aws-sdk-ses 1.68.0 → 1.69.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 73cb7b7a6dcdec37ab4846f64e4916d4f37e877b03b1ba99b81d14e0903384e8
-  data.tar.gz: c13392722f7f3e59bf064431dcadcb87e611a9138c62e7c602545ce83c0f9b83
+  metadata.gz: aa415042091913ee860f1aa590b1cc53dfc910eeca939500f96f32acb3ac621b
+  data.tar.gz: c3723cd27014003fea55fdcc2c9a8ce6e4699eccb92de63552408381c52ba3dd
 SHA512:
-  metadata.gz: 96e8f866de133ab939db4b69d111b4487631ea67dca7f051c43e0b556dce035a73be5da71c7fb3427f6e880ca9b955bee7d6ffac4b11b67117321334ffe0c44e
-  data.tar.gz: a66ceea91aaab8745ec49f1d6e04e348ebf7da64ebe3b6ef9b3928a94cfb459b5b3be5bbce8e6aefa55698a50214f26ec5558dc46ab3f8fb3424941111498909
+  metadata.gz: d2082083f7329ad579bb12c3d4310b1ca6eeef7740382700929b70fd117fd5733e899ba77ab02f4abed6ad2cc1997ecb3b1aeeb0cef30a99f6f78fe9e68dba72
+  data.tar.gz: cc2afd939028930c374727ae2f4feac24c4b2c81c26e3fda221879b8f739fcf525e6060f91b41dcc0beb1ad1bb509cc4c1017de05030736e2e4f954b2bf8d608

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.69.0 (2024-08-21)
+------------------
+
+* Feature - Enable email receiving customers to provide SES with access to their S3 buckets via an IAM role for "Deliver to S3 Action"
+
 1.68.0 (2024-07-08)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.68.0
+1.69.0

data/lib/aws-sdk-ses/client.rb

@@ -808,6 +808,7 @@ module Aws::SES
     #             bucket_name: "S3BucketName", # required
     #             object_key_prefix: "S3KeyPrefix",
     #             kms_key_arn: "AmazonResourceName",
+    #             iam_role_arn: "IAMRoleARN",
     #           },
     #           bounce_action: {
     #             topic_arn: "AmazonResourceName",
@@ -1418,6 +1419,7 @@ module Aws::SES
     #   resp.rules[0].actions[0].s3_action.bucket_name #=> String
     #   resp.rules[0].actions[0].s3_action.object_key_prefix #=> String
     #   resp.rules[0].actions[0].s3_action.kms_key_arn #=> String
+    #   resp.rules[0].actions[0].s3_action.iam_role_arn #=> String
     #   resp.rules[0].actions[0].bounce_action.topic_arn #=> String
     #   resp.rules[0].actions[0].bounce_action.smtp_reply_code #=> String
     #   resp.rules[0].actions[0].bounce_action.status_code #=> String
@@ -1574,6 +1576,7 @@ module Aws::SES
     #   resp.rule.actions[0].s3_action.bucket_name #=> String
     #   resp.rule.actions[0].s3_action.object_key_prefix #=> String
     #   resp.rule.actions[0].s3_action.kms_key_arn #=> String
+    #   resp.rule.actions[0].s3_action.iam_role_arn #=> String
     #   resp.rule.actions[0].bounce_action.topic_arn #=> String
     #   resp.rule.actions[0].bounce_action.smtp_reply_code #=> String
     #   resp.rule.actions[0].bounce_action.status_code #=> String
@@ -1674,6 +1677,7 @@ module Aws::SES
     #   resp.rules[0].actions[0].s3_action.bucket_name #=> String
     #   resp.rules[0].actions[0].s3_action.object_key_prefix #=> String
     #   resp.rules[0].actions[0].s3_action.kms_key_arn #=> String
+    #   resp.rules[0].actions[0].s3_action.iam_role_arn #=> String
     #   resp.rules[0].actions[0].bounce_action.topic_arn #=> String
     #   resp.rules[0].actions[0].bounce_action.smtp_reply_code #=> String
     #   resp.rules[0].actions[0].bounce_action.status_code #=> String
@@ -3159,7 +3163,7 @@ module Aws::SES
     # @option params [String] :template_arn
     #   The ARN of the template to use when sending this email.
     #
-    # @option params [String] :default_template_data
+    # @option params [required, String] :default_template_data
     #   A list of replacement values to apply to the template when replacement
     #   data is not specified in a Destination object. These values act as a
     #   default or fallback option when no other data is available.
@@ -3194,7 +3198,7 @@ module Aws::SES
     #     ],
     #     template: "TemplateName", # required
     #     template_arn: "AmazonResourceName",
-    #     default_template_data: "TemplateData",
+    #     default_template_data: "TemplateData", # required
     #     destinations: [ # required
     #       {
     #         destination: { # required
@@ -4855,6 +4859,7 @@ module Aws::SES
     #             bucket_name: "S3BucketName", # required
     #             object_key_prefix: "S3KeyPrefix",
     #             kms_key_arn: "AmazonResourceName",
+    #             iam_role_arn: "IAMRoleARN",
     #           },
     #           bounce_action: {
     #             topic_arn: "AmazonResourceName",
@@ -5151,7 +5156,7 @@ module Aws::SES
         params: params,
         config: config)
       context[:gem_name] = 'aws-sdk-ses'
-      context[:gem_version] = '1.68.0'
+      context[:gem_version] = '1.69.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-ses/client_api.rb

