aws-sdk-rds 1.318.0 → 1.319.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 58e936b40491f6788e7b8b9857f287e87295a936c374325d62cc8392f3ce3a7d
-  data.tar.gz: 3314c99348511a6697f06e13d40f5c112ef82c15d97e36323e0319ab9d25b49d
+  metadata.gz: eff1c3033ca31c7f383a9cbb825bf5e20d093e06520d3d1e7dab4d7368141fc8
+  data.tar.gz: 4d8c5b23edda5ae3e8eab57c400fdffdb290fdea4e9107de471d959c2d1f900d
 SHA512:
-  metadata.gz: 07adcfafdca6d16d1797a3e7070897a072b961c3e413b8659e395f21d131fd0993450fe4c94a59cd1e892fd0a323893092d0a89c9a8809cf272a05fcf59d4221
-  data.tar.gz: 6b4bfbd5ae610feca9e78ee9b0b5ff12de665c8e8274e3fb7f0c203c8242da9218ead241c71c24342e0b226e179f9b90c3fe902fcb607e1a99d164d6fde052d1
+  metadata.gz: ab76c3dcd501a30c377bc1d86bea27ceefdea44cd99013e4e5e2c5bcb18b875bfdc9ee867b7e9510d22cda4ee0b17d39b03402ec6732f4eaf0cff48c3a2e518d
+  data.tar.gz: 853dfa1c4768cfa7eabd55e314115c77910a3a674defd3f2f7e29ead58042e2f591b1e54ae2ef093f7c8f9df2d83d1827d2f958b6620cce58542285fe7d4256f

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.319.0 (2026-07-17)
+------------------
+
+* Feature - Adds the AssociatedRoles parameter to CreateDBCluster, RestoreDBClusterFromSnapshot, RestoreDBClusterToPointInTime, and RestoreDBClusterFromS3, letting customers associate IAM roles with an Aurora DB cluster at create or restore time instead of calling AddRoleToDBCluster afterward.
+
 1.318.0 (2026-07-15)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.318.0
+1.319.0

