feat(client-sagemaker): This release adds support for customer-managed KMS keys in Amazon SageMaker Partner AI Apps

Author: awstools

clients/client-sagemaker/src/commands/CreatePartnerAppCommand.ts

@@ -39,6 +39,7 @@ export interface CreatePartnerAppCommandOutput extends CreatePartnerAppResponse,
  *   Name: "STRING_VALUE", // required
  *   Type: "lakera-guard" || "comet" || "deepchecks-llm-evaluation" || "fiddler", // required
  *   ExecutionRoleArn: "STRING_VALUE", // required
+ *   KmsKeyId: "STRING_VALUE",
  *   MaintenanceConfig: { // PartnerAppMaintenanceConfig
  *     MaintenanceWindowStart: "STRING_VALUE",
  *   },

clients/client-sagemaker/src/commands/DescribePartnerAppCommand.ts

@@ -46,7 +46,9 @@ export interface DescribePartnerAppCommandOutput extends DescribePartnerAppRespo
  * //   Type: "lakera-guard" || "comet" || "deepchecks-llm-evaluation" || "fiddler",
  * //   Status: "Creating" || "Updating" || "Deleting" || "Available" || "Failed" || "UpdateFailed" || "Deleted",
  * //   CreationTime: new Date("TIMESTAMP"),
+ * //   LastModifiedTime: new Date("TIMESTAMP"),
  * //   ExecutionRoleArn: "STRING_VALUE",
+ * //   KmsKeyId: "STRING_VALUE",
  * //   BaseUrl: "STRING_VALUE",
  * //   MaintenanceConfig: { // PartnerAppMaintenanceConfig
  * //     MaintenanceWindowStart: "STRING_VALUE",

clients/client-sagemaker/src/models/models_2.ts

@@ -872,6 +872,13 @@ export interface CreatePartnerAppRequest {
    */
   ExecutionRoleArn: string | undefined;
 
+  /**
+   * <p>SageMaker Partner AI Apps uses Amazon Web Services KMS to encrypt data at rest using an Amazon Web Services managed key by default. For more control, specify a
+   *          customer managed key.</p>
+   * @public
+   */
+  KmsKeyId?: string | undefined;
+
   /**
    * <p>Maintenance configuration settings for the SageMaker Partner AI App.</p>
    * @public

clients/client-sagemaker/src/models/models_3.ts

@@ -4072,12 +4072,24 @@ export interface DescribePartnerAppResponse {
    */
   CreationTime?: Date | undefined;
 
+  /**
+   * <p>The time that the SageMaker Partner AI App was last modified.</p>
+   * @public
+   */
+  LastModifiedTime?: Date | undefined;
+
   /**
    * <p>The ARN of the IAM role associated with the SageMaker Partner AI App.</p>
    * @public
    */
   ExecutionRoleArn?: string | undefined;
 
+  /**
+   * <p>The Amazon Web Services KMS customer managed key used to encrypt the data at rest associated with SageMaker Partner AI Apps.</p>
+   * @public
+   */
+  KmsKeyId?: string | undefined;
+
   /**
    * <p>The URL of the SageMaker Partner AI App that the Application SDK uses to support in-app calls for the user.</p>
    * @public

clients/client-sagemaker/src/protocols/Aws_json1_1.ts

@@ -14636,6 +14636,7 @@ const se_CreatePartnerAppRequest = (input: CreatePartnerAppRequest, context: __S
     ClientToken: [true, (_) => _ ?? generateIdempotencyToken()],
     EnableIamSessionBasedIdentity: [],
     ExecutionRoleArn: [],
+    KmsKeyId: [],
     MaintenanceConfig: _json,
     Name: [],
     Tags: _json,
@@ -22211,6 +22212,8 @@ const de_DescribePartnerAppResponse = (output: any, context: __SerdeContext): De
     EnableIamSessionBasedIdentity: __expectBoolean,
     Error: (_: any) => de_ErrorInfo(_, context),
     ExecutionRoleArn: __expectString,
+    KmsKeyId: __expectString,
+    LastModifiedTime: (_: any) => __expectNonNull(__parseEpochTimestamp(__expectNumber(_))),
     MaintenanceConfig: (_: any) => de_PartnerAppMaintenanceConfig(_, context),
     Name: __expectString,
     Status: __expectString,

codegen/sdk-codegen/aws-models/sagemaker.json

@@ -13998,6 +13998,12 @@
             "smithy.api#required": {}
           }
         },
+        "KmsKeyId": {
+          "target": "com.amazonaws.sagemaker#KmsKeyId",
+          "traits": {
+            "smithy.api#documentation": "<p>SageMaker Partner AI Apps uses Amazon Web Services KMS to encrypt data at rest using an Amazon Web Services managed key by default. For more control, specify a\n         customer managed key.</p>"
+          }
+        },
         "MaintenanceConfig": {
           "target": "com.amazonaws.sagemaker#PartnerAppMaintenanceConfig",
           "traits": {
@@ -25515,12 +25521,24 @@
             "smithy.api#documentation": "<p>The time that the SageMaker Partner AI App was created.</p>"
           }
         },
+        "LastModifiedTime": {
+          "target": "com.amazonaws.sagemaker#Timestamp",
+          "traits": {
+            "smithy.api#documentation": "<p>The time that the SageMaker Partner AI App was last modified.</p>"
+          }
+        },
         "ExecutionRoleArn": {
           "target": "com.amazonaws.sagemaker#RoleArn",
           "traits": {
             "smithy.api#documentation": "<p>The ARN of the IAM role associated with the SageMaker Partner AI App.</p>"
           }
         },
+        "KmsKeyId": {
+          "target": "com.amazonaws.sagemaker#KmsKeyId",
+          "traits": {
+            "smithy.api#documentation": "<p>The Amazon Web Services KMS customer managed key used to encrypt the data at rest associated with SageMaker Partner AI Apps.</p>"
+          }
+        },
         "BaseUrl": {
           "target": "com.amazonaws.sagemaker#String2048",
           "traits": {