aws-sdk-redshift 1.98.0 → 1.99.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: e75583d8a7a0c4f47f81e592fa4cea3210caf3d9b75e38de7dcd53d6decb140d
-  data.tar.gz: 6ca4969e38b092ebccea7b50f534250a41329af599bc9996ad48a0e1cf8c0b5a
+  metadata.gz: ecebc756b8a58ea588494fe842ec7c35a83844044cc876c3e6f5b71148cfe3e1
+  data.tar.gz: f1cc1ee1262b1104ab3e0a360315ca9211ea1ea56e6446b24518b033d24ec766
 SHA512:
-  metadata.gz: a9e1e3a98f47eb29b72bd6a5698f736515ea99e25be0765b3f6468cec5adcea9be18adc7242421d8d37bc21b363ebc2bba121fa34a58981138c39f8aff03c327
-  data.tar.gz: 56a56d7f629b535b194332b6f9f85f0abf36619cf3da65d8276c18fa6c07ca759a8ec304c924ebc388ada24c1e25225cf210a5218f118ea24127658efe3846fa
+  metadata.gz: 5554355f76cc93a2d160bf5ec29e4334460147e2d1975af9d4f74c865d2d2e8171dd1b394cbb6d5549e8321952595c99a56bd68f6b5cdb3017b43fca201d4c83
+  data.tar.gz: 141d9810c4170d0678525e84908af65cfea578686e091a1ae9528a83257d033d9158b98f46fd7d063799e2476a4279320628585d5fa677e3834b5c0b7baec87e

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.99.0 (2023-10-16)
+------------------
+
+* Feature - Added support for managing credentials of provisioned cluster admin using AWS Secrets Manager.
+
 1.98.0 (2023-09-27)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.98.0
+1.99.0