data/lib/aws-sdk-rds/client.rb

@@ -508,7 +508,7 @@ module Aws::RDS
     #
     #   resp = client.add_role_to_db_cluster({
     #     db_cluster_identifier: "String", # required
-    #     role_arn: "String", # required
+    #     role_arn: "IAMRoleArn", # required
     #     feature_name: "String",
     #   })
     #
@@ -2754,6 +2754,13 @@ module Aws::RDS
     # instance and feature specific values set to all other input parameters
     # of this API.
     #
+    # You can use the `AssociatedRoles` parameter to associate one or more
+    # Amazon Web Services Identity and Access Management (IAM) roles with an
+    # Aurora DB cluster. Each associated role lets the DB cluster access
+    # other Amazon Web Services on your behalf, such as Amazon S3 for data
+    # import and export, or Amazon Web Services Lambda for invoking
+    # functions.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_CreateDBInstance.html
@@ -3713,6 +3720,15 @@ module Aws::RDS
     #
     #   Valid for Cluster Type: Aurora DB clusters
     #
+    # @option params [Array<Types::DBClusterAssociatedRole>] :associated_roles
+    #   A list of Amazon Web Services Identity and Access Management (IAM)
+    #   roles to associate with the DB cluster. Each role grants the DB
+    #   cluster permission to access other Amazon Web Services on your behalf.
+    #   For each role, specify a role ARN and, optionally, the feature name
+    #   (such as `s3Import`, `s3Export`, or `Lambda`).
+    #
+    #   Valid for Cluster Type: Aurora DB clusters only
+    #
     # @option params [String] :source_region
     #   The source region of the snapshot. This is only needed when the
     #   shapshot is encrypted and in a different region.
@@ -3921,6 +3937,73 @@ module Aws::RDS
     #     }, 
     #   }
     #
+    # @example Example: To create an Aurora DB cluster with an associated IAM role for Amazon S3 import
+    #
+    #   # The following example creates an Aurora PostgreSQL-compatible DB cluster and associates an IAM role for Amazon S3 import
+    #   # in a single call.
+    #
+    #   resp = client.create_db_cluster({
+    #     associated_roles: [
+    #       {
+    #         feature_name: "s3Import", 
+    #         role_arn: "arn:aws:iam::123456789012:role/RDSLoadFromS3", 
+    #       }, 
+    #     ], 
+    #     db_cluster_identifier: "sample-cluster", 
+    #     engine: "aurora-postgresql", 
+    #     master_user_password: "mypassword", 
+    #     master_username: "admin", 
+    #   })
+    #
+    #   resp.to_h outputs the following:
+    #   {
+    #     db_cluster: {
+    #       allocated_storage: 1, 
+    #       associated_roles: [
+    #         {
+    #           feature_name: "s3Import", 
+    #           role_arn: "arn:aws:iam::123456789012:role/RDSLoadFromS3", 
+    #           status: "ACTIVE", 
+    #         }, 
+    #       ], 
+    #       availability_zones: [
+    #         "us-east-1a", 
+    #         "us-east-1b", 
+    #         "us-east-1c", 
+    #       ], 
+    #       backup_retention_period: 1, 
+    #       cluster_create_time: Time.parse("2024-06-07T23:26:08.371Z"), 
+    #       copy_tags_to_snapshot: false, 
+    #       db_cluster_arn: "arn:aws:rds:us-east-1:123456789012:cluster:sample-cluster", 
+    #       db_cluster_identifier: "sample-cluster", 
+    #       db_cluster_members: [
+    #       ], 
+    #       db_cluster_parameter_group: "default.aurora-postgresql17", 
+    #       db_subnet_group: "default", 
+    #       db_cluster_resource_id: "cluster-ANPAJ4AE5446DAEXAMPLE", 
+    #       deletion_protection: false, 
+    #       endpoint: "sample-cluster.cluster-cnpexample.us-east-1.rds.amazonaws.com", 
+    #       engine: "aurora-postgresql", 
+    #       engine_mode: "provisioned", 
+    #       engine_version: "17.7", 
+    #       hosted_zone_id: "Z2R2ITUGPM61AM", 
+    #       http_endpoint_enabled: false, 
+    #       iam_database_authentication_enabled: false, 
+    #       master_username: "admin", 
+    #       multi_az: false, 
+    #       port: 5432, 
+    #       preferred_backup_window: "09:56-10:26", 
+    #       preferred_maintenance_window: "wed:03:33-wed:04:03", 
+    #       read_replica_identifiers: [
+    #       ], 
+    #       reader_endpoint: "sample-cluster.cluster-ro-cnpexample.us-east-1.rds.amazonaws.com", 
+    #       status: "creating", 
+    #       storage_encrypted: false, 
+    #       vpc_security_groups: [
+    #       ], 
+    #     }, 
+    #   }
+    #
     # @example Request syntax with placeholder values
     #
     #   resp = client.create_db_cluster({
@@ -4013,6 +4096,12 @@ module Aws::RDS
     #     ],
     #     master_user_authentication_type: "password", # accepts password, iam-db-auth
     #     with_express_configuration: false,
+    #     associated_roles: [
+    #       {
+    #         role_arn: "IAMRoleArn", # required
+    #         feature_name: "String",
+    #       },
+    #     ],
     #     source_region: "String",
     #   })
     #
@@ -25908,7 +25997,7 @@ module Aws::RDS
     #
     #   resp = client.remove_role_from_db_cluster({
     #     db_cluster_identifier: "String", # required
-    #     role_arn: "String", # required
+    #     role_arn: "IAMRoleArn", # required
     #     feature_name: "String",
     #   })
     #
@@ -26307,6 +26396,10 @@ module Aws::RDS
     #
     #  </note>
     #
+    # You can use the `AssociatedRoles` parameter to associate one or more
+    # Amazon Web Services Identity and Access Management (IAM) roles with
+    # the Aurora DB cluster when you restore it from Amazon S3.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/AuroraMySQL.Migrating.ExtMySQL.html#AuroraMySQL.Migrating.ExtMySQL.S3
@@ -26740,6 +26833,14 @@ module Aws::RDS
     #
     #   ^
     #
+    # @option params [Array<Types::DBClusterAssociatedRole>] :associated_roles
+    #   A list of Amazon Web Services Identity and Access Management (IAM)
+    #   roles to associate with the DB cluster when it's restored from Amazon
+    #   S3. Each role grants the DB cluster permission to access other Amazon
+    #   Web Services on your behalf. For each role, specify a role ARN and,
+    #   optionally, the feature name (such as `s3Import`, `s3Export`, or
+    #   `Lambda`).
+    #
     # @return [Types::RestoreDBClusterFromS3Result] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::RestoreDBClusterFromS3Result#db_cluster #db_cluster} => Types::DBCluster
@@ -26873,6 +26974,12 @@ module Aws::RDS
     #         ],
     #       },
     #     ],
+    #     associated_roles: [
+    #       {
+    #         role_arn: "IAMRoleArn", # required
+    #         feature_name: "String",
+    #       },
+    #     ],
     #   })
     #
     # @example Response structure
@@ -27051,6 +27158,10 @@ module Aws::RDS
     # need to modify the DB cluster to update `MasterUserAuthenticationType`
     # to `iam-db-auth`.
     #
+    # You can use the `AssociatedRoles` parameter to associate one or more
+    # Amazon Web Services Identity and Access Management (IAM) roles with an
+    # Aurora DB cluster when you restore it from a snapshot.
+    #
     # <note markdown="1"> This operation only restores the DB cluster, not the DB instances for
     # that DB cluster. You must invoke the `CreateDBInstance` operation to
     # create DB instances for the restored DB cluster, specifying the
@@ -27660,6 +27771,16 @@ module Aws::RDS
     #
     #   Valid for Cluster Type: Aurora PostgreSQL clusters
     #
+    # @option params [Array<Types::DBClusterAssociatedRole>] :associated_roles
+    #   A list of Amazon Web Services Identity and Access Management (IAM)
+    #   roles to associate with the DB cluster when it's restored from a
+    #   snapshot. Each role grants the DB cluster permission to access other
+    #   Amazon Web Services on your behalf. For each role, specify a role ARN
+    #   and, optionally, the feature name (such as `s3Import`, `s3Export`, or
+    #   `Lambda`).
+    #
+    #   Valid for Cluster Type: Aurora DB clusters only
+    #
     # @return [Types::RestoreDBClusterFromSnapshotResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::RestoreDBClusterFromSnapshotResult#db_cluster #db_cluster} => Types::DBCluster
@@ -27790,6 +27911,65 @@ module Aws::RDS
     #     }, 
     #   }
     #
+    # @example Example: To restore a DB cluster from a snapshot with an associated IAM role
+    #
+    #   # The following example restores an Aurora PostgreSQL DB cluster from a snapshot and associates an IAM role for Amazon S3
+    #   # import in a single call.
+    #
+    #   resp = client.restore_db_cluster_from_snapshot({
+    #     associated_roles: [
+    #       {
+    #         feature_name: "s3Import", 
+    #         role_arn: "arn:aws:iam::123456789012:role/RDSLoadFromS3", 
+    #       }, 
+    #     ], 
+    #     db_cluster_identifier: "restored-cluster", 
+    #     engine: "aurora-postgresql", 
+    #     snapshot_identifier: "test-instance-snapshot", 
+    #   })
+    #
+    #   resp.to_h outputs the following:
+    #   {
+    #     db_cluster: {
+    #       associated_roles: [
+    #         {
+    #           feature_name: "s3Import", 
+    #           role_arn: "arn:aws:iam::123456789012:role/RDSLoadFromS3", 
+    #           status: "ACTIVE", 
+    #         }, 
+    #       ], 
+    #       cluster_create_time: Time.parse("2024-06-05T15:06:58.634Z"), 
+    #       copy_tags_to_snapshot: false, 
+    #       cross_account_clone: false, 
+    #       db_cluster_arn: "arn:aws:rds:us-west-2:123456789012:cluster:restored-cluster", 
+    #       db_cluster_identifier: "restored-cluster", 
+    #       db_cluster_members: [
+    #       ], 
+    #       db_cluster_parameter_group: "default.aurora-postgresql17", 
+    #       database_name: "", 
+    #       db_cluster_resource_id: "cluster-5DSB5IFQDDUVAWOUWM1EXAMPLE", 
+    #       deletion_protection: false, 
+    #       domain_memberships: [
+    #       ], 
+    #       engine: "aurora-postgresql", 
+    #       engine_mode: "provisioned", 
+    #       engine_version: "17.7", 
+    #       http_endpoint_enabled: false, 
+    #       iam_database_authentication_enabled: true, 
+    #       master_username: "postgres", 
+    #       multi_az: false, 
+    #       port: 5432, 
+    #       preferred_backup_window: "09:33-10:03", 
+    #       preferred_maintenance_window: "sun:12:22-sun:12:52", 
+    #       read_replica_identifiers: [
+    #       ], 
+    #       status: "creating", 
+    #       storage_encrypted: false, 
+    #       vpc_security_groups: [
+    #       ], 
+    #     }, 
+    #   }
+    #
     # @example Request syntax with placeholder values
     #
     #   resp = client.restore_db_cluster_from_snapshot({
@@ -27863,6 +28043,12 @@ module Aws::RDS
     #     ],
     #     enable_vpc_networking: false,
     #     enable_internet_access_gateway: false,
+    #     associated_roles: [
+    #       {
+    #         role_arn: "IAMRoleArn", # required
+    #         feature_name: "String",
+    #       },
+    #     ],
     #   })
     #
     # @example Response structure
@@ -28045,6 +28231,10 @@ module Aws::RDS
     # need to modify the DB cluster to update `MasterUserAuthenticationType`
     # to `iam-db-auth`.
     #
+    # You can use the `AssociatedRoles` parameter to associate one or more
+    # Amazon Web Services Identity and Access Management (IAM) roles with an
+    # Aurora DB cluster when you restore it to a point in time.
+    #
     # <note markdown="1"> For Aurora, this operation only restores the DB cluster, not the DB
     # instances for that DB cluster. You must invoke the `CreateDBInstance`
     # operation to create DB instances for the restored DB cluster,
@@ -28634,6 +28824,16 @@ module Aws::RDS
     #
     #   Valid for Cluster Type: Aurora PostgreSQL clusters
     #
+    # @option params [Array<Types::DBClusterAssociatedRole>] :associated_roles
+    #   A list of Amazon Web Services Identity and Access Management (IAM)
+    #   roles to associate with the DB cluster when it's restored to a point
+    #   in time. Each role grants the DB cluster permission to access other
+    #   Amazon Web Services on your behalf. For each role, specify a role ARN
+    #   and, optionally, the feature name (such as `s3Import`, `s3Export`, or
+    #   `Lambda`).
+    #
+    #   Valid for Cluster Type: Aurora DB clusters only
+    #
     # @return [Types::RestoreDBClusterToPointInTimeResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::RestoreDBClusterToPointInTimeResult#db_cluster #db_cluster} => Types::DBCluster
@@ -28835,6 +29035,12 @@ module Aws::RDS
     #     ],
     #     enable_vpc_networking: false,
     #     enable_internet_access_gateway: false,
+    #     associated_roles: [
+    #       {
+    #         role_arn: "IAMRoleArn", # required
+    #         feature_name: "String",
+    #       },
+    #     ],
     #   })
     #
     # @example Response structure
@@ -34237,7 +34443,7 @@ module Aws::RDS
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-rds'
-      context[:gem_version] = '1.318.0'
+      context[:gem_version] = '1.319.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-rds/client_api.rb

