Adds Proton 9.0-2 to the list of runtime environment options available when creating an Amazon GameLift Streams application

Added new viewer security policy, TLSv1.3_2025, for CloudFront.
This feature allows customers to use AWS Batch with Linux with ARM64 CPU Architecture with Fargate Spot compute support.
AWS Glue Data Catalog now supports Iceberg Optimization settings at the Catalog level, and supports new options to control the optimization job run rate.
Added support for VPC owner account ID associated with DNS request in the GuardDuty finding.
AWS CodeBuild now supports comment-based pull request control.

Author: aws-sdk-cpp-automation

VERSION

@@ -1 +1 @@
-1.11.621
+1.11.622

generated/src/aws-cpp-sdk-batch/include/aws/batch/model/RuntimePlatform.h

@@ -54,11 +54,11 @@ namespace Model
      * first compute environment is <code>LINUX</code>, the compute environment is
      * skipped and the next compute environment is checked until a Windows-based
      * compute environment is found.</p>   <p>Fargate Spot is not
-     * supported for <code>ARM64</code> and Windows-based containers on Fargate. A job
-     * queue will be blocked if a Fargate <code>ARM64</code> or Windows job is
-     * submitted to a job queue with only Fargate Spot compute environments. However,
-     * you can attach both <code>FARGATE</code> and <code>FARGATE_SPOT</code> compute
-     * environments to the same job queue.</p> 
+     * supported on Windows-based containers on Fargate. A job queue will be blocked if
+     * a Windows job is submitted to a job queue with only Fargate Spot compute
+     * environments. However, you can attach both <code>FARGATE</code> and
+     * <code>FARGATE_SPOT</code> compute environments to the same job queue.</p>
+     * 
      */
     inline const Aws::String& GetOperatingSystemFamily() const { return m_operatingSystemFamily; }
     inline bool OperatingSystemFamilyHasBeenSet() const { return m_operatingSystemFamilyHasBeenSet; }
@@ -70,15 +70,14 @@ namespace Model
 
     ///@{
     /**
-     * <p> The vCPU architecture. The default value is <code>X86_64</code>. Valid
-     * values are <code>X86_64</code> and <code>ARM64</code>.</p>  <p>This
-     * parameter must be set to <code>X86_64</code> for Windows containers.</p> 
-     *  <p>Fargate Spot is not supported for <code>ARM64</code> and Windows-based
-     * containers on Fargate. A job queue will be blocked if a Fargate
-     * <code>ARM64</code> or Windows job is submitted to a job queue with only Fargate
-     * Spot compute environments. However, you can attach both <code>FARGATE</code> and
-     * <code>FARGATE_SPOT</code> compute environments to the same job queue.</p>
-     * 
+     * <p>The vCPU architecture. The default value is <code>X86_64</code>. Valid values
+     * are <code>X86_64</code> and <code>ARM64</code>.</p>  <p>This parameter
+     * must be set to <code>X86_64</code> for Windows containers.</p>  
+     * <p>Fargate Spot is not supported on Windows-based containers on Fargate. A job
+     * queue will be blocked if a Windows job is submitted to a job queue with only
+     * Fargate Spot compute environments. However, you can attach both
+     * <code>FARGATE</code> and <code>FARGATE_SPOT</code> compute environments to the
+     * same job queue.</p> 
      */
     inline const Aws::String& GetCpuArchitecture() const { return m_cpuArchitecture; }
     inline bool CpuArchitectureHasBeenSet() const { return m_cpuArchitectureHasBeenSet; }

generated/src/aws-cpp-sdk-cloudfront/include/aws/cloudfront/model/MinimumProtocolVersion.h

@@ -22,7 +22,8 @@ namespace Model
     TLSv1_1_2016,
     TLSv1_2_2018,
     TLSv1_2_2019,
-    TLSv1_2_2021
+    TLSv1_2_2021,
+    TLSv1_3_2025
   };
 
 namespace MinimumProtocolVersionMapper

generated/src/aws-cpp-sdk-cloudfront/source/model/MinimumProtocolVersion.cpp

@@ -27,6 +27,7 @@ namespace Aws
         static const int TLSv1_2_2018_HASH = HashingUtils::HashString("TLSv1.2_2018");
         static const int TLSv1_2_2019_HASH = HashingUtils::HashString("TLSv1.2_2019");
         static const int TLSv1_2_2021_HASH = HashingUtils::HashString("TLSv1.2_2021");
+        static const int TLSv1_3_2025_HASH = HashingUtils::HashString("TLSv1.3_2025");
 
