aws-sdk-opensearchservice 1.43.0 → 1.45.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: fc5a026d65cbfc0fc4734212212e35670234671f9f866e606e3729a4a34c9f6e
-  data.tar.gz: bba14c14788691e09a44ee086a6f157c8845bf44b471f08888fedac8acbaec60
+  metadata.gz: b438ec1220297a33ccb84c0956bfd81d41a26cca60616a2e16af2d0d059045d2
+  data.tar.gz: 9deb7bfb1d255753a5861f9abab23523304d8822a48b46440b83a5dddbc89d42
 SHA512:
-  metadata.gz: 1b747a0305d0031f188194a47905bb9fb3cf7b1f5c1720a2b705763e3721cb81cd117e78f47f7cd23f30b9006f7cabbd916f06e05302cfedf6187895a45a0c91
-  data.tar.gz: f5f423cb8b27f292f353de1363ec4f2c5cf60aeefb3ff7695f15c8a536d004fa96f926db8d7052d0dbae6d7d72aeaba055c75369e760416f3b02db2f8f37be43
+  metadata.gz: 83ece3dbf811b96d197b5922501a599072c90ec73a0bb8467565b1fd3f202e226d5a52f6624821488e770c8083a0402005bca3fe3a289852b3bb9214546319e3
+  data.tar.gz: '083d0e94c97ec90b5a0a2b2b1c6c71829582edd54952274427eb72d0aa356fa68a3c5d1ccf6c16806e3589b576abaed1d43e4543740436c9dc266e8611e78937'

data/CHANGELOG.md

@@ -1,6 +1,16 @@
 Unreleased Changes
 ------------------
 
+1.45.0 (2024-06-24)
+------------------
+
+* Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
+
+1.44.0 (2024-06-19)
+------------------
+
+* Feature - This release enables customers to use JSON Web Tokens (JWT) for authentication on their Amazon OpenSearch Service domains.
+
 1.43.0 (2024-06-05)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.43.0
+1.45.0