@@ -143,6 +143,8 @@ module Aws::RDS
     CustomEngineVersionStatus = Shapes::StringShape.new(name: 'CustomEngineVersionStatus')
     DBCluster = Shapes::StructureShape.new(name: 'DBCluster')
     DBClusterAlreadyExistsFault = Shapes::StructureShape.new(name: 'DBClusterAlreadyExistsFault', error: {"code" => "DBClusterAlreadyExistsFault", "httpStatusCode" => 400, "senderFault" => true})
+    DBClusterAssociatedRole = Shapes::StructureShape.new(name: 'DBClusterAssociatedRole')
+    DBClusterAssociatedRoles = Shapes::ListShape.new(name: 'DBClusterAssociatedRoles')
     DBClusterAutomatedBackup = Shapes::StructureShape.new(name: 'DBClusterAutomatedBackup')
     DBClusterAutomatedBackupList = Shapes::ListShape.new(name: 'DBClusterAutomatedBackupList')
     DBClusterAutomatedBackupMessage = Shapes::StructureShape.new(name: 'DBClusterAutomatedBackupMessage')
@@ -453,6 +455,7 @@ module Aws::RDS
     GlobalClusterQuotaExceededFault = Shapes::StructureShape.new(name: 'GlobalClusterQuotaExceededFault', error: {"code" => "GlobalClusterQuotaExceededFault", "httpStatusCode" => 400, "senderFault" => true})
     GlobalClustersMessage = Shapes::StructureShape.new(name: 'GlobalClustersMessage')
     IAMAuthMode = Shapes::StringShape.new(name: 'IAMAuthMode')
+    IAMRoleArn = Shapes::StringShape.new(name: 'IAMRoleArn')
     IPRange = Shapes::StructureShape.new(name: 'IPRange')
     IPRangeList = Shapes::ListShape.new(name: 'IPRangeList')
     IamRoleMissingPermissionsFault = Shapes::StructureShape.new(name: 'IamRoleMissingPermissionsFault', error: {"code" => "IamRoleMissingPermissions", "httpStatusCode" => 400, "senderFault" => true})
@@ -815,7 +818,7 @@ module Aws::RDS
     ActivityStreamModeList.member = Shapes::ShapeRef.new(shape: String)
 
