Skip to content

Commit 7cfac9b

Browse files
author
AWS
committed
Amazon Relational Database Service Update: This release adds support for creating a Read Replica with Active Directory domain information. This release updates RDS API to indicate whether an OrderableDBInstanceOption supports Kerberos Authentication.
1 parent f699f77 commit 7cfac9b

File tree

3 files changed

+122
-14
lines changed

3 files changed

+122
-14
lines changed

‎.changes/next-release/feature-AmazonRelationalDatabaseService-f2af8f8.json

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,5 @@
1+
{
2+
"type": "feature",
3+
"category": "Amazon Relational Database Service",
4+
"description": "This release adds support for creating a Read Replica with Active Directory domain information. This release updates RDS API to indicate whether an OrderableDBInstanceOption supports Kerberos Authentication."
5+
}

‎services/rds/src/main/resources/codegen-resources/service-2.json

Lines changed: 26 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -250,7 +250,8 @@
250250
{"shape":"DBInstanceNotFoundFault"},
251251
{"shape":"DBSubnetGroupDoesNotCoverEnoughAZs"},
252252
{"shape":"GlobalClusterNotFoundFault"},
253-
{"shape":"InvalidGlobalClusterStateFault"}
253+
{"shape":"InvalidGlobalClusterStateFault"},
254+
{"shape":"DomainNotFoundFault"}
254255
],
255256
"documentation":"<p>Creates a new Amazon Aurora DB cluster.</p> <p>You can use the <code>ReplicationSourceIdentifier</code> parameter to create the DB cluster as a Read Replica of another DB cluster or Amazon RDS MySQL DB instance. For cross-region replication where the DB cluster identified by <code>ReplicationSourceIdentifier</code> is encrypted, you must also specify the <code>PreSignedUrl</code> parameter.</p> <p>For more information on Amazon Aurora, see <a href=\"https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/CHAP_AuroraOverview.html\"> What Is Amazon Aurora?</a> in the <i>Amazon Aurora User Guide.</i> </p> <note> <p>This action only applies to Aurora DB clusters.</p> </note>"
256257
},
@@ -375,7 +376,8 @@
375376
{"shape":"DBSubnetGroupNotAllowedFault"},
376377
{"shape":"InvalidDBSubnetGroupFault"},
377378
{"shape":"StorageTypeNotSupportedFault"},
378-
{"shape":"KMSKeyNotAccessibleFault"}
379+
{"shape":"KMSKeyNotAccessibleFault"},
380+
{"shape":"DomainNotFoundFault"}
379381
],
380382
"documentation":"<p>Creates a new DB instance that acts as a Read Replica for an existing source DB instance. You can create a Read Replica for a DB instance running MySQL, MariaDB, Oracle, or PostgreSQL. For more information, see <a href=\"https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_ReadRepl.html\">Working with Read Replicas</a> in the <i>Amazon RDS User Guide</i>. </p> <p>Amazon Aurora doesn't support this action. You must call the <code>CreateDBInstance</code> action to create a DB instance for an Aurora DB cluster. </p> <p>All Read Replica DB instances are created with backups disabled. All other DB instance attributes (including DB security groups and DB parameter groups) are inherited from the source DB instance, except as specified following. </p> <important> <p>Your source DB instance must have backup retention enabled. </p> </important>"
381383
},
@@ -1317,7 +1319,8 @@
13171319
{"shape":"DBClusterParameterGroupNotFoundFault"},
13181320
{"shape":"InvalidDBSecurityGroupStateFault"},
13191321
{"shape":"InvalidDBInstanceStateFault"},
1320-
{"shape":"DBClusterAlreadyExistsFault"}
1322+
{"shape":"DBClusterAlreadyExistsFault"},
1323+
{"shape":"DomainNotFoundFault"}
13211324
],
13221325
"documentation":"<p>Modify a setting for an Amazon Aurora DB cluster. You can change one or more database configuration parameters by specifying these parameters and the new values in the request. For more information on Amazon Aurora, see <a href=\"https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/CHAP_AuroraOverview.html\"> What Is Amazon Aurora?</a> in the <i>Amazon Aurora User Guide.</i> </p> <note> <p>This action only applies to Aurora DB clusters.</p> </note>"
13231326
},
@@ -1738,6 +1741,7 @@
17381741
{"shape":"DBClusterParameterGroupNotFoundFault"},
17391742
{"shape":"KMSKeyNotAccessibleFault"},
17401743
{"shape":"DBClusterNotFoundFault"},
