aws-sdk-rds 1.292.0 → 1.293.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 42b93d780fb78f85eb1de366656e636b15a2cc5c0425ef2db5c18449615ecb8f
-  data.tar.gz: 5a0622f998010132c66e07a76cc6d2611d8219af534305f131ad3b173cc169d7
+  metadata.gz: c5eeadde180a13afff319850a3219b5563fc2f60779821cc18c5865732052fea
+  data.tar.gz: 303aefe70aa05469bd4cd66b3aad55d6c30a8e640b77535af0dfa66ffa4fb90d
 SHA512:
-  metadata.gz: 938b2be89e640b3b87e6bc8435fb90026c7b203f890a17d922c21451e2695e3634291397fdefb3e008f329d25bedffbb6318f19b06afe552c47231f9e435e6ab
-  data.tar.gz: 98bac05c5e70fa46467c0bb62f2fc1b10b25537046c60303db9a1533f162be882055cf43db323f6406a0e3a779c89e2821f9b47acce10899447d954e327979c5
+  metadata.gz: 839ddaf977cd0526834dd7ad1ec772d39a97d70cdabe01681023326199f4d089b5148c62e839715f3380c8334e1e759c5e36f93fdc51d8f78390b7a8b0aa41f3
+  data.tar.gz: edebff7aa200ef4d5c0e8659b95145fac69e40b3510e9e75446deeff8a890d9f809077f7d28a15a3d41f286a90e95081189e3f41ff8e7e685d873f50ef6473b9

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.293.0 (2025-09-11)
+------------------
+
+* Feature - Adds support for end-to-end IAM authentication in RDS Proxy for MySQL, MariaDB, and PostgreSQL engines.
+
 1.292.0 (2025-09-04)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.292.0
+1.293.0

data/lib/aws-sdk-rds/client.rb

@@ -7332,7 +7332,15 @@ module Aws::RDS
     #   For Aurora PostgreSQL and RDS for PostgreSQL databases, specify
     #   `POSTGRESQL`. For RDS for Microsoft SQL Server, specify `SQLSERVER`.
     #
-    # @option params [required, Array<Types::UserAuthConfig>] :auth
+    # @option params [String] :default_auth_scheme
+    #   The default authentication scheme that the proxy uses for client
+    #   connections to the proxy and connections from the proxy to the
+    #   underlying database. Valid values are `NONE` and `IAM_AUTH`. When set
+    #   to `IAM_AUTH`, the proxy uses end-to-end IAM authentication to connect
+    #   to the database. If you don't specify `DefaultAuthScheme` or specify
+    #   this parameter as `NONE`, you must specify the `Auth` option.
+    #
+    # @option params [Array<Types::UserAuthConfig>] :auth
     #   The authorization mechanism that the proxy uses.
     #
     # @option params [required, String] :role_arn
@@ -7419,7 +7427,8 @@ module Aws::RDS
     #   resp = client.create_db_proxy({
     #     db_proxy_name: "String", # required
     #     engine_family: "MYSQL", # required, accepts MYSQL, POSTGRESQL, SQLSERVER
-    #     auth: [ # required
+    #     default_auth_scheme: "IAM_AUTH", # accepts IAM_AUTH, NONE
+    #     auth: [
     #       {
     #         description: "String",
     #         user_name: "String",
@@ -7456,6 +7465,7 @@ module Aws::RDS
     #   resp.db_proxy.vpc_security_group_ids[0] #=> String
     #   resp.db_proxy.vpc_subnet_ids #=> Array
     #   resp.db_proxy.vpc_subnet_ids[0] #=> String
+    #   resp.db_proxy.default_auth_scheme #=> String
     #   resp.db_proxy.auth #=> Array
     #   resp.db_proxy.auth[0].description #=> String
     #   resp.db_proxy.auth[0].user_name #=> String
@@ -10374,6 +10384,7 @@ module Aws::RDS
     #   resp.db_proxy.vpc_security_group_ids[0] #=> String
     #   resp.db_proxy.vpc_subnet_ids #=> Array
     #   resp.db_proxy.vpc_subnet_ids[0] #=> String
+    #   resp.db_proxy.default_auth_scheme #=> String
     #   resp.db_proxy.auth #=> Array
     #   resp.db_proxy.auth[0].description #=> String
     #   resp.db_proxy.auth[0].user_name #=> String
@@ -14320,6 +14331,7 @@ module Aws::RDS
     #   resp.db_proxies[0].vpc_security_group_ids[0] #=> String
     #   resp.db_proxies[0].vpc_subnet_ids #=> Array
     #   resp.db_proxies[0].vpc_subnet_ids[0] #=> String
+    #   resp.db_proxies[0].default_auth_scheme #=> String
     #   resp.db_proxies[0].auth #=> Array
     #   resp.db_proxies[0].auth[0].description #=> String
     #   resp.db_proxies[0].auth[0].user_name #=> String
@@ -22201,6 +22213,13 @@ module Aws::RDS
     #   letter and must contain only ASCII letters, digits, and hyphens; it
     #   can't end with a hyphen or contain two consecutive hyphens.
     #
+    # @option params [String] :default_auth_scheme
+    #   The default authentication scheme that the proxy uses for client
+    #   connections to the proxy and connections from the proxy to the
+    #   underlying database. Valid values are `NONE` and `IAM_AUTH`. When set
+    #   to `IAM_AUTH`, the proxy uses end-to-end IAM authentication to connect
+    #   to the database.
+    #
     # @option params [Array<Types::UserAuthConfig>] :auth
     #   The new authentication settings for the `DBProxy`.
     #
@@ -22239,6 +22258,7 @@ module Aws::RDS
     #   resp = client.modify_db_proxy({
     #     db_proxy_name: "String", # required
     #     new_db_proxy_name: "String",
+    #     default_auth_scheme: "IAM_AUTH", # accepts IAM_AUTH, NONE
     #     auth: [
     #       {
     #         description: "String",
@@ -22267,6 +22287,7 @@ module Aws::RDS
     #   resp.db_proxy.vpc_security_group_ids[0] #=> String
     #   resp.db_proxy.vpc_subnet_ids #=> Array
     #   resp.db_proxy.vpc_subnet_ids[0] #=> String
+    #   resp.db_proxy.default_auth_scheme #=> String
     #   resp.db_proxy.auth #=> Array
     #   resp.db_proxy.auth[0].description #=> String
     #   resp.db_proxy.auth[0].user_name #=> String
@@ -32596,7 +32617,7 @@ module Aws::RDS
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-rds'
-      context[:gem_version] = '1.292.0'
+      context[:gem_version] = '1.293.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-rds/client_api.rb