     AddRoleToDBClusterMessage.add_member(:db_cluster_identifier, Shapes::ShapeRef.new(shape: String, required: true, location_name: "DBClusterIdentifier"))
-    AddRoleToDBClusterMessage.add_member(:role_arn, Shapes::ShapeRef.new(shape: String, required: true, location_name: "RoleArn"))
+    AddRoleToDBClusterMessage.add_member(:role_arn, Shapes::ShapeRef.new(shape: IAMRoleArn, required: true, location_name: "RoleArn"))
     AddRoleToDBClusterMessage.add_member(:feature_name, Shapes::ShapeRef.new(shape: String, location_name: "FeatureName"))
     AddRoleToDBClusterMessage.struct_class = Types::AddRoleToDBClusterMessage
 
@@ -1170,6 +1173,7 @@ module Aws::RDS
     CreateDBClusterMessage.add_member(:tag_specifications, Shapes::ShapeRef.new(shape: TagSpecificationList, location_name: "TagSpecifications"))
     CreateDBClusterMessage.add_member(:master_user_authentication_type, Shapes::ShapeRef.new(shape: MasterUserAuthenticationType, location_name: "MasterUserAuthenticationType"))
     CreateDBClusterMessage.add_member(:with_express_configuration, Shapes::ShapeRef.new(shape: BooleanOptional, location_name: "WithExpressConfiguration"))
+    CreateDBClusterMessage.add_member(:associated_roles, Shapes::ShapeRef.new(shape: DBClusterAssociatedRoles, location_name: "AssociatedRoles"))
     CreateDBClusterMessage.add_member(:source_region, Shapes::ShapeRef.new(shape: String, location_name: "SourceRegion"))
     CreateDBClusterMessage.struct_class = Types::CreateDBClusterMessage
 
@@ -1557,6 +1561,12 @@ module Aws::RDS
 
     DBClusterAlreadyExistsFault.struct_class = Types::DBClusterAlreadyExistsFault
 
+    DBClusterAssociatedRole.add_member(:role_arn, Shapes::ShapeRef.new(shape: IAMRoleArn, required: true, location_name: "RoleArn"))
+    DBClusterAssociatedRole.add_member(:feature_name, Shapes::ShapeRef.new(shape: String, location_name: "FeatureName"))
+    DBClusterAssociatedRole.struct_class = Types::DBClusterAssociatedRole
+
+    DBClusterAssociatedRoles.member = Shapes::ShapeRef.new(shape: DBClusterAssociatedRole, location_name: "DBClusterAssociatedRole")
+
     DBClusterAutomatedBackup.add_member(:engine, Shapes::ShapeRef.new(shape: String, location_name: "Engine"))
     DBClusterAutomatedBackup.add_member(:vpc_id, Shapes::ShapeRef.new(shape: String, location_name: "VpcId"))
     DBClusterAutomatedBackup.add_member(:db_cluster_automated_backups_arn, Shapes::ShapeRef.new(shape: String, location_name: "DBClusterAutomatedBackupsArn"))
@@ -3850,7 +3860,7 @@ module Aws::RDS
     RemoveFromGlobalClusterResult.struct_class = Types::RemoveFromGlobalClusterResult
 
     RemoveRoleFromDBClusterMessage.add_member(:db_cluster_identifier, Shapes::ShapeRef.new(shape: String, required: true, location_name: "DBClusterIdentifier"))
-    RemoveRoleFromDBClusterMessage.add_member(:role_arn, Shapes::ShapeRef.new(shape: String, required: true, location_name: "RoleArn"))
+    RemoveRoleFromDBClusterMessage.add_member(:role_arn, Shapes::ShapeRef.new(shape: IAMRoleArn, required: true, location_name: "RoleArn"))
     RemoveRoleFromDBClusterMessage.add_member(:feature_name, Shapes::ShapeRef.new(shape: String, location_name: "FeatureName"))
     RemoveRoleFromDBClusterMessage.struct_class = Types::RemoveRoleFromDBClusterMessage
 
@@ -3974,6 +3984,7 @@ module Aws::RDS
     RestoreDBClusterFromS3Message.add_member(:master_user_secret_kms_key_id, Shapes::ShapeRef.new(shape: String, location_name: "MasterUserSecretKmsKeyId"))
     RestoreDBClusterFromS3Message.add_member(:engine_lifecycle_support, Shapes::ShapeRef.new(shape: String, location_name: "EngineLifecycleSupport"))
     RestoreDBClusterFromS3Message.add_member(:tag_specifications, Shapes::ShapeRef.new(shape: TagSpecificationList, location_name: "TagSpecifications"))
+    RestoreDBClusterFromS3Message.add_member(:associated_roles, Shapes::ShapeRef.new(shape: DBClusterAssociatedRoles, location_name: "AssociatedRoles"))
     RestoreDBClusterFromS3Message.struct_class = Types::RestoreDBClusterFromS3Message
 
