aws-sdk-ram 1.83.0 → 1.84.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 9afb645e2330b8011fd36edf2041ac2b6106dfc20390d8028df625e9f47cad01
-  data.tar.gz: d60e4a18df5dbaae26deb120a0f4a0c976d5842b6566b7444a912677957e724e
+  metadata.gz: 8bf4332c2dd4526fdeff84516c68405f442e06eefe43524491408049ffd251ec
+  data.tar.gz: ac7c3e64baedfedd6db20c138c61f62edf028dd1c9b1687df5960feec4ec60d5
 SHA512:
-  metadata.gz: ae09f149abecd53672a929aa7cc56bbc7040254be7d0396cffefca8c55844da347d7213d6876157b10abbd6071b2cd11a10fd224c3f11844bc3bb7da0cf1597b
-  data.tar.gz: ecc8feda234455c931a68525781fa24a446d6d5ccdf9f58624b979bc4400e46ff9f6cdaf2f275dd45e93131569e63446d5cf2a140af5c232586c80ae0a67ddc6
+  metadata.gz: 27518c5d62437bf4c5ab45089baab1cdc473e707b4e736c09d9596b344f28630bb16457937b4f208322a6184b944dfa88395d07b7468667a0036d71fd3ed22ff
+  data.tar.gz: a732d24cf186adc83a6013044196b197e45bd60e97dcdb5af907f3aaba6641775e2c4389858141ca9913614c66091b1fab9447d7e50337d53f93469e5e5a82e1

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.84.0 (2026-02-05)
+------------------
+
+* Feature - Added ListSourceAssociations API. Allows RAM resource share owners to list source associations that determine which sources can access resources through service principal associations. Supports filtering by resource share ARN, source ID, source type, or status, with pagination.
+
 1.83.0 (2026-01-16)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.83.0
+1.84.0

data/lib/aws-sdk-ram/client.rb

@@ -533,8 +533,8 @@ module Aws::RAM
     #   resp.resource_share_invitation.resource_share_associations[0].resource_share_arn #=> String
     #   resp.resource_share_invitation.resource_share_associations[0].resource_share_name #=> String
     #   resp.resource_share_invitation.resource_share_associations[0].associated_entity #=> String
-    #   resp.resource_share_invitation.resource_share_associations[0].association_type #=> String, one of "PRINCIPAL", "RESOURCE"
-    #   resp.resource_share_invitation.resource_share_associations[0].status #=> String, one of "ASSOCIATING", "ASSOCIATED", "FAILED", "DISASSOCIATING", "DISASSOCIATED"
+    #   resp.resource_share_invitation.resource_share_associations[0].association_type #=> String, one of "PRINCIPAL", "RESOURCE", "SOURCE"
+    #   resp.resource_share_invitation.resource_share_associations[0].status #=> String, one of "ASSOCIATING", "ASSOCIATED", "FAILED", "DISASSOCIATING", "DISASSOCIATED", "SUSPENDED", "SUSPENDING", "RESTORING"
     #   resp.resource_share_invitation.resource_share_associations[0].status_message #=> String
     #   resp.resource_share_invitation.resource_share_associations[0].creation_time #=> Time
     #   resp.resource_share_invitation.resource_share_associations[0].last_updated_time #=> Time
@@ -551,11 +551,11 @@ module Aws::RAM
       req.send_request(options)
     end
 
-    # Adds the specified list of principals and list of resources to a
-    # resource share. Principals that already have access to this resource
-    # share immediately receive access to the added resources. Newly added
-    # principals immediately receive access to the resources shared in this
-    # resource share.
+    # Adds the specified list of principals, resources, and source
+    # constraints to a resource share. Principals that already have access
+    # to this resource share immediately receive access to the added
+    # resources. Newly added principals immediately receive access to the
+    # resources shared in this resource share.
     #
     # @option params [required, String] :resource_share_arn
     #   Specifies the [Amazon Resource Name (ARN)][1] of the resource share
@@ -598,6 +598,8 @@ module Aws::RAM
     #
     #   * An ARN of an IAM user, for example: `iam::123456789012user/username`
     #
+    #   * A service principal name, for example: `service-id.amazonaws.com`
+    #
     #   <note markdown="1"> Not all resource types can be shared with IAM roles and users. For
     #   more information, see [Sharing with IAM roles and users][2] in the
     #   *Resource Access Manager User Guide*.
@@ -629,8 +631,13 @@ module Aws::RAM
     #   [1]: https://wikipedia.org/wiki/Universally_unique_identifier
     #
     # @option params [Array<String>] :sources
-    #   Specifies from which source accounts the service principal has access
-    #   to the resources in this resource share.
+    #   Specifies source constraints (accounts, ARNs, organization IDs, or
+    #   organization paths) that limit when service principals can access
+    #   resources in this resource share. When a service principal attempts to
+    #   access a shared resource, validation is performed to ensure the
+    #   request originates from one of the specified sources. This helps
+    #   prevent confused deputy attacks by applying constraints on where
+    #   service principals can access resources from.
     #
     # @return [Types::AssociateResourceShareResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
@@ -653,8 +660,8 @@ module Aws::RAM
     #   resp.resource_share_associations[0].resource_share_arn #=> String
     #   resp.resource_share_associations[0].resource_share_name #=> String
     #   resp.resource_share_associations[0].associated_entity #=> String
-    #   resp.resource_share_associations[0].association_type #=> String, one of "PRINCIPAL", "RESOURCE"
-    #   resp.resource_share_associations[0].status #=> String, one of "ASSOCIATING", "ASSOCIATED", "FAILED", "DISASSOCIATING", "DISASSOCIATED"
+    #   resp.resource_share_associations[0].association_type #=> String, one of "PRINCIPAL", "RESOURCE", "SOURCE"
+    #   resp.resource_share_associations[0].status #=> String, one of "ASSOCIATING", "ASSOCIATED", "FAILED", "DISASSOCIATING", "DISASSOCIATED", "SUSPENDED", "SUSPENDING", "RESTORING"
     #   resp.resource_share_associations[0].status_message #=> String
     #   resp.resource_share_associations[0].creation_time #=> Time
     #   resp.resource_share_associations[0].last_updated_time #=> Time
@@ -784,10 +791,12 @@ module Aws::RAM
     #   Specifies the name of the resource type that this customer managed
     #   permission applies to.
     #
-    #   The format is ` <service-code>:<resource-type> ` and is not case
+    #   The format is ` <service-code>:<resource-type> ` and is case
     #   sensitive. For example, to specify an Amazon EC2 Subnet, you can use
-    #   the string `ec2:subnet`. To see the list of valid values for this
-    #   parameter, query the ListResourceTypes operation.
+    #   the string `ec2:Subnet`. To see the list of valid values for this
+    #   parameter, query the ListResourceTypes operation. This value must
+    #   match the display name of the resource (available in
+    #   `ListResourceTypes`).
     #
     # @option params [required, String] :policy_template
     #   A string in JSON format string that contains the following elements of
@@ -1002,8 +1011,9 @@ module Aws::RAM
 