data/lib/aws-sdk-opensearchservice/client.rb

@@ -89,6 +89,11 @@ module Aws::OpenSearchService
 
     # @overload initialize(options)
     #   @param [Hash] options
+    #
+    #   @option options [Array<Seahorse::Client::Plugin>] :plugins ([]])
+    #     A list of plugins to apply to the client. Each plugin is either a
+    #     class name or an instance of a plugin class.
+    #
     #   @option options [required, Aws::CredentialProvider] :credentials
     #     Your AWS credentials. This can be an instance of any one of the
     #     following classes:
@@ -209,7 +214,6 @@ module Aws::OpenSearchService
     #         'https://example.com'
     #         'http://example.com:123'
     #
-    #
     #   @option options [Integer] :endpoint_cache_max_entries (1000)
     #     Used for the maximum size limit of the LRU cache storing endpoints data
     #     for endpoint discovery enabled operations. Defaults to 1000.
@@ -298,7 +302,6 @@ module Aws::OpenSearchService
     #       throttling.  This is a provisional mode that may change behavior
     #       in the future.
     #
-    #
     #   @option options [String] :sdk_ua_app_id
     #     A unique and opaque application ID that is appended to the
     #     User-Agent header as app/sdk_ua_app_id. It should have a
@@ -936,6 +939,12 @@ module Aws::OpenSearchService
     #         roles_key: "String",
     #         session_timeout_minutes: 1,
     #       },
+    #       jwt_options: {
+    #         enabled: false,
+    #         subject_key: "SubjectKey",
+    #         roles_key: "RolesKey",
+    #         public_key: "String",
+    #       },
     #       anonymous_auth_enabled: false,
     #     },
     #     tag_list: [
@@ -1047,6 +1056,10 @@ module Aws::OpenSearchService
     #   resp.domain_status.advanced_security_options.saml_options.subject_key #=> String
     #   resp.domain_status.advanced_security_options.saml_options.roles_key #=> String
     #   resp.domain_status.advanced_security_options.saml_options.session_timeout_minutes #=> Integer
+    #   resp.domain_status.advanced_security_options.jwt_options.enabled #=> Boolean
+    #   resp.domain_status.advanced_security_options.jwt_options.subject_key #=> String
+    #   resp.domain_status.advanced_security_options.jwt_options.roles_key #=> String
+    #   resp.domain_status.advanced_security_options.jwt_options.public_key #=> String
     #   resp.domain_status.advanced_security_options.anonymous_auth_disable_date #=> Time
     #   resp.domain_status.advanced_security_options.anonymous_auth_enabled #=> Boolean
     #   resp.domain_status.auto_tune_options.state #=> String, one of "ENABLED", "DISABLED", "ENABLE_IN_PROGRESS", "DISABLE_IN_PROGRESS", "DISABLED_AND_ROLLBACK_SCHEDULED", "DISABLED_AND_ROLLBACK_IN_PROGRESS", "DISABLED_AND_ROLLBACK_COMPLETE", "DISABLED_AND_ROLLBACK_ERROR", "ERROR"
@@ -1408,6 +1421,10 @@ module Aws::OpenSearchService
     #   resp.domain_status.advanced_security_options.saml_options.subject_key #=> String
     #   resp.domain_status.advanced_security_options.saml_options.roles_key #=> String
     #   resp.domain_status.advanced_security_options.saml_options.session_timeout_minutes #=> Integer
+    #   resp.domain_status.advanced_security_options.jwt_options.enabled #=> Boolean
+    #   resp.domain_status.advanced_security_options.jwt_options.subject_key #=> String
+    #   resp.domain_status.advanced_security_options.jwt_options.roles_key #=> String
+    #   resp.domain_status.advanced_security_options.jwt_options.public_key #=> String
     #   resp.domain_status.advanced_security_options.anonymous_auth_disable_date #=> Time
     #   resp.domain_status.advanced_security_options.anonymous_auth_enabled #=> Boolean
     #   resp.domain_status.auto_tune_options.state #=> String, one of "ENABLED", "DISABLED", "ENABLE_IN_PROGRESS", "DISABLE_IN_PROGRESS", "DISABLED_AND_ROLLBACK_SCHEDULED", "DISABLED_AND_ROLLBACK_IN_PROGRESS", "DISABLED_AND_ROLLBACK_COMPLETE", "DISABLED_AND_ROLLBACK_ERROR", "ERROR"
@@ -1702,6 +1719,10 @@ module Aws::OpenSearchService
     #   resp.domain_status.advanced_security_options.saml_options.subject_key #=> String
     #   resp.domain_status.advanced_security_options.saml_options.roles_key #=> String
     #   resp.domain_status.advanced_security_options.saml_options.session_timeout_minutes #=> Integer
+    #   resp.domain_status.advanced_security_options.jwt_options.enabled #=> Boolean
+    #   resp.domain_status.advanced_security_options.jwt_options.subject_key #=> String
+    #   resp.domain_status.advanced_security_options.jwt_options.roles_key #=> String
+    #   resp.domain_status.advanced_security_options.jwt_options.public_key #=> String
     #   resp.domain_status.advanced_security_options.anonymous_auth_disable_date #=> Time
     #   resp.domain_status.advanced_security_options.anonymous_auth_enabled #=> Boolean
     #   resp.domain_status.auto_tune_options.state #=> String, one of "ENABLED", "DISABLED", "ENABLE_IN_PROGRESS", "DISABLE_IN_PROGRESS", "DISABLED_AND_ROLLBACK_SCHEDULED", "DISABLED_AND_ROLLBACK_IN_PROGRESS", "DISABLED_AND_ROLLBACK_COMPLETE", "DISABLED_AND_ROLLBACK_ERROR", "ERROR"
@@ -1979,6 +2000,10 @@ module Aws::OpenSearchService
     #   resp.domain_config.advanced_security_options.options.saml_options.subject_key #=> String
