aws-sdk-redshift 1.149.0 → 1.150.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 6d9a3bec322e547f86e427ca18117b2cd921a7283b9f64f8d8a794de51bf4000
-  data.tar.gz: 0edfe906739fb8773b6b7aef1104402d07e023a4f60f051246f62a3a20e149b8
+  metadata.gz: 5c47bf47e63ca3d6cbc6c9cbe44e8b1fb4c6a14a4710e6a99feb69cc15a18925
+  data.tar.gz: 6f90b2e50a229c7dc1f63b7d4ba99ca78bef3414b2ac6d850ed57b1c93c08b68
 SHA512:
-  metadata.gz: 2302537dbe306a298e51273793300025d6f8e0aa36866b6aeeffe398c7303504c973cf96f17299372f73d8aa612befee55a3b3c384b03d015b7d88bd118588a6
-  data.tar.gz: 6149529551da00fbfe8184e707b5131d7d3f058731edcb9943f5d4112f8915f715823813a0795018f2d22c73a28c8e7976c566f3f9ffa77e8549865fe6e55fb2
+  metadata.gz: 41a8ecec751cd5263b64913f3b0f54ede5b9c827212cc5b9e9c06aada49cc58eb2f25507efbec76db55483732764bc72e9d90578d37af90c0ea469ffe59b3723
+  data.tar.gz: 6492e791f4b8d04d5195a7878ee293cab38484b047de0f17a466c17ec7def551a8f5b48b6d1cc4cb6944597a170b4312fefb97ac8d914296c504762be3da4ce9

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.150.0 (2025-11-12)
+------------------
+
+* Feature - Added GetIdentityCenterAuthToken API to retrieve encrypted authentication tokens for Identity Center integrated applications. This API enables programmatic access to secure Identity Center tokens with proper error handling and parameter validation across supported SDK languages.
+
 1.149.0 (2025-10-31)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.149.0
+1.150.0

data/lib/aws-sdk-redshift/client.rb

@@ -8587,6 +8587,70 @@ module Aws::Redshift
       req.send_request(options)
     end
 
+    # Generates an encrypted authentication token that propagates the
+    # caller's Amazon Web Services IAM Identity Center identity to Amazon
+    # Redshift clusters. This API extracts the Amazon Web Services IAM
+    # Identity Center identity from enhanced credentials and creates a
+    # secure token that Amazon Redshift drivers can use for authentication.
+    #
+    # The token is encrypted using Key Management Service (KMS) and can only
+    # be decrypted by the specified Amazon Redshift clusters. The token
+    # contains the caller's Amazon Web Services IAM Identity Center
+    # identity information and is valid for a limited time period.
+    #
+    # This API is exclusively for use with Amazon Web Services IAM Identity
+    # Center enhanced credentials. If the caller is not using enhanced
+    # credentials with embedded Amazon Web Services IAM Identity Center
+    # identity, the API will return an error.
+    #
+    # @option params [required, Array<String>] :cluster_ids
+    #   A list of cluster identifiers that the generated token can be used
+    #   with. The token will be scoped to only allow authentication to the
+    #   specified clusters.
+    #
+    #   Constraints:
+    #
+    #   * `ClusterIds` must contain at least 1 cluster identifier.
+    #
+    #   * `ClusterIds` can hold a maximum of 20 cluster identifiers.
+    #
+    #   * Cluster identifiers must be 1 to 63 characters in length.
+    #
+    #   * The characters accepted for cluster identifiers are the following:
+    #
+    #     * Alphanumeric characters
+    #
+    #     * Hyphens
+    #   * Cluster identifiers must start with a letter.
+    #
+    #   * Cluster identifiers can't end with a hyphen or contain two
+    #     consecutive hyphens.
+    #
+    # @return [Types::GetIdentityCenterAuthTokenResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::GetIdentityCenterAuthTokenResponse#token #token} => String
+    #   * {Types::GetIdentityCenterAuthTokenResponse#expiration_time #expiration_time} => Time
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.get_identity_center_auth_token({
+    #     cluster_ids: ["String"], # required
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.token #=> String
+    #   resp.expiration_time #=> Time
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/redshift-2012-12-01/GetIdentityCenterAuthToken AWS API Documentation
+    #
+    # @overload get_identity_center_auth_token(params = {})
+    # @param [Hash] params ({})
+    def get_identity_center_auth_token(params = {}, options = {})
+      req = build_request(:get_identity_center_auth_token, params)
+      req.send_request(options)
+    end
+
     # Gets the configuration options for the reserved-node exchange. These
     # options include information about the source reserved node and target
     # reserved node offering. Details include the node type, the price, the
@@ -12998,7 +13062,7 @@ module Aws::Redshift
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-redshift'
-      context[:gem_version] = '1.149.0'
+      context[:gem_version] = '1.150.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-redshift/client_api.rb