     # Creates a resource share. You can provide a list of the [Amazon
     # Resource Names (ARNs)][1] for the resources that you want to share, a
-    # list of principals you want to share the resources with, and the
-    # permissions to grant those principals.
+    # list of principals you want to share the resources with, the
+    # permissions to grant those principals, and optionally source
+    # constraints to enhance security for service principal sharing.
     #
     # <note markdown="1"> Sharing a resource makes it available for use by principals outside of
     # the Amazon Web Services account that created the resource. Sharing
@@ -1043,6 +1053,8 @@ module Aws::RAM
     #
     #   * An ARN of an IAM user, for example: `iam::123456789012user/username`
     #
+    #   * A service principal name, for example: `service-id.amazonaws.com`
+    #
     #   <note markdown="1"> Not all resource types can be shared with IAM roles and users. For
     #   more information, see [Sharing with IAM roles and users][2] in the
     #   *Resource Access Manager User Guide*.
@@ -1098,8 +1110,13 @@ module Aws::RAM
     #   [1]: https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html
     #
     # @option params [Array<String>] :sources
-    #   Specifies from which source accounts the service principal has access
-    #   to the resources in this resource share.
+    #   Specifies source constraints (accounts, ARNs, organization IDs, or
+    #   organization paths) that limit when service principals can access
+    #   resources in this resource share. When a service principal attempts to
+    #   access a shared resource, validation is performed to ensure the
+    #   request originates from one of the specified sources. This helps
+    #   prevent confused deputy attacks by applying constraints on where
+    #   service principals can access resources from.
     #
     # @return [Types::CreateResourceShareResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
@@ -1349,8 +1366,8 @@ module Aws::RAM
       req.send_request(options)
     end
 