@@ -282,6 +282,7 @@ module Aws::RDS
     DataFilter = Shapes::StringShape.new(name: 'DataFilter')
     DatabaseArn = Shapes::StringShape.new(name: 'DatabaseArn')
     DatabaseInsightsMode = Shapes::StringShape.new(name: 'DatabaseInsightsMode')
+    DefaultAuthScheme = Shapes::StringShape.new(name: 'DefaultAuthScheme')
     DeleteBlueGreenDeploymentRequest = Shapes::StructureShape.new(name: 'DeleteBlueGreenDeploymentRequest')
     DeleteBlueGreenDeploymentResponse = Shapes::StructureShape.new(name: 'DeleteBlueGreenDeploymentResponse')
     DeleteCustomDBEngineVersionMessage = Shapes::StructureShape.new(name: 'DeleteCustomDBEngineVersionMessage')
@@ -1273,7 +1274,8 @@ module Aws::RDS
 
     CreateDBProxyRequest.add_member(:db_proxy_name, Shapes::ShapeRef.new(shape: String, required: true, location_name: "DBProxyName"))
     CreateDBProxyRequest.add_member(:engine_family, Shapes::ShapeRef.new(shape: EngineFamily, required: true, location_name: "EngineFamily"))
-    CreateDBProxyRequest.add_member(:auth, Shapes::ShapeRef.new(shape: UserAuthConfigList, required: true, location_name: "Auth"))
+    CreateDBProxyRequest.add_member(:default_auth_scheme, Shapes::ShapeRef.new(shape: DefaultAuthScheme, location_name: "DefaultAuthScheme"))
+    CreateDBProxyRequest.add_member(:auth, Shapes::ShapeRef.new(shape: UserAuthConfigList, location_name: "Auth"))
     CreateDBProxyRequest.add_member(:role_arn, Shapes::ShapeRef.new(shape: String, required: true, location_name: "RoleArn"))
     CreateDBProxyRequest.add_member(:vpc_subnet_ids, Shapes::ShapeRef.new(shape: StringList, required: true, location_name: "VpcSubnetIds"))
     CreateDBProxyRequest.add_member(:vpc_security_group_ids, Shapes::ShapeRef.new(shape: StringList, location_name: "VpcSecurityGroupIds"))
@@ -1940,6 +1942,7 @@ module Aws::RDS
     DBProxy.add_member(:vpc_id, Shapes::ShapeRef.new(shape: String, location_name: "VpcId"))
     DBProxy.add_member(:vpc_security_group_ids, Shapes::ShapeRef.new(shape: StringList, location_name: "VpcSecurityGroupIds"))
     DBProxy.add_member(:vpc_subnet_ids, Shapes::ShapeRef.new(shape: StringList, location_name: "VpcSubnetIds"))
+    DBProxy.add_member(:default_auth_scheme, Shapes::ShapeRef.new(shape: String, location_name: "DefaultAuthScheme"))
     DBProxy.add_member(:auth, Shapes::ShapeRef.new(shape: UserAuthConfigInfoList, location_name: "Auth"))
     DBProxy.add_member(:role_arn, Shapes::ShapeRef.new(shape: String, location_name: "RoleArn"))
     DBProxy.add_member(:endpoint, Shapes::ShapeRef.new(shape: String, location_name: "Endpoint"))
@@ -3258,6 +3261,7 @@ module Aws::RDS
 
     ModifyDBProxyRequest.add_member(:db_proxy_name, Shapes::ShapeRef.new(shape: String, required: true, location_name: "DBProxyName"))
     ModifyDBProxyRequest.add_member(:new_db_proxy_name, Shapes::ShapeRef.new(shape: String, location_name: "NewDBProxyName"))
+    ModifyDBProxyRequest.add_member(:default_auth_scheme, Shapes::ShapeRef.new(shape: DefaultAuthScheme, location_name: "DefaultAuthScheme"))
     ModifyDBProxyRequest.add_member(:auth, Shapes::ShapeRef.new(shape: UserAuthConfigList, location_name: "Auth"))
     ModifyDBProxyRequest.add_member(:require_tls, Shapes::ShapeRef.new(shape: BooleanOptional, location_name: "RequireTLS"))