1744+
{"shape":"DomainNotFoundFault"},
17411745
{"shape":"InsufficientStorageClusterCapacityFault"}
17421746
],
17431747
"documentation":"<p>Creates an Amazon Aurora DB cluster from data stored in an Amazon S3 bucket. Amazon RDS must be authorized to access the Amazon S3 bucket and the data must be created using the Percona XtraBackup utility as described in <a href=\"https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/AuroraMySQL.Migrating.html\"> Migrating Data to an Amazon Aurora MySQL DB Cluster</a> in the <i>Amazon Aurora User Guide</i>.</p> <note> <p>This action only applies to Aurora DB clusters.</p> </note>"
@@ -1771,6 +1775,7 @@
17711775
{"shape":"InvalidSubnet"},
17721776
{"shape":"OptionGroupNotFoundFault"},
17731777
{"shape":"KMSKeyNotAccessibleFault"},
1778+
{"shape":"DomainNotFoundFault"},
17741779
{"shape":"DBClusterParameterGroupNotFoundFault"}
17751780
],
17761781
"documentation":"<p>Creates a new DB cluster from a DB snapshot or DB cluster snapshot.</p> <p>If a DB snapshot is specified, the target DB cluster is created from the source DB snapshot with a default configuration and default security group.</p> <p>If a DB cluster snapshot is specified, the target DB cluster is created from the source DB cluster restore point with the same configuration as the original source DB cluster, except that the new DB cluster is created with the default security group.</p> <p>For more information on Amazon Aurora, see <a href=\"https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/CHAP_AuroraOverview.html\"> What Is Amazon Aurora?</a> in the <i>Amazon Aurora User Guide.</i> </p> <note> <p>This action only applies to Aurora DB clusters.</p> </note>"
@@ -1803,6 +1808,7 @@
18031808
{"shape":"KMSKeyNotAccessibleFault"},
18041809
{"shape":"OptionGroupNotFoundFault"},
18051810
{"shape":"StorageQuotaExceededFault"},
1811+
{"shape":"DomainNotFoundFault"},
18061812
{"shape":"DBClusterParameterGroupNotFoundFault"}
18071813
],
18081814
"documentation":"<p>Restores a DB cluster to an arbitrary point in time. Users can restore to any point in time before <code>LatestRestorableTime</code> for up to <code>BackupRetentionPeriod</code> days. The target DB cluster is created from the source DB cluster with the same configuration as the original DB cluster, except that the new DB cluster is created with the default DB security group. </p> <note> <p>This action only restores the DB cluster, not the DB instances for that DB cluster. You must invoke the <code>CreateDBInstance</code> action to create DB instances for the restored DB cluster, specifying the identifier of the restored DB cluster in <code>DBClusterIdentifier</code>. You can create DB instances only after the <code>RestoreDBClusterToPointInTime</code> action has completed and the DB cluster is available.</p> </note> <p>For more information on Amazon Aurora, see <a href=\"https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/CHAP_AuroraOverview.html\"> What Is Amazon Aurora?</a> in the <i>Amazon Aurora User Guide.</i> </p> <note> <p>This action only applies to Aurora DB clusters.</p> </note>"
@@ -3014,7 +3020,7 @@
30143020
},
30153021
"Domain":{
30163022
"shape":"String",
3017-
"documentation":"<p>For an Amazon RDS DB instance that's running Microsoft SQL Server, this parameter specifies the Active Directory directory ID to create the instance in. Amazon RDS uses Windows Authentication to authenticate users that connect to the DB instance. For more information, see <a href=\"https://docs.aws.amazon.com/AmazonRDS/latest/DeveloperGuide/USER_SQLServerWinAuth.html\">Using Windows Authentication with an Amazon RDS DB Instance Running Microsoft SQL Server</a> in the <i>Amazon RDS User Guide</i>. </p>"
3023+
"documentation":"<p>The Active Directory directory ID to create the DB instance in. Currently, only Microsoft SQL Server and Oracle DB instances can be created in an Active Directory Domain.</p> <p>For Microsoft SQL Server DB instances, Amazon RDS can use Windows Authentication to authenticate users that connect to the DB instance. For more information, see <a href=\"https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_SQLServerWinAuth.html\"> Using Windows Authentication with an Amazon RDS DB Instance Running Microsoft SQL Server</a> in the <i>Amazon RDS User Guide</i>.</p> <p>For Oracle DB instance, Amazon RDS can use Kerberos Authentication to authenticate users that connect to the DB instance. For more information, see <a href=\"https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/oracle-kerberos.html\"> Using Kerberos Authentication with Amazon RDS for Oracle</a> in the <i>Amazon RDS User Guide</i>.</p> <p/>"