-    # Removes the specified principals or resources from participating in
-    # the specified resource share.
+    # Removes the specified principals, resources, or source constraints
+    # from participating in the specified resource share.
     #
     # @option params [required, String] :resource_share_arn
     #   Specifies [Amazon Resource Name (ARN)][1] of the resource share that
@@ -1390,6 +1407,8 @@ module Aws::RAM
     #
     #   * An ARN of an IAM user, for example: `iam::123456789012user/username`
     #
+    #   * A service principal name, for example: `service-id.amazonaws.com`
+    #
     #   <note markdown="1"> Not all resource types can be shared with IAM roles and users. For
     #   more information, see [Sharing with IAM roles and users][2] in the
     #   *Resource Access Manager User Guide*.
@@ -1421,8 +1440,11 @@ module Aws::RAM
     #   [1]: https://wikipedia.org/wiki/Universally_unique_identifier
     #
     # @option params [Array<String>] :sources
-    #   Specifies from which source accounts the service principal no longer
-    #   has access to the resources in this resource share.
+    #   Specifies source constraints (accounts, ARNs, organization IDs, or
+    #   organization paths) to remove from the resource share. This enables
+    #   granular management of source constraints while maintaining service
+    #   principal associations. At least one source must remain when service
+    #   principals are present.
     #
     # @return [Types::DisassociateResourceShareResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
@@ -1445,8 +1467,8 @@ module Aws::RAM
     #   resp.resource_share_associations[0].resource_share_arn #=> String
     #   resp.resource_share_associations[0].resource_share_name #=> String
     #   resp.resource_share_associations[0].associated_entity #=> String
-    #   resp.resource_share_associations[0].association_type #=> String, one of "PRINCIPAL", "RESOURCE"
-    #   resp.resource_share_associations[0].status #=> String, one of "ASSOCIATING", "ASSOCIATED", "FAILED", "DISASSOCIATING", "DISASSOCIATED"
+    #   resp.resource_share_associations[0].association_type #=> String, one of "PRINCIPAL", "RESOURCE", "SOURCE"
+    #   resp.resource_share_associations[0].status #=> String, one of "ASSOCIATING", "ASSOCIATED", "FAILED", "DISASSOCIATING", "DISASSOCIATED", "SUSPENDED", "SUSPENDING", "RESTORING"
     #   resp.resource_share_associations[0].status_message #=> String
     #   resp.resource_share_associations[0].creation_time #=> Time
     #   resp.resource_share_associations[0].last_updated_time #=> Time
@@ -1624,6 +1646,14 @@ module Aws::RAM
     # Retrieves the resource policies for the specified resources that you
     # own and have shared.
     #
+    # <note markdown="1"> Always check the `NextToken` response parameter for a `null` value
+    # when calling a paginated operation. These operations can occasionally
+    # return an empty set of results even when there are more results
+    # available. The `NextToken` response parameter value is `null` *only*
+    # when there are no more results to display.
+    #
+    #  </note>
+    #
     # @option params [required, Array<String>] :resource_arns
     #   Specifies the [Amazon Resource Names (ARNs)][1] of the resources whose
     #   policies you want to retrieve.
@@ -1688,6 +1718,14 @@ module Aws::RAM
     # Retrieves the lists of resources and principals that associated for
     # resource shares that you own.
     #
+    # <note markdown="1"> Always check the `NextToken` response parameter for a `null` value
+    # when calling a paginated operation. These operations can occasionally
+    # return an empty set of results even when there are more results
+    # available. The `NextToken` response parameter value is `null` *only*
+    # when there are no more results to display.
+    #
+    #  </note>
+    #
     # @option params [required, String] :association_type
     #   Specifies whether you want to retrieve the associations that involve a
     #   specified resource or principal.
@@ -1762,11 +1800,11 @@ module Aws::RAM
     # @example Request syntax with placeholder values
     #
     #   resp = client.get_resource_share_associations({
-    #     association_type: "PRINCIPAL", # required, accepts PRINCIPAL, RESOURCE
+    #     association_type: "PRINCIPAL", # required, accepts PRINCIPAL, RESOURCE, SOURCE
     #     resource_share_arns: ["String"],
     #     resource_arn: "String",
     #     principal: "String",
-    #     association_status: "ASSOCIATING", # accepts ASSOCIATING, ASSOCIATED, FAILED, DISASSOCIATING, DISASSOCIATED
+    #     association_status: "ASSOCIATING", # accepts ASSOCIATING, ASSOCIATED, FAILED, DISASSOCIATING, DISASSOCIATED, SUSPENDED, SUSPENDING, RESTORING
     #     next_token: "String",
     #     max_results: 1,
     #   })
@@ -1777,8 +1815,8 @@ module Aws::RAM
     #   resp.resource_share_associations[0].resource_share_arn #=> String
     #   resp.resource_share_associations[0].resource_share_name #=> String
     #   resp.resource_share_associations[0].associated_entity #=> String
-    #   resp.resource_share_associations[0].association_type #=> String, one of "PRINCIPAL", "RESOURCE"
-    #   resp.resource_share_associations[0].status #=> String, one of "ASSOCIATING", "ASSOCIATED", "FAILED", "DISASSOCIATING", "DISASSOCIATED"
+    #   resp.resource_share_associations[0].association_type #=> String, one of "PRINCIPAL", "RESOURCE", "SOURCE"
+    #   resp.resource_share_associations[0].status #=> String, one of "ASSOCIATING", "ASSOCIATED", "FAILED", "DISASSOCIATING", "DISASSOCIATED", "SUSPENDED", "SUSPENDING", "RESTORING"
     #   resp.resource_share_associations[0].status_message #=> String
     #   resp.resource_share_associations[0].creation_time #=> Time
     #   resp.resource_share_associations[0].last_updated_time #=> Time
@@ -1797,6 +1835,14 @@ module Aws::RAM
     # Retrieves details about invitations that you have received for
     # resource shares.
     #
+    # <note markdown="1"> Always check the `NextToken` response parameter for a `null` value
+    # when calling a paginated operation. These operations can occasionally
+    # return an empty set of results even when there are more results
+    # available. The `NextToken` response parameter value is `null` *only*
+    # when there are no more results to display.
+    #
+    #  </note>
+    #
     # @option params [Array<String>] :resource_share_invitation_arns
     #   Specifies the [Amazon Resource Names (ARNs)][1] of the resource share
     #   invitations you want information about.
@@ -1863,8 +1909,8 @@ module Aws::RAM
     #   resp.resource_share_invitations[0].resource_share_associations[0].resource_share_arn #=> String
     #   resp.resource_share_invitations[0].resource_share_associations[0].resource_share_name #=> String
     #   resp.resource_share_invitations[0].resource_share_associations[0].associated_entity #=> String
-    #   resp.resource_share_invitations[0].resource_share_associations[0].association_type #=> String, one of "PRINCIPAL", "RESOURCE"
-    #   resp.resource_share_invitations[0].resource_share_associations[0].status #=> String, one of "ASSOCIATING", "ASSOCIATED", "FAILED", "DISASSOCIATING", "DISASSOCIATED"
+    #   resp.resource_share_invitations[0].resource_share_associations[0].association_type #=> String, one of "PRINCIPAL", "RESOURCE", "SOURCE"
+    #   resp.resource_share_invitations[0].resource_share_associations[0].status #=> String, one of "ASSOCIATING", "ASSOCIATED", "FAILED", "DISASSOCIATING", "DISASSOCIATED", "SUSPENDED", "SUSPENDING", "RESTORING"
     #   resp.resource_share_invitations[0].resource_share_associations[0].status_message #=> String
     #   resp.resource_share_invitations[0].resource_share_associations[0].creation_time #=> Time
     #   resp.resource_share_invitations[0].resource_share_associations[0].last_updated_time #=> Time
@@ -1884,6 +1930,14 @@ module Aws::RAM
     # Retrieves details about the resource shares that you own or that are
     # shared with you.
     #
+    # <note markdown="1"> Always check the `NextToken` response parameter for a `null` value
+    # when calling a paginated operation. These operations can occasionally
+    # return an empty set of results even when there are more results
+    # available. The `NextToken` response parameter value is `null` *only*
+    # when there are no more results to display.
+    #
+    #  </note>
+    #
     # @option params [Array<String>] :resource_share_arns
     #   Specifies the [Amazon Resource Names (ARNs)][1] of individual resource
     #   shares that you want information about.
@@ -2003,6 +2057,14 @@ module Aws::RAM
     # haven't accepted or rejected the invitation and the invitation
     # hasn't expired.
     #
+    # <note markdown="1"> Always check the `NextToken` response parameter for a `null` value
+    # when calling a paginated operation. These operations can occasionally
+    # return an empty set of results even when there are more results
+    # available. The `NextToken` response parameter value is `null` *only*
+    # when there are no more results to display.
+    #
+    #  </note>
+    #
     # @option params [required, String] :resource_share_invitation_arn
     #   Specifies the [Amazon Resource Name (ARN)][1] of the invitation. You
     #   can use GetResourceShareInvitations to find the ARN of the invitation.
@@ -2089,6 +2151,14 @@ module Aws::RAM
     # see which resource shares use which versions of the specified managed
     # permission.
     #
+    # <note markdown="1"> Always check the `NextToken` response parameter for a `null` value
+    # when calling a paginated operation. These operations can occasionally
+    # return an empty set of results even when there are more results
+    # available. The `NextToken` response parameter value is `null` *only*
+    # when there are no more results to display.
+    #
+    #  </note>
+    #
     # @option params [String] :permission_arn
     #   Specifies the [Amazon Resource Name (ARN)][1] of the managed
     #   permission.
@@ -2155,7 +2225,7 @@ module Aws::RAM
     #   resp = client.list_permission_associations({
     #     permission_arn: "String",
     #     permission_version: 1,
-    #     association_status: "ASSOCIATING", # accepts ASSOCIATING, ASSOCIATED, FAILED, DISASSOCIATING, DISASSOCIATED
+    #     association_status: "ASSOCIATING", # accepts ASSOCIATING, ASSOCIATED, FAILED, DISASSOCIATING, DISASSOCIATED, SUSPENDED, SUSPENDING, RESTORING
     #     resource_type: "String",
     #     feature_set: "CREATED_FROM_POLICY", # accepts CREATED_FROM_POLICY, PROMOTING_TO_STANDARD, STANDARD
     #     default_version: false,
@@ -2187,6 +2257,14 @@ module Aws::RAM
 