data/lib/aws-sdk-redshift/client.rb

@@ -820,6 +820,8 @@ module Aws::Redshift
     #   resp.snapshot.manual_snapshot_retention_period #=> Integer
     #   resp.snapshot.manual_snapshot_remaining_days #=> Integer
     #   resp.snapshot.snapshot_retention_start_time #=> Time
+    #   resp.snapshot.master_password_secret_arn #=> String
+    #   resp.snapshot.master_password_secret_kms_key_id #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/redshift-2012-12-01/AuthorizeSnapshotAccess AWS API Documentation
     #
@@ -1103,6 +1105,8 @@ module Aws::Redshift
     #   resp.snapshot.manual_snapshot_retention_period #=> Integer
     #   resp.snapshot.manual_snapshot_remaining_days #=> Integer
     #   resp.snapshot.snapshot_retention_start_time #=> Time
+    #   resp.snapshot.master_password_secret_arn #=> String
+    #   resp.snapshot.master_password_secret_kms_key_id #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/redshift-2012-12-01/CopyClusterSnapshot AWS API Documentation
     #
@@ -1255,10 +1259,13 @@ module Aws::Redshift
     #
     #   [1]: https://docs.aws.amazon.com/redshift/latest/dg/r_pg_keywords.html
     #
-    # @option params [required, String] :master_user_password
+    # @option params [String] :master_user_password
     #   The password associated with the admin user account for the cluster
     #   that is being created.
     #
+    #   You can't use `MasterUserPassword` if `ManageMasterPassword` is
+    #   `true`.
+    #
     #   Constraints:
     #
     #   * Must be between 8 and 64 characters in length.
@@ -1510,6 +1517,18 @@ module Aws::Redshift
     #   A flag that specifies whether to load sample data once the cluster is
     #   created.
     #
+    # @option params [Boolean] :manage_master_password
+    #   If `true`, Amazon Redshift uses Secrets Manager to manage this
+    #   cluster's admin credentials. You can't use `MasterUserPassword` if
+    #   `ManageMasterPassword` is true. If `ManageMasterPassword` is false or
+    #   not set, Amazon Redshift uses `MasterUserPassword` for the admin user
+    #   account's password.
+    #
+    # @option params [String] :master_password_secret_kms_key_id
+    #   The ID of the Key Management Service (KMS) key used to encrypt and
+    #   store the cluster's admin credentials secret. You can only use this
+    #   parameter if `ManageMasterPassword` is true.
+    #
     # @return [Types::CreateClusterResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::CreateClusterResult#cluster #cluster} => Types::Cluster
@@ -1522,7 +1541,7 @@ module Aws::Redshift
     #     cluster_type: "String",
     #     node_type: "String", # required
     #     master_username: "String", # required
-    #     master_user_password: "String", # required
+    #     master_user_password: "SensitiveString",
     #     cluster_security_groups: ["String"],
     #     vpc_security_group_ids: ["String"],
     #     cluster_subnet_group_name: "String",
@@ -1556,6 +1575,8 @@ module Aws::Redshift
     #     aqua_configuration_status: "enabled", # accepts enabled, disabled, auto
     #     default_iam_role_arn: "String",
     #     load_sample_data: "String",
+    #     manage_master_password: false,
+    #     master_password_secret_kms_key_id: "String",
     #   })
     #
     # @example Response structure
@@ -1681,6 +1702,8 @@ module Aws::Redshift
     #   resp.cluster.custom_domain_name #=> String
     #   resp.cluster.custom_domain_certificate_arn #=> String
     #   resp.cluster.custom_domain_certificate_expiry_date #=> Time
+    #   resp.cluster.master_password_secret_arn #=> String
+    #   resp.cluster.master_password_secret_kms_key_id #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/redshift-2012-12-01/CreateCluster AWS API Documentation
     #
@@ -1960,6 +1983,8 @@ module Aws::Redshift
     #   resp.snapshot.manual_snapshot_retention_period #=> Integer
     #   resp.snapshot.manual_snapshot_remaining_days #=> Integer
     #   resp.snapshot.snapshot_retention_start_time #=> Time
+    #   resp.snapshot.master_password_secret_arn #=> String
+    #   resp.snapshot.master_password_secret_kms_key_id #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/redshift-2012-12-01/CreateClusterSnapshot AWS API Documentation
     #
@@ -3109,6 +3134,8 @@ module Aws::Redshift
     #   resp.cluster.custom_domain_name #=> String
     #   resp.cluster.custom_domain_certificate_arn #=> String
     #   resp.cluster.custom_domain_certificate_expiry_date #=> Time
+    #   resp.cluster.master_password_secret_arn #=> String
+    #   resp.cluster.master_password_secret_kms_key_id #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/redshift-2012-12-01/DeleteCluster AWS API Documentation
     #
@@ -3264,6 +3291,8 @@ module Aws::Redshift
     #   resp.snapshot.manual_snapshot_retention_period #=> Integer
     #   resp.snapshot.manual_snapshot_remaining_days #=> Integer
     #   resp.snapshot.snapshot_retention_start_time #=> Time
+    #   resp.snapshot.master_password_secret_arn #=> String
+    #   resp.snapshot.master_password_secret_kms_key_id #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/redshift-2012-12-01/DeleteClusterSnapshot AWS API Documentation
     #
@@ -4244,6 +4273,8 @@ module Aws::Redshift
     #   resp.snapshots[0].manual_snapshot_retention_period #=> Integer
     #   resp.snapshots[0].manual_snapshot_remaining_days #=> Integer
     #   resp.snapshots[0].snapshot_retention_start_time #=> Time
+    #   resp.snapshots[0].master_password_secret_arn #=> String
+    #   resp.snapshots[0].master_password_secret_kms_key_id #=> String
     #
     #
     # The following waiters are defined for this operation (see {Client#wait_until} for detailed usage):
@@ -4702,6 +4733,8 @@ module Aws::Redshift
     #   resp.clusters[0].custom_domain_name #=> String
     #   resp.clusters[0].custom_domain_certificate_arn #=> String
     #   resp.clusters[0].custom_domain_certificate_expiry_date #=> Time
+    #   resp.clusters[0].master_password_secret_arn #=> String
+    #   resp.clusters[0].master_password_secret_kms_key_id #=> String
     #
     #
     # The following waiters are defined for this operation (see {Client#wait_until} for detailed usage):
@@ -4719,7 +4752,7 @@ module Aws::Redshift
       req.send_request(options)
     end
 
