aws-sdk-synthetics 1.86.0 → 1.87.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 78b60937482c6e7fc8dff904d90150e842c29c4addc46e83fdb4746bb977a18e
-  data.tar.gz: e98947fa21ca13a76eb698b4da24e771630823c9b8bddcf4b5a755592ce9b1e4
+  metadata.gz: 82fa8321583b31b4bef961e19f368fe4900143d2459271c638ab2b9069aaaaad
+  data.tar.gz: 8df54f31178a990ee5b0c10bd2c1c06f5ac39b8f1e5e1e39aeec0f73fb82936c
 SHA512:
-  metadata.gz: 4d093f9ef2a8ad4be7b1ac3f1c1e8cc00c836277fd231d966c6d3408aa6a45cf1ac7a0e2de0b4bab2f4a694d1d72744cf4ad808ac77d48fa481da43aae5656f8
-  data.tar.gz: 6194cab3c07e1527cb63d38f32171614927c03bb34fe1a9e22275dc300b03e3a2ad550d28747d53868a3a3bafa84b5c0a8b6c2f259c75086895ba5a790f7dbb9
+  metadata.gz: fb78118243cce6ce040e96eaaa607509d4722c536028b7ba85fd26f8c728b572960c6a2fc5032768a635bb9e9bd629691f1ac8c80afaf9f196a67849ca14ec92
+  data.tar.gz: b9da350fdd06617e8f261453ba9bbf823f02981e27ce16aaaea52b6ca835c7218d31fe36cd9803db3e7c614d688e1f95bb025ea1b1efd42bb328533603dae785

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.87.0 (2026-07-09)
+------------------
+
+* Feature - CloudWatch Synthetics adds support for customer managed KMS keys for canary environment variables. Customers can now encrypt their canary's Lambda function environment variables at rest using their own AWS KMS key, providing additional control over data protection.
+
 1.86.0 (2026-06-18)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.86.0
+1.87.0

data/lib/aws-sdk-synthetics/client.rb

@@ -689,6 +689,12 @@ module Aws::Synthetics
     #   including the encryption-at-rest settings for artifacts that the
     #   canary uploads to Amazon S3.
     #
+    # @option params [String] :kms_key_arn
+    #   The Amazon Resource Name (ARN) of the customer-managed AWS Key
+    #   Management Service (AWS KMS) key used to encrypt the canary's AWS
+    #   Lambda function environment variables at rest. If you don't specify a
+    #   value, the service uses an AWS-managed key.
+    #
     # @return [Types::CreateCanaryResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::CreateCanaryResponse#canary #canary} => Types::Canary
@@ -752,6 +758,7 @@ module Aws::Synthetics
     #           security_group_ids: ["SecurityGroupId"],
     #           ipv_6_allowed_for_dual_stack: false,
     #         },
+    #         kms_key_arn: "KmsKeyArn",
     #       },
     #     ],
     #     tags: {
@@ -763,6 +770,7 @@ module Aws::Synthetics
     #         kms_key_arn: "KmsKeyArn",
     #       },
     #     },
+    #     kms_key_arn: "KmsKeyArn",
     #   })
     #
     # @example Response structure
@@ -841,6 +849,7 @@ module Aws::Synthetics
     #   resp.canary.tags["TagKey"] #=> String
     #   resp.canary.artifact_config.s3_encryption.encryption_mode #=> String, one of "SSE_S3", "SSE_KMS"
     #   resp.canary.artifact_config.s3_encryption.kms_key_arn #=> String
+    #   resp.canary.kms_key_arn #=> String
     #   resp.canary.dry_run_config.dry_run_id #=> String
     #   resp.canary.dry_run_config.last_dry_run_execution_status #=> String
     #
@@ -1161,6 +1170,7 @@ module Aws::Synthetics
     #   resp.canaries[0].tags["TagKey"] #=> String
     #   resp.canaries[0].artifact_config.s3_encryption.encryption_mode #=> String, one of "SSE_S3", "SSE_KMS"
     #   resp.canaries[0].artifact_config.s3_encryption.kms_key_arn #=> String
+    #   resp.canaries[0].kms_key_arn #=> String
     #   resp.canaries[0].dry_run_config.dry_run_id #=> String
     #   resp.canaries[0].dry_run_config.last_dry_run_execution_status #=> String
     #   resp.next_token #=> String
@@ -1450,6 +1460,7 @@ module Aws::Synthetics
     #   resp.canary.tags["TagKey"] #=> String
     #   resp.canary.artifact_config.s3_encryption.encryption_mode #=> String, one of "SSE_S3", "SSE_KMS"
     #   resp.canary.artifact_config.s3_encryption.kms_key_arn #=> String
+    #   resp.canary.kms_key_arn #=> String
     #   resp.canary.dry_run_config.dry_run_id #=> String
     #   resp.canary.dry_run_config.last_dry_run_execution_status #=> String
     #
@@ -2355,6 +2366,14 @@ module Aws::Synthetics
     #   remove. All replicas can be removed in a single API call and you
     #   cannot remove the primary location.
     #
+    # @option params [String] :kms_key_arn
+    #   The Amazon Resource Name (ARN) of the customer-managed AWS Key
+    #   Management Service (AWS KMS) key used to encrypt the canary's AWS
+    #   Lambda function environment variables at rest. If you don't specify a
+    #   value, the service uses an AWS-managed key. If you omit this
+    #   parameter, the service retains the existing value. To revert to the
+    #   AWS-managed key, set this parameter to an empty string.
+    #
     # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
     #
     # @example Request syntax with placeholder values
@@ -2444,9 +2463,11 @@ module Aws::Synthetics
     #           security_group_ids: ["SecurityGroupId"],
     #           ipv_6_allowed_for_dual_stack: false,
     #         },
+    #         kms_key_arn: "KmsKeyArn",
     #       },
     #     ],
     #     remove_replica_locations: ["Location"],
+    #     kms_key_arn: "KmsKeyArn",
     #   })
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/synthetics-2017-10-11/UpdateCanary AWS API Documentation
@@ -2476,7 +2497,7 @@ module Aws::Synthetics
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-synthetics'
-      context[:gem_version] = '1.86.0'
+      context[:gem_version] = '1.87.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-synthetics/client_api.rb

