aws-sdk-sagemaker 1.241.0 → 1.242.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 600db6a47adc28047248a7adb467fb761e06fde1739a714b1424d5b04f1a3df6
-  data.tar.gz: 5ba92613c2e02722ddd7ee2329bc8234ba201b02989de7174695268681c2d336
+  metadata.gz: beec203bdcab1b6932b1020a3e119505aa18341f0c78c1918c5c77ef88f4aa68
+  data.tar.gz: 8fe3566a399d4f56f7abc1cf7362067e207d8cfa9d6ffe1446510db6f306db3b
 SHA512:
-  metadata.gz: 7cfd55ef5f7197daa786a00e864017dd149062a18bb84967705ea08e1dea2b81e344d69b0d32b80c70eeb5331bf38a7b4e8ae1ffb57ae10b0be86f0d83d44d49
-  data.tar.gz: 0054e009e20bab0ad52cd04bb573535256cc79021b202ebaed1f11f1ba35d0fb9e11380bb370974a7f7cb2fb80aa0899ecdf966b4e7d5f20db1fd1d42e1d339e
+  metadata.gz: 5c70e8e01060eb2ccb51c26d2150c95ff561a3b86da3912652bc916dc28d1b1a4a863198701d564988906ebd35333280520278ca3e1d0e5e1036658ba8ac1d5a
+  data.tar.gz: fe250ebf1758ebb0c6a8c28b4c498515b4bcba8768eb542597a029a484ea2a1c074599018197f681141bd60a92a8d54608b1b0f3d978f327fa08d50afd2cc4fe

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.242.0 (2024-05-16)
+------------------
+
+* Feature - Introduced WorkerAccessConfiguration to SageMaker Workteam. This allows customers to configure resource access for workers in a workteam.
+
 1.241.0 (2024-05-13)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.241.0
+1.242.0

data/lib/aws-sdk-sagemaker/client.rb

@@ -7613,7 +7613,8 @@ module Aws::SageMaker
       req.send_request(options)
     end
 
