Amazon EMR Containers Update: This feature enables auto-generation of certificate to secure the managed-endpoint and removes the need for customer provided certificate-arn during managed-endpoint setup.

Author: AWS

.changes/next-release/feature-AmazonEMRContainers-b622833.json

@@ -0,0 +1,6 @@
+{
+    "type": "feature",
+    "category": "Amazon EMR Containers",
+    "contributor": "",
+    "description": "This feature enables auto-generation of certificate to secure the managed-endpoint and removes the need for customer provided certificate-arn during managed-endpoint setup."
+}

services/emrcontainers/src/main/resources/codegen-resources/service-2.json

@@ -239,6 +239,11 @@
       "min":44,
       "pattern":"^arn:(aws[a-zA-Z0-9-]*):acm:.+:(\\d{12}):certificate/.+$"
     },
+    "Base64Encoded":{
+      "type":"string",
+      "max":5000,
+      "pattern":"^([A-Za-z0-9+/]{4})*([A-Za-z0-9+/]{4}|[A-Za-z0-9+/]{3}=|[A-Za-z0-9+/]{2}==)?$"
+    },
     "CancelJobRunRequest":{
       "type":"structure",
       "required":[
@@ -273,6 +278,20 @@
         }
       }
     },
+    "Certificate":{
+      "type":"structure",
+      "members":{
+        "certificateArn":{
+          "shape":"ACMCertArn",
+          "documentation":"<p>The ARN of the certificate generated for managed endpoint.</p>"
+        },
+        "certificateData":{
+          "shape":"Base64Encoded",
+          "documentation":"<p>The base64 encoded PEM certificate data generated for managed endpoint.</p>"
+        }
+      },
+      "documentation":"<p>The entity representing certificate data generated for managed endpoint.</p>"
+    },
     "ClientToken":{
       "type":"string",
       "max":64,
@@ -383,7 +402,6 @@
         "type",
         "releaseLabel",
         "executionRoleArn",
-        "certificateArn",
         "clientToken"
       ],
       "members":{
@@ -411,7 +429,9 @@
         },
         "certificateArn":{
           "shape":"ACMCertArn",
-          "documentation":"<p>The certificate ARN of the managed endpoint.</p>"
+          "documentation":"<p>The certificate ARN provided by users for the managed endpoint. This fiedd is under deprecation and will be removed in future releases.</p>",
+          "deprecated":true,
+          "deprecatedMessage":"Customer provided certificate-arn is deprecated and would be removed in future."
         },
         "configurationOverrides":{
           "shape":"ConfigurationOverrides",
@@ -680,7 +700,13 @@
         },
         "certificateArn":{
           "shape":"ACMCertArn",
-          "documentation":"<p>The certificate ARN of the endpoint.</p>"
+          "documentation":"<p>The certificate ARN of the endpoint. This field is under deprecation and will be removed in future.</p>",
+          "deprecated":true,
+          "deprecatedMessage":"Customer provided certificate-arn is deprecated and would be removed in future."
+        },
+        "certificateAuthority":{
+          "shape":"Certificate",
+          "documentation":"<p>The certificate generated by emr control plane on customer behalf to secure the managed endpoint.</p>"
         },
         "configurationOverrides":{
           "shape":"ConfigurationOverrides",