aws-sdk-ssoadmin 1.76.0 → 1.77.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 2ae29eca89610a354664eb518825485fed4591167c00d3c7000d35c3fbc1a4b0
-  data.tar.gz: 8b1a3aea41d549b8e5221802a44a508e875382b0c5a9fa270335a882bd04555c
+  metadata.gz: a2c194d43f734d77b128f699846b576873177a06873726780d1436fadbcc5ffa
+  data.tar.gz: 2e3c9b936ea67baa3c3227d2c5d6a13edf3e2f4d70c6365dacc9ce6ccddeff82
 SHA512:
-  metadata.gz: 0c25f480043fa6532f7a85b309dace3f1d96bf2b180d542c5145765cb0562b41dcfa10175185ce8d8f5b3880e2928d349d1e9e6dba1b7e20ac032dbb508cf793
-  data.tar.gz: 3bf1ad68c035bee67f0fc8022f71bef2d5ce98a6e9eda4c7c46e5b43ecdaf2e6b0d8a8aa5131aaf1d01efc4955a016ba77621154cd09cce207b93d8b8c21b66f
+  metadata.gz: 3166e48ad867de106aa1a17a0e8e374d82263c9f683991db6684a9735841c145f31fc9c9d2be89f223d521709a5814f0513729136284499337ae74791f72df00
+  data.tar.gz: e8a5669aa98351ca768399d0da2b2396f9dbc5133147f1e7c60619eb9a0984f03e0d3da61ed106fbb8918a677ac7acb647aea140a4696ea17b0191b9868ab28d

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.77.0 (2026-08-04)
+------------------
+
+* Feature - AWS IAM Identity Center now lets you create organization-level instances without enabling multi-account permissions. You can enable multi-account permissions during instance creation or later via console or API, which then provisions the necessary service-linked roles.
+
 1.76.0 (2026-07-09)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.76.0
+1.77.0

data/lib/aws-sdk-ssoadmin/client.rb

@@ -1800,6 +1800,7 @@ module Aws::SSOAdmin
     #   * {Types::DescribeInstanceResponse#status #status} => String
     #   * {Types::DescribeInstanceResponse#status_reason #status_reason} => String
     #   * {Types::DescribeInstanceResponse#encryption_configuration_details #encryption_configuration_details} => Types::EncryptionConfigurationDetails
+    #   * {Types::DescribeInstanceResponse#permission_sets_enabled #permission_sets_enabled} => Boolean
     #
     # @example Request syntax with placeholder values
     #
@@ -1820,6 +1821,7 @@ module Aws::SSOAdmin
     #   resp.encryption_configuration_details.kms_key_arn #=> String
     #   resp.encryption_configuration_details.encryption_status #=> String, one of "UPDATING", "ENABLED", "UPDATE_FAILED"
     #   resp.encryption_configuration_details.encryption_status_reason #=> String
+    #   resp.permission_sets_enabled #=> Boolean
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/sso-admin-2020-07-20/DescribeInstance AWS API Documentation
     #
@@ -4129,6 +4131,20 @@ module Aws::SSOAdmin
     # Update the details for the instance of IAM Identity Center that is
     # owned by the Amazon Web Services account.
     #
+    # In a single `UpdateInstance` request, you can perform only one of the
+    # following operations:
+    #
+    # * Update the encryption configuration of the instance by specifying
+    #   `EncryptionConfiguration`.
+    #
+    # * Enable permission sets for the instance by specifying
+    #   `PermissionSetsEnabled`.
+    #
+    # A request that specifies both `EncryptionConfiguration` and
+    # `PermissionSetsEnabled` returns a `ValidationException`. To perform
+    # both operations, call `UpdateInstance` separately for each. The two
+    # calls can be made in parallel.
+    #
     # @option params [String] :name
     #   Updates the instance name.
     #
@@ -4144,6 +4160,17 @@ module Aws::SSOAdmin
     #   instance. You can use this to configure customer managed KMS keys or
     #   Amazon Web Services owned KMS keys for encrypting your instance data.
     #
+    # @option params [Boolean] :permission_sets_enabled
+    #   Enables permission sets for this Identity Center instance. The only
+    #   accepted value is `true `. After permission sets are enabled, they
+    #   cannot be disabled.
+    #
+    #   <note markdown="1"> You can't set `EncryptionConfiguration` and `PermissionSetsEnabled`
+    #   in the same request. To configure both, make two separate
+    #   `UpdateInstance` calls. These calls can be made in parallel.
+    #
+    #    </note>
+    #
     # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
     #
     # @example Request syntax with placeholder values
@@ -4155,6 +4182,7 @@ module Aws::SSOAdmin
     #       key_type: "AWS_OWNED_KMS_KEY", # required, accepts AWS_OWNED_KMS_KEY, CUSTOMER_MANAGED_KEY
     #       kms_key_arn: "KmsKeyArn",
     #     },
+    #     permission_sets_enabled: false,
     #   })
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/sso-admin-2020-07-20/UpdateInstance AWS API Documentation
@@ -4322,7 +4350,7 @@ module Aws::SSOAdmin
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-ssoadmin'
-      context[:gem_version] = '1.76.0'
+      context[:gem_version] = '1.77.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-ssoadmin/client_api.rb

