aws-sdk-opensearchservice 1.111.0 → 1.112.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 9c9195cf291fde42af698ad2e5074d4c4d93ec404bd842ec1ad29f8918553b4c
-  data.tar.gz: '018417a536f9a2333ee59e1629fdd33de110a14e51afd2b338bb0acef619af76'
+  metadata.gz: a0056d408e4453faaa4f5eb8a6b7c2d1a04abd77442d4ff3cf1b8d563d0a404b
+  data.tar.gz: eb07aac5881dc9b289d0ae206e7da5fc184507a40c220d13c5cd6dbfdd43c5a3
 SHA512:
-  metadata.gz: 04422de0eccc4d64ef2241e3a3e156a89691170379f6eb23f601dbea6967d61026ca2a719d0e983938831a00076c0e3fa51d45c5c1dc504eb2b5cbbf334234fd
-  data.tar.gz: a78deeb802fa75d8d4ec937056fdcbbe3c723091c4c3eb3f2acc21bdf797d7fd73736d9d92af3574e0ee5394b39e4c6e24b18cb7e32429716aa46848a80dd64f
+  metadata.gz: 17122776ad225ac724430099b19784b6acffb798d9e3cf93feac0c060007bcffab279bafb180f0ad489699d1b2a0cf240e0a0b6b092f4a2562f055ad7c1e66cf
+  data.tar.gz: 87e73895c4c3cac89fec919fd5617f74a3e880493ef52af6d3513debb1e86c2208a3e8b967926b505eddb250ab9662d9fda0ca83df88242a7af8ecdfd161747d

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.112.0 (2026-10-08)
+------------------
+
+* Feature - This release adds a new EncryptionMode option (DISK or NATIVE) to EncryptionAtRestOptions for the CreateDomain and UpdateDomainConfig operations, enabling selection of engine-native index-level encryption on supported Amazon OpenSearch Service domains.
+
 1.111.0 (2026-09-29)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.111.0
+1.112.0

