aws-sdk-opensearchservice 1.111.0 → 1.113.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: 9c9195cf291fde42af698ad2e5074d4c4d93ec404bd842ec1ad29f8918553b4c
4
- data.tar.gz: '018417a536f9a2333ee59e1629fdd33de110a14e51afd2b338bb0acef619af76'
3
+ metadata.gz: c39689259b345d8ed3ba8346332e96a7b3a5aa325fecaf1c63843a577b0a1e9b
4
+ data.tar.gz: a5ac7a661817372b1b45035b3ba735260416c6ed0cbb7d700ff8ee228f088ed9
5
5
  SHA512:
6
- metadata.gz: 04422de0eccc4d64ef2241e3a3e156a89691170379f6eb23f601dbea6967d61026ca2a719d0e983938831a00076c0e3fa51d45c5c1dc504eb2b5cbbf334234fd
7
- data.tar.gz: a78deeb802fa75d8d4ec937056fdcbbe3c723091c4c3eb3f2acc21bdf797d7fd73736d9d92af3574e0ee5394b39e4c6e24b18cb7e32429716aa46848a80dd64f
6
+ metadata.gz: f95b4cd4728da35d806b0c90ba98a92caac34dc9089155280754eb7b12895fc1a584ff5026d7ca2c5d1b2c59e9614683923e6c7b69349f37fd68eb96aa3047b4
7
+ data.tar.gz: d94644dd0c002c87d62e667e05dbf6e73dc7a8e7c5e94fe16c1bbe31cb2900bba86adba2f049d3397125b906c41eac6fd0136e33e35a9e9bab0c1b847f161201
data/CHANGELOG.md CHANGED
@@ -1,6 +1,16 @@
1
1
  Unreleased Changes
2
2
  ------------------
3
3
 
4
+ 1.113.0 (2026-10-19)
5
+ ------------------
6
+
7
+ * Feature - Amazon OpenSearch Service adds a new TLS security policy to support FIPS policy and post-quantum cryptography
8
+
9
+ 1.112.0 (2026-10-08)
10
+ ------------------
11
+
12
+ * Feature - This release adds a new EncryptionMode option (DISK or NATIVE) to EncryptionAtRestOptions for the CreateDomain and UpdateDomainConfig operations, enabling selection of engine-native index-level encryption on supported Amazon OpenSearch Service domains.
13
+
4
14
  1.111.0 (2026-09-29)
5
15
  ------------------
6
16
 
data/VERSION CHANGED
@@ -1 +1 @@
1
- 1.111.0
1
+ 1.113.0
@@ -1354,6 +1354,7 @@ module Aws::OpenSearchService
1354
1354
  # encryption_at_rest_options: {
1355
1355
  # enabled: false,
1356
1356
  # kms_key_id: "KmsKeyId",
1357
+ # encryption_mode: "DISK", # accepts DISK, NATIVE
1357
1358
  # },
1358
1359
  # node_to_node_encryption_options: {
1359
1360
  # enabled: false,
@@ -1369,7 +1370,7 @@ module Aws::OpenSearchService
1369
1370
  # },
1370
1371
  # domain_endpoint_options: {
1371
1372
  # enforce_https: false,
1372
- # tls_security_policy: "Policy-Min-TLS-1-0-2019-07", # accepts Policy-Min-TLS-1-0-2019-07, Policy-Min-TLS-1-2-2019-07, Policy-Min-TLS-1-2-PFS-2023-10, Policy-Min-TLS-1-2-RFC9151-FIPS-2024-08
1373
+ # tls_security_policy: "Policy-Min-TLS-1-0-2019-07", # accepts Policy-Min-TLS-1-0-2019-07, Policy-Min-TLS-1-2-2019-07, Policy-Min-TLS-1-2-PFS-2023-10, Policy-Min-TLS-1-2-RFC9151-FIPS-2024-08, Policy-Min-TLS-1-2-FIPS-PQ-2026-10
1373
1374
  # custom_endpoint_enabled: false,
1374
1375
  # custom_endpoint: "DomainNameFqdn",
1375
1376
  # custom_endpoint_certificate_arn: "ARN",
@@ -1525,6 +1526,7 @@ module Aws::OpenSearchService
1525
1526
  # resp.domain_status.cognito_options.role_arn #=> String
1526
1527
  # resp.domain_status.encryption_at_rest_options.enabled #=> Boolean
1527
1528
  # resp.domain_status.encryption_at_rest_options.kms_key_id #=> String
1529
+ # resp.domain_status.encryption_at_rest_options.encryption_mode #=> String, one of "DISK", "NATIVE"
1528
1530
  # resp.domain_status.node_to_node_encryption_options.enabled #=> Boolean
1529
1531
  # resp.domain_status.advanced_options #=> Hash
1530
1532
  # resp.domain_status.advanced_options["String"] #=> String
@@ -1540,7 +1542,7 @@ module Aws::OpenSearchService
1540
1542