-    # Contains information for custom domain associations for a cluster.
+    # Contains information about custom domain associations for a cluster.
     #
     # @option params [String] :custom_domain_name
     #   The custom domain name for the custom domain association.
@@ -7012,6 +7045,8 @@ module Aws::Redshift
     #   resp.cluster.custom_domain_name #=> String
     #   resp.cluster.custom_domain_certificate_arn #=> String
     #   resp.cluster.custom_domain_certificate_expiry_date #=> Time
+    #   resp.cluster.master_password_secret_arn #=> String
+    #   resp.cluster.master_password_secret_kms_key_id #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/redshift-2012-12-01/DisableSnapshotCopy AWS API Documentation
     #
@@ -7349,6 +7384,8 @@ module Aws::Redshift
     #   resp.cluster.custom_domain_name #=> String
     #   resp.cluster.custom_domain_certificate_arn #=> String
     #   resp.cluster.custom_domain_certificate_expiry_date #=> Time
+    #   resp.cluster.master_password_secret_arn #=> String
+    #   resp.cluster.master_password_secret_kms_key_id #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/redshift-2012-12-01/EnableSnapshotCopy AWS API Documentation
     #
@@ -7902,6 +7939,9 @@ module Aws::Redshift
     #   element exists in the `PendingModifiedValues` element of the operation
     #   response.
     #
+    #   You can't use `MasterUserPassword` if `ManageMasterPassword` is
+    #   `true`.
+    #
     #   <note markdown="1"> Operations never return the password, so this operation provides a way
     #   to regain access to the admin user account for a cluster if the
     #   password is lost.
@@ -8091,6 +8131,18 @@ module Aws::Redshift
     # @option params [Integer] :port
     #   The option to change the port of an Amazon Redshift cluster.
     #
+    # @option params [Boolean] :manage_master_password
+    #   If `true`, Amazon Redshift uses Secrets Manager to manage this
+    #   cluster's admin credentials. You can't use `MasterUserPassword` if
+    #   `ManageMasterPassword` is true. If `ManageMasterPassword` is false or
+    #   not set, Amazon Redshift uses `MasterUserPassword` for the admin user
+    #   account's password.
+    #
+    # @option params [String] :master_password_secret_kms_key_id
+    #   The ID of the Key Management Service (KMS) key used to encrypt and
+    #   store the cluster's admin credentials secret. You can only use this
+    #   parameter if `ManageMasterPassword` is true.
+    #
     # @return [Types::ModifyClusterResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::ModifyClusterResult#cluster #cluster} => Types::Cluster
@@ -8104,7 +8156,7 @@ module Aws::Redshift
     #     number_of_nodes: 1,
     #     cluster_security_groups: ["String"],
     #     vpc_security_group_ids: ["String"],
-    #     master_user_password: "String",
+    #     master_user_password: "SensitiveString",
     #     cluster_parameter_group_name: "String",
     #     automated_snapshot_retention_period: 1,
     #     manual_snapshot_retention_period: 1,
@@ -8123,6 +8175,8 @@ module Aws::Redshift
     #     availability_zone_relocation: false,
     #     availability_zone: "String",
     #     port: 1,
+    #     manage_master_password: false,
+    #     master_password_secret_kms_key_id: "String",
     #   })
     #
     # @example Response structure
@@ -8248,6 +8302,8 @@ module Aws::Redshift
     #   resp.cluster.custom_domain_name #=> String
     #   resp.cluster.custom_domain_certificate_arn #=> String
     #   resp.cluster.custom_domain_certificate_expiry_date #=> Time
+    #   resp.cluster.master_password_secret_arn #=> String
+    #   resp.cluster.master_password_secret_kms_key_id #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/redshift-2012-12-01/ModifyCluster AWS API Documentation
     #
@@ -8405,6 +8461,8 @@ module Aws::Redshift
     #   resp.cluster.custom_domain_name #=> String
     #   resp.cluster.custom_domain_certificate_arn #=> String
     #   resp.cluster.custom_domain_certificate_expiry_date #=> Time
+    #   resp.cluster.master_password_secret_arn #=> String
+    #   resp.cluster.master_password_secret_kms_key_id #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/redshift-2012-12-01/ModifyClusterDbRevision AWS API Documentation
     #
@@ -8578,6 +8636,8 @@ module Aws::Redshift
     #   resp.cluster.custom_domain_name #=> String
     #   resp.cluster.custom_domain_certificate_arn #=> String
     #   resp.cluster.custom_domain_certificate_expiry_date #=> Time
+    #   resp.cluster.master_password_secret_arn #=> String
+    #   resp.cluster.master_password_secret_kms_key_id #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/redshift-2012-12-01/ModifyClusterIamRoles AWS API Documentation
     #
@@ -8751,6 +8811,8 @@ module Aws::Redshift
     #   resp.cluster.custom_domain_name #=> String
     #   resp.cluster.custom_domain_certificate_arn #=> String
     #   resp.cluster.custom_domain_certificate_expiry_date #=> Time
+    #   resp.cluster.master_password_secret_arn #=> String
+    #   resp.cluster.master_password_secret_kms_key_id #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/redshift-2012-12-01/ModifyClusterMaintenance AWS API Documentation
     #
@@ -8898,6 +8960,8 @@ module Aws::Redshift
     #   resp.snapshot.manual_snapshot_retention_period #=> Integer
     #   resp.snapshot.manual_snapshot_remaining_days #=> Integer
     #   resp.snapshot.snapshot_retention_start_time #=> Time
+    #   resp.snapshot.master_password_secret_arn #=> String
