aws-sdk-opensearchservice 1.88.0 → 1.89.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a2a30ceb5c3c47b48bb05ac5b294bc5ccdfabd90b09071a5beb8c376153a7e9f
-  data.tar.gz: 045d3ee1aa7dfb557c22ffe3d491854dcc60afad72c5d1ff58e319fc009dd70d
+  metadata.gz: 7d4872c2dd72a9ea5d9b81cebada0fb3209ea2bc9a2213088dce3e4b335c37f4
+  data.tar.gz: c29d1b2285d2512b6434568e07f753c8dc4d26f7e84c7e01fff4c0033211076c
 SHA512:
-  metadata.gz: fb5c85e672601cb9c12d3b65e129ac534453bb914c4051e190a36936794ccfa3adcf7b18e4cb504350a073f131526168dfe385658f90f0a9778adfee6c71f315
-  data.tar.gz: 564cc9a904c479b9e8d845f6336ab8d605d926abe3cbb28fab1f60479d6972afec3b4d4b2d608417abe23dd1a352abc83a8a2ece9dac01c15193cfd26f92c6af
+  metadata.gz: 359ca2514d37db26920d92fd1f9dc640698ae93c5b5e4a6cb38a4d1cba348ec9135d80f8cdb931f67e6d1d188ff9bba40f7c0a33965850ced5050bdb9c11964e
+  data.tar.gz: d4a965cf53cbe6e837c12ffb237ca873664fd68901cc82a1f38f483035cfcdb8326e435bd99d4513402a994388af403f179b249f7108278c88eaab06c1e389ea

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.89.0 (2026-03-09)
+------------------
+
+* Feature - This change enables cross-account and cross-region access for DataSources. Customers can now define access policies on their datasources to allow other AWS accounts to access and query their data.
+
 1.88.0 (2026-03-04)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.88.0
+1.89.0