  # resp.domain_status.service_software_options.automated_update_date #=> Time
1541
1543
  # resp.domain_status.service_software_options.optional_deployment #=> Boolean
1542
1544
  # resp.domain_status.domain_endpoint_options.enforce_https #=> Boolean
1543
- # resp.domain_status.domain_endpoint_options.tls_security_policy #=> String, one of "Policy-Min-TLS-1-0-2019-07", "Policy-Min-TLS-1-2-2019-07", "Policy-Min-TLS-1-2-PFS-2023-10", "Policy-Min-TLS-1-2-RFC9151-FIPS-2024-08"
1545
+ # resp.domain_status.domain_endpoint_options.tls_security_policy #=> String, one of "Policy-Min-TLS-1-0-2019-07", "Policy-Min-TLS-1-2-2019-07", "Policy-Min-TLS-1-2-PFS-2023-10", "Policy-Min-TLS-1-2-RFC9151-FIPS-2024-08", "Policy-Min-TLS-1-2-FIPS-PQ-2026-10"
1544
1546
  # resp.domain_status.domain_endpoint_options.custom_endpoint_enabled #=> Boolean
1545
1547
  # resp.domain_status.domain_endpoint_options.custom_endpoint #=> String
1546
1548
  # resp.domain_status.domain_endpoint_options.custom_endpoint_certificate_arn #=> String
@@ -2066,6 +2068,7 @@ module Aws::OpenSearchService
2066
2068
  # resp.domain_status.cognito_options.role_arn #=> String
2067
2069
  # resp.domain_status.encryption_at_rest_options.enabled #=> Boolean
2068
2070
  # resp.domain_status.encryption_at_rest_options.kms_key_id #=> String
2071
+ # resp.domain_status.encryption_at_rest_options.encryption_mode #=> String, one of "DISK", "NATIVE"
2069
2072
  # resp.domain_status.node_to_node_encryption_options.enabled #=> Boolean
2070
2073
  # resp.domain_status.advanced_options #=> Hash
2071
2074
  # resp.domain_status.advanced_options["String"] #=> String
@@ -2081,7 +2084,7 @@ module Aws::OpenSearchService
2081
2084
  # resp.domain_status.service_software_options.automated_update_date #=> Time
2082
2085
  # resp.domain_status.service_software_options.optional_deployment #=> Boolean
2083
2086
  # resp.domain_status.domain_endpoint_options.enforce_https #=> Boolean
2084
- # resp.domain_status.domain_endpoint_options.tls_security_policy #=> String, one of "Policy-Min-TLS-1-0-2019-07", "Policy-Min-TLS-1-2-2019-07", "Policy-Min-TLS-1-2-PFS-2023-10", "Policy-Min-TLS-1-2-RFC9151-FIPS-2024-08"
2087
+ # resp.domain_status.domain_endpoint_options.tls_security_policy #=> String, one of "Policy-Min-TLS-1-0-2019-07", "Policy-Min-TLS-1-2-2019-07", "Policy-Min-TLS-1-2-PFS-2023-10", "Policy-Min-TLS-1-2-RFC9151-FIPS-2024-08", "Policy-Min-TLS-1-2-FIPS-PQ-2026-10"
2085
2088
  # resp.domain_status.domain_endpoint_options.custom_endpoint_enabled #=> Boolean
2086
2089
  # resp.domain_status.domain_endpoint_options.custom_endpoint #=> String
2087
2090
  # resp.domain_status.domain_endpoint_options.custom_endpoint_certificate_arn #=> String
@@ -2521,6 +2524,7 @@ module Aws::OpenSearchService
2521
2524
  # resp.domain_status.cognito_options.role_arn #=> String
2522
2525
  # resp.domain_status.encryption_at_rest_options.enabled #=> Boolean
2523
2526
  # resp.domain_status.encryption_at_rest_options.kms_key_id #=> String
2527
+ # resp.domain_status.encryption_at_rest_options.encryption_mode #=> String, one of "DISK", "NATIVE"
2524
2528
  # resp.domain_status.node_to_node_encryption_options.enabled #=> Boolean
2525
2529
  # resp.domain_status.advanced_options #=> Hash
2526
2530
  # resp.domain_status.advanced_options["String"] #=> String
@@ -2536,7 +2540,7 @@ module Aws::OpenSearchService
2536
2540
  # resp.domain_status.service_software_options.automated_update_date #=> Time
2537
2541
  # resp.domain_status.service_software_options.optional_deployment #=> Boolean
2538