+    #   resp.snapshot.master_password_secret_kms_key_id #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/redshift-2012-12-01/ModifyClusterSnapshot AWS API Documentation
     #
@@ -9472,6 +9536,8 @@ module Aws::Redshift
     #   resp.cluster.custom_domain_name #=> String
     #   resp.cluster.custom_domain_certificate_arn #=> String
     #   resp.cluster.custom_domain_certificate_expiry_date #=> Time
+    #   resp.cluster.master_password_secret_arn #=> String
+    #   resp.cluster.master_password_secret_kms_key_id #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/redshift-2012-12-01/ModifySnapshotCopyRetentionPeriod AWS API Documentation
     #
@@ -9728,6 +9794,8 @@ module Aws::Redshift
     #   resp.cluster.custom_domain_name #=> String
     #   resp.cluster.custom_domain_certificate_arn #=> String
     #   resp.cluster.custom_domain_certificate_expiry_date #=> Time
+    #   resp.cluster.master_password_secret_arn #=> String
+    #   resp.cluster.master_password_secret_kms_key_id #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/redshift-2012-12-01/PauseCluster AWS API Documentation
     #
@@ -9947,6 +10015,8 @@ module Aws::Redshift
     #   resp.cluster.custom_domain_name #=> String
     #   resp.cluster.custom_domain_certificate_arn #=> String
     #   resp.cluster.custom_domain_certificate_expiry_date #=> Time
+    #   resp.cluster.master_password_secret_arn #=> String
+    #   resp.cluster.master_password_secret_kms_key_id #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/redshift-2012-12-01/RebootCluster AWS API Documentation
     #
@@ -10254,6 +10324,8 @@ module Aws::Redshift
     #   resp.cluster.custom_domain_name #=> String
     #   resp.cluster.custom_domain_certificate_arn #=> String
     #   resp.cluster.custom_domain_certificate_expiry_date #=> Time
+    #   resp.cluster.master_password_secret_arn #=> String
+    #   resp.cluster.master_password_secret_kms_key_id #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/redshift-2012-12-01/ResizeCluster AWS API Documentation
     #
@@ -10545,6 +10617,17 @@ module Aws::Redshift
     #   encrypted with Key Management Service (KMS) and a customer managed
     #   key.
     #
+    # @option params [Boolean] :manage_master_password
+    #   If `true`, Amazon Redshift uses Secrets Manager to manage the restored
+    #   cluster's admin credentials. If `ManageMasterPassword` is false or
+    #   not set, Amazon Redshift uses the admin credentials the cluster had at
+    #   the time the snapshot was taken.
+    #
+    # @option params [String] :master_password_secret_kms_key_id
+    #   The ID of the Key Management Service (KMS) key used to encrypt and
+    #   store the cluster's admin credentials secret. You can only use this
+    #   parameter if `ManageMasterPassword` is true.
+    #
     # @return [Types::RestoreFromClusterSnapshotResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::RestoreFromClusterSnapshotResult#cluster #cluster} => Types::Cluster
@@ -10585,6 +10668,8 @@ module Aws::Redshift
     #     reserved_node_id: "String",
     #     target_reserved_node_offering_id: "String",
     #     encrypted: false,
+    #     manage_master_password: false,
+    #     master_password_secret_kms_key_id: "String",
     #   })
     #
     # @example Response structure
@@ -10710,6 +10795,8 @@ module Aws::Redshift
     #   resp.cluster.custom_domain_name #=> String
     #   resp.cluster.custom_domain_certificate_arn #=> String
     #   resp.cluster.custom_domain_certificate_expiry_date #=> Time
+    #   resp.cluster.master_password_secret_arn #=> String
+    #   resp.cluster.master_password_secret_kms_key_id #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/redshift-2012-12-01/RestoreFromClusterSnapshot AWS API Documentation
     #
@@ -10958,6 +11045,8 @@ module Aws::Redshift
     #   resp.cluster.custom_domain_name #=> String
     #   resp.cluster.custom_domain_certificate_arn #=> String
     #   resp.cluster.custom_domain_certificate_expiry_date #=> Time
+    #   resp.cluster.master_password_secret_arn #=> String
+    #   resp.cluster.master_password_secret_kms_key_id #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/redshift-2012-12-01/ResumeCluster AWS API Documentation
     #
@@ -11188,6 +11277,8 @@ module Aws::Redshift
     #   resp.snapshot.manual_snapshot_retention_period #=> Integer
     #   resp.snapshot.manual_snapshot_remaining_days #=> Integer
     #   resp.snapshot.snapshot_retention_start_time #=> Time
+    #   resp.snapshot.master_password_secret_arn #=> String
+    #   resp.snapshot.master_password_secret_kms_key_id #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/redshift-2012-12-01/RevokeSnapshotAccess AWS API Documentation
     #
@@ -11340,6 +11431,8 @@ module Aws::Redshift
     #   resp.cluster.custom_domain_name #=> String
     #   resp.cluster.custom_domain_certificate_arn #=> String
     #   resp.cluster.custom_domain_certificate_expiry_date #=> Time
+    #   resp.cluster.master_password_secret_arn #=> String
+    #   resp.cluster.master_password_secret_kms_key_id #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/redshift-2012-12-01/RotateEncryptionKey AWS API Documentation
     #
@@ -11415,7 +11508,7 @@ module Aws::Redshift
         params: params,
         config: config)
       context[:gem_name] = 'aws-sdk-redshift'
-      context[:gem_version] = '1.98.0'
+      context[:gem_version] = '1.99.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-redshift/client_api.rb