@@ -149,6 +149,7 @@ module Aws::SES
     HeaderName = Shapes::StringShape.new(name: 'HeaderName')
     HeaderValue = Shapes::StringShape.new(name: 'HeaderValue')
     HtmlPart = Shapes::StringShape.new(name: 'HtmlPart')
+    IAMRoleARN = Shapes::StringShape.new(name: 'IAMRoleARN')
     Identity = Shapes::StringShape.new(name: 'Identity')
     IdentityDkimAttributes = Shapes::StructureShape.new(name: 'IdentityDkimAttributes')
     IdentityList = Shapes::ListShape.new(name: 'IdentityList')
@@ -905,6 +906,7 @@ module Aws::SES
     S3Action.add_member(:bucket_name, Shapes::ShapeRef.new(shape: S3BucketName, required: true, location_name: "BucketName"))
     S3Action.add_member(:object_key_prefix, Shapes::ShapeRef.new(shape: S3KeyPrefix, location_name: "ObjectKeyPrefix"))
     S3Action.add_member(:kms_key_arn, Shapes::ShapeRef.new(shape: AmazonResourceName, location_name: "KmsKeyArn"))
+    S3Action.add_member(:iam_role_arn, Shapes::ShapeRef.new(shape: IAMRoleARN, location_name: "IamRoleArn"))
     S3Action.struct_class = Types::S3Action
 
     SNSAction.add_member(:topic_arn, Shapes::ShapeRef.new(shape: AmazonResourceName, required: true, location_name: "TopicArn"))
@@ -934,7 +936,7 @@ module Aws::SES
     SendBulkTemplatedEmailRequest.add_member(:default_tags, Shapes::ShapeRef.new(shape: MessageTagList, location_name: "DefaultTags"))
     SendBulkTemplatedEmailRequest.add_member(:template, Shapes::ShapeRef.new(shape: TemplateName, required: true, location_name: "Template"))
     SendBulkTemplatedEmailRequest.add_member(:template_arn, Shapes::ShapeRef.new(shape: AmazonResourceName, location_name: "TemplateArn"))
-    SendBulkTemplatedEmailRequest.add_member(:default_template_data, Shapes::ShapeRef.new(shape: TemplateData, location_name: "DefaultTemplateData"))
+    SendBulkTemplatedEmailRequest.add_member(:default_template_data, Shapes::ShapeRef.new(shape: TemplateData, required: true, location_name: "DefaultTemplateData"))
     SendBulkTemplatedEmailRequest.add_member(:destinations, Shapes::ShapeRef.new(shape: BulkEmailDestinationList, required: true, location_name: "Destinations"))
     SendBulkTemplatedEmailRequest.struct_class = Types::SendBulkTemplatedEmailRequest
 