     # Lists the available versions of the specified RAM permission.
     #
+    # <note markdown="1"> Always check the `NextToken` response parameter for a `null` value
+    # when calling a paginated operation. These operations can occasionally
+    # return an empty set of results even when there are more results
+    # available. The `NextToken` response parameter value is `null` *only*
+    # when there are no more results to display.
+    #
+    #  </note>
+    #
     # @option params [required, String] :permission_arn
     #   Specifies the [Amazon Resource Name (ARN)][1] of the RAM permission
     #   whose versions you want to list. You can use the `permissionVersion`
@@ -2262,6 +2340,14 @@ module Aws::RAM
     # Retrieves a list of available RAM permissions that you can use for the
     # supported resource types.
     #
+    # <note markdown="1"> Always check the `NextToken` response parameter for a `null` value
+    # when calling a paginated operation. These operations can occasionally
+    # return an empty set of results even when there are more results
+    # available. The `NextToken` response parameter value is `null` *only*
+    # when there are no more results to display.
+    #
+    #  </note>
+    #
     # @option params [String] :resource_type
     #   Specifies that you want to list only those permissions that apply to
     #   the specified resource type. This parameter is not case sensitive.
@@ -2348,6 +2434,14 @@ module Aws::RAM
     # Lists the principals that you are sharing resources with or that are
     # sharing resources with you.
     #
+    # <note markdown="1"> Always check the `NextToken` response parameter for a `null` value
+    # when calling a paginated operation. These operations can occasionally
+    # return an empty set of results even when there are more results
+    # available. The `NextToken` response parameter value is `null` *only*
+    # when there are no more results to display.
+    #
+    #  </note>
+    #
     # @option params [required, String] :resource_owner
     #   Specifies that you want to list information for only resource shares
     #   that match the following:
@@ -2386,6 +2480,8 @@ module Aws::RAM
     #
     #   * An ARN of an IAM user, for example: `iam::123456789012user/username`
     #
+    #   * A service principal name, for example: `service-id.amazonaws.com`
+    #
     #   <note markdown="1"> Not all resource types can be shared with IAM roles and users. For
     #   more information, see [Sharing with IAM roles and users][2] in the
     #   *Resource Access Manager User Guide*.
@@ -2473,6 +2569,14 @@ module Aws::RAM
     # Retrieves the current status of the asynchronous tasks performed by
     # RAM when you perform the ReplacePermissionAssociationsWork operation.
     #
+    # <note markdown="1"> Always check the `NextToken` response parameter for a `null` value
+    # when calling a paginated operation. These operations can occasionally
+    # return an empty set of results even when there are more results
+    # available. The `NextToken` response parameter value is `null` *only*
+    # when there are no more results to display.
+    #
+    #  </note>
+    #
     # @option params [Array<String>] :work_ids
     #   A list of IDs. These values come from the `id`field of the
     #   `replacePermissionAssociationsWork`structure returned by the
@@ -2542,6 +2646,14 @@ module Aws::RAM
 
     # Lists the RAM permissions that are associated with a resource share.
     #
+    # <note markdown="1"> Always check the `NextToken` response parameter for a `null` value
+    # when calling a paginated operation. These operations can occasionally
+    # return an empty set of results even when there are more results
+    # available. The `NextToken` response parameter value is `null` *only*
+    # when there are no more results to display.
+    #
+    #  </note>
+    #
     # @option params [required, String] :resource_share_arn
     #   Specifies the [Amazon Resource Name (ARN)][1] of the resource share
     #   for which you want to retrieve the associated permissions.
@@ -2683,6 +2795,14 @@ module Aws::RAM
     # Lists the resources that you added to a resource share or the
     # resources that are shared with you.
     #
+    # <note markdown="1"> Always check the `NextToken` response parameter for a `null` value
+    # when calling a paginated operation. These operations can occasionally
+    # return an empty set of results even when there are more results
+    # available. The `NextToken` response parameter value is `null` *only*
+    # when there are no more results to display.
+    #
+    #  </note>
+    #
     # @option params [required, String] :resource_owner
     #   Specifies that you want to list only the resource shares that match
     #   the following:
@@ -2796,6 +2916,79 @@ module Aws::RAM
       req.send_request(options)
     end
 
+    # Lists source associations for resource shares. Source associations
+    # control which sources can be used with service principals in resource
+    # shares. This operation provides visibility into source associations
+    # for resource share owners.
+    #
+    # You can filter the results by resource share Amazon Resource Name
+    # (ARN), source ID, source type, or association status. We recommend
+    # using pagination to ensure that the operation returns quickly and
+    # successfully.
+    #
+    # @option params [Array<String>] :resource_share_arns
+    #   The Amazon Resource Names (ARNs) of the resource shares for which you
+    #   want to retrieve source associations.
+    #
+    # @option params [String] :source_id
+    #   The identifier of the source for which you want to retrieve
+    #   associations. This can be an account ID, Amazon Resource Name (ARN),
+    #   organization ID, or organization path.
+    #
+    # @option params [String] :source_type
+    #   The type of source for which you want to retrieve associations.
+    #
+    # @option params [String] :association_status
+    #   The status of the source associations that you want to retrieve.
+    #
+    # @option params [String] :next_token
+    #   The pagination token that indicates the next set of results to
+    #   retrieve.
+    #
+    # @option params [Integer] :max_results
+    #   The maximum number of results to return in a single call. To retrieve
+    #   the remaining results, make another call with the returned `nextToken`
+    #   value.
+    #
+    # @return [Types::ListSourceAssociationsResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::ListSourceAssociationsResponse#source_associations #source_associations} => Array&lt;Types::AssociatedSource&gt;
+    #   * {Types::ListSourceAssociationsResponse#next_token #next_token} => String
+    #
+    # The returned {Seahorse::Client::Response response} is a pageable response and is Enumerable. For details on usage see {Aws::PageableResponse PageableResponse}.
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.list_source_associations({
+    #     resource_share_arns: ["String"],
+    #     source_id: "String",
+    #     source_type: "String",
+    #     association_status: "ASSOCIATING", # accepts ASSOCIATING, ASSOCIATED, FAILED, DISASSOCIATING, DISASSOCIATED, SUSPENDED, SUSPENDING, RESTORING
+    #     next_token: "String",
+    #     max_results: 1,
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.source_associations #=> Array
+    #   resp.source_associations[0].resource_share_arn #=> String
+    #   resp.source_associations[0].source_id #=> String
+    #   resp.source_associations[0].source_type #=> String
+    #   resp.source_associations[0].status #=> String
+    #   resp.source_associations[0].last_updated_time #=> Time
+    #   resp.source_associations[0].creation_time #=> Time
+    #   resp.source_associations[0].status_message #=> String
+    #   resp.next_token #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ram-2018-01-04/ListSourceAssociations AWS API Documentation
+    #
+    # @overload list_source_associations(params = {})
+    # @param [Hash] params ({})
+    def list_source_associations(params = {}, options = {})
+      req = build_request(:list_source_associations, params)
+      req.send_request(options)
+    end
+
     # When you attach a resource-based policy to a resource, RAM
     # automatically creates a resource share of
     # `featureSet`=`CREATED_FROM_POLICY` with a managed permission that has
@@ -3009,8 +3202,8 @@ module Aws::RAM
     #   resp.resource_share_invitation.resource_share_associations[0].resource_share_arn #=> String
     #   resp.resource_share_invitation.resource_share_associations[0].resource_share_name #=> String
     #   resp.resource_share_invitation.resource_share_associations[0].associated_entity #=> String
-    #   resp.resource_share_invitation.resource_share_associations[0].association_type #=> String, one of "PRINCIPAL", "RESOURCE"
-    #   resp.resource_share_invitation.resource_share_associations[0].status #=> String, one of "ASSOCIATING", "ASSOCIATED", "FAILED", "DISASSOCIATING", "DISASSOCIATED"
+    #   resp.resource_share_invitation.resource_share_associations[0].association_type #=> String, one of "PRINCIPAL", "RESOURCE", "SOURCE"
+    #   resp.resource_share_invitation.resource_share_associations[0].status #=> String, one of "ASSOCIATING", "ASSOCIATED", "FAILED", "DISASSOCIATING", "DISASSOCIATED", "SUSPENDED", "SUSPENDING", "RESTORING"
     #   resp.resource_share_invitation.resource_share_associations[0].status_message #=> String
     #   resp.resource_share_invitation.resource_share_associations[0].creation_time #=> Time
     #   resp.resource_share_invitation.resource_share_associations[0].last_updated_time #=> Time
@@ -3380,7 +3573,7 @@ module Aws::RAM
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-ram'
-      context[:gem_version] = '1.83.0'
+      context[:gem_version] = '1.84.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-ram/client_api.rb