-    # Creates a space used for real time collaboration in a domain.
+    # Creates a private space or a space used for real time collaboration in
+    # a domain.
     #
     # @option params [required, String] :domain_id
     #   The ID of the associated domain.
@@ -9108,6 +9109,12 @@ module Aws::SageMaker
     #   Configures notification of workers regarding available or expiring
     #   work items.
     #
+    # @option params [Types::WorkerAccessConfiguration] :worker_access_configuration
+    #   Use this optional parameter to constrain access to an Amazon S3
+    #   resource based on the IP address using supported IAM global condition
+    #   keys. The Amazon S3 resource is accessed in the worker portal using a
+    #   Amazon S3 presigned URL.
+    #
     # @option params [Array<Types::Tag>] :tags
     #   An array of key-value pairs.
     #
@@ -9145,6 +9152,14 @@ module Aws::SageMaker
     #     notification_configuration: {
     #       notification_topic_arn: "NotificationTopicArn",
     #     },
+    #     worker_access_configuration: {
+    #       s3_presign: {
+    #         iam_policy_constraints: {
+    #           source_ip: "Enabled", # accepts Enabled, Disabled
+    #           vpc_source_ip: "Enabled", # accepts Enabled, Disabled
+    #         },
+    #       },
+    #     },
     #     tags: [
     #       {
     #         key: "TagKey", # required
@@ -15958,6 +15973,8 @@ module Aws::SageMaker
     #   resp.workteam.create_date #=> Time
     #   resp.workteam.last_updated_date #=> Time
     #   resp.workteam.notification_configuration.notification_topic_arn #=> String
+    #   resp.workteam.worker_access_configuration.s3_presign.iam_policy_constraints.source_ip #=> String, one of "Enabled", "Disabled"
+    #   resp.workteam.worker_access_configuration.s3_presign.iam_policy_constraints.vpc_source_ip #=> String, one of "Enabled", "Disabled"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/sagemaker-2017-07-24/DescribeWorkteam AWS API Documentation
     #
@@ -16694,11 +16711,13 @@ module Aws::SageMaker
     #   Use it in your next request to receive the next set of results.
     #
     # @option params [Integer] :max_results
-    #   The total number of items to return in the response. If the total
-    #   number of items available is more than the value specified, a
-    #   `NextToken` is provided in the response. To resume pagination, provide
-    #   the `NextToken` value in the as part of a subsequent call. The default
-    #   value is 10.
+    #   This parameter defines the maximum number of results that can be
+    #   returned in a single response. The `MaxResults` parameter is an upper
+    #   bound, not a target. If there are more results available than the
+    #   value specified, a `NextToken` is provided in the response. The
+    #   `NextToken` indicates that the user should get the next set of results
+    #   by providing this token as a part of a subsequent call. The default
+    #   value for `MaxResults` is 10.
     #
     # @option params [String] :sort_order
     #   The sort order for the results. The default is Ascending.
@@ -17762,11 +17781,13 @@ module Aws::SageMaker
     #   Use it in your next request to receive the next set of results.
     #
     # @option params [Integer] :max_results
-    #   The total number of items to return in the response. If the total
-    #   number of items available is more than the value specified, a
-    #   `NextToken` is provided in the response. To resume pagination, provide
-    #   the `NextToken` value in the as part of a subsequent call. The default
-    #   value is 10.
+    #   This parameter defines the maximum number of results that can be
+    #   returned in a single response. The `MaxResults` parameter is an upper
+    #   bound, not a target. If there are more results available than the
+    #   value specified, a `NextToken` is provided in the response. The
+    #   `NextToken` indicates that the user should get the next set of results
+    #   by providing this token as a part of a subsequent call. The default
+    #   value for `MaxResults` is 10.
     #
     # @return [Types::ListDomainsResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
@@ -21229,11 +21250,13 @@ module Aws::SageMaker
     #   Use it in your next request to receive the next set of results.
     #
     # @option params [Integer] :max_results
-    #   The total number of items to return in the response. If the total
-    #   number of items available is more than the value specified, a
-    #   `NextToken` is provided in the response. To resume pagination, provide
-    #   the `NextToken` value in the as part of a subsequent call. The default
-    #   value is 10.
+    #   This parameter defines the maximum number of results that can be
+    #   returned in a single response. The `MaxResults` parameter is an upper
+    #   bound, not a target. If there are more results available than the
+    #   value specified, a `NextToken` is provided in the response. The
+    #   `NextToken` indicates that the user should get the next set of results
+    #   by providing this token as a part of a subsequent call. The default
+    #   value for `MaxResults` is 10.
     #
     # @option params [String] :sort_order
     #   The sort order for the results. The default is `Ascending`.
@@ -21999,11 +22022,13 @@ module Aws::SageMaker
     #   Use it in your next request to receive the next set of results.
     #
     # @option params [Integer] :max_results
-    #   The total number of items to return in the response. If the total
-    #   number of items available is more than the value specified, a
-    #   `NextToken` is provided in the response. To resume pagination, provide
-    #   the `NextToken` value in the as part of a subsequent call. The default
-    #   value is 10.
+    #   This parameter defines the maximum number of results that can be
+    #   returned in a single response. The `MaxResults` parameter is an upper
+    #   bound, not a target. If there are more results available than the
+    #   value specified, a `NextToken` is provided in the response. The
+    #   `NextToken` indicates that the user should get the next set of results
+    #   by providing this token as a part of a subsequent call. The default
+    #   value for `MaxResults` is 10.
     #
     # @option params [String] :sort_order
     #   The sort order for the results. The default is Ascending.
@@ -22189,6 +22214,8 @@ module Aws::SageMaker
     #   resp.workteams[0].create_date #=> Time
     #   resp.workteams[0].last_updated_date #=> Time
     #   resp.workteams[0].notification_configuration.notification_topic_arn #=> String
+    #   resp.workteams[0].worker_access_configuration.s3_presign.iam_policy_constraints.source_ip #=> String, one of "Enabled", "Disabled"
+    #   resp.workteams[0].worker_access_configuration.s3_presign.iam_policy_constraints.vpc_source_ip #=> String, one of "Enabled", "Disabled"
     #   resp.next_token #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/sagemaker-2017-07-24/ListWorkteams AWS API Documentation
@@ -26261,6 +26288,12 @@ module Aws::SageMaker
     #   Configures SNS topic notifications for available or expiring work
     #   items
     #
+    # @option params [Types::WorkerAccessConfiguration] :worker_access_configuration
+    #   Use this optional parameter to constrain access to an Amazon S3
+    #   resource based on the IP address using supported IAM global condition
+    #   keys. The Amazon S3 resource is accessed in the worker portal using a
+    #   Amazon S3 presigned URL.
+    #
     # @return [Types::UpdateWorkteamResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::UpdateWorkteamResponse#workteam #workteam} => Types::Workteam
@@ -26285,6 +26318,14 @@ module Aws::SageMaker
     #     notification_configuration: {
     #       notification_topic_arn: "NotificationTopicArn",
     #     },
+    #     worker_access_configuration: {
+    #       s3_presign: {
+    #         iam_policy_constraints: {
+    #           source_ip: "Enabled", # accepts Enabled, Disabled
+    #           vpc_source_ip: "Enabled", # accepts Enabled, Disabled
+    #         },
+    #       },
+    #     },
     #   })
     #
     # @example Response structure
@@ -26305,6 +26346,8 @@ module Aws::SageMaker
     #   resp.workteam.create_date #=> Time
     #   resp.workteam.last_updated_date #=> Time
     #   resp.workteam.notification_configuration.notification_topic_arn #=> String
+    #   resp.workteam.worker_access_configuration.s3_presign.iam_policy_constraints.source_ip #=> String, one of "Enabled", "Disabled"
+    #   resp.workteam.worker_access_configuration.s3_presign.iam_policy_constraints.vpc_source_ip #=> String, one of "Enabled", "Disabled"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/sagemaker-2017-07-24/UpdateWorkteam AWS API Documentation
     #
@@ -26328,7 +26371,7 @@ module Aws::SageMaker
         params: params,
         config: config)
       context[:gem_name] = 'aws-sdk-sagemaker'
-      context[:gem_version] = '1.241.0'
+      context[:gem_version] = '1.242.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-sagemaker/client_api.rb