     RestoreDBClusterFromS3Result.add_member(:db_cluster, Shapes::ShapeRef.new(shape: DBCluster, location_name: "DBCluster"))
@@ -4019,6 +4030,7 @@ module Aws::RDS
     RestoreDBClusterFromSnapshotMessage.add_member(:tag_specifications, Shapes::ShapeRef.new(shape: TagSpecificationList, location_name: "TagSpecifications"))
     RestoreDBClusterFromSnapshotMessage.add_member(:enable_vpc_networking, Shapes::ShapeRef.new(shape: BooleanOptional, location_name: "EnableVPCNetworking"))
     RestoreDBClusterFromSnapshotMessage.add_member(:enable_internet_access_gateway, Shapes::ShapeRef.new(shape: BooleanOptional, location_name: "EnableInternetAccessGateway"))
+    RestoreDBClusterFromSnapshotMessage.add_member(:associated_roles, Shapes::ShapeRef.new(shape: DBClusterAssociatedRoles, location_name: "AssociatedRoles"))
     RestoreDBClusterFromSnapshotMessage.struct_class = Types::RestoreDBClusterFromSnapshotMessage
 
     RestoreDBClusterFromSnapshotResult.add_member(:db_cluster, Shapes::ShapeRef.new(shape: DBCluster, location_name: "DBCluster"))
@@ -4064,6 +4076,7 @@ module Aws::RDS
     RestoreDBClusterToPointInTimeMessage.add_member(:tag_specifications, Shapes::ShapeRef.new(shape: TagSpecificationList, location_name: "TagSpecifications"))
     RestoreDBClusterToPointInTimeMessage.add_member(:enable_vpc_networking, Shapes::ShapeRef.new(shape: BooleanOptional, location_name: "EnableVPCNetworking"))
     RestoreDBClusterToPointInTimeMessage.add_member(:enable_internet_access_gateway, Shapes::ShapeRef.new(shape: BooleanOptional, location_name: "EnableInternetAccessGateway"))
+    RestoreDBClusterToPointInTimeMessage.add_member(:associated_roles, Shapes::ShapeRef.new(shape: DBClusterAssociatedRoles, location_name: "AssociatedRoles"))
     RestoreDBClusterToPointInTimeMessage.struct_class = Types::RestoreDBClusterToPointInTimeMessage
 
     RestoreDBClusterToPointInTimeResult.add_member(:db_cluster, Shapes::ShapeRef.new(shape: DBCluster, location_name: "DBCluster"))
@@ -4844,6 +4857,7 @@ module Aws::RDS
         o.errors << Shapes::ShapeRef.new(shape: InvalidDBInstanceStateFault)
         o.errors << Shapes::ShapeRef.new(shape: KMSKeyNotAccessibleFault)
         o.errors << Shapes::ShapeRef.new(shape: InvalidVPCNetworkStateFault)
+        o.errors << Shapes::ShapeRef.new(shape: DBClusterRoleQuotaExceededFault)
         o.errors << Shapes::ShapeRef.new(shape: InvalidDBClusterStateFault)
         o.errors << Shapes::ShapeRef.new(shape: InvalidDBSubnetGroupStateFault)
         o.errors << Shapes::ShapeRef.new(shape: DBSubnetGroupNotFoundFault)
@@ -6563,6 +6577,7 @@ module Aws::RDS
         o.errors << Shapes::ShapeRef.new(shape: DBClusterNotFoundFault)
         o.errors << Shapes::ShapeRef.new(shape: StorageTypeNotSupportedFault)
         o.errors << Shapes::ShapeRef.new(shape: InvalidVPCNetworkStateFault)
+        o.errors << Shapes::ShapeRef.new(shape: DBClusterRoleQuotaExceededFault)
         o.errors << Shapes::ShapeRef.new(shape: InvalidDBClusterStateFault)
         o.errors << Shapes::ShapeRef.new(shape: DBClusterAlreadyExistsFault)
         o.errors << Shapes::ShapeRef.new(shape: NetworkTypeNotSupported)
@@ -6598,6 +6613,7 @@ module Aws::RDS
         o.errors << Shapes::ShapeRef.new(shape: InvalidDBInstanceStateFault)
         o.errors << Shapes::ShapeRef.new(shape: KMSKeyNotAccessibleFault)
         o.errors << Shapes::ShapeRef.new(shape: InvalidVPCNetworkStateFault)
+        o.errors << Shapes::ShapeRef.new(shape: DBClusterRoleQuotaExceededFault)
         o.errors << Shapes::ShapeRef.new(shape: DBSubnetGroupNotFoundFault)
         o.errors << Shapes::ShapeRef.new(shape: InvalidRestoreFault)
         o.errors << Shapes::ShapeRef.new(shape: DBClusterQuotaExceededFault)
@@ -6628,6 +6644,7 @@ module Aws::RDS
         o.errors << Shapes::ShapeRef.new(shape: KMSKeyNotAccessibleFault)
         o.errors << Shapes::ShapeRef.new(shape: DBClusterAutomatedBackupNotFoundFault)
         o.errors << Shapes::ShapeRef.new(shape: InvalidVPCNetworkStateFault)
+        o.errors << Shapes::ShapeRef.new(shape: DBClusterRoleQuotaExceededFault)
         o.errors << Shapes::ShapeRef.new(shape: InvalidDBClusterStateFault)
         o.errors << Shapes::ShapeRef.new(shape: DBSubnetGroupNotFoundFault)
         o.errors << Shapes::ShapeRef.new(shape: InvalidRestoreFault)

