@aws-sdk/client-kafka 3.1116.0 → 3.1118.0

package/dist-cjs/index.js

@@ -69,7 +69,7 @@ const commonParams = {
     UseDualStack: { type: "builtInParams", name: "useDualstackEndpoint" },
 };
 
-var version = "3.1115.0";
+var version = "3.1117.0";
 var packageInfo = {
 	version: version};
 
@@ -434,6 +434,7 @@ const _AO = "AppendOnly";
 const _AOA = "ActiveOperationArn";
 const _ATCT = "AddedToClusterTime";
 const _Ar = "Arn";
+const _Au = "Audience";
 const _B = "Bucket";
 const _BA = "BucketArn";
 const _BASS = "BatchAssociateScramSecret";
@@ -478,7 +479,8 @@ const _CAo = "ConfigurationArn";
 const _CB = "ClientBroker";
 const _CBI = "CreatedBrokerIds";
 const _CBSI = "CurrentBrokerSoftwareInfo";
-const _CC = "CreateChannel";
+const _CC = "ClientCredentials";
+const _CCA = "ClientCredentialsAssertion";
 const _CCE = "ClusterConnectivityException";
 const _CCR = "CreateChannelRequest";
 const _CCRr = "CreateChannelResponse";
@@ -489,8 +491,9 @@ const _CCRreate = "CreateConfigurationResponse";
 const _CCV = "CreateClusterV2";
 const _CCVR = "CreateClusterV2Request";
 const _CCVRr = "CreateClusterV2Response";
-const _CCr = "CreateCluster";
-const _CCre = "CreateConfiguration";
+const _CCr = "CreateChannel";
+const _CCre = "CreateCluster";
+const _CCrea = "CreateConfiguration";
 const _CE = "ConflictException";
 const _CGOSM = "ConsumerGroupOffsetSyncMode";
 const _CGR = "ConsumerGroupReplication";
@@ -653,6 +656,7 @@ const _I = "Iam";
 const _IC = "InCluster";
 const _IDC = "IcebergDestinationConfiguration";
 const _IDU = "IcebergDestinationUpdate";
+const _IJB = "IamJwtBearer";
 const _IP = "InvalidParameter";
 const _IRR = "IsReplicatorReference";
 const _ISEE = "InternalServerErrorException";
@@ -668,7 +672,11 @@ const _KCCVC = "KafkaClusterClientVpcConfig";
 const _KCD = "KafkaClusterDescription";
 const _KCEIT = "KafkaClusterEncryptionInTransit";
 const _KCMTLSA = "KafkaClusterMTLSAuthentication";
+const _KCOACC = "KafkaClusterOAuthClientCredentials";
+const _KCOACCA = "KafkaClusterOAuthClientCredentialsAssertion";
+const _KCOAIJB = "KafkaClusterOAuthIamJwtBearer";
 const _KCS = "KafkaClusterSummary";
+const _KCSOABA = "KafkaClusterSaslOAuthBearerAuthentication";
 const _KCSSA = "KafkaClusterSaslScramAuthentication";
 const _KCSa = "KafkaClustersSummary";
 const _KCa = "KafkaCluster";
@@ -812,6 +820,7 @@ const _Rev = "Revisions";
 const _S = "S3";
 const _SA = "SecretArn";
 const _SAL = "SecretArnList";
+const _SAi = "SigningAlgorithm";
 const _SC = "StorageClass";
 const _SCA = "ServerlessClientAuthentication";
 const _SCGO = "SynchroniseConsumerGroupOffsets";
@@ -834,6 +843,7 @@ const _SL = "SourceList";
 const _SM = "StorageMode";
 const _SN = "StepName";
 const _SNo = "SourceName";
+const _SOAB = "SaslOAuthBearer";
 const _SP = "ServerProperties";
 const _SPt = "StartingPosition";
 const _SR = "ServerlessRequest";
@@ -845,7 +855,8 @@ const _ST = "StartTime";
 const _SUE = "ServiceUnavailableException";
 const _SV = "SourceVersion";
 const _Sa = "Sasl";
-const _Sc = "Scram";
+const _Sc = "Scope";
+const _Scr = "Scram";
 const _Se = "Serverless";
 const _St = "Status";
 const _Sta = "State";
@@ -860,7 +871,10 @@ const _TCI = "TargetClusterInfo";
 const _TCL = "TopicConfigurationList";
 const _TCT = "TargetCompressionType";
 const _TCo = "TopicConfiguration";
+const _TEAM = "TokenEndpointAuthenticationMethod";
 const _TEE = "TopicExistsException";
+const _TETCA = "TokenEndpointTlsCertificateArn";
+const _TEU = "TokenEndpointUrl";
 const _TI = "TopicInfo";
 const _TIT = "TargetInstanceType";
 const _TK = "TagKeys";
@@ -876,6 +890,7 @@ const _TNOBN = "TargetNumberOfBrokerNodes";
 const _TPI = "TopicPartitionInfo";
 const _TR = "TopicReplication";
 const _TRR = "TagResourceRequest";
+const _TRSA = "TokenRequestSecretArn";
 const _TRU = "TopicReplicationUpdate";
 const _TRa = "TagResource";
 const _TTE = "TopicsToExclude";
@@ -971,6 +986,7 @@ const _aO = "appendOnly";
 const _aOA = "activeOperationArn";
 const _aTCT = "addedToClusterTime";
 const _ar = "arn";