 
         MinimumProtocolVersion GetMinimumProtocolVersionForName(const Aws::String& name)
@@ -60,6 +61,10 @@ namespace Aws
           {
             return MinimumProtocolVersion::TLSv1_2_2021;
           }
+          else if (hashCode == TLSv1_3_2025_HASH)
+          {
+            return MinimumProtocolVersion::TLSv1_3_2025;
+          }
           EnumParseOverflowContainer* overflowContainer = Aws::GetEnumOverflowContainer();
           if(overflowContainer)
           {
@@ -90,6 +95,8 @@ namespace Aws
             return "TLSv1.2_2019";
           case MinimumProtocolVersion::TLSv1_2_2021:
             return "TLSv1.2_2021";
+          case MinimumProtocolVersion::TLSv1_3_2025:
+            return "TLSv1.3_2025";
           default:
             EnumParseOverflowContainer* overflowContainer = Aws::GetEnumOverflowContainer();
             if(overflowContainer)

generated/src/aws-cpp-sdk-codebuild/include/aws/codebuild/model/CreateWebhookRequest.h

@@ -10,6 +10,7 @@
 #include <aws/core/utils/memory/stl/AWSVector.h>
 #include <aws/codebuild/model/WebhookBuildType.h>
 #include <aws/codebuild/model/ScopeConfiguration.h>
+#include <aws/codebuild/model/PullRequestBuildPolicy.h>
 #include <aws/codebuild/model/WebhookFilter.h>
 #include <utility>
 
@@ -128,6 +129,21 @@ namespace Model
     template<typename ScopeConfigurationT = ScopeConfiguration>
     CreateWebhookRequest& WithScopeConfiguration(ScopeConfigurationT&& value) { SetScopeConfiguration(std::forward<ScopeConfigurationT>(value)); return *this;}
     ///@}
+
+    ///@{
+    /**
+     * <p>A PullRequestBuildPolicy object that defines comment-based approval
+     * requirements for triggering builds on pull requests. This policy helps control
+     * when automated builds are executed based on contributor permissions and approval
+     * workflows.</p>
+     */
+    inline const PullRequestBuildPolicy& GetPullRequestBuildPolicy() const { return m_pullRequestBuildPolicy; }
+    inline bool PullRequestBuildPolicyHasBeenSet() const { return m_pullRequestBuildPolicyHasBeenSet; }
+    template<typename PullRequestBuildPolicyT = PullRequestBuildPolicy>
+    void SetPullRequestBuildPolicy(PullRequestBuildPolicyT&& value) { m_pullRequestBuildPolicyHasBeenSet = true; m_pullRequestBuildPolicy = std::forward<PullRequestBuildPolicyT>(value); }
+    template<typename PullRequestBuildPolicyT = PullRequestBuildPolicy>
+    CreateWebhookRequest& WithPullRequestBuildPolicy(PullRequestBuildPolicyT&& value) { SetPullRequestBuildPolicy(std::forward<PullRequestBuildPolicyT>(value)); return *this;}
+    ///@}
   private:
 
     Aws::String m_projectName;
@@ -147,6 +163,9 @@ namespace Model
 
     ScopeConfiguration m_scopeConfiguration;
     bool m_scopeConfigurationHasBeenSet = false;
+
+    PullRequestBuildPolicy m_pullRequestBuildPolicy;
+    bool m_pullRequestBuildPolicyHasBeenSet = false;
   };
 
 } // namespace Model

generated/src/aws-cpp-sdk-codebuild/include/aws/codebuild/model/PullRequestBuildApproverRole.h

@@ -0,0 +1,43 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0.
+ */
+
+#pragma once
+#include <aws/codebuild/CodeBuild_EXPORTS.h>
+#include <aws/core/utils/memory/stl/AWSString.h>
+
+namespace Aws
+{
+namespace CodeBuild
+{
+namespace Model
+{
+  enum class PullRequestBuildApproverRole
+  {
+    NOT_SET,
+    GITHUB_READ,
+    GITHUB_TRIAGE,
+    GITHUB_WRITE,
+    GITHUB_MAINTAIN,
+    GITHUB_ADMIN,
+    GITLAB_GUEST,
+    GITLAB_PLANNER,
+    GITLAB_REPORTER,
+    GITLAB_DEVELOPER,
+    GITLAB_MAINTAINER,
+    GITLAB_OWNER,
+    BITBUCKET_READ,
+    BITBUCKET_WRITE,
+    BITBUCKET_ADMIN
+  };
+
+namespace PullRequestBuildApproverRoleMapper
+{
+AWS_CODEBUILD_API PullRequestBuildApproverRole GetPullRequestBuildApproverRoleForName(const Aws::String& name);
+
+AWS_CODEBUILD_API Aws::String GetNameForPullRequestBuildApproverRole(PullRequestBuildApproverRole value);
+} // namespace PullRequestBuildApproverRoleMapper
+} // namespace Model
+} // namespace CodeBuild
+} // namespace Aws

generated/src/aws-cpp-sdk-codebuild/include/aws/codebuild/model/PullRequestBuildCommentApproval.h