     ModifyDBProxyRequest.add_member(:idle_client_timeout, Shapes::ShapeRef.new(shape: IntegerOptional, location_name: "IdleClientTimeout"))

data/lib/aws-sdk-rds/customizations.rb

@@ -1,4 +1,3 @@
 # frozen_string_literal: true
 
-# customizations to generated classes
 require 'aws-sdk-rds/customizations/auth_token_generator'

data/lib/aws-sdk-rds/types.rb

@@ -6048,6 +6048,16 @@ module Aws::RDS
     #   `SQLSERVER`.
     #   @return [String]
     #
+    # @!attribute [rw] default_auth_scheme
+    #   The default authentication scheme that the proxy uses for client
+    #   connections to the proxy and connections from the proxy to the
+    #   underlying database. Valid values are `NONE` and `IAM_AUTH`. When
+    #   set to `IAM_AUTH`, the proxy uses end-to-end IAM authentication to
+    #   connect to the database. If you don't specify `DefaultAuthScheme`
+    #   or specify this parameter as `NONE`, you must specify the `Auth`
+    #   option.
+    #   @return [String]
+    #
     # @!attribute [rw] auth
     #   The authorization mechanism that the proxy uses.
     #   @return [Array<Types::UserAuthConfig>]
@@ -6141,6 +6151,7 @@ module Aws::RDS
     class CreateDBProxyRequest < Struct.new(
       :db_proxy_name,
       :engine_family,
+      :default_auth_scheme,
       :auth,
       :role_arn,
       :vpc_subnet_ids,
@@ -10406,6 +10417,14 @@ module Aws::RDS
     #   The EC2 subnet IDs for the proxy.
     #   @return [Array<String>]
     #
+    # @!attribute [rw] default_auth_scheme
+    #   The default authentication scheme that the proxy uses for client
+    #   connections to the proxy and connections from the proxy to the
+    #   underlying database. Valid values are `NONE` and `IAM_AUTH`. When
+    #   set to `IAM_AUTH`, the proxy uses end-to-end IAM authentication to
+    #   connect to the database.
+    #   @return [String]
+    #
     # @!attribute [rw] auth
     #   One or more data structures specifying the authorization mechanism
     #   to connect to the associated RDS DB instance or Aurora DB cluster.
@@ -10490,6 +10509,7 @@ module Aws::RDS
       :vpc_id,
       :vpc_security_group_ids,
       :vpc_subnet_ids,
+      :default_auth_scheme,
       :auth,
       :role_arn,
       :endpoint,
@@ -20232,6 +20252,14 @@ module Aws::RDS
     #   it can't end with a hyphen or contain two consecutive hyphens.
     #   @return [String]
     #
+    # @!attribute [rw] default_auth_scheme
+    #   The default authentication scheme that the proxy uses for client
+    #   connections to the proxy and connections from the proxy to the
+    #   underlying database. Valid values are `NONE` and `IAM_AUTH`. When
+    #   set to `IAM_AUTH`, the proxy uses end-to-end IAM authentication to
+    #   connect to the database.
+    #   @return [String]
+    #
     # @!attribute [rw] auth
     #   The new authentication settings for the `DBProxy`.
     #   @return [Array<Types::UserAuthConfig>]
@@ -20272,6 +20300,7 @@ module Aws::RDS
     class ModifyDBProxyRequest < Struct.new(
       :db_proxy_name,
       :new_db_proxy_name,
+      :default_auth_scheme,
       :auth,
       :require_tls,
       :idle_client_timeout,