2542
  # resp.domain_status.domain_endpoint_options.enforce_https #=> Boolean
2539
- # resp.domain_status.domain_endpoint_options.tls_security_policy #=> String, one of "Policy-Min-TLS-1-0-2019-07", "Policy-Min-TLS-1-2-2019-07", "Policy-Min-TLS-1-2-PFS-2023-10", "Policy-Min-TLS-1-2-RFC9151-FIPS-2024-08"
2543
+ # resp.domain_status.domain_endpoint_options.tls_security_policy #=> String, one of "Policy-Min-TLS-1-0-2019-07", "Policy-Min-TLS-1-2-2019-07", "Policy-Min-TLS-1-2-PFS-2023-10", "Policy-Min-TLS-1-2-RFC9151-FIPS-2024-08", "Policy-Min-TLS-1-2-FIPS-PQ-2026-10"
2540
2544
  # resp.domain_status.domain_endpoint_options.custom_endpoint_enabled #=> Boolean
2541
2545
  # resp.domain_status.domain_endpoint_options.custom_endpoint #=> String
2542
2546
  # resp.domain_status.domain_endpoint_options.custom_endpoint_certificate_arn #=> String
@@ -2820,6 +2824,7 @@ module Aws::OpenSearchService
2820
2824
  # resp.domain_config.cognito_options.status.pending_deletion #=> Boolean
2821
2825
  # resp.domain_config.encryption_at_rest_options.options.enabled #=> Boolean
2822
2826
  # resp.domain_config.encryption_at_rest_options.options.kms_key_id #=> String
2827
+ # resp.domain_config.encryption_at_rest_options.options.encryption_mode #=> String, one of "DISK", "NATIVE"
2823
2828
  # resp.domain_config.encryption_at_rest_options.status.creation_date #=> Time
2824
2829
  # resp.domain_config.encryption_at_rest_options.status.update_date #=> Time
2825
2830
  # resp.domain_config.encryption_at_rest_options.status.update_version #=> Integer
@@ -2847,7 +2852,7 @@ module Aws::OpenSearchService
2847
2852
  # resp.domain_config.log_publishing_options.status.state #=> String, one of "RequiresIndexDocuments", "Processing", "Active"
2848
2853
  # resp.domain_config.log_publishing_options.status.pending_deletion #=> Boolean
2849
2854
  # resp.domain_config.domain_endpoint_options.options.enforce_https #=> Boolean
2850
- # resp.domain_config.domain_endpoint_options.options.tls_security_policy #=> String, one of "Policy-Min-TLS-1-0-2019-07", "Policy-Min-TLS-1-2-2019-07", "Policy-Min-TLS-1-2-PFS-2023-10", "Policy-Min-TLS-1-2-RFC9151-FIPS-2024-08"
2855
+ # resp.domain_config.domain_endpoint_options.options.tls_security_policy #=> String, one of "Policy-Min-TLS-1-0-2019-07", "Policy-Min-TLS-1-2-2019-07", "Policy-Min-TLS-1-2-PFS-2023-10", "Policy-Min-TLS-1-2-RFC9151-FIPS-2024-08", "Policy-Min-TLS-1-2-FIPS-PQ-2026-10"
2851
2856
  # resp.domain_config.domain_endpoint_options.options.custom_endpoint_enabled #=> Boolean
2852
2857
  # resp.domain_config.domain_endpoint_options.options.custom_endpoint #=> String
2853
2858
  # resp.domain_config.domain_endpoint_options.options.custom_endpoint_certificate_arn #=> String
@@ -3148,6 +3153,7 @@ module Aws::OpenSearchService
3148
3153
  # resp.domain_status_list[0].cognito_options.role_arn #=> String
3149
3154
  # resp.domain_status_list[0].encryption_at_rest_options.enabled #=> Boolean
3150
3155
  # resp.domain_status_list[0].encryption_at_rest_options.kms_key_id #=> String
3156
+ # resp.domain_status_list[0].encryption_at_rest_options.encryption_mode #=> String, one of "DISK", "NATIVE"
3151
3157
  # resp.domain_status_list[0].node_to_node_encryption_options.enabled #=> Boolean
3152
3158
  # resp.domain_status_list[0].advanced_options #=> Hash
3153
3159
  # resp.domain_status_list[0].advanced_options["String"] #=> String
@@ -3163,7 +3169,7 @@ module Aws::OpenSearchService
3163
3169