data/lib/aws-sdk-ses/types.rb

@@ -3525,28 +3525,28 @@ module Aws::SES
     #   @return [String]
     #
     # @!attribute [rw] kms_key_arn
-    #   The customer master key that Amazon SES should use to encrypt your
+    #   The customer managed key that Amazon SES should use to encrypt your
     #   emails before saving them to the Amazon S3 bucket. You can use the
-    #   default master key or a custom master key that you created in Amazon
-    #   Web Services KMS as follows:
+    #   default managed key or a custom managed key that you created in
+    #   Amazon Web Services KMS as follows:
     #
-    #   * To use the default master key, provide an ARN in the form of
+    #   * To use the default managed key, provide an ARN in the form of
     #     `arn:aws:kms:REGION:ACCOUNT-ID-WITHOUT-HYPHENS:alias/aws/ses`. For
     #     example, if your Amazon Web Services account ID is 123456789012
-    #     and you want to use the default master key in the US West (Oregon)
-    #     Region, the ARN of the default master key would be
+    #     and you want to use the default managed key in the US West
+    #     (Oregon) Region, the ARN of the default master key would be
     #     `arn:aws:kms:us-west-2:123456789012:alias/aws/ses`. If you use the
-    #     default master key, you don't need to perform any extra steps to
+    #     default managed key, you don't need to perform any extra steps to
     #     give Amazon SES permission to use the key.
     #
-    #   * To use a custom master key that you created in Amazon Web Services
-    #     KMS, provide the ARN of the master key and ensure that you add a
-    #     statement to your key's policy to give Amazon SES permission to
-    #     use it. For more information about giving permissions, see the
-    #     [Amazon SES Developer Guide][1].
+    #   * To use a custom managed key that you created in Amazon Web
+    #     Services KMS, provide the ARN of the managed key and ensure that
+    #     you add a statement to your key's policy to give Amazon SES
+    #     permission to use it. For more information about giving
+    #     permissions, see the [Amazon SES Developer Guide][1].
     #
     #   For more information about key policies, see the [Amazon Web
-    #   Services KMS Developer Guide][2]. If you do not specify a master
+    #   Services KMS Developer Guide][2]. If you do not specify a managed
     #   key, Amazon SES does not encrypt your emails.
     #
     #   Your mail is encrypted by Amazon SES using the Amazon S3 encryption
@@ -3558,7 +3558,7 @@ module Aws::SES
     #   encryption client is currently available with the [Amazon Web
     #   Services SDK for Java][3] and [Amazon Web Services SDK for Ruby][4]
     #   only. For more information about client-side encryption using Amazon
-    #   Web Services KMS master keys, see the [Amazon S3 Developer
+    #   Web Services KMS managed keys, see the [Amazon S3 Developer
     #   Guide][5].
     #
     #
@@ -3570,13 +3570,37 @@ module Aws::SES
     #   [5]: https://docs.aws.amazon.com/AmazonS3/latest/dev/UsingClientSideEncryption.html
     #   @return [String]
     #
+    # @!attribute [rw] iam_role_arn
+    #   The ARN of the IAM role to be used by Amazon Simple Email Service
+    #   while writing to the Amazon S3 bucket, optionally encrypting your
+    #   mail via the provided customer managed key, and publishing to the
+    #   Amazon SNS topic. This role should have access to the following
+    #   APIs:
+    #
+    #   * `s3:PutObject`, `kms:Encrypt` and `kms:GenerateDataKey` for the
+    #     given Amazon S3 bucket.
+    #
+    #   * `kms:GenerateDataKey` for the given Amazon Web Services KMS
+    #     customer managed key.
+    #
+    #   * `sns:Publish` for the given Amazon SNS topic.
+    #
+    #   <note markdown="1"> If an IAM role ARN is provided, the role (and only the role) is used
+    #   to access all the given resources (Amazon S3 bucket, Amazon Web
+    #   Services KMS customer managed key and Amazon SNS topic). Therefore,
+    #   setting up individual resource access permissions is not required.
+    #
+    #    </note>
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/email-2010-12-01/S3Action AWS API Documentation
     #
     class S3Action < Struct.new(
       :topic_arn,
       :bucket_name,
       :object_key_prefix,
-      :kms_key_arn)
+      :kms_key_arn,
+      :iam_role_arn)
       SENSITIVE = []
       include Aws::Structure
     end

data/lib/aws-sdk-ses.rb

@@ -53,6 +53,6 @@ require_relative 'aws-sdk-ses/customizations'
 # @!group service
 module Aws::SES
 
-  GEM_VERSION = '1.68.0'
+  GEM_VERSION = '1.69.0'
 
 end

data/sig/client.rbs

@@ -180,7 +180,8 @@ module Aws
                                          topic_arn: ::String?,
                                          bucket_name: ::String,
                                          object_key_prefix: ::String?,
-                                         kms_key_arn: ::String?
+                                         kms_key_arn: ::String?,
+                                         iam_role_arn: ::String?
                                        }?,
                                        bounce_action: {
                                          topic_arn: ::String?,
@@ -669,7 +670,7 @@ module Aws
                                        ],
                                        template: ::String,
                                        ?template_arn: ::String,
-                                       ?default_template_data: ::String,
+                                       default_template_data: ::String,
                                        destinations: Array[
                                          {
                                            destination: {
@@ -970,7 +971,8 @@ module Aws
                                          topic_arn: ::String?,
                                          bucket_name: ::String,
                                          object_key_prefix: ::String?,
-                                         kms_key_arn: ::String?
+                                         kms_key_arn: ::String?,
+                                         iam_role_arn: ::String?
                                        }?,
                                        bounce_action: {
                                          topic_arn: ::String?,

data/sig/types.rbs

@@ -795,6 +795,7 @@ module Aws::SES
       attr_accessor bucket_name: ::String
       attr_accessor object_key_prefix: ::String
       attr_accessor kms_key_arn: ::String
+      attr_accessor iam_role_arn: ::String
       SENSITIVE: []
     end
 

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-ses
 version: !ruby/object:Gem::Version
-  version: 1.68.0
+  version: 1.69.0
 platform: ruby
 authors:
 - Amazon Web Services
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2024-07-08 00:00:00.000000000 Z
+date: 2024-08-21 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-core