Updated Authentication Profile APIs to add support for automatic logout on user inactivity

This release expands ALB Authentication to support JWT verification and adds support for a new JWT validation action in listener rule.
Adds complete AMI ancestry tracing from immediate parent through each preceding generation back to the root AMI
Added support of SQL statements creation, metadata model discovery and selection rules transformation.
Adds support for request metrics metrics APIs for S3 Tables
Add VPC source configuration support enabling Amazon Managed Service for Prometheus Collector to collect metrics from MSK clusters.
Added GetIdentityCenterAuthToken API to retrieve encrypted authentication tokens for Identity Center integrated applications. This API enables programmatic access to secure Identity Center tokens with proper error handling and parameter validation across supported SDK languages.
Add support for trn2.3xlarge instance type for SageMaker Hyperpod

Author: aws-sdk-cpp-automation

VERSION

@@ -1 +1 @@
-1.11.688
+1.11.689

generated/src/aws-cpp-sdk-amp/include/aws/amp/PrometheusServiceClient.h

@@ -218,10 +218,12 @@ class AWS_PROMETHEUSSERVICE_API PrometheusServiceClient : public Aws::Client::AW
   /**
    * <p>The <code>CreateRuleGroupsNamespace</code> operation creates a rule groups
    * namespace within a workspace. A rule groups namespace is associated with exactly
-   * one rules file. A workspace can have multiple rule groups namespaces.</p> <p>Use
-   * this operation only to create new rule groups namespaces. To update an existing
-   * rule groups namespace, use <code>PutRuleGroupsNamespace</code>.</p><p><h3>See
-   * Also:</h3>   <a
+   * one rules file. A workspace can have multiple rule groups namespaces.</p>
+   *  <p>The combined length of a rule group namespace and a rule group
+   * name cannot exceed 721 UTF-8 bytes.</p>  <p>Use this operation only
+   * to create new rule groups namespaces. To update an existing rule groups
+   * namespace, use <code>PutRuleGroupsNamespace</code>.</p><p><h3>See Also:</h3>
+   * <a
    * href="http://docs.aws.amazon.com/goto/WebAPI/amp-2020-08-01/CreateRuleGroupsNamespace">AWS
    * API Reference</a></p>
    */
@@ -250,24 +252,25 @@ class AWS_PROMETHEUSSERVICE_API PrometheusServiceClient : public Aws::Client::AW
 