+const _au = "audience";
 const _b = "bucket";
 const _bA = "bucketArn";
 const _bAZD = "brokerAZDistribution";
@@ -1007,6 +1023,8 @@ const _cAo = "configurationArn";
 const _cB = "clientBroker";
 const _cBI = "createdBrokerIds";
 const _cBSI = "currentBrokerSoftwareInfo";
+const _cC = "clientCredentials";
+const _cCA = "clientCredentialsAssertion";
 const _cGOSM = "consumerGroupOffsetSyncMode";
 const _cGR = "consumerGroupReplication";
 const _cGTE = "consumerGroupsToExclude";
@@ -1082,6 +1100,7 @@ const _i = "iam";
 const _iC = "inCluster";
 const _iDC = "icebergDestinationConfiguration";
 const _iDU = "icebergDestinationUpdate";
+const _iJB = "iamJwtBearer";
 const _iP = "invalidParameter";
 const _iRR = "isReplicatorReference";
 const _iT = "instanceType";
@@ -1183,6 +1202,7 @@ const _rev = "revisions";
 const _s = "smithy.ts.sdk.synthetic.com.amazonaws.kafka";
 const _sA = "secretArn";
 const _sAL = "secretArnList";
+const _sAi = "signingAlgorithm";
 const _sC = "storageClass";
 const _sCGO = "synchroniseConsumerGroupOffsets";
 const _sCI = "sourceClusterInfo";
@@ -1203,6 +1223,7 @@ const _sL = "sourceList";
 const _sM = "storageMode";
 const _sN = "stepName";
 const _sNo = "sourceName";
+const _sOAB = "saslOAuthBearer";
 const _sP = "serverProperties";
 const _sPt = "startingPosition";
 const _sS = "stepStatus";
@@ -1211,7 +1232,8 @@ const _sT = "startTime";
 const _sV = "sourceVersion";
 const _s_ = "s3";
 const _sa = "sasl";
-const _sc = "scram";
+const _sc = "scope";
+const _scr = "scram";
 const _se = "server";
 const _ser = "serverless";
 const _st = "status";
@@ -1226,6 +1248,9 @@ const _tCA = "targetClusterArn";
 const _tCI = "targetClusterInfo";
 const _tCL = "topicConfigurationList";
 const _tCT = "targetCompressionType";
+const _tEAM = "tokenEndpointAuthenticationMethod";
+const _tETCA = "tokenEndpointTlsCertificateArn";
+const _tEU = "tokenEndpointUrl";
 const _tIT = "targetInstanceType";
 const _tK = "tagKeys";
 const _tKCA = "targetKafkaClusterArn";
@@ -1237,6 +1262,7 @@ const _tNC = "topicNameConfiguration";
 const _tNF = "topicNameFilter";
 const _tNOBN = "targetNumberOfBrokerNodes";
 const _tR = "topicReplication";
+const _tRSA = "tokenRequestSecretArn";
 const _tTE = "topicsToExclude";
 const _tTR = "topicsToReplicate";
 const _tV = "targetVersions";
@@ -1919,8 +1945,8 @@ var KafkaCluster$ = [3, n0, _KCa,
 ];
 var KafkaClusterClientAuthentication$ = [3, n0, _KCCA,
     0,
-    [_SSa, _MTLS],
-    [[() => KafkaClusterSaslScramAuthentication$, { [_jN]: _sSa }], [() => KafkaClusterMTLSAuthentication$, { [_jN]: _mTLS }]]
+    [_SSa, _MTLS, _SOAB],
+    [[() => KafkaClusterSaslScramAuthentication$, { [_jN]: _sSa }], [() => KafkaClusterMTLSAuthentication$, { [_jN]: _mTLS }], [() => KafkaClusterSaslOAuthBearerAuthentication$, { [_jN]: _sOAB }]]
 ];
 var KafkaClusterClientVpcConfig$ = [3, n0, _KCCVC,
     0,
@@ -1942,6 +1968,26 @@ var KafkaClusterMTLSAuthentication$ = [3, n0, _KCMTLSA,
     [_SA],
     [[0, { [_jN]: _sA }]], 1
 ];
+var KafkaClusterOAuthClientCredentials$ = [3, n0, _KCOACC,
+    0,
+    [_TRSA],
+    [[0, { [_jN]: _tRSA }]], 1
+];
+var KafkaClusterOAuthClientCredentialsAssertion$ = [3, n0, _KCOACCA,
+    0,
+    [_Au, _SAi, _TRSA],
+    [[0, { [_jN]: _au }], [0, { [_jN]: _sAi }], [0, { [_jN]: _tRSA }]], 2
+];
+var KafkaClusterOAuthIamJwtBearer$ = [3, n0, _KCOAIJB,
+    0,
+    [_Au, _SAi, _TRSA],
+    [[0, { [_jN]: _au }], [0, { [_jN]: _sAi }], [0, { [_jN]: _tRSA }]], 2
+];
+var KafkaClusterSaslOAuthBearerAuthentication$ = [3, n0, _KCSOABA,
+    0,
+    [_TEU, _TEAM, _CC, _IJB, _CCA, _Sc, _TETCA],
+    [[0, { [_jN]: _tEU }], [0, { [_jN]: _tEAM }], [() => KafkaClusterOAuthClientCredentials$, { [_jN]: _cC }], [() => KafkaClusterOAuthIamJwtBearer$, { [_jN]: _iJB }], [() => KafkaClusterOAuthClientCredentialsAssertion$, { [_jN]: _cCA }], [0, { [_jN]: _sc }], [0, { [_jN]: _tETCA }]], 2
+];
 var KafkaClusterSaslScramAuthentication$ = [3, n0, _KCSSA,
     0,
     [_Me, _SA],
@@ -2309,15 +2355,15 @@ var S3Storage$ = [3, n0, _SSt,