data/lib/aws-sdk-rds/db_cluster.rb

@@ -1054,6 +1054,12 @@ module Aws::RDS
     #     ],
     #     master_user_authentication_type: "password", # accepts password, iam-db-auth
     #     with_express_configuration: false,
+    #     associated_roles: [
+    #       {
+    #         role_arn: "IAMRoleArn", # required
+    #         feature_name: "String",
+    #       },
+    #     ],
     #     source_region: "String",
     #   })
     # @param [Hash] options ({})
@@ -1935,6 +1941,14 @@ module Aws::RDS
     #   of this API.
     #
     #   Valid for Cluster Type: Aurora DB clusters
+    # @option options [Array<Types::DBClusterAssociatedRole>] :associated_roles
+    #   A list of Amazon Web Services Identity and Access Management (IAM)
+    #   roles to associate with the DB cluster. Each role grants the DB
+    #   cluster permission to access other Amazon Web Services on your behalf.
+    #   For each role, specify a role ARN and, optionally, the feature name
+    #   (such as `s3Import`, `s3Export`, or `Lambda`).
+    #
+    #   Valid for Cluster Type: Aurora DB clusters only
     # @option options [String] :source_region
     #   The source region of the snapshot. This is only needed when the
     #   shapshot is encrypted and in a different region.
@@ -2932,6 +2946,12 @@ module Aws::RDS
     #     ],
     #     enable_vpc_networking: false,
     #     enable_internet_access_gateway: false,
+    #     associated_roles: [
+    #       {
+    #         role_arn: "IAMRoleArn", # required
+    #         feature_name: "String",
+    #       },
+    #     ],
     #   })
     # @param [Hash] options ({})
     # @option options [required, String] :db_cluster_identifier
@@ -3452,6 +3472,15 @@ module Aws::RDS
     #   `EnableIAMDatabaseAuthentication`.
     #
     #   Valid for Cluster Type: Aurora PostgreSQL clusters
+    # @option options [Array<Types::DBClusterAssociatedRole>] :associated_roles
+    #   A list of Amazon Web Services Identity and Access Management (IAM)
+    #   roles to associate with the DB cluster when it's restored to a point
+    #   in time. Each role grants the DB cluster permission to access other
+    #   Amazon Web Services on your behalf. For each role, specify a role ARN
+    #   and, optionally, the feature name (such as `s3Import`, `s3Export`, or
+    #   `Lambda`).
+    #
+    #   Valid for Cluster Type: Aurora DB clusters only
     # @return [DBCluster]
     def restore(options = {})
       options = options.merge(source_db_cluster_identifier: @id)

data/lib/aws-sdk-rds/db_cluster_snapshot.rb

@@ -650,6 +650,12 @@ module Aws::RDS
     #     ],
     #     enable_vpc_networking: false,
     #     enable_internet_access_gateway: false,
+    #     associated_roles: [
+    #       {
+    #         role_arn: "IAMRoleArn", # required
+    #         feature_name: "String",
+    #       },
+    #     ],
     #   })
     # @param [Hash] options ({})
     # @option options [Array<String>] :availability_zones
@@ -1186,6 +1192,15 @@ module Aws::RDS
     #   `EnableIAMDatabaseAuthentication`.
     #
     #   Valid for Cluster Type: Aurora PostgreSQL clusters
+    # @option options [Array<Types::DBClusterAssociatedRole>] :associated_roles
+    #   A list of Amazon Web Services Identity and Access Management (IAM)
+    #   roles to associate with the DB cluster when it's restored from a
+    #   snapshot. Each role grants the DB cluster permission to access other
+    #   Amazon Web Services on your behalf. For each role, specify a role ARN
+    #   and, optionally, the feature name (such as `s3Import`, `s3Export`, or
+    #   `Lambda`).
+    #
+    #   Valid for Cluster Type: Aurora DB clusters only
     # @return [DBCluster]
     def restore(options = {})
       options = options.merge(snapshot_identifier: @snapshot_id)

data/lib/aws-sdk-rds/resource.rb

@@ -127,6 +127,12 @@ module Aws::RDS
     #     ],
     #     master_user_authentication_type: "password", # accepts password, iam-db-auth
     #     with_express_configuration: false,
+    #     associated_roles: [
+    #       {
+    #         role_arn: "IAMRoleArn", # required
+    #         feature_name: "String",
+    #       },
+    #     ],
     #     source_region: "String",
     #   })
     # @param [Hash] options ({})
@@ -1024,6 +1030,14 @@ module Aws::RDS
     #   of this API.
     #
     #   Valid for Cluster Type: Aurora DB clusters
+    # @option options [Array<Types::DBClusterAssociatedRole>] :associated_roles
+    #   A list of Amazon Web Services Identity and Access Management (IAM)
+    #   roles to associate with the DB cluster. Each role grants the DB
+    #   cluster permission to access other Amazon Web Services on your behalf.
+    #   For each role, specify a role ARN and, optionally, the feature name
+    #   (such as `s3Import`, `s3Export`, or `Lambda`).
+    #
+    #   Valid for Cluster Type: Aurora DB clusters only
     # @option options [String] :source_region
     #   The source region of the snapshot. This is only needed when the
     #   shapshot is encrypted and in a different region.

data/lib/aws-sdk-rds/types.rb

@@ -3442,6 +3442,16 @@ module Aws::RDS
     #   Valid for Cluster Type: Aurora DB clusters
     #   @return [Boolean]
     #
+    # @!attribute [rw] associated_roles
+    #   A list of Amazon Web Services Identity and Access Management (IAM)
+    #   roles to associate with the DB cluster. Each role grants the DB
+    #   cluster permission to access other Amazon Web Services on your
+    #   behalf. For each role, specify a role ARN and, optionally, the
+    #   feature name (such as `s3Import`, `s3Export`, or `Lambda`).
+    #
+    #   Valid for Cluster Type: Aurora DB clusters only
+    #   @return [Array<Types::DBClusterAssociatedRole>]
+    #
     # @!attribute [rw] source_region
     #   The source region of the snapshot. This is only needed when the
     #   shapshot is encrypted and in a different region.
@@ -3509,6 +3519,7 @@ module Aws::RDS
       :tag_specifications,
       :master_user_authentication_type,
       :with_express_configuration,
+      :associated_roles,
       :source_region)
       SENSITIVE = [:master_user_password, :pre_signed_url]
       include Aws::Structure
@@ -8100,6 +8111,31 @@ module Aws::RDS
     #
     class DBClusterAlreadyExistsFault < Aws::EmptyStructure; end
 