   /**
    * <p>The <code>CreateScraper</code> operation creates a scraper to collect
-   * metrics. A scraper pulls metrics from Prometheus-compatible sources within an
-   * Amazon EKS cluster, and sends them to your Amazon Managed Service for Prometheus
-   * workspace. Scrapers are flexible, and can be configured to control what metrics
-   * are collected, the frequency of collection, what transformations are applied to
-   * the metrics, and more.</p> <p>An IAM role will be created for you that Amazon
-   * Managed Service for Prometheus uses to access the metrics in your cluster. You
-   * must configure this role with a policy that allows it to scrape metrics from
-   * your cluster. For more information, see <a
+   * metrics. A scraper pulls metrics from Prometheus-compatible sources and sends
+   * them to your Amazon Managed Service for Prometheus workspace. You can configure
+   * scrapers to collect metrics from Amazon EKS clusters, Amazon MSK clusters, or
+   * from VPC-based sources that support DNS-based service discovery. Scrapers are
+   * flexible, and can be configured to control what metrics are collected, the
+   * frequency of collection, what transformations are applied to the metrics, and
+   * more.</p> <p>An IAM role will be created for you that Amazon Managed Service for
+   * Prometheus uses to access the metrics in your source. You must configure this
+   * role with a policy that allows it to scrape metrics from your source. For Amazon
+   * EKS sources, see <a
    * href="https://docs.aws.amazon.com/prometheus/latest/userguide/AMP-collector-how-to.html#AMP-collector-eks-setup">Configuring
    * your Amazon EKS cluster</a> in the <i>Amazon Managed Service for Prometheus User
    * Guide</i>.</p> <p>The <code>scrapeConfiguration</code> parameter contains the
    * base-64 encoded YAML configuration for the scraper.</p> <p>When creating a
    * scraper, the service creates a <code>Network Interface</code> in each
    * <b>Availability Zone</b> that are passed into <code>CreateScraper</code> through
-   * subnets. These network interfaces are used to connect to the Amazon EKS cluster
-   * within the VPC for scraping metrics.</p>  <p>For more information about
-   * collectors, including what metrics are collected, and how to configure the
-   * scraper, see <a
+   * subnets. These network interfaces are used to connect to your source within the
+   * VPC for scraping metrics.</p>  <p>For more information about collectors,
+   * including what metrics are collected, and how to configure the scraper, see <a
    * href="https://docs.aws.amazon.com/prometheus/latest/userguide/AMP-collector-how-to.html">Using
    * an Amazon Web Services managed collector</a> in the <i>Amazon Managed Service
    * for Prometheus User Guide</i>.</p> <p><h3>See Also:</h3>   <a
@@ -1153,8 +1156,10 @@ class AWS_PROMETHEUSSERVICE_API PrometheusServiceClient : public Aws::Client::AW
   /**
    * <p>Updates an existing rule groups namespace within a workspace. A rule groups
    * namespace is associated with exactly one rules file. A workspace can have
-   * multiple rule groups namespaces.</p> <p>Use this operation only to update
-   * existing rule groups namespaces. To create a new rule groups namespace, use
+   * multiple rule groups namespaces.</p>  <p>The combined length of a
+   * rule group namespace and a rule group name cannot exceed 721 UTF-8 bytes.</p>
+   *  <p>Use this operation only to update existing rule groups
+   * namespaces. To create a new rule groups namespace, use
    * <code>CreateRuleGroupsNamespace</code>.</p> <p>You can't use this operation to
    * add tags to an existing rule groups namespace. Instead, use
    * <code>TagResource</code>.</p><p><h3>See Also:</h3>   <a

generated/src/aws-cpp-sdk-amp/include/aws/amp/model/CreateScraperRequest.h

@@ -81,7 +81,8 @@ class CreateScraperRequest : public PrometheusServiceRequest {
 
   ///@{
   /**
-   * <p>The Amazon EKS cluster from which the scraper will collect metrics.</p>
+   * <p>The Amazon EKS or Amazon Web Services cluster from which the scraper will
+   * collect metrics.</p>
    */
   inline const Source& GetSource() const { return m_source; }
   inline bool SourceHasBeenSet() const { return m_sourceHasBeenSet; }

generated/src/aws-cpp-sdk-amp/include/aws/amp/model/Source.h

@@ -6,6 +6,7 @@
 #pragma once
 #include <aws/amp/PrometheusService_EXPORTS.h>
 #include <aws/amp/model/EksConfiguration.h>
+#include <aws/amp/model/VpcConfiguration.h>
 
 #include <utility>
 
@@ -48,9 +49,33 @@ class Source {
     return *this;
   }
   ///@}
+
+  ///@{
+  /**
+   * <p>The Amazon VPC configuration for the Prometheus collector when connecting to
+   * Amazon MSK clusters. This configuration enables secure, private network
+   * connectivity between the collector and your Amazon MSK cluster within your
+   * Amazon VPC.</p>
+   */
+  inline const VpcConfiguration& GetVpcConfiguration() const { return m_vpcConfiguration; }
+  inline bool VpcConfigurationHasBeenSet() const { return m_vpcConfigurationHasBeenSet; }
+  template <typename VpcConfigurationT = VpcConfiguration>
+  void SetVpcConfiguration(VpcConfigurationT&& value) {
+    m_vpcConfigurationHasBeenSet = true;
+    m_vpcConfiguration = std::forward<VpcConfigurationT>(value);
+  }
+  template <typename VpcConfigurationT = VpcConfiguration>
+  Source& WithVpcConfiguration(VpcConfigurationT&& value) {
+    SetVpcConfiguration(std::forward<VpcConfigurationT>(value));
+    return *this;
+  }
+  ///@}
  private:
   EksConfiguration m_eksConfiguration;
   bool m_eksConfigurationHasBeenSet = false;
+
+  VpcConfiguration m_vpcConfiguration;
+  bool m_vpcConfigurationHasBeenSet = false;
 };
 