 ];
 var Sasl$ = [3, n0, _Sa,
     0,
-    [_Sc, _I],
-    [[() => Scram$, { [_jN]: _sc }], [() => Iam$, { [_jN]: _i }]]
+    [_Scr, _I],
+    [[() => Scram$, { [_jN]: _scr }], [() => Iam$, { [_jN]: _i }]]
 ];
 var SchemaEvolution$ = [3, n0, _SE,
     0,
     [_ESE],
     [[2, { [_jN]: _eSE }]]
 ];
-var Scram$ = [3, n0, _Sc,
+var Scram$ = [3, n0, _Scr,
     0,
     [_En],
     [[2, { [_jN]: _ena }]]
@@ -2594,8 +2640,8 @@ var VpcConnectivityIam$ = [3, n0, _VCIp,
 ];
 var VpcConnectivitySasl$ = [3, n0, _VCS,
     0,
-    [_Sc, _I],
-    [[() => VpcConnectivityScram$, { [_jN]: _sc }], [() => VpcConnectivityIam$, { [_jN]: _i }]]
+    [_Scr, _I],
+    [[() => VpcConnectivityScram$, { [_jN]: _scr }], [() => VpcConnectivityIam$, { [_jN]: _i }]]
 ];
 var VpcConnectivityScram$ = [3, n0, _VCSp,
     0,
@@ -2736,16 +2782,16 @@ var BatchAssociateScramSecret$ = [9, n0, _BASS,
 var BatchDisassociateScramSecret$ = [9, n0, _BDSS,
     { [_h]: ["PATCH", "/v1/clusters/{ClusterArn}/scram-secrets", 200] }, () => BatchDisassociateScramSecretRequest$, () => BatchDisassociateScramSecretResponse$
 ];
-var CreateChannel$ = [9, n0, _CC,
+var CreateChannel$ = [9, n0, _CCr,
     { [_h]: ["POST", "/v1/clusters/{ClusterArn}/channels", 200] }, () => CreateChannelRequest$, () => CreateChannelResponse$
 ];
-var CreateCluster$ = [9, n0, _CCr,
+var CreateCluster$ = [9, n0, _CCre,
     { [_h]: ["POST", "/v1/clusters", 200] }, () => CreateClusterRequest$, () => CreateClusterResponse$
 ];
 var CreateClusterV2$ = [9, n0, _CCV,
     { [_h]: ["POST", "/api/v2/clusters", 200] }, () => CreateClusterV2Request$, () => CreateClusterV2Response$
 ];
-var CreateConfiguration$ = [9, n0, _CCre,
+var CreateConfiguration$ = [9, n0, _CCrea,
     { [_h]: ["POST", "/v1/configurations", 200] }, () => CreateConfigurationRequest$, () => CreateConfigurationResponse$
 ];
 var CreateReplicator$ = [9, n0, _CRr,
@@ -3459,6 +3505,15 @@ const ConfigurationState = {
 const PartitionStrategy = {
     TIME_HOUR: "TIME_HOUR",
 };
+const JwtSigningAlgorithm = {
+    ES384: "ES384",
+    RS256: "RS256",
+};
+const TokenEndpointAuthenticationMethod = {
+    BASIC: "BASIC",
+    NONE: "NONE",
+    POST: "POST",
+};
 const KafkaClusterSaslScramMechanism = {
     SHA256: "SHA256",
     SHA512: "SHA512",
@@ -3718,6 +3773,7 @@ exports.InternalServerErrorException = InternalServerErrorException;
 exports.InternalServerErrorException$ = InternalServerErrorException$;
 exports.JmxExporter$ = JmxExporter$;
 exports.JmxExporterInfo$ = JmxExporterInfo$;
+exports.JwtSigningAlgorithm = JwtSigningAlgorithm;
 exports.Kafka = Kafka;
 exports.KafkaClient = KafkaClient;
 exports.KafkaCluster$ = KafkaCluster$;
@@ -3727,6 +3783,10 @@ exports.KafkaClusterDescription$ = KafkaClusterDescription$;
 exports.KafkaClusterEncryptionInTransit$ = KafkaClusterEncryptionInTransit$;
 exports.KafkaClusterEncryptionInTransitType = KafkaClusterEncryptionInTransitType;
 exports.KafkaClusterMTLSAuthentication$ = KafkaClusterMTLSAuthentication$;
+exports.KafkaClusterOAuthClientCredentials$ = KafkaClusterOAuthClientCredentials$;
+exports.KafkaClusterOAuthClientCredentialsAssertion$ = KafkaClusterOAuthClientCredentialsAssertion$;
+exports.KafkaClusterOAuthIamJwtBearer$ = KafkaClusterOAuthIamJwtBearer$;
+exports.KafkaClusterSaslOAuthBearerAuthentication$ = KafkaClusterSaslOAuthBearerAuthentication$;
 exports.KafkaClusterSaslScramAuthentication$ = KafkaClusterSaslScramAuthentication$;
 exports.KafkaClusterSaslScramMechanism = KafkaClusterSaslScramMechanism;
 exports.KafkaClusterSummary$ = KafkaClusterSummary$;
@@ -3878,6 +3938,7 @@ exports.TagResourceCommand = TagResourceCommand;
 exports.TagResourceRequest$ = TagResourceRequest$;
 exports.TargetCompressionType = TargetCompressionType;
 exports.Tls$ = Tls$;
+exports.TokenEndpointAuthenticationMethod = TokenEndpointAuthenticationMethod;
 exports.TooManyRequestsException = TooManyRequestsException;
 exports.TooManyRequestsException$ = TooManyRequestsException$;
 exports.TopicConfiguration$ = TopicConfiguration$;