+    # Contains information about an Amazon Web Services Identity and Access
+    # Management (IAM) role to associate with a DB cluster. You can specify
+    # this structure in the `AssociatedRoles` parameter of CreateDBCluster,
+    # RestoreDBClusterFromS3, RestoreDBClusterFromSnapshot, and
+    # RestoreDBClusterToPointInTime.
+    #
+    # @!attribute [rw] role_arn
+    #   The Amazon Resource Name (ARN) of the IAM role to associate with the
+    #   DB cluster.
+    #   @return [String]
+    #
+    # @!attribute [rw] feature_name
+    #   The name of the feature associated with the IAM role. For
+    #   information about supported feature names, see DBEngineVersion.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/rds-2014-10-31/DBClusterAssociatedRole AWS API Documentation
+    #
+    class DBClusterAssociatedRole < Struct.new(
+      :role_arn,
+      :feature_name)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # An automated backup of a DB cluster. It consists of system backups,
     # transaction logs, and the database cluster properties that existed at
     # the time you deleted the source cluster.
@@ -24740,6 +24776,15 @@ module Aws::RDS
     #   ^
     #   @return [Array<Types::TagSpecification>]
     #
+    # @!attribute [rw] associated_roles
+    #   A list of Amazon Web Services Identity and Access Management (IAM)
+    #   roles to associate with the DB cluster when it's restored from
+    #   Amazon S3. Each role grants the DB cluster permission to access
+    #   other Amazon Web Services on your behalf. For each role, specify a
+    #   role ARN and, optionally, the feature name (such as `s3Import`,
+    #   `s3Export`, or `Lambda`).
+    #   @return [Array<Types::DBClusterAssociatedRole>]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/rds-2014-10-31/RestoreDBClusterFromS3Message AWS API Documentation
     #
     class RestoreDBClusterFromS3Message < Struct.new(
@@ -24780,7 +24825,8 @@ module Aws::RDS
       :manage_master_user_password,
       :master_user_secret_kms_key_id,
       :engine_lifecycle_support,
-      :tag_specifications)
+      :tag_specifications,
+      :associated_roles)
       SENSITIVE = [:master_user_password]
       include Aws::Structure
     end
@@ -25461,6 +25507,17 @@ module Aws::RDS
     #   Valid for Cluster Type: Aurora PostgreSQL clusters
     #   @return [Boolean]
     #
+    # @!attribute [rw] associated_roles
+    #   A list of Amazon Web Services Identity and Access Management (IAM)
+    #   roles to associate with the DB cluster when it's restored from a
+    #   snapshot. Each role grants the DB cluster permission to access other
+    #   Amazon Web Services on your behalf. For each role, specify a role
+    #   ARN and, optionally, the feature name (such as `s3Import`,
+    #   `s3Export`, or `Lambda`).
+    #
+    #   Valid for Cluster Type: Aurora DB clusters only
+    #   @return [Array<Types::DBClusterAssociatedRole>]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/rds-2014-10-31/RestoreDBClusterFromSnapshotMessage AWS API Documentation
     #
     class RestoreDBClusterFromSnapshotMessage < Struct.new(
@@ -25503,7 +25560,8 @@ module Aws::RDS
       :engine_lifecycle_support,
       :tag_specifications,
       :enable_vpc_networking,
-      :enable_internet_access_gateway)
+      :enable_internet_access_gateway,
+      :associated_roles)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -26161,6 +26219,17 @@ module Aws::RDS
     #   Valid for Cluster Type: Aurora PostgreSQL clusters
     #   @return [Boolean]
     #
+    # @!attribute [rw] associated_roles
+    #   A list of Amazon Web Services Identity and Access Management (IAM)
+    #   roles to associate with the DB cluster when it's restored to a
+    #   point in time. Each role grants the DB cluster permission to access
+    #   other Amazon Web Services on your behalf. For each role, specify a
+    #   role ARN and, optionally, the feature name (such as `s3Import`,
+    #   `s3Export`, or `Lambda`).
+    #
+    #   Valid for Cluster Type: Aurora DB clusters only
+    #   @return [Array<Types::DBClusterAssociatedRole>]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/rds-2014-10-31/RestoreDBClusterToPointInTimeMessage AWS API Documentation
     #
     class RestoreDBClusterToPointInTimeMessage < Struct.new(
@@ -26203,7 +26272,8 @@ module Aws::RDS
       :engine_lifecycle_support,
       :tag_specifications,
       :enable_vpc_networking,
-      :enable_internet_access_gateway)
+      :enable_internet_access_gateway,
+      :associated_roles)
       SENSITIVE = []
       include Aws::Structure
     end

data/lib/aws-sdk-rds.rb

@@ -80,7 +80,7 @@ module Aws::RDS
   autoload :ReservedDBInstancesOffering, 'aws-sdk-rds/reserved_db_instances_offering'
   autoload :ResourcePendingMaintenanceActionList, 'aws-sdk-rds/resource_pending_maintenance_action_list'
 