@@ -749,6 +749,8 @@ module Aws::Redshift
     Cluster.add_member(:custom_domain_name, Shapes::ShapeRef.new(shape: String, location_name: "CustomDomainName"))
     Cluster.add_member(:custom_domain_certificate_arn, Shapes::ShapeRef.new(shape: String, location_name: "CustomDomainCertificateArn"))
     Cluster.add_member(:custom_domain_certificate_expiry_date, Shapes::ShapeRef.new(shape: TStamp, location_name: "CustomDomainCertificateExpiryDate"))
+    Cluster.add_member(:master_password_secret_arn, Shapes::ShapeRef.new(shape: String, location_name: "MasterPasswordSecretArn"))
+    Cluster.add_member(:master_password_secret_kms_key_id, Shapes::ShapeRef.new(shape: String, location_name: "MasterPasswordSecretKmsKeyId"))
     Cluster.struct_class = Types::Cluster
 
     ClusterAlreadyExistsFault.struct_class = Types::ClusterAlreadyExistsFault
@@ -939,7 +941,7 @@ module Aws::Redshift
     CreateClusterMessage.add_member(:cluster_type, Shapes::ShapeRef.new(shape: String, location_name: "ClusterType"))
     CreateClusterMessage.add_member(:node_type, Shapes::ShapeRef.new(shape: String, required: true, location_name: "NodeType"))
     CreateClusterMessage.add_member(:master_username, Shapes::ShapeRef.new(shape: String, required: true, location_name: "MasterUsername"))
-    CreateClusterMessage.add_member(:master_user_password, Shapes::ShapeRef.new(shape: String, required: true, location_name: "MasterUserPassword"))
+    CreateClusterMessage.add_member(:master_user_password, Shapes::ShapeRef.new(shape: SensitiveString, location_name: "MasterUserPassword"))
     CreateClusterMessage.add_member(:cluster_security_groups, Shapes::ShapeRef.new(shape: ClusterSecurityGroupNameList, location_name: "ClusterSecurityGroups"))
     CreateClusterMessage.add_member(:vpc_security_group_ids, Shapes::ShapeRef.new(shape: VpcSecurityGroupIdList, location_name: "VpcSecurityGroupIds"))
     CreateClusterMessage.add_member(:cluster_subnet_group_name, Shapes::ShapeRef.new(shape: String, location_name: "ClusterSubnetGroupName"))
@@ -968,6 +970,8 @@ module Aws::Redshift
     CreateClusterMessage.add_member(:aqua_configuration_status, Shapes::ShapeRef.new(shape: AquaConfigurationStatus, location_name: "AquaConfigurationStatus"))
     CreateClusterMessage.add_member(:default_iam_role_arn, Shapes::ShapeRef.new(shape: String, location_name: "DefaultIamRoleArn"))
     CreateClusterMessage.add_member(:load_sample_data, Shapes::ShapeRef.new(shape: String, location_name: "LoadSampleData"))
+    CreateClusterMessage.add_member(:manage_master_password, Shapes::ShapeRef.new(shape: BooleanOptional, location_name: "ManageMasterPassword"))
+    CreateClusterMessage.add_member(:master_password_secret_kms_key_id, Shapes::ShapeRef.new(shape: String, location_name: "MasterPasswordSecretKmsKeyId"))
     CreateClusterMessage.struct_class = Types::CreateClusterMessage
 
