aws-sdk-sagemaker 1.385.0 → 1.386.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: fb4f174253b538811eb63a6791567d54f916384ab85d8c5e2d0a3f10c24e1cc4
-  data.tar.gz: 47a2f32fd2009d995994cf40c8ea8725c02a6b517c0c7f002df921ac8ae32522
+  metadata.gz: 9df2ddb2c4903852fd937c632d315f0dbbd4b4df19828c59ac78e30450ebd7af
+  data.tar.gz: 1ab33d27a64f2c6f778529c520033d0d576c157848d9cf0cd1e41a459e1c18c5
 SHA512:
-  metadata.gz: b7b7dd100661f3fb43779b356dee8ee05561d0d7b56064fc170b69a4aba230111516be67a257cb92c48ca964e39d74c94873b90c90f8fb5176882b4ffeca2531
-  data.tar.gz: 55cef0f615eb80c051fa0cb7618ee04770ae8ee4264d06d8a0e87204c6d877167d62d0c0fc6639890d55ed9f23863b628fadde2450f8856794e74fa8ee42f5c3
+  metadata.gz: a5e30e171ed3c19131010d71af99fe34fc56c4ca20a5a6a347214fc70cac9e693ad668ed5660295a91a1aafab27b9e3eb88a67d27575fd098c58818c69a135ea
+  data.tar.gz: be29fec5d743c67d6a972168f07bde3a8c14cb55d4b00b9ebc8a6563f7f3056695a808894ccfd57a5a9e940263be74e5553d9f921e26f5b3ef259fbeb42bd7ed

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.386.0 (2026-08-20)
+------------------
+
+* Feature - Added IAM Identity Center (IdC) support to CreatePartnerApp and UpdatePartnerApp APIs. Added Customer Managed Key (CMK) support to CreateMlflowApp and DescribeMlflowApp.
+
 1.385.0 (2026-08-14)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.385.0
+1.386.0