data/lib/aws-sdk-opensearchservice/client.rb

@@ -589,6 +589,11 @@ module Aws::OpenSearchService
     #   A list of Amazon Resource Names (ARNs) for the OpenSearch collections
     #   that are associated with the direct query data source.
     #
+    # @option params [String] :data_source_access_policy
+    #   An optional IAM access policy document that defines the permissions
+    #   for accessing the data source. The policy document must be in valid
+    #   JSON format and follow IAM policy syntax.
+    #
     # @option params [Array<Types::Tag>] :tag_list
     #   A list of tags attached to a domain.
     #
@@ -610,6 +615,7 @@ module Aws::OpenSearchService
     #     },
     #     description: "DirectQueryDataSourceDescription",
     #     open_search_arns: ["ARN"], # required
+    #     data_source_access_policy: "PolicyDocument",
     #     tag_list: [
     #       {
     #         key: "TagKey", # required
@@ -986,6 +992,7 @@ module Aws::OpenSearchService
     #       {
     #         data_source_arn: "ARN",
     #         data_source_description: "DataSourceDescription",
+    #         iam_role_for_data_source_arn: "RoleArn",
     #       },
     #     ],
     #     iam_identity_center_options: {
@@ -1016,6 +1023,7 @@ module Aws::OpenSearchService
     #   resp.data_sources #=> Array
     #   resp.data_sources[0].data_source_arn #=> String
     #   resp.data_sources[0].data_source_description #=> String
+    #   resp.data_sources[0].iam_role_for_data_source_arn #=> String
     #   resp.iam_identity_center_options.enabled #=> Boolean
     #   resp.iam_identity_center_options.iam_identity_center_instance_arn #=> String
     #   resp.iam_identity_center_options.iam_role_for_identity_center_application_arn #=> String
@@ -3709,6 +3717,7 @@ module Aws::OpenSearchService
     #   resp.data_sources #=> Array
     #   resp.data_sources[0].data_source_arn #=> String
     #   resp.data_sources[0].data_source_description #=> String
+    #   resp.data_sources[0].iam_role_for_data_source_arn #=> String
     #   resp.app_configs #=> Array
     #   resp.app_configs[0].key #=> String, one of "opensearchDashboards.dashboardAdmin.users", "opensearchDashboards.dashboardAdmin.groups"
     #   resp.app_configs[0].value #=> String
@@ -3831,6 +3840,7 @@ module Aws::OpenSearchService
     #   * {Types::GetDirectQueryDataSourceResponse#data_source_type #data_source_type} => Types::DirectQueryDataSourceType
     #   * {Types::GetDirectQueryDataSourceResponse#description #description} => String
     #   * {Types::GetDirectQueryDataSourceResponse#open_search_arns #open_search_arns} => Array&lt;String&gt;
+    #   * {Types::GetDirectQueryDataSourceResponse#data_source_access_policy #data_source_access_policy} => String
     #   * {Types::GetDirectQueryDataSourceResponse#data_source_arn #data_source_arn} => String
     #
     # @example Request syntax with placeholder values
@@ -3847,6 +3857,7 @@ module Aws::OpenSearchService
     #   resp.description #=> String
     #   resp.open_search_arns #=> Array
     #   resp.open_search_arns[0] #=> String
+    #   resp.data_source_access_policy #=> String
     #   resp.data_source_arn #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/opensearch-2021-01-01/GetDirectQueryDataSource AWS API Documentation
@@ -5093,6 +5104,7 @@ module Aws::OpenSearchService
     #       {
     #         data_source_arn: "ARN",
     #         data_source_description: "DataSourceDescription",
+    #         iam_role_for_data_source_arn: "RoleArn",
     #       },
     #     ],
     #     app_configs: [
@@ -5111,6 +5123,7 @@ module Aws::OpenSearchService
     #   resp.data_sources #=> Array
     #   resp.data_sources[0].data_source_arn #=> String
     #   resp.data_sources[0].data_source_description #=> String
+    #   resp.data_sources[0].iam_role_for_data_source_arn #=> String
     #   resp.iam_identity_center_options.enabled #=> Boolean
     #   resp.iam_identity_center_options.iam_identity_center_instance_arn #=> String
     #   resp.iam_identity_center_options.iam_role_for_identity_center_application_arn #=> String
@@ -5203,6 +5216,13 @@ module Aws::OpenSearchService
     #   A list of Amazon Resource Names (ARNs) for the OpenSearch collections
     #   that are associated with the direct query data source.
     #
+    # @option params [String] :data_source_access_policy
+    #   An optional IAM access policy document that defines the updated
+    #   permissions for accessing the direct query data source. The policy
+    #   document must be in valid JSON format and follow IAM policy syntax. If
+    #   not specified, the existing access policy if present remains
+    #   unchanged.
+    #
     # @return [Types::UpdateDirectQueryDataSourceResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::UpdateDirectQueryDataSourceResponse#data_source_arn #data_source_arn} => String
@@ -5221,6 +5241,7 @@ module Aws::OpenSearchService
     #     },
     #     description: "DirectQueryDataSourceDescription",
     #     open_search_arns: ["ARN"], # required
+    #     data_source_access_policy: "PolicyDocument",
     #   })
     #
     # @example Response structure
@@ -6143,7 +6164,7 @@ module Aws::OpenSearchService
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-opensearchservice'
-      context[:gem_version] = '1.88.0'
+      context[:gem_version] = '1.89.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-opensearchservice/client_api.rb

@@ -613,6 +613,7 @@ module Aws::OpenSearchService
     AddDirectQueryDataSourceRequest.add_member(:data_source_type, Shapes::ShapeRef.new(shape: DirectQueryDataSourceType, required: true, location_name: "DataSourceType"))
     AddDirectQueryDataSourceRequest.add_member(:description, Shapes::ShapeRef.new(shape: DirectQueryDataSourceDescription, location_name: "Description"))
     AddDirectQueryDataSourceRequest.add_member(:open_search_arns, Shapes::ShapeRef.new(shape: DirectQueryOpenSearchARNList, required: true, location_name: "OpenSearchArns"))
+    AddDirectQueryDataSourceRequest.add_member(:data_source_access_policy, Shapes::ShapeRef.new(shape: PolicyDocument, location_name: "DataSourceAccessPolicy"))
     AddDirectQueryDataSourceRequest.add_member(:tag_list, Shapes::ShapeRef.new(shape: TagList, location_name: "TagList"))
     AddDirectQueryDataSourceRequest.struct_class = Types::AddDirectQueryDataSourceRequest
 
@@ -960,6 +961,7 @@ module Aws::OpenSearchService
 
     DataSource.add_member(:data_source_arn, Shapes::ShapeRef.new(shape: ARN, location_name: "dataSourceArn"))
     DataSource.add_member(:data_source_description, Shapes::ShapeRef.new(shape: DataSourceDescription, location_name: "dataSourceDescription"))
+    DataSource.add_member(:iam_role_for_data_source_arn, Shapes::ShapeRef.new(shape: RoleArn, location_name: "iamRoleForDataSourceArn"))
     DataSource.struct_class = Types::DataSource
 