     CreateClusterParameterGroupMessage.add_member(:parameter_group_name, Shapes::ShapeRef.new(shape: String, required: true, location_name: "ParameterGroupName"))
@@ -1870,7 +1874,7 @@ module Aws::Redshift
     ModifyClusterMessage.add_member(:number_of_nodes, Shapes::ShapeRef.new(shape: IntegerOptional, location_name: "NumberOfNodes"))
     ModifyClusterMessage.add_member(:cluster_security_groups, Shapes::ShapeRef.new(shape: ClusterSecurityGroupNameList, location_name: "ClusterSecurityGroups"))
     ModifyClusterMessage.add_member(:vpc_security_group_ids, Shapes::ShapeRef.new(shape: VpcSecurityGroupIdList, location_name: "VpcSecurityGroupIds"))
-    ModifyClusterMessage.add_member(:master_user_password, Shapes::ShapeRef.new(shape: String, location_name: "MasterUserPassword"))
+    ModifyClusterMessage.add_member(:master_user_password, Shapes::ShapeRef.new(shape: SensitiveString, location_name: "MasterUserPassword"))
     ModifyClusterMessage.add_member(:cluster_parameter_group_name, Shapes::ShapeRef.new(shape: String, location_name: "ClusterParameterGroupName"))
     ModifyClusterMessage.add_member(:automated_snapshot_retention_period, Shapes::ShapeRef.new(shape: IntegerOptional, location_name: "AutomatedSnapshotRetentionPeriod"))
     ModifyClusterMessage.add_member(:manual_snapshot_retention_period, Shapes::ShapeRef.new(shape: IntegerOptional, location_name: "ManualSnapshotRetentionPeriod"))
@@ -1889,6 +1893,8 @@ module Aws::Redshift
     ModifyClusterMessage.add_member(:availability_zone_relocation, Shapes::ShapeRef.new(shape: BooleanOptional, location_name: "AvailabilityZoneRelocation"))
     ModifyClusterMessage.add_member(:availability_zone, Shapes::ShapeRef.new(shape: String, location_name: "AvailabilityZone"))
     ModifyClusterMessage.add_member(:port, Shapes::ShapeRef.new(shape: IntegerOptional, location_name: "Port"))
+    ModifyClusterMessage.add_member(:manage_master_password, Shapes::ShapeRef.new(shape: BooleanOptional, location_name: "ManageMasterPassword"))
+    ModifyClusterMessage.add_member(:master_password_secret_kms_key_id, Shapes::ShapeRef.new(shape: String, location_name: "MasterPasswordSecretKmsKeyId"))
     ModifyClusterMessage.struct_class = Types::ModifyClusterMessage
 
     ModifyClusterParameterGroupMessage.add_member(:parameter_group_name, Shapes::ShapeRef.new(shape: String, required: true, location_name: "ParameterGroupName"))
@@ -2061,7 +2067,7 @@ module Aws::Redshift
 
     PendingActionsList.member = Shapes::ShapeRef.new(shape: String)
 
-    PendingModifiedValues.add_member(:master_user_password, Shapes::ShapeRef.new(shape: String, location_name: "MasterUserPassword"))
+    PendingModifiedValues.add_member(:master_user_password, Shapes::ShapeRef.new(shape: SensitiveString, location_name: "MasterUserPassword"))
     PendingModifiedValues.add_member(:node_type, Shapes::ShapeRef.new(shape: String, location_name: "NodeType"))
     PendingModifiedValues.add_member(:number_of_nodes, Shapes::ShapeRef.new(shape: IntegerOptional, location_name: "NumberOfNodes"))
     PendingModifiedValues.add_member(:cluster_type, Shapes::ShapeRef.new(shape: String, location_name: "ClusterType"))
@@ -2244,6 +2250,8 @@ module Aws::Redshift
     RestoreFromClusterSnapshotMessage.add_member(:reserved_node_id, Shapes::ShapeRef.new(shape: String, location_name: "ReservedNodeId"))
     RestoreFromClusterSnapshotMessage.add_member(:target_reserved_node_offering_id, Shapes::ShapeRef.new(shape: String, location_name: "TargetReservedNodeOfferingId"))
     RestoreFromClusterSnapshotMessage.add_member(:encrypted, Shapes::ShapeRef.new(shape: BooleanOptional, location_name: "Encrypted"))
+    RestoreFromClusterSnapshotMessage.add_member(:manage_master_password, Shapes::ShapeRef.new(shape: BooleanOptional, location_name: "ManageMasterPassword"))
+    RestoreFromClusterSnapshotMessage.add_member(:master_password_secret_kms_key_id, Shapes::ShapeRef.new(shape: String, location_name: "MasterPasswordSecretKmsKeyId"))
     RestoreFromClusterSnapshotMessage.struct_class = Types::RestoreFromClusterSnapshotMessage
 