@@ -22,6 +22,8 @@ module Aws::RAM
     AssociateResourceShareResponse = Shapes::StructureShape.new(name: 'AssociateResourceShareResponse')
     AssociatedPermission = Shapes::StructureShape.new(name: 'AssociatedPermission')
     AssociatedPermissionList = Shapes::ListShape.new(name: 'AssociatedPermissionList')
+    AssociatedSource = Shapes::StructureShape.new(name: 'AssociatedSource')
+    AssociatedSourceList = Shapes::ListShape.new(name: 'AssociatedSourceList')
     Boolean = Shapes::BooleanShape.new(name: 'Boolean')
     CreatePermissionRequest = Shapes::StructureShape.new(name: 'CreatePermissionRequest')
     CreatePermissionResponse = Shapes::StructureShape.new(name: 'CreatePermissionResponse')
@@ -79,6 +81,8 @@ module Aws::RAM
     ListResourceTypesResponse = Shapes::StructureShape.new(name: 'ListResourceTypesResponse')
     ListResourcesRequest = Shapes::StructureShape.new(name: 'ListResourcesRequest')
     ListResourcesResponse = Shapes::StructureShape.new(name: 'ListResourcesResponse')
+    ListSourceAssociationsRequest = Shapes::StructureShape.new(name: 'ListSourceAssociationsRequest')
+    ListSourceAssociationsResponse = Shapes::StructureShape.new(name: 'ListSourceAssociationsResponse')
     MalformedArnException = Shapes::StructureShape.new(name: 'MalformedArnException')
     MalformedPolicyTemplateException = Shapes::StructureShape.new(name: 'MalformedPolicyTemplateException')
     MaxResults = Shapes::IntegerShape.new(name: 'MaxResults')
@@ -209,6 +213,17 @@ module Aws::RAM
 
     AssociatedPermissionList.member = Shapes::ShapeRef.new(shape: AssociatedPermission)
 
+    AssociatedSource.add_member(:resource_share_arn, Shapes::ShapeRef.new(shape: String, location_name: "resourceShareArn"))
+    AssociatedSource.add_member(:source_id, Shapes::ShapeRef.new(shape: String, location_name: "sourceId"))
+    AssociatedSource.add_member(:source_type, Shapes::ShapeRef.new(shape: String, location_name: "sourceType"))
+    AssociatedSource.add_member(:status, Shapes::ShapeRef.new(shape: String, location_name: "status"))
+    AssociatedSource.add_member(:last_updated_time, Shapes::ShapeRef.new(shape: DateTime, location_name: "lastUpdatedTime"))
+    AssociatedSource.add_member(:creation_time, Shapes::ShapeRef.new(shape: DateTime, location_name: "creationTime"))
+    AssociatedSource.add_member(:status_message, Shapes::ShapeRef.new(shape: String, location_name: "statusMessage"))
+    AssociatedSource.struct_class = Types::AssociatedSource
+
+    AssociatedSourceList.member = Shapes::ShapeRef.new(shape: AssociatedSource)
+
     CreatePermissionRequest.add_member(:name, Shapes::ShapeRef.new(shape: PermissionName, required: true, location_name: "name"))
     CreatePermissionRequest.add_member(:resource_type, Shapes::ShapeRef.new(shape: String, required: true, location_name: "resourceType"))
     CreatePermissionRequest.add_member(:policy_template, Shapes::ShapeRef.new(shape: Policy, required: true, location_name: "policyTemplate"))
@@ -472,6 +487,18 @@ module Aws::RAM
     ListResourcesResponse.add_member(:next_token, Shapes::ShapeRef.new(shape: String, location_name: "nextToken"))
     ListResourcesResponse.struct_class = Types::ListResourcesResponse
 
+    ListSourceAssociationsRequest.add_member(:resource_share_arns, Shapes::ShapeRef.new(shape: ResourceShareArnList, location_name: "resourceShareArns"))
+    ListSourceAssociationsRequest.add_member(:source_id, Shapes::ShapeRef.new(shape: String, location_name: "sourceId"))
+    ListSourceAssociationsRequest.add_member(:source_type, Shapes::ShapeRef.new(shape: String, location_name: "sourceType"))
+    ListSourceAssociationsRequest.add_member(:association_status, Shapes::ShapeRef.new(shape: ResourceShareAssociationStatus, location_name: "associationStatus"))
+    ListSourceAssociationsRequest.add_member(:next_token, Shapes::ShapeRef.new(shape: String, location_name: "nextToken"))
+    ListSourceAssociationsRequest.add_member(:max_results, Shapes::ShapeRef.new(shape: MaxResults, location_name: "maxResults"))
+    ListSourceAssociationsRequest.struct_class = Types::ListSourceAssociationsRequest
+
+    ListSourceAssociationsResponse.add_member(:source_associations, Shapes::ShapeRef.new(shape: AssociatedSourceList, location_name: "sourceAssociations"))
+    ListSourceAssociationsResponse.add_member(:next_token, Shapes::ShapeRef.new(shape: String, location_name: "nextToken"))
+    ListSourceAssociationsResponse.struct_class = Types::ListSourceAssociationsResponse
+
     MalformedArnException.add_member(:message, Shapes::ShapeRef.new(shape: String, required: true, location_name: "message"))
     MalformedArnException.struct_class = Types::MalformedArnException
 