@@ -783,6 +783,7 @@ module Aws::SageMaker
     EnableSagemakerServicecatalogPortfolioInput = Shapes::StructureShape.new(name: 'EnableSagemakerServicecatalogPortfolioInput')
     EnableSagemakerServicecatalogPortfolioOutput = Shapes::StructureShape.new(name: 'EnableSagemakerServicecatalogPortfolioOutput')
     EnableSessionTagChaining = Shapes::BooleanShape.new(name: 'EnableSessionTagChaining')
+    EnabledOrDisabled = Shapes::StringShape.new(name: 'EnabledOrDisabled')
     Endpoint = Shapes::StructureShape.new(name: 'Endpoint')
     EndpointArn = Shapes::StringShape.new(name: 'EndpointArn')
     EndpointConfigArn = Shapes::StringShape.new(name: 'EndpointConfigArn')
@@ -1002,6 +1003,7 @@ module Aws::SageMaker
     HyperbandStrategyMaxResource = Shapes::IntegerShape.new(name: 'HyperbandStrategyMaxResource')
     HyperbandStrategyMinResource = Shapes::IntegerShape.new(name: 'HyperbandStrategyMinResource')
     IamIdentity = Shapes::StructureShape.new(name: 'IamIdentity')
+    IamPolicyConstraints = Shapes::StructureShape.new(name: 'IamPolicyConstraints')
     IdempotencyToken = Shapes::StringShape.new(name: 'IdempotencyToken')
     IdentityProviderOAuthSetting = Shapes::StructureShape.new(name: 'IdentityProviderOAuthSetting')
     IdentityProviderOAuthSettings = Shapes::ListShape.new(name: 'IdentityProviderOAuthSettings')
@@ -1837,6 +1839,7 @@ module Aws::SageMaker
     S3ModelDataType = Shapes::StringShape.new(name: 'S3ModelDataType')
     S3ModelUri = Shapes::StringShape.new(name: 'S3ModelUri')
     S3OutputPath = Shapes::StringShape.new(name: 'S3OutputPath')
+    S3Presign = Shapes::StructureShape.new(name: 'S3Presign')
     S3StorageConfig = Shapes::StructureShape.new(name: 'S3StorageConfig')
     S3Uri = Shapes::StringShape.new(name: 'S3Uri')
     SageMakerImageVersionAlias = Shapes::StringShape.new(name: 'SageMakerImageVersionAlias')
@@ -2237,6 +2240,7 @@ module Aws::SageMaker
     WaitIntervalInSeconds = Shapes::IntegerShape.new(name: 'WaitIntervalInSeconds')
     WarmPoolResourceStatus = Shapes::StringShape.new(name: 'WarmPoolResourceStatus')
     WarmPoolStatus = Shapes::StructureShape.new(name: 'WarmPoolStatus')
+    WorkerAccessConfiguration = Shapes::StructureShape.new(name: 'WorkerAccessConfiguration')
     Workforce = Shapes::StructureShape.new(name: 'Workforce')
     WorkforceArn = Shapes::StringShape.new(name: 'WorkforceArn')
     WorkforceFailureReason = Shapes::StringShape.new(name: 'WorkforceFailureReason')
@@ -3695,6 +3699,7 @@ module Aws::SageMaker
     CreateWorkteamRequest.add_member(:member_definitions, Shapes::ShapeRef.new(shape: MemberDefinitions, required: true, location_name: "MemberDefinitions"))
     CreateWorkteamRequest.add_member(:description, Shapes::ShapeRef.new(shape: String200, required: true, location_name: "Description"))
     CreateWorkteamRequest.add_member(:notification_configuration, Shapes::ShapeRef.new(shape: NotificationConfiguration, location_name: "NotificationConfiguration"))
+    CreateWorkteamRequest.add_member(:worker_access_configuration, Shapes::ShapeRef.new(shape: WorkerAccessConfiguration, location_name: "WorkerAccessConfiguration"))
     CreateWorkteamRequest.add_member(:tags, Shapes::ShapeRef.new(shape: TagList, location_name: "Tags"))
     CreateWorkteamRequest.struct_class = Types::CreateWorkteamRequest
 