30183024
},
30193025
"CopyTagsToSnapshot":{
30203026
"shape":"BooleanOptional",
@@ -3190,6 +3196,14 @@
31903196
"DeletionProtection":{
31913197
"shape":"BooleanOptional",
31923198
"documentation":"<p>A value that indicates whether the DB instance has deletion protection enabled. The database can't be deleted when deletion protection is enabled. By default, deletion protection is disabled. For more information, see <a href=\"https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_DeleteInstance.html\"> Deleting a DB Instance</a>. </p>"
3199+
},
3200+
"Domain":{
3201+
"shape":"String",
3202+
"documentation":"<p>The Active Directory directory ID to create the DB instance in.</p> <p>For Oracle DB instances, Amazon RDS can use Kerberos Authentication to authenticate users that connect to the DB instance. For more information, see <a href=\"https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/oracle-kerberos.html\"> Using Kerberos Authentication with Amazon RDS for Oracle</a> in the <i>Amazon RDS User Guide</i>.</p>"
3203+
},
3204+
"DomainIAMRoleName":{
3205+
"shape":"String",
3206+
"documentation":"<p>Specify the name of the IAM role to be used when making API calls to the Directory Service.</p>"
31933207
}
31943208
}
31953209
},
@@ -5961,7 +5975,7 @@
59615975
},
59625976
"Filters":{
59635977
"shape":"FilterList",
5964-
"documentation":"<p>A filter that specifies one or more DB instances to describe.</p> <p>Supported filters:</p> <ul> <li> <p> <code>db-cluster-id</code> - Accepts DB cluster identifiers and DB cluster Amazon Resource Names (ARNs). The results list will only include information about the DB instances associated with the DB clusters identified by these ARNs.</p> </li> <li> <p> <code>db-instance-id</code> - Accepts DB instance identifiers and DB instance Amazon Resource Names (ARNs). The results list will only include information about the DB instances identified by these ARNs.</p> </li> <li> <p> <code>dbi-resource-id</code> - Accepts DB instance resource identifiers. The results list will only include information about the DB instances identified by these resource identifiers.</p> </li> </ul>"
5978+
"documentation":"<p>A filter that specifies one or more DB instances to describe.</p> <p>Supported filters:</p> <ul> <li> <p> <code>db-cluster-id</code> - Accepts DB cluster identifiers and DB cluster Amazon Resource Names (ARNs). The results list will only include information about the DB instances associated with the DB clusters identified by these ARNs.</p> </li> <li> <p> <code>db-instance-id</code> - Accepts DB instance identifiers and DB instance Amazon Resource Names (ARNs). The results list will only include information about the DB instances identified by these ARNs.</p> </li> <li> <p> <code>dbi-resource-id</code> - Accepts DB instance resource identifiers. The results list will only include information about the DB instances identified by these DB instance resource identifiers.</p> </li> <li> <p> <code>domain</code> - Accepts Active Directory directory IDs. The results list will only include information about the DB instances associated with these domains.</p> </li> <li> <p> <code>engine</code> - Accepts engine names. The results list will only include information about the DB instances for these engines.</p> </li> </ul>"
59655979
},
59665980
"MaxRecords":{
59675981
"shape":"IntegerOptional",
@@ -7790,7 +7804,7 @@
77907804
},
77917805
"Domain":{
77927806
"shape":"String",
7793-
"documentation":"<p>The Active Directory Domain to move the instance to. Specify <code>none</code> to remove the instance from its current domain. The domain must be created prior to this operation. Currently only a Microsoft SQL Server instance can be created in a Active Directory Domain. </p>"
7807+