data/lib/aws-sdk-opensearchservice/client.rb

@@ -1354,6 +1354,7 @@ module Aws::OpenSearchService
     #     encryption_at_rest_options: {
     #       enabled: false,
     #       kms_key_id: "KmsKeyId",
+    #       encryption_mode: "DISK", # accepts DISK, NATIVE
     #     },
     #     node_to_node_encryption_options: {
     #       enabled: false,
@@ -1525,6 +1526,7 @@ module Aws::OpenSearchService
     #   resp.domain_status.cognito_options.role_arn #=> String
     #   resp.domain_status.encryption_at_rest_options.enabled #=> Boolean
     #   resp.domain_status.encryption_at_rest_options.kms_key_id #=> String
+    #   resp.domain_status.encryption_at_rest_options.encryption_mode #=> String, one of "DISK", "NATIVE"
     #   resp.domain_status.node_to_node_encryption_options.enabled #=> Boolean
     #   resp.domain_status.advanced_options #=> Hash
     #   resp.domain_status.advanced_options["String"] #=> String
@@ -2066,6 +2068,7 @@ module Aws::OpenSearchService
     #   resp.domain_status.cognito_options.role_arn #=> String
     #   resp.domain_status.encryption_at_rest_options.enabled #=> Boolean
     #   resp.domain_status.encryption_at_rest_options.kms_key_id #=> String
+    #   resp.domain_status.encryption_at_rest_options.encryption_mode #=> String, one of "DISK", "NATIVE"
     #   resp.domain_status.node_to_node_encryption_options.enabled #=> Boolean
     #   resp.domain_status.advanced_options #=> Hash
     #   resp.domain_status.advanced_options["String"] #=> String
@@ -2521,6 +2524,7 @@ module Aws::OpenSearchService
     #   resp.domain_status.cognito_options.role_arn #=> String
     #   resp.domain_status.encryption_at_rest_options.enabled #=> Boolean
     #   resp.domain_status.encryption_at_rest_options.kms_key_id #=> String
+    #   resp.domain_status.encryption_at_rest_options.encryption_mode #=> String, one of "DISK", "NATIVE"
     #   resp.domain_status.node_to_node_encryption_options.enabled #=> Boolean
     #   resp.domain_status.advanced_options #=> Hash
     #   resp.domain_status.advanced_options["String"] #=> String
@@ -2820,6 +2824,7 @@ module Aws::OpenSearchService
     #   resp.domain_config.cognito_options.status.pending_deletion #=> Boolean
     #   resp.domain_config.encryption_at_rest_options.options.enabled #=> Boolean
     #   resp.domain_config.encryption_at_rest_options.options.kms_key_id #=> String
+    #   resp.domain_config.encryption_at_rest_options.options.encryption_mode #=> String, one of "DISK", "NATIVE"
     #   resp.domain_config.encryption_at_rest_options.status.creation_date #=> Time
     #   resp.domain_config.encryption_at_rest_options.status.update_date #=> Time
     #   resp.domain_config.encryption_at_rest_options.status.update_version #=> Integer
@@ -3148,6 +3153,7 @@ module Aws::OpenSearchService
     #   resp.domain_status_list[0].cognito_options.role_arn #=> String
     #   resp.domain_status_list[0].encryption_at_rest_options.enabled #=> Boolean
     #   resp.domain_status_list[0].encryption_at_rest_options.kms_key_id #=> String
+    #   resp.domain_status_list[0].encryption_at_rest_options.encryption_mode #=> String, one of "DISK", "NATIVE"
     #   resp.domain_status_list[0].node_to_node_encryption_options.enabled #=> Boolean
     #   resp.domain_status_list[0].advanced_options #=> Hash
     #   resp.domain_status_list[0].advanced_options["String"] #=> String
@@ -3330,6 +3336,7 @@ module Aws::OpenSearchService
     #   resp.dry_run_config.cognito_options.role_arn #=> String
     #   resp.dry_run_config.encryption_at_rest_options.enabled #=> Boolean
     #   resp.dry_run_config.encryption_at_rest_options.kms_key_id #=> String
+    #   resp.dry_run_config.encryption_at_rest_options.encryption_mode #=> String, one of "DISK", "NATIVE"
     #   resp.dry_run_config.node_to_node_encryption_options.enabled #=> Boolean
     #   resp.dry_run_config.advanced_options #=> Hash
     #   resp.dry_run_config.advanced_options["String"] #=> String
@@ -6283,11 +6290,12 @@ module Aws::OpenSearchService
     #   A list of advisory warning codes to accept for this configuration
     #   change. By default, any advisory warning blocks the change. Include
     #   the code of each warning you want to accept so the change can proceed.
-    #   You can find warning codes in the`ValidationFailures` list returned by
-    #   `DescribeDomainChangeProgress`and `DescribeDryRunProgress`. Critical
-    #   validation failures cannot be accepted and always block the change. If
-    #   you omit this parameter or pass an empty list, all warnings block the
-    #   change. For more information, see [Validating a domain update][1].
+    #   You can find warning codes in the `ValidationFailures` list returned
+    #   by `DescribeDomainChangeProgress` and `DescribeDryRunProgress`.
+    #   Critical validation failures cannot be accepted and always block the
+    #   change. If you omit this parameter or pass an empty list, all warnings
+    #   block the change. For more information, see [Validating a domain
+    #   update][1].
     #
     #
     #
@@ -6366,6 +6374,7 @@ module Aws::OpenSearchService
     #     encryption_at_rest_options: {
     #       enabled: false,
     #       kms_key_id: "KmsKeyId",
+    #       encryption_mode: "DISK", # accepts DISK, NATIVE
     #     },
     #     domain_endpoint_options: {
     #       enforce_https: false,
@@ -6554,6 +6563,7 @@ module Aws::OpenSearchService
     #   resp.domain_config.cognito_options.status.pending_deletion #=> Boolean
     #   resp.domain_config.encryption_at_rest_options.options.enabled #=> Boolean
     #   resp.domain_config.encryption_at_rest_options.options.kms_key_id #=> String
+    #   resp.domain_config.encryption_at_rest_options.options.encryption_mode #=> String, one of "DISK", "NATIVE"
     #   resp.domain_config.encryption_at_rest_options.status.creation_date #=> Time
     #   resp.domain_config.encryption_at_rest_options.status.update_date #=> Time
     #   resp.domain_config.encryption_at_rest_options.status.update_version #=> Integer
@@ -7121,7 +7131,7 @@ module Aws::OpenSearchService
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-opensearchservice'
-      context[:gem_version] = '1.111.0'
+      context[:gem_version] = '1.112.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-opensearchservice/client_api.rb

