute #=> String, one of "UserId", "UserName", "Email"
     #   resp.security_config_detail.iam_identity_center_options.group_attribute #=> String, one of "GroupId", "GroupName"
+    #   resp.security_config_detail.iam_federation_options.group_attribute #=> String
+    #   resp.security_config_detail.iam_federation_options.user_attribute #=> String
     #   resp.security_config_detail.created_date #=> Integer
     #   resp.security_config_detail.last_modified_date #=> Integer
     #
@@ -2448,7 +2482,7 @@ module Aws::OpenSearchServerless
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-opensearchserverless'
-      context[:gem_version] = '1.38.0'
+      context[:gem_version] = '1.40.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-opensearchserverless/client_api.rb

@@ -93,6 +93,7 @@ module Aws::OpenSearchServerless
     GetSecurityConfigResponse = Shapes::StructureShape.new(name: 'GetSecurityConfigResponse')
     GetSecurityPolicyRequest = Shapes::StructureShape.new(name: 'GetSecurityPolicyRequest')
     GetSecurityPolicyResponse = Shapes::StructureShape.new(name: 'GetSecurityPolicyResponse')
+    IamFederationConfigOptions = Shapes::StructureShape.new(name: 'IamFederationConfigOptions')
     IamIdentityCenterApplicationArn = Shapes::StringShape.new(name: 'IamIdentityCenterApplicationArn')
     IamIdentityCenterConfigOptions = Shapes::StructureShape.new(name: 'IamIdentityCenterConfigOptions')
     IamIdentityCenterGroupAttribute = Shapes::StringShape.new(name: 'IamIdentityCenterGroupAttribute')
@@ -207,6 +208,8 @@ module Aws::OpenSearchServerless
     VpcEndpointSummaries = Shapes::ListShape.new(name: 'VpcEndpointSummaries')
     VpcEndpointSummary = Shapes::StructureShape.new(name: 'VpcEndpointSummary')
     VpcId = Shapes::StringShape.new(name: 'VpcId')
+    iamFederationGroupAttribute = Shapes::StringShape.new(name: 'iamFederationGroupAttribute')
+    iamFederationUserAttribute = Shapes::StringShape.new(name: 'iamFederationUserAttribute')
     openSearchServerlessEntityId = Shapes::StringShape.new(name: 'openSearchServerlessEntityId')
     samlGroupAttribute = Shapes::StringShape.new(name: 'samlGroupAttribute')
     samlMetadata = Shapes::StringShape.new(name: 'samlMetadata')
@@ -368,6 +371,7 @@ module Aws::OpenSearchServerless
     CreateSecurityConfigRequest.add_member(:description, Shapes::ShapeRef.new(shape: ConfigDescription, location_name: "description"))
     CreateSecurityConfigRequest.add_member(:saml_options, Shapes::ShapeRef.new(shape: SamlConfigOptions, location_name: "samlOptions"))
     CreateSecurityConfigRequest.add_member(:iam_identity_center_options, Shapes::ShapeRef.new(shape: CreateIamIdentityCenterConfigOptions, location_name: "iamIdentityCenterOptions"))
+    CreateSecurityConfigRequest.add_member(:iam_federation_options, Shapes::ShapeRef.new(shape: IamFederationConfigOptions, location_name: "iamFederationOptions"))
     CreateSecurityConfigRequest.add_member(:client_token, Shapes::ShapeRef.new(shape: ClientToken, location_name: "clientToken", metadata: {"idempotencyToken" => true}))
     CreateSecurityConfigRequest.struct_class = Types::CreateSecurityConfigRequest
 
@@ -502,6 +506,10 @@ module Aws::OpenSearchServerless
     GetSecurityPolicyResponse.add_member(:security_policy_detail, Shapes::ShapeRef.new(shape: SecurityPolicyDetail, location_name: "securityPolicyDetail"))
     GetSecurityPolicyResponse.struct_class = Types::GetSecurityPolicyResponse
 