@@ -187,6 +187,7 @@ module Aws::Synthetics
 
     AddReplicaLocationInput.add_member(:location, Shapes::ShapeRef.new(shape: Location, required: true, location_name: "Location"))
     AddReplicaLocationInput.add_member(:vpc_config, Shapes::ShapeRef.new(shape: VpcConfigInput, location_name: "VpcConfig"))
+    AddReplicaLocationInput.add_member(:kms_key_arn, Shapes::ShapeRef.new(shape: KmsKeyArn, location_name: "KmsKeyArn"))
     AddReplicaLocationInput.struct_class = Types::AddReplicaLocationInput
 
     AddReplicaLocations.member = Shapes::ShapeRef.new(shape: AddReplicaLocationInput)
@@ -247,6 +248,7 @@ module Aws::Synthetics
     Canary.add_member(:multi_location_config, Shapes::ShapeRef.new(shape: MultiLocationConfig, location_name: "MultiLocationConfig"))
     Canary.add_member(:tags, Shapes::ShapeRef.new(shape: TagMap, location_name: "Tags"))
     Canary.add_member(:artifact_config, Shapes::ShapeRef.new(shape: ArtifactConfigOutput, location_name: "ArtifactConfig"))
+    Canary.add_member(:kms_key_arn, Shapes::ShapeRef.new(shape: KmsKeyArn, location_name: "KmsKeyArn"))
     Canary.add_member(:dry_run_config, Shapes::ShapeRef.new(shape: DryRunConfigOutput, location_name: "DryRunConfig"))
     Canary.struct_class = Types::Canary
 
@@ -350,6 +352,7 @@ module Aws::Synthetics
     CreateCanaryRequest.add_member(:add_replica_locations, Shapes::ShapeRef.new(shape: AddReplicaLocations, location_name: "AddReplicaLocations"))
     CreateCanaryRequest.add_member(:tags, Shapes::ShapeRef.new(shape: TagMap, location_name: "Tags"))
     CreateCanaryRequest.add_member(:artifact_config, Shapes::ShapeRef.new(shape: ArtifactConfigInput, location_name: "ArtifactConfig"))
+    CreateCanaryRequest.add_member(:kms_key_arn, Shapes::ShapeRef.new(shape: KmsKeyArn, location_name: "KmsKeyArn"))
     CreateCanaryRequest.struct_class = Types::CreateCanaryRequest
 