-  GEM_VERSION = '1.318.0'
+  GEM_VERSION = '1.319.0'
 
 end
 

data/sig/client.rbs

@@ -463,6 +463,12 @@ module Aws
                                ],
                                ?master_user_authentication_type: ("password" | "iam-db-auth"),
                                ?with_express_configuration: bool,
+                               ?associated_roles: Array[
+                                 {
+                                   role_arn: ::String,
+                                   feature_name: ::String?
+                                 }
+                               ],
                                ?source_region: ::String
                              ) -> _CreateDBClusterResponseSuccess
                            | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _CreateDBClusterResponseSuccess
@@ -3041,6 +3047,12 @@ module Aws
                                               }
                                             ]?
                                           }
+                                        ],
+                                        ?associated_roles: Array[
+                                          {
+                                            role_arn: ::String,
+                                            feature_name: ::String?
+                                          }
                                         ]
                                       ) -> _RestoreDBClusterFromS3ResponseSuccess
                                     | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _RestoreDBClusterFromS3ResponseSuccess
@@ -3113,7 +3125,13 @@ module Aws
                                                 }
                                               ],
                                               ?enable_vpc_networking: bool,
-                                              ?enable_internet_access_gateway: bool
+                                              ?enable_internet_access_gateway: bool,
+                                              ?associated_roles: Array[
+                                                {
+                                                  role_arn: ::String,
+                                                  feature_name: ::String?
+                                                }
+                                              ]
                                             ) -> _RestoreDBClusterFromSnapshotResponseSuccess
                                           | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _RestoreDBClusterFromSnapshotResponseSuccess
 
@@ -3185,7 +3203,13 @@ module Aws
                                                    }
                                                  ],
                                                  ?enable_vpc_networking: bool,
-                                                 ?enable_internet_access_gateway: bool
+                                                 ?enable_internet_access_gateway: bool,
+                                                 ?associated_roles: Array[
+                                                   {
+                                                     role_arn: ::String,
+                                                     feature_name: ::String?
+                                                   }
+                                                 ]
                                                ) -> _RestoreDBClusterToPointInTimeResponseSuccess
                                              | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _RestoreDBClusterToPointInTimeResponseSuccess
 

data/sig/db_cluster.rbs

@@ -382,6 +382,12 @@ module Aws
                     ],
                     ?master_user_authentication_type: ("password" | "iam-db-auth"),
                     ?with_express_configuration: bool,
+                    ?associated_roles: Array[
+                      {
+                        role_arn: ::String,
+                        feature_name: ::String?
+                      }
+                    ],
                     ?source_region: ::String
                   ) -> DBCluster
                 | (?Hash[Symbol, untyped]) -> DBCluster
@@ -548,7 +554,13 @@ module Aws
                        }
                      ],
                      ?enable_vpc_networking: bool,
-                     ?enable_internet_access_gateway: bool
+                     ?enable_internet_access_gateway: bool,
+                     ?associated_roles: Array[
+                       {
+                         role_arn: ::String,
+                         feature_name: ::String?
+                       }
+                     ]
                    ) -> DBCluster
                  | (?Hash[Symbol, untyped]) -> DBCluster
 

data/sig/db_cluster_snapshot.rbs

@@ -218,7 +218,13 @@ module Aws
                        }
                      ],
                      ?enable_vpc_networking: bool,
-                     ?enable_internet_access_gateway: bool
+                     ?enable_internet_access_gateway: bool,
+                     ?associated_roles: Array[
+                       {
+                         role_arn: ::String,
+                         feature_name: ::String?
+                       }
+                     ]
                    ) -> DBCluster
                  | (?Hash[Symbol, untyped]) -> DBCluster
 

data/sig/resource.rbs

@@ -171,6 +171,12 @@ module Aws
                                ],
                                ?master_user_authentication_type: ("password" | "iam-db-auth"),
                                ?with_express_configuration: bool,
+                               ?associated_roles: Array[
+                                 {
+                                   role_arn: ::String,
+                                   feature_name: ::String?
+                                 }
+                               ],
                                ?source_region: ::String
                              ) -> DBCluster
                            | (?Hash[Symbol, untyped]) -> DBCluster

data/sig/types.rbs

@@ -443,6 +443,7 @@ module Aws::RDS
       attr_accessor tag_specifications: ::Array[Types::TagSpecification]
       attr_accessor master_user_authentication_type: ("password" | "iam-db-auth")
       attr_accessor with_express_configuration: bool
+      attr_accessor associated_roles: ::Array[Types::DBClusterAssociatedRole]
       attr_accessor source_region: ::String
       SENSITIVE: [:master_user_password, :pre_signed_url]
     end
@@ -902,6 +903,12 @@ module Aws::RDS
     class DBClusterAlreadyExistsFault < Aws::EmptyStructure
     end
 
+    class DBClusterAssociatedRole
+      attr_accessor role_arn: ::String
+      attr_accessor feature_name: ::String
+      SENSITIVE: []
+    end
+
     class DBClusterAutomatedBackup
       attr_accessor engine: ::String
       attr_accessor vpc_id: ::String
@@ -3832,6 +3839,7 @@ module Aws::RDS
       attr_accessor master_user_secret_kms_key_id: ::String
       attr_accessor engine_lifecycle_support: ::String
       attr_accessor tag_specifications: ::Array[Types::TagSpecification]
+      attr_accessor associated_roles: ::Array[Types::DBClusterAssociatedRole]
       SENSITIVE: [:master_user_password]
     end
 
@@ -3881,6 +3889,7 @@ module Aws::RDS
       attr_accessor tag_specifications: ::Array[Types::TagSpecification]
       attr_accessor enable_vpc_networking: bool
       attr_accessor enable_internet_access_gateway: bool
+      attr_accessor associated_roles: ::Array[Types::DBClusterAssociatedRole]
       SENSITIVE: []
     end
 
@@ -3930,6 +3939,7 @@ module Aws::RDS
       attr_accessor tag_specifications: ::Array[Types::TagSpecification]
       attr_accessor enable_vpc_networking: bool
       attr_accessor enable_internet_access_gateway: bool
+      attr_accessor associated_roles: ::Array[Types::DBClusterAssociatedRole]
       SENSITIVE: []
     end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-rds
 version: !ruby/object:Gem::Version
-  version: 1.318.0
+  version: 1.319.0
 platform: ruby
 authors:
 - Amazon Web Services