  # resp.domain_status_list[0].service_software_options.automated_update_date #=> Time
3164
3170
  # resp.domain_status_list[0].service_software_options.optional_deployment #=> Boolean
3165
3171
  # resp.domain_status_list[0].domain_endpoint_options.enforce_https #=> Boolean
3166
- # resp.domain_status_list[0].domain_endpoint_options.tls_security_policy #=> String, one of "Policy-Min-TLS-1-0-2019-07", "Policy-Min-TLS-1-2-2019-07", "Policy-Min-TLS-1-2-PFS-2023-10", "Policy-Min-TLS-1-2-RFC9151-FIPS-2024-08"
3172
+ # resp.domain_status_list[0].domain_endpoint_options.tls_security_policy #=> String, one of "Policy-Min-TLS-1-0-2019-07", "Policy-Min-TLS-1-2-2019-07", "Policy-Min-TLS-1-2-PFS-2023-10", "Policy-Min-TLS-1-2-RFC9151-FIPS-2024-08", "Policy-Min-TLS-1-2-FIPS-PQ-2026-10"
3167
3173
  # resp.domain_status_list[0].domain_endpoint_options.custom_endpoint_enabled #=> Boolean
3168
3174
  # resp.domain_status_list[0].domain_endpoint_options.custom_endpoint #=> String
3169
3175
  # resp.domain_status_list[0].domain_endpoint_options.custom_endpoint_certificate_arn #=> String
@@ -3330,6 +3336,7 @@ module Aws::OpenSearchService
3330
3336
  # resp.dry_run_config.cognito_options.role_arn #=> String
3331
3337
  # resp.dry_run_config.encryption_at_rest_options.enabled #=> Boolean
3332
3338
  # resp.dry_run_config.encryption_at_rest_options.kms_key_id #=> String
3339
+ # resp.dry_run_config.encryption_at_rest_options.encryption_mode #=> String, one of "DISK", "NATIVE"
3333
3340
  # resp.dry_run_config.node_to_node_encryption_options.enabled #=> Boolean
3334
3341
  # resp.dry_run_config.advanced_options #=> Hash
3335
3342
  # resp.dry_run_config.advanced_options["String"] #=> String
@@ -3345,7 +3352,7 @@ module Aws::OpenSearchService
3345
3352
  # resp.dry_run_config.service_software_options.automated_update_date #=> Time
3346
3353
  # resp.dry_run_config.service_software_options.optional_deployment #=> Boolean
3347
3354
  # resp.dry_run_config.domain_endpoint_options.enforce_https #=> Boolean
3348
- # resp.dry_run_config.domain_endpoint_options.tls_security_policy #=> String, one of "Policy-Min-TLS-1-0-2019-07", "Policy-Min-TLS-1-2-2019-07", "Policy-Min-TLS-1-2-PFS-2023-10", "Policy-Min-TLS-1-2-RFC9151-FIPS-2024-08"
3355
+ # resp.dry_run_config.domain_endpoint_options.tls_security_policy #=> String, one of "Policy-Min-TLS-1-0-2019-07", "Policy-Min-TLS-1-2-2019-07", "Policy-Min-TLS-1-2-PFS-2023-10", "Policy-Min-TLS-1-2-RFC9151-FIPS-2024-08", "Policy-Min-TLS-1-2-FIPS-PQ-2026-10"
3349
3356
  # resp.dry_run_config.domain_endpoint_options.custom_endpoint_enabled #=> Boolean
3350
3357
  # resp.dry_run_config.domain_endpoint_options.custom_endpoint #=> String
3351
3358
  # resp.dry_run_config.domain_endpoint_options.custom_endpoint_certificate_arn #=> String
@@ -6283,11 +6290,12 @@ module Aws::OpenSearchService
6283
6290
  # A list of advisory warning codes to accept for this configuration
6284
6291
  # change. By default, any advisory warning blocks the change. Include
6285
6292
  # the code of each warning you want to accept so the change can proceed.
6286
- # You can find warning codes in the`ValidationFailures` list returned by
6287
- # `DescribeDomainChangeProgress`and `DescribeDryRunProgress`. Critical
6288
- # validation failures cannot be accepted and always block the change. If
6289
- # you omit this parameter or pass an empty list, all warnings block the
6290
- # change. For more information, see [Validating a domain update][1].