     RestoreFromClusterSnapshotResult.add_member(:cluster, Shapes::ShapeRef.new(shape: Cluster, location_name: "Cluster"))
@@ -2398,6 +2406,8 @@ module Aws::Redshift
     Snapshot.add_member(:manual_snapshot_retention_period, Shapes::ShapeRef.new(shape: IntegerOptional, location_name: "ManualSnapshotRetentionPeriod"))
     Snapshot.add_member(:manual_snapshot_remaining_days, Shapes::ShapeRef.new(shape: IntegerOptional, location_name: "ManualSnapshotRemainingDays"))
     Snapshot.add_member(:snapshot_retention_start_time, Shapes::ShapeRef.new(shape: TStamp, location_name: "SnapshotRetentionStartTime"))
+    Snapshot.add_member(:master_password_secret_arn, Shapes::ShapeRef.new(shape: String, location_name: "MasterPasswordSecretArn"))
+    Snapshot.add_member(:master_password_secret_kms_key_id, Shapes::ShapeRef.new(shape: String, location_name: "MasterPasswordSecretKmsKeyId"))
     Snapshot.struct_class = Types::Snapshot
 
     SnapshotCopyAlreadyDisabledFault.struct_class = Types::SnapshotCopyAlreadyDisabledFault

data/lib/aws-sdk-redshift/types.rb

@@ -888,6 +888,16 @@ module Aws::Redshift
     #   domain name.
     #   @return [Time]
     #
+    # @!attribute [rw] master_password_secret_arn
+    #   The Amazon Resource Name (ARN) for the cluster's admin user
+    #   credentials secret.
+    #   @return [String]
+    #
+    # @!attribute [rw] master_password_secret_kms_key_id
+    #   The ID of the Key Management Service (KMS) key used to encrypt and
+    #   store the cluster's admin credentials secret.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/redshift-2012-12-01/Cluster AWS API Documentation
     #
     class Cluster < Struct.new(
@@ -945,7 +955,9 @@ module Aws::Redshift
       :reserved_node_exchange_status,
       :custom_domain_name,
       :custom_domain_certificate_arn,
-      :custom_domain_certificate_expiry_date)
+      :custom_domain_certificate_expiry_date,
+      :master_password_secret_arn,
+      :master_password_secret_kms_key_id)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -1932,6 +1944,9 @@ module Aws::Redshift
     #   The password associated with the admin user account for the cluster
     #   that is being created.
     #
+    #   You can't use `MasterUserPassword` if `ManageMasterPassword` is
+    #   `true`.
+    #
     #   Constraints:
     #
     #   * Must be between 8 and 64 characters in length.
@@ -2216,6 +2231,20 @@ module Aws::Redshift
     #   is created.
     #   @return [String]
     #
+    # @!attribute [rw] manage_master_password
+    #   If `true`, Amazon Redshift uses Secrets Manager to manage this
+    #   cluster's admin credentials. You can't use `MasterUserPassword` if
+    #   `ManageMasterPassword` is true. If `ManageMasterPassword` is false
+    #   or not set, Amazon Redshift uses `MasterUserPassword` for the admin
+    #   user account's password.
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] master_password_secret_kms_key_id
+    #   The ID of the Key Management Service (KMS) key used to encrypt and
+    #   store the cluster's admin credentials secret. You can only use this
+    #   parameter if `ManageMasterPassword` is true.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/redshift-2012-12-01/CreateClusterMessage AWS API Documentation
     #
     class CreateClusterMessage < Struct.new(
@@ -2252,8 +2281,10 @@ module Aws::Redshift
       :availability_zone_relocation,
       :aqua_configuration_status,
       :default_iam_role_arn,
-      :load_sample_data)
-      SENSITIVE = []
+      :load_sample_data,
+      :manage_master_password,
+      :master_password_secret_kms_key_id)
+      SENSITIVE = [:master_user_password]
       include Aws::Structure
     end
 