data/lib/aws-sdk-rds.rb

@@ -80,7 +80,7 @@ module Aws::RDS
   autoload :ReservedDBInstancesOffering, 'aws-sdk-rds/reserved_db_instances_offering'
   autoload :ResourcePendingMaintenanceActionList, 'aws-sdk-rds/resource_pending_maintenance_action_list'
 
-  GEM_VERSION = '1.292.0'
+  GEM_VERSION = '1.293.0'
 
 end
 

data/sig/client.rbs

@@ -700,7 +700,8 @@ module Aws
       def create_db_proxy: (
                              db_proxy_name: ::String,
                              engine_family: ("MYSQL" | "POSTGRESQL" | "SQLSERVER"),
-                             auth: Array[
+                             ?default_auth_scheme: ("IAM_AUTH" | "NONE"),
+                             ?auth: Array[
                                {
                                  description: ::String?,
                                  user_name: ::String?,
@@ -2529,6 +2530,7 @@ module Aws
       def modify_db_proxy: (
                              db_proxy_name: ::String,
                              ?new_db_proxy_name: ::String,
+                             ?default_auth_scheme: ("IAM_AUTH" | "NONE"),
                              ?auth: Array[
                                {
                                  description: ::String?,

data/sig/types.rbs

@@ -600,6 +600,7 @@ module Aws::RDS
     class CreateDBProxyRequest
       attr_accessor db_proxy_name: ::String
       attr_accessor engine_family: ("MYSQL" | "POSTGRESQL" | "SQLSERVER")
+      attr_accessor default_auth_scheme: ("IAM_AUTH" | "NONE")
       attr_accessor auth: ::Array[Types::UserAuthConfig]
       attr_accessor role_arn: ::String
       attr_accessor vpc_subnet_ids: ::Array[::String]
@@ -1368,6 +1369,7 @@ module Aws::RDS
       attr_accessor vpc_id: ::String
       attr_accessor vpc_security_group_ids: ::Array[::String]
       attr_accessor vpc_subnet_ids: ::Array[::String]
+      attr_accessor default_auth_scheme: ::String
       attr_accessor auth: ::Array[Types::UserAuthConfigInfo]
       attr_accessor role_arn: ::String
       attr_accessor endpoint: ::String
@@ -3031,6 +3033,7 @@ module Aws::RDS
     class ModifyDBProxyRequest
       attr_accessor db_proxy_name: ::String
       attr_accessor new_db_proxy_name: ::String
+      attr_accessor default_auth_scheme: ("IAM_AUTH" | "NONE")
       attr_accessor auth: ::Array[Types::UserAuthConfig]
       attr_accessor require_tls: bool
       attr_accessor idle_client_timeout: ::Integer

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-rds
 version: !ruby/object:Gem::Version
-  version: 1.292.0
+  version: 1.293.0
 platform: ruby
 authors:
 - Amazon Web Services