@@ -5956,6 +5961,10 @@ module Aws::SageMaker
     IamIdentity.add_member(:source_identity, Shapes::ShapeRef.new(shape: String, location_name: "SourceIdentity"))
     IamIdentity.struct_class = Types::IamIdentity
 
+    IamPolicyConstraints.add_member(:source_ip, Shapes::ShapeRef.new(shape: EnabledOrDisabled, location_name: "SourceIp"))
+    IamPolicyConstraints.add_member(:vpc_source_ip, Shapes::ShapeRef.new(shape: EnabledOrDisabled, location_name: "VpcSourceIp"))
+    IamPolicyConstraints.struct_class = Types::IamPolicyConstraints
+
     IdentityProviderOAuthSetting.add_member(:data_source_name, Shapes::ShapeRef.new(shape: DataSourceName, location_name: "DataSourceName"))
     IdentityProviderOAuthSetting.add_member(:status, Shapes::ShapeRef.new(shape: FeatureStatus, location_name: "Status"))
     IdentityProviderOAuthSetting.add_member(:secret_arn, Shapes::ShapeRef.new(shape: SecretArn, location_name: "SecretArn"))
@@ -8736,6 +8745,9 @@ module Aws::SageMaker
     S3ModelDataSource.add_member(:model_access_config, Shapes::ShapeRef.new(shape: ModelAccessConfig, location_name: "ModelAccessConfig"))
     S3ModelDataSource.struct_class = Types::S3ModelDataSource
 