data/lib/aws-sdk-sagemaker/client.rb

@@ -7264,6 +7264,11 @@ module Aws::SageMaker
     #   the MLflow App uses to access the artifact store in Amazon S3. The
     #   role should have the `AmazonS3FullAccess` permission.
     #
+    # @option params [String] :kms_key_id
+    #   The ID of the Amazon Web Services KMS key used to encrypt the data at
+    #   rest associated with the MLflow App. If you don't specify a value,
+    #   the MLflow App is not encrypted with a customer-managed key.
+    #
     # @option params [String] :model_registration_mode
     #   Whether to enable or disable automatic registration of new MLflow
     #   models to the SageMaker Model Registry. To enable automatic model
@@ -7300,6 +7305,7 @@ module Aws::SageMaker
     #     name: "MlflowAppName", # required
     #     artifact_store_uri: "S3Uri", # required
     #     role_arn: "RoleArn", # required
+    #     kms_key_id: "KmsKeyId",
     #     model_registration_mode: "AutoModelRegistrationEnabled", # accepts AutoModelRegistrationEnabled, AutoModelRegistrationDisabled
     #     weekly_maintenance_window_start: "WeeklyMaintenanceWindowStart",
     #     account_default_status: "ENABLED", # accepts ENABLED, DISABLED
@@ -9608,9 +9614,22 @@ module Aws::SageMaker
     # @option params [Types::PartnerAppConfig] :application_config
     #   Configuration settings for the SageMaker Partner AI App.
     #
+    # @option params [Types::IdcConfigInput] :idc_config
+    #   Specifies the Amazon Web Services IAM Identity Center configuration
+    #   for the SageMaker Partner AI App. Specify this parameter when
+    #   `AuthType` is `IDC`. Apps that use `IAM` authorization don't use this
+    #   parameter.
+    #
     # @option params [required, String] :auth_type
     #   The authorization type that users use to access the SageMaker Partner
-    #   AI App.
+    #   AI App. Valid values:
+    #
+    #   * `IAM`: Users access the SageMaker Partner AI App with their Amazon
+    #     Web Services IAM identity.
+    #
+    #   * `IDC`: Users access the SageMaker Partner AI App with their Amazon
+    #     Web Services IAM Identity Center identity. Specify the Identity
+    #     Center instance to use in `IdcConfig`.
     #
     # @option params [Boolean] :enable_iam_session_based_identity
     #   When set to `TRUE`, the SageMaker Partner AI App sets the Amazon Web
@@ -9661,7 +9680,10 @@ module Aws::SageMaker
     #         },
     #       ],
     #     },
-    #     auth_type: "IAM", # required, accepts IAM
+    #     idc_config: {
+    #       instance_arn: "InstanceArn", # required
+    #     },
+    #     auth_type: "IAM", # required, accepts IAM, IDC
     #     enable_iam_session_based_identity: false,
     #     enable_auto_minor_version_upgrade: false,
     #     client_token: "ClientToken",
@@ -18169,6 +18191,7 @@ module Aws::SageMaker
     #   * {Types::DescribeMlflowAppResponse#artifact_store_uri #artifact_store_uri} => String
     #   * {Types::DescribeMlflowAppResponse#mlflow_version #mlflow_version} => String
     #   * {Types::DescribeMlflowAppResponse#role_arn #role_arn} => String
+    #   * {Types::DescribeMlflowAppResponse#kms_key_id #kms_key_id} => String
     #   * {Types::DescribeMlflowAppResponse#status #status} => String
     #   * {Types::DescribeMlflowAppResponse#model_registration_mode #model_registration_mode} => String
     #   * {Types::DescribeMlflowAppResponse#account_default_status #account_default_status} => String
@@ -18193,6 +18216,7 @@ module Aws::SageMaker
     #   resp.artifact_store_uri #=> String
     #   resp.mlflow_version #=> String
     #   resp.role_arn #=> String
+    #   resp.kms_key_id #=> String
     #   resp.status #=> String, one of "Creating", "Created", "CreateFailed", "Updating", "Updated", "UpdateFailed", "Deleting", "DeleteFailed", "Deleted"