@@ -7364,6 +7395,9 @@ module Aws::Redshift
     #   element exists in the `PendingModifiedValues` element of the
     #   operation response.
     #
+    #   You can't use `MasterUserPassword` if `ManageMasterPassword` is
+    #   `true`.
+    #
     #   <note markdown="1"> Operations never return the password, so this operation provides a
     #   way to regain access to the admin user account for a cluster if the
     #   password is lost.
@@ -7575,6 +7609,20 @@ module Aws::Redshift
     #   The option to change the port of an Amazon Redshift cluster.
     #   @return [Integer]
     #
+    # @!attribute [rw] manage_master_password
+    #   If `true`, Amazon Redshift uses Secrets Manager to manage this
+    #   cluster's admin credentials. You can't use `MasterUserPassword` if
+    #   `ManageMasterPassword` is true. If `ManageMasterPassword` is false
+    #   or not set, Amazon Redshift uses `MasterUserPassword` for the admin
+    #   user account's password.
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] master_password_secret_kms_key_id
+    #   The ID of the Key Management Service (KMS) key used to encrypt and
+    #   store the cluster's admin credentials secret. You can only use this
+    #   parameter if `ManageMasterPassword` is true.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/redshift-2012-12-01/ModifyClusterMessage AWS API Documentation
     #
     class ModifyClusterMessage < Struct.new(
@@ -7602,8 +7650,10 @@ module Aws::Redshift
       :kms_key_id,
       :availability_zone_relocation,
       :availability_zone,
-      :port)
-      SENSITIVE = []
+      :port,
+      :manage_master_password,
+      :master_password_secret_kms_key_id)
+      SENSITIVE = [:master_user_password]
       include Aws::Structure
     end
 
@@ -8510,7 +8560,7 @@ module Aws::Redshift
       :enhanced_vpc_routing,
       :maintenance_track_name,
       :encryption_type)
-      SENSITIVE = []
+      SENSITIVE = [:master_user_password]
       include Aws::Structure
     end
 
@@ -9467,6 +9517,19 @@ module Aws::Redshift
     #   key.
     #   @return [Boolean]
     #
+    # @!attribute [rw] manage_master_password
+    #   If `true`, Amazon Redshift uses Secrets Manager to manage the
+    #   restored cluster's admin credentials. If `ManageMasterPassword` is
+    #   false or not set, Amazon Redshift uses the admin credentials the
+    #   cluster had at the time the snapshot was taken.
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] master_password_secret_kms_key_id
+    #   The ID of the Key Management Service (KMS) key used to encrypt and
+    #   store the cluster's admin credentials secret. You can only use this
+    #   parameter if `ManageMasterPassword` is true.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/redshift-2012-12-01/RestoreFromClusterSnapshotMessage AWS API Documentation
     #
     class RestoreFromClusterSnapshotMessage < Struct.new(
@@ -9502,7 +9565,9 @@ module Aws::Redshift
       :default_iam_role_arn,
       :reserved_node_id,
       :target_reserved_node_offering_id,
-      :encrypted)
+      :encrypted,
+      :manage_master_password,
+      :master_password_secret_kms_key_id)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -10241,6 +10306,16 @@ module Aws::Redshift
     #   snapshot.
     #   @return [Time]
     #
+    # @!attribute [rw] master_password_secret_arn
+    #   The Amazon Resource Name (ARN) for the cluster's admin user
+    #   credentials secret.
+    #   @return [String]
+    #
+    # @!attribute [rw] master_password_secret_kms_key_id
+    #   The ID of the Key Management Service (KMS) key used to encrypt and
+    #   store the cluster's admin credentials secret.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/redshift-2012-12-01/Snapshot AWS API Documentation
     #
     class Snapshot < Struct.new(
@@ -10277,7 +10352,9 @@ module Aws::Redshift
       :maintenance_track_name,
       :manual_snapshot_retention_period,
       :manual_snapshot_remaining_days,
-      :snapshot_retention_start_time)
+      :snapshot_retention_start_time,
+      :master_password_secret_arn,
+      :master_password_secret_kms_key_id)
       SENSITIVE = []
       include Aws::Structure
     end

data/lib/aws-sdk-redshift.rb

@@ -53,6 +53,6 @@ require_relative 'aws-sdk-redshift/customizations'
 # @!group service
 module Aws::Redshift
 
-  GEM_VERSION = '1.98.0'
+  GEM_VERSION = '1.99.0'
 
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-redshift
 version: !ruby/object:Gem::Version
-  version: 1.98.0
+  version: 1.99.0
 platform: ruby
 authors:
 - Amazon Web Services
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2023-09-27 00:00:00.000000000 Z
+date: 2023-10-16 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-core