package/dist-es/models/enums.js

@@ -78,6 +78,15 @@ export const ConfigurationState = {
 export const PartitionStrategy = {
     TIME_HOUR: "TIME_HOUR",
 };
+export const JwtSigningAlgorithm = {
+    ES384: "ES384",
+    RS256: "RS256",
+};
+export const TokenEndpointAuthenticationMethod = {
+    BASIC: "BASIC",
+    NONE: "NONE",
+    POST: "POST",
+};
 export const KafkaClusterSaslScramMechanism = {
     SHA256: "SHA256",
     SHA512: "SHA512",

package/dist-es/schemas/schemas_0.js

@@ -8,6 +8,7 @@ const _AO = "AppendOnly";
 const _AOA = "ActiveOperationArn";
 const _ATCT = "AddedToClusterTime";
 const _Ar = "Arn";
+const _Au = "Audience";
 const _B = "Bucket";
 const _BA = "BucketArn";
 const _BASS = "BatchAssociateScramSecret";
@@ -52,7 +53,8 @@ const _CAo = "ConfigurationArn";
 const _CB = "ClientBroker";
 const _CBI = "CreatedBrokerIds";
 const _CBSI = "CurrentBrokerSoftwareInfo";
-const _CC = "CreateChannel";
+const _CC = "ClientCredentials";
+const _CCA = "ClientCredentialsAssertion";
 const _CCE = "ClusterConnectivityException";
 const _CCR = "CreateChannelRequest";
 const _CCRr = "CreateChannelResponse";
@@ -63,8 +65,9 @@ const _CCRreate = "CreateConfigurationResponse";
 const _CCV = "CreateClusterV2";
 const _CCVR = "CreateClusterV2Request";
 const _CCVRr = "CreateClusterV2Response";
-const _CCr = "CreateCluster";
-const _CCre = "CreateConfiguration";
+const _CCr = "CreateChannel";
+const _CCre = "CreateCluster";
+const _CCrea = "CreateConfiguration";
 const _CE = "ConflictException";
 const _CGOSM = "ConsumerGroupOffsetSyncMode";
 const _CGR = "ConsumerGroupReplication";
@@ -227,6 +230,7 @@ const _I = "Iam";
 const _IC = "InCluster";
 const _IDC = "IcebergDestinationConfiguration";
 const _IDU = "IcebergDestinationUpdate";
+const _IJB = "IamJwtBearer";
 const _IP = "InvalidParameter";
 const _IRR = "IsReplicatorReference";
 const _ISEE = "InternalServerErrorException";
@@ -242,7 +246,11 @@ const _KCCVC = "KafkaClusterClientVpcConfig";
 const _KCD = "KafkaClusterDescription";
 const _KCEIT = "KafkaClusterEncryptionInTransit";
 const _KCMTLSA = "KafkaClusterMTLSAuthentication";
+const _KCOACC = "KafkaClusterOAuthClientCredentials";
+const _KCOACCA = "KafkaClusterOAuthClientCredentialsAssertion";
+const _KCOAIJB = "KafkaClusterOAuthIamJwtBearer";
 const _KCS = "KafkaClusterSummary";
+const _KCSOABA = "KafkaClusterSaslOAuthBearerAuthentication";
 const _KCSSA = "KafkaClusterSaslScramAuthentication";
 const _KCSa = "KafkaClustersSummary";
 const _KCa = "KafkaCluster";
@@ -386,6 +394,7 @@ const _Rev = "Revisions";
 const _S = "S3";
 const _SA = "SecretArn";
 const _SAL = "SecretArnList";
+const _SAi = "SigningAlgorithm";
 const _SC = "StorageClass";
 const _SCA = "ServerlessClientAuthentication";
 const _SCGO = "SynchroniseConsumerGroupOffsets";
@@ -408,6 +417,7 @@ const _SL = "SourceList";
 const _SM = "StorageMode";
 const _SN = "StepName";
 const _SNo = "SourceName";
+const _SOAB = "SaslOAuthBearer";
 const _SP = "ServerProperties";
 const _SPt = "StartingPosition";
 const _SR = "ServerlessRequest";
@@ -419,7 +429,8 @@ const _ST = "StartTime";
 const _SUE = "ServiceUnavailableException";
 const _SV = "SourceVersion";
 const _Sa = "Sasl";
-const _Sc = "Scram";
+const _Sc = "Scope";
+const _Scr = "Scram";
 const _Se = "Serverless";
 const _St = "Status";
 const _Sta = "State";
@@ -434,7 +445,10 @@ const _TCI = "TargetClusterInfo";
 const _TCL = "TopicConfigurationList";
 const _TCT = "TargetCompressionType";
 const _TCo = "TopicConfiguration";
+const _TEAM = "TokenEndpointAuthenticationMethod";
 const _TEE = "TopicExistsException";
+const _TETCA = "TokenEndpointTlsCertificateArn";
+const _TEU = "TokenEndpointUrl";
 const _TI = "TopicInfo";
 const _TIT = "TargetInstanceType";
 const _TK = "TagKeys";
@@ -450,6 +464,7 @@ const _TNOBN = "TargetNumberOfBrokerNodes";
 const _TPI = "TopicPartitionInfo";
 const _TR = "TopicReplication";
 const _TRR = "TagResourceRequest";
+const _TRSA = "TokenRequestSecretArn";
 const _TRU = "TopicReplicationUpdate";
 const _TRa = "TagResource";
 const _TTE = "TopicsToExclude";
@@ -545,6 +560,7 @@ const _aO = "appendOnly";
 const _aOA = "activeOperationArn";
 const _aTCT = "addedToClusterTime";
 const _ar = "arn";
+const _au = "audience";
 const _b = "bucket";
 const _bA = "bucketArn";
 const _bAZD = "brokerAZDistribution";
@@ -581,6 +597,8 @@ const _cAo = "configurationArn";
 const _cB = "clientBroker";
 const _cBI = "createdBrokerIds";
 const _cBSI = "currentBrokerSoftwareInfo";
+const _cC = "clientCredentials";
+const _cCA = "clientCredentialsAssertion";
 const _cGOSM = "consumerGroupOffsetSyncMode";
 const _cGR = "consumerGroupReplication";
 const _cGTE = "consumerGroupsToExclude";
@@ -656,6 +674,7 @@ const _i = "iam";
 const _iC = "inCluster";
 const _iDC = "icebergDestinationConfiguration";
 const _iDU = "icebergDestinationUpdate";
+const _iJB = "iamJwtBearer";
 const _iP = "invalidParameter";
 const _iRR = "isReplicatorReference";
 const _iT = "instanceType";
@@ -757,6 +776,7 @@ const _rev = "revisions";
 const _s = "smithy.ts.sdk.synthetic.com.amazonaws.kafka";
 const _sA = "secretArn";
 const _sAL = "secretArnList";