+    S3Presign.add_member(:iam_policy_constraints, Shapes::ShapeRef.new(shape: IamPolicyConstraints, location_name: "IamPolicyConstraints"))
+    S3Presign.struct_class = Types::S3Presign
+
     S3StorageConfig.add_member(:s3_uri, Shapes::ShapeRef.new(shape: S3Uri, required: true, location_name: "S3Uri"))
     S3StorageConfig.add_member(:kms_key_id, Shapes::ShapeRef.new(shape: KmsKeyId, location_name: "KmsKeyId"))
     S3StorageConfig.add_member(:resolved_output_s3_uri, Shapes::ShapeRef.new(shape: S3Uri, location_name: "ResolvedOutputS3Uri"))
@@ -9812,6 +9824,7 @@ module Aws::SageMaker
     UpdateWorkteamRequest.add_member(:member_definitions, Shapes::ShapeRef.new(shape: MemberDefinitions, location_name: "MemberDefinitions"))
     UpdateWorkteamRequest.add_member(:description, Shapes::ShapeRef.new(shape: String200, location_name: "Description"))
     UpdateWorkteamRequest.add_member(:notification_configuration, Shapes::ShapeRef.new(shape: NotificationConfiguration, location_name: "NotificationConfiguration"))
+    UpdateWorkteamRequest.add_member(:worker_access_configuration, Shapes::ShapeRef.new(shape: WorkerAccessConfiguration, location_name: "WorkerAccessConfiguration"))
     UpdateWorkteamRequest.struct_class = Types::UpdateWorkteamRequest
 
     UpdateWorkteamResponse.add_member(:workteam, Shapes::ShapeRef.new(shape: Workteam, required: true, location_name: "Workteam"))
@@ -9884,6 +9897,9 @@ module Aws::SageMaker
     WarmPoolStatus.add_member(:reused_by_job, Shapes::ShapeRef.new(shape: TrainingJobName, location_name: "ReusedByJob"))
     WarmPoolStatus.struct_class = Types::WarmPoolStatus
 
+    WorkerAccessConfiguration.add_member(:s3_presign, Shapes::ShapeRef.new(shape: S3Presign, location_name: "S3Presign"))
+    WorkerAccessConfiguration.struct_class = Types::WorkerAccessConfiguration
+
     Workforce.add_member(:workforce_name, Shapes::ShapeRef.new(shape: WorkforceName, required: true, location_name: "WorkforceName"))
     Workforce.add_member(:workforce_arn, Shapes::ShapeRef.new(shape: WorkforceArn, required: true, location_name: "WorkforceArn"))
     Workforce.add_member(:last_updated_date, Shapes::ShapeRef.new(shape: Timestamp, location_name: "LastUpdatedDate"))
@@ -9928,6 +9944,7 @@ module Aws::SageMaker
     Workteam.add_member(:create_date, Shapes::ShapeRef.new(shape: Timestamp, location_name: "CreateDate"))
     Workteam.add_member(:last_updated_date, Shapes::ShapeRef.new(shape: Timestamp, location_name: "LastUpdatedDate"))
     Workteam.add_member(:notification_configuration, Shapes::ShapeRef.new(shape: NotificationConfiguration, location_name: "NotificationConfiguration"))
+    Workteam.add_member(:worker_access_configuration, Shapes::ShapeRef.new(shape: WorkerAccessConfiguration, location_name: "WorkerAccessConfiguration"))
     Workteam.struct_class = Types::Workteam
 
     Workteams.member = Shapes::ShapeRef.new(shape: Workteam)

data/lib/aws-sdk-sagemaker/types.rb

@@ -9574,6 +9574,13 @@ module Aws::SageMaker
     #   work items.
     #   @return [Types::NotificationConfiguration]
     #
+    # @!attribute [rw] worker_access_configuration
+    #   Use this optional parameter to constrain access to an Amazon S3
+    #   resource based on the IP address using supported IAM global
+    #   condition keys. The Amazon S3 resource is accessed in the worker
+    #   portal using a Amazon S3 presigned URL.
+    #   @return [Types::WorkerAccessConfiguration]
+    #
     # @!attribute [rw] tags
     #   An array of key-value pairs.
     #
@@ -9595,6 +9602,7 @@ module Aws::SageMaker
       :member_definitions,
       :description,
       :notification_configuration,
+      :worker_access_configuration,
       :tags)
       SENSITIVE = []
       include Aws::Structure
@@ -22581,6 +22589,41 @@ module Aws::SageMaker
       include Aws::Structure
     end
 