@@ -79,6 +79,7 @@ module Aws::Redshift
     ClusterExtendedCredentials = Shapes::StructureShape.new(name: 'ClusterExtendedCredentials')
     ClusterIamRole = Shapes::StructureShape.new(name: 'ClusterIamRole')
     ClusterIamRoleList = Shapes::ListShape.new(name: 'ClusterIamRoleList')
+    ClusterIdentifierList = Shapes::ListShape.new(name: 'ClusterIdentifierList')
     ClusterList = Shapes::ListShape.new(name: 'ClusterList')
     ClusterNode = Shapes::StructureShape.new(name: 'ClusterNode')
     ClusterNodesList = Shapes::ListShape.new(name: 'ClusterNodesList')
@@ -302,6 +303,8 @@ module Aws::Redshift
     FailoverPrimaryComputeResult = Shapes::StructureShape.new(name: 'FailoverPrimaryComputeResult')
     GetClusterCredentialsMessage = Shapes::StructureShape.new(name: 'GetClusterCredentialsMessage')
     GetClusterCredentialsWithIAMMessage = Shapes::StructureShape.new(name: 'GetClusterCredentialsWithIAMMessage')
+    GetIdentityCenterAuthTokenRequest = Shapes::StructureShape.new(name: 'GetIdentityCenterAuthTokenRequest')
+    GetIdentityCenterAuthTokenResponse = Shapes::StructureShape.new(name: 'GetIdentityCenterAuthTokenResponse')
     GetReservedNodeExchangeConfigurationOptionsInputMessage = Shapes::StructureShape.new(name: 'GetReservedNodeExchangeConfigurationOptionsInputMessage')
     GetReservedNodeExchangeConfigurationOptionsOutputMessage = Shapes::StructureShape.new(name: 'GetReservedNodeExchangeConfigurationOptionsOutputMessage')
     GetReservedNodeExchangeOfferingsInputMessage = Shapes::StructureShape.new(name: 'GetReservedNodeExchangeOfferingsInputMessage')
@@ -487,6 +490,7 @@ module Aws::Redshift
     RedshiftIdcApplicationName = Shapes::StringShape.new(name: 'RedshiftIdcApplicationName')
     RedshiftIdcApplicationNotExistsFault = Shapes::StructureShape.new(name: 'RedshiftIdcApplicationNotExistsFault', error: {"code" => "RedshiftIdcApplicationNotExists", "httpStatusCode" => 404, "senderFault" => true})
     RedshiftIdcApplicationQuotaExceededFault = Shapes::StructureShape.new(name: 'RedshiftIdcApplicationQuotaExceededFault', error: {"code" => "RedshiftIdcApplicationQuotaExceeded", "httpStatusCode" => 400, "senderFault" => true})
+    RedshiftInvalidParameterFault = Shapes::StructureShape.new(name: 'RedshiftInvalidParameterFault', error: {"code" => "RedshiftInvalidParameter", "httpStatusCode" => 400, "senderFault" => true})
     ReferenceLink = Shapes::StructureShape.new(name: 'ReferenceLink')
     ReferenceLinkList = Shapes::ListShape.new(name: 'ReferenceLinkList')
     RegisterNamespaceInputMessage = Shapes::StructureShape.new(name: 'RegisterNamespaceInputMessage')
@@ -896,6 +900,8 @@ module Aws::Redshift
 