+const _sAi = "signingAlgorithm";
 const _sC = "storageClass";
 const _sCGO = "synchroniseConsumerGroupOffsets";
 const _sCI = "sourceClusterInfo";
@@ -777,6 +797,7 @@ const _sL = "sourceList";
 const _sM = "storageMode";
 const _sN = "stepName";
 const _sNo = "sourceName";
+const _sOAB = "saslOAuthBearer";
 const _sP = "serverProperties";
 const _sPt = "startingPosition";
 const _sS = "stepStatus";
@@ -785,7 +806,8 @@ const _sT = "startTime";
 const _sV = "sourceVersion";
 const _s_ = "s3";
 const _sa = "sasl";
-const _sc = "scram";
+const _sc = "scope";
+const _scr = "scram";
 const _se = "server";
 const _ser = "serverless";
 const _st = "status";
@@ -800,6 +822,9 @@ const _tCA = "targetClusterArn";
 const _tCI = "targetClusterInfo";
 const _tCL = "topicConfigurationList";
 const _tCT = "targetCompressionType";
+const _tEAM = "tokenEndpointAuthenticationMethod";
+const _tETCA = "tokenEndpointTlsCertificateArn";
+const _tEU = "tokenEndpointUrl";
 const _tIT = "targetInstanceType";
 const _tK = "tagKeys";
 const _tKCA = "targetKafkaClusterArn";
@@ -811,6 +836,7 @@ const _tNC = "topicNameConfiguration";
 const _tNF = "topicNameFilter";
 const _tNOBN = "targetNumberOfBrokerNodes";
 const _tR = "topicReplication";
+const _tRSA = "tokenRequestSecretArn";
 const _tTE = "topicsToExclude";
 const _tTR = "topicsToReplicate";
 const _tV = "targetVersions";
@@ -1496,8 +1522,8 @@ export var KafkaCluster$ = [3, n0, _KCa,
 ];
 export var KafkaClusterClientAuthentication$ = [3, n0, _KCCA,
     0,
-    [_SSa, _MTLS],
-    [[() => KafkaClusterSaslScramAuthentication$, { [_jN]: _sSa }], [() => KafkaClusterMTLSAuthentication$, { [_jN]: _mTLS }]]
+    [_SSa, _MTLS, _SOAB],
+    [[() => KafkaClusterSaslScramAuthentication$, { [_jN]: _sSa }], [() => KafkaClusterMTLSAuthentication$, { [_jN]: _mTLS }], [() => KafkaClusterSaslOAuthBearerAuthentication$, { [_jN]: _sOAB }]]
 ];
 export var KafkaClusterClientVpcConfig$ = [3, n0, _KCCVC,
     0,
@@ -1519,6 +1545,26 @@ export var KafkaClusterMTLSAuthentication$ = [3, n0, _KCMTLSA,
     [_SA],
     [[0, { [_jN]: _sA }]], 1
 ];
+export var KafkaClusterOAuthClientCredentials$ = [3, n0, _KCOACC,
+    0,
+    [_TRSA],
+    [[0, { [_jN]: _tRSA }]], 1
+];
+export var KafkaClusterOAuthClientCredentialsAssertion$ = [3, n0, _KCOACCA,
+    0,
+    [_Au, _SAi, _TRSA],
+    [[0, { [_jN]: _au }], [0, { [_jN]: _sAi }], [0, { [_jN]: _tRSA }]], 2
+];
+export var KafkaClusterOAuthIamJwtBearer$ = [3, n0, _KCOAIJB,
+    0,
+    [_Au, _SAi, _TRSA],
+    [[0, { [_jN]: _au }], [0, { [_jN]: _sAi }], [0, { [_jN]: _tRSA }]], 2
+];
+export var KafkaClusterSaslOAuthBearerAuthentication$ = [3, n0, _KCSOABA,
+    0,
+    [_TEU, _TEAM, _CC, _IJB, _CCA, _Sc, _TETCA],
+    [[0, { [_jN]: _tEU }], [0, { [_jN]: _tEAM }], [() => KafkaClusterOAuthClientCredentials$, { [_jN]: _cC }], [() => KafkaClusterOAuthIamJwtBearer$, { [_jN]: _iJB }], [() => KafkaClusterOAuthClientCredentialsAssertion$, { [_jN]: _cCA }], [0, { [_jN]: _sc }], [0, { [_jN]: _tETCA }]], 2
+];
 export var KafkaClusterSaslScramAuthentication$ = [3, n0, _KCSSA,
     0,
     [_Me, _SA],
@@ -1886,15 +1932,15 @@ export var S3Storage$ = [3, n0, _SSt,
 ];
 export var Sasl$ = [3, n0, _Sa,
     0,
-    [_Sc, _I],
-    [[() => Scram$, { [_jN]: _sc }], [() => Iam$, { [_jN]: _i }]]
+    [_Scr, _I],
+    [[() => Scram$, { [_jN]: _scr }], [() => Iam$, { [_jN]: _i }]]
 ];
 export var SchemaEvolution$ = [3, n0, _SE,
     0,
     [_ESE],
     [[2, { [_jN]: _eSE }]]
 ];
-export var Scram$ = [3, n0, _Sc,
+export var Scram$ = [3, n0, _Scr,
     0,
     [_En],
     [[2, { [_jN]: _ena }]]
@@ -2171,8 +2217,8 @@ export var VpcConnectivityIam$ = [3, n0, _VCIp,
 ];
 export var VpcConnectivitySasl$ = [3, n0, _VCS,
     0,
-    [_Sc, _I],
-    [[() => VpcConnectivityScram$, { [_jN]: _sc }], [() => VpcConnectivityIam$, { [_jN]: _i }]]
+    [_Scr, _I],
+    [[() => VpcConnectivityScram$, { [_jN]: _scr }], [() => VpcConnectivityIam$, { [_jN]: _i }]]
 ];
 export var VpcConnectivityScram$ = [3, n0, _VCSp,
     0,
@@ -2319,16 +2365,16 @@ export var BatchAssociateScramSecret$ = [9, n0, _BASS,
 export var BatchDisassociateScramSecret$ = [9, n0, _BDSS,
     { [_h]: ["PATCH", "/v1/clusters/{ClusterArn}/scram-secrets", 200] }, () => BatchDisassociateScramSecretRequest$, () => BatchDisassociateScramSecretResponse$
 ];
-export var CreateChannel$ = [9, n0, _CC,
+export var CreateChannel$ = [9, n0, _CCr,
     { [_h]: ["POST", "/v1/clusters/{ClusterArn}/channels", 200] }, () => CreateChannelRequest$, () => CreateChannelResponse$
 ];
-export var CreateCluster$ = [9, n0, _CCr,
+export var CreateCluster$ = [9, n0, _CCre,
     { [_h]: ["POST", "/v1/clusters", 200] }, () => CreateClusterRequest$, () => CreateClusterResponse$
 ];
 export var CreateClusterV2$ = [9, n0, _CCV,
     { [_h]: ["POST", "/api/v2/clusters", 200] }, () => CreateClusterV2Request$, () => CreateClusterV2Response$
 ];
-export var CreateConfiguration$ = [9, n0, _CCre,
+export var CreateConfiguration$ = [9, n0, _CCrea,
     { [_h]: ["POST", "/v1/configurations", 200] }, () => CreateConfigurationRequest$, () => CreateConfigurationResponse$
 ];
 export var CreateReplicator$ = [9, n0, _CRr,