     #   resp.model_registration_mode #=> String, one of "AutoModelRegistrationEnabled", "AutoModelRegistrationDisabled"
     #   resp.account_default_status #=> String, one of "ENABLED", "DISABLED"
@@ -19563,6 +19587,7 @@ module Aws::SageMaker
     #   * {Types::DescribePartnerAppResponse#enable_auto_minor_version_upgrade #enable_auto_minor_version_upgrade} => Boolean
     #   * {Types::DescribePartnerAppResponse#current_version_eol_date #current_version_eol_date} => Time
     #   * {Types::DescribePartnerAppResponse#available_upgrade #available_upgrade} => Types::AvailableUpgrade
+    #   * {Types::DescribePartnerAppResponse#idc_config #idc_config} => Types::IdcConfigOutput
     #
     # @example Request syntax with placeholder values
     #
@@ -19595,7 +19620,7 @@ module Aws::SageMaker
     #   resp.application_config.role_group_assignments[0].role_name #=> String
     #   resp.application_config.role_group_assignments[0].group_patterns #=> Array
     #   resp.application_config.role_group_assignments[0].group_patterns[0] #=> String
-    #   resp.auth_type #=> String, one of "IAM"
+    #   resp.auth_type #=> String, one of "IAM", "IDC"
     #   resp.enable_iam_session_based_identity #=> Boolean
     #   resp.error.code #=> String
     #   resp.error.reason #=> String
@@ -19604,6 +19629,8 @@ module Aws::SageMaker
     #   resp.available_upgrade.version #=> String
     #   resp.available_upgrade.release_notes #=> Array
     #   resp.available_upgrade.release_notes[0] #=> String
+    #   resp.idc_config.instance_arn #=> String
+    #   resp.idc_config.application_arn #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/sagemaker-2017-07-24/DescribePartnerApp AWS API Documentation
     #
@@ -33387,6 +33414,24 @@ module Aws::SageMaker
     # @option params [Types::PartnerAppConfig] :application_config
     #   Configuration settings for the SageMaker Partner AI App.
     #
+    # @option params [Types::IdcConfigInput] :idc_config
+    #   Specifies the Amazon Web Services IAM Identity Center configuration
+    #   for the SageMaker Partner AI App. Specify this parameter when
+    #   `AuthType` is `IDC`. Apps that use `IAM` authorization don't use this
+    #   parameter.
+    #
+    # @option params [String] :auth_type
+    #   The authorization type that users use to access the SageMaker Partner
+    #   AI App. Use this parameter to migrate an existing SageMaker Partner AI
+    #   App from `IAM` authorization to `IDC` authorization. Valid values:
+    #
+    #   * `IAM`: Users access the SageMaker Partner AI App with their Amazon
+    #     Web Services IAM identity.
+    #
+    #   * `IDC`: Users access the SageMaker Partner AI App with their Amazon
+    #     Web Services IAM Identity Center identity. Specify the Identity
+    #     Center instance to use in `IdcConfig`.
+    #
     # @option params [Boolean] :enable_iam_session_based_identity
     #   When set to `TRUE`, the SageMaker Partner AI App sets the Amazon Web
     #   Services IAM session name or the authenticated IAM user as the
@@ -33439,6 +33484,10 @@ module Aws::SageMaker
     #         },
     #       ],
     #     },
+    #     idc_config: {
+    #       instance_arn: "InstanceArn", # required
+    #     },
+    #     auth_type: "IAM", # accepts IAM, IDC
     #     enable_iam_session_based_identity: false,
     #     enable_auto_minor_version_upgrade: false,
     #     app_version: "MajorMinorVersion",
@@ -34583,7 +34632,7 @@ module Aws::SageMaker
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-sagemaker'
-      context[:gem_version] = '1.385.0'
+      context[:gem_version] = '1.386.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-sagemaker/client_api.rb