     ClusterIamRoleList.member = Shapes::ShapeRef.new(shape: ClusterIamRole, location_name: "ClusterIamRole")
 
+    ClusterIdentifierList.member = Shapes::ShapeRef.new(shape: String, location_name: "ClusterIdentifier")
+
     ClusterList.member = Shapes::ShapeRef.new(shape: Cluster, location_name: "Cluster")
 
     ClusterNode.add_member(:node_role, Shapes::ShapeRef.new(shape: String, location_name: "NodeRole"))
@@ -1862,6 +1868,13 @@ module Aws::Redshift
     GetClusterCredentialsWithIAMMessage.add_member(:custom_domain_name, Shapes::ShapeRef.new(shape: String, location_name: "CustomDomainName"))
     GetClusterCredentialsWithIAMMessage.struct_class = Types::GetClusterCredentialsWithIAMMessage
 
+    GetIdentityCenterAuthTokenRequest.add_member(:cluster_ids, Shapes::ShapeRef.new(shape: ClusterIdentifierList, required: true, location_name: "ClusterIds"))
+    GetIdentityCenterAuthTokenRequest.struct_class = Types::GetIdentityCenterAuthTokenRequest
+
+    GetIdentityCenterAuthTokenResponse.add_member(:token, Shapes::ShapeRef.new(shape: SensitiveString, location_name: "Token"))
+    GetIdentityCenterAuthTokenResponse.add_member(:expiration_time, Shapes::ShapeRef.new(shape: TStamp, location_name: "ExpirationTime"))
+    GetIdentityCenterAuthTokenResponse.struct_class = Types::GetIdentityCenterAuthTokenResponse
+
     GetReservedNodeExchangeConfigurationOptionsInputMessage.add_member(:action_type, Shapes::ShapeRef.new(shape: ReservedNodeExchangeActionType, required: true, location_name: "ActionType"))
     GetReservedNodeExchangeConfigurationOptionsInputMessage.add_member(:cluster_identifier, Shapes::ShapeRef.new(shape: String, location_name: "ClusterIdentifier"))
     GetReservedNodeExchangeConfigurationOptionsInputMessage.add_member(:snapshot_identifier, Shapes::ShapeRef.new(shape: String, location_name: "SnapshotIdentifier"))
@@ -2468,6 +2481,8 @@ module Aws::Redshift
 
     RedshiftIdcApplicationQuotaExceededFault.struct_class = Types::RedshiftIdcApplicationQuotaExceededFault
 
+    RedshiftInvalidParameterFault.struct_class = Types::RedshiftInvalidParameterFault
+
     ReferenceLink.add_member(:text, Shapes::ShapeRef.new(shape: String, location_name: "Text"))
     ReferenceLink.add_member(:link, Shapes::ShapeRef.new(shape: String, location_name: "Link"))
     ReferenceLink.struct_class = Types::ReferenceLink
@@ -4406,6 +4421,18 @@ module Aws::Redshift
         o.errors << Shapes::ShapeRef.new(shape: UnsupportedOperationFault)
       end)
 
+      api.add_operation(:get_identity_center_auth_token, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "GetIdentityCenterAuthToken"
+        o.http_method = "POST"
+        o.http_request_uri = "/"
+        o.input = Shapes::ShapeRef.new(shape: GetIdentityCenterAuthTokenRequest)
+        o.output = Shapes::ShapeRef.new(shape: GetIdentityCenterAuthTokenResponse)
+        o.errors << Shapes::ShapeRef.new(shape: ClusterNotFoundFault)
+        o.errors << Shapes::ShapeRef.new(shape: InvalidClusterStateFault)
+        o.errors << Shapes::ShapeRef.new(shape: UnsupportedOperationFault)
+        o.errors << Shapes::ShapeRef.new(shape: RedshiftInvalidParameterFault)
+      end)
+
       api.add_operation(:get_reserved_node_exchange_configuration_options, Seahorse::Model::Operation.new.tap do |o|
         o.name = "GetReservedNodeExchangeConfigurationOptions"
         o.http_method = "POST"