     DataSourceDetails.add_member(:data_source_type, Shapes::ShapeRef.new(shape: DataSourceType, location_name: "DataSourceType"))
@@ -1433,6 +1435,7 @@ module Aws::OpenSearchService
     GetDirectQueryDataSourceResponse.add_member(:data_source_type, Shapes::ShapeRef.new(shape: DirectQueryDataSourceType, location_name: "DataSourceType"))
     GetDirectQueryDataSourceResponse.add_member(:description, Shapes::ShapeRef.new(shape: DirectQueryDataSourceDescription, location_name: "Description"))
     GetDirectQueryDataSourceResponse.add_member(:open_search_arns, Shapes::ShapeRef.new(shape: DirectQueryOpenSearchARNList, location_name: "OpenSearchArns"))
+    GetDirectQueryDataSourceResponse.add_member(:data_source_access_policy, Shapes::ShapeRef.new(shape: PolicyDocument, location_name: "DataSourceAccessPolicy"))
     GetDirectQueryDataSourceResponse.add_member(:data_source_arn, Shapes::ShapeRef.new(shape: String, location_name: "DataSourceArn"))
     GetDirectQueryDataSourceResponse.struct_class = Types::GetDirectQueryDataSourceResponse
 
@@ -2080,6 +2083,7 @@ module Aws::OpenSearchService
     UpdateDirectQueryDataSourceRequest.add_member(:data_source_type, Shapes::ShapeRef.new(shape: DirectQueryDataSourceType, required: true, location_name: "DataSourceType"))
     UpdateDirectQueryDataSourceRequest.add_member(:description, Shapes::ShapeRef.new(shape: DirectQueryDataSourceDescription, location_name: "Description"))
     UpdateDirectQueryDataSourceRequest.add_member(:open_search_arns, Shapes::ShapeRef.new(shape: DirectQueryOpenSearchARNList, required: true, location_name: "OpenSearchArns"))
+    UpdateDirectQueryDataSourceRequest.add_member(:data_source_access_policy, Shapes::ShapeRef.new(shape: PolicyDocument, location_name: "DataSourceAccessPolicy"))
     UpdateDirectQueryDataSourceRequest.struct_class = Types::UpdateDirectQueryDataSourceRequest
 
     UpdateDirectQueryDataSourceResponse.add_member(:data_source_arn, Shapes::ShapeRef.new(shape: String, location_name: "DataSourceArn"))
@@ -3324,6 +3328,7 @@ module Aws::OpenSearchService
         o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
         o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: DisabledOperationException)
+        o.errors << Shapes::ShapeRef.new(shape: LimitExceededException)
       end)
 
       api.add_operation(:update_domain_config, Seahorse::Model::Operation.new.tap do |o|

data/lib/aws-sdk-opensearchservice/types.rb

@@ -239,6 +239,12 @@ module Aws::OpenSearchService
     #   collections that are associated with the direct query data source.
     #   @return [Array<String>]
     #
+    # @!attribute [rw] data_source_access_policy
+    #   An optional IAM access policy document that defines the permissions
+    #   for accessing the data source. The policy document must be in valid
+    #   JSON format and follow IAM policy syntax.
+    #   @return [String]
+    #
     # @!attribute [rw] tag_list
     #   A list of tags attached to a domain.
     #   @return [Array<Types::Tag>]
@@ -250,6 +256,7 @@ module Aws::OpenSearchService
       :data_source_type,
       :description,
       :open_search_arns,
+      :data_source_access_policy,
       :tag_list)
       SENSITIVE = []
       include Aws::Structure
@@ -2113,11 +2120,17 @@ module Aws::OpenSearchService
     #   Detailed description of a data source.
     #   @return [String]
     #
+    # @!attribute [rw] iam_role_for_data_source_arn
+    #   The ARN of the IAM role to be used for cross account/region data
+    #   source association.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/opensearch-2021-01-01/DataSource AWS API Documentation
     #
     class DataSource < Struct.new(
       :data_source_arn,
-      :data_source_description)
+      :data_source_description,
+      :iam_role_for_data_source_arn)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -4435,6 +4448,13 @@ module Aws::OpenSearchService
     #   collections that are associated with the direct query data source.
     #   @return [Array<String>]
     #
+    # @!attribute [rw] data_source_access_policy
+    #   The IAM access policy document that defines the permissions for
+    #   accessing the direct query data source. Returns the current policy
+    #   configuration in JSON format, or null if no custom policy is
+    #   configured.
+    #   @return [String]
+    #
     # @!attribute [rw] data_source_arn
     #   The unique, system-generated identifier that represents the data
     #   source.
@@ -4447,6 +4467,7 @@ module Aws::OpenSearchService
       :data_source_type,
       :description,
       :open_search_arns,
+      :data_source_access_policy,
       :data_source_arn)
       SENSITIVE = []
       include Aws::Structure
@@ -7699,13 +7720,22 @@ module Aws::OpenSearchService
     #   collections that are associated with the direct query data source.
     #   @return [Array<String>]
     #
+    # @!attribute [rw] data_source_access_policy
+    #   An optional IAM access policy document that defines the updated
+    #   permissions for accessing the direct query data source. The policy
+    #   document must be in valid JSON format and follow IAM policy syntax.
+    #   If not specified, the existing access policy if present remains
+    #   unchanged.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/opensearch-2021-01-01/UpdateDirectQueryDataSourceRequest AWS API Documentation
     #
     class UpdateDirectQueryDataSourceRequest < Struct.new(
       :data_source_name,
       :data_source_type,
       :description,
-      :open_search_arns)
+      :open_search_arns,
+      :data_source_access_policy)
       SENSITIVE = []
       include Aws::Structure
     end