@@ -163,6 +163,7 @@ module Aws::SageMaker
     AppSpecification = Shapes::StructureShape.new(name: 'AppSpecification')
     AppStatus = Shapes::StringShape.new(name: 'AppStatus')
     AppType = Shapes::StringShape.new(name: 'AppType')
+    ApplicationArn = Shapes::StringShape.new(name: 'ApplicationArn')
     ApprovalDescription = Shapes::StringShape.new(name: 'ApprovalDescription')
     ArnOrName = Shapes::StringShape.new(name: 'ArnOrName')
     ArtifactArn = Shapes::StringShape.new(name: 'ArtifactArn')
@@ -1424,6 +1425,8 @@ module Aws::SageMaker
     IPAddressType = Shapes::StringShape.new(name: 'IPAddressType')
     IamIdentity = Shapes::StructureShape.new(name: 'IamIdentity')
     IamPolicyConstraints = Shapes::StructureShape.new(name: 'IamPolicyConstraints')
+    IdcConfigInput = Shapes::StructureShape.new(name: 'IdcConfigInput')
+    IdcConfigOutput = Shapes::StructureShape.new(name: 'IdcConfigOutput')
     IdempotencyToken = Shapes::StringShape.new(name: 'IdempotencyToken')
     IdentityProviderOAuthSetting = Shapes::StructureShape.new(name: 'IdentityProviderOAuthSetting')
     IdentityProviderOAuthSettings = Shapes::ListShape.new(name: 'IdentityProviderOAuthSettings')
@@ -1526,6 +1529,7 @@ module Aws::SageMaker
     InputDataConfig = Shapes::ListShape.new(name: 'InputDataConfig')
     InputMode = Shapes::StringShape.new(name: 'InputMode')
     InputModes = Shapes::ListShape.new(name: 'InputModes')
+    InstanceArn = Shapes::StringShape.new(name: 'InstanceArn')
     InstanceCount = Shapes::IntegerShape.new(name: 'InstanceCount')
     InstanceGroup = Shapes::StructureShape.new(name: 'InstanceGroup')
     InstanceGroupHealthCheckConfiguration = Shapes::StructureShape.new(name: 'InstanceGroupHealthCheckConfiguration')
@@ -5063,6 +5067,7 @@ module Aws::SageMaker
     CreateMlflowAppRequest.add_member(:name, Shapes::ShapeRef.new(shape: MlflowAppName, required: true, location_name: "Name"))
     CreateMlflowAppRequest.add_member(:artifact_store_uri, Shapes::ShapeRef.new(shape: S3Uri, required: true, location_name: "ArtifactStoreUri"))
     CreateMlflowAppRequest.add_member(:role_arn, Shapes::ShapeRef.new(shape: RoleArn, required: true, location_name: "RoleArn"))
+    CreateMlflowAppRequest.add_member(:kms_key_id, Shapes::ShapeRef.new(shape: KmsKeyId, location_name: "KmsKeyId"))
     CreateMlflowAppRequest.add_member(:model_registration_mode, Shapes::ShapeRef.new(shape: ModelRegistrationMode, location_name: "ModelRegistrationMode"))
     CreateMlflowAppRequest.add_member(:weekly_maintenance_window_start, Shapes::ShapeRef.new(shape: WeeklyMaintenanceWindowStart, location_name: "WeeklyMaintenanceWindowStart"))
     CreateMlflowAppRequest.add_member(:account_default_status, Shapes::ShapeRef.new(shape: AccountDefaultStatus, location_name: "AccountDefaultStatus"))
@@ -5275,6 +5280,7 @@ module Aws::SageMaker
     CreatePartnerAppRequest.add_member(:maintenance_config, Shapes::ShapeRef.new(shape: PartnerAppMaintenanceConfig, location_name: "MaintenanceConfig"))
     CreatePartnerAppRequest.add_member(:tier, Shapes::ShapeRef.new(shape: NonEmptyString64, required: true, location_name: "Tier"))
     CreatePartnerAppRequest.add_member(:application_config, Shapes::ShapeRef.new(shape: PartnerAppConfig, location_name: "ApplicationConfig"))
+    CreatePartnerAppRequest.add_member(:idc_config, Shapes::ShapeRef.new(shape: IdcConfigInput, location_name: "IdcConfig"))
     CreatePartnerAppRequest.add_member(:auth_type, Shapes::ShapeRef.new(shape: PartnerAppAuthType, required: true, location_name: "AuthType"))
     CreatePartnerAppRequest.add_member(:enable_iam_session_based_identity, Shapes::ShapeRef.new(shape: Boolean, location_name: "EnableIamSessionBasedIdentity", metadata: {"box" => true}))
     CreatePartnerAppRequest.add_member(:enable_auto_minor_version_upgrade, Shapes::ShapeRef.new(shape: Boolean, location_name: "EnableAutoMinorVersionUpgrade", metadata: {"box" => true}))
@@ -6763,6 +6769,7 @@ module Aws::SageMaker
     DescribeMlflowAppResponse.add_member(:artifact_store_uri, Shapes::ShapeRef.new(shape: S3Uri, location_name: "ArtifactStoreUri"))
     DescribeMlflowAppResponse.add_member(:mlflow_version, Shapes::ShapeRef.new(shape: MlflowVersion, location_name: "MlflowVersion"))
     DescribeMlflowAppResponse.add_member(:role_arn, Shapes::ShapeRef.new(shape: RoleArn, location_name: "RoleArn"))
+    DescribeMlflowAppResponse.add_member(:kms_key_id, Shapes::ShapeRef.new(shape: KmsKeyId, location_name: "KmsKeyId"))
     DescribeMlflowAppResponse.add_member(:status, Shapes::ShapeRef.new(shape: MlflowAppStatus, location_name: "Status"))
     DescribeMlflowAppResponse.add_member(:model_registration_mode, Shapes::ShapeRef.new(shape: ModelRegistrationMode, location_name: "ModelRegistrationMode"))
     DescribeMlflowAppResponse.add_member(:account_default_status, Shapes::ShapeRef.new(shape: AccountDefaultStatus, location_name: "AccountDefaultStatus"))
@@ -7045,6 +7052,7 @@ module Aws::SageMaker
     DescribePartnerAppResponse.add_member(:enable_auto_minor_version_upgrade, Shapes::ShapeRef.new(shape: Boolean, location_name: "EnableAutoMinorVersionUpgrade", metadata: {"box" => true}))
     DescribePartnerAppResponse.add_member(:current_version_eol_date, Shapes::ShapeRef.new(shape: Timestamp, location_name: "CurrentVersionEolDate"))
     DescribePartnerAppResponse.add_member(:available_upgrade, Shapes::ShapeRef.new(shape: AvailableUpgrade, location_name: "AvailableUpgrade"))
+    DescribePartnerAppResponse.add_member(:idc_config, Shapes::ShapeRef.new(shape: IdcConfigOutput, location_name: "IdcConfig"))
     DescribePartnerAppResponse.struct_class = Types::DescribePartnerAppResponse
 