@@ -63,6 +63,7 @@ module Aws::SSOAdmin
     AuthorizationCodeGrant = Shapes::StructureShape.new(name: 'AuthorizationCodeGrant')
     AuthorizedTokenIssuer = Shapes::StructureShape.new(name: 'AuthorizedTokenIssuer')
     AuthorizedTokenIssuers = Shapes::ListShape.new(name: 'AuthorizedTokenIssuers')
+    Boolean = Shapes::BooleanShape.new(name: 'Boolean')
     ClaimAttributePath = Shapes::StringShape.new(name: 'ClaimAttributePath')
     ClientToken = Shapes::StringShape.new(name: 'ClientToken')
     ConflictException = Shapes::StructureShape.new(name: 'ConflictException')
@@ -680,6 +681,7 @@ module Aws::SSOAdmin
     DescribeInstanceResponse.add_member(:status, Shapes::ShapeRef.new(shape: InstanceStatus, location_name: "Status"))
     DescribeInstanceResponse.add_member(:status_reason, Shapes::ShapeRef.new(shape: Reason, location_name: "StatusReason"))
     DescribeInstanceResponse.add_member(:encryption_configuration_details, Shapes::ShapeRef.new(shape: EncryptionConfigurationDetails, location_name: "EncryptionConfigurationDetails"))
+    DescribeInstanceResponse.add_member(:permission_sets_enabled, Shapes::ShapeRef.new(shape: Boolean, location_name: "PermissionSetsEnabled"))
     DescribeInstanceResponse.struct_class = Types::DescribeInstanceResponse
 
     DescribePermissionSetProvisioningStatusRequest.add_member(:instance_arn, Shapes::ShapeRef.new(shape: InstanceArn, required: true, location_name: "InstanceArn"))
@@ -1263,6 +1265,7 @@ module Aws::SSOAdmin
     UpdateInstanceRequest.add_member(:name, Shapes::ShapeRef.new(shape: NameType, location_name: "Name"))
     UpdateInstanceRequest.add_member(:instance_arn, Shapes::ShapeRef.new(shape: InstanceArn, required: true, location_name: "InstanceArn"))
     UpdateInstanceRequest.add_member(:encryption_configuration, Shapes::ShapeRef.new(shape: EncryptionConfiguration, location_name: "EncryptionConfiguration"))
+    UpdateInstanceRequest.add_member(:permission_sets_enabled, Shapes::ShapeRef.new(shape: Boolean, location_name: "PermissionSetsEnabled"))
     UpdateInstanceRequest.struct_class = Types::UpdateInstanceRequest
 