     CreateCanaryResponse.add_member(:canary, Shapes::ShapeRef.new(shape: Canary, location_name: "Canary"))
@@ -633,6 +636,7 @@ module Aws::Synthetics
     UpdateCanaryRequest.add_member(:browser_configs, Shapes::ShapeRef.new(shape: BrowserConfigs, location_name: "BrowserConfigs"))
     UpdateCanaryRequest.add_member(:add_replica_locations, Shapes::ShapeRef.new(shape: AddReplicaLocations, location_name: "AddReplicaLocations"))
     UpdateCanaryRequest.add_member(:remove_replica_locations, Shapes::ShapeRef.new(shape: RemoveReplicaLocations, location_name: "RemoveReplicaLocations"))
+    UpdateCanaryRequest.add_member(:kms_key_arn, Shapes::ShapeRef.new(shape: KmsKeyArn, location_name: "KmsKeyArn"))
     UpdateCanaryRequest.struct_class = Types::UpdateCanaryRequest
 
     UpdateCanaryResponse.struct_class = Types::UpdateCanaryResponse

data/lib/aws-sdk-synthetics/types.rb

@@ -37,11 +37,19 @@ module Aws::Synthetics
     #   connectivity.
     #   @return [Types::VpcConfigInput]
     #
+    # @!attribute [rw] kms_key_arn
+    #   The Amazon Resource Name (ARN) of the customer-managed AWS Key
+    #   Management Service (AWS KMS) key used to encrypt the canary
+    #   replica's AWS Lambda function environment variables at rest. If you
+    #   don't specify a value, the service uses an AWS-managed key.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/synthetics-2017-10-11/AddReplicaLocationInput AWS API Documentation
     #
     class AddReplicaLocationInput < Struct.new(
       :location,
-      :vpc_config)
+      :vpc_config,
+      :kms_key_arn)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -344,6 +352,13 @@ module Aws::Synthetics
     #   canary uploads to Amazon S3.
     #   @return [Types::ArtifactConfigOutput]
     #
+    # @!attribute [rw] kms_key_arn
+    #   The Amazon Resource Name (ARN) of the customer-managed AWS Key
+    #   Management Service (AWS KMS) key used to encrypt the canary's AWS
+    #   Lambda function environment variables at rest. If you don't specify
+    #   a value, the service uses an AWS-managed key.
+    #   @return [String]
+    #
     # @!attribute [rw] dry_run_config
     #   Returns the dry run configurations for a canary.
     #   @return [Types::DryRunConfigOutput]
@@ -373,6 +388,7 @@ module Aws::Synthetics
       :multi_location_config,
       :tags,
       :artifact_config,
+      :kms_key_arn,
       :dry_run_config)
       SENSITIVE = []
       include Aws::Structure
@@ -1154,6 +1170,13 @@ module Aws::Synthetics
     #   canary uploads to Amazon S3.
     #   @return [Types::ArtifactConfigInput]
     #
+    # @!attribute [rw] kms_key_arn
+    #   The Amazon Resource Name (ARN) of the customer-managed AWS Key
+    #   Management Service (AWS KMS) key used to encrypt the canary's AWS
+    #   Lambda function environment variables at rest. If you don't specify
+    #   a value, the service uses an AWS-managed key.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/synthetics-2017-10-11/CreateCanaryRequest AWS API Documentation
     #
     class CreateCanaryRequest < Struct.new(
@@ -1172,7 +1195,8 @@ module Aws::Synthetics
       :browser_configs,
       :add_replica_locations,
       :tags,
-      :artifact_config)
+      :artifact_config,
+      :kms_key_arn)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -2704,6 +2728,15 @@ module Aws::Synthetics
     #   cannot remove the primary location.
     #   @return [Array<String>]
     #
+    # @!attribute [rw] kms_key_arn
+    #   The Amazon Resource Name (ARN) of the customer-managed AWS Key
+    #   Management Service (AWS KMS) key used to encrypt the canary's AWS
+    #   Lambda function environment variables at rest. If you don't specify
+    #   a value, the service uses an AWS-managed key. If you omit this
+    #   parameter, the service retains the existing value. To revert to the
+    #   AWS-managed key, set this parameter to an empty string.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/synthetics-2017-10-11/UpdateCanaryRequest AWS API Documentation
     #
     class UpdateCanaryRequest < Struct.new(
@@ -2724,7 +2757,8 @@ module Aws::Synthetics
       :visual_references,
       :browser_configs,
       :add_replica_locations,
-      :remove_replica_locations)
+      :remove_replica_locations,
+      :kms_key_arn)
       SENSITIVE = []
       include Aws::Structure
     end