6293
+ # You can find warning codes in the `ValidationFailures` list returned
6294
+ # by `DescribeDomainChangeProgress` and `DescribeDryRunProgress`.
6295
+ # Critical validation failures cannot be accepted and always block the
6296
+ # change. If you omit this parameter or pass an empty list, all warnings
6297
+ # block the change. For more information, see [Validating a domain
6298
+ # update][1].
6291
6299
  #
6292
6300
  #
6293
6301
  #
@@ -6366,10 +6374,11 @@ module Aws::OpenSearchService
6366
6374
  # encryption_at_rest_options: {
6367
6375
  # enabled: false,
6368
6376
  # kms_key_id: "KmsKeyId",
6377
+ # encryption_mode: "DISK", # accepts DISK, NATIVE
6369
6378
  # },
6370
6379
  # domain_endpoint_options: {
6371
6380
  # enforce_https: false,
6372
- # tls_security_policy: "Policy-Min-TLS-1-0-2019-07", # accepts Policy-Min-TLS-1-0-2019-07, Policy-Min-TLS-1-2-2019-07, Policy-Min-TLS-1-2-PFS-2023-10, Policy-Min-TLS-1-2-RFC9151-FIPS-2024-08
6381
+ # tls_security_policy: "Policy-Min-TLS-1-0-2019-07", # accepts Policy-Min-TLS-1-0-2019-07, Policy-Min-TLS-1-2-2019-07, Policy-Min-TLS-1-2-PFS-2023-10, Policy-Min-TLS-1-2-RFC9151-FIPS-2024-08, Policy-Min-TLS-1-2-FIPS-PQ-2026-10
6373
6382
  # custom_endpoint_enabled: false,
6374
6383
  # custom_endpoint: "DomainNameFqdn",
6375
6384
  # custom_endpoint_certificate_arn: "ARN",
@@ -6554,6 +6563,7 @@ module Aws::OpenSearchService
6554
6563
  # resp.domain_config.cognito_options.status.pending_deletion #=> Boolean
6555
6564
  # resp.domain_config.encryption_at_rest_options.options.enabled #=> Boolean
6556
6565
  # resp.domain_config.encryption_at_rest_options.options.kms_key_id #=> String
6566
+ # resp.domain_config.encryption_at_rest_options.options.encryption_mode #=> String, one of "DISK", "NATIVE"
6557
6567
  # resp.domain_config.encryption_at_rest_options.status.creation_date #=> Time
6558
6568
  # resp.domain_config.encryption_at_rest_options.status.update_date #=> Time
6559
6569
  # resp.domain_config.encryption_at_rest_options.status.update_version #=> Integer
@@ -6581,7 +6591,7 @@ module Aws::OpenSearchService
6581
6591
  # resp.domain_config.log_publishing_options.status.state #=> String, one of "RequiresIndexDocuments", "Processing", "Active"
6582
6592
  # resp.domain_config.log_publishing_options.status.pending_deletion #=> Boolean
6583
6593
  # resp.domain_config.domain_endpoint_options.options.enforce_https #=> Boolean
6584
- # resp.domain_config.domain_endpoint_options.options.tls_security_policy #=> String, one of "Policy-Min-TLS-1-0-2019-07", "Policy-Min-TLS-1-2-2019-07", "Policy-Min-TLS-1-2-PFS-2023-10", "Policy-Min-TLS-1-2-RFC9151-FIPS-2024-08"
6594
+ # resp.domain_config.domain_endpoint_options.options.tls_security_policy #=> String, one of "Policy-Min-TLS-1-0-2019-07", "Policy-Min-TLS-1-2-2019-07", "Policy-Min-TLS-1-2-PFS-2023-10", "Policy-Min-TLS-1-2-RFC9151-FIPS-2024-08", "Policy-Min-TLS-1-2-FIPS-PQ-2026-10"
6585
6595