     UpdateInstanceResponse.struct_class = Types::UpdateInstanceResponse

data/lib/aws-sdk-ssoadmin/types.rb

@@ -1703,6 +1703,11 @@ module Aws::SSOAdmin
     #   ARN.
     #   @return [Types::EncryptionConfigurationDetails]
     #
+    # @!attribute [rw] permission_sets_enabled
+    #   Indicates whether permission sets are enabled for this Identity
+    #   Center instance.
+    #   @return [Boolean]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/sso-admin-2020-07-20/DescribeInstanceResponse AWS API Documentation
     #
     class DescribeInstanceResponse < Struct.new(
@@ -1713,7 +1718,8 @@ module Aws::SSOAdmin
       :created_date,
       :status,
       :status_reason,
-      :encryption_configuration_details)
+      :encryption_configuration_details,
+      :permission_sets_enabled)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -4603,12 +4609,25 @@ module Aws::SSOAdmin
     #   data.
     #   @return [Types::EncryptionConfiguration]
     #
+    # @!attribute [rw] permission_sets_enabled
+    #   Enables permission sets for this Identity Center instance. The only
+    #   accepted value is `true `. After permission sets are enabled, they
+    #   cannot be disabled.
+    #
+    #   <note markdown="1"> You can't set `EncryptionConfiguration` and `PermissionSetsEnabled`
+    #   in the same request. To configure both, make two separate
+    #   `UpdateInstance` calls. These calls can be made in parallel.
+    #
+    #    </note>
+    #   @return [Boolean]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/sso-admin-2020-07-20/UpdateInstanceRequest AWS API Documentation
     #
     class UpdateInstanceRequest < Struct.new(
       :name,
       :instance_arn,
-      :encryption_configuration)
+      :encryption_configuration,
+      :permission_sets_enabled)
       SENSITIVE = []
       include Aws::Structure
     end

data/lib/aws-sdk-ssoadmin.rb

@@ -55,7 +55,7 @@ module Aws::SSOAdmin
   autoload :EndpointProvider, 'aws-sdk-ssoadmin/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-ssoadmin/endpoints'
 
-  GEM_VERSION = '1.76.0'
+  GEM_VERSION = '1.77.0'
 
 end
 

data/sig/client.rbs

@@ -437,6 +437,7 @@ module Aws
         def status: () -> ("CREATE_IN_PROGRESS" | "CREATE_FAILED" | "DELETE_IN_PROGRESS" | "ACTIVE")
         def status_reason: () -> ::String
         def encryption_configuration_details: () -> Types::EncryptionConfigurationDetails
+        def permission_sets_enabled: () -> bool
       end
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/SSOAdmin/Client.html#describe_instance-instance_method
       def describe_instance: (
@@ -1078,7 +1079,8 @@ module Aws
                              ?encryption_configuration: {
                                key_type: ("AWS_OWNED_KMS_KEY" | "CUSTOMER_MANAGED_KEY"),
                                kms_key_arn: ::String?
-                             }
+                             },
+                             ?permission_sets_enabled: bool
                            ) -> _UpdateInstanceResponseSuccess
                          | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _UpdateInstanceResponseSuccess
 

data/sig/types.rbs

@@ -466,6 +466,7 @@ module Aws::SSOAdmin
       attr_accessor status: ("CREATE_IN_PROGRESS" | "CREATE_FAILED" | "DELETE_IN_PROGRESS" | "ACTIVE")
       attr_accessor status_reason: ::String
       attr_accessor encryption_configuration_details: Types::EncryptionConfigurationDetails
+      attr_accessor permission_sets_enabled: bool
       SENSITIVE: []
     end
 
@@ -1278,6 +1279,7 @@ module Aws::SSOAdmin
       attr_accessor name: ::String
       attr_accessor instance_arn: ::String
       attr_accessor encryption_configuration: Types::EncryptionConfiguration
+      attr_accessor permission_sets_enabled: bool
       SENSITIVE: []
     end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-ssoadmin
 version: !ruby/object:Gem::Version
-  version: 1.76.0
+  version: 1.77.0
 platform: ruby
 authors:
 - Amazon Web Services