     DescribePipelineDefinitionForExecutionRequest.add_member(:pipeline_execution_arn, Shapes::ShapeRef.new(shape: PipelineExecutionArn, required: true, location_name: "PipelineExecutionArn"))
@@ -8286,6 +8294,13 @@ module Aws::SageMaker
     IamPolicyConstraints.add_member(:vpc_source_ip, Shapes::ShapeRef.new(shape: EnabledOrDisabled, location_name: "VpcSourceIp"))
     IamPolicyConstraints.struct_class = Types::IamPolicyConstraints
 
+    IdcConfigInput.add_member(:instance_arn, Shapes::ShapeRef.new(shape: InstanceArn, required: true, location_name: "InstanceArn"))
+    IdcConfigInput.struct_class = Types::IdcConfigInput
+
+    IdcConfigOutput.add_member(:instance_arn, Shapes::ShapeRef.new(shape: InstanceArn, required: true, location_name: "InstanceArn"))
+    IdcConfigOutput.add_member(:application_arn, Shapes::ShapeRef.new(shape: ApplicationArn, location_name: "ApplicationArn"))
+    IdcConfigOutput.struct_class = Types::IdcConfigOutput
+
     IdentityProviderOAuthSetting.add_member(:data_source_name, Shapes::ShapeRef.new(shape: DataSourceName, location_name: "DataSourceName"))
     IdentityProviderOAuthSetting.add_member(:status, Shapes::ShapeRef.new(shape: FeatureStatus, location_name: "Status"))
     IdentityProviderOAuthSetting.add_member(:secret_arn, Shapes::ShapeRef.new(shape: SecretArn, location_name: "SecretArn"))
@@ -13117,6 +13132,8 @@ module Aws::SageMaker
     UpdatePartnerAppRequest.add_member(:maintenance_config, Shapes::ShapeRef.new(shape: PartnerAppMaintenanceConfig, location_name: "MaintenanceConfig"))
     UpdatePartnerAppRequest.add_member(:tier, Shapes::ShapeRef.new(shape: NonEmptyString64, location_name: "Tier"))
     UpdatePartnerAppRequest.add_member(:application_config, Shapes::ShapeRef.new(shape: PartnerAppConfig, location_name: "ApplicationConfig"))
+    UpdatePartnerAppRequest.add_member(:idc_config, Shapes::ShapeRef.new(shape: IdcConfigInput, location_name: "IdcConfig"))
+    UpdatePartnerAppRequest.add_member(:auth_type, Shapes::ShapeRef.new(shape: PartnerAppAuthType, location_name: "AuthType"))
     UpdatePartnerAppRequest.add_member(:enable_iam_session_based_identity, Shapes::ShapeRef.new(shape: Boolean, location_name: "EnableIamSessionBasedIdentity", metadata: {"box" => true}))
     UpdatePartnerAppRequest.add_member(:enable_auto_minor_version_upgrade, Shapes::ShapeRef.new(shape: Boolean, location_name: "EnableAutoMinorVersionUpgrade", metadata: {"box" => true}))
     UpdatePartnerAppRequest.add_member(:app_version, Shapes::ShapeRef.new(shape: MajorMinorVersion, location_name: "AppVersion"))