     #   resp.domain_config.advanced_security_options.options.saml_options.roles_key #=> String
     #   resp.domain_config.advanced_security_options.options.saml_options.session_timeout_minutes #=> Integer
+    #   resp.domain_config.advanced_security_options.options.jwt_options.enabled #=> Boolean
+    #   resp.domain_config.advanced_security_options.options.jwt_options.subject_key #=> String
+    #   resp.domain_config.advanced_security_options.options.jwt_options.roles_key #=> String
+    #   resp.domain_config.advanced_security_options.options.jwt_options.public_key #=> String
     #   resp.domain_config.advanced_security_options.options.anonymous_auth_disable_date #=> Time
     #   resp.domain_config.advanced_security_options.options.anonymous_auth_enabled #=> Boolean
     #   resp.domain_config.advanced_security_options.status.creation_date #=> Time
@@ -2227,6 +2252,10 @@ module Aws::OpenSearchService
     #   resp.domain_status_list[0].advanced_security_options.saml_options.subject_key #=> String
     #   resp.domain_status_list[0].advanced_security_options.saml_options.roles_key #=> String
     #   resp.domain_status_list[0].advanced_security_options.saml_options.session_timeout_minutes #=> Integer
+    #   resp.domain_status_list[0].advanced_security_options.jwt_options.enabled #=> Boolean
+    #   resp.domain_status_list[0].advanced_security_options.jwt_options.subject_key #=> String
+    #   resp.domain_status_list[0].advanced_security_options.jwt_options.roles_key #=> String
+    #   resp.domain_status_list[0].advanced_security_options.jwt_options.public_key #=> String
     #   resp.domain_status_list[0].advanced_security_options.anonymous_auth_disable_date #=> Time
     #   resp.domain_status_list[0].advanced_security_options.anonymous_auth_enabled #=> Boolean
     #   resp.domain_status_list[0].auto_tune_options.state #=> String, one of "ENABLED", "DISABLED", "ENABLE_IN_PROGRESS", "DISABLE_IN_PROGRESS", "DISABLED_AND_ROLLBACK_SCHEDULED", "DISABLED_AND_ROLLBACK_IN_PROGRESS", "DISABLED_AND_ROLLBACK_COMPLETE", "DISABLED_AND_ROLLBACK_ERROR", "ERROR"
@@ -2373,6 +2402,10 @@ module Aws::OpenSearchService
     #   resp.dry_run_config.advanced_security_options.saml_options.subject_key #=> String
     #   resp.dry_run_config.advanced_security_options.saml_options.roles_key #=> String
     #   resp.dry_run_config.advanced_security_options.saml_options.session_timeout_minutes #=> Integer
+    #   resp.dry_run_config.advanced_security_options.jwt_options.enabled #=> Boolean
+    #   resp.dry_run_config.advanced_security_options.jwt_options.subject_key #=> String
+    #   resp.dry_run_config.advanced_security_options.jwt_options.roles_key #=> String
+    #   resp.dry_run_config.advanced_security_options.jwt_options.public_key #=> String
     #   resp.dry_run_config.advanced_security_options.anonymous_auth_disable_date #=> Time
     #   resp.dry_run_config.advanced_security_options.anonymous_auth_enabled #=> Boolean
     #   resp.dry_run_config.auto_tune_options.state #=> String, one of "ENABLED", "DISABLED", "ENABLE_IN_PROGRESS", "DISABLE_IN_PROGRESS", "DISABLED_AND_ROLLBACK_SCHEDULED", "DISABLED_AND_ROLLBACK_IN_PROGRESS", "DISABLED_AND_ROLLBACK_COMPLETE", "DISABLED_AND_ROLLBACK_ERROR", "ERROR"
@@ -3992,7 +4025,7 @@ module Aws::OpenSearchService
     #   A new description of the data source.
     #
     # @option params [String] :status
-    #   The status of the data source update request.
+    #   The status of the data source update.
     #
     # @return [Types::UpdateDataSourceResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
@@ -4230,6 +4263,12 @@ module Aws::OpenSearchService
     #         roles_key: "String",
     #         session_timeout_minutes: 1,
     #       },
+    #       jwt_options: {
+    #         enabled: false,
+    #         subject_key: "SubjectKey",
+    #         roles_key: "RolesKey",
+    #         public_key: "String",
+    #       },
     #       anonymous_auth_enabled: false,
     #     },
     #     auto_tune_options: {
@@ -4383,6 +4422,10 @@ module Aws::OpenSearchService
     #   resp.domain_config.advanced_security_options.options.saml_options.subject_key #=> String
     #   resp.domain_config.advanced_security_options.options.saml_options.roles_key #=> String
     #   resp.domain_config.advanced_security_options.options.saml_options.session_timeout_minutes #=> Integer
+    #   resp.domain_config.advanced_security_options.options.jwt_options.enabled #=> Boolean
+    #   resp.domain_config.advanced_security_options.options.jwt_options.subject_key #=> String
+    #   resp.domain_config.advanced_security_options.options.jwt_options.roles_key #=> String
+    #   resp.domain_config.advanced_security_options.options.jwt_options.public_key #=> String
     #   resp.domain_config.advanced_security_options.options.anonymous_auth_disable_date #=> Time
     #   resp.domain_config.advanced_security_options.options.anonymous_auth_enabled #=> Boolean
     #   resp.domain_config.advanced_security_options.status.creation_date #=> Time
@@ -4722,7 +4765,7 @@ module Aws::OpenSearchService
         params: params,
         config: config)
       context[:gem_name] = 'aws-sdk-opensearchservice'
-      context[:gem_version] = '1.43.0'
+      context[:gem_version] = '1.45.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-opensearchservice/client_api.rb