+    IamFederationConfigOptions.add_member(:group_attribute, Shapes::ShapeRef.new(shape: iamFederationGroupAttribute, location_name: "groupAttribute"))
+    IamFederationConfigOptions.add_member(:user_attribute, Shapes::ShapeRef.new(shape: iamFederationUserAttribute, location_name: "userAttribute"))
+    IamFederationConfigOptions.struct_class = Types::IamFederationConfigOptions
+
     IamIdentityCenterConfigOptions.add_member(:instance_arn, Shapes::ShapeRef.new(shape: IamIdentityCenterInstanceArn, location_name: "instanceArn"))
     IamIdentityCenterConfigOptions.add_member(:application_arn, Shapes::ShapeRef.new(shape: IamIdentityCenterApplicationArn, location_name: "applicationArn"))
     IamIdentityCenterConfigOptions.add_member(:application_name, Shapes::ShapeRef.new(shape: String, location_name: "applicationName"))
@@ -645,6 +653,7 @@ module Aws::OpenSearchServerless
     SecurityConfigDetail.add_member(:description, Shapes::ShapeRef.new(shape: ConfigDescription, location_name: "description"))
     SecurityConfigDetail.add_member(:saml_options, Shapes::ShapeRef.new(shape: SamlConfigOptions, location_name: "samlOptions"))
     SecurityConfigDetail.add_member(:iam_identity_center_options, Shapes::ShapeRef.new(shape: IamIdentityCenterConfigOptions, location_name: "iamIdentityCenterOptions"))
+    SecurityConfigDetail.add_member(:iam_federation_options, Shapes::ShapeRef.new(shape: IamFederationConfigOptions, location_name: "iamFederationOptions"))
     SecurityConfigDetail.add_member(:created_date, Shapes::ShapeRef.new(shape: Long, location_name: "createdDate"))
     SecurityConfigDetail.add_member(:last_modified_date, Shapes::ShapeRef.new(shape: Long, location_name: "lastModifiedDate"))
     SecurityConfigDetail.struct_class = Types::SecurityConfigDetail
@@ -771,6 +780,7 @@ module Aws::OpenSearchServerless
     UpdateSecurityConfigRequest.add_member(:description, Shapes::ShapeRef.new(shape: ConfigDescription, location_name: "description"))
     UpdateSecurityConfigRequest.add_member(:saml_options, Shapes::ShapeRef.new(shape: SamlConfigOptions, location_name: "samlOptions"))
     UpdateSecurityConfigRequest.add_member(:iam_identity_center_options_updates, Shapes::ShapeRef.new(shape: UpdateIamIdentityCenterConfigOptions, location_name: "iamIdentityCenterOptionsUpdates"))
+    UpdateSecurityConfigRequest.add_member(:iam_federation_options, Shapes::ShapeRef.new(shape: IamFederationConfigOptions, location_name: "iamFederationOptions"))
     UpdateSecurityConfigRequest.add_member(:client_token, Shapes::ShapeRef.new(shape: ClientToken, location_name: "clientToken", metadata: {"idempotencyToken" => true}))
     UpdateSecurityConfigRequest.struct_class = Types::UpdateSecurityConfigRequest
 

data/lib/aws-sdk-opensearchserverless/types.rb

@@ -719,7 +719,7 @@ module Aws::OpenSearchServerless
     #
     # @!attribute [rw] saml_options
     #   Describes SAML options in in the form of a key-value map. This field
-    #   is required if you specify `saml` for the `type` parameter.
+    #   is required if you specify `SAML` for the `type` parameter.
     #   @return [Types::SamlConfigOptions]
     #
     # @!attribute [rw] iam_identity_center_options
@@ -728,6 +728,12 @@ module Aws::OpenSearchServerless
     #   type parameter.
     #   @return [Types::CreateIamIdentityCenterConfigOptions]
     #
+    # @!attribute [rw] iam_federation_options
+    #   Describes IAM federation options in the form of a key-value map.
+    #   This field is required if you specify `iamFederation` for the `type`
+    #   parameter.
+    #   @return [Types::IamFederationConfigOptions]
+    #
     # @!attribute [rw] client_token
     #   Unique, case-sensitive identifier to ensure idempotency of the
     #   request.
@@ -744,6 +750,7 @@ module Aws::OpenSearchServerless
       :description,
       :saml_options,
       :iam_identity_center_options,
+      :iam_federation_options,
       :client_token)
       SENSITIVE = []
       include Aws::Structure
@@ -1341,6 +1348,32 @@ module Aws::OpenSearchServerless
       include Aws::Structure
     end
 