data/lib/aws-sdk-sagemaker/types.rb

@@ -12222,6 +12222,12 @@ module Aws::SageMaker
     #   role should have the `AmazonS3FullAccess` permission.
     #   @return [String]
     #
+    # @!attribute [rw] kms_key_id
+    #   The ID of the Amazon Web Services KMS key used to encrypt the data
+    #   at rest associated with the MLflow App. If you don't specify a
+    #   value, the MLflow App is not encrypted with a customer-managed key.
+    #   @return [String]
+    #
     # @!attribute [rw] model_registration_mode
     #   Whether to enable or disable automatic registration of new MLflow
     #   models to the SageMaker Model Registry. To enable automatic model
@@ -12259,6 +12265,7 @@ module Aws::SageMaker
       :name,
       :artifact_store_uri,
       :role_arn,
+      :kms_key_id,
       :model_registration_mode,
       :weekly_maintenance_window_start,
       :account_default_status,
@@ -13595,9 +13602,23 @@ module Aws::SageMaker
     #   Configuration settings for the SageMaker Partner AI App.
     #   @return [Types::PartnerAppConfig]
     #
+    # @!attribute [rw] idc_config
+    #   Specifies the Amazon Web Services IAM Identity Center configuration
+    #   for the SageMaker Partner AI App. Specify this parameter when
+    #   `AuthType` is `IDC`. Apps that use `IAM` authorization don't use
+    #   this parameter.
+    #   @return [Types::IdcConfigInput]
+    #
     # @!attribute [rw] auth_type
     #   The authorization type that users use to access the SageMaker
-    #   Partner AI App.
+    #   Partner AI App. Valid values:
+    #
+    #   * `IAM`: Users access the SageMaker Partner AI App with their Amazon
+    #     Web Services IAM identity.
+    #
+    #   * `IDC`: Users access the SageMaker Partner AI App with their Amazon
+    #     Web Services IAM Identity Center identity. Specify the Identity
+    #     Center instance to use in `IdcConfig`.
     #   @return [String]
     #
     # @!attribute [rw] enable_iam_session_based_identity
@@ -13635,6 +13656,7 @@ module Aws::SageMaker
       :maintenance_config,
       :tier,
       :application_config,
+      :idc_config,
       :auth_type,
       :enable_iam_session_based_identity,
       :enable_auto_minor_version_upgrade,
@@ -21380,6 +21402,12 @@ module Aws::SageMaker
     #   the MLflow App uses to access the artifact store in Amazon S3.
     #   @return [String]
     #
+    # @!attribute [rw] kms_key_id
+    #   The ID of the Amazon Web Services KMS key used to encrypt the data
+    #   at rest associated with the MLflow App. This field is absent if the
+    #   MLflow App is not encrypted with a customer-managed key.
+    #   @return [String]
+    #
     # @!attribute [rw] status
     #   The current creation status of the described MLflow App.
     #   @return [String]
@@ -21433,6 +21461,7 @@ module Aws::SageMaker
       :artifact_store_uri,
       :mlflow_version,
       :role_arn,
+      :kms_key_id,
       :status,
       :model_registration_mode,
       :account_default_status,
@@ -23027,7 +23056,13 @@ module Aws::SageMaker
     #
     # @!attribute [rw] auth_type
     #   The authorization type that users use to access the SageMaker
-    #   Partner AI App.
+    #   Partner AI App. Valid values:
+    #
+    #   * `IAM`: Users access the SageMaker Partner AI App with their Amazon
+    #     Web Services IAM identity.
+    #
+    #   * `IDC`: Users access the SageMaker Partner AI App with their Amazon
+    #     Web Services IAM Identity Center identity.
     #   @return [String]
     #
     # @!attribute [rw] enable_iam_session_based_identity
@@ -23059,6 +23094,14 @@ module Aws::SageMaker
     #   upgrades are available.
     #   @return [Types::AvailableUpgrade]
     #
+    # @!attribute [rw] idc_config
+    #   Contains the Amazon Web Services IAM Identity Center configuration
+    #   for the SageMaker Partner AI App, including the Identity Center
+    #   instance and the Identity Center application that SageMaker creates
+    #   for the app. The service returns this field for apps that use `IDC`
+    #   authorization.
+    #   @return [Types::IdcConfigOutput]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/sagemaker-2017-07-24/DescribePartnerAppResponse AWS API Documentation
     #
     class DescribePartnerAppResponse < Struct.new(
@@ -23080,7 +23123,8 @@ module Aws::SageMaker
       :error,
       :enable_auto_minor_version_upgrade,
       :current_version_eol_date,
-      :available_upgrade)
+      :available_upgrade,
+      :idc_config)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -30802,6 +30846,44 @@ module Aws::SageMaker
       include Aws::Structure
     end
 