@@ -871,6 +898,7 @@ module Aws::RAM
         o.errors << Shapes::ShapeRef.new(shape: TagLimitExceededException)
         o.errors << Shapes::ShapeRef.new(shape: ServerInternalException)
         o.errors << Shapes::ShapeRef.new(shape: ServiceUnavailableException)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
       end)
 
       api.add_operation(:delete_permission, Seahorse::Model::Operation.new.tap do |o|
@@ -919,6 +947,7 @@ module Aws::RAM
         o.errors << Shapes::ShapeRef.new(shape: InvalidParameterException)
         o.errors << Shapes::ShapeRef.new(shape: ServerInternalException)
         o.errors << Shapes::ShapeRef.new(shape: ServiceUnavailableException)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
       end)
 
       api.add_operation(:disassociate_resource_share, Seahorse::Model::Operation.new.tap do |o|
@@ -937,6 +966,7 @@ module Aws::RAM
         o.errors << Shapes::ShapeRef.new(shape: ServerInternalException)
         o.errors << Shapes::ShapeRef.new(shape: ServiceUnavailableException)
         o.errors << Shapes::ShapeRef.new(shape: UnknownResourceException)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
       end)
 
       api.add_operation(:disassociate_resource_share_permission, Seahorse::Model::Operation.new.tap do |o|
@@ -1243,6 +1273,26 @@ module Aws::RAM
         )
       end)
 
+      api.add_operation(:list_source_associations, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "ListSourceAssociations"
+        o.http_method = "POST"
+        o.http_request_uri = "/listsourceassociations"
+        o.input = Shapes::ShapeRef.new(shape: ListSourceAssociationsRequest)
+        o.output = Shapes::ShapeRef.new(shape: ListSourceAssociationsResponse)
+        o.errors << Shapes::ShapeRef.new(shape: UnknownResourceException)
+        o.errors << Shapes::ShapeRef.new(shape: MalformedArnException)
+        o.errors << Shapes::ShapeRef.new(shape: InvalidNextTokenException)
+        o.errors << Shapes::ShapeRef.new(shape: InvalidParameterException)
+        o.errors << Shapes::ShapeRef.new(shape: ServerInternalException)
+        o.errors << Shapes::ShapeRef.new(shape: ServiceUnavailableException)
+        o[:pager] = Aws::Pager.new(
+          limit_key: "max_results",
+          tokens: {
+            "next_token" => "next_token"
+          }
+        )
+      end)
+
       api.add_operation(:promote_permission_created_from_policy, Seahorse::Model::Operation.new.tap do |o|
         o.name = "PromotePermissionCreatedFromPolicy"
         o.http_method = "POST"
@@ -1250,6 +1300,7 @@ module Aws::RAM
         o.input = Shapes::ShapeRef.new(shape: PromotePermissionCreatedFromPolicyRequest)
         o.output = Shapes::ShapeRef.new(shape: PromotePermissionCreatedFromPolicyResponse)
         o.errors << Shapes::ShapeRef.new(shape: MalformedArnException)
+        o.errors << Shapes::ShapeRef.new(shape: InvalidPolicyException)
         o.errors << Shapes::ShapeRef.new(shape: OperationNotPermittedException)
         o.errors << Shapes::ShapeRef.new(shape: InvalidParameterException)
         o.errors << Shapes::ShapeRef.new(shape: MissingRequiredParameterException)

data/lib/aws-sdk-ram/types.rb

@@ -221,6 +221,8 @@ module Aws::RAM
     #   * An ARN of an IAM user, for example:
     #     `iam::123456789012user/username`
     #
+    #   * A service principal name, for example: `service-id.amazonaws.com`
+    #
     #   <note markdown="1"> Not all resource types can be shared with IAM roles and users. For
     #   more information, see [Sharing with IAM roles and users][2] in the
     #   *Resource Access Manager User Guide*.
@@ -254,8 +256,13 @@ module Aws::RAM
     #   @return [String]
     #
     # @!attribute [rw] sources
-    #   Specifies from which source accounts the service principal has
-    #   access to the resources in this resource share.
+    #   Specifies source constraints (accounts, ARNs, organization IDs, or
+    #   organization paths) that limit when service principals can access
+    #   resources in this resource share. When a service principal attempts
+    #   to access a shared resource, validation is performed to ensure the
+    #   request originates from one of the specified sources. This helps
+    #   prevent confused deputy attacks by applying constraints on where
+    #   service principals can access resources from.
     #   @return [Array<String>]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ram-2018-01-04/AssociateResourceShareRequest AWS API Documentation
@@ -389,6 +396,54 @@ module Aws::RAM
       include Aws::Structure
     end
 