+    # Use this parameter to specify a supported global condition key that is
+    # added to the IAM policy.
+    #
+    # @!attribute [rw] source_ip
+    #   When `SourceIp` is `Enabled` the worker's IP address when a task is
+    #   rendered in the worker portal is added to the IAM policy as a
+    #   `Condition` used to generate the Amazon S3 presigned URL. This IP
+    #   address is checked by Amazon S3 and must match in order for the
+    #   Amazon S3 resource to be rendered in the worker portal.
+    #   @return [String]
+    #
+    # @!attribute [rw] vpc_source_ip
+    #   When `VpcSourceIp` is `Enabled` the worker's IP address when a task
+    #   is rendered in private worker portal inside the VPC is added to the
+    #   IAM policy as a `Condition` used to generate the Amazon S3 presigned
+    #   URL. To render the task successfully Amazon S3 checks that the
+    #   presigned URL is being accessed over an Amazon S3 VPC Endpoint, and
+    #   that the worker's IP address matches the IP address in the IAM
+    #   policy. To learn more about configuring private worker portal, see
+    #   [Use Amazon VPC mode from a private worker portal][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/sagemaker/latest/dg/samurai-vpc-worker-portal.html
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/sagemaker-2017-07-24/IamPolicyConstraints AWS API Documentation
+    #
+    class IamPolicyConstraints < Struct.new(
+      :source_ip,
+      :vpc_source_ip)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # The Amazon SageMaker Canvas application setting where you configure
     # OAuth for connecting to an external data source, such as Snowflake.
     #
@@ -24895,11 +24938,13 @@ module Aws::SageMaker
     #   @return [String]
     #
     # @!attribute [rw] max_results
-    #   The total number of items to return in the response. If the total
-    #   number of items available is more than the value specified, a
-    #   `NextToken` is provided in the response. To resume pagination,
-    #   provide the `NextToken` value in the as part of a subsequent call.
-    #   The default value is 10.
+    #   This parameter defines the maximum number of results that can be
+    #   returned in a single response. The `MaxResults` parameter is an
+    #   upper bound, not a target. If there are more results available than
+    #   the value specified, a `NextToken` is provided in the response. The
+    #   `NextToken` indicates that the user should get the next set of
+    #   results by providing this token as a part of a subsequent call. The
+    #   default value for `MaxResults` is 10.
     #   @return [Integer]
     #
     # @!attribute [rw] sort_order
@@ -25911,11 +25956,13 @@ module Aws::SageMaker
     #   @return [String]
     #
     # @!attribute [rw] max_results
-    #   The total number of items to return in the response. If the total
-    #   number of items available is more than the value specified, a
-    #   `NextToken` is provided in the response. To resume pagination,
-    #   provide the `NextToken` value in the as part of a subsequent call.
-    #   The default value is 10.
+    #   This parameter defines the maximum number of results that can be
+    #   returned in a single response. The `MaxResults` parameter is an
+    #   upper bound, not a target. If there are more results available than
+    #   the value specified, a `NextToken` is provided in the response. The
+    #   `NextToken` indicates that the user should get the next set of
+    #   results by providing this token as a part of a subsequent call. The
+    #   default value for `MaxResults` is 10.
     #   @return [Integer]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/sagemaker-2017-07-24/ListDomainsRequest AWS API Documentation
@@ -29235,11 +29282,13 @@ module Aws::SageMaker
     #   @return [String]
     #
     # @!attribute [rw] max_results
-    #   The total number of items to return in the response. If the total
-    #   number of items available is more than the value specified, a
-    #   `NextToken` is provided in the response. To resume pagination,
-    #   provide the `NextToken` value in the as part of a subsequent call.
-    #   The default value is 10.
+    #   This parameter defines the maximum number of results that can be
+    #   returned in a single response. The `MaxResults` parameter is an
+    #   upper bound, not a target. If there are more results available than
+    #   the value specified, a `NextToken` is provided in the response. The
+    #   `NextToken` indicates that the user should get the next set of
+    #   results by providing this token as a part of a subsequent call. The
+    #   default value for `MaxResults` is 10.
     #   @return [Integer]
     #
     # @!attribute [rw] sort_order
@@ -29919,11 +29968,13 @@ module Aws::SageMaker
     #   @return [String]
     #
     # @!attribute [rw] max_results
-    #   The total number of items to return in the response. If the total
-    #   number of items available is more than the value specified, a
-    #   `NextToken` is provided in the response. To resume pagination,
-    #   provide the `NextToken` value in the as part of a subsequent call.
-    #   The default value is 10.
+    #   This parameter defines the maximum number of results that can be
+    #   returned in a single response. The `MaxResults` parameter is an
+    #   upper bound, not a target. If there are more results available than
+    #   the value specified, a `NextToken` is provided in the response. The
+    #   `NextToken` indicates that the user should get the next set of
+    #   results by providing this token as a part of a subsequent call. The
+    #   default value for `MaxResults` is 10.
     #   @return [Integer]
     #
     # @!attribute [rw] sort_order
@@ -38109,6 +38160,30 @@ module Aws::SageMaker
       include Aws::Structure
     end
 