 }  // namespace Model

generated/src/aws-cpp-sdk-amp/include/aws/amp/model/VpcConfiguration.h

@@ -0,0 +1,99 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0.
+ */
+
+#pragma once
+#include <aws/amp/PrometheusService_EXPORTS.h>
+#include <aws/core/utils/memory/stl/AWSString.h>
+#include <aws/core/utils/memory/stl/AWSVector.h>
+
+#include <utility>
+
+namespace Aws {
+namespace Utils {
+namespace Json {
+class JsonValue;
+class JsonView;
+}  // namespace Json
+}  // namespace Utils
+namespace PrometheusService {
+namespace Model {
+
+/**
+ * <p>The Amazon VPC configuration that specifies the network settings for a
+ * Prometheus collector to securely connect to Amazon MSK clusters. This
+ * configuration includes the security groups and subnets that control network
+ * access and placement for the collector.</p><p><h3>See Also:</h3>   <a
+ * href="http://docs.aws.amazon.com/goto/WebAPI/amp-2020-08-01/VpcConfiguration">AWS
+ * API Reference</a></p>
+ */
+class VpcConfiguration {
+ public:
+  AWS_PROMETHEUSSERVICE_API VpcConfiguration() = default;
+  AWS_PROMETHEUSSERVICE_API VpcConfiguration(Aws::Utils::Json::JsonView jsonValue);
+  AWS_PROMETHEUSSERVICE_API VpcConfiguration& operator=(Aws::Utils::Json::JsonView jsonValue);
+  AWS_PROMETHEUSSERVICE_API Aws::Utils::Json::JsonValue Jsonize() const;
+
+  ///@{
+  /**
+   * <p>The security group IDs that control network access for the Prometheus
+   * collector. These security groups must allow the collector to communicate with
+   * your Amazon MSK cluster on the required ports.</p>
+   */
+  inline const Aws::Vector<Aws::String>& GetSecurityGroupIds() const { return m_securityGroupIds; }
+  inline bool SecurityGroupIdsHasBeenSet() const { return m_securityGroupIdsHasBeenSet; }
+  template <typename SecurityGroupIdsT = Aws::Vector<Aws::String>>
+  void SetSecurityGroupIds(SecurityGroupIdsT&& value) {
+    m_securityGroupIdsHasBeenSet = true;
+    m_securityGroupIds = std::forward<SecurityGroupIdsT>(value);
+  }
+  template <typename SecurityGroupIdsT = Aws::Vector<Aws::String>>
+  VpcConfiguration& WithSecurityGroupIds(SecurityGroupIdsT&& value) {
+    SetSecurityGroupIds(std::forward<SecurityGroupIdsT>(value));
+    return *this;
+  }
+  template <typename SecurityGroupIdsT = Aws::String>
+  VpcConfiguration& AddSecurityGroupIds(SecurityGroupIdsT&& value) {
+    m_securityGroupIdsHasBeenSet = true;
+    m_securityGroupIds.emplace_back(std::forward<SecurityGroupIdsT>(value));
+    return *this;
+  }
+  ///@}
+
+  ///@{
+  /**
+   * <p>The subnet IDs where the Prometheus collector will be deployed. The subnets
+   * must be in the same Amazon VPC as your Amazon MSK cluster and have network
+   * connectivity to the cluster.</p>
+   */
+  inline const Aws::Vector<Aws::String>& GetSubnetIds() const { return m_subnetIds; }
+  inline bool SubnetIdsHasBeenSet() const { return m_subnetIdsHasBeenSet; }
+  template <typename SubnetIdsT = Aws::Vector<Aws::String>>
+  void SetSubnetIds(SubnetIdsT&& value) {
+    m_subnetIdsHasBeenSet = true;
+    m_subnetIds = std::forward<SubnetIdsT>(value);
+  }
+  template <typename SubnetIdsT = Aws::Vector<Aws::String>>
+  VpcConfiguration& WithSubnetIds(SubnetIdsT&& value) {
+    SetSubnetIds(std::forward<SubnetIdsT>(value));
+    return *this;
+  }
+  template <typename SubnetIdsT = Aws::String>
+  VpcConfiguration& AddSubnetIds(SubnetIdsT&& value) {
+    m_subnetIdsHasBeenSet = true;
+    m_subnetIds.emplace_back(std::forward<SubnetIdsT>(value));
+    return *this;
+  }
+  ///@}
+ private:
+  Aws::Vector<Aws::String> m_securityGroupIds;
+  bool m_securityGroupIdsHasBeenSet = false;
+
+  Aws::Vector<Aws::String> m_subnetIds;
+  bool m_subnetIdsHasBeenSet = false;
+};
+
+}  // namespace Model
+}  // namespace PrometheusService
+}  // namespace Aws

