Managed Streaming for Kafka Update: Amazon MSK has added a new API that allows you to update the encrypting and authentication settings for an existing cluster.

Author: AWS

.changes/next-release/feature-ManagedStreamingforKafka-81d59aa.json

@@ -0,0 +1,6 @@
+{
+    "type": "feature",
+    "category": "Managed Streaming for Kafka",
+    "contributor": "",
+    "description": "Amazon MSK has added a new API that allows you to update the encrypting and authentication settings for an existing cluster."
+}

services/kafka/src/main/resources/codegen-resources/service-2.json

@@ -1156,6 +1156,43 @@
         "documentation" : "\n            <p>Access forbidden. Check your credentials and then retry your request.</p>\n         "
       } ],
       "documentation" : "\n            <p>Updates the monitoring settings for the cluster. You can use this operation to specify which Apache Kafka metrics you want Amazon MSK to send to Amazon CloudWatch. You can also specify settings for open monitoring with Prometheus.</p>\n         "
+    },
+    "UpdateSecurity" : {
+      "name" : "UpdateSecurity",
+      "http" : {
+        "method" : "PATCH",
+        "requestUri" : "/v1/clusters/{clusterArn}/security",
+        "responseCode" : 200
+      },
+      "input" : {
+        "shape" : "UpdateSecurityRequest"
+      },
+      "output" : {
+        "shape" : "UpdateSecurityResponse"
+      },
+      "errors" : [ {
+        "shape" : "BadRequestException",
+        "documentation" : "\n            <p>The request isn't valid because the input is incorrect. Correct your input and then submit it again.</p>\n         "
+      }, {
+        "shape" : "UnauthorizedException",
+        "documentation" : "\n            <p>The request is not authorized. The provided credentials couldn't be validated.</p>\n         "
+      }, {
+        "shape" : "InternalServerErrorException",
+        "documentation" : "\n            <p>There was an unexpected internal server error. Retrying your request might resolve the issue.</p>\n         "
+      }, {
+        "shape" : "ForbiddenException",
+        "documentation" : "\n            <p>Access forbidden. Check your credentials and then retry your request.</p>\n         "
+      }, {
+        "shape" : "NotFoundException",
+        "documentation" : "\n            <p>The resource could not be found due to incorrect input. Correct the input, then retry the request.</p>\n         "
+      }, {
+        "shape" : "ServiceUnavailableException",
+        "documentation" : "\n            <p>The service cannot complete the request.</p>\n         "
+      }, {
+        "shape" : "TooManyRequestsException",
+        "documentation" : "\n            <p>The request throughput limit was exceeded.</p>\n         "
+      } ],
+      "documentation" : "\n            <p>Updates the security settings for the cluster. You can use this operation to specify encryption and authentication on existing clusters.</p>\n         "
     }
   },
   "shapes": {
@@ -1360,6 +1397,11 @@
           "shape": "Tls",
           "locationName": "tls",
           "documentation": "\n            <p>Details for ClientAuthentication using TLS.</p>\n         "
+        },
+        "Unauthenticated" : {
+          "shape" : "Unauthenticated",
+          "locationName" : "unauthenticated",
+          "documentation": "\n            <p>Contains information about unauthenticated traffic to the cluster.</p>\n         "
         }
       },
       "documentation" : "\n            <p>Includes all client authentication information.</p>\n         "
@@ -2686,12 +2728,23 @@
         },
         "LoggingInfo": {
           "shape": "LoggingInfo",
-          "locationName": "loggingInfo"
-         },
+          "locationName": "loggingInfo",
+          "documentation" : "\n            <p>You can configure your MSK cluster to send broker logs to different destination types. This is a container for the configuration details related to broker logs.</p>\n            "
+        },
         "InstanceType": {
           "shape" : "__stringMin5Max32",
           "locationName" : "instanceType",
           "documentation" : "\n            <p>Information about the Amazon MSK broker type.</p>\n            "
+        },
+        "ClientAuthentication" : {
+          "shape" : "ClientAuthentication",
+          "locationName" : "clientAuthentication",
+          "documentation": "\n            <p>Includes all client authentication information.</p>\n         "
+        },
+        "EncryptionInfo" : {
+          "shape" : "EncryptionInfo",
+          "locationName" : "encryptionInfo",
+          "documentation": "\n            <p>Includes all encryption-related information.</p>\n         "
         }
       },
       "documentation": "\n            <p>Information about cluster attributes that can be updated via update APIs.</p>\n         "
@@ -3023,6 +3076,11 @@
           "shape": "__listOf__string",
           "locationName": "certificateAuthorityArnList",
           "documentation": "\n            <p>List of ACM Certificate Authority ARNs.</p>\n         "
+        },
+        "Enabled" : {
+          "shape" : "__boolean",
+          "locationName" : "enabled",
+          "documentation" : "\n            <p>Specifies whether you want to enable or disable TLS authentication.</p>\n         "
         }
       },
       "documentation": "\n            <p>Details for client authentication using TLS.</p>\n         "
@@ -3047,6 +3105,16 @@
         "httpStatusCode": 429
       }
     },
+    "Unauthenticated" : {
+      "type" : "structure",
+      "members" : {
+        "Enabled" : {
+          "shape" : "__boolean",
+          "locationName" : "enabled",
+          "documentation" : "\n            <p>Specifies whether you want to enable or disable unauthenticated traffic to your cluster.</p>\n         "
+        }
+      }
+    },
     "UnauthorizedException": {
       "type": "structure",
       "members": {
@@ -3362,6 +3430,48 @@
         }
       }
     },
+    "UpdateSecurityRequest" : {
+      "type" : "structure",
+      "members" : {
+        "ClientAuthentication" : {
+          "shape" : "ClientAuthentication",
+          "locationName" : "clientAuthentication",
+          "documentation" : "\n            <p>Includes all client authentication related information.</p>\n         "
+        },
+        "ClusterArn" : {
+          "shape" : "__string",
+          "location" : "uri",
+          "locationName" : "clusterArn",
+          "documentation" : "\n            <p>The Amazon Resource Name (ARN) that uniquely identifies the cluster.</p>\n         "
+        },
+        "CurrentVersion" : {
+          "shape" : "__string",
+          "locationName" : "currentVersion",
+          "documentation" : "\n            <p>The version of the MSK cluster to update. Cluster versions aren't simple numbers. You can describe an MSK cluster to find its version. When this update operation is successful, it generates a new cluster version.</p>\n         "
+        },
+        "EncryptionInfo" : {
+          "shape" : "EncryptionInfo",
+          "locationName" : "encryptionInfo",
+          "documentation" : "\n            <p>Includes all encryption-related information.</p>\n         "
+        }
+      },
+      "required" : [ "ClusterArn", "CurrentVersion" ]
+    },
+    "UpdateSecurityResponse" : {
+      "type" : "structure",
+      "members" : {
+        "ClusterArn" : {
+          "shape" : "__string",
+          "locationName" : "clusterArn",
+          "documentation" : "\n            <p>The Amazon Resource Name (ARN) of the cluster.</p>\n         "
+        },
+        "ClusterOperationArn" : {
+          "shape" : "__string",
+          "locationName" : "clusterOperationArn",
+          "documentation" : "\n            <p>The Amazon Resource Name (ARN) of the cluster operation.</p>\n         "
+        }
+      }
+    },
     "UpdateConfigurationRequest": {
       "type": "structure",
       "members": {