package/dist-types/commands/CreateReplicatorCommand.d.ts

@@ -60,6 +60,25 @@ declare const CreateReplicatorCommand_base: {
  *         MTLS: { // KafkaClusterMTLSAuthentication
  *           SecretArn: "STRING_VALUE", // required
  *         },
+ *         SaslOAuthBearer: { // KafkaClusterSaslOAuthBearerAuthentication
+ *           TokenEndpointUrl: "STRING_VALUE", // required
+ *           ClientCredentials: { // KafkaClusterOAuthClientCredentials
+ *             TokenRequestSecretArn: "STRING_VALUE", // required
+ *           },
+ *           IamJwtBearer: { // KafkaClusterOAuthIamJwtBearer
+ *             Audience: "STRING_VALUE", // required
+ *             SigningAlgorithm: "RS256" || "ES384", // required
+ *             TokenRequestSecretArn: "STRING_VALUE",
+ *           },
+ *           ClientCredentialsAssertion: { // KafkaClusterOAuthClientCredentialsAssertion
+ *             Audience: "STRING_VALUE", // required
+ *             SigningAlgorithm: "RS256" || "ES384", // required
+ *             TokenRequestSecretArn: "STRING_VALUE",
+ *           },
+ *           TokenEndpointAuthenticationMethod: "POST" || "BASIC" || "NONE", // required
+ *           Scope: "STRING_VALUE",
+ *           TokenEndpointTlsCertificateArn: "STRING_VALUE",
+ *         },
  *       },
  *       EncryptionInTransit: { // KafkaClusterEncryptionInTransit
  *         EncryptionType: "TLS", // required

package/dist-types/commands/DescribeReplicatorCommand.d.ts

@@ -68,6 +68,25 @@ declare const DescribeReplicatorCommand_base: {
  * //         MTLS: { // KafkaClusterMTLSAuthentication
  * //           SecretArn: "STRING_VALUE", // required
  * //         },
+ * //         SaslOAuthBearer: { // KafkaClusterSaslOAuthBearerAuthentication
+ * //           TokenEndpointUrl: "STRING_VALUE", // required
+ * //           ClientCredentials: { // KafkaClusterOAuthClientCredentials
+ * //             TokenRequestSecretArn: "STRING_VALUE", // required
+ * //           },
+ * //           IamJwtBearer: { // KafkaClusterOAuthIamJwtBearer
+ * //             Audience: "STRING_VALUE", // required
+ * //             SigningAlgorithm: "RS256" || "ES384", // required
+ * //             TokenRequestSecretArn: "STRING_VALUE",
+ * //           },
+ * //           ClientCredentialsAssertion: { // KafkaClusterOAuthClientCredentialsAssertion
+ * //             Audience: "STRING_VALUE", // required
+ * //             SigningAlgorithm: "RS256" || "ES384", // required
+ * //             TokenRequestSecretArn: "STRING_VALUE",
+ * //           },
+ * //           TokenEndpointAuthenticationMethod: "POST" || "BASIC" || "NONE", // required
+ * //           Scope: "STRING_VALUE",
+ * //           TokenEndpointTlsCertificateArn: "STRING_VALUE",
+ * //         },
  * //       },
  * //       EncryptionInTransit: { // KafkaClusterEncryptionInTransit
  * //         EncryptionType: "TLS", // required

package/dist-types/models/enums.d.ts

@@ -198,6 +198,31 @@ export declare const PartitionStrategy: {
  * @public
  */
 export type PartitionStrategy = (typeof PartitionStrategy)[keyof typeof PartitionStrategy];
+/**
+ * @public
+ * @enum
+ */
+export declare const JwtSigningAlgorithm: {
+    readonly ES384: "ES384";
+    readonly RS256: "RS256";
+};
+/**
+ * @public
+ */
+export type JwtSigningAlgorithm = (typeof JwtSigningAlgorithm)[keyof typeof JwtSigningAlgorithm];
+/**
+ * @public
+ * @enum
+ */
+export declare const TokenEndpointAuthenticationMethod: {
+    readonly BASIC: "BASIC";
+    readonly NONE: "NONE";
+    readonly POST: "POST";
+};
+/**
+ * @public
+ */
+export type TokenEndpointAuthenticationMethod = (typeof TokenEndpointAuthenticationMethod)[keyof typeof TokenEndpointAuthenticationMethod];
 /**
  * @public
  * @enum