+    # Describes IAM federation options for an OpenSearch Serverless security
+    # configuration in the form of a key-value map. These options define how
+    # OpenSearch Serverless integrates with external identity providers
+    # using federation.
+    #
+    # @!attribute [rw] group_attribute
+    #   The group attribute for this IAM federation integration. This
+    #   attribute is used to map identity provider groups to OpenSearch
+    #   Serverless permissions.
+    #   @return [String]
+    #
+    # @!attribute [rw] user_attribute
+    #   The user attribute for this IAM federation integration. This
+    #   attribute is used to identify users in the federated authentication
+    #   process.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/opensearchserverless-2021-11-01/IamFederationConfigOptions AWS API Documentation
+    #
+    class IamFederationConfigOptions < Struct.new(
+      :group_attribute,
+      :user_attribute)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Describes IAM Identity Center options for an OpenSearch Serverless
     # security configuration in the form of a key-value map.
     #
@@ -1938,8 +1971,8 @@ module Aws::OpenSearchServerless
     #   @return [String]
     #
     # @!attribute [rw] open_search_serverless_entity_id
-    #   Custom entity id attribute to override default entity id for this
-    #   saml integration.
+    #   Custom entity ID attribute to override the default entity ID for
+    #   this SAML integration.
     #   @return [String]
     #
     # @!attribute [rw] session_timeout
@@ -1986,6 +2019,12 @@ module Aws::OpenSearchServerless
     #   map.
     #   @return [Types::IamIdentityCenterConfigOptions]
     #
+    # @!attribute [rw] iam_federation_options
+    #   Describes IAM federation options in the form of a key-value map.
+    #   Contains configuration details about how OpenSearch Serverless
+    #   integrates with external identity providers through federation.
+    #   @return [Types::IamFederationConfigOptions]
+    #
     # @!attribute [rw] created_date
     #   The date the configuration was created.
     #   @return [Integer]
@@ -2003,6 +2042,7 @@ module Aws::OpenSearchServerless
       :description,
       :saml_options,
       :iam_identity_center_options,
+      :iam_federation_options,
       :created_date,
       :last_modified_date)
       SENSITIVE = []
@@ -2542,6 +2582,12 @@ module Aws::OpenSearchServerless
     #   map.
     #   @return [Types::UpdateIamIdentityCenterConfigOptions]
     #
+    # @!attribute [rw] iam_federation_options
+    #   Describes IAM federation options in the form of a key-value map for
+    #   updating an existing security configuration. Use this field to
+    #   modify IAM federation settings for the security configuration.
+    #   @return [Types::IamFederationConfigOptions]
+    #
     # @!attribute [rw] client_token
     #   Unique, case-sensitive identifier to ensure idempotency of the
     #   request.
@@ -2558,6 +2604,7 @@ module Aws::OpenSearchServerless
       :description,
       :saml_options,
       :iam_identity_center_options_updates,
+      :iam_federation_options,
       :client_token)
       SENSITIVE = []
       include Aws::Structure

data/lib/aws-sdk-opensearchserverless.rb

@@ -55,7 +55,7 @@ module Aws::OpenSearchServerless
   autoload :EndpointProvider, 'aws-sdk-opensearchserverless/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-opensearchserverless/endpoints'
 
-  GEM_VERSION = '1.38.0'
+  GEM_VERSION = '1.40.0'
 
 end
 

data/sig/client.rbs

@@ -18,6 +18,7 @@ module Aws
                       ?account_id: String,
                       ?active_endpoint_cache: bool,
                       ?adaptive_retry_wait_to_fill: bool,
+                      ?auth_scheme_preference: Array[String],
                       ?client_side_monitoring: bool,
                       ?client_side_monitoring_client_id: String,
                       ?client_side_monitoring_host: String,
@@ -187,7 +188,7 @@ module Aws
       end
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/OpenSearchServerless/Client.html#create_security_config-instance_method
       def create_security_config: (
-                                    type: ("saml" | "iamidentitycenter"),
+                                    type: ("saml" | "iamidentitycenter" | "iamfederation"),
                                     name: ::String,
                                     ?description: ::String,
                                     ?saml_options: {
@@ -202,6 +203,10 @@ module Aws
                                       user_attribute: ("UserId" | "UserName" | "Email")?,
                                       group_attribute: ("GroupId" | "GroupName")?
                                     },
+                                    ?iam_federation_options: {
+                                      group_attribute: ::String?,
+                                      user_attribute: ::String?
+                                    },
                                     ?client_token: ::String
                                   ) -> _CreateSecurityConfigResponseSuccess
                                 | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _CreateSecurityConfigResponseSuccess
@@ -404,7 +409,7 @@ module Aws
       end
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/OpenSearchServerless/Client.html#list_security_configs-instance_method
       def list_security_configs: (
-                                   type: ("saml" | "iamidentitycenter"),
+                                   type: ("saml" | "iamidentitycenter" | "iamfederation"),
                                    ?next_token: ::String,
                                    ?max_results: ::Integer
                                  ) -> _ListSecurityConfigsResponseSuccess
@@ -549,6 +554,10 @@ module Aws
                                       user_attribute: ("UserId" | "UserName" | "Email")?,
                                       group_attribute: ("GroupId" | "GroupName")?
                                     },
+                                    ?iam_federation_options: {
+                                      group_attribute: ::String?,
+                                      user_attribute: ::String?
+                                    },
                                     ?client_token: ::String
                                   ) -> _UpdateSecurityConfigResponseSuccess
                                 | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _UpdateSecurityConfigResponseSuccess