+    # This object defines the access restrictions to Amazon S3 resources
+    # that are included in custom worker task templates using the Liquid
+    # filter, `grant_read_access`.
+    #
+    # To learn more about how custom templates are created, see [Create
+    # custom worker task templates][1].
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/sagemaker/latest/dg/a2i-custom-templates.html
+    #
+    # @!attribute [rw] iam_policy_constraints
+    #   Use this parameter to specify the allowed request source. Possible
+    #   sources are either `SourceIp` or `VpcSourceIp`.
+    #   @return [Types::IamPolicyConstraints]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/sagemaker-2017-07-24/S3Presign AWS API Documentation
+    #
+    class S3Presign < Struct.new(
+      :iam_policy_constraints)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # The Amazon Simple Storage (Amazon S3) location and security
     # configuration for `OfflineStore`.
     #
@@ -44648,13 +44723,21 @@ module Aws::SageMaker
     #   items
     #   @return [Types::NotificationConfiguration]
     #
+    # @!attribute [rw] worker_access_configuration
+    #   Use this optional parameter to constrain access to an Amazon S3
+    #   resource based on the IP address using supported IAM global
+    #   condition keys. The Amazon S3 resource is accessed in the worker
+    #   portal using a Amazon S3 presigned URL.
+    #   @return [Types::WorkerAccessConfiguration]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/sagemaker-2017-07-24/UpdateWorkteamRequest AWS API Documentation
     #
     class UpdateWorkteamRequest < Struct.new(
       :workteam_name,
       :member_definitions,
       :description,
-      :notification_configuration)
+      :notification_configuration,
+      :worker_access_configuration)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -45043,6 +45126,23 @@ module Aws::SageMaker
       include Aws::Structure
     end
 
+    # Use this optional parameter to constrain access to an Amazon S3
+    # resource based on the IP address using supported IAM global condition
+    # keys. The Amazon S3 resource is accessed in the worker portal using a
+    # Amazon S3 presigned URL.
+    #
+    # @!attribute [rw] s3_presign
+    #   Defines any Amazon S3 resource constraints.
+    #   @return [Types::S3Presign]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/sagemaker-2017-07-24/WorkerAccessConfiguration AWS API Documentation
+    #
+    class WorkerAccessConfiguration < Struct.new(
+      :s3_presign)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # A single private workforce, which is automatically created when you
     # create your first private work team. You can create one private work
     # force in each Amazon Web Services Region. By default, any
@@ -45267,6 +45367,11 @@ module Aws::SageMaker
     #   work teams.
     #   @return [Types::NotificationConfiguration]
     #
+    # @!attribute [rw] worker_access_configuration
+    #   Describes any access constraints that have been defined for Amazon
+    #   S3 resources.
+    #   @return [Types::WorkerAccessConfiguration]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/sagemaker-2017-07-24/Workteam AWS API Documentation
     #
     class Workteam < Struct.new(
@@ -45279,7 +45384,8 @@ module Aws::SageMaker
       :sub_domain,
       :create_date,
       :last_updated_date,
-      :notification_configuration)
+      :notification_configuration,
+      :worker_access_configuration)
       SENSITIVE = []
       include Aws::Structure
     end

data/lib/aws-sdk-sagemaker.rb

@@ -53,6 +53,6 @@ require_relative 'aws-sdk-sagemaker/customizations'
 # @!group service
 module Aws::SageMaker
 