@@ -244,6 +244,8 @@ module Aws::OpenSearchService
     InvalidTypeException = Shapes::StructureShape.new(name: 'InvalidTypeException')
     Issue = Shapes::StringShape.new(name: 'Issue')
     Issues = Shapes::ListShape.new(name: 'Issues')
+    JWTOptionsInput = Shapes::StructureShape.new(name: 'JWTOptionsInput')
+    JWTOptionsOutput = Shapes::StructureShape.new(name: 'JWTOptionsOutput')
     KmsKeyId = Shapes::StringShape.new(name: 'KmsKeyId')
     LastUpdated = Shapes::TimestampShape.new(name: 'LastUpdated')
     LimitExceededException = Shapes::StructureShape.new(name: 'LimitExceededException')
@@ -356,6 +358,7 @@ module Aws::OpenSearchService
     RevokeVpcEndpointAccessRequest = Shapes::StructureShape.new(name: 'RevokeVpcEndpointAccessRequest')
     RevokeVpcEndpointAccessResponse = Shapes::StructureShape.new(name: 'RevokeVpcEndpointAccessResponse')
     RoleArn = Shapes::StringShape.new(name: 'RoleArn')
+    RolesKey = Shapes::StringShape.new(name: 'RolesKey')
     RollbackOnDisable = Shapes::StringShape.new(name: 'RollbackOnDisable')
     S3BucketName = Shapes::StringShape.new(name: 'S3BucketName')
     S3GlueDataCatalog = Shapes::StructureShape.new(name: 'S3GlueDataCatalog')
@@ -398,6 +401,7 @@ module Aws::OpenSearchService
     StorageTypeName = Shapes::StringShape.new(name: 'StorageTypeName')
     String = Shapes::StringShape.new(name: 'String')
     StringList = Shapes::ListShape.new(name: 'StringList')
+    SubjectKey = Shapes::StringShape.new(name: 'SubjectKey')
     TLSSecurityPolicy = Shapes::StringShape.new(name: 'TLSSecurityPolicy')
     Tag = Shapes::StructureShape.new(name: 'Tag')
     TagKey = Shapes::StringShape.new(name: 'TagKey')
@@ -501,6 +505,7 @@ module Aws::OpenSearchService
     AdvancedSecurityOptions.add_member(:enabled, Shapes::ShapeRef.new(shape: Boolean, location_name: "Enabled"))
     AdvancedSecurityOptions.add_member(:internal_user_database_enabled, Shapes::ShapeRef.new(shape: Boolean, location_name: "InternalUserDatabaseEnabled"))
     AdvancedSecurityOptions.add_member(:saml_options, Shapes::ShapeRef.new(shape: SAMLOptionsOutput, location_name: "SAMLOptions"))
+    AdvancedSecurityOptions.add_member(:jwt_options, Shapes::ShapeRef.new(shape: JWTOptionsOutput, location_name: "JWTOptions"))
     AdvancedSecurityOptions.add_member(:anonymous_auth_disable_date, Shapes::ShapeRef.new(shape: DisableTimestamp, location_name: "AnonymousAuthDisableDate"))
     AdvancedSecurityOptions.add_member(:anonymous_auth_enabled, Shapes::ShapeRef.new(shape: Boolean, location_name: "AnonymousAuthEnabled"))
     AdvancedSecurityOptions.struct_class = Types::AdvancedSecurityOptions
@@ -509,6 +514,7 @@ module Aws::OpenSearchService
     AdvancedSecurityOptionsInput.add_member(:internal_user_database_enabled, Shapes::ShapeRef.new(shape: Boolean, location_name: "InternalUserDatabaseEnabled"))
     AdvancedSecurityOptionsInput.add_member(:master_user_options, Shapes::ShapeRef.new(shape: MasterUserOptions, location_name: "MasterUserOptions"))
     AdvancedSecurityOptionsInput.add_member(:saml_options, Shapes::ShapeRef.new(shape: SAMLOptionsInput, location_name: "SAMLOptions"))
+    AdvancedSecurityOptionsInput.add_member(:jwt_options, Shapes::ShapeRef.new(shape: JWTOptionsInput, location_name: "JWTOptions"))
     AdvancedSecurityOptionsInput.add_member(:anonymous_auth_enabled, Shapes::ShapeRef.new(shape: Boolean, location_name: "AnonymousAuthEnabled"))
     AdvancedSecurityOptionsInput.struct_class = Types::AdvancedSecurityOptionsInput
 