"documentation":"<p>The Active Directory directory ID to move the DB instance to. Specify <code>none</code> to remove the instance from its current domain. The domain must be created prior to this operation. Currently, only Microsoft SQL Server and Oracle DB instances can be created in an Active Directory Domain. </p> <p>For Microsoft SQL Server DB instances, Amazon RDS can use Windows Authentication to authenticate users that connect to the DB instance. For more information, see <a href=\"https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_SQLServerWinAuth.html\"> Using Windows Authentication with an Amazon RDS DB Instance Running Microsoft SQL Server</a> in the <i>Amazon RDS User Guide</i>.</p> <p>For Oracle DB instances, Amazon RDS can use Kerberos Authentication to authenticate users that connect to the DB instance. For more information, see <a href=\"https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/oracle-kerberos.html\"> Using Kerberos Authentication with Amazon RDS for Oracle</a> in the <i>Amazon RDS User Guide</i>.</p>"
77947808
},
77957809
"CopyTagsToSnapshot":{
77967810
"shape":"BooleanOptional",
@@ -8579,6 +8593,10 @@
85798593
"SupportsStorageAutoscaling":{
85808594
"shape":"BooleanOptional",
85818595
"documentation":"<p>Whether or not Amazon RDS can automatically scale storage for DB instances that use the specified instance class.</p>"
8596+
},
8597+
"SupportsKerberosAuthentication":{
8598+
"shape":"BooleanOptional",
8599+
"documentation":"<p>Whether a DB instance supports Kerberos Authentication.</p>"
85828600
}
85838601
},
85848602
"documentation":"<p>Contains a list of available options for a DB instance.</p> <p> This data type is used as a response element in the <code>DescribeOrderableDBInstanceOptions</code> action. </p>",
@@ -9774,7 +9792,7 @@
97749792
},
97759793
"Domain":{
97769794
"shape":"String",
9777-
"documentation":"<p>Specify the Active Directory Domain to restore the instance in.</p>"
9795+
"documentation":"<p>Specify the Active Directory directory ID to restore the DB instance in. The domain must be created prior to this operation. Currently, only Microsoft SQL Server and Oracle DB instances can be created in an Active Directory Domain. </p> <p>For Microsoft SQL Server DB instances, Amazon RDS can use Windows Authentication to authenticate users that connect to the DB instance. For more information, see <a href=\"https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_SQLServerWinAuth.html\"> Using Windows Authentication with an Amazon RDS DB Instance Running Microsoft SQL Server</a> in the <i>Amazon RDS User Guide</i>.</p> <p>For Oracle DB instances, Amazon RDS can use Kerberos Authentication to authenticate users that connect to the DB instance. For more information, see <a href=\"https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/oracle-kerberos.html\"> Using Kerberos Authentication with Amazon RDS for Oracle</a> in the <i>Amazon RDS User Guide</i>.</p>"
97789796
},
97799797
"CopyTagsToSnapshot":{
97809798
"shape":"BooleanOptional",
@@ -10100,7 +10118,7 @@
1010010118
},
1010110119
"Domain":{
1010210120
"shape":"String",
10103-
"documentation":"<p>Specify the Active Directory Domain to restore the instance in.</p>"
10121+
"documentation":"<p>Specify the Active Directory directory ID to restore the DB instance in. The domain must be created prior to this operation. Currently, only Microsoft SQL Server and Oracle DB instances can be created in an Active Directory Domain. </p> <p>For Microsoft SQL Server DB instances, Amazon RDS can use Windows Authentication to authenticate users that connect to the DB instance. For more information, see <a href=\"https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_SQLServerWinAuth.html\"> Using Windows Authentication with an Amazon RDS DB Instance Running Microsoft SQL Server</a> in the <i>Amazon RDS User Guide</i>.</p> <p>For Oracle DB instances, Amazon RDS can use Kerberos Authentication to authenticate users that connect to the DB instance. For more information, see <a href=\"https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/oracle-kerberos.html\"> Using Kerberos Authentication with Amazon RDS for Oracle</a> in the <i>Amazon RDS User Guide</i>.</p>"
1010410122
},
1010510123
"DomainIAMRoleName":{
1010610124
"shape":"String",