data/lib/aws-sdk-opensearchservice.rb

@@ -54,7 +54,7 @@ module Aws::OpenSearchService
   autoload :EndpointProvider, 'aws-sdk-opensearchservice/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-opensearchservice/endpoints'
 
-  GEM_VERSION = '1.88.0'
+  GEM_VERSION = '1.89.0'
 
 end
 

data/sig/client.rbs

@@ -122,6 +122,7 @@ module Aws
                                           },
                                           ?description: ::String,
                                           open_search_arns: Array[::String],
+                                          ?data_source_access_policy: ::String,
                                           ?tag_list: Array[
                                             {
                                               key: ::String,
@@ -237,7 +238,8 @@ module Aws
                                 ?data_sources: Array[
                                   {
                                     data_source_arn: ::String?,
-                                    data_source_description: ::String?
+                                    data_source_description: ::String?,
+                                    iam_role_for_data_source_arn: ::String?
                                   },
                                 ],
                                 ?iam_identity_center_options: {
@@ -892,6 +894,7 @@ module Aws
         def data_source_type: () -> Types::DirectQueryDataSourceType
         def description: () -> ::String
         def open_search_arns: () -> ::Array[::String]
+        def data_source_access_policy: () -> ::String
         def data_source_arn: () -> ::String
       end
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/OpenSearchService/Client.html#get_direct_query_data_source-instance_method
@@ -1230,7 +1233,8 @@ module Aws
                                 ?data_sources: Array[
                                   {
                                     data_source_arn: ::String?,
-                                    data_source_description: ::String?
+                                    data_source_description: ::String?,
+                                    iam_role_for_data_source_arn: ::String?
                                   },
                                 ],
                                 ?app_configs: Array[
@@ -1276,7 +1280,8 @@ module Aws
                                                }?
                                              },
                                              ?description: ::String,
-                                             open_search_arns: Array[::String]
+                                             open_search_arns: Array[::String],
+                                             ?data_source_access_policy: ::String
                                            ) -> _UpdateDirectQueryDataSourceResponseSuccess
                                          | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _UpdateDirectQueryDataSourceResponseSuccess
 

data/sig/types.rbs

@@ -72,6 +72,7 @@ module Aws::OpenSearchService
       attr_accessor data_source_type: Types::DirectQueryDataSourceType
       attr_accessor description: ::String
       attr_accessor open_search_arns: ::Array[::String]
+      attr_accessor data_source_access_policy: ::String
       attr_accessor tag_list: ::Array[Types::Tag]
       SENSITIVE: []
     end
@@ -505,6 +506,7 @@ module Aws::OpenSearchService
     class DataSource
       attr_accessor data_source_arn: ::String
       attr_accessor data_source_description: ::String
+      attr_accessor iam_role_for_data_source_arn: ::String
       SENSITIVE: []
     end
 
@@ -1126,6 +1128,7 @@ module Aws::OpenSearchService
       attr_accessor data_source_type: Types::DirectQueryDataSourceType
       attr_accessor description: ::String
       attr_accessor open_search_arns: ::Array[::String]
+      attr_accessor data_source_access_policy: ::String
       attr_accessor data_source_arn: ::String
       SENSITIVE: []
     end
@@ -1967,6 +1970,7 @@ module Aws::OpenSearchService
       attr_accessor data_source_type: Types::DirectQueryDataSourceType
       attr_accessor description: ::String
       attr_accessor open_search_arns: ::Array[::String]
+      attr_accessor data_source_access_policy: ::String
       SENSITIVE: []
     end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-opensearchservice
 version: !ruby/object:Gem::Version
-  version: 1.88.0
+  version: 1.89.0
 platform: ruby
 authors:
 - Amazon Web Services