package/dist-types/models/models_0.d.ts

@@ -1,4 +1,4 @@
-import type { BrokerAZDistribution, ChannelDestinationType, ChannelStatus, ClientBroker, ClusterState, ClusterType, ConfigurationState, ConsumerGroupOffsetSyncMode, CustomerActionStatus, EnhancedMonitoring, IcebergCompressionType, KafkaClusterEncryptionInTransitType, KafkaClusterSaslScramMechanism, KafkaVersionStatus, NetworkType, NodeType, PartitionStrategy, RebalancingStatus, ReplicationStartingPositionType, ReplicationTopicNameConfigurationType, ReplicatorState, S3CompressionType, S3StorageClass, StorageMode, TargetCompressionType, TopicState, UserIdentityType, ValueConverter, VpcConnectionState } from "./enums";
+import type { BrokerAZDistribution, ChannelDestinationType, ChannelStatus, ClientBroker, ClusterState, ClusterType, ConfigurationState, ConsumerGroupOffsetSyncMode, CustomerActionStatus, EnhancedMonitoring, IcebergCompressionType, JwtSigningAlgorithm, KafkaClusterEncryptionInTransitType, KafkaClusterSaslScramMechanism, KafkaVersionStatus, NetworkType, NodeType, PartitionStrategy, RebalancingStatus, ReplicationStartingPositionType, ReplicationTopicNameConfigurationType, ReplicatorState, S3CompressionType, S3StorageClass, StorageMode, TargetCompressionType, TokenEndpointAuthenticationMethod, TopicState, UserIdentityType, ValueConverter, VpcConnectionState } from "./enums";
 /**
  * <p>Contains information about provisioned throughput for EBS storage volumes attached to kafka broker nodes.</p>
  * @public
@@ -1401,6 +1401,100 @@ export interface KafkaClusterMTLSAuthentication {
      */
     SecretArn: string | undefined;
 }
+/**
+ * <p>Details for SASL/OAUTHBEARER using standard client_credentials grant.</p>
+ * @public
+ */
+export interface KafkaClusterOAuthClientCredentials {
+    /**
+     * <p>The Amazon Resource Name (ARN) of the Secrets Manager secret containing the OAuth client credentials.</p>
+     * @public
+     */
+    TokenRequestSecretArn: string | undefined;
+}
+/**
+ * <p>Details for SASL/OAUTHBEARER using client credentials grant with JWT client assertion.</p>
+ * @public
+ */
+export interface KafkaClusterOAuthClientCredentialsAssertion {
+    /**
+     * <p>The audience for the JWT client assertion.</p>
+     * @public
+     */
+    Audience: string | undefined;
+    /**
+     * <p>The signing algorithm for the JWT client assertion.</p>
+     * @public
+     */
+    SigningAlgorithm: JwtSigningAlgorithm | undefined;
+    /**
+     * <p>The Amazon Resource Name (ARN) of the Secrets Manager secret containing the signing key.</p>
+     * @public
+     */
+    TokenRequestSecretArn?: string | undefined;
+}
+/**
+ * <p>Details for SASL/OAUTHBEARER using JWT Bearer assertion grant.</p>
+ * @public
+ */
+export interface KafkaClusterOAuthIamJwtBearer {
+    /**
+     * <p>The audience for the JWT Bearer assertion.</p>
+     * @public
+     */
+    Audience: string | undefined;
+    /**
+     * <p>The signing algorithm for the JWT Bearer assertion.</p>
+     * @public
+     */
+    SigningAlgorithm: JwtSigningAlgorithm | undefined;
+    /**
+     * <p>The Amazon Resource Name (ARN) of the Secrets Manager secret containing the signing key.</p>
+     * @public
+     */
+    TokenRequestSecretArn?: string | undefined;
+}
+/**
+ * <p>Details for SASL/OAUTHBEARER client authentication.</p>
+ * @public
+ */
+export interface KafkaClusterSaslOAuthBearerAuthentication {
+    /**
+     * <p>The HTTPS URL of the OAuth token endpoint that vends OAuth Bearer tokens per RFC 6749.</p>
+     * @public
+     */
+    TokenEndpointUrl: string | undefined;
+    /**
+     * <p>Details for SASL/OAUTHBEARER using standard client_credentials grant.</p>
+     * @public
+     */
+    ClientCredentials?: KafkaClusterOAuthClientCredentials | undefined;
+    /**
+     * <p>Details for SASL/OAUTHBEARER using JWT Bearer assertion grant (RFC 7523).</p>
+     * @public
+     */
+    IamJwtBearer?: KafkaClusterOAuthIamJwtBearer | undefined;
+    /**
+     * <p>Details for SASL/OAUTHBEARER using client credentials grant with JWT client assertion.</p>
+     * @public
+     */
+    ClientCredentialsAssertion?: KafkaClusterOAuthClientCredentialsAssertion | undefined;
+    /**
+     * <p>How client credentials are sent to the identity provider. Valid values are POST, BASIC, or NONE.</p>
+     * @public
+     */
+    TokenEndpointAuthenticationMethod: TokenEndpointAuthenticationMethod | undefined;
+    /**
+     * <p>OAuth scope to request.</p>
+     * @public
+     */
+    Scope?: string | undefined;
+    /**
+     * <p>Secrets Manager ARN containing a custom CA certificate for the identity provider.</p>
+     * @public
+     */
+    TokenEndpointTlsCertificateArn?: string | undefined;
+}
 /**
  * <p>Details for SASL/SCRAM client authentication.</p>
  * @public
@@ -1432,6 +1526,11 @@ export interface KafkaClusterClientAuthentication {
      * @public
      */
     MTLS?: KafkaClusterMTLSAuthentication | undefined;
+    /**
+     * <p>Details for SASL/OAUTHBEARER client authentication.</p>
+     * @public
+     */
+    SaslOAuthBearer?: KafkaClusterSaslOAuthBearerAuthentication | undefined;
 }
 /**
  * <p>Details of encryption in transit to the Apache Kafka cluster.</p>