data/sig/resource.rbs

@@ -18,6 +18,7 @@ module Aws
                         ?account_id: String,
                         ?active_endpoint_cache: bool,
                         ?adaptive_retry_wait_to_fill: bool,
+                        ?auth_scheme_preference: Array[String],
                         ?client_side_monitoring: bool,
                         ?client_side_monitoring_client_id: String,
                         ?client_side_monitoring_host: String,

data/sig/types.rbs

@@ -200,11 +200,12 @@ module Aws::OpenSearchServerless
     end
 
     class CreateSecurityConfigRequest
-      attr_accessor type: ("saml" | "iamidentitycenter")
+      attr_accessor type: ("saml" | "iamidentitycenter" | "iamfederation")
       attr_accessor name: ::String
       attr_accessor description: ::String
       attr_accessor saml_options: Types::SamlConfigOptions
       attr_accessor iam_identity_center_options: Types::CreateIamIdentityCenterConfigOptions
+      attr_accessor iam_federation_options: Types::IamFederationConfigOptions
       attr_accessor client_token: ::String
       SENSITIVE: []
     end
@@ -394,6 +395,12 @@ module Aws::OpenSearchServerless
       SENSITIVE: []
     end
 
+    class IamFederationConfigOptions
+      attr_accessor group_attribute: ::String
+      attr_accessor user_attribute: ::String
+      SENSITIVE: []
+    end
+
     class IamIdentityCenterConfigOptions
       attr_accessor instance_arn: ::String
       attr_accessor application_arn: ::String
@@ -497,7 +504,7 @@ module Aws::OpenSearchServerless
     end
 
     class ListSecurityConfigsRequest
-      attr_accessor type: ("saml" | "iamidentitycenter")
+      attr_accessor type: ("saml" | "iamidentitycenter" | "iamfederation")
       attr_accessor next_token: ::String
       attr_accessor max_results: ::Integer
       SENSITIVE: []
@@ -567,11 +574,12 @@ module Aws::OpenSearchServerless
 
     class SecurityConfigDetail
       attr_accessor id: ::String
-      attr_accessor type: ("saml" | "iamidentitycenter")
+      attr_accessor type: ("saml" | "iamidentitycenter" | "iamfederation")
       attr_accessor config_version: ::String
       attr_accessor description: ::String
       attr_accessor saml_options: Types::SamlConfigOptions
       attr_accessor iam_identity_center_options: Types::IamIdentityCenterConfigOptions
+      attr_accessor iam_federation_options: Types::IamFederationConfigOptions
       attr_accessor created_date: ::Integer
       attr_accessor last_modified_date: ::Integer
       SENSITIVE: []
@@ -584,7 +592,7 @@ module Aws::OpenSearchServerless
 
     class SecurityConfigSummary
       attr_accessor id: ::String
-      attr_accessor type: ("saml" | "iamidentitycenter")
+      attr_accessor type: ("saml" | "iamidentitycenter" | "iamfederation")
       attr_accessor config_version: ::String
       attr_accessor description: ::String
       attr_accessor created_date: ::Integer
@@ -728,6 +736,7 @@ module Aws::OpenSearchServerless
       attr_accessor description: ::String
       attr_accessor saml_options: Types::SamlConfigOptions
       attr_accessor iam_identity_center_options_updates: Types::UpdateIamIdentityCenterConfigOptions
+      attr_accessor iam_federation_options: Types::IamFederationConfigOptions
       attr_accessor client_token: ::String
       SENSITIVE: []
     end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-opensearchserverless
 version: !ruby/object:Gem::Version
-  version: 1.38.0
+  version: 1.40.0
 platform: ruby
 authors:
 - Amazon Web Services
@@ -18,7 +18,7 @@ dependencies:
         version: '3'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.225.0
+        version: 3.227.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -28,7 +28,7 @@ dependencies:
         version: '3'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.225.0
+        version: 3.227.0
 - !ruby/object:Gem::Dependency
   name: aws-sigv4
   requirement: !ruby/object:Gem::Requirement