@@ -267,6 +267,7 @@ module Aws::OpenSearchService
     EBSOptionsStatus = Shapes::StructureShape.new(name: 'EBSOptionsStatus')
     EncryptionAtRestOptions = Shapes::StructureShape.new(name: 'EncryptionAtRestOptions')
     EncryptionAtRestOptionsStatus = Shapes::StructureShape.new(name: 'EncryptionAtRestOptionsStatus')
+    EncryptionMode = Shapes::StringShape.new(name: 'EncryptionMode')
     Endpoint = Shapes::StringShape.new(name: 'Endpoint')
     EndpointsMap = Shapes::MapShape.new(name: 'EndpointsMap')
     EngineMode = Shapes::StringShape.new(name: 'EngineMode')
@@ -1568,6 +1569,7 @@ module Aws::OpenSearchService
 
     EncryptionAtRestOptions.add_member(:enabled, Shapes::ShapeRef.new(shape: Boolean, location_name: "Enabled"))
     EncryptionAtRestOptions.add_member(:kms_key_id, Shapes::ShapeRef.new(shape: KmsKeyId, location_name: "KmsKeyId"))
+    EncryptionAtRestOptions.add_member(:encryption_mode, Shapes::ShapeRef.new(shape: EncryptionMode, location_name: "EncryptionMode"))
     EncryptionAtRestOptions.struct_class = Types::EncryptionAtRestOptions
 
     EncryptionAtRestOptionsStatus.add_member(:options, Shapes::ShapeRef.new(shape: EncryptionAtRestOptions, required: true, location_name: "Options"))

data/lib/aws-sdk-opensearchservice/types.rb

@@ -4748,11 +4748,21 @@ module Aws::OpenSearchService
     #   `1a2a3a4-1a2a-3a4a-5a6a-1a2a3a4a5a6a`.
     #   @return [String]
     #
+    # @!attribute [rw] encryption_mode
+    #   The type of encryption at rest applied to the domain's data. Valid
+    #   values are `DISK` and `NATIVE`. `DISK` is the default and uses
+    #   volume-level encryption. `NATIVE` uses engine-native, index-level
+    #   encryption and requires encryption at rest to be enabled and
+    #   OpenSearch version 3.3 or later. After the mode is set to `NATIVE`,
+    #   it can't be changed back to `DISK`.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/opensearch-2021-01-01/EncryptionAtRestOptions AWS API Documentation
     #
     class EncryptionAtRestOptions < Struct.new(
       :enabled,
-      :kms_key_id)
+      :kms_key_id,
+      :encryption_mode)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -9482,8 +9492,8 @@ module Aws::OpenSearchService
     #   A list of advisory warning codes to accept for this configuration
     #   change. By default, any advisory warning blocks the change. Include
     #   the code of each warning you want to accept so the change can
-    #   proceed. You can find warning codes in the`ValidationFailures` list
-    #   returned by `DescribeDomainChangeProgress`and
+    #   proceed. You can find warning codes in the `ValidationFailures` list
+    #   returned by `DescribeDomainChangeProgress` and
     #   `DescribeDryRunProgress`. Critical validation failures cannot be
     #   accepted and always block the change. If you omit this parameter or
     #   pass an empty list, all warnings block the change. For more

data/lib/aws-sdk-opensearchservice.rb

@@ -54,7 +54,7 @@ module Aws::OpenSearchService
   autoload :EndpointProvider, 'aws-sdk-opensearchservice/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-opensearchservice/endpoints'
 
-  GEM_VERSION = '1.111.0'
+  GEM_VERSION = '1.112.0'
 
 end
 

data/sig/client.rbs

@@ -314,7 +314,8 @@ module Aws
                            },
                            ?encryption_at_rest_options: {
                              enabled: bool?,
-                             kms_key_id: ::String?
+                             kms_key_id: ::String?,
+                             encryption_mode: ("DISK" | "NATIVE")?
                            },
                            ?node_to_node_encryption_options: {
                              enabled: bool?
@@ -1482,7 +1483,8 @@ module Aws
                                     }],
                                   ?encryption_at_rest_options: {
                                     enabled: bool?,
-                                    kms_key_id: ::String?
+                                    kms_key_id: ::String?,
+                                    encryption_mode: ("DISK" | "NATIVE")?
                                   },
                                   ?domain_endpoint_options: {
                                     enforce_https: bool?,

data/sig/types.rbs

@@ -1196,6 +1196,7 @@ module Aws::OpenSearchService
     class EncryptionAtRestOptions
       attr_accessor enabled: bool
       attr_accessor kms_key_id: ::String
+      attr_accessor encryption_mode: ("DISK" | "NATIVE")
       SENSITIVE: []
     end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-opensearchservice
 version: !ruby/object:Gem::Version
-  version: 1.111.0
+  version: 1.112.0
 platform: ruby
 authors:
 - Amazon Web Services