data/lib/aws-sdk-redshift/errors.rb

@@ -177,6 +177,8 @@ module Aws::Redshift
   #    * This error class is not used. `RedshiftIdcApplicationNotExists` is used during parsing instead.
   # * {RedshiftIdcApplicationQuotaExceededFault}
   #    * This error class is not used. `RedshiftIdcApplicationQuotaExceeded` is used during parsing instead.
+  # * {RedshiftInvalidParameterFault}
+  #    * This error class is not used. `RedshiftInvalidParameter` is used during parsing instead.
   # * {ReservedNodeAlreadyExistsFault}
   #    * This error class is not used. `ReservedNodeAlreadyExists` is used during parsing instead.
   # * {ReservedNodeAlreadyMigratedFault}
@@ -1349,6 +1351,18 @@ module Aws::Redshift
       end
     end
 
+    # @deprecated This error class is not used during parsing.
+    #   Please use `RedshiftInvalidParameter` instead.
+    class RedshiftInvalidParameterFault < ServiceError
+
+      # @param [Seahorse::Client::RequestContext] context
+      # @param [String] message
+      # @param [Aws::Redshift::Types::RedshiftInvalidParameterFault] data
+      def initialize(context, message, data = Aws::EmptyStructure.new)
+        super(context, message, data)
+      end
+    end
+
     # @deprecated This error class is not used during parsing.
     #   Please use `ReservedNodeAlreadyExists` instead.
     class ReservedNodeAlreadyExistsFault < ServiceError

data/lib/aws-sdk-redshift/types.rb

@@ -6961,6 +6961,66 @@ module Aws::Redshift
       include Aws::Structure
     end
 
+    # The request parameters for `GetIdentityCenterAuthToken`.
+    #
+    # @!attribute [rw] cluster_ids
+    #   A list of cluster identifiers that the generated token can be used
+    #   with. The token will be scoped to only allow authentication to the
+    #   specified clusters.
+    #
+    #   Constraints:
+    #
+    #   * `ClusterIds` must contain at least 1 cluster identifier.
+    #
+    #   * `ClusterIds` can hold a maximum of 20 cluster identifiers.
+    #
+    #   * Cluster identifiers must be 1 to 63 characters in length.
+    #
+    #   * The characters accepted for cluster identifiers are the following:
+    #
+    #     * Alphanumeric characters
+    #
+    #     * Hyphens
+    #   * Cluster identifiers must start with a letter.
+    #
+    #   * Cluster identifiers can't end with a hyphen or contain two
+    #     consecutive hyphens.
+    #   @return [Array<String>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/redshift-2012-12-01/GetIdentityCenterAuthTokenRequest AWS API Documentation
+    #
+    class GetIdentityCenterAuthTokenRequest < Struct.new(
+      :cluster_ids)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # The response from GetIdentityCenterAuthToken containing the encrypted
+    # authentication token and expiration time.
+    #
+    # @!attribute [rw] token
+    #   The encrypted authentication token containing the caller's Amazon
+    #   Web Services IAM Identity Center identity information. This token is
+    #   encrypted using Key Management Service and can only be decrypted by
+    #   the specified Amazon Redshift clusters. Use this token with Amazon
+    #   Redshift drivers to authenticate using your Amazon Web Services IAM
+    #   Identity Center identity.
+    #   @return [String]
+    #
+    # @!attribute [rw] expiration_time
+    #   The time (UTC) when the token expires. After this timestamp, the
+    #   token will no longer be valid for authentication.
+    #   @return [Time]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/redshift-2012-12-01/GetIdentityCenterAuthTokenResponse AWS API Documentation
+    #
+    class GetIdentityCenterAuthTokenResponse < Struct.new(
+      :token,
+      :expiration_time)
+      SENSITIVE = [:token]
+      include Aws::Structure
+    end
+
     # @!attribute [rw] action_type
     #   The action type of the reserved-node configuration. The action type
     #   can be an exchange initiated from either a snapshot or a resize.
@@ -9903,6 +9963,14 @@ module Aws::Redshift
     #
     class RedshiftIdcApplicationQuotaExceededFault < Aws::EmptyStructure; end
 