generated/src/aws-cpp-sdk-amp/source/model/Source.cpp

@@ -22,6 +22,10 @@ Source& Source::operator=(JsonView jsonValue) {
     m_eksConfiguration = jsonValue.GetObject("eksConfiguration");
     m_eksConfigurationHasBeenSet = true;
   }
+  if (jsonValue.ValueExists("vpcConfiguration")) {
+    m_vpcConfiguration = jsonValue.GetObject("vpcConfiguration");
+    m_vpcConfigurationHasBeenSet = true;
+  }
   return *this;
 }
 
@@ -32,6 +36,10 @@ JsonValue Source::Jsonize() const {
     payload.WithObject("eksConfiguration", m_eksConfiguration.Jsonize());
   }
 
+  if (m_vpcConfigurationHasBeenSet) {
+    payload.WithObject("vpcConfiguration", m_vpcConfiguration.Jsonize());
+  }
+
   return payload;
 }
 

generated/src/aws-cpp-sdk-amp/source/model/VpcConfiguration.cpp

@@ -0,0 +1,62 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0.
+ */
+
+#include <aws/amp/model/VpcConfiguration.h>
+#include <aws/core/utils/json/JsonSerializer.h>
+
+#include <utility>
+
+using namespace Aws::Utils::Json;
+using namespace Aws::Utils;
+
+namespace Aws {
+namespace PrometheusService {
+namespace Model {
+
+VpcConfiguration::VpcConfiguration(JsonView jsonValue) { *this = jsonValue; }
+
+VpcConfiguration& VpcConfiguration::operator=(JsonView jsonValue) {
+  if (jsonValue.ValueExists("securityGroupIds")) {
+    Aws::Utils::Array<JsonView> securityGroupIdsJsonList = jsonValue.GetArray("securityGroupIds");
+    for (unsigned securityGroupIdsIndex = 0; securityGroupIdsIndex < securityGroupIdsJsonList.GetLength(); ++securityGroupIdsIndex) {
+      m_securityGroupIds.push_back(securityGroupIdsJsonList[securityGroupIdsIndex].AsString());
+    }
+    m_securityGroupIdsHasBeenSet = true;
+  }
+  if (jsonValue.ValueExists("subnetIds")) {
+    Aws::Utils::Array<JsonView> subnetIdsJsonList = jsonValue.GetArray("subnetIds");
+    for (unsigned subnetIdsIndex = 0; subnetIdsIndex < subnetIdsJsonList.GetLength(); ++subnetIdsIndex) {
+      m_subnetIds.push_back(subnetIdsJsonList[subnetIdsIndex].AsString());
+    }
+    m_subnetIdsHasBeenSet = true;
+  }
+  return *this;
+}
+
+JsonValue VpcConfiguration::Jsonize() const {
+  JsonValue payload;
+
+  if (m_securityGroupIdsHasBeenSet) {
+    Aws::Utils::Array<JsonValue> securityGroupIdsJsonList(m_securityGroupIds.size());
+    for (unsigned securityGroupIdsIndex = 0; securityGroupIdsIndex < securityGroupIdsJsonList.GetLength(); ++securityGroupIdsIndex) {
+      securityGroupIdsJsonList[securityGroupIdsIndex].AsString(m_securityGroupIds[securityGroupIdsIndex]);
+    }
+    payload.WithArray("securityGroupIds", std::move(securityGroupIdsJsonList));
+  }
+
+  if (m_subnetIdsHasBeenSet) {
+    Aws::Utils::Array<JsonValue> subnetIdsJsonList(m_subnetIds.size());
+    for (unsigned subnetIdsIndex = 0; subnetIdsIndex < subnetIdsJsonList.GetLength(); ++subnetIdsIndex) {
+      subnetIdsJsonList[subnetIdsIndex].AsString(m_subnetIds[subnetIdsIndex]);
+    }
+    payload.WithArray("subnetIds", std::move(subnetIdsJsonList));
+  }
+
+  return payload;
+}
+
+}  // namespace Model
+}  // namespace PrometheusService
+}  // namespace Aws

generated/src/aws-cpp-sdk-connect/include/aws/connect/model/AuthenticationProfile.h