‎services/rds/src/main/resources/codegen-resources/waiters-2.json

Lines changed: 91 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -50,10 +50,10 @@
5050
"maxAttempts": 60,
5151
"acceptors": [
5252
{
53-
"expected": "deleted",
54-
"matcher": "pathAll",
53+
"expected": true,
54+
"matcher": "path",
5555
"state": "success",
56-
"argument": "DBInstances[].DBInstanceStatus"
56+
"argument": "length(DBInstances) == `0`"
5757
},
5858
{
5959
"expected": "DBInstanceNotFound",
@@ -135,10 +135,10 @@
135135
"maxAttempts": 60,
136136
"acceptors": [
137137
{
138-
"expected": "deleted",
139-
"matcher": "pathAll",
138+
"expected": true,
139+
"matcher": "path",
140140
"state": "success",
141-
"argument": "DBSnapshots[].Status"
141+
"argument": "length(DBSnapshots) == `0`"
142142
},
143143
{
144144
"expected": "DBSnapshotNotFound",
@@ -170,6 +170,91 @@
170170
"argument": "DBSnapshots[].Status"
171171
}
172172
]
173+
},
174+
"DBClusterSnapshotAvailable": {
175+
"delay": 30,
176+
"operation": "DescribeDBClusterSnapshots",
177+
"maxAttempts": 60,
178+
"acceptors": [
179+
{
180+
"expected": "available",
181+
"matcher": "pathAll",
182+
"state": "success",
183+
"argument": "DBClusterSnapshots[].Status"
184+
},
185+
{
186+
"expected": "deleted",
187+
"matcher": "pathAny",
188+
"state": "failure",
189+
"argument": "DBClusterSnapshots[].Status"
190+
},
191+
{
192+
"expected": "deleting",
193+
"matcher": "pathAny",
194+
"state": "failure",
195+
"argument": "DBClusterSnapshots[].Status"
196+
},
197+
{
198+
"expected": "failed",
199+
"matcher": "pathAny",
200+
"state": "failure",
201+
"argument": "DBClusterSnapshots[].Status"
202+
},
203+
{
204+
"expected": "incompatible-restore",
205+
"matcher": "pathAny",
206+
"state": "failure",
207+
"argument": "DBClusterSnapshots[].Status"
208+
},
209+
{
210+
"expected": "incompatible-parameters",
211+
"matcher": "pathAny",
212+
"state": "failure",
213+
"argument": "DBClusterSnapshots[].Status"
214+
}
215+
]
216+
},
217+
"DBClusterSnapshotDeleted": {
218+
"delay": 30,
219+
"operation": "DescribeDBClusterSnapshots",
220+
"maxAttempts": 60,
221+
"acceptors": [
222+
{
223+
"expected": true,
224+
"matcher": "path",
225+
"state": "success",
226+
"argument": "length(DBClusterSnapshots) == `0`"
227+
},
228+
{
229+
"expected": "DBClusterSnapshotNotFoundFault",
230+
"matcher": "error",
231+
"state": "success"
232+
},
233+
{
234+
"expected": "creating",
235+
"matcher": "pathAny",
236+
"state": "failure",
237+
"argument": "DBClusterSnapshots[].Status"
238+
},
239+
{
240+
"expected": "modifying",
241+
"matcher": "pathAny",
242+
"state": "failure",
243+
"argument": "DBClusterSnapshots[].Status"
244+
},
245+
{
246+
"expected": "rebooting",
247+
"matcher": "pathAny",
248+
"state": "failure",
249+
"argument": "DBClusterSnapshots[].Status"
250+
},
251+
{
252+
"expected": "resetting-master-credentials",
253+
"matcher": "pathAny",
254+
"state": "failure",
255+
"argument": "DBClusterSnapshots[].Status"
256+
}
257+
]
173258
}
174259
}
175260
}

0 commit comments

Comments
 (0)