@@ -1217,6 +1223,18 @@ module Aws::OpenSearchService
 
     Issues.member = Shapes::ShapeRef.new(shape: Issue)
 
+    JWTOptionsInput.add_member(:enabled, Shapes::ShapeRef.new(shape: Boolean, location_name: "Enabled"))
+    JWTOptionsInput.add_member(:subject_key, Shapes::ShapeRef.new(shape: SubjectKey, location_name: "SubjectKey"))
+    JWTOptionsInput.add_member(:roles_key, Shapes::ShapeRef.new(shape: RolesKey, location_name: "RolesKey"))
+    JWTOptionsInput.add_member(:public_key, Shapes::ShapeRef.new(shape: String, location_name: "PublicKey"))
+    JWTOptionsInput.struct_class = Types::JWTOptionsInput
+
+    JWTOptionsOutput.add_member(:enabled, Shapes::ShapeRef.new(shape: Boolean, location_name: "Enabled"))
+    JWTOptionsOutput.add_member(:subject_key, Shapes::ShapeRef.new(shape: String, location_name: "SubjectKey"))
+    JWTOptionsOutput.add_member(:roles_key, Shapes::ShapeRef.new(shape: String, location_name: "RolesKey"))
+    JWTOptionsOutput.add_member(:public_key, Shapes::ShapeRef.new(shape: String, location_name: "PublicKey"))
+    JWTOptionsOutput.struct_class = Types::JWTOptionsOutput
+
     LimitExceededException.struct_class = Types::LimitExceededException
 