+    # Specifies the Amazon Web Services IAM Identity Center configuration to
+    # use for a SageMaker Partner AI App that uses `IDC` authorization.
+    #
+    # @!attribute [rw] instance_arn
+    #   The ARN of the Amazon Web Services IAM Identity Center instance that
+    #   the SageMaker Partner AI App uses to authenticate users.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/sagemaker-2017-07-24/IdcConfigInput AWS API Documentation
+    #
+    class IdcConfigInput < Struct.new(
+      :instance_arn)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Contains the Amazon Web Services IAM Identity Center configuration of
+    # a SageMaker Partner AI App that uses `IDC` authorization.
+    #
+    # @!attribute [rw] instance_arn
+    #   The ARN of the Amazon Web Services IAM Identity Center instance that
+    #   the SageMaker Partner AI App uses to authenticate users.
+    #   @return [String]
+    #
+    # @!attribute [rw] application_arn
+    #   The ARN of the Amazon Web Services IAM Identity Center application
+    #   that SageMaker creates for the SageMaker Partner AI App.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/sagemaker-2017-07-24/IdcConfigOutput AWS API Documentation
+    #
+    class IdcConfigOutput < Struct.new(
+      :instance_arn,
+      :application_arn)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # The Amazon SageMaker Canvas application setting where you configure
     # OAuth for connecting to an external data source, such as Snowflake.
     #
@@ -58227,6 +58309,27 @@ module Aws::SageMaker
     #   Configuration settings for the SageMaker Partner AI App.
     #   @return [Types::PartnerAppConfig]
     #
+    # @!attribute [rw] idc_config
+    #   Specifies the Amazon Web Services IAM Identity Center configuration
+    #   for the SageMaker Partner AI App. Specify this parameter when
+    #   `AuthType` is `IDC`. Apps that use `IAM` authorization don't use
+    #   this parameter.
+    #   @return [Types::IdcConfigInput]
+    #
+    # @!attribute [rw] auth_type
+    #   The authorization type that users use to access the SageMaker
+    #   Partner AI App. Use this parameter to migrate an existing SageMaker
+    #   Partner AI App from `IAM` authorization to `IDC` authorization.
+    #   Valid values:
+    #
+    #   * `IAM`: Users access the SageMaker Partner AI App with their Amazon
+    #     Web Services IAM identity.
+    #
+    #   * `IDC`: Users access the SageMaker Partner AI App with their Amazon
+    #     Web Services IAM Identity Center identity. Specify the Identity
+    #     Center instance to use in `IdcConfig`.
+    #   @return [String]
+    #
     # @!attribute [rw] enable_iam_session_based_identity
     #   When set to `TRUE`, the SageMaker Partner AI App sets the Amazon Web
     #   Services IAM session name or the authenticated IAM user as the
@@ -58266,6 +58369,8 @@ module Aws::SageMaker
       :maintenance_config,
       :tier,
       :application_config,
+      :idc_config,
+      :auth_type,
       :enable_iam_session_based_identity,
       :enable_auto_minor_version_upgrade,
       :app_version,

data/lib/aws-sdk-sagemaker.rb

@@ -55,7 +55,7 @@ module Aws::SageMaker
   autoload :EndpointProvider, 'aws-sdk-sagemaker/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-sagemaker/endpoints'
 
-  GEM_VERSION = '1.385.0'
+  GEM_VERSION = '1.386.0'
 
 end
 

data/sig/client.rbs

@@ -1792,6 +1792,7 @@ module Aws
                                name: ::String,
                                artifact_store_uri: ::String,
                                role_arn: ::String,
+                               ?kms_key_id: ::String,
                                ?model_registration_mode: ("AutoModelRegistrationEnabled" | "AutoModelRegistrationDisabled"),
                                ?weekly_maintenance_window_start: ::String,
                                ?account_default_status: ("ENABLED" | "DISABLED"),
@@ -2375,7 +2376,10 @@ module Aws
                                 },
                                 tier: ::String,
                                 ?application_config: Params::partner_app_config,
-                                auth_type: ("IAM"),
+                                ?idc_config: {
+                                  instance_arn: ::String
+                                },
+                                auth_type: ("IAM" | "IDC"),
                                 ?enable_iam_session_based_identity: bool,
                                 ?enable_auto_minor_version_upgrade: bool,
                                 ?client_token: ::String,
@@ -4463,6 +4467,7 @@ module Aws
         def artifact_store_uri: () -> ::String
         def mlflow_version: () -> ::String
         def role_arn: () -> ::String
+        def kms_key_id: () -> ::String
         def status: () -> ("Creating" | "Created" | "CreateFailed" | "Updating" | "Updated" | "UpdateFailed" | "Deleting" | "DeleteFailed" | "Deleted")
         def model_registration_mode: () -> ("AutoModelRegistrationEnabled" | "AutoModelRegistrationDisabled")
         def account_default_status: () -> ("ENABLED" | "DISABLED")
@@ -4794,11 +4799,12 @@ module Aws
         def tier: () -> ::String
         def version: () -> ::String
         def application_config: () -> Types::PartnerAppConfig
-        def auth_type: () -> ("IAM")
+        def auth_type: () -> ("IAM" | "IDC")
         def enable_iam_session_based_identity: () -> bool
         def enable_auto_minor_version_upgrade: () -> bool
         def current_version_eol_date: () -> ::Time
         def available_upgrade: () -> Types::AvailableUpgrade
+        def idc_config: () -> Types::IdcConfigOutput
       end
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/SageMaker/Client.html#describe_partner_app-instance_method
       def describe_partner_app: (
@@ -8023,6 +8029,10 @@ module Aws
                                 },
                                 ?tier: ::String,
                                 ?application_config: Params::partner_app_config,
+                                ?idc_config: {
+                                  instance_arn: ::String
+                                },
+                                ?auth_type: ("IAM" | "IDC"),
                                 ?enable_iam_session_based_identity: bool,
                                 ?enable_auto_minor_version_upgrade: bool,
                                 ?app_version: ::String,