+    # The request contains one or more invalid parameters. This error occurs
+    # when required parameters are missing, parameter values are outside
+    # acceptable ranges, or parameter formats are incorrect.
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/redshift-2012-12-01/RedshiftInvalidParameterFault AWS API Documentation
+    #
+    class RedshiftInvalidParameterFault < Aws::EmptyStructure; end
+
     # A link to an Amazon Redshift Advisor reference for more information
     # about a recommendation.
     #

data/lib/aws-sdk-redshift.rb

@@ -55,7 +55,7 @@ module Aws::Redshift
   autoload :EndpointProvider, 'aws-sdk-redshift/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-redshift/endpoints'
 
-  GEM_VERSION = '1.149.0'
+  GEM_VERSION = '1.150.0'
 
 end
 

data/sig/client.rbs

@@ -1638,6 +1638,17 @@ module Aws
                                             ) -> _GetClusterCredentialsWithIAMResponseSuccess
                                           | (?Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _GetClusterCredentialsWithIAMResponseSuccess
 
+      interface _GetIdentityCenterAuthTokenResponseSuccess
+        include ::Seahorse::Client::_ResponseSuccess[Types::GetIdentityCenterAuthTokenResponse]
+        def token: () -> ::String
+        def expiration_time: () -> ::Time
+      end
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/Redshift/Client.html#get_identity_center_auth_token-instance_method
+      def get_identity_center_auth_token: (
+                                            cluster_ids: Array[::String]
+                                          ) -> _GetIdentityCenterAuthTokenResponseSuccess
+                                        | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _GetIdentityCenterAuthTokenResponseSuccess
+
       interface _GetReservedNodeExchangeConfigurationOptionsResponseSuccess
         include ::Seahorse::Client::_ResponseSuccess[Types::GetReservedNodeExchangeConfigurationOptionsOutputMessage]
         def marker: () -> ::String

data/sig/errors.rbs

@@ -209,6 +209,8 @@ module Aws
       end
       class RedshiftIdcApplicationQuotaExceededFault < ::Aws::Errors::ServiceError
       end
+      class RedshiftInvalidParameterFault < ::Aws::Errors::ServiceError
+      end
       class ReservedNodeAlreadyExistsFault < ::Aws::Errors::ServiceError
       end
       class ReservedNodeAlreadyMigratedFault < ::Aws::Errors::ServiceError

data/sig/types.rbs

@@ -1549,6 +1549,17 @@ module Aws::Redshift
       SENSITIVE: []
     end
 
+    class GetIdentityCenterAuthTokenRequest
+      attr_accessor cluster_ids: ::Array[::String]
+      SENSITIVE: []
+    end
+
+    class GetIdentityCenterAuthTokenResponse
+      attr_accessor token: ::String
+      attr_accessor expiration_time: ::Time
+      SENSITIVE: [:token]
+    end
+
     class GetReservedNodeExchangeConfigurationOptionsInputMessage
       attr_accessor action_type: ("restore-cluster" | "resize-cluster")
       attr_accessor cluster_identifier: ::String
@@ -2330,6 +2341,9 @@ module Aws::Redshift
     class RedshiftIdcApplicationQuotaExceededFault < Aws::EmptyStructure
     end
 
+    class RedshiftInvalidParameterFault < Aws::EmptyStructure
+    end
+
     class ReferenceLink
       attr_accessor text: ::String
       attr_accessor link: ::String

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-redshift
 version: !ruby/object:Gem::Version
-  version: 1.149.0
+  version: 1.150.0
 platform: ruby
 authors:
 - Amazon Web Services