     LimitValueList.member = Shapes::ShapeRef.new(shape: LimitValue)
@@ -1763,6 +1781,7 @@ module Aws::OpenSearchService
 
       api.metadata = {
         "apiVersion" => "2021-01-01",
+        "auth" => ["aws.auth#sigv4"],
         "endpointPrefix" => "es",
         "protocol" => "rest-json",
         "protocols" => ["rest-json"],

data/lib/aws-sdk-opensearchservice/types.rb

@@ -250,6 +250,11 @@ module Aws::OpenSearchService
     #   OpenSearch Dashboards.
     #   @return [Types::SAMLOptionsOutput]
     #
+    # @!attribute [rw] jwt_options
+    #   Container for information about the JWT configuration of the Amazon
+    #   OpenSearch Service.
+    #   @return [Types::JWTOptionsOutput]
+    #
     # @!attribute [rw] anonymous_auth_disable_date
     #   Date and time when the migration period will be disabled. Only
     #   necessary when [enabling fine-grained access control on an existing
@@ -276,6 +281,7 @@ module Aws::OpenSearchService
       :enabled,
       :internal_user_database_enabled,
       :saml_options,
+      :jwt_options,
       :anonymous_auth_disable_date,
       :anonymous_auth_enabled)
       SENSITIVE = []
@@ -307,6 +313,11 @@ module Aws::OpenSearchService
     #   OpenSearch Dashboards.
     #   @return [Types::SAMLOptionsInput]
     #
+    # @!attribute [rw] jwt_options
+    #   Container for information about the JWT configuration of the Amazon
+    #   OpenSearch Service.
+    #   @return [Types::JWTOptionsInput]
+    #
     # @!attribute [rw] anonymous_auth_enabled
     #   True to enable a 30-day migration period during which administrators
     #   can create role mappings. Only necessary when [enabling fine-grained
@@ -324,6 +335,7 @@ module Aws::OpenSearchService
       :internal_user_database_enabled,
       :master_user_options,
       :saml_options,
+      :jwt_options,
       :anonymous_auth_enabled)
       SENSITIVE = []
       include Aws::Structure
@@ -3508,7 +3520,7 @@ module Aws::OpenSearchService
     #   @return [String]
     #
     # @!attribute [rw] status
-    #   The status of the data source response.
+    #   The status of the data source.
     #   @return [String]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/opensearch-2021-01-01/GetDataSourceResponse AWS API Documentation
@@ -3942,6 +3954,66 @@ module Aws::OpenSearchService
     #
     class InvalidTypeException < Aws::EmptyStructure; end
 
+    # The JWT authentication and authorization configuration for an Amazon
+    # OpenSearch Service domain.
+    #
+    # @!attribute [rw] enabled
+    #   True to enable JWT authentication and authorization for a domain.
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] subject_key
+    #   Element of the JWT assertion to use for the user name.
+    #   @return [String]
+    #
+    # @!attribute [rw] roles_key
+    #   Element of the JWT assertion to use for roles.
+    #   @return [String]
+    #
+    # @!attribute [rw] public_key
+    #   Element of the JWT assertion used by the cluster to verify JWT
+    #   signatures.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/opensearch-2021-01-01/JWTOptionsInput AWS API Documentation
+    #
+    class JWTOptionsInput < Struct.new(
+      :enabled,
+      :subject_key,
+      :roles_key,
+      :public_key)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Describes the JWT options configured for the domain.
+    #
+    # @!attribute [rw] enabled
+    #   True if JWT use is enabled.
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] subject_key
+    #   The key used for matching the JWT subject attribute.
+    #   @return [String]
+    #
+    # @!attribute [rw] roles_key
+    #   The key used for matching the JWT roles attribute.
+    #   @return [String]
+    #
+    # @!attribute [rw] public_key
+    #   The key used to verify the signature of incoming JWT requests.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/opensearch-2021-01-01/JWTOptionsOutput AWS API Documentation
+    #
+    class JWTOptionsOutput < Struct.new(
+      :enabled,
+      :subject_key,
+      :roles_key,
+      :public_key)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # An exception for trying to create more than the allowed number of
     # resources or sub-resources.
     #
@@ -5884,7 +5956,7 @@ module Aws::OpenSearchService
     #   @return [String]
     #
     # @!attribute [rw] status
-    #   The status of the data source update request.
+    #   The status of the data source update.
     #   @return [String]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/opensearch-2021-01-01/UpdateDataSourceRequest AWS API Documentation

