AmazonMQ Update: Adds support for AWS Key Management Service (KMS) to offer server-side encryption. You can now select your own customer managed CMK, or use an AWS managed CMK in your KMS account.

Author: AWS

.changes/next-release/feature-AmazonMQ-21b55c1.json

@@ -0,0 +1,5 @@
+{
+    "type": "feature",
+    "category": "AmazonMQ",
+    "description": "Adds support for AWS Key Management Service (KMS) to offer server-side encryption. You can now select your own customer managed CMK, or use an AWS managed CMK in your KMS account."
+}

services/mq/src/main/resources/codegen-resources/service-2.json

@@ -991,6 +991,11 @@
           "locationName" : "deploymentMode",
           "documentation" : "Required. The deployment mode of the broker."
         },
+        "EncryptionOptions" : {
+          "shape" : "EncryptionOptions",
+          "locationName" : "encryptionOptions",
+          "documentation" : "Encryption options for the broker."
+        },
         "EngineType" : {
           "shape" : "EngineType",
           "locationName" : "engineType",
@@ -1089,6 +1094,11 @@
           "locationName" : "deploymentMode",
           "documentation" : "Required. The deployment mode of the broker."
         },
+        "EncryptionOptions" : {
+          "shape" : "EncryptionOptions",
+          "locationName" : "encryptionOptions",
+          "documentation" : "Encryption options for the broker."
+        },
         "EngineType" : {
           "shape" : "EngineType",
           "locationName" : "engineType",
@@ -1569,6 +1579,11 @@
           "locationName" : "deploymentMode",
           "documentation" : "Required. The deployment mode of the broker."
         },
+        "EncryptionOptions" : {
+          "shape" : "EncryptionOptions",
+          "locationName" : "encryptionOptions",
+          "documentation" : "Encryption options for the broker."
+        },
         "EngineType" : {
           "shape" : "EngineType",
           "locationName" : "engineType",
@@ -1687,6 +1702,11 @@
           "locationName" : "deploymentMode",
           "documentation" : "Required. The deployment mode of the broker."
         },
+        "EncryptionOptions" : {
+          "shape" : "EncryptionOptions",
+          "locationName" : "encryptionOptions",
+          "documentation" : "Encryption options for the broker."
+        },
         "EngineType" : {
           "shape" : "EngineType",
           "locationName" : "engineType",
@@ -1954,6 +1974,23 @@
         }
       }
     },
+    "EncryptionOptions" : {
+      "type" : "structure",
+      "members" : {
+        "KmsKeyId" : {
+          "shape" : "__string",
+          "locationName" : "kmsKeyId",
+          "documentation" : "The customer master key (CMK) to use for the AWS Key Management Service (KMS). This key is used to encrypt your data at rest. If not provided, Amazon MQ will use a default CMK to encrypt your data."
+        },
+        "UseAwsOwnedKey" : {
+          "shape" : "__boolean",
+          "locationName" : "useAwsOwnedKey",
+          "documentation" : "Enables the use of an AWS owned CMK using AWS Key Management Service (KMS)."
+        }
+      },
+      "documentation" : "Encryption options for the broker.",
+      "required" : [ "UseAwsOwnedKey" ]
+    },
     "EngineType" : {
       "type" : "string",
       "documentation" : "The type of broker engine. Note: Currently, Amazon MQ supports only ActiveMQ.",
@@ -2954,5 +2991,15 @@
       "timestampFormat" : "unixTimestamp"
     }
   },
+  "authorizers" : {
+    "authorization_strategy" : {
+      "name" : "authorization_strategy",
+      "type" : "provided",
+      "placement" : {
+        "location" : "header",
+        "name" : "Authorization"
+      }
+    }
+  },
   "documentation" : "Amazon MQ is a managed message broker service for Apache ActiveMQ that makes it easy to set up and operate message brokers in the cloud. A message broker allows software applications and components to communicate using various programming languages, operating systems, and formal messaging protocols."
 }