  # resp.domain_config.domain_endpoint_options.options.custom_endpoint_enabled #=> Boolean
6586
6596
  # resp.domain_config.domain_endpoint_options.options.custom_endpoint #=> String
6587
6597
  # resp.domain_config.domain_endpoint_options.options.custom_endpoint_certificate_arn #=> String
@@ -7121,7 +7131,7 @@ module Aws::OpenSearchService
7121
7131
  tracer: tracer
7122
7132
  )
7123
7133
  context[:gem_name] = 'aws-sdk-opensearchservice'
7124
- context[:gem_version] = '1.111.0'
7134
+ context[:gem_version] = '1.113.0'
7125
7135
  Seahorse::Client::Request.new(handlers, context)
7126
7136
  end
7127
7137
 
@@ -267,6 +267,7 @@ module Aws::OpenSearchService
267
267
  EBSOptionsStatus = Shapes::StructureShape.new(name: 'EBSOptionsStatus')
268
268
  EncryptionAtRestOptions = Shapes::StructureShape.new(name: 'EncryptionAtRestOptions')
269
269
  EncryptionAtRestOptionsStatus = Shapes::StructureShape.new(name: 'EncryptionAtRestOptionsStatus')
270
+ EncryptionMode = Shapes::StringShape.new(name: 'EncryptionMode')
270
271
  Endpoint = Shapes::StringShape.new(name: 'Endpoint')
271
272
  EndpointsMap = Shapes::MapShape.new(name: 'EndpointsMap')
272
273
  EngineMode = Shapes::StringShape.new(name: 'EngineMode')
@@ -1568,6 +1569,7 @@ module Aws::OpenSearchService
1568
1569
 
1569
1570
  EncryptionAtRestOptions.add_member(:enabled, Shapes::ShapeRef.new(shape: Boolean, location_name: "Enabled"))
1570
1571
  EncryptionAtRestOptions.add_member(:kms_key_id, Shapes::ShapeRef.new(shape: KmsKeyId, location_name: "KmsKeyId"))
1572
+ EncryptionAtRestOptions.add_member(:encryption_mode, Shapes::ShapeRef.new(shape: EncryptionMode, location_name: "EncryptionMode"))
1571
1573
  EncryptionAtRestOptions.struct_class = Types::EncryptionAtRestOptions
1572
1574
 
1573
1575
  EncryptionAtRestOptionsStatus.add_member(:options, Shapes::ShapeRef.new(shape: EncryptionAtRestOptions, required: true, location_name: "Options"))
@@ -4090,6 +4090,10 @@ module Aws::OpenSearchService
4090
4090
  #
4091
4091
  # * **Policy-Min-TLS-1-2-RFC9151-FIPS-2024-08:** TLS security policy
4092
4092
  # that supports TLS version 1.3 with FIPS
4093
+ #
4094
+ # * **Policy-Min-TLS-1-2-FIPS-PQ-2026-10:** TLS security policy that
4095
+ # supports TLS version 1.2 to TLS version 1.3 with FIPS and
4096
+ # post-quantum cipher suites
4093
4097
  # @return [String]
4094
4098
  #
4095
4099
  # @!attribute [rw] custom_endpoint_enabled
@@ -4748,11 +4752,21 @@ module Aws::OpenSearchService
4748
4752
  # `1a2a3a4-1a2a-3a4a-5a6a-1a2a3a4a5a6a`.
4749
4753
  # @return [String]
4750
4754
  #
4755
+ # @!attribute [rw] encryption_mode
4756
+ # The type of encryption at rest applied to the domain's data. Valid
4757
+ # values are `DISK` and `NATIVE`. `DISK` is the default and uses
4758
+ # volume-level encryption. `NATIVE` uses engine-native, index-level
4759
+ # encryption and requires encryption at rest to be enabled and
4760
+ # OpenSearch version 3.3 or later. After the mode is set to `NATIVE`,
4761
+ # it can't be changed back to `DISK`.