data/lib/aws-sdk-opensearchservice.rb

@@ -52,6 +52,6 @@ require_relative 'aws-sdk-opensearchservice/customizations'
 # @!group service
 module Aws::OpenSearchService
 
-  GEM_VERSION = '1.43.0'
+  GEM_VERSION = '1.45.0'
 
 end

data/sig/client.rbs

@@ -243,6 +243,12 @@ module Aws
                                roles_key: ::String?,
                                session_timeout_minutes: ::Integer?
                              }?,
+                             jwt_options: {
+                               enabled: bool?,
+                               subject_key: ::String?,
+                               roles_key: ::String?,
+                               public_key: ::String?
+                             }?,
                              anonymous_auth_enabled: bool?
                            },
                            ?tag_list: Array[
@@ -1019,6 +1025,12 @@ module Aws
                                       roles_key: ::String?,
                                       session_timeout_minutes: ::Integer?
                                     }?,
+                                    jwt_options: {
+                                      enabled: bool?,
+                                      subject_key: ::String?,
+                                      roles_key: ::String?,
+                                      public_key: ::String?
+                                    }?,
                                     anonymous_auth_enabled: bool?
                                   },
                                   ?auto_tune_options: {

data/sig/types.rbs

@@ -69,6 +69,7 @@ module Aws::OpenSearchService
       attr_accessor enabled: bool
       attr_accessor internal_user_database_enabled: bool
       attr_accessor saml_options: Types::SAMLOptionsOutput
+      attr_accessor jwt_options: Types::JWTOptionsOutput
       attr_accessor anonymous_auth_disable_date: ::Time
       attr_accessor anonymous_auth_enabled: bool
       SENSITIVE: []
@@ -79,6 +80,7 @@ module Aws::OpenSearchService
       attr_accessor internal_user_database_enabled: bool
       attr_accessor master_user_options: Types::MasterUserOptions
       attr_accessor saml_options: Types::SAMLOptionsInput
+      attr_accessor jwt_options: Types::JWTOptionsInput
       attr_accessor anonymous_auth_enabled: bool
       SENSITIVE: []
     end
@@ -994,6 +996,22 @@ module Aws::OpenSearchService
     class InvalidTypeException < Aws::EmptyStructure
     end
 
+    class JWTOptionsInput
+      attr_accessor enabled: bool
+      attr_accessor subject_key: ::String
+      attr_accessor roles_key: ::String
+      attr_accessor public_key: ::String
+      SENSITIVE: []
+    end
+
+    class JWTOptionsOutput
+      attr_accessor enabled: bool
+      attr_accessor subject_key: ::String
+      attr_accessor roles_key: ::String
+      attr_accessor public_key: ::String
+      SENSITIVE: []
+    end
+
     class LimitExceededException < Aws::EmptyStructure
     end
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-opensearchservice
 version: !ruby/object:Gem::Version
-  version: 1.43.0
+  version: 1.45.0
 platform: ruby
 authors:
 - Amazon Web Services
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2024-06-05 00:00:00.000000000 Z
+date: 2024-06-24 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-core
@@ -19,7 +19,7 @@ dependencies:
         version: '3'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.197.0
+        version: 3.198.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -29,7 +29,7 @@ dependencies:
         version: '3'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.197.0
+        version: 3.198.0
 - !ruby/object:Gem::Dependency
   name: aws-sigv4
   requirement: !ruby/object:Gem::Requirement