data/lib/aws-sdk-synthetics.rb

@@ -54,7 +54,7 @@ module Aws::Synthetics
   autoload :EndpointProvider, 'aws-sdk-synthetics/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-synthetics/endpoints'
 
-  GEM_VERSION = '1.86.0'
+  GEM_VERSION = '1.87.0'
 
 end
 

data/sig/client.rbs

@@ -136,7 +136,8 @@ module Aws
                                encryption_mode: ("SSE_S3" | "SSE_KMS")?,
                                kms_key_arn: ::String?
                              }?
-                           }
+                           },
+                           ?kms_key_arn: ::String
                          ) -> _CreateCanaryResponseSuccess
                        | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _CreateCanaryResponseSuccess
 
@@ -436,7 +437,8 @@ module Aws
                            ?add_replica_locations: Array[
                              Params::add_replica_location_input
                            ],
-                           ?remove_replica_locations: Array[::String]
+                           ?remove_replica_locations: Array[::String],
+                           ?kms_key_arn: ::String
                          ) -> _UpdateCanaryResponseSuccess
                        | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _UpdateCanaryResponseSuccess
     end

data/sig/params.rbs

@@ -29,7 +29,8 @@ module Aws
         subnet_ids: Array[::String]?,
         security_group_ids: Array[::String]?,
         ipv_6_allowed_for_dual_stack: bool?
-      }?
+      }?,
+      kms_key_arn: ::String?
     }
 
       type visual_reference_input = {

data/sig/types.rbs

@@ -16,6 +16,7 @@ module Aws::Synthetics
     class AddReplicaLocationInput
       attr_accessor location: ::String
       attr_accessor vpc_config: Types::VpcConfigInput
+      attr_accessor kms_key_arn: ::String
       SENSITIVE: []
     end
 
@@ -77,6 +78,7 @@ module Aws::Synthetics
       attr_accessor multi_location_config: Types::MultiLocationConfig
       attr_accessor tags: ::Hash[::String, ::String]
       attr_accessor artifact_config: Types::ArtifactConfigOutput
+      attr_accessor kms_key_arn: ::String
       attr_accessor dry_run_config: Types::DryRunConfigOutput
       SENSITIVE: []
     end
@@ -208,6 +210,7 @@ module Aws::Synthetics
       attr_accessor add_replica_locations: ::Array[Types::AddReplicaLocationInput]
       attr_accessor tags: ::Hash[::String, ::String]
       attr_accessor artifact_config: Types::ArtifactConfigInput
+      attr_accessor kms_key_arn: ::String
       SENSITIVE: []
     end
 
@@ -570,6 +573,7 @@ module Aws::Synthetics
       attr_accessor browser_configs: ::Array[Types::BrowserConfig]
       attr_accessor add_replica_locations: ::Array[Types::AddReplicaLocationInput]
       attr_accessor remove_replica_locations: ::Array[::String]
+      attr_accessor kms_key_arn: ::String
       SENSITIVE: []
     end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-synthetics
 version: !ruby/object:Gem::Version
-  version: 1.86.0
+  version: 1.87.0
 platform: ruby
 authors:
 - Amazon Web Services
@@ -18,7 +18,7 @@ dependencies:
         version: '3'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.248.0
+        version: 3.254.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -28,7 +28,7 @@ dependencies:
         version: '3'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.248.0
+        version: 3.254.0
 - !ruby/object:Gem::Dependency
   name: aws-sigv4
   requirement: !ruby/object:Gem::Requirement