4762
+ # @return [String]
4763
+ #
4751
4764
  # @see http://docs.aws.amazon.com/goto/WebAPI/opensearch-2021-01-01/EncryptionAtRestOptions AWS API Documentation
4752
4765
  #
4753
4766
  class EncryptionAtRestOptions < Struct.new(
4754
4767
  :enabled,
4755
- :kms_key_id)
4768
+ :kms_key_id,
4769
+ :encryption_mode)
4756
4770
  SENSITIVE = []
4757
4771
  include Aws::Structure
4758
4772
  end
@@ -9482,8 +9496,8 @@ module Aws::OpenSearchService
9482
9496
  # A list of advisory warning codes to accept for this configuration
9483
9497
  # change. By default, any advisory warning blocks the change. Include
9484
9498
  # the code of each warning you want to accept so the change can
9485
- # proceed. You can find warning codes in the`ValidationFailures` list
9486
- # returned by `DescribeDomainChangeProgress`and
9499
+ # proceed. You can find warning codes in the `ValidationFailures` list
9500
+ # returned by `DescribeDomainChangeProgress` and
9487
9501
  # `DescribeDryRunProgress`. Critical validation failures cannot be
9488
9502
  # accepted and always block the change. If you omit this parameter or
9489
9503
  # pass an empty list, all warnings block the change. For more
@@ -54,7 +54,7 @@ module Aws::OpenSearchService
54
54
  autoload :EndpointProvider, 'aws-sdk-opensearchservice/endpoint_provider'
55
55
  autoload :Endpoints, 'aws-sdk-opensearchservice/endpoints'
56
56
 
57
- GEM_VERSION = '1.111.0'
57
+ GEM_VERSION = '1.113.0'
58
58
 
59
59
  end
60
60
 
data/sig/client.rbs CHANGED
@@ -314,7 +314,8 @@ module Aws
314
314
  },
315
315
  ?encryption_at_rest_options: {
316
316
  enabled: bool?,
317
- kms_key_id: ::String?
317
+ kms_key_id: ::String?,
318
+ encryption_mode: ("DISK" | "NATIVE")?
318
319
  },
319
320
  ?node_to_node_encryption_options: {
320
321
  enabled: bool?
@@ -326,7 +327,7 @@ module Aws
326
327
  }],
327
328
  ?domain_endpoint_options: {
328
329
  enforce_https: bool?,
329
- tls_security_policy: ("Policy-Min-TLS-1-0-2019-07" | "Policy-Min-TLS-1-2-2019-07" | "Policy-Min-TLS-1-2-PFS-2023-10" | "Policy-Min-TLS-1-2-RFC9151-FIPS-2024-08")?,
330
+ tls_security_policy: ("Policy-Min-TLS-1-0-2019-07" | "Policy-Min-TLS-1-2-2019-07" | "Policy-Min-TLS-1-2-PFS-2023-10" | "Policy-Min-TLS-1-2-RFC9151-FIPS-2024-08" | "Policy-Min-TLS-1-2-FIPS-PQ-2026-10")?,
330
331
  custom_endpoint_enabled: bool?,
331
332
  custom_endpoint: ::String?,
332
333
  custom_endpoint_certificate_arn: ::String?
@@ -1482,11 +1483,12 @@ module Aws
1482
1483
  }],
1483
1484
  ?encryption_at_rest_options: {
1484
1485
  enabled: bool?,
1485
- kms_key_id: ::String?
1486
+ kms_key_id: ::String?,
1487
+ encryption_mode: ("DISK" | "NATIVE")?
1486
1488
  },
1487
1489
  ?domain_endpoint_options: {
1488
1490
  enforce_https: bool?,
1489
- tls_security_policy: ("Policy-Min-TLS-1-0-2019-07" | "Policy-Min-TLS-1-2-2019-07" | "Policy-Min-TLS-1-2-PFS-2023-10" | "Policy-Min-TLS-1-2-RFC9151-FIPS-2024-08")?,
1491
+ tls_security_policy: ("Policy-Min-TLS-1-0-2019-07" | "Policy-Min-TLS-1-2-2019-07" | "Policy-Min-TLS-1-2-PFS-2023-10" | "Policy-Min-TLS-1-2-RFC9151-FIPS-2024-08" | "Policy-Min-TLS-1-2-FIPS-PQ-2026-10")?,
1490
1492
  custom_endpoint_enabled: bool?,
1491
1493
  custom_endpoint: ::String?,
1492
1494
  custom_endpoint_certificate_arn: ::String?