-  GEM_VERSION = '1.241.0'
+  GEM_VERSION = '1.242.0'
 
 end

data/sig/client.rbs

@@ -4011,6 +4011,14 @@ module Aws
                              ?notification_configuration: {
                                notification_topic_arn: ::String?
                              },
+                             ?worker_access_configuration: {
+                               s3_presign: {
+                                 iam_policy_constraints: {
+                                   source_ip: ("Enabled" | "Disabled")?,
+                                   vpc_source_ip: ("Enabled" | "Disabled")?
+                                 }?
+                               }?
+                             },
                              ?tags: Array[
                                {
                                  key: ::String,
@@ -8966,6 +8974,14 @@ module Aws
                              ?description: ::String,
                              ?notification_configuration: {
                                notification_topic_arn: ::String?
+                             },
+                             ?worker_access_configuration: {
+                               s3_presign: {
+                                 iam_policy_constraints: {
+                                   source_ip: ("Enabled" | "Disabled")?,
+                                   vpc_source_ip: ("Enabled" | "Disabled")?
+                                 }?
+                               }?
                              }
                            ) -> _UpdateWorkteamResponseSuccess
                          | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _UpdateWorkteamResponseSuccess

data/sig/types.rbs

@@ -1782,6 +1782,7 @@ module Aws::SageMaker
       attr_accessor member_definitions: ::Array[Types::MemberDefinition]
       attr_accessor description: ::String
       attr_accessor notification_configuration: Types::NotificationConfiguration
+      attr_accessor worker_access_configuration: Types::WorkerAccessConfiguration
       attr_accessor tags: ::Array[Types::Tag]
       SENSITIVE: []
     end
@@ -4551,6 +4552,12 @@ module Aws::SageMaker
       SENSITIVE: []
     end
 
+    class IamPolicyConstraints
+      attr_accessor source_ip: ("Enabled" | "Disabled")
+      attr_accessor vpc_source_ip: ("Enabled" | "Disabled")
+      SENSITIVE: []
+    end
+
     class IdentityProviderOAuthSetting
       attr_accessor data_source_name: ("SalesforceGenie" | "Snowflake")
       attr_accessor status: ("ENABLED" | "DISABLED")
@@ -7942,6 +7949,11 @@ module Aws::SageMaker
       SENSITIVE: []
     end
 
+    class S3Presign
+      attr_accessor iam_policy_constraints: Types::IamPolicyConstraints
+      SENSITIVE: []
+    end
+
     class S3StorageConfig
       attr_accessor s3_uri: ::String
       attr_accessor kms_key_id: ::String
@@ -9327,6 +9339,7 @@ module Aws::SageMaker
       attr_accessor member_definitions: ::Array[Types::MemberDefinition]
       attr_accessor description: ::String
       attr_accessor notification_configuration: Types::NotificationConfiguration
+      attr_accessor worker_access_configuration: Types::WorkerAccessConfiguration
       SENSITIVE: []
     end
 
@@ -9408,6 +9421,11 @@ module Aws::SageMaker
       SENSITIVE: []
     end
 
+    class WorkerAccessConfiguration
+      attr_accessor s3_presign: Types::S3Presign
+      SENSITIVE: []
+    end
+
     class Workforce
       attr_accessor workforce_name: ::String
       attr_accessor workforce_arn: ::String
@@ -9455,6 +9473,7 @@ module Aws::SageMaker
       attr_accessor create_date: ::Time
       attr_accessor last_updated_date: ::Time
       attr_accessor notification_configuration: Types::NotificationConfiguration
+      attr_accessor worker_access_configuration: Types::WorkerAccessConfiguration
       SENSITIVE: []
     end
   end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-sagemaker
 version: !ruby/object:Gem::Version
-  version: 1.241.0
+  version: 1.242.0
 platform: ruby
 authors:
 - Amazon Web Services
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2024-05-13 00:00:00.000000000 Z
+date: 2024-05-16 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-core