@@ -244,26 +244,6 @@ class AuthenticationProfile {
   }
   ///@}
 
-  ///@{
-  /**
-   * <p>The short lived session duration configuration for users logged in to Amazon
-   * Connect, in minutes. This value determines the maximum possible time before an
-   * agent is authenticated. For more information, see <a
-   * href="https://docs.aws.amazon.com/connect/latest/adminguide/authentication-profiles.html#configure-session-timeouts">Configure
-   * the session duration</a> in the <i>Amazon Connect Administrator Guide</i>.</p>
-   */
-  inline int GetPeriodicSessionDuration() const { return m_periodicSessionDuration; }
-  inline bool PeriodicSessionDurationHasBeenSet() const { return m_periodicSessionDurationHasBeenSet; }
-  inline void SetPeriodicSessionDuration(int value) {
-    m_periodicSessionDurationHasBeenSet = true;
-    m_periodicSessionDuration = value;
-  }
-  inline AuthenticationProfile& WithPeriodicSessionDuration(int value) {
-    SetPeriodicSessionDuration(value);
-    return *this;
-  }
-  ///@}
-
   ///@{
   /**
    * <p>The long lived session duration for users logged in to Amazon Connect, in
@@ -283,6 +263,39 @@ class AuthenticationProfile {
     return *this;
   }
   ///@}
+
+  ///@{
+  /**
+   * <p>The period, in minutes, before an agent is automatically signed out of the
+   * contact center when they go inactive.</p>
+   */
+  inline int GetSessionInactivityDuration() const { return m_sessionInactivityDuration; }
+  inline bool SessionInactivityDurationHasBeenSet() const { return m_sessionInactivityDurationHasBeenSet; }
+  inline void SetSessionInactivityDuration(int value) {
+    m_sessionInactivityDurationHasBeenSet = true;
+    m_sessionInactivityDuration = value;
+  }
+  inline AuthenticationProfile& WithSessionInactivityDuration(int value) {
+    SetSessionInactivityDuration(value);
+    return *this;
+  }
+  ///@}
+
+  ///@{
+  /**
+   * <p>Determines if automatic logout on user inactivity is enabled.</p>
+   */
+  inline bool GetSessionInactivityHandlingEnabled() const { return m_sessionInactivityHandlingEnabled; }
+  inline bool SessionInactivityHandlingEnabledHasBeenSet() const { return m_sessionInactivityHandlingEnabledHasBeenSet; }
+  inline void SetSessionInactivityHandlingEnabled(bool value) {
+    m_sessionInactivityHandlingEnabledHasBeenSet = true;
+    m_sessionInactivityHandlingEnabled = value;
+  }
+  inline AuthenticationProfile& WithSessionInactivityHandlingEnabled(bool value) {
+    SetSessionInactivityHandlingEnabled(value);
+    return *this;
+  }
+  ///@}
  private:
   Aws::String m_id;
   bool m_idHasBeenSet = false;
@@ -314,11 +327,14 @@ class AuthenticationProfile {
   Aws::String m_lastModifiedRegion;
   bool m_lastModifiedRegionHasBeenSet = false;
 
-  int m_periodicSessionDuration{0};
-  bool m_periodicSessionDurationHasBeenSet = false;
-
   int m_maxSessionDuration{0};
   bool m_maxSessionDurationHasBeenSet = false;
+
+  int m_sessionInactivityDuration{0};
+  bool m_sessionInactivityDurationHasBeenSet = false;
+
+  bool m_sessionInactivityHandlingEnabled{false};
+  bool m_sessionInactivityHandlingEnabledHasBeenSet = false;
 };
 
 }  // namespace Model