data/sig/errors.rbs CHANGED
@@ -11,37 +11,37 @@ module Aws
11
11
  class ServiceError < ::Aws::Errors::ServiceError
12
12
  end
13
13
 
14
- class AccessDeniedException < ::Aws::Errors::ServiceError
14
+ class AccessDeniedException < ServiceError
15
15
  end
16
- class BaseException < ::Aws::Errors::ServiceError
16
+ class BaseException < ServiceError
17
17
  def message: () -> ::String
18
18
  end
19
- class ConflictException < ::Aws::Errors::ServiceError
19
+ class ConflictException < ServiceError
20
20
  end
21
- class DependencyFailureException < ::Aws::Errors::ServiceError
21
+ class DependencyFailureException < ServiceError
22
22
  end
23
- class DisabledOperationException < ::Aws::Errors::ServiceError
23
+ class DisabledOperationException < ServiceError
24
24
  end
25
- class InternalException < ::Aws::Errors::ServiceError
25
+ class InternalException < ServiceError
26
26
  end
27
- class InvalidPaginationTokenException < ::Aws::Errors::ServiceError
27
+ class InvalidPaginationTokenException < ServiceError
28
28
  end
29
- class InvalidTypeException < ::Aws::Errors::ServiceError
29
+ class InvalidTypeException < ServiceError
30
30
  end
31
- class LimitExceededException < ::Aws::Errors::ServiceError
31
+ class LimitExceededException < ServiceError
32
32
  end
33
- class ResourceAlreadyExistsException < ::Aws::Errors::ServiceError
33
+ class ResourceAlreadyExistsException < ServiceError
34
34
  end
35
- class ResourceNotFoundException < ::Aws::Errors::ServiceError
35
+ class ResourceNotFoundException < ServiceError
36
36
  end
37
- class ServiceQuotaExceededException < ::Aws::Errors::ServiceError
37
+ class ServiceQuotaExceededException < ServiceError
38
38
  end
39
- class SlotNotAvailableException < ::Aws::Errors::ServiceError
39
+ class SlotNotAvailableException < ServiceError
40
40
  def slot_suggestions: () -> ::String
41
41
  end
42
- class ThrottlingException < ::Aws::Errors::ServiceError
42
+ class ThrottlingException < ServiceError
43
43
  end
44
- class ValidationException < ::Aws::Errors::ServiceError
44
+ class ValidationException < ServiceError
45
45
  end
46
46
  end
47
47
  end
data/sig/types.rbs CHANGED
@@ -1051,7 +1051,7 @@ module Aws::OpenSearchService
1051
1051
 
1052
1052
  class DomainEndpointOptions
1053
1053
  attr_accessor enforce_https: bool
1054
- attr_accessor tls_security_policy: ("Policy-Min-TLS-1-0-2019-07" | "Policy-Min-TLS-1-2-2019-07" | "Policy-Min-TLS-1-2-PFS-2023-10" | "Policy-Min-TLS-1-2-RFC9151-FIPS-2024-08")
1054
+ attr_accessor tls_security_policy: ("Policy-Min-TLS-1-0-2019-07" | "Policy-Min-TLS-1-2-2019-07" | "Policy-Min-TLS-1-2-PFS-2023-10" | "Policy-Min-TLS-1-2-RFC9151-FIPS-2024-08" | "Policy-Min-TLS-1-2-FIPS-PQ-2026-10")
1055
1055
  attr_accessor custom_endpoint_enabled: bool
1056
1056
  attr_accessor custom_endpoint: ::String
1057
1057
  attr_accessor custom_endpoint_certificate_arn: ::String
@@ -1196,6 +1196,7 @@ module Aws::OpenSearchService
1196
1196
  class EncryptionAtRestOptions
1197
1197
  attr_accessor enabled: bool
1198
1198
  attr_accessor kms_key_id: ::String
1199
+ attr_accessor encryption_mode: ("DISK" | "NATIVE")
1199
1200
  SENSITIVE: []
1200
1201
  end
1201
1202
 
metadata CHANGED
@@ -1,7 +1,7 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: aws-sdk-opensearchservice
3
3
  version: !ruby/object:Gem::Version
4
- version: 1.111.0
4
+ version: 1.113.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Amazon Web Services
@@ -18,7 +18,7 @@ dependencies:
18
18
  version: '3'
19
19
  - - ">="
20
20
  - !ruby/object:Gem::Version
21
- version: 3.256.0
21
+ version: 3.258.0
22
22
  type: :runtime
23
23
  prerelease: false
24
24
  version_requirements: !ruby/object:Gem::Requirement
@@ -28,7 +28,7 @@ dependencies:
28
28
  version: '3'
29
29
  - - ">="
30
30
  - !ruby/object:Gem::Version
31
- version: 3.256.0
31
+ version: 3.258.0
32
32
  - !ruby/object:Gem::Dependency
33
33
  name: aws-sigv4
34
34
  requirement: !ruby/object:Gem::Requirement