@@ -0,0 +1,32 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0.
+ */
+
+#pragma once
+#include <aws/codebuild/CodeBuild_EXPORTS.h>
+#include <aws/core/utils/memory/stl/AWSString.h>
+
+namespace Aws
+{
+namespace CodeBuild
+{
+namespace Model
+{
+  enum class PullRequestBuildCommentApproval
+  {
+    NOT_SET,
+    DISABLED,
+    ALL_PULL_REQUESTS,
+    FORK_PULL_REQUESTS
+  };
+
+namespace PullRequestBuildCommentApprovalMapper
+{
+AWS_CODEBUILD_API PullRequestBuildCommentApproval GetPullRequestBuildCommentApprovalForName(const Aws::String& name);
+
+AWS_CODEBUILD_API Aws::String GetNameForPullRequestBuildCommentApproval(PullRequestBuildCommentApproval value);
+} // namespace PullRequestBuildCommentApprovalMapper
+} // namespace Model
+} // namespace CodeBuild
+} // namespace Aws

generated/src/aws-cpp-sdk-codebuild/include/aws/codebuild/model/PullRequestBuildPolicy.h

@@ -0,0 +1,90 @@
+/**
+ * Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
+ * SPDX-License-Identifier: Apache-2.0.
+ */
+
+#pragma once
+#include <aws/codebuild/CodeBuild_EXPORTS.h>
+#include <aws/codebuild/model/PullRequestBuildCommentApproval.h>
+#include <aws/core/utils/memory/stl/AWSVector.h>
+#include <aws/codebuild/model/PullRequestBuildApproverRole.h>
+#include <utility>
+
+namespace Aws
+{
+namespace Utils
+{
+namespace Json
+{
+  class JsonValue;
+  class JsonView;
+} // namespace Json
+} // namespace Utils
+namespace CodeBuild
+{
+namespace Model
+{
+
+  /**
+   * <p>Configuration policy that defines comment-based approval requirements for
+   * triggering builds on pull requests. This policy helps control when automated
+   * builds are executed based on contributor permissions and approval
+   * workflows.</p><p><h3>See Also:</h3>   <a
+   * href="http://docs.aws.amazon.com/goto/WebAPI/codebuild-2016-10-06/PullRequestBuildPolicy">AWS
+   * API Reference</a></p>
+   */
+  class PullRequestBuildPolicy
+  {
+  public:
+    AWS_CODEBUILD_API PullRequestBuildPolicy() = default;
+    AWS_CODEBUILD_API PullRequestBuildPolicy(Aws::Utils::Json::JsonView jsonValue);
+    AWS_CODEBUILD_API PullRequestBuildPolicy& operator=(Aws::Utils::Json::JsonView jsonValue);
+    AWS_CODEBUILD_API Aws::Utils::Json::JsonValue Jsonize() const;
+
+
+    ///@{
+    /**
+     * <p>Specifies when comment-based approval is required before triggering a build
+     * on pull requests. This setting determines whether builds run automatically or
+     * require explicit approval through comments.</p> <ul> <li> <p> <i>DISABLED</i>:
+     * Builds trigger automatically without requiring comment approval</p> </li> <li>
+     * <p> <i>ALL_PULL_REQUESTS</i>: All pull requests require comment approval before
+     * builds execute (unless contributor is one of the approver roles)</p> </li> <li>
+     * <p> <i>FORK_PULL_REQUESTS</i>: Only pull requests from forked repositories
+     * require comment approval (unless contributor is one of the approver roles)</p>
+     * </li> </ul>
+     */
+    inline PullRequestBuildCommentApproval GetRequiresCommentApproval() const { return m_requiresCommentApproval; }
+    inline bool RequiresCommentApprovalHasBeenSet() const { return m_requiresCommentApprovalHasBeenSet; }
+    inline void SetRequiresCommentApproval(PullRequestBuildCommentApproval value) { m_requiresCommentApprovalHasBeenSet = true; m_requiresCommentApproval = value; }
+    inline PullRequestBuildPolicy& WithRequiresCommentApproval(PullRequestBuildCommentApproval value) { SetRequiresCommentApproval(value); return *this;}
+    ///@}
+
+    ///@{
+    /**
+     * <p>List of repository roles that have approval privileges for pull request
+     * builds when comment approval is required. Only users with these roles can
+     * provide valid comment approvals. If a pull request contributor is one of these
+     * roles, their pull request builds will trigger automatically. This field is only
+     * applicable when <code>requiresCommentApproval</code> is not <i>DISABLED</i>.</p>
+     */
+    inline const Aws::Vector<PullRequestBuildApproverRole>& GetApproverRoles() const { return m_approverRoles; }
+    inline bool ApproverRolesHasBeenSet() const { return m_approverRolesHasBeenSet; }
+    template<typename ApproverRolesT = Aws::Vector<PullRequestBuildApproverRole>>
+    void SetApproverRoles(ApproverRolesT&& value) { m_approverRolesHasBeenSet = true; m_approverRoles = std::forward<ApproverRolesT>(value); }
+    template<typename ApproverRolesT = Aws::Vector<PullRequestBuildApproverRole>>
+    PullRequestBuildPolicy& WithApproverRoles(ApproverRolesT&& value) { SetApproverRoles(std::forward<ApproverRolesT>(value)); return *this;}
+    inline PullRequestBuildPolicy& AddApproverRoles(PullRequestBuildApproverRole value) { m_approverRolesHasBeenSet = true; m_approverRoles.push_back(value); return *this; }
+    ///@}
+  private:
+
+    PullRequestBuildCommentApproval m_requiresCommentApproval{PullRequestBuildCommentApproval::NOT_SET};
+    bool m_requiresCommentApprovalHasBeenSet = false;
+
+    Aws::Vector<PullRequestBuildApproverRole> m_approverRoles;
+    bool m_approverRolesHasBeenSet = false;
+  };
+
+} // namespace Model
+} // namespace CodeBuild
+} // namespace Aws

generated/src/aws-cpp-sdk-codebuild/include/aws/codebuild/model/StartBuildRequest.h

@@ -246,7 +246,10 @@ namespace Model
      * that an IAM principal with the ability to call this API and set this parameter
      * can override the default settings. Moreover, we encourage that you use a
      * trustworthy buildspec location like a file in your source repository or a Amazon
-     * S3 bucket.</p> 
+     * S3 bucket. Alternatively, you can restrict overrides to the buildspec by using a
+     * condition key: <a
+     * href="https://docs.aws.amazon.com/codebuild/latest/userguide/action-context-keys.html#action-context-keys-example-overridebuildspec.html">Prevent
+     * unauthorized modifications to project buildspec</a>.</p> 
      */
     inline const Aws::String& GetBuildspecOverride() const { return m_buildspecOverride; }
     inline bool BuildspecOverrideHasBeenSet() const { return m_buildspecOverrideHasBeenSet; }

generated/src/aws-cpp-sdk-codebuild/include/aws/codebuild/model/UpdateWebhookRequest.h

@@ -9,6 +9,7 @@
 #include <aws/core/utils/memory/stl/AWSString.h>
 #include <aws/core/utils/memory/stl/AWSVector.h>
 #include <aws/codebuild/model/WebhookBuildType.h>
+#include <aws/codebuild/model/PullRequestBuildPolicy.h>
 #include <aws/codebuild/model/WebhookFilter.h>
 #include <utility>
 
@@ -108,6 +109,21 @@ namespace Model
     inline void SetBuildType(WebhookBuildType value) { m_buildTypeHasBeenSet = true; m_buildType = value; }
     inline UpdateWebhookRequest& WithBuildType(WebhookBuildType value) { SetBuildType(value); return *this;}
     ///@}
+
+    ///@{
+    /**
+     * <p>A PullRequestBuildPolicy object that defines comment-based approval
+     * requirements for triggering builds on pull requests. This policy helps control
+     * when automated builds are executed based on contributor permissions and approval
+     * workflows.</p>
+     */
+    inline const PullRequestBuildPolicy& GetPullRequestBuildPolicy() const { return m_pullRequestBuildPolicy; }
+    inline bool PullRequestBuildPolicyHasBeenSet() const { return m_pullRequestBuildPolicyHasBeenSet; }
+    template<typename PullRequestBuildPolicyT = PullRequestBuildPolicy>
+    void SetPullRequestBuildPolicy(PullRequestBuildPolicyT&& value) { m_pullRequestBuildPolicyHasBeenSet = true; m_pullRequestBuildPolicy = std::forward<PullRequestBuildPolicyT>(value); }
+    template<typename PullRequestBuildPolicyT = PullRequestBuildPolicy>
+    UpdateWebhookRequest& WithPullRequestBuildPolicy(PullRequestBuildPolicyT&& value) { SetPullRequestBuildPolicy(std::forward<PullRequestBuildPolicyT>(value)); return *this;}
+    ///@}
   private:
 
     Aws::String m_projectName;
@@ -124,6 +140,9 @@ namespace Model
 
     WebhookBuildType m_buildType{WebhookBuildType::NOT_SET};
     bool m_buildTypeHasBeenSet = false;
+
+    PullRequestBuildPolicy m_pullRequestBuildPolicy;
+    bool m_pullRequestBuildPolicyHasBeenSet = false;
   };
 
 } // namespace Model