data/sig/types.rbs

@@ -2443,6 +2443,7 @@ module Aws::SageMaker
       attr_accessor name: ::String
       attr_accessor artifact_store_uri: ::String
       attr_accessor role_arn: ::String
+      attr_accessor kms_key_id: ::String
       attr_accessor model_registration_mode: ("AutoModelRegistrationEnabled" | "AutoModelRegistrationDisabled")
       attr_accessor weekly_maintenance_window_start: ::String
       attr_accessor account_default_status: ("ENABLED" | "DISABLED")
@@ -2715,7 +2716,8 @@ module Aws::SageMaker
       attr_accessor maintenance_config: Types::PartnerAppMaintenanceConfig
       attr_accessor tier: ::String
       attr_accessor application_config: Types::PartnerAppConfig
-      attr_accessor auth_type: ("IAM")
+      attr_accessor idc_config: Types::IdcConfigInput
+      attr_accessor auth_type: ("IAM" | "IDC")
       attr_accessor enable_iam_session_based_identity: bool
       attr_accessor enable_auto_minor_version_upgrade: bool
       attr_accessor client_token: ::String
@@ -4646,6 +4648,7 @@ module Aws::SageMaker
       attr_accessor artifact_store_uri: ::String
       attr_accessor mlflow_version: ::String
       attr_accessor role_arn: ::String
+      attr_accessor kms_key_id: ::String
       attr_accessor status: ("Creating" | "Created" | "CreateFailed" | "Updating" | "Updated" | "UpdateFailed" | "Deleting" | "DeleteFailed" | "Deleted")
       attr_accessor model_registration_mode: ("AutoModelRegistrationEnabled" | "AutoModelRegistrationDisabled")
       attr_accessor account_default_status: ("ENABLED" | "DISABLED")
@@ -4978,12 +4981,13 @@ module Aws::SageMaker
       attr_accessor tier: ::String
       attr_accessor version: ::String
       attr_accessor application_config: Types::PartnerAppConfig
-      attr_accessor auth_type: ("IAM")
+      attr_accessor auth_type: ("IAM" | "IDC")
       attr_accessor enable_iam_session_based_identity: bool
       attr_accessor error: Types::ErrorInfo
       attr_accessor enable_auto_minor_version_upgrade: bool
       attr_accessor current_version_eol_date: ::Time
       attr_accessor available_upgrade: Types::AvailableUpgrade
+      attr_accessor idc_config: Types::IdcConfigOutput
       SENSITIVE: []
     end
 
@@ -6431,6 +6435,17 @@ module Aws::SageMaker
       SENSITIVE: []
     end
 
+    class IdcConfigInput
+      attr_accessor instance_arn: ::String
+      SENSITIVE: []
+    end
+
+    class IdcConfigOutput
+      attr_accessor instance_arn: ::String
+      attr_accessor application_arn: ::String
+      SENSITIVE: []
+    end
+
     class IdentityProviderOAuthSetting
       attr_accessor data_source_name: ("SalesforceGenie" | "Snowflake")
       attr_accessor status: ("ENABLED" | "DISABLED")
@@ -12361,6 +12376,8 @@ module Aws::SageMaker
       attr_accessor maintenance_config: Types::PartnerAppMaintenanceConfig
       attr_accessor tier: ::String
       attr_accessor application_config: Types::PartnerAppConfig
+      attr_accessor idc_config: Types::IdcConfigInput
+      attr_accessor auth_type: ("IAM" | "IDC")
       attr_accessor enable_iam_session_based_identity: bool
       attr_accessor enable_auto_minor_version_upgrade: bool
       attr_accessor app_version: ::String

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-sagemaker
 version: !ruby/object:Gem::Version
-  version: 1.385.0
+  version: 1.386.0
 platform: ruby
 authors:
 - Amazon Web Services