+    # Information about a source association in a resource share. Source
+    # associations control which sources can be used with service
+    # principals.
+    #
+    # @!attribute [rw] resource_share_arn
+    #   The Amazon Resource Name (ARN) of the resource share that contains
+    #   the source association.
+    #   @return [String]
+    #
+    # @!attribute [rw] source_id
+    #   The identifier of the source. This can be an account ID, Amazon
+    #   Resource Name (ARN), organization ID, or organization path.
+    #   @return [String]
+    #
+    # @!attribute [rw] source_type
+    #   The type of source.
+    #   @return [String]
+    #
+    # @!attribute [rw] status
+    #   The current status of the source association.
+    #   @return [String]
+    #
+    # @!attribute [rw] last_updated_time
+    #   The date and time when the source association was last updated.
+    #   @return [Time]
+    #
+    # @!attribute [rw] creation_time
+    #   The date and time when the source association was created.
+    #   @return [Time]
+    #
+    # @!attribute [rw] status_message
+    #   A message about the status of the source association.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ram-2018-01-04/AssociatedSource AWS API Documentation
+    #
+    class AssociatedSource < Struct.new(
+      :resource_share_arn,
+      :source_id,
+      :source_type,
+      :status,
+      :last_updated_time,
+      :creation_time,
+      :status_message)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] name
     #   Specifies the name of the customer managed permission. The name must
     #   be unique within the Amazon Web Services Region.
@@ -398,10 +453,12 @@ module Aws::RAM
     #   Specifies the name of the resource type that this customer managed
     #   permission applies to.
     #
-    #   The format is ` <service-code>:<resource-type> ` and is not case
+    #   The format is ` <service-code>:<resource-type> ` and is case
     #   sensitive. For example, to specify an Amazon EC2 Subnet, you can use
-    #   the string `ec2:subnet`. To see the list of valid values for this
-    #   parameter, query the ListResourceTypes operation.
+    #   the string `ec2:Subnet`. To see the list of valid values for this
+    #   parameter, query the ListResourceTypes operation. This value must
+    #   match the display name of the resource (available in
+    #   `ListResourceTypes`).
     #   @return [String]
     #
     # @!attribute [rw] policy_template
@@ -617,6 +674,8 @@ module Aws::RAM
     #   * An ARN of an IAM user, for example:
     #     `iam::123456789012user/username`
     #
+    #   * A service principal name, for example: `service-id.amazonaws.com`
+    #
     #   <note markdown="1"> Not all resource types can be shared with IAM roles and users. For
     #   more information, see [Sharing with IAM roles and users][2] in the
     #   *Resource Access Manager User Guide*.
@@ -678,8 +737,13 @@ module Aws::RAM
     #   @return [Array<String>]
     #
     # @!attribute [rw] sources
-    #   Specifies from which source accounts the service principal has
-    #   access to the resources in this resource share.
+    #   Specifies source constraints (accounts, ARNs, organization IDs, or
+    #   organization paths) that limit when service principals can access
+    #   resources in this resource share. When a service principal attempts
+    #   to access a shared resource, validation is performed to ensure the
+    #   request originates from one of the specified sources. This helps
+    #   prevent confused deputy attacks by applying constraints on where
+    #   service principals can access resources from.
     #   @return [Array<String>]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ram-2018-01-04/CreateResourceShareRequest AWS API Documentation
@@ -1040,6 +1104,8 @@ module Aws::RAM
     #   * An ARN of an IAM user, for example:
     #     `iam::123456789012user/username`
     #
+    #   * A service principal name, for example: `service-id.amazonaws.com`
+    #
     #   <note markdown="1"> Not all resource types can be shared with IAM roles and users. For
     #   more information, see [Sharing with IAM roles and users][2] in the
     #   *Resource Access Manager User Guide*.
@@ -1073,8 +1139,11 @@ module Aws::RAM
     #   @return [String]
     #
     # @!attribute [rw] sources
-    #   Specifies from which source accounts the service principal no longer
-    #   has access to the resources in this resource share.
+    #   Specifies source constraints (accounts, ARNs, organization IDs, or
+    #   organization paths) to remove from the resource share. This enables
+    #   granular management of source constraints while maintaining service
+    #   principal associations. At least one source must remain when service
+    #   principals are present.
     #   @return [Array<String>]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ram-2018-01-04/DisassociateResourceShareRequest AWS API Documentation
@@ -2004,6 +2073,8 @@ module Aws::RAM
     #   * An ARN of an IAM user, for example:
     #     `iam::123456789012user/username`
     #
+    #   * A service principal name, for example: `service-id.amazonaws.com`
+    #
     #   <note markdown="1"> Not all resource types can be shared with IAM roles and users. For
     #   more information, see [Sharing with IAM roles and users][2] in the
     #   *Resource Access Manager User Guide*.
@@ -2407,6 +2478,67 @@ module Aws::RAM
       include Aws::Structure
     end
 
+    # @!attribute [rw] resource_share_arns
+    #   The Amazon Resource Names (ARNs) of the resource shares for which
+    #   you want to retrieve source associations.
+    #   @return [Array<String>]
+    #
+    # @!attribute [rw] source_id
+    #   The identifier of the source for which you want to retrieve
+    #   associations. This can be an account ID, Amazon Resource Name (ARN),
+    #   organization ID, or organization path.
+    #   @return [String]
+    #
+    # @!attribute [rw] source_type
+    #   The type of source for which you want to retrieve associations.
+    #   @return [String]
+    #
+    # @!attribute [rw] association_status
+    #   The status of the source associations that you want to retrieve.
+    #   @return [String]
+    #
+    # @!attribute [rw] next_token
+    #   The pagination token that indicates the next set of results to
+    #   retrieve.
+    #   @return [String]
+    #
+    # @!attribute [rw] max_results
+    #   The maximum number of results to return in a single call. To
+    #   retrieve the remaining results, make another call with the returned
+    #   `nextToken` value.
+    #   @return [Integer]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ram-2018-01-04/ListSourceAssociationsRequest AWS API Documentation
+    #
+    class ListSourceAssociationsRequest < Struct.new(
+      :resource_share_arns,
+      :source_id,
+      :source_type,
+      :association_status,
+      :next_token,
+      :max_results)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] source_associations
+    #   Information about the source associations.
+    #   @return [Array<Types::AssociatedSource>]
+    #
+    # @!attribute [rw] next_token
+    #   The pagination token to use to retrieve the next page of results.
+    #   This value is `null` when there are no more results to return.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ram-2018-01-04/ListSourceAssociationsResponse AWS API Documentation
+    #
+    class ListSourceAssociationsResponse < Struct.new(
+      :source_associations,
+      :next_token)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # The operation failed because the specified [Amazon Resource Name
     # (ARN)][1] has a format that isn't valid.
     #
@@ -3283,8 +3415,9 @@ module Aws::RAM
     end
 
     # The operation failed because it would exceed the limit for resource
-    # shares for your account. To view the limits for your Amazon Web
-    # Services account, see the [RAM page in the Service Quotas console][1].
+    # shares for your account. You can associate up to 100 resources per
+    # call. To view the limits for your Amazon Web Services account, see the
+    # [RAM page in the Service Quotas console][1].
     #
     #
     #
@@ -3709,6 +3842,10 @@ module Aws::RAM
     # A tag key and optional list of possible values that you can use to
     # filter results for tagged resources.
     #
+    # <note markdown="1"> Multiple tag filters are evaluated as an OR condition.
+    #
+    #  </note>
+    #
     # @!attribute [rw] tag_key
     #   The tag key. This must have a valid string value and can't be
     #   empty.

data/lib/aws-sdk-ram.rb

@@ -54,7 +54,7 @@ module Aws::RAM
   autoload :EndpointProvider, 'aws-sdk-ram/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-ram/endpoints'
 