package/dist-types/schemas/schemas_0.d.ts

@@ -137,6 +137,10 @@ export declare var KafkaClusterClientVpcConfig$: StaticStructureSchema;
 export declare var KafkaClusterDescription$: StaticStructureSchema;
 export declare var KafkaClusterEncryptionInTransit$: StaticStructureSchema;
 export declare var KafkaClusterMTLSAuthentication$: StaticStructureSchema;
+export declare var KafkaClusterOAuthClientCredentials$: StaticStructureSchema;
+export declare var KafkaClusterOAuthClientCredentialsAssertion$: StaticStructureSchema;
+export declare var KafkaClusterOAuthIamJwtBearer$: StaticStructureSchema;
+export declare var KafkaClusterSaslOAuthBearerAuthentication$: StaticStructureSchema;
 export declare var KafkaClusterSaslScramAuthentication$: StaticStructureSchema;
 export declare var KafkaClusterSummary$: StaticStructureSchema;
 export declare var KafkaVersion$: StaticStructureSchema;

package/dist-types/ts3.4/models/enums.d.ts

@@ -94,6 +94,18 @@ export declare const PartitionStrategy: {
   readonly TIME_HOUR: "TIME_HOUR";
 };
 export type PartitionStrategy = (typeof PartitionStrategy)[keyof typeof PartitionStrategy];
+export declare const JwtSigningAlgorithm: {
+  readonly ES384: "ES384";
+  readonly RS256: "RS256";
+};
+export type JwtSigningAlgorithm = (typeof JwtSigningAlgorithm)[keyof typeof JwtSigningAlgorithm];
+export declare const TokenEndpointAuthenticationMethod: {
+  readonly BASIC: "BASIC";
+  readonly NONE: "NONE";
+  readonly POST: "POST";
+};
+export type TokenEndpointAuthenticationMethod =
+  (typeof TokenEndpointAuthenticationMethod)[keyof typeof TokenEndpointAuthenticationMethod];
 export declare const KafkaClusterSaslScramMechanism: {
   readonly SHA256: "SHA256";
   readonly SHA512: "SHA512";

package/dist-types/ts3.4/models/models_0.d.ts

@@ -10,6 +10,7 @@ import {
   CustomerActionStatus,
   EnhancedMonitoring,
   IcebergCompressionType,
+  JwtSigningAlgorithm,
   KafkaClusterEncryptionInTransitType,
   KafkaClusterSaslScramMechanism,
   KafkaVersionStatus,
@@ -24,6 +25,7 @@ import {
   S3StorageClass,
   StorageMode,
   TargetCompressionType,
+  TokenEndpointAuthenticationMethod,
   TopicState,
   UserIdentityType,
   ValueConverter,
@@ -376,6 +378,28 @@ export interface ApacheKafkaCluster {
 export interface KafkaClusterMTLSAuthentication {
   SecretArn: string | undefined;
 }
+export interface KafkaClusterOAuthClientCredentials {
+  TokenRequestSecretArn: string | undefined;
+}
+export interface KafkaClusterOAuthClientCredentialsAssertion {
+  Audience: string | undefined;
+  SigningAlgorithm: JwtSigningAlgorithm | undefined;
+  TokenRequestSecretArn?: string | undefined;
+}
+export interface KafkaClusterOAuthIamJwtBearer {
+  Audience: string | undefined;
+  SigningAlgorithm: JwtSigningAlgorithm | undefined;
+  TokenRequestSecretArn?: string | undefined;
+}
+export interface KafkaClusterSaslOAuthBearerAuthentication {
+  TokenEndpointUrl: string | undefined;
+  ClientCredentials?: KafkaClusterOAuthClientCredentials | undefined;
+  IamJwtBearer?: KafkaClusterOAuthIamJwtBearer | undefined;
+  ClientCredentialsAssertion?: KafkaClusterOAuthClientCredentialsAssertion | undefined;
+  TokenEndpointAuthenticationMethod: TokenEndpointAuthenticationMethod | undefined;
+  Scope?: string | undefined;
+  TokenEndpointTlsCertificateArn?: string | undefined;
+}
 export interface KafkaClusterSaslScramAuthentication {
   Mechanism: KafkaClusterSaslScramMechanism | undefined;
   SecretArn: string | undefined;
@@ -383,6 +407,7 @@ export interface KafkaClusterSaslScramAuthentication {
 export interface KafkaClusterClientAuthentication {
   SaslScram?: KafkaClusterSaslScramAuthentication | undefined;
   MTLS?: KafkaClusterMTLSAuthentication | undefined;
+  SaslOAuthBearer?: KafkaClusterSaslOAuthBearerAuthentication | undefined;
 }
 export interface KafkaClusterEncryptionInTransit {
   EncryptionType: KafkaClusterEncryptionInTransitType | undefined;

package/dist-types/ts3.4/schemas/schemas_0.d.ts

@@ -132,6 +132,10 @@ export declare var KafkaClusterClientVpcConfig$: StaticStructureSchema;
 export declare var KafkaClusterDescription$: StaticStructureSchema;
 export declare var KafkaClusterEncryptionInTransit$: StaticStructureSchema;
 export declare var KafkaClusterMTLSAuthentication$: StaticStructureSchema;
+export declare var KafkaClusterOAuthClientCredentials$: StaticStructureSchema;
+export declare var KafkaClusterOAuthClientCredentialsAssertion$: StaticStructureSchema;
+export declare var KafkaClusterOAuthIamJwtBearer$: StaticStructureSchema;
+export declare var KafkaClusterSaslOAuthBearerAuthentication$: StaticStructureSchema;
 export declare var KafkaClusterSaslScramAuthentication$: StaticStructureSchema;
 export declare var KafkaClusterSummary$: StaticStructureSchema;
 export declare var KafkaVersion$: StaticStructureSchema;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aws-sdk/client-kafka",
-  "version": "3.1116.0",
+  "version": "3.1118.0",
   "description": "AWS SDK for JavaScript Kafka Client for Node.js, Browser and React Native",
   "homepage": "https://github.com/aws/aws-sdk-js-v3/tree/main/clients/client-kafka",
   "license": "Apache-2.0",