Amazon OpenSearch Service Update: The CreateApplication API now supports an optional kms key arn parameter to allow customers to specify a CMK for application encryption.

Author: AWS

.changes/next-release/feature-AmazonOpenSearchService-dd77e84.json

@@ -0,0 +1,6 @@
+{
+    "type": "feature",
+    "category": "Amazon OpenSearch Service",
+    "contributor": "",
+    "description": "The CreateApplication API now supports an optional kms key arn parameter to allow customers to specify a CMK for application encryption."
+}

services/opensearch/src/main/resources/codegen-resources/service-2.json

@@ -2673,7 +2673,11 @@
           "shape":"AppConfigs",
           "documentation":"<p>Configuration settings for the OpenSearch application, including administrative options.</p>"
         },
-        "tagList":{"shape":"TagList"}
+        "tagList":{"shape":"TagList"},
+        "kmsKeyArn":{
+          "shape":"KmsKeyArn",
+          "documentation":"<p>The Amazon Resource Name (ARN) of the KMS key used to encrypt the application's data at rest. If provided, the application uses your customer-managed key for encryption. If omitted, the application uses an AWS-managed key. The KMS key must be in the same region as the application.</p>"
+        }
       }
     },
     "CreateApplicationResponse":{
@@ -2704,6 +2708,10 @@
         "createdAt":{
           "shape":"Timestamp",
           "documentation":"<p>The timestamp indicating when the OpenSearch application was created.</p>"
+        },
+        "kmsKeyArn":{
+          "shape":"KmsKeyArn",
+          "documentation":"<p>The Amazon Resource Name (ARN) of the KMS key used to encrypt the application's data at rest.</p>"
         }
       }
     },
@@ -4780,6 +4788,10 @@
         "lastUpdatedAt":{
           "shape":"Timestamp",
           "documentation":"<p>The timestamp of the last update to the OpenSearch application.</p>"
+        },
+        "kmsKeyArn":{
+          "shape":"KmsKeyArn",
+          "documentation":"<p>The Amazon Resource Name (ARN) of the KMS key used to encrypt the application's data at rest.</p>"
         }
       }
     },
@@ -5544,6 +5556,12 @@
       },
       "documentation":"<p>The configuration parameters to enable access to the key store required by the package.</p>"
     },
+    "KmsKeyArn":{
+      "type":"string",
+      "max":2048,
+      "min":20,
+      "pattern":"^arn:aws[a-zA-Z-]*:kms:[a-z0-9-]+:[0-9]{12}:key/[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$"
+    },
     "KmsKeyId":{
       "type":"string",
       "max":500,