-  GEM_VERSION = '1.83.0'
+  GEM_VERSION = '1.84.0'
 
 end
 

data/sig/client.rbs

@@ -284,11 +284,11 @@ module Aws
       end
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/RAM/Client.html#get_resource_share_associations-instance_method
       def get_resource_share_associations: (
-                                             association_type: ("PRINCIPAL" | "RESOURCE"),
+                                             association_type: ("PRINCIPAL" | "RESOURCE" | "SOURCE"),
                                              ?resource_share_arns: Array[::String],
                                              ?resource_arn: ::String,
                                              ?principal: ::String,
-                                             ?association_status: ("ASSOCIATING" | "ASSOCIATED" | "FAILED" | "DISASSOCIATING" | "DISASSOCIATED"),
+                                             ?association_status: ("ASSOCIATING" | "ASSOCIATED" | "FAILED" | "DISASSOCIATING" | "DISASSOCIATED" | "SUSPENDED" | "SUSPENDING" | "RESTORING"),
                                              ?next_token: ::String,
                                              ?max_results: ::Integer
                                            ) -> _GetResourceShareAssociationsResponseSuccess
@@ -355,7 +355,7 @@ module Aws
       def list_permission_associations: (
                                           ?permission_arn: ::String,
                                           ?permission_version: ::Integer,
-                                          ?association_status: ("ASSOCIATING" | "ASSOCIATED" | "FAILED" | "DISASSOCIATING" | "DISASSOCIATED"),
+                                          ?association_status: ("ASSOCIATING" | "ASSOCIATED" | "FAILED" | "DISASSOCIATING" | "DISASSOCIATED" | "SUSPENDED" | "SUSPENDING" | "RESTORING"),
                                           ?resource_type: ::String,
                                           ?feature_set: ("CREATED_FROM_POLICY" | "PROMOTING_TO_STANDARD" | "STANDARD"),
                                           ?default_version: bool,
@@ -466,6 +466,22 @@ module Aws
                           ) -> _ListResourcesResponseSuccess
                         | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _ListResourcesResponseSuccess
 
+      interface _ListSourceAssociationsResponseSuccess
+        include ::Seahorse::Client::_ResponseSuccess[Types::ListSourceAssociationsResponse]
+        def source_associations: () -> ::Array[Types::AssociatedSource]
+        def next_token: () -> ::String
+      end
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/RAM/Client.html#list_source_associations-instance_method
+      def list_source_associations: (
+                                      ?resource_share_arns: Array[::String],
+                                      ?source_id: ::String,
+                                      ?source_type: ::String,
+                                      ?association_status: ("ASSOCIATING" | "ASSOCIATED" | "FAILED" | "DISASSOCIATING" | "DISASSOCIATED" | "SUSPENDED" | "SUSPENDING" | "RESTORING"),
+                                      ?next_token: ::String,
+                                      ?max_results: ::Integer
+                                    ) -> _ListSourceAssociationsResponseSuccess
+                                  | (?Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _ListSourceAssociationsResponseSuccess
+
       interface _PromotePermissionCreatedFromPolicyResponseSuccess
         include ::Seahorse::Client::_ResponseSuccess[Types::PromotePermissionCreatedFromPolicyResponse]
         def permission: () -> Types::ResourceSharePermissionSummary

data/sig/types.rbs

@@ -62,6 +62,17 @@ module Aws::RAM
       SENSITIVE: []
     end
 
+    class AssociatedSource
+      attr_accessor resource_share_arn: ::String
+      attr_accessor source_id: ::String
+      attr_accessor source_type: ::String
+      attr_accessor status: ::String
+      attr_accessor last_updated_time: ::Time
+      attr_accessor creation_time: ::Time
+      attr_accessor status_message: ::String
+      SENSITIVE: []
+    end
+
     class CreatePermissionRequest
       attr_accessor name: ::String
       attr_accessor resource_type: ::String
@@ -209,11 +220,11 @@ module Aws::RAM
     end
 
     class GetResourceShareAssociationsRequest
-      attr_accessor association_type: ("PRINCIPAL" | "RESOURCE")
+      attr_accessor association_type: ("PRINCIPAL" | "RESOURCE" | "SOURCE")
       attr_accessor resource_share_arns: ::Array[::String]
       attr_accessor resource_arn: ::String
       attr_accessor principal: ::String
-      attr_accessor association_status: ("ASSOCIATING" | "ASSOCIATED" | "FAILED" | "DISASSOCIATING" | "DISASSOCIATED")
+      attr_accessor association_status: ("ASSOCIATING" | "ASSOCIATED" | "FAILED" | "DISASSOCIATING" | "DISASSOCIATED" | "SUSPENDED" | "SUSPENDING" | "RESTORING")
       attr_accessor next_token: ::String
       attr_accessor max_results: ::Integer
       SENSITIVE: []
@@ -315,7 +326,7 @@ module Aws::RAM
     class ListPermissionAssociationsRequest
       attr_accessor permission_arn: ::String
       attr_accessor permission_version: ::Integer
-      attr_accessor association_status: ("ASSOCIATING" | "ASSOCIATED" | "FAILED" | "DISASSOCIATING" | "DISASSOCIATED")
+      attr_accessor association_status: ("ASSOCIATING" | "ASSOCIATED" | "FAILED" | "DISASSOCIATING" | "DISASSOCIATED" | "SUSPENDED" | "SUSPENDING" | "RESTORING")
       attr_accessor resource_type: ::String
       attr_accessor feature_set: ("CREATED_FROM_POLICY" | "PROMOTING_TO_STANDARD" | "STANDARD")
       attr_accessor default_version: bool
@@ -432,6 +443,22 @@ module Aws::RAM
       SENSITIVE: []
     end
 
+    class ListSourceAssociationsRequest
+      attr_accessor resource_share_arns: ::Array[::String]
+      attr_accessor source_id: ::String
+      attr_accessor source_type: ::String
+      attr_accessor association_status: ("ASSOCIATING" | "ASSOCIATED" | "FAILED" | "DISASSOCIATING" | "DISASSOCIATED" | "SUSPENDED" | "SUSPENDING" | "RESTORING")
+      attr_accessor next_token: ::String
+      attr_accessor max_results: ::Integer
+      SENSITIVE: []
+    end
+
+    class ListSourceAssociationsResponse
+      attr_accessor source_associations: ::Array[Types::AssociatedSource]
+      attr_accessor next_token: ::String
+      SENSITIVE: []
+    end
+
     class MalformedArnException
       attr_accessor message: ::String
       SENSITIVE: []
@@ -574,8 +601,8 @@ module Aws::RAM
       attr_accessor resource_share_arn: ::String
       attr_accessor resource_share_name: ::String
       attr_accessor associated_entity: ::String
-      attr_accessor association_type: ("PRINCIPAL" | "RESOURCE")
-      attr_accessor status: ("ASSOCIATING" | "ASSOCIATED" | "FAILED" | "DISASSOCIATING" | "DISASSOCIATED")
+      attr_accessor association_type: ("PRINCIPAL" | "RESOURCE" | "SOURCE")
+      attr_accessor status: ("ASSOCIATING" | "ASSOCIATED" | "FAILED" | "DISASSOCIATING" | "DISASSOCIATED" | "SUSPENDED" | "SUSPENDING" | "RESTORING")
       attr_accessor status_message: ::String
       attr_accessor creation_time: ::Time
       attr_accessor last_updated_time: ::Time

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-ram
 version: !ruby/object:Gem::Version
-  version: 1.83.0
+  version: 1.84.0
 platform: